Limit VPN users

Dylan96

What is the best way to restrict access to a user in VPN to a single VLAN?

I’m using an ATP100 on nebula.

PeterUK

You should be able to do a policy rule for a user from VPN to a VLAN

Dylan96

If I use a security policy, I cannot choose a single VPN user as the source, can i?

PeterUK

In stand alone you can.

Dylan96

I imagined that on prem there was this option.... 

so on nebula i can't do anything?

Zyxel_Judy

Hi @Dylan96 ,

Currently, there is no feature in Nebula's security policy to restrict a VPN user's access to a single VLAN. However, you can achieve this by adding the users you want to restrict into a group, and then assigning that group in the User field within Nebula's security policy.

*To create a group, navigate to Site-wide > Configure > Firewall > Firewall settings, and set up the group under Authentication Server and External User Group.

Dylan96

thank you judy, but I don't have an authentication server, VPN users currently use nebula cloud authentication…

Zyxel_Judy

Hi @Dylan96 ,

Currently, according to the specifications, customers need to have an external authentication server to implement this feature on the Nebula.