I would like to have the same ACL then but in VPN Tunneling / <USER> go only <userAttr.ipPhone>

[credim]

Hello
I would like to have the same ACL then but in VPN Tunneling
look the KB to anderstand what i mean
https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB25327

sample
in VPN Tunneling peter mike and briand arrive with pool ip (192.168.0.1-192.168.0.5)
And i would like the peter, mike and briand can connect wtih ssh only on his IP computer with his ip where i can find in AD

peter can go only IP 172.16.1.1
mike can go only IP 172.16.1.2
brian can go only IP 172.16.1.3
...

User Active Directroy can go only to IP in userAttr.ipPhone
<USER> can go only to  <userAttr.ipPhone>:22

Many thanks

[ruc]

Hi - Have you tried entering the variables (as shown in KB) under the VPN tunneling > Access Control > Resource field and tested if it works?

[credim]

hello

thanks for your reply

yes but i have not find the kb for anderstand how use it

You can help me  ?

Many thanks

[ruc · Accepted solution]

Hi - Please follow the admin guide for creating Access Control for VPN. For your requirements you may need below

1. Go to ADMIN GUI > VPN tunneling > Access Control

2. Select the Policy yoiu have created for your users or create a new one.

3. Within this Policy page in the  Resource field enter <userAttr.ipPhone>:22

[credim]

i ok now !

Thanks very mutch