liusc Is there any way to restrict the vpn client to ssh to second host(host z) from first host connection(host Y)? Such as: X --vpn connection--->VPN server---ssh--->Y----ssh--->Z Thank you. :?: