Cisco Vpn client to allow only Specific Traffic and block all Traffic

[zeeshanssuet]

HI,

I have a issue with one my Customer.I have created a Cisco Vpn client when a user access from Internet through the Vpn it can access to the serveers.Th problem that particular server has 4 different NIC card Also connect.For Example user get vpn ip of 172.17.x.x,

he can connect to any server within 172.x.x subnet through vpn but that server has 4 differnbt nic also connected like 192.168.x.x,10..x.x.x,172.15.x.x because if a user can create alias in his pc he can easily access those ips and access any thing i want to block this thing if user connect through vpn he can aonly access his 172.17.x.x subnet not the other Lan card only when he is connected to vpn for internel user this is not a issue but only for those who are connecting from outside world.

HI,

I have a issue with one my Customer.I have created a Cisco Vpn client when a user access from Internet through the Vpn it can access to the serveers.Th problem that particular server has 4 different NIC card Also connect.For Example user get vpn ip of 172.17.x.x,

he can connect to any server within 172.x.x subnet through vpn but that server has 4 differnbt nic also connected like 192.168.x.x,10..x.x.x,172.15.x.x because if a user can create alias in his pc he can easily access those ips and access any thing i want to block this thing if user connect through vpn he can aonly access his 172.17.x.x subnet not the other Lan card only when he is connected to vpn for internel user this is not a issue but only for those who are connecting from outside world.

[Daniel Leonard]

The most easily way is to create "split tunneling". Only these subnets wil go through the tunnel.

Sent from Cisco Technical Support iPhone App

[Yadhu Tony]

Hello,

Split tunneling is the best option where you can put ACL to restrict access to particular servers inside your subnet.

Regards,
Tony

http://yadhutony.blogspot.com

[zeeshanssuet]

ok,You are right but my concern is if a user gets a remote session of the server if that server has multiple nic and he add multiple alias he can easily access the other network.can split tuneel blocks other ip and only allow speciifc Ips that is there in split tunnel

[Daniel Leonard]

Hi,

When you create a split tunneling configuration (for your subnet 172.17.x.x), only that traffic flows through the tunnel.

Like Tony said, put an ACL to your tunnel configuration for traffic restriction.

Please rate or mark answered for helpful posts.