NETGEAR UTM10EW-100NAS, UTM25-100NAS manual Adding Routes for VPN Tunnel Clients, Tunnel Clients on

ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual

3.Select the checkbox and complete the fields as explained Table 8-8.

Table 8-8.Client IP Address Range Settings

Item	Description (or Subfield and Description)
Client IP Address Range
Enable Full Tunnel Support	Select this checkbox to enable full tunnel support. If you leave this
	checkbox deselected (which is the default setting), split tunnel support is
	enabled, and you must add client routes (see “Adding Routes for VPN
	Tunnel Clients” on page 8-27).
	Note: When full tunnel support is enabled, client routes are not operable.
DNS Suffix	A DNS suffix to be appended to incomplete DNS search strings. This is
	an option.
Primary DNS Server	The IP address of the primary DNS server that is assigned to the VPN
	tunnel clients. This is an option.
	Note: If you do not assign a DNS server, the DNS settings remain
	unchanged in the VPN client after a VPN tunnel has been established.
Secondary DNS Server	The IP address of the secondary DNS server that is assigned to the VPN
	tunnel clients. This is an option.
Client Address Range Begin	The first IP address of the IP address range that you want to assign to
	the VPN tunnel clients.
Client Address Range End	The last IP address of the IP address range that you want to assign to
	the VPN tunnel clients.

4.Click Apply to save your settings. VPN tunnel clients are now able to connect to the UTM and receive a virtual IP address in the client address range.

Adding Routes for VPN Tunnel Clients

The VPN tunnel clients assume that the following networks are located across the VPN over SSL tunnel:

•The subnet that contains the client IP address (that is, PPP interface), as determined by the class of the address (Class A, B, or C).

•Subnets that are specified in the Configured Client Routes table on the SSL VPN Client screen.

If the assigned client IP address range is in a different subnet than the local network, or if the local network has multiple subnets, or if you select split mode tunnel operation, you must define client routes.

Virtual Private Networking Using SSL Connections 8-27

v1.0, September 2009