ohthisvpn
Hi guys,
this should not be a complex configuration, but I seem to not be able to figure it out following the documentation.
MY GOAL: Trying to restrict clients' access only to two subnets.
MY ISSUE: I still have access to ALL the subnets.
MY CONFIGURATION: OpenVPN AS 2.0.5 on RedHat 6.5, SE Linux is in permissive mode.
The below behavior is for both authenticating types - LDAP, and RADIUS (I tried them both).
I created a group "main" and all users should be member of it (they don't belong to any other group).
(in Group Permissions I have selected "main" for "Default Group Permissions to use for any User not in any Group:")
In the "VPN Settings" page I have:
Specify the private subnets to which all clients should be given access (as 'network/netmask_bits', one per line):
10.10.1.0/24
10.10.2.0/24
10.10.3.0/24
10.10.4.0/24
In the "Group Permissions" page I am using Access Control for the "main" group:
Allow Access To networks and services:
10.10.1.0/24
10.10.2.0/24
However, I still have access to all the subnets.
Is there a bug or I am missing something?
thank you all for your help
