客户端 VPN 端点 - 多用户访问

Question

If I want to allow multiple users to Connect through my Client Configuration (.ovpn) files. Do I need to share same Client Configuration (.ovpn) file with all users? So they can access resource on Cloud . If so, How can I provoke users which I don't want to give access in later point of time?

In case I am doing it wrong or any alternate way, Please do tell. Thanks in advance.

Edit: Trying to set it up in AWS > VPC > Client VPN Endpoints.

Answer 1

You can create different certificates for each user.

In your *.ovpn, add the followings:

ca <CA File Name>
cert <Certificate File Name>
key <Private Key File Name>

And distribute these to the users: OVPN(modified), CA, CERT and KEY.

You can also revoke them.

Read this

• AWS Client VPN Mutual Authentication

Answer 2

I think you are using an OpenVPN server for VPN connection,

If Yes!

While creating a VPN user in OpenVPN server you will get 4 files including certificate and .ovpn config file! if you want to share your credentials to others then you have to share all 4 files. but sharing same creds to others it will be problematic because concurrent two machines can't be connected with same user creds, you will face continuous disconnection problem.

The best practice is to create a new user and share.

Answer 3

唯一的方法是在设置客户端 VPN 端点时使用 Active Directory 集成。