Netgear UTM25EW-100NAS ユーザーズマニュアル

ページ / 480
ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
Virtual Private Networking Using SSL Connections
8-27
v1.0, September 2009
3. Select the checkbox and complete the fields as explained 
4. Click Apply to save your settings. VPN tunnel clients are now able to connect to the UTM and 
receive a virtual IP address in the client address range.
Adding Routes for VPN Tunnel Clients
The VPN tunnel clients assume that the following networks are located across the VPN over SSL 
tunnel:
The subnet that contains the client IP address (that is, PPP interface), as determined by the 
class of the address (Class A, B, or C).
Subnets that are specified in the Configured Client Routes table on the SSL VPN Client 
screen.
If the assigned client IP address range is in a different subnet than the local network, or if the local 
network has multiple subnets, or if you select split mode tunnel operation, you must define client 
routes.
Table 8-8. 
Client IP Address Range 
Settings
 Item
Description (or Subfield and Description)
Client IP Address Range
Enable Full Tunnel Support
Select this checkbox to enable full tunnel support. If you leave this 
checkbox deselected (which is the default setting), split tunnel support is 
enabled, and you must add client routes (see 
Note: When full tunnel support is enabled, client routes are not operable.
DNS Suffix
A DNS suffix to be appended to incomplete DNS search strings. This is 
an option.
Primary DNS Server
The IP address of the primary DNS server that is assigned to the VPN 
tunnel clients. This is an option.
Note: If you do not assign a DNS server, the DNS settings remain 
unchanged in the VPN client after a VPN tunnel has been established.
Secondary DNS Server
The IP address of the secondary DNS server that is assigned to the VPN 
tunnel clients. This is an option.
Client Address Range Begin The first IP address of the IP address range that you want to assign to 
the VPN tunnel clients.
Client Address Range End
The last IP address of the IP address range that you want to assign to 
the VPN tunnel clients.