SoftEther VPN User Forum

hub1 and hub2 are connected via a layer 3 switch. Is it possible that hub1 users drop incoming connection from any hub2 users? However hub1 users still accept incoming connection from other hub1 users (that is the "Deny Operation as TCP/IP Server(IPV4)" Security Policy cannot be used for the hub1 users).

If the access list is stateful, you can use it. Otherwise, you will need a transparent firewall or do routing with your own OS.