I want to set up like this: PC1,PC2,PC3 -> SEVPNserver(123.123.123.123/wan IP)
I don't want to connect SEVPNserver's network(lan IP 10.10.50.X range)
but I want to connect to SEVPNserver itself / VPN users.
ex.
SEVSERVER 10.10.20.1
PC1(vpn connected) 10.10.20.22
PC1(vpn connected) 10.10.20.27
[ALLOW]
10.10.20.22 -> 10.10.20.1:8080 = 127.0.0.1:8080(in server side)
10.10.20.22 -> 10.10.20.1:465 = 127.0.0.1:465(in server side)
10.10.20.22 -> 10.10.20.27 (pc-to-pc)
10.10.20.22 -> 120.130.140.150 (to internet, just like a router)
[DENY]
10.10.20.22 -> 10.10.50.25
The question is,
server has 2 NIC card.
one is 10.10.1.2 WAN(Global IP: 123.123.123.123)
second is 10.10.50.1 LAN
So there's no option to force user to use assigned IP address.
User(client) can change their vpn IP address to anything. Wow.
PC1: VPN IP: 10.10.20.22 | PC2: VPN IP: 10.10.20.222
PC1 disconnected -> PC2 change its IP address to .22 -> Connect to the VPN as PC1
Isn't this a positive attack?
It'll be more secure if I can assign an vpn IP address to each user in "manage Virtual Hub - Manage Users" section
and filter(drop) everything when the user change its IP address to non-assigned one.
You can force the user to use DHCP-assigned IP address by enabling the Enforce DHCP Allocated IP Addresses (IPv4) policy.
The question was answered correctly. The user does not exist anymore on github. I'd like to close this issue.