Is SNAT based IP Address Pool recommended for Tunnel Client deployment?

Description

What are the recommended IP Address Pool types that could be assigned for Tunnel users?


Resolution

SonicWall Recommends to use  IP Pools distributed either using 

  • DHCP Server  -Which should be routable to internal interface of the appliance.
  • User-Mapped addressed pool  configured with help of Radius Authentication.
  • Routed Address Pool -Static.

Type of IP Pool

Note: 

1) SonicWALL does not recommend SNAT based IP Pool address for Tunnel Users in their production deployments for remote users on any firmware version.

2) SNAT based IP Pool deployments impact appliance stability, performance, as well as adds overhead in retrieving user information.

3) Warning as above have been introduced in firmware version 12.3 or later.   

 


Related Articles

  • SMA100 End of Support No-Charge Replacement FAQ
    Read More
  • SMA1000: Post upgrade to 12.5.0 on AWS and Azure, we show the error Could not retrieve the DNS settings once we log in to AMC/CMS console
    Read More
  • Firmware version required to upgrade to version 12.5.0.
    Read More
not finding your answers?