DISABLE INTERNET ACCESS THROUGH INTERNET switch in Server Manager

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
itskv
Posts: 43
Joined: Thu Mar 22, 2018 11:56 am

DISABLE INTERNET ACCESS THROUGH INTERNET switch in Server Manager

Post by itskv » Sun Jun 11, 2023 6:31 am

hello there,

Is there any switch in Server Manager to deny internet access through VPN?

I know that just keeping 'default gateway' and 'dns server' blank in SE's dhcp setting don't route internet traffic through vpn. But any client can use static ip (in dhcp range), gateway and dns and then connect to vpn to get internet access through vpn.

We have to build vpn server to 50-60 global clients for private networking only. They should not enjoy vpn'd internet. However, they can use their local ISP's network for internet.


itskv
Posts: 43
Joined: Thu Mar 22, 2018 11:56 am

Re: DISABLE INTERNET ACCESS THROUGH INTERNET switch in Server Manager

Post by itskv » Sun Jun 11, 2023 4:35 pm

This seems about administrations access policy for server or hub itself. I am asking about denying internet route through vpn.

solo
Posts: 1286
Joined: Sun Feb 14, 2021 10:31 am

Re: DISABLE INTERNET ACCESS THROUGH INTERNET switch in Server Manager

Post by solo » Sun Jun 11, 2023 10:36 pm

In SecureNAT uncheck "Virtual NAT".

itskv
Posts: 43
Joined: Thu Mar 22, 2018 11:56 am

Re: DISABLE INTERNET ACCESS THROUGH INTERNET switch in Server Manager

Post by itskv » Thu Jun 15, 2023 10:19 am

Yes. I understood that option.
But I am asking for server side option. The option you are suggesting is client side switch where client can easily easily uncheck the option and gain VPN access for wan. The rule should be enforced from server itself.

solo
Posts: 1286
Joined: Sun Feb 14, 2021 10:31 am

Re: DISABLE INTERNET ACCESS THROUGH INTERNET switch in Server Manager

Post by solo » Fri Jun 16, 2023 8:38 am

itskv wrote:
Thu Jun 15, 2023 10:19 am
But I am asking for server side option.
"In SecureNAT uncheck Virtual NAT" is a server side option.

Post Reply