Page 14
To set your NetExtender address range, perform the following steps:
1. Select the
NetExtender > Client Addresses
page.
2. Enter an address range for your clients in the
Client Address Range Begin
and
Client Address Range End
fields.
Note:
If you have too few available addresses to support your desired number of
concurrent NetExtender users you may use a new subnet for NetExtender. This
condition might occur if your existing DMZ or LAN is configured in NAT mode with a
small subnet space, such as 255.255.255.224, or more commonly if your DMZ or LAN is
configured in Transparent mode and you have a limited number of public addresses from
your ISP.
In either case, you may assign a new, unallocated IP range to NetExtender (such as
192.168.10.100 to 192.168.10.200) and configure a route to this range on your gateway
appliance.
For example, if your current Transparent range is 67.115.118.75 through 67.115.118.80,
and you wish to support 50 concurrent NetExtender clients, configure your SSL-VPN X0
interface with an available IP address in the Transparent range, such as 67.115.118.80,
and configure your NetExtender range as 192.168.10.100 to 192.168.10.200. Then, on
your gateway device, configure a static route to 192.168.10.0/255.255.255.0 using
67.115.118.80.
Scenario A
192.168.200.100
to
192.168.200.200
(default range)
Scenario B
An unused range within your
DMZ subnet.
Scenario C
An unused range within your
LAN subnet.
5
