Ask - How to create multiple access

Forum|Forum|10 years ago
February 10, 2016
4 replies
4137 views

hi there,

I need to create several access type for vpn ssl.

here the simulation.

what I have?

- 1 internet connection with 1 public IP

- 2 group vpn (gr1 and gr2)

- 1 object vpn ssl address

- 1 subnet LAN 192.168.1.x /24

- device FG-40D

- users have been designed to their own groups

what is the case?

I want to make:

gr1, can connect vpn, but limited only can access 192.168.1.1 and 192.168.1.2

gr2, can connect vpn, can access all IP in LAN subnet.

what is the problem?

gr2 has been successful. but gr1 still can connect any address in that subnet, not limited only to 2 address.

need help.

thanks.

neonbit

New Member

I'm assuming you're looking at configuring tunnel mode here. Below are some core things I would configure:

1. Create a separate SSL-portal for each group with the IP/subnet they should reach. 2. Match each group to the correct ssl-portal in the SSL settings: 3. Configure two policies restricting each group to the IP/subnet they should be able to reach:

(img: http://pasteboard.co/1sAAHjSW.png) If it's still not working then I would suggest looking at the user and groups. Ensure that user1 is only in group1 and not group2.