Configuring a Single Multi-Purpose OpenVPN Instance

This recipe details one way to make a single OpenVPN server go a long way. Using this method access can be provided to a large pool of addresses for general access and then make use of some of the less intuitive features of OpenVPN to provide properly locked down access for various classes of user.

The end result is this:

• Single OpenVPN server instance listening on port 443/tcp
• A pool of addresses for general access on a single subnet
• A series of tiny address ranges (/30) that effectively allocate a static IP address to specific end users that can be easily grouped and firewalled