Page 1 of 1

Limit internal network IP per user

Posted: Thu Jul 30, 2015 8:27 pm
by webdude12
I have a case where I want to limit the internal network IP each user can see.

For Example: Internal Network 192.168.100.0/24

But I want

User 1 only to be able to connect to: 192.168.100.15

User 2 only to be able to connect to: 192.168.100.50

User 3 only to be able to connect to: 192.168.100.84

I do not see a way to set this up in Softether. I know its possible in OpenVPN, but I do not like having to have the external clients.

Re: Limit internal network IP per user

Posted: Thu Jul 30, 2015 11:55 pm
by kh_tsang
You may want to use Access control list.

Re: Limit internal network IP per user

Posted: Fri Jul 31, 2015 3:55 am
by webdude12
I do not see a way to tie a user to their unique ACL.

I do not want to limit the outside (Internet) IP they can connect with. I want to limit the IPs they can access once they are logged into the VPN

Re: Limit internal network IP per user

Posted: Fri Jul 31, 2015 4:01 am
by kh_tsang
There is priority in the access list.

You may want to use the following priority.
1. Allow access to specific local IP
2. Allow return packets
3. Deny access to all local IP
4. Allow access to all IP

Re: Limit internal network IP per user

Posted: Thu Aug 20, 2015 5:41 am
by thisjun
You can specify a user in Softether ACL.

http://www.softether.org/4-docs/1-manua ... ccess_List