In my simple experience, part of the problem with VPN's is that there are so many ways of 'skinning the VPN cat' that it very quickly get's confusing. Here is one simple potential answer.
It's a copy of an article I posted on another forum. Myself and my family use this in my day to day life, and can confirm that it works very well indeed, and it is very low maintenance, and easy to administer, and it works, very well.
Roll-Your-Own VPN Server
An Alternative To A Commercial Offering Using OpenVPN
Many people find the thought of running their own VPN server worrisome and difficult, but this has to be the simplest, easiest solution that I have come across for anyone who wants a quick and easy answer that is very low maintenance. This is particularly useful if you already have a cloud server running somewhere, and you want to maximise it's use and get some additional value for money and functionality from it. The system requirements for this are very small indeed, but be aware that if you intend to use this for streaming, bandwidth restrictions or traffic quotas maybe something you need to consider. That said, many modern VPS providers are pretty generous with their allowances these days, and one might easily expect the most basic restriction being of the order of 1Tb/month without any additional cost implications.
Pre-requisites:-
Root ssh access to a VPS or other 'cloud' machine running either Debian, Ubuntu or CentOS with about 512Mb Ram available
Procedure:-
ssh into your server and run the following command with root priviliges (you know, use Zoc or Putty, connect to your VPS, just like you would on your ZGemma).
Code:
wget https://git.io/vpn -O openvpn-install.sh && bash openvpn-install.sh
Sit back and watch whilst it runs. The automated assistant will ask a few questions here and there and give you all the guidance you need.
Once it ends, you can run it again as many times as you like to add more users/clients, or remove some of them or even completely uninstall OpenVPN.
This particular offering simply writes a .ovpn config' file for each user that contains within it all the necessary certificates and authentication when you go to your client machine.
So, the next step will be to use this on your client machine. This could be your PC/Laptop, Mac, Tablet, or Router or whatever. You just need to copy your client's unique .ovpn file into the client machine, point your OpenVPN client at it, and all the set-up and configuration is done for you.