Follow the instructions here to set an OpenVPN tunnel from client to subnet with certificates and user authentication.