While this HOWTO will information you in creating a scalable customer/server VPN working with an X509 PKI (public essential infrastruction making use of certificates and private keys), this is likely to be overkill https://tessdkpe199721.blogoscience.com/34869316/vpn-subscription-an-overview