Watchguard Firebox X15 User Manual page 305

SSL VPN General Tab
Gateway
The Gateway is the public IP address that Mobile VPN clients connect to. You must type an IP address
assigned to the external interface of your Edge. If you have configured more than one IP address for
your external interface, or you have configured WAN failover with the WAN2 port on your Edge, add
this IP address in the Secondary text box. The Edge tries to connect to the secondary IP address if it
cannot connect to the primary IP address.
If you use the dynDNS service because your Firebox has a dynamic IP address, you can type the
domain name instead of an IP address in these fields.
Routes
Select Force all traffic through the tunnel if you want all client traffic to be routed through the
Mobile VPN tunnel. If this check box is clear, only traffic sent to the trusted or optional networks is
routed through the tunnel.
Virtual IP Address Range
When a Mobile VPN user connects to the Edge, the Edge must assign that user's computer an
available IP address from a network behind the Edge. Type the first IP address in the address pool the
Edge can use to assign Mobile VPN connections in the Start of IP address pool field. The Edge gives
out this IP address to the first Mobile VPN with SSL client that connects. The Edge increments the IP
address by 1 and assigns an address to each subsequent Mobile VPN client that connects.
If the virtual IP address range you specify is from the trusted network, Mobile VPN with SSL clients
bridge to the trusted network. If the virtual IP address range you specify is from the optional network,
clients bridge to the optional network.
User Guide
About Mobile VPN with SSL
293