D-Link 800 - DFL 800 - Security Appliance, User Manual

Page: 351 / 469

An IP pool is a cache of IP addresses collected from DHCP servers and leases on these addresses are
automatically renewed when the lease time is about to expire. IP Pools also manage additional
information such as DNS and WINS/NBNS, just as an ordinary DHCP server would. (For detailed
information on pools see Section 5.5, “IP Pools”.)
Defining the Config Mode Object
Currently only one Config Mode object can be defined in NetDefendOS and this is referred to as the
Config Mode Pool object. The key parameters associated with it are as follows:
Use Pre-defined IP Pool Object The IP Pool object that provides the IP addresses.
Use a Static Pool
As an alternative to using an IP Pool, a static set of IP
addresses can be defined.
DNS The IP address of the DNS used for URL resolution (already
provided by an IP Pool).
NBNS/WINS The IP address for NBNS/WINS resolution (already provided
by an IP Pool).
DHCP Instructs the host to send any internal DHCP requests to this
address.
Subnets A list of the subnets that the client can access.
Example 9.7. Setting Up Config Mode
In this example, the Config Mode Pool object is enabled by associating with it an already configured IP Pool
object called ip_pool1.
Web Interface
1. Go to Objects > VPN Objects > IKE Config Mode Pool
2. The Config Mode Pool object properties web page now appears
3. Select Use a pre-defined IPPool object
4. Choose the ip_pool1 object from the IP Pool drop-down list
5. Click OK
After defining the Config Mode object, the only remaining action is to enable Config Mode to be
used with the IPsec Tunnel.
Example 9.8. Using Config Mode with IPsec Tunnels
Assuming a predefined tunnel called vpn_tunnel1 this example shows how to enable Config Mode for that tunnel.
Web Interface
• Go to Interfaces > IPsec
• Select the tunnel vpn_tunnel1 for editing
• Select IKE Config Mode drop down list
• Click OK
9.4.3. Roaming Clients Chapter 9. VPN
351