[simon]

Hi jcamillo,

make sure you define more specific entries on top of your generic settings.

For example:
Line #1: cpmodule addr 192.168.1.100 wins=(), dns=() JohnDoe
Line #2: cpmodule net 192.168.1.0/27 wins=(192.168.1.200), dns=(192.168.1.200) VpnUserGroup

JohnDoe may be a member of VpnUserGroup or not, in this case it doesn't matter because the more specific entry is specified above the generic entry. If JohnDoe ist not a member of VpnUserGroup you could also specify it below.
If no entry matches (no membership in VpnUserGroup, not user JohnDoe) the module's object configuration defined on your SmartCenter Server should match.

You can also use vpn ipafile_check ipassignment.conf detail for more detailed output.

Hope that helps.

Regards,
Simon