This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Filter access to client ipsec

i need filter the access to some ip`s.

                                                      -----> access(128.0.0.8)
Example-->  client (192.168.4.1) 
                                                      ------> not access (128.0.0.6)

Is this possible¿? 


This thread was automatically locked due to age.
  • Hi Qvicio,

    define two new networks for your example:
    client_network   192.168.4.1/32
    not_access_network   128.0.0.6/32

    then a new rule:
    client_network   not_access_network  any  deny

    Remember to put that rule on a lower number than:
    internal_network   external_network  any  allow

    cu
    Walter