Limit internal network IP per user

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
webdude12
Posts: 2
Joined: Thu Jul 30, 2015 8:24 pm

Limit internal network IP per user

Post by webdude12 » Thu Jul 30, 2015 8:27 pm

I have a case where I want to limit the internal network IP each user can see.

For Example: Internal Network 192.168.100.0/24

But I want

User 1 only to be able to connect to: 192.168.100.15

User 2 only to be able to connect to: 192.168.100.50

User 3 only to be able to connect to: 192.168.100.84

I do not see a way to set this up in Softether. I know its possible in OpenVPN, but I do not like having to have the external clients.

kh_tsang
Posts: 551
Joined: Wed Jul 24, 2013 12:09 pm

Re: Limit internal network IP per user

Post by kh_tsang » Thu Jul 30, 2015 11:55 pm

You may want to use Access control list.

webdude12
Posts: 2
Joined: Thu Jul 30, 2015 8:24 pm

Re: Limit internal network IP per user

Post by webdude12 » Fri Jul 31, 2015 3:55 am

I do not see a way to tie a user to their unique ACL.

I do not want to limit the outside (Internet) IP they can connect with. I want to limit the IPs they can access once they are logged into the VPN

kh_tsang
Posts: 551
Joined: Wed Jul 24, 2013 12:09 pm

Re: Limit internal network IP per user

Post by kh_tsang » Fri Jul 31, 2015 4:01 am

There is priority in the access list.

You may want to use the following priority.
1. Allow access to specific local IP
2. Allow return packets
3. Deny access to all local IP
4. Allow access to all IP

thisjun
Posts: 2458
Joined: Mon Feb 24, 2014 11:03 am

Re: Limit internal network IP per user

Post by thisjun » Thu Aug 20, 2015 5:41 am

You can specify a user in Softether ACL.

http://www.softether.org/4-docs/1-manua ... ccess_List

Post Reply