Limit each VPN Clients access to different VLANs

[wey2go]

Wondering if anybody has been able to find a way around this?

Internal LAN has 10 different VLANs.

I want different VPN Client users to be allowed to access different VLANs depending on who they are.

Can't seem to be able to find how to do this.

Thank you.

[SoCalRacer]

I haven't specifically done this, but I would use group policies. You can use L3 rules to limit the VLANs possible to access. Depending on how many VPN users/networks/groups of access you need this could get time consuming. After you have configured the group policies for the different type of groups access then you need to apply it to each VPN user individually. 

[wey2go]

@SoCalRacer It get too hairy to work this work. Also refer to this:

https://community.meraki.com/t5/Security-SD-WAN/Feature-Request-Apply-group-policies-to-Client-VPN/t...

[SoCalRacer]

How many VPN users do you have? Are they all in one Meraki network? How many different groups of access do you need?

[wey2go]

How to restrict client VPN with Layer 3:

https://documentation.meraki.com/MX/Client_VPN/Restricting_Client_VPN_access_using_Layer_3_firewall_...