Cisco Systems VPN 3000 Address Management

6-1
VPN 3000 Concentrator Series User Guide
CHAPTER 6
Address Management
IP addresses make internetworking connections possible. They are like telep hone numbers: both the
sender and receiver must have an assigned number in order to connect. But with VPNs, there are actually
two sets of addresses: the first set connects client and server on t he public network; and once that
connection is made, the second set connects client and server through the VPN tunnel.
In VPN Concentrator address management, we are dealing with the second set of IP addresses: those
private IP addresses that connect a client with a resource on the private network, through the tunnel , and
let the client function as if it were directly connected to the private network. Furthermore, we are dealing
only with the private IP addresses that get assigned to clients. The IP addresses assigned to other
resources on your private network are part of your network administration responsibilities, not part of
VPN Concentrator management.
Therefore, when we discuss IP addresses here, we mean those IP addresses available in your private
network addressing scheme, that let the client function as a tunnel endpoint.
Configuration | System | Address Management
This section of the VPN 3000 Concentrator Series Manager lets you configure options for assigning
addresses to clients as a tunnel is established. A client m ust have an IP address to function as a tunnel
endpoint.
•Assignment configures the prioritized methods for assigning IP addresses.
•Pools configures the internal address pools from which you can assign IP ad dresses.
Figure 6-1: Configuration | System | Address Management screen