Netgear FVS336G 参照ガイド
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
6-10
Virtual Private Networking Using SSL Connections
v1.0, October 2007
Remote users can now securely access network applications once they have logged into the SSL
VPN portal and launched Port Forwarding.
VPN portal and launched Port Forwarding.
Configuring the SSL VPN Client
The SSL VPN Client within the FVS336G will assign IP addresses to remote VPN tunnel clients.
Because the VPN tunnel connection is a point-to-point connection, you can assign IP addresses
from the corporate subnet to the remote VPN tunnel clients.
Because the VPN tunnel connection is a point-to-point connection, you can assign IP addresses
from the corporate subnet to the remote VPN tunnel clients.
Some additional considerations are:
•
So that the virtual (PPP) interface address of a VPN tunnel client does not conflict with
addresses on the corporate network, configure an IP address range that does not directly
overlap with addresses on your local network. For example, if 192.168.1.1 through
192.168.1.100 are currently assigned to devices on your local network, then start the client
address range at 192.168.1.101 or choose an entirely different subnet altogether.
addresses on the corporate network, configure an IP address range that does not directly
overlap with addresses on your local network. For example, if 192.168.1.1 through
192.168.1.100 are currently assigned to devices on your local network, then start the client
address range at 192.168.1.101 or choose an entirely different subnet altogether.
•
The VPN tunnel client cannot contact a server on the corporate network if the VPN tunnel
client’s Ethernet interface shares the same IP address as the server or the VPN firewall (for
example, if your laptop has a network interface IP address of 10.0.0.45, then you won’t be able
to contact a server on the remote network that also has the IP address 10.0.0.45).
client’s Ethernet interface shares the same IP address as the server or the VPN firewall (for
example, if your laptop has a network interface IP address of 10.0.0.45, then you won’t be able
to contact a server on the remote network that also has the IP address 10.0.0.45).
•
If you assign an entirely different subnet to the VPN tunnel clients than the subnet used by the
corporate network, you must
corporate network, you must
–
Add a client route to configure the VPN tunnel client to connect to the corporate network
using the VPN tunnel.
using the VPN tunnel.
–
Create a static route on the corporate network’s firewall to forward local traffic intended
for the VPN tunnel clients to the VPN firewall.
for the VPN tunnel clients to the VPN firewall.
•
Select whether you want to enable full tunnel or split tunnel support based on your bandwidth:
–
Full tunnel. Sends all of the client’s traffic across the VPN tunnel.
–
Split tunnel. Sends only traffic destined for the corporate network based on the specified
client routes. All other traffic is sent to the Internet. Split tunnel allows you to manage
your company bandwidth by reserving the VPN tunnel for corporate traffic only.
client routes. All other traffic is sent to the Internet. Split tunnel allows you to manage
your company bandwidth by reserving the VPN tunnel for corporate traffic only.