VPN Cencentrator 3015 | Restict Access to a Single Host

[jeffdanderson]

I am curious if it is possible to configure a VPN group on a 3015 that would only allow the VPN user access to one machine in the network and nothing else.

i.e. VPN for a vendor that only allows access to the machine they support.

I understand they could jump off from that box, but assuming that wont be an issue, can it be done. If so is it hard to configure? Any good docs out there that explain this. I have no vpn concentrator experience so this is all very new to me.

Many thanks

[ivillegas]

All you will need to do is assign a rule to the public filter with a deny to the specified ip address or network, then use the wildcard mask to specify the network, or specific client.