Cisco QuickVPN - PC Administration Manual page 186

Configuring VPN
Configuring SSL VPN for Browser-Based Remote Access
STEP 3
NOTE
NOTE
STEP 1
Cisco SA 500 Series Security Appliances Administration Guide
Configure an IP address range that does not directly overlap with any
NOTE
of addresses on your local network. For example, the default range is
192. 1 68.251. 1 to 192. 1 68.251.254.
Click Apply to save your settings, or click Reset to revert to the saved settings.
Next steps:
If you enable Split Tunnel Support, you also will need to configure SSL VPN Client
Routes. After you complete this procedure, see
Split Tunnel Mode, page
Configuring Client Routes for Split Tunnel Mode
If Full Tunnel support is disabled on the SSL VPN Client page, then you must
configure client routes for Split Tunnel Mode.
The Configured Client Routes entries are added by the SSL VPN Client such that
only traffic to these destination addresses is redirected through the SSL VPN
tunnels, and all other traffic is redirected using the hosts (SSL VPN Clients) native
network interface. For example if the SSL VPN Client attempts to access this
device's LAN network then in Split Tunnel mode, the user should add the LAN
subnet as the Destination Network using this page.
You can configure client routes only if Split Tunnel support is enabled on the SSL
VPN Client page. See
Click VPN on the menu bar, and then click SSL VPN Client > Configured Client
Routes in the navigation tree.
The Configured Client Routes page appears. Any configured routes are listed in
the Configured Client Routes table.
186.
Configuring the SSL VPN Client, page
Configuring Client Routes for
185.
8
186