openvpn - separate access keys for each host behind NAT

[nzimas]

Although there's a wealth of resources on setting up VPN servers, all seem to cover a scenario where access is granted indiscriminately to a local IP or range of IP addresses. I would like to go one step further and grant remote access to each host in the LAN individually. That is to say, user / key X connects only to ip Y, wheres user / key Z connects to IP K and so forth.

The environment I am working can be schemed as follows.

-Physical server with public IP address
-3 NATed VMs in a virtual private network

My aim is to set up a means for secure remote access straight to each VM.

[Mark_NL]

You tell openvpn to use a range of ip addresses. You can then assign a static ip in the CCD dir/file to a specific client. See the openvpn documentation for more information on CCD.