Configuring a separate IP Subnet for GVC Clients

04/12/2021 396 People found this article helpful 101,508 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

This article describes a method to configure the SonicWall DHCP Server with an IP range not part of any interface in the SonicWall, to lease IP addresses only to GVC clients.

Normally GVC clients are configured to be assigned an IP address from the LAN (X0). In this method both the GVC clients and the LAN hosts will be in the same subnet. However, in certain cases there could be a requirement where the GVC clients be separated from the LAN subnet. This could be achieved by assigning GVC clients IP addresses not part of any interface configured in the SonicWall.

Resolution

To achieve the configuration above, please follow the steps below:

Configuring the DHCP Server:

• Click Network | DHCP Server | ADD DYNAMIC

NOTE: Make sure that this range has not been used in any of the interface of the SonicWall or has route to it.

• Click OK

Configuring the WAN GroupVPN settings:

• Create the following WAN GroupVPN policy under VPN | Settings as per How to Configure WAN GroupVPN for connecting with Global VPN Client
  
• Click VPN | Settings | Configure of WAN GroupVPN | Client Tab
• Set the "Virtual Adapter settings:" to DHCP Lease or DHCP Lease or Manual Configuration

• Click OK

Configuring DHCP over VPN

• Click VPN | DHCP over VPN | Central Gateway | Configure
• Tick the checkboxes: 
  • Use the Internal DHCP Server
    • For Global VPN Client
• Set Relay IP Address (Optional): 10.10.100.1 which is the gateway in the DHCP scope created above.

• Click OK

Creating User / Users

• Create a local user under Users | Local Users & Groups | Local Users
• Click Add

• Assign Lan Subnets under VPN Access.

• Click OK

How to Test:

From a remote location connect to the SonicWall using the GVC client. After getting connected you will obtain an ip address from the range 10.10.100.2 to 10.10.100.30. Try to ping a host on the LAN.

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

To achieve the configuration above, please follow the steps below:

Configuring the DHCP Server:

• Click MANAGE | Network | DHCP Server | ADD DYNAMIC

NOTE:  Make sure that this range has not been used in any of the interface of the SonicWall or has route to it.

• Click OK

Configuring the WAN GroupVPN settings:

• Create the following WAN GroupVPN policy under VPN | Settings as per How to Configure WAN GroupVPN for connecting with Global VPN Client
  
• Click MANAGE | VPN | Base Settings | Configure of WAN GroupVPN | Client Tab
• Set the "Virtual Adapter settings:" to DHCP Lease or DHCP Lease or Manual Configuration

• Click OK

Configuring DHCP over VPN

• Click MANAGE | VPN | DHCP over VPN | Central Gateway | Configure
• Tick the checkboxes: 
  • Use the Internal DHCP Server
    • For Global VPN Client
• Set Relay IP Address (Optional): 10.10.100.1 which is the gateway in the DHCP scope created above.

• Click OK

Creating User / Users

• Create a local user under MANAGE | Users | Local Users & Groups | Local Users
• Click Add

• Assign Lan Subnets under VPN Access.

How to Test:

From a remote location connect to the SonicWall using the GVC client. After getting connected you will obtain an ip address from the range 10.10.100.2 to 10.10.100.30. Try to ping a host on the LAN.

Related Articles

• How to disable TOTP for a Local User with admin privileges via CLI.
• Parserror on Event logs.
• Switch from the Policy mode to classic mode on Gen 7 appliances

Categories

• Firewalls > SonicWall NSA Series > GVC/L2TP
• Firewalls > TZ Series > GVC/L2TP
• Firewalls > SonicWall SuperMassive 9000 Series > GVC/L2TP
• Firewalls > NSa Series > GVC/L2TP
• Firewalls > NSv Series > GVC/L2TP