tqb
After a long work I build working site-to-site vpn using openvpn.
SERVER is Ubuntu 18.04 on cloud (Jelastic) with static ip. Working sites are Site1, Site2, Site3- "client1, client2, client3".
All sites are individual, separate. Only connection is over internet.
IP-addressing is 10.15.0.0/22 for site 1, site 2 is 10.16.0.0/22, site 3 10.17.0.0/22 etc etc. (No comments /22 plz 😃)
Shortly: system work now properly. When I ping 10.8.0.1, server answer. Sites are 10.8.0.15, 16, 17 etc reason of clarify. So, if I ping 10.8.0.15, site 1 answer, ping 10.8.0.16, site 2 answer, ping 10.8.0.17 site 3 answer etc. Also ping 10.15.0.1 is ok, 10.16.0.1, 10.17.0.1 etc etc. Also I can use other site resources, eg. printer without problem. System is really transparent.
Now question of roadwarrior. I want roadwarrior is Full Rights. So, if I make it using separate components, this is easy. Client4 = roadwarrior. I take router, connect it to internet and LAN-side is 10.18.0.0/22. But, this solution is working but need external components. Only I have laptop computer (windows 10) and wlan- and, bad world. Eg. my laptop and I share my mobile phone network.
I installed Openvpn to windows 10. Then I make configuration file, it was easy reason simply my site1,2,3 are working. ca.crt, client4.crt, client4.key. And, voilá, it works! Windows 10 display right corner is openvpn-gui, "connect", and- connect. ping 10.8.0.1, server answer. ping 10.8.0.15, site 1 answer etc.
BUT. Is it possible adjust ip-address of the roadwarrior computer? How I can manage "this roadwarrior computer ip is 10.18.0.x"? Now, when I connect, server put ip address of the vpn of the roadwarrior 10.8.0.2. If I use external router, I can put this "network site 4 = roadwarrior = 10.18.0.0/22". How I can make this?