NETGEAR FVS318N Add Routes for VPN Tunnel Clients,  To add an SSL VPN tunnel client route, 278

ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N

Table 68. SSL VPN Client screen settings for IPv4 and IPv6 (continued)

Setting	Description
Secondary DNS Server	The IP address of the secondary DNS server that is assigned to the VPN
	tunnel clients. This setting is optional.
	Client Address	The first IP address of the IPv4 address range that you
	Range Begin	want to assign to the VPN tunnel clients. By default, the
IPv4 screen only		first IPv4 address is 192.168.251.1.
	Client Address	The last IP address of the IPv4 address range that you
	Range End	want to assign to the VPN tunnel clients. By default, the
		last IPv4 address is 192.168.251.254.
	Client IPv6	The first IP address of the IPv6 address range that you
	Address Range	want to assign to the VPN tunnel clients. By default, the
IPv6 screen only	Begin	first IPv6 address is 4000::1.
	Client IPv6	The last IP address of the IPv6 address range that you
	Address Range	want to assign to the VPN tunnel clients. By default, the
	End	last IPv6 address is 4000::200.

4.Click Apply to save your settings. VPN tunnel clients are now able to connect to the wireless VPN firewall and receive a virtual IP address in the client address range.

Add Routes for VPN Tunnel Clients

The VPN tunnel clients assume that the following networks are located across the VPN-over-SSL tunnel:

•The subnet that contains the client IP address (that is, PPP interface), as determined by the class of the address (Class A, B, or C).

•Subnets that are specified in the Configured Client Routes table on the SSL VPN Client screen.

If the assigned client IP address range is in a different subnet from the local network, or if the local network has multiple subnets, or if you select split-tunnel operation, you need to define client routes.

To add an SSL VPN tunnel client route:

1.Select VPN > SSL VPN > SSL VPN Client. The SSL VPN Client screen for IPv4 displays (see Figure 166 on page 276).

2.Specify the IP version for which you want to add a route:

•IPv4. In the upper right of the screen, the IPv4 radio button is already selected by default. Go to Step 3.

•IPv6. Select the IPv6 radio button. The SSL VPN Client screen displays the IPv6 settings (see Figure 167 on page 277).

Virtual Private Networking Using SSL Connections

278