Purpose of Apply VPN Access Control List under GVC

05/31/2023 32 People found this article helpful 506,904 Views

Description

This article details the purpose for "Apply VPN Access Control List " ,under GVC configuration | client tab.

When we configure GVC for route all traffic by enabling the option set default route as this gateway ,we have an option below called "Apply VPN access control list ". This check box helps you to give access to the user what ever access given to him under his VPN access privilege .

Resolution

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

Step 1: Configure GVC for route all traffic ,and enable Apply vpn access control list"

Step 2: Configure local user and give it access to only one network not entirely network ( over here we gave access to x5 network )

Step 3:Now connect through GVC by using same local user

Step 4:Now when we try to ping x5 subent ip address we will be able to ping them but if we try to ping 8.8.8.8 ( as GVC was configured to route all traffic ,even internet traffic) we wont be able to ping it as for that user only x5 subnet is allowed .

Step 5:If we diable " Apply vpn access control list " ,we will be able to access both x5 network as well as 8.8.8.8 ( internet traffic or any network ).

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

Step 1: Configure GVC for route all traffic ,and enable Apply vpn access control list"

Step 2:Configure local user and give it access to only one network not entirely network ( over here we gave access to x5 network )

Step 3:Now connect through GVC by using same local user

Step 4: Now when we try to ping x5 subent ip address we will be able to ping them but if we try to ping 8.8.8.8 ( as GVC was configured to route all traffic ,even internet traffic) we wont be able to ping it as for that user only x5 subnet is allowed .

Step 5:If we diable " Apply vpn access control list " ,we will be able to access both x5 network as well as 8.8.8.8 ( internet traffic or any network ).