On BranchVPN2, create a network access policy named Sales as follows: Type of network access server: Remote Access Server. Conditions: Membership in the Sales user group. Result: Grant access if the condition is met, regardless of the setting in the Active Directory user account. Authentication: Smart card or other certificate. Disallow all other authentication methods.

- On the server manager, click on the select tool and select the network policy server and the policy node.

- Create a new policy by right-clicking on the Network policies tab, give it a name and define the network access server, then click on next.

- Add group membership as a condition by clicking the add tab, select the group type and click add, then click on add group, give it a name and click on ok and next.

- select the access permission settings and click next

- configure the authentication settings to EAP and deselect other authentication modes and click next.

- select additional constraints, click next then click on finish

Explanation:

A VPN or virtual private network is a secure offline network used by large enterprises to communicate confidentially, information within the company. It is more appropriate to implement VPN between different branches. Members of the enterprise can safely log in and out of the network, and access company data and resources they need and have permission to access.