Network Topology Options in Access Server VPN⁠

Network topology determines how VPN clients, private networks, cloud resources, and remote sites connect through OpenVPN Access Server. This section explains the available networking options and helps you choose the topology that best fits your deployment.

Access Server supports two primary topologies. Point-to-site connects individual remote users to a central private network — the foundation of secure remote access for distributed teams. Site-to-site connects entire networks to each other, letting offices, data centers, and cloud environments communicate as if on the same private network.

Within each topology, you control how traffic is handled, either through NAT, which simplifies routing by masking client IPs, or through routing mode, which gives clients direct network presence.

Use the sections in this topic to explore point-to-site routing, site-to-site routing, IP addressing, subnets, and the OSI model as it applies to OpenVPN tunnels.