Not knowing what I don't know

timhaughton

Hi, as a complete newcomer to OpenVPN, I don't currently know what I don't know. Perhaps if I explain what I want to do, then some wise old owl can point me in the right direction.

I want to run a service where I provide a VPN server. A customer will be allocated a "slot" on one of our VPN Servers. When they establish a VPN connection, they will be assigned one of our static (and external) IP address and all of their internet traffic will be routed through our server, shielding their IP. In this instance, I don't want them having any access to our LAN, just the WAN.

I'm sure it's been done many times, so a pointer to the relevant areas would be appreciated.

Thanks

Bebop

timhaughton wroteHi, as a complete newcomer to OpenVPN

Welcome, enjoy your stay 😃

they will be assigned one of our static (and external) IP address and all of their internet traffic will be routed through our server, shielding their IP

Quite commonly done. Learning curve for that might be steep, but if you know Linux well then it wont be a prob. Question: How would you like the assignment to be issued? Random / load balanced? Or alternatively, you assign specific cusomers to a specific external IP? (those are you 2 choices).

I'm sure it's been done many times, so a pointer to the relevant areas would be appreciated

Yes true. Once you narrow down your requirements, you can be pointed to specific area.

timhaughton

Bebop wroteQuite commonly done. Learning curve for that might be steep, but if you know Linux well then it wont be a prob. Question: How would you like the assignment to be issued? Random / load balanced? Or alternatively, you assign specific cusomers to a specific external IP? (those are you 2 choices).

1 fixed IP per customer.

Thanks for the assistance.

Bebop

If my understanding is correct, you desire 1 WAN ip per customer. Assuming you have enough IP's for the amount of customers you want then that will be easy I guess.

I would suggest you choose an OS (debian, centos, etc), and then follow a basic guide for installing OpenVPN on that OS.

Once you get it installed as a basic server & tunnel, then you can mod it for the IP allocations. Starter guides here (Centos) and here (Debian).