NETGEAR SSL312 manual Adding IP Address Ranges

Page 94

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual

The VPN Tunnel Client cannot contact a server on the corporate network if the VPN Tunnel Client's Ethernet interface shares the same IP address as the server or the SSL VPN Concentrator (i.e., if your laptop has a physical interface address of 10.0.0.45, then you won't be able to contact a server on the remote network that also has the IP address 10.0.0.45).

You do not want the virtual (PPP) interface address of the VPN Tunnel Client to conflict with addresses on the corporate network. Therefore, configure an IP address range that does not directly overlap with addresses on your local network. So, if 192.168.0.1 through 192.168.0.100 are currently assigned to machines on your local network, then start the client address range at 192.168.0.101 or choose an entirely different subnet altogether.

Adding IP Address Ranges

If you choose a different subnet for the VPN Tunnel Client range than the subnet used by the corporate network, then you must:

1.Add a client route to configure the VPN Tunnel client to connect to the corporate network using the VPN tunnel.

2.Create a static route on the corporate network's firewall to forward traffic intended for the VPN Tunnel Client range to the SSL VPN Concentrator.

Once you have determined the address range you will assign to VPN Tunnel Clients, then define the address range in the SSL VPN Concentrator administrative interface.

To configure SSL VPN Tunnel client address range:

1.Click the VPN Tunnel option under Access Administration in the left navigation pane. The VPN Tunnel Client screen will display.

You may define the IP address range to assign to incoming VPN Tunnel clients in the Client IP Address Range section of the screen. The default range begins with 192.168.251.1 and ends with 192.168.251.254.

2.Enter the first IP address of the IP address range in the Client Address Range Begin field.

3.Enter the last IP address of the IP address range in the Client Address Range End field.

4.Click Apply to update the configuration.

5.Restart the SSL VPN Concentrator software if VPN Tunnel Clients are actively connected; this will force the clients to obtain a new virtual IP address.

VPN Tunnel Clients will now be able to connect to the SSL VPN Concentrator and receive a dynamic IP address in the client address range.

9-2

VPN Tunnel Client

v1.0, August 2006

Image 94
Contents Netgear ProSafe SSL VPN Concentrator SSL312 Reference Manual Technical Support EU Regulatory Compliance Statement V1.0, August Contents Chapter Network Settings Chapter Port Forwarding Appendix B Related Documents Index About This Manual Conventions, Formats and ScopeHow to Use This Manual How to Print this ManualPrinting a Chapter Xii Chapter Introduction Key FeaturesAbout the ProSafe SSL VPN Concentrator Web Browser Requirements Microsoft WindowsHardware Description What’s in the BoxFront Panel Back Panel Chapter Basic Installation and Configuration Installing the SSL VPN ConcentratorConfiguring the ProSafe SSL VPN Concentrator Https//192.168.1.1V1.0, August Logging in to the Management Interface User Name admin Password password V1.0, August Chapter Status and Logging SSL VPN Concentrator StatusStatus and Logging Event Log Priority of Log Messages Value Definition Active Users Log Settings E-mail Settings section Alerts Error Click Apply to confirm your settings Chapter General Settings System Configuration UtilitiesEncrypting the Configuration File Exporting and Saving a Backup Configuration FileImporting a Configuration File Erasing and Restoring the Default Settings Upgrading the SSL VPN Concentrator FirmwareTime and Date Settings V1.0, August Certificate Management V1.0, August V1.0, August V1.0, August V1.0, August V1.0, August Configuring Network Settings Chapter Network SettingsSample SSL VPN Concentrator Configuration Network Interface Configuration V1.0, August Network Route Configuration Click Apply to save your settingsV1.0, August Network Host Table Settings Configuring DNS Settings V1.0, August Chapter Group and User Access Policies Users, Groups and Global Policies10.0.0.0 Editing Global Policy Settings Global PoliciesAdding and Editing Global Policies V1.0, August Groups Configuration Defining and Editing Global BookmarksAdding a New Group Editing Group Settings Defining and Editing Group Policies V1.0, August Defining and Editing Group Bookmarks Deleting a Group You can also delete a group by clicking its Delete linkUsers Configuration Adding a New User Editing a User V1.0, August Defining and Editing User Policies Defining and Editing a User Bookmarks Deleting a User Ldap Authentication Domains for Group Policies and Bookmarks Sample Ldap AttributesLdap Attribute Rules Sample Ldap Users and Attributes SettingsQuerying an Ldap Server V1.0, August Authentication Domains Chapter Domains and LayoutsLocal User Database Authentication Radius Authentication NT Domain Authentication Ldap Authentication CN=Users,DC=yourdomain,DC=com Active Directory Authentication V1.0, August SSL VPN Concentrator Portal Layouts Deleting a DomainAdding Portal Layouts Portal Layout and Theme Name sectionV1.0, August V1.0, August Customizing the Banner Duplicating and Editing Portal Layouts V1.0, August Advanced Portal Page Layout Specifications Chapter Network Resources Network Resources V1.0, August V1.0, August SSL VPN Client Configuration Chapter VPN Tunnel ClientAdding IP Address Ranges Adding Routes for VPN Tunnel Clients V1.0, August V1.0, August V1.0, August Configuring Applications for Port Forwarding Chapter Port ForwardingPort Forwarding Applications/TCP Port Numbers Configuring Host Name Resolution 10-4 Port Forwarding Appendix a Default Settings and Technical Specifications Factory Default SettingsTechnical Specifications GMTAppendix B Related Documents Document LinkV1.0, August Index NumericsIndex-2 Index-3 Index-4 Index-5 Index-6
Related manuals
Manual 122 pages 23.62 Kb