[NEBULA] Can I isolate external VPN L2TP connections to port group 2 only?
GadgetryTech
Posts: 6 
Freshman Member
Freshman Member
I have a secure box on my network that other developers need to remotely access. I do not want them to be able to see anything on my home network. If they were using the Nebula VPN feature on my NSG 100, can I make it so they only see the server(s) on an isolated network?
I know other options are bypassing the Nebula VPN service and just open a single port, then deploy a VM running a VPN service on it's own subnet. I just like the hardware feature built in to the NSG and its performance. Thanks!
I know other options are bypassing the Nebula VPN service and just open a single port, then deploy a VM running a VPN service on it's own subnet. I just like the hardware feature built in to the NSG and its performance. Thanks!
0
Accepted Solution
-
Hello @GadgetryTech
I assume the L2TP pool subnet is 192.168.145.0/24 and your home network subnet is 192.168.41.0/24 then you can set the firewall rule as below.
If your sever is also in subnet 41.0/24 for instance 192.168.41.100 then you can put another firewall rule at first priority and allow it.
/Chris5
Zyxel Employee
All Replies
-
I believe using the outbound rules will do just fine, but I guess you first need to create a rule that allows access from the VPN network to servers network, and then another rule bellow that blocks other traffic from the VPN network to any.
"You will never walk along"0 -
Hello @GadgetryTech
I assume the L2TP pool subnet is 192.168.145.0/24 and your home network subnet is 192.168.41.0/24 then you can set the firewall rule as below.
If your sever is also in subnet 41.0/24 for instance 192.168.41.100 then you can put another firewall rule at first priority and allow it.
/Chris5 -
Thanks Chris! Finally got around to testing this out. VPN traffic is isolated to Port group 2 on the gateway. Any traffic on port group 2 cannot hit my local/home network, but I can still establish sessions from my home network to VMs on port group 2 without any issues. Works like a charm!1
Ally Member
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 144 Nebula Ideas
- 94 Nebula Status and Incidents
- 5.6K Security
- 237 USG FLEX H Series
- 267 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1.1K Wireless
- 40 Wireless Ideas
- 6.3K Consumer Product
- 247 Service & License
- 384 News and Release
- 83 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.2K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 83 About Community
- 71 Security Highlight
