Configuring a separate IP Subnet for GVC Clients
03/26/2020 
306 
12862
DESCRIPTION:
This article describes a method to configure the SonicWall DHCP Server with an IP range not part of any interface in the SonicWall, to lease IP addresses only to GVC clients.
Normally GVC clients are configured to be assigned an IP address from the LAN (X0). In this method both the GVC clients and the LAN hosts will be in the same subnet. However, in certain cases there could be a requirement where the GVC clients be separated from the LAN subnet. This could be achieved by assigning GVC clients IP addresses not part of any interface configured in the SonicWall.
RESOLUTION:
To achieve the configuration above, please follow the steps below:
Configuring the DHCP Server:
- Click Network | DHCP Server | ADD DYNAMIC
NOTE: Make sure that this range has not been used in any of the interface of the SonicWall or has route to it.
Configuring the WAN GroupVPN settings:
Configuring DHCP over VPN
- Click VPN | DHCP over VPN | Central Gateway | Configure
- Tick the checkboxes:
- Use the Internal DHCP Server
- Set Relay IP Address (Optional): 10.10.100.1 which is the gateway in the DHCP scope created above.
Creating User / Users
- Create a local user under Users | Local Users & Groups | Local Users
- Click Add
- Assign Lan Subnets under VPN Access.
How to Test:
From a remote location connect to the SonicWall using the GVC client. After getting connected you will obtain an ip address from the range 10.10.100.2 to 10.10.100.30. Try to ping a host on the LAN.
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
To achieve the configuration above, please follow the steps below:
Configuring the DHCP Server:
- Click MANAGE | Network | DHCP Server | ADD DYNAMIC
NOTE: Make sure that this range has not been used in any of the interface of the SonicWall or has route to it.
Configuring the WAN GroupVPN settings:
Configuring DHCP over VPN
- Click MANAGE | VPN | DHCP over VPN | Central Gateway | Configure
- Tick the checkboxes:
- Use the Internal DHCP Server
- Set Relay IP Address (Optional): 10.10.100.1 which is the gateway in the DHCP scope created above.
Creating User / Users
- Create a local user under MANAGE | Users | Local Users & Groups | Local Users
- Click Add
- Assign Lan Subnets under VPN Access.
How to Test:
From a remote location connect to the SonicWall using the GVC client. After getting connected you will obtain an ip address from the range 10.10.100.2 to 10.10.100.30. Try to ping a host on the LAN.
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Capture Security applianceAdvanced Threat Protection for modern threat landscape
Network Security ManagerModern Security Management for today’s security landscape
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
