Direct VPN, which enables you to establish a VPN connection to your edge gateway, is added to each edge gateway by default in the form of the VPN service and cannot be removed. You can, however, configure who has full VPN access, who has limited VPN access, or disable the VPN service entirely by switching off the device's VPN connection.

Configure the VPN service

The access category determines who can use the VPN service. More information about access categories can be found here: User management setup guide.

1. Go to Fleet Manager > Devices and click on your device name.
2. In the left menu, go to Services.
3. Click on the VPN connect service.
4. Make the desired changes (details below) and click Confirm changes

   Setting	Description
   Full access	Users with permission to the selected access category will have full VPN access. They can remotely access all devices that are connected to the IXrouter's LAN.
   Limited access	Limited VPN access is especially useful when your machine is equipped with devices from different suppliers. For commissioning and maintenance reasons, some suppliers may require VPN access to their own devices, but not to devices from other suppliers. More information and instructions: Give limited VPN access to one or more machine components.
   Show in device overview on mobile / web	Show or hide the VPN Connect button in the Portal's device overview in the IXON Portal mobile app or in web browsers. Only showing the relevant buttons makes it easier to use the services you need. Note that users can still use VPN in the VPN Connect component on a Device page, if they have permission.