Quick Reference Guide

106 | Chapter 6: Virtual Private Networking Using SSL
New Template Style Guide Reference Manual
4. Click Add. The “Operation Succeeded” message appears at the top of the tab, and the
new application entry is listed in the List of Configured Applications for Port
Forwarding table.
5. Repeat this process to add other applications for use in port forwarding.
Adding A New Host Name
Once the server IP address and port information has been configured, remote users will be
able to access the private network servers using Port Forwarding. As a convenience for
users, you can also specify host name to IP address resolution for the network servers. Host
Name Resolution allows users to access TCP applications at familiar addresses such as
mail.example.com or ftp.example.com rather than by IP addresses.
To add a host name for client name resolution:
1. Select the Port Forwarding tab, shown in the previous section “Adding Servers” on
page 105.
2. If the server you want to name does not appear in the List of Configured Applications
for Port Forwarding table, you must add it before you can rename it.
3. In the Add New Host Name for Port Forwarding section of the screen, enter the IP
address of the server you want to name.
4. In the Fully Qualified Domain Name field, enter the full server name.
5. Click Add. The “Operation Succeeded” message appears at the top of the tab, and the
new entry is listed in the List of Configured Host Names. for Port Forwarding table.
Remote users can now securely access network applications once they have logged into the
SSL VPN portal and launched Port Forwarding.
Configuring the SSL VPN Client
The SSL VPN Client within the network storage will assign IP addresses to remote VPN
tunnel clients. Because the VPN tunnel connection is a point-to-point connection, you can
assign IP addresses from the corporate subnet to the remote VPN tunnel clients.
Some additional considerations are:
• So that the virtual (PPP) interface address of a VPN tunnel client does not conflict with
addresses on the corporate network, configure an IP address range that does not directly
overlap with addresses on your local network. For example, if 192.168.1.1 through
192.168.1.100 are currently assigned to devices on your local network, then start the
client address range at 192.168.1.101 or choose an entirely different subnet altogether.
• The VPN tunnel client cannot contact a server on the corporate network if the VPN tunnel
client’s Ethernet interface shares the same IP address as the server or the <Product
Name> (for example, if your laptop has a network interface IP address of 10.0.0.45, then
you will not be able to contact a server on the remote network that also has the IP
address 10.0.0.45).