Allowing Internet access w/ allowing some users private network access

helixzz · Post by **helixzz** » Mon Apr 06, 2020 10:42 am

Hi guys,

I was setting up an OVPN AS environment for our studio.
Let's say there is two groups of users.

Group A: "Internet-only"
Allowed to access any Internet site through studio network.
Meanwhile, they are not allowed access the private network (RFC1918) on the server side.

Group B: "Admins"
Allowed to access all networks, including Internet and studio LAN.

How to configure correctly?

I was tried to use the "Access Control" feature in user/group permissions.
But they seems can't support the settings I wanted such as "allow 0.0.0.0/0 AND deny 10.0.0.0/8".