IP Address Pool in StoneGate SSL VPN

Transcription

1 Technical Note IP Address Pool in StoneGate SSL VPN How-To Technical Note IP Address Pool in StoneGate SSL VPN 1

2 Introduction Purpose This document details the configuration steps to implement IP Address Pool in StoneGate SSL VPN. IP Address Pool is a feature to provide connecting Windows clients with a virtual IP address from a pool configured on the SSL VPN system. This IP address is used in the Tunnel Set configuration to ensure proper use of some resources, such as Access File Share. It also allows traffic back to the connecting client from the application used. Requirements To successfully implement this configuration, you must have working knowledge of StoneGate SSL VPN technology. The minimum version that supports the IP Address Pool feature is build Technical Note IP Address Pool in StoneGate SSL VPN 2

3 Configuration Details Defining an interface for client address pools Enable the interface where you want to provide IP Address Pool functionality. Access the StoneGate SSL VPN Web Console. Select Networking > Network Configuration from the menu on the left and browse to Network Interfaces. Change the settings of Interface for client address pools to match the interface where you want to provide IP Address Pool addresses as shown below: Click Change to confirm. You are requested to restart some services: Click Restart Services to confirm. Technical Note IP Address Pool in StoneGate SSL VPN 3

4 Wait for services to restart. When you see the following confirmation, proceed to Defining an IP Address Pool. Defining an IP Address Pool Access the StoneGate SSL VPN Administration interface. Browse to Manage Resource Access and select Tunnel Sets. Select Manage Global Tunnel Set Settings. Define the IP Address Pool as shown below: The IP Address Pool can be also from different subnet than the one configured on the interface where functionality is activated, provided that routing remains consistent. Click Save to confirm and proceed to Defining a Dynamic Pool IP for the Access Point. Technical Note IP Address Pool in StoneGate SSL VPN 4

5 Defining a Dynamic Pool IP for the Access Point You must define the IP Address that is used by the Access Point to provide IP Address Pool functionality. In the StoneGate SSL VPN Administration interface, browse to Manage System -> Access Points and select the Access Point you want to edit. Note: In a mirrored configuration, this step must be repeated for each Access Point in the list. Define the IP address you want to use for provisioning client addresses from the pool you have previously defined. Note: This IP address must exist and be configured on the interface defined in section Click Save to confirm. Enabling the Dynamic IP in the Tunnel Set You must enable the Dynamic IP in Tunnel Set definition of the resource you are interested in using with IP Address Pool functionality. In the SSL VPN Administration interface, browse to Manage Resource Access -> Tunnel Sets. Select the resource you want to. Browse to Advanced Settings and select Provide IP Address. Click Save to confirm. Publish the configuration. You can now have an IP address assigned b the SSL VPN when using the configured resource. Technical Note IP Address Pool in StoneGate SSL VPN 5

6 About Stonesoft Stonesoft Corporation (NASDAQ OMX: SFT1V) is an innovative provider of integrated network security solutions to secure the information flow of distributed organizations. Stonesoft customers include enterprises with growing business needs requiring advanced network security and always-on business connectivity. StoneGate Secure Connectivity Solution unifies firewall, VPN, IPS and SSL VPN blending network security, end-to-end availability and award-winning load balancing into a unified and centrally managed system. The key benefits of StoneGate the solution include low TCO, excellent price-performance ratio and high ROI. The StoneGate Virtual Security Solutions protect the network and ensure business continuity in both virtual and physical network environments. StoneGate Management Center provides unified management for StoneGate Firewall with VPN, IPS and SSL VPN. StoneGate Firewall and IPS work together to provide intelligent defense all over the enterprise network while StoneGate SSL VPN provides enhanced security for mobile and remote use. Founded in 1990, Stonesoft Corporation is a global company with corporate headquarters in Helsinki, Finland and Americas headquarters in Atlanta, Georgia. For more information, visit Copyright July 10 Stonesoft Corporation. All rights reserved. All specifications are subject to change.