How to limit VPN access boundary - Githubissues

kylemanna / docker-openvpn

🔒 OpenVPN server in a Docker container complete with an EasyRSA PKI CA

https://hub.docker.com/r/kylemanna/openvpn/

MIT License

8.62k stars 2.37k forks source link

How to limit VPN access boundary #697

Open RaiBnod opened 2 years ago

RaiBnod commented 2 years ago

Is there any way to configure in a such a way that could do:

Restrict a VPN-connected device for accessing other devices
Allow VPN-connected devices for accessing only a few devices

So end result will be:

client <---> client devices won't able to communicate
server ---> client will able able to do communicate

For example:

10.8.0.1/24: subnet of clients
10.9.0.1/24: subnet of servers

Now,

10.8.0.1 client device should not be able to communicate with 10.8.0.2
10.9.0.1 server device should be able to communicate with some client devices let's say 10.8.0.1 but not with 10.8.0.2
10.8.0.1 client device should not be able to do communicate with server device 10.9.0.1

I can see a configuration: https://github.com/kylemanna/docker-openvpn/issues/672

But, it's not sufficient enough to fulfill my requirement.