different route for different user in openVPN server

emiliano1978 · Apr 11, 2020, 5:41 PM

Hello, today is my first day with pfSense and it looks really good to me.
I have only one question, I can reach the network from the outside with OpenVPN, but I need to isolate each user to a single IP address of the internal network (a user must be able to reach only the IP of his workstation and be completely inhibited from being able to resolve other LAN IP addresses). Is there a method without having to create an OpenVPN Server for each target IP?

Thanks good evening,
Emiliano.

viragomann · Apr 12, 2020, 1:53 PM

You have to configure Client Specific Overrides for your clients so that they get static IPs or only a small IP range (if they need multiple connections). Then you're able to use these IPs or ranges as sources in firewall rules to allow access to the desired network addresses or ranges.

noplan · Apr 12, 2020, 2:04 PM

client specific override
and firewall rules for the client i guess invert may be the best guess

have a look here for the cso
https://forum.netgate.com/topic/152171/openvpn-and-static-ip-for-all-clients/9