SSL Site-to-Site VPN

Hey Folks,

Goal: The ability to have a dynamic number hosts on the Network or VLAN to connect to an OpenVPN Server.

I've been reading the Documentation for the SSL Site-to-Site VPN, and I'm having a slight misunderstanding as how to approach the desired goal. Traditionally, I could run an OpenVPN Client on each of those hosts, however, I'd much rather have the Astaro Security Gateway create the OpenVPN connection, and only allow the machines by IP, MAC or even a VLAN.

My confusion, however, is that via the documentation, it is instructing me to create a Server first, and then a Client, and I'm not entirely sure if I need both in this particular case. What's more is, it seems that what I want is a Client, yet it doesn't provide the options that the Server does to decide which networks / ip's should be permitted.

If anyone could shine some light on this to make it a bit more clear, it would be great. One note is that I do not have configuration access to the OpenVPN Server in which I'm trying to connect; I can only connect.

Thanks,
Kyle