vpn client access question

[peterve]

suppose 2 vpn clients (both connected to the internet) make a connection to the vpn server.
Both clients receive a internal IP address from a DHCP server

Client A has a directory shared (on the local client computer), allowing everyone full control

will client B be able to connect to the share on the client computer A ?
If so, how I can restrict traffic between the vpn clients itself ? --------------------------------------------------------------------
How can I believe in God when just last week I got my tongue caught in the roller of an electric typewriter?
---------------------------------------------------------------------
If this post was helpfull, please click below to let me know !

 

[F1lby]

The clients will be able to see eachother without a problem as they are on the same network - Ensure WINS is in use to ensure NETBIOS names are resolved cleanly.
To limit access between the workstations you have a problem.
The only way to fix this is to ensure that the shares on the clients are password protected. Don't forget it's now as though everyone is on the same bit of wire.......

 

[peterve]

hmmm... this is not what I want to do hehe...
I will have to implement some sort of IPSec filtering to make sure all clients cannot access each other..

thanks for the advise ! --------------------------------------------------------------------
How can I believe in God when just last week I got my tongue caught in the roller of an electric typewriter?
---------------------------------------------------------------------
If this post was helpfull, please click below to let me know !

 

[Guest_imported]

Peterve,
You first ask the following:

Client A has a directory shared (on the local client computer), allowing everyone full control
will client B be able to connect to the share on the client computer A ?
If so, how I can restrict traffic between the vpn clients itself ?

And then you reply with:
this is not what I want to do hehe...
...to make sure all clients cannot access each other..

If you don't want them to access each other, then don't share resources...
and definitely not with "everyone-full control" set...

 

[lgarner]

Remember also that everyone on the internet can access the share. The other vpn clients are the least of your worries.