pfSense is good for this; OpenVPN is invariably inconvenient as hell to set up and use, but pfSense's implementation (along with the "client export" plugin that gives you what you need to set up devices, and unaccountably isn't part of the OOTB distribution) minimizes this inconvenience as well as anything I've ever seen - it's still inconvenient as hell, but somewhat less so than doing everything by hand.