Looking for OpenVPN server for multiple clients with web interfaces
reddit / selfhosted

----------------------------------------------------------------------
escitalopramm · 2023-11-07 14:14

I don't know if something like this exists, but I have multiple
routers which sadly only have the option of OpenVPN to which I would
like to connect and access the router interface and interfaces of
devices behind the router from a central server. Is there a solution
which lets me, for example create a VPN config for a device which I
upload to the router who then connects to the central server? I want
to only connect to the devices from the server and like the networks
to be isolated between the clients. Anyone got any ideas?

----------------------------------------------------------------------
MeCJay12 · 2023-11-07 14:27

Unless I'm misunderstanding, you are just asking if there is a webui
to use for OpenVPN in a normal site to site configuration? There is,
you can use OpenVPN-AS which does require a license after 2
connections or you can use pfSense which is a router in itself (so
you're access restrictions are in the webui too) and will let you
connect as many as you want for free.

----------------------------------------------------------------------
escitalopramm · 2023-11-07 14:34

Not quite, I have edge devices which also work as a router in their
own internal network. They are also behind firewalls so can only act
as clients. On those subnets I would like to access the Webui of
devices in those networks.
I could setup a normal OpenVPN server and manually set routes and so
on but as the internal networks of the routers are all the same I
would need to disconnect one VPN to connect to the others subnet if
you understand. My final goal would be to also setup a internal
reverse proxy to access them for example like: device1.site1.com or
something similar.

----------------------------------------------------------------------
MeCJay12 · 2023-11-07 14:45

I see. I'm not aware of one solution to do that but you could chain a
couple together to achieve that. I would still connect all your edge
sites to a main OpenVPN server then I would use NAT at the site
routers to logically shift each site to a non-overlapping subnet. At
that point you can setup your DNS normally just pointing to the NAT
IPs.

----------------------------------------------------------------------
arcadianarcadian · 2023-11-08 09:47

Why don't you use Wireguard? I have a network of my devices which are
connected to each other on an internal network over Wireguard.

----------------------------------------------------------------------
escitalopramm · 2023-11-08 10:33

Because sadly I can't install anything on the routers.

----------------------------------------------------------------------
arcadianarcadian · 2023-11-08 11:55

You don't have to use routers as VPN server/gateway, you can install
them on any servers behind routers. You'll need to forward the
wireguard port only to the accepting site, not the client.

----------------------------------------------------------------------
escitalopramm · 2023-11-08 12:12

I know but this is something I want to avoid, to install yet another
device for a VPN when the router has ovpn functionality built in.

----------------------------------------------------------------------
arcadianarcadian · 2023-11-08 12:15

OK, I see :)

----------------------------------------------------------------------
Ordinary_Employer_39 · 2023-12-01 02:49

I give you something better This might be what you're looking for
https://github.com/NOXCIS/Wiregate

----------------------------------------------------------------------
escitalopramm · 2023-12-01 05:29

Again, I sadly can't use wireguard. And I am trying to connect to
devices which are connected to the main server via ovpn, kind of like
a reverse proxy.