D-Link DSR-500, User Manual

Page: 109 / 213

Unified Services Router User Manual
107
Figure 68 : SSL VPN client a da pter a nd a ccess co nf igurati on
The router allows full tunnel and split tunnel support. Full tunnel mode just sends all
traffic from the client across the VPN tunnel to the router. Split tunnel mode only
sends traffic to the private LAN based on pre -specified client routes. These client
routes give the SSL client access to specific private networks, thereby allowing access
control over specific LAN services.
Client level configuration supports the following:

Enable Split Tunnel Support: With a split tun nel, only resources which are
referenced by client routes can be accessed over the VPN tunnel. With full
tunnel support (if the split tunnel option is disabled the DSR acts in full
tunnel mode) all addresses on the private network are accessible over the
VPN tunnel. Client routes are not required.

DNS Suffix: The DNS suffix name which will be given to the SSL VPN client.
This configuration is optional.

Primary DNS Server: DNS server IP address to set on the network adaptor
created on the client host. This configuration is optional.

Secondary DNS Server: Secondary DNS server IP address to set on the network
adaptor created on the client host. This configuration is optional.

Client Address Range Begin: Clients who connect to the tunnel get a DHCP
served IP address assigned to the network adaptor from the range of addresses
beginning with this IP address
Client Address Range End: The ending IP address of the DHCP range of
addresses served to the client network adaptor.