Fortinet dailup vpn restriction for the same user

[Umesh]

Dear Team,

We are using dialup vpn and noticed that single user is able to connect dialup vpn from different machine with using their same username & password.

Can anyone guide me how can we restrict those users. 

thank you. 

[Debbie_FTNT]

Hey Umesh,

if this is for SSLVPN, you can refer to this KB:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Multiple-sessions-of-SSL-VPN-users/ta-p/19...

For IPSec, to my knowledge there is currently no way to enforce a limit.

[hbac]

Hi @Umesh,

Are you using L2TP Windows Native or FortiClient to connect? You can try to disable "net‑device" under phase1‑interface and test. 

config vpn ipsec phase1-interface 

edit <> 

set net-device disable 

end 

Regards, 

[mle2802]

Hi @Umesh,
Is those users suppose to login? You can restrict based on the public IP where they connect also.