Limit intranet to certain computers

Question

I've created a intranet website which I would like to limit to only certain computers spread throughout the city, my first thought was creating a vpn server on the web server and authorize the client computers with certificate and then limit the site only to lan. I used SoftEther VPN to setup the server, but a problem I immediately encountered was the slow bandwidth. Now to my actual question is it possible to enable the clients to browse the internet through their own connection and at the same time be able to access the website on the vpn?

Edit: I'm also open for other solutions that may be less introsive.

score 2 · Accepted Answer · answered Nov 12 '16 at 21:14

2

Sure, enable split tunneling on the VPN.

answered Nov 12 '16 at 21:14

EEAA

109,363
18
175
245

on the server side or client side? – Breezer Nov 12 '16 at 21:20
Well, split tunneling requires configuration on both. – EEAA Nov 12 '16 at 21:26
would you mind elobrating, how would I know if the client is using the regular connection for other sites, since when I visit sites it gives me the ip of the vpn still – Breezer Nov 12 '16 at 21:45
[My IP](https://duckduckgo.com/?q=my+ip). – EEAA Nov 12 '16 at 22:37

score 0 · Answer 2 · answered Nov 15 '16 at 01:27

Gather public IPv6 subnets each client is in, and allow them over the Internet. Encrypt with https and secure the web server as it is a public network.

This is not typical. It is more common to have a private network for an intranet, and a fully public network for public facing resources.

Limit intranet to certain computers

2 Answers2