How to limit access to VPN 3000?

daniele.gallarato · ‎03-07-2004

We have a VPN 3005 with many groups.

In some groups we want to limit the access (in input) from some public ip address.

If we change public filter on interfaces this affect all groups.

Any idea?

Thanks, Daniele

drolemc · ‎03-11-2004

I do not think it is possible to prevent users from connecting based on IP addresses. The reason being that the clients are assigned addresses dynamically from the configured IP pool. The real IP"s are not known to the concentrator.

daniele.gallarato · ‎03-11-2004

I don't think so.

Our users connecting from the outside, so if I know what ISP assign them IP address I can limit from an ISP or another.

You speak about dinamically assigned addres from the concentrator to the clients after they have established vpn; we want to limit before this.

Thanks.