NETGEAR SSL312 - ProSafe SSL VPN Concentrator 25 Montage- und Wartungsanleitung

Andere Handbücher für SSL312 - ProSafe SSL VPN Concentrator 25

4

Inhaltsverzeichnis

Andere NETGEAR Drahtloser Zugangspunkt Handbücher

NETGEAR

NETGEAR WG302v2 - ProSafe 802.11g Wireless Access... Montageanleitung

NETGEAR

NETGEAR ProSafe WG102-500 Bedienungsanleitung

NETGEAR

NETGEAR WNHDE111-100NAS Bedienungsanleitung

NETGEAR

NETGEAR WG302v2 - ProSafe 802.11g Wireless Access... Betriebsanleitung

NETGEAR

NETGEAR ME102 - Wireless Access Point Bedienungsanleitung

NETGEAR

NETGEAR WAX630E Bedienungsanleitung

NETGEAR

NETGEAR ProSafe Premium WNDAP620 Bedienungsanleitung

NETGEAR

NETGEAR WNAP210 Bedienungsanleitung

NETGEAR

NETGEAR ME103 - 802.11b ProSafe Wireless Access... Bedienungsanleitung

NETGEAR

NETGEAR ProSafe Premium WNDAP620 Bedienungsanleitung

NETGEAR

NETGEAR Insight WAC540 Bedienungsanleitung

NETGEAR

NETGEAR WG602v1 - Wireless Access Point Bedienungsanleitung

NETGEAR

NETGEAR WAG302v1 - ProSafe Dual Band Wireless Access... Bedienungsanleitung

NETGEAR

NETGEAR WE102 - Wireless Access Point Bedienungsanleitung

NETGEAR

NETGEAR HE102 - Wireless Access Point Bedienungsanleitung

NETGEAR

NETGEAR WNDR4300-TN Bedienungsanleitung

NETGEAR

NETGEAR WAX218 Bedienungsanleitung

NETGEAR

NETGEAR Orbi Pro Bedienungs- und Wartungsanleitung

NETGEAR

NETGEAR PowerLine XWNB5602 Bedienungsanleitung

NETGEAR

NETGEAR WAG302 Bedienungsanleitung

NETGEAR

NETGEAR SSL312 - ProSafe SSL VPN Concentrator 25 Bedienungsanleitung

NETGEAR

NETGEAR WAX204 Bedienungsanleitung

NETGEAR

NETGEAR WAX628 Bedienungsanleitung

NETGEAR

NETGEAR FWG114Pv2 - Wireless Firewall With USB Print... Bedienungsanleitung

Beliebte Drahtloser Zugangspunkt Handbücher anderer Marken

D-Link

D-Link DWL-2100AP - AirPlus Xtreme G Bedienungsanleitung

Ubiquiti

Ubiquiti NanoStation NSM2 Bedienungsanleitung

Cisco

Cisco Aironet 1550 Series Bedienungsanleitung

Aruba

Aruba IAP-335 Bedienungsanleitung

Advantek Networks

Advantek Networks AWN-AP-54MR Bedienungsanleitung

IP-COM

IP-COM AP355 Bedienungsanleitung

Buffalo

Buffalo AirStation WLA-L11G Bedienungsanleitung

EnGenius

EnGenius EnStationACv2 Bedienungsanleitung

D-Link

D-Link DAP-3662 Bedienungsanleitung

Widelink

Widelink ezWave WAP-1100 Series Bedienungsanleitung

Edimax

Edimax CAP1200 Bedienungsanleitung

xG Technology

xG Technology xMax CN1300 Bedienungsanleitung

Ubiquiti

Ubiquiti LBE-5AC-Gen2 Bedienungsanleitung

Aruba

Aruba AP-203R Bedienungsanleitung

LuXout Shades

LuXout Shades LUXSHADE MOTION Bedienungsanleitung

CreatComm

CreatComm TB5F Bedienungsanleitung

SineDigital

SineDigital MW-1500AP(H) Bedienungsanleitung

TP-Link

TP-Link AP9650 V1 Bedienungsanleitung

SSL312 Firmware version 2.0.03

FVX538 Firmware version 2.1.2-7

This article illustrates the Split Tunnel SSL VPN and how to configure a static route on both the

firewall and the SSL312 to allow the remote clients to access other PCs through the SSL VPN

tunnel.

Issue:

SSL VPN tunnel is established, but remote client cannot ping or access other devices on the

SSL312 VPN network.

Cause:

By default, the SSL VPN is configured to assign the remote VPN clients with IP addresses from

the range of 192.168.251.1 through 192.168.251.254. This range of IP address may not be in the

same subnet as your local network or as your SSL312.

Resolution:

1) Add a client route on the SSL312 to allow the VPN Tunnel client to connect to the

corporate network using the VPN tunnel.

2) Add a client route on the corporate network's firewall to forward traffic intended for the

VPN clients to the SSL VPN gateway

25.0.0.50

25.0.0.254

25.0.0.2

SSL312

SSL VPN Tunnel

192.168.251.3

SSL312 VPN Static Route

Remote

client

FVX538

Internet

This is the default IP address range that the SSL312 will be giving out to its remote VPN clients:

NOTE: By default the SSL VPN tunnel is set to use Split Tunnel –this means that the SSL312

does not know how to route traffic to the rest of the network without a static route defined. Unless

you have configured your SSL312 to be in the same subnet as the VPN Client range, you will

need to add a static route on the SSL312 before you can access other devices on the network.

To add a route on the SSL312, do the following:

1) Log into the Administrative Portal

2) Select “VPN Tunnel” under the “Access Administration” section

3) Scroll down to the “Add Routes for VPN Tunnel Clients”, enter the network address of a

local area network or subnet in the Destination Network field (i.e.: 25.0.0.0)

4) Enter the subnet mask of the local area network in the Subnet Mask field

5) Click “Add Route” to add the route on your SSL312

In this example, the SSL312 is connected behind the FVX538 VPN Firewall router, which has a

LAN subnet of 25.0.0.x, therefore we need to add a static route to this subnet so that the VPN

clients on the 192.168.251.x subnet can talk to the rest of the PC and devices behind the

FVX538.

Furthermore, another static route is needed on the firewall or FVX538 to route external traffic to

the SSL312. To do this, we are adding the SSL VPN client subnet and route that traffic through

the IP address of the SSL312 itself.

Fdsf

At this time, once you have established the SSL VPN tunnel, you will see an addition IP address

listed:

With the routes added on both the SSL312 and the firewall router, you are now able to ping

through a local network:

IP address of the

SSL312

New IP address

given to remote

client by the SSL312

Routing table BEFORE VPN tunnel

Routing table AFTER VPN tunnel established

New route added