Client Specific Overrides Security
-
I see the IPv4 Local Network states:
"These are the IPv4 server-side networks that will be accessible from this particular client. Expressed as a comma-separated list of one or more CIDR ranges or host/network type aliases.
NOTE: Networks do not need to be specified here if they have already been defined on the main server configuration."Does this mean this IPv4 value can be used to restrict a dial in user to a particular network?
I have been told the only way to restrict a dial in user user to a particular network is to create an OpenVPN server for each network and then have the user dial in on that network. This way FW rules can be employed to control network access.
-
@McMurphy Those are the routes that will be told to the client.. You can always just firewall what you don't want them to access, or allow to access.
-
@johnpoz
Thank you but if all users on on the same VPN server how best to differentiate between users to firewall some and not others? -
@McMurphy said in Client Specific Overrides Security:
but if all users on on the same VPN server how best to differentiate between users to firewall some and not others?
With firewall rules.
In the CSO you can state a unique virtual IP (tunnel network) for each client. Then you can use this in firewall rules as source to allow certain accesses.
