smntov
I need to setup an open-source VPN server to allow employees working from home (behind routers/NAT) to connect to the VPN in order to obtain permanent IPs associated with them, so that tech support members can SSH to their computers and assist them if needed. Employees work on Debian 9 with Gnome. There are following requirements:
1. Once I want to add a new employee I need to choose an IP that will be permanently associated with that particular employee. The VPN server has to have a tool that will scan IPs that were already assigned and provide me with a new unassigned IP to use with the new employee. The IP has to remain the same for that employee on each session.
2. I think it's better to use some sort of public/private keys for employees' authentication so they don't need to enter passwords for each session.
3. Ideally the server will generate a configuration file for new employees which can be easily imported through the Gnome -> Network Manager -> Add (+ sign) -> VPN -> Import from file... so they can establish connection fast and easy without going into any technical details.
4. It should be possible (in some future) to build a failover setup with at least two VPN servers. (If needed I might have two separate vpn0.example.org and vpn1.example.org addresses pointing to the same server now, but split it to point each on a separate server later).
5. It's not a "must have" requirement, but it would be beneficial if the VPN server would have a client software for Windows (preferably native, built in).
Today I was told that with OpenVPN I can achieve all these requirements. I have absolutely no experience with it, so please tell which topics should I look/learn in the documentation in order to implement each of the above five points.
Thank you in advance!
