How to configure SMA NetExtender clients based on dynamic IP address DHCP scope

03/26/2020 35 People found this article helpful 214,843 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

Resolution

• Login to SMA's GUI
• NetExtender
• Client Settings
• Client Address Range
• Client Address Pool Settings
• Use DHCP

Select Interface: Auto, X0, X1, X2, X3, X4 (choose interface used for sending DHCP traffic out)

DHCP server (optional): (choose one if many reside your network)

Mechanism:

1. NetExtender client sends Discovery and Request packets of DORA process, base on pieces of information given by SRA - "DHCP options" are used.
   
   
2. First server, which accepts the DHCP traffic from the client is the one, which take responsibility for rest of communication.
3. Request packet does not carry information in standard bootp header, but in "DHCP options".
4. No more packets of DORA process can be observed.
5. Requested IP address by NetExtender client is used for further connection.
   
   
   NOTE: NetExtender obtains new MAC address every time it connects.

Combinations:

• Login to SRA's GUI
• NetExtender
• Client Settings
• Client Address Range
• Client Address Pool Settings
• Use DHCP

1. NetExtender sends Discovery packet of DORA process on every configured interface out:

Select Interface: Auto
DHCP server (optional):

2. NetExtender sends Discovery packet of DORA process through X0 interface only:

Select Interface: X0
DHCP server (optional):

3. NetExtender sends Discovery packet of DORA process through X0 interface only to pointed DHCP server:

Select Interface: X0
DHCP server (optional): (IP address of the DHCP server: Router/Firewall or Internal DHCP server)

In another case, you can observe error in SRA's logs:
Note: NetExtender client address range appears exhausted.

Recommendations:

1.  Internal DHCP server and SRA are in the same broadcast domain.
2. Scope of IP addresses for NetExtender clients is within subnet of internal DHCP and SRA unit.
3.  All combinations presented are recommended, but this:
   
   Select Interface: Auto
   DHCP server (optional): (IP address of the DHCP server)
   
   

Error occurs:

Related Articles

• How to deploy SMA100 series virtual appliance (SMA 500v) from one platform to another.
• SMA100:After upgrading to 10.2.1.7, began receiving nonstop alert emails stating "WAF threat prevented:
• SMA1000:When both IPv4 and IPv6 are enabled for the network interface, the first few connection attempts fail, but everything works fine after that.

Categories

• Secure Mobile Access > SMA 100 Series