Thread: IPsec - limit users or groups

hello all,

configured vpn using ipsec(openswan) , xl2ptd. while following guide (among countless others): http://riobard.com/blog/2010-04-30-l...-ipsec-ubuntu/

vpn-connection works fine, connecting swirl, can reach want in network, , gateway internet works - being routed through vpn.

problem next steps, , didn't succeed finding right result on possible search:

a) want limit, vpn-connection used distinct connections hosts, aren't in "company subnet", ip's publicly available. (example: target-ip 8.8.8.8 allows per iptables, vpn-host 1.2.3.4 accesses via ssh, , can access target-ip via ssh when i'm on vpn). when browsing ubuntu-website, want, not vpn-connection used rather normal connection (as reference: i'm on windows-client - not choice, btw.)

b) want have several such "limitations" grouped, , give users 'access-rights' hosts (examples:

• admin gets access on ports
• testers access machines on distinct ports
• ceo gets access mailserver via pop3 or imap

)

so, question here is:
possible, , if yes, can point me towards solution?

after small break, hit me, looking @ wrong end: ipsec-connections, xl2tpd, etc. should have looked have been assigning of local ip's users, done ppp, , not ipsec itself.

excellent thread: http://ubuntuforums.org/showthread.php?t=1645473 brought me solution:

in /etc/ppp/chap-secrets have assign distinct users ip

code:

test l2tpd testpass 192.168.1.233  l2tpd test testpass 192.168.1.233

this ip can restricted iptables in every way necessary.

Forum The Ubuntu Forum Community Ubuntu Specialised Support Ubuntu Servers, Cloud and Juju Server Platforms [SOLVED] IPsec - limit users or groups

Ubuntu