Add a range of IP
addresses to assign to the tunnel interface on satellites upon establishment
of the VPN tunnel. You can specify IPv6 or IPv4 addresses.
The
IP pool must be large enough to support all concurrent connections.
IP address assignment is dynamic and not retained after
the satellite disconnects. Configuring multiple ranges from different
subnets will allow the system to offer satellites an IP address
that does not conflict with other interfaces on the satellites.
The
servers and routers in the networks must route the traffic for this
IP pool to the firewall. For example, for the 192.168.0.0/16 network,
a satellite can be assigned the address 192.168.0.10. If you
are using dynamic routing, make sure that the IP address pool you
designate for satellites does not overlap with the IP addresses you
manually assigned to the tunnel interfaces on your gateways and satellites. |