castlewood
On a pfSense 2.3.2 appliance, we currently have one OpenVPN server using port-1204 (tunnel 10.1.28.0/24, LAN 10.1.16.0/24). Its clients can access all network resources, file sharing, etc. It's intended for users who take their company laptops home. It's been working well.
We want to add another server, say, port-1205 (tunnel 10.254.205.0/24, LAN 10.1.16.0/24) for those uses with their personal computer, and particularly we don't want them to be able to access the network resources unless they connect a RDP session to their office computer right after their OpenVPN is connected. Is it feasible? Can anyone tell me how to accomplish that?