Block access to LAN from internal VPN
we have around 50 users in our network. I configured Kerio as VPN server for users to get Internet access and to split local network from internet. Our users connect to Kerio via L2TP VPN in order to access the internet. What I want is that whenever users connect to Kerio and get the 10.20.30.0/24 address , they do not have access to LAN network and they should disconnect from VPN to have access to LAN servers. I wrote a rule in Kerio which to block any requests from 10.20.30.0/24 ======> 192.168.100.0/24 , but when users connect via VPN they can also access LAN too. what should I do to restrict the access? Thank you.
Kerio VPN IP Range:10.20.30.0/24
LAN IP Range : 192.168.100.0/24