HP Sa3110 - VPN Server Appliance Manual page 73

Full Access Full Access
Full Access Full Access
Limited Access Limited Access Limited Access Limited Access
Hewlett-Packard Company Virtual Private Networking Concepts Guide
The following table shows a tunnel that would allow a group
(called audit) full access to the red (trusted) network available
through VPN device A, while not allowing access to the network
available through VPN device B. Note that a maximum of 30
members of the group will be allowed to use the tunnel at once.
Tunnel Definition Tunnel Definition Tunnel Definition Tunnel Definition
Parameters Parameters Parameters Parameters
Group name
Client IP
Number of clients
Secure profile (must
be previously
defined)
Tunnel mode
IP route
In the previous table, group audit is given complete access to the
trusted network.
The next table shows how to use a combination of a tunnel and
a firewall rule to give a group limited access to the red (trusted)
network. For example, to allow a group called sales access to the
Web server available through VPN device A while not allowing
access to the rest of that network or to the network available
through VPN device B, a tunnel is defined for the group to the
black side of the VPN device and a firewall rule is created to
allow the traffic from the black (untrusted) network to the red
(trusted) network.
Tunnel Definition Tunnel Definition
Tunnel Definition Tunnel Definition
Parameters Parameters
Parameters Parameters
Group name
VPN Device A VPN Device A VPN Device A VPN Device A
audit
10.1.1.193
30
dial-up
Red
Not required
VPN Device A VPN Device A
VPN Device A VPN Device A
sales
Multiuser Tunnels
VPN Device B VPN Device B VPN Device B VPN Device B
No access
Not applicable
Not applicable
Not applicable
Not applicable
VPN Device B VPN Device B
VPN Device B VPN Device B
No access
5-17