VPN Pool users internal access

bws · ‎05-13-2007

Hi all,

if i configure a vpn pool on my router 2851 and have vpn configured on it. When my vpn client login to vpn and get connected can they ping each other or not? i mean can one vpn client get access to another vpn clients machine? if yes how can i restrict or controll this?

b.hsu · ‎05-18-2007

I think a client can ping to other client or not depends upon your VPN type and its configuration. Regarding restricting the acces to other VPN clients following can be done:

1) You can use split tunneling and only network or host you want to provide access will be included in list .

2) You can give full access to that network and for certain application to block , you can use VPN filter OR

Configure ACL on inside interface to block return traffic to coming back.

Following link may help you

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_user_guide_chapter09186a00800bd983.html