[deleted]
I'm trying to get OpenVPN Access Server to restrict what VPN clients can get to on the network based on group membership. At first, the server was configured to have clients route all internet traffic through it. This provided access to everything on the network here that the server itself could reach since it was using NAT. I then started working on limiting what the clients could get to. First I created a group, set it as the default group for users with no group, and then turned on Access Control, giving it a small portion of our IP space. I should note that our IP space consists of public IP's, not private. Anyway, that didn't seem to have any effect at all. Next I set the "route all internet traffic through server" setting to No and reconnected. This got me a little further as OpenVPN only allowed me to connect to IP's within the subrange I had limited it to. BUT, it also prevented me from getting to anything else out on the internet. Looking at the routing table, it had still given my client a default route pointing at the vpn tunnel even though I had set the option of routing all Internet trafficthrough the VPN to no. If I manually delete that extra default route, things work as expected.
Is it possible to have it NOT set this default route? Or, taking a step back, am I even going about this the right way?
The Johan
Contact the support ticket system for support on this issue.
[deleted]
I'll give it a shot. I haven't purchased licenses yet, as I'm still working on getting it set up and making sure it can do what we need it to do before going to the boss to make a purchase.
jjeffers
I'm having the same problem. I *want* split tunneling, and have set up the server to NOT route internet traffic thru the VPN server. But it's doing it anyway. So whenever my clients connect, it breaks their internet access.
reinaldo.gomes
Can't you achieve this by pushing specific routes to the clients?
The Johan
Contact the support ticket system for support on this issue.
