Figure 61: Ssl Vpn Client Adapter And Access Configuration - D-Link DSR-500 User Manual

Unified Services Router
The IP addresses of the client's network interfaces (Ethernet, Wireless, etc.) cannot
be identical to the router's IP address or a server on the corporate LAN that is
being accessed through the SSL VPN tunnel.

Figure 61: SSL VPN client adapter and access configuration

The router allows full tunnel and split tunnel support. Full tunnel mode just sends all
traffic from the client across the VPN tunnel to the router. Split tunnel mode only
sends traffic to the private LAN based on pre-specified client routes. These client
routes give the SSL client access to specific private networks, thereby allowing access
control over specific LAN services.
Setup > VPN Settings > SSL VPN Client > Configured Client Routes
If the SSL VPN client is assigned an IP address in a different subnet than the
corporate network, a client route must be added to allow access to the private LAN
through the VPN tunnel. As well a static route on the private LAN's firewall
(typically this router) is needed to forward private traffic through the VPN Firewall to
the remote SSL VPN client.
97
User Manual