Management and Configuration Guide (Includes ACM xl) 2005-12

7-12 ProCurve Secure Access 700wl Series Management and Configuration Guide
Setting up Wireless Data Privacy
The fields under the IP Address Assignment tab are as follows:
Step 3. To save the settings, click Save.
VPN Tunneling and Network Address Translation
The use of VPN tunneling affects IP addressing and Network Address Translation (NAT). If PPTP or
L2TP is enabled in an Access Policy, then addressing works as follows:
• The first DHCP request is taken to be a request for an outer tunnel address, and NAT is ALWAYS
used, even if the Access Policy specifies Never for the Network Address Translation setting.
Note:
A side-effect of this behavior is that if encryption is “Allowed but not required” by the Access
Policy, and a client connects without using a tunneling protocol, that client will always be NAT’ed upon
making a DHCP request. The client will avoid being NAT’ed only if the Access Policy allows static IP
addresses, and the client actually uses a static IP address.
• The inner tunnel address is assigned in accordance with the Access Policy’s NAT setting. However,
if Real IP mode is used, the client’s IP address is assigned based on the tunneling configuration
specified here—either via the external DHCP service or from a specified address range.
Table 7-2. IP Address Assignment settings
Field Description
Method Select the method you want to use to assign inner-tunnel IP addresses from the
drop-down menu
• Select DHCP to assign the address via an external DHCP server
• Select Client IP to have the Access Controller assign the address from a
range of addresses you provide
IP Address Range If you selected Client IP, type the beginning and ending addresses of the range
you want to use into the fields provided