vpn578 Hey, I'm planning to set up several Servers on the internet for several purposes. I want to use OpenVPN for my admins as a "virtual Admin Network". So one of our servers should be the openvpn-server, all the other clients (admins) and servers will connect to it. The idea is: The admins are able to connect to any of the servers (which would be clients, just like the admins laptops would be...), but I don't want any connection between the admin-laptops. Is there a way to do this? I know the parameter "client-to-client", but if I'd be using that, every client could connect to any other...
Pippin Indeed, --client-to-client does not expose packets to the host, packets stay internal to the OpenVPN process. You need to use the firewall to determine who can go where. This diagram should help: https://community.openvpn.net/openvpn/wiki/HowPacketsFlow Also, must read: https://community.openvpn.net/openvpn/wiki/HOWTO
TinCanTech vpn578 wrote I'm planning to set up several Servers on the internet for several purposes. I want to use OpenVPN for my admins as a "virtual Admin Network". As an Admin of Admins .. why do you need to ask ?
