SoftEther VPN User Forum

hello there,

Is there any switch in Server Manager to deny internet access through VPN?

I know that just keeping 'default gateway' and 'dns server' blank in SE's dhcp setting don't route internet traffic through vpn. But any client can use static ip (in dhcp range), gateway and dns and then connect to vpn to get internet access through vpn.

We have to build vpn server to 50-60 global clients for private networking only. They should not enjoy vpn'd internet. However, they can use their local ISP's network for internet.

This seems about administrations access policy for server or hub itself. I am asking about denying internet route through vpn.

In SecureNAT uncheck "Virtual NAT".

Yes. I understood that option.
But I am asking for server side option. The option you are suggesting is client side switch where client can easily easily uncheck the option and gain VPN access for wan. The rule should be enforced from server itself.

itskv wrote: ↑

Thu Jun 15, 2023 10:19 am

But I am asking for server side option.

"In SecureNAT uncheck Virtual NAT" is a server side option.