Granting Unique Privileges -- Dialup VPN User Groups

[#1]

Article

Description	Granting unique access permissions for VPN users groups
Components	FortiGate v2.50 (and v2.80) FortiClient v1.0 , v1.2 , v2.0
Summary	This case study considers how you can grant different groups of remote VPN users access to different subnets at a central site. In this particular example, group #1 -- allow access to the internal LAN only group #2 -- allow access the DMZ subnet only Note: simultaneous access to multiple subnets via the same VPN gateway is also possible (though not discussed in this paper). For more information see the related article "FortiClient accessing multiple subnets". The attached document also contains VPN debug output which can be helpful when troubleshooting a connectivity problem.