Hello,
I wish to disable internet access for LAN and those who is using PPTP outside the network. How do I accomplish that?
Set your NAT config to specifically only “nat” certain traffic. If the LAN and PPTP traffic is not configured to access your NAT, then they will no reach the internet.
Sorry, I forgot to mention that I only want this for certain users. What exactly do you mean?
Your best bet is to create a nat_permit address list and a nat_denied address list. You can name them anything you want.
You can then assign the nat_permit address list to the NAT and everything else will be denied. You will want to use static IPs or DHCP reservations. Granted, that is without knowing anything about your network setup and there may be additional options/obstacles.