[Openvpn-users] How to access the network behind a client in multiclient setup

[Nejc Skoberne <nejc@xxxxxxxxxxxx>]

Hi folks,

I have this situation: I have more than N remote smaller FreeBSD servers, our
clients use them as routers. Our company also maintains the networks behind these
routers, so this would be our topology:

ooooooooooooooooooooo
o                   o
o Our local network o
o                   o
ooooooooooooooooooooo
         ||
         ||
 ________||_________
|                   |
|Our FreeBSD router |
|___________________|
         ||
         ||
       xxxxxx
      INTERNET==================++===============================\\
       xxxxxx                   ||                               ||
         ||                     ||                               ||
         ||                     ||                               ||
 ________||_________    ________||_________             _________||________
|                   |  |                   |           |                   |
|Client1 FBSDrouter |  |Client2 FBSDrouter | ......... |ClientN FBSDrouter |
|___________________|  |___________________|           |___________________|
         ||                     ||                               ||
         ||                     ||                               ||
         ||                     ||                               ||
ooooooooooooooooooooo  ooooooooooooooooooooo           ooooooooooooooooooooo
o                   o  o                   o           o                   o
o   Client1's LAN   o  o   Client2's LAN   o ......... o   ClientN's LAN   o
o                   o  o                   o           o                   o
ooooooooooooooooooooo  ooooooooooooooooooooo           ooooooooooooooooooooo

So from our company, we would like access other companies'/clients' networks. Till
now I had setups with usual P2P OpenVPN, so I needed to maintain N config
files/processes/tun devices on server side and N is approaching number 40.

So I was looking is there is any way to setup multiclient setup, keeping in mind that
I have to access client's LAN networks, and clients don't need to access our network.

What do solutions do you guys propose in this situation?

Thanks for anything and best regards,

Nejc
begin:vcard
fn;quoted-printable:Nejc =C5=A0koberne
n;quoted-printable:=C5=A0koberne;Nejc
email;internet:nejc@xxxxxxxxxxxx
tel;fax:+38653810387
tel;cell:+38631883217
x-mozilla-html:FALSE
version:2.1
end:vcard