NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
•The VPN Tunnel Client cannot contact a server on the corporate network if the VPN Tunnel Client's Ethernet interface shares the same IP address as the server or the SSL VPN Concentrator (i.e., if your laptop has a physical interface address of 10.0.0.45, then you won't be able to contact a server on the remote network that also has the IP address 10.0.0.45).
•You do not want the virtual (PPP) interface address of the VPN Tunnel Client to conflict with addresses on the corporate network. Therefore, configure an IP address range that does not directly overlap with addresses on your local network. So, if 192.168.0.1 through 192.168.0.100 are currently assigned to machines on your local network, then start the client address range at 192.168.0.101 or choose an entirely different subnet altogether.
Adding IP Address Ranges
If you choose a different subnet for the VPN Tunnel Client range than the subnet used by the corporate network, then you must:
1.Add a client route to configure the VPN Tunnel client to connect to the corporate network using the VPN tunnel.
2.Create a static route on the corporate network's firewall to forward traffic intended for the VPN Tunnel Client range to the SSL VPN Concentrator.
Once you have determined the address range you will assign to VPN Tunnel Clients, then define the address range in the SSL VPN Concentrator administrative interface.
To configure SSL VPN Tunnel client address range:
1.Click the VPN Tunnel option under Access Administration in the left navigation pane. The VPN Tunnel Client screen will display.
You may define the IP address range to assign to incoming VPN Tunnel clients in the Client IP Address Range section of the screen. The default range begins with 192.168.251.1 and ends with 192.168.251.254.
2.Enter the first IP address of the IP address range in the Client Address Range Begin field.
3.Enter the last IP address of the IP address range in the Client Address Range End field.
4.Click Apply to update the configuration.
5.Restart the SSL VPN Concentrator software if VPN Tunnel Clients are actively connected; this will force the clients to obtain a new virtual IP address.
VPN Tunnel Clients will now be able to connect to the SSL VPN Concentrator and receive a dynamic IP address in the client address range.
VPN Tunnel Client |
