Figure 100: Ssl Vpn Client Adapter And Access Configuration - D-Link DWC-1000 User Manual

Wireless Controller

Figure 100: SSL VPN client adapter and access configuration

The controller allows full tunnel and split tunnel support. Full tunnel mode just sends
all traffic from the client across the VPN tunnel to the controller. Split tunnel mode
only sends traffic to the private LAN based on pre -specified client routes. These
client routes give the SSL client access to spe cific private networks, thereby allowing
access control over specific LAN services.
Client level configuration supports the following:
 Enable Split Tunnel Support: With a split tunnel, only resources which are
referenced by client routes can be accessed over the VPN tunnel. With full
tunnel support (if the split tunnel option is disabled the DWC-1000 acts in
full tunnel mode) all addresses on the private network are accessible over the
VPN tunnel. Client routes are not required.
 DNS Suffix: The DNS suffix name which will be given to the SSL VPN client.
This configuration is optional.
 Primary DNS Server: DNS server IP address to set on the network adaptor
created on the client host. This configuration is optional.
 Secondary DNS Server: Secondary DNS server IP address to set on the network
adaptor created on the client host. This configuration is optional.
 Client Address Range Begin: Clients who connect to the tunnel get a DHCP
served IP address assigned to the network adaptor from the range of addresses
beginning with this IP address
Client Address Range End: The ending IP address of the DHCP range of
addresses served to the client network adaptor.
147
User Manual