Solved

pptp vpn user must be limited only to access 2 ip addresses

Posted on 2011-02-21
2
293 Views
Last Modified: 2012-05-11
Hi all,

I'm looking for a solution. We have a external company who installed a pc with plc controllers.
The need to maintain them and connect to them.
We need to give VPN access to them.
But we don't want this company to be able to connect to other ip addresses on our network.
Hence they could do a lot of things wrong. And we don't want that.

So, how can this be done?
We also have ISA server setup for VPN but I don't seem to find a solution to bind a user to specific IP addresses
0
Comment
Question by:osa2
2 Comments
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 34945559
You cannot bind a specific user to an IP address.

One option is to use RDP for the two users rather than vpn. Each user can be pointed at a workstaion internally that is locked down to what you want them to have access to.
0
 
LVL 29

Accepted Solution

by:
pwindell earned 500 total points
ID: 34955056
1. You have to create an Account on your Domain for them to use.  Create a unique Group to go along with it and place the Account into that Group. Make that group the Default Group for that Account and then remove the Account from Domain Users Group.   Make sure the Account has Remote Access or "Dial-in" rights.

2. Create a User Object on the ISA to place the User Account (or its Group) in.

3. Create an Address Set containing the IP#s you want them to Access

4. Create an Access Rule as:

From: VPN Users
To: <aforementioned Address Set>
Users: <aforementioned User Set>
Protocols: <whatever>

5. Make sure that this Access Rule is above the other VPN Access Rule in the Rule list.  

6. Your other VPN Access Rules should also use a User Set that does not contain this user as an extra measure.      Do not allow VPN Access Rules to be anonymous ("All Users").
0

Featured Post

ScreenConnect 6.0 Free Trial

At ScreenConnect, partner feedback doesn't fall on deaf ears. We collected partner suggestions off of their virtual wish list and transformed them into one game-changing release: ScreenConnect 6.0. Explore all of the extras and enhancements for yourself!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Like many organizations, your foray into cloud computing may have started with an ancillary or security service, like email spam and virus protection. For some, the first or second step into the cloud was moving email off-premise. For others, a clou…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question