I've used openvpn for this - it's worked pretty well. As far as SPOF, you set up multiple servers on the server side with different external ips, handing out d

I've used openvpn for this - it's worked pretty well. As far as SPOF, you set up multiple servers on the server side with different external ips, handing out different ranges of vpn ip addresses. In the client config, you list multiple servers that the client is allowed to connect to. So, in my setup, I have 10.1.0.0/24 as the LAN Two vpn servers with different external ips, LAN ips, and a vpn (tun interface) ip with different subnets (10.8.1.0/24 and 10.8.2.0/24). The clients are given the two external ips as servers to connect to and they'll be given an ip address for their tun interface on the respective subnet for the server they connected to. Here are some configs to take a look at: http://pastebin.com/TL95UfzU http://pastebin.com/TL95UfzU You'll need to go through the bit of the tutorial for creating the server keys and keys for the clients.