How to deny internet access to a specific openVPN group

kellion

Dear OpenVPN community,

I have an issue with my openVPN configuration, I managed to split my users in two groups, but now I would like to grant internet access to only one group, instead the other group should be able to stay inside the VPN but not having internet access.

I am using a post-auth script

I have read the documentation and i have searched the internet but I didn't manage to find a solution to the problem.

The only way to deny internet access is using the option "Should client internet traffic be routed thorught the vpn?".

Thank you for your help

Best Regards.

TinCanTech

Please see:
HOWTO: Request Help !

kellion

I don't fully understand what do you mean. Did I post in the wrong forum?

TinCanTech

Start by reading the post and then write your reply with the details requested.

kellion

Thank you for your time. I managed to find the solution reading the documentation.

The solution to the problem is to lauch the following command:

./sacli --user <USER_OR_GROUP> --key "prop_reroute_gw_override" --value "dns_only" UserPropPut

Best Regards.

TinCanTech

So that would be Access Server not Community Edition.