Here's an excerpt from a success story posted at <a href="https://sourceforge.net/p/openvpn/mailman/message/34991937/" rel="nofollow">https://sourceforge.net/p/openvpn/mailman/message/34991937/</a><p><i>We've implemented 802.1x with dynamic vlan assignment already, meaning that when a user connects either wired or wirelessly they get shunted into the appropriate segment of the network (and potentially into overlapping subnets). This ensures strong segregation based on their identity/certificate. So we really want to plug openvpn into that and allow users a single certificate to always end up in their same segregated section of the network without having to create separate VPN subnets for them.</i><p>TLDR: These patches allow OpenVPN to be used in enterprise environments with RADIUS authentication and dynamic VLAN assignments.