How can I enforce different access control to different VPN groups?
vtun0 clients only has access to network a, vtun1 clients can has access to serverImage may be NSFW.
Clik here to view.
ort, vtun2 clients cannot talk to each other, vtun4 clients can talk to each other but nothing else.
I am not sure what firwall ruleset on vtun0 interface in/out direction implies. i.e. firewall on vtun out to limit vpn client's access to local networks? or vtun out means traffic sent to vpn clients? or I was all wrong and this kind of policy needs to be configured on non-vpn interface out direction?
