Page 91 / 120 Scroll up to view Page 86 - 90
NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
Additional System Configuration
7-3
v1.1, November 2006
2.
Enter the Ethernet Port 1 subnet mask that has been configured for your network. The subnet
mask value should be the same value as the subnet mask configured on your network
computers. The factory default is
255.255.255.0
(The subnet mask specifies the network
number portion of an IP address.).
3.
Only if you plan to use two port mode, enable routing mode by checking this checkbox. The
second Ethernet port will be enabled.
4.
Enter a local or internal IP address of your ProSafe SSL VPN Concentrator 25. This address
should be in a different subnet than the Ethernet Port 1 IP address. The default Ethernet Port 2
IP Address is
10.0.0.1
.
5.
Enter the subnet mask. The subnet mask specifies the network number portion of an IP
address. The factory default is
255.255.255.0
.
Figure 7-2
Note:
NETGEAR recommends one port operation for most networks.
Page 92 / 120
NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
7-4
Additional System Configuration
v1.1, November 2006
6.
Click Apply
to save your settings.
If the interface is configured to terminate SSL VPN connections, then restart the SSL VPN
Concentrator software for the change to take effect.
To complete the IP settings configuration, also configure SSL VPN Concentrator DNS settings
and network routes.
Network Route Configuration
From the Network Route screen, you can define the default network route and add additional static
routes to local area subnets.
The default route is required for Internet access
. Static routes are
optional.
To configure the default route:
1.
In the Network
menu, check the Static Routes radio button. The Network menu displays both
Add Default Route and Add Static Routes fields, as shown below.
2.
In the Add Default Route section, enter the IP address of the router or default gateway of the
network in the Default Gateway Address field.
The default gateway address is the same gateway address used by local area network
computers to connect to the Internet and it may be the address of a network firewall.
3.
From the Interface pull-down menu, select the Ethernet interface (ethernet-1 or ethernet-2)
that should be used to connect to the default gateway address.
4.
Click Apply. Once updated, the route appears in the Static Routes table.
Note:
The SSL VPN Concentrator does not perform Network Address Translation
(NAT). And the SSL VPN Concentrator only enforces access policies on SSL
VPN traffic, not on other TCP/IP protocols. Therefore, the SSL VPN
Concentrator should be used in conjunction with a network firewall.
Note:
The SSL VPN Concentrator administrative session will end when the software
is restarted. To log in to the SSL VPN Concentrator management interface,
enter the new IP address of the SSL VPN Concentrator device in the Address
or Location field of your web browser. Be sure that the management station is
in the same subnet as the new SSL VPN Concentrator IP address.
Page 93 / 120
NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
Additional System Configuration
7-5
v1.1, November 2006
If your corporate network contains other subnets whose resources will be made available through
remote SSL connections, you must configure static routes to those subnets. To configure a static
route:
1.
In the Add Static Routes section, enter the destination network address of the static route in the
Destination Network field. The destination network address is an IP address in the remote
network subnet.
2.
In the
Subnet Mask
field, enter the subnet mask of the remote network segment.
Figure 7-3
Note:
The destination network address may be a valid IP address or it may be a
subnet address that ends in
.0
, such as
192.168.0.0
.
Page 94 / 120
NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
7-6
Additional System Configuration
v1.1, November 2006
3.
In the Gateway Address field, enter the IP address of your router. The gateway address should
be in the same subnet as the ethernet-1 or ethernet-2 interface.
For example, if the ethernet-1 interface address is
10.0.0.100
and the subnet mask is
255.255.255.0
, then a router connected through the ethernet-1 interface should be
10.0.0.X
.
4.
From the Interface
menu (ethernet-1 or ethernet-2), select the Ethernet interface that should be
used to connect to the gateway address.
5.
Click Apply. The new static route is added to the Routes
table.
Network Host Table Settings
For the convenience of users, you can configure the SSL VPN Concentrator to translate host
names or fully qualified domain names (FQDNs) to IP addresses. This function is configured in
the Host Table menu.
To configure host resolution:
1.
In the Network
menu, check the Host Table
radio button. The
Network
menu displays the Add
Host fields and the Host Table.
2.
In the IP Address field, enter the IP Address of the machine that will be mapped to a host
name.
3.
In the Host Name field, enter the host name or Fully Qualified Domain Name of the machine.
For example, enter
mycomputer
or
www.netgear.com
. Do not enter names with spaces or
other non-alphanumeric characters such as apostrophes or commas.
4.
In the optional
Alias field, enter the host alias. For example, if you entered the FQDN
www.netgear.com
in the
Host Name field, then you can enter a shorter name, such as
www
or
web
in the Alias field.
5.
Click Apply.
Note:
To add additional local subnets that can directly connect to the ProSafe SSL
VPN Concentrator 25 device, define the Destination Network address, the
Subnet Mask, and the Interface, but leave the Gateway Address field blank.
Note:
The SSL VPN Concentrator can act as a NetBIOS client to learn local network host
names and their corresponding IP addresses.
Page 95 / 120
NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
Additional System Configuration
7-7
v1.1, November 2006
The new Host appears in the Host Table
.
The Host Table displays a list of the configured host
names and the corresponding IP addresses.
Configuring DNS Settings
The DNS Settings menu allows the administrator to configure the hostname and DNS server
addresses.
The DNS server configuration is required
.
To configure the hostname and DNS settings:
1.
In the Network menu, check the DNS Settings
radio button. The Network menu displays the
fields for entering the DNS Settings.
Figure 7-4

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top