VPN CLIENT Policy

[ecejhe]

How we can create a policy for specific vpn user? 

Example:

Client (ip as source) has an access to specific destination inside the network with group policy in place. So only the specific IP that we reserved is allow to access this destination.

With client VPN, how we can set this configuration? We don't want to allow the whole subnet of VPN client on this policy. Only specific IP form VPN pool.



Is there any change to assign specific ip from VPN pool to policy not the whole subnet? or maybe mac address of the client machine?



Thanks in advance

[PhilipDAth · Accepted solution]

There is not a nice way of doing this.  You can't assign a specific IP address from a pool.

Once the user has logged in via VPN once you can assign a group policy to that user.

[ecejhe]

How the policy will work? is it based on the IP (public) , or the mac address? 

[PhilipDAth]

It seems to base it on the MAC address.