Monday, September 2, 2019

Cisco ASA - Restrict traffic to devices on the same VPN VLAN/subnet

Howdy,

I was wondering if it was possible on a Cisco ASA to restrict traffic between clients on the same VPN DHCP VLAN/subnet.

Example: User 1 VPN’d to ASA - IP address = 192.168.1.99 User 2 VPN’d to ASA - IP address = 192.168.1.100

At present, I can ping 192.168.1.99 from user 2’s PC.

Is there a way to restrict all traffic on the VPN DHCP VLAN so that users VPN’ing onto the network cannot reach or route to other devices on the VPN DHCP VLAN/Subnet?

Thanks.



No comments:

Post a Comment