Adding Ip Address Ranges - NETGEAR ProSafe SSL312 Reference Manual

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
• The VPN Tunnel Client cannot contact a server on the corporate network if the VPN Tunnel
Client's Ethernet interface shares the same IP address as the server or the SSL VPN
Concentrator (i.e., if your laptop has a physical interface address of 10.0.0.45, then you won't
be able to contact a server on the remote network that also has the IP address 10.0.0.45).
• You do not want the virtual (PPP) interface address of the VPN Tunnel Client to conflict with
addresses on the corporate network. Therefore, configure an IP address range that does not
directly overlap with addresses on your local network. So, if 192.168.0.1 through
192.168.0.100 are currently assigned to machines on your local network, then start the client
address range at 192.168.0.101 or choose an entirely different subnet altogether.

Adding IP Address Ranges

If you choose a different subnet for the VPN Tunnel Client range than the subnet used by the
corporate network, then you must:
1. Add a client route to configure the VPN Tunnel client to connect to the corporate network
using the VPN tunnel.
2. Create a static route on the corporate network's firewall to forward traffic intended for the
VPN Tunnel Client range to the SSL VPN Concentrator.
Once you have determined the address range you will assign to VPN Tunnel Clients, then define
the address range in the SSL VPN Concentrator administrative interface.
To configure SSL VPN Tunnel client address range:
1. Click the VPN Tunnel option under Access Administration in the left navigation pane. The
VPN Tunnel Client screen will display.
You may define the IP address range to assign to incoming VPN Tunnel clients in the Client
IP Address Range section of the screen. The default range begins with 192.168.251.1 and
ends with 192.168.251.254.
2. Enter the first IP address of the IP address range in the Client Address Range Begin field.
3. Enter the last IP address of the IP address range in the Client Address Range End field.
4. Click Apply to update the configuration.
5. Restart the SSL VPN Concentrator software if VPN Tunnel Clients are actively connected;
this will force the clients to obtain a new virtual IP address.
VPN Tunnel Clients will now be able to connect to the SSL VPN Concentrator and receive a
dynamic IP address in the client address range.
9-2
v1.0, August 2006
VPN Tunnel Client