Secure Mobile Access 10.2 Deployment Guide

Setting Your NetExtender Address Range

The NetExtender address range defines the IP address pool from which addresses will be assigned to remote users during NetExtender sessions. The range needs to be large enough to accommodate the maximum number of concurrent NetExtender users you wish to support.

The range should fall within the same subnet as the interface to which the SMA appliance is connected, and it must not overlap or collide with any assigned addresses if other hosts are on the same segment as the SMA appliance.

Determine the correct subnet based on your network scenario selection:

Scenario A192.168.200.100 to 192.168.200.200 (default range)
Scenario BSelect a range that falls within your existing DMZ subnet. For example, if your DMZ uses the 10.1.1.0/24 subnet, and you want to support up to 30 concurrent NetExtender sessions, you could use 10.1.1.220 to 10.1.1.249.
Scenario CSelect a range that falls within your existing LAN subnet. For example, if your LAN uses the 192.168.168.0/24 subnet, and you want to support up to 10 concurrent NetExtender sessions, you could use 192.168.168.240 to 192.168.168.249.

DHCP/DHCPv6 is supported and can manage the IPv4 and IPv6 addresses in the LAN and the NetExtender client address ranges.

To set your NetExtender address range

  1. Using Secure Mobile Access, navigate to the Clients > Settings page.
  2. Enter an address range in the Client Address Range Begin and Client Address Range End fields.
  3. Click Accept to add the Client Address Range.
Scenario A192.168.200.100 to 192.168.200.200 (default range)
Scenario BAn unused range within your DMZ subnet.
Scenario CAn unused range within your LAN subnet.

If you do not have enough available addresses to support your desired number of concurrent NetExtender users, you may use a new subnet for NetExtender. This condition may occur if your existing DMZ or LAN is configured in NAT mode with a small subnet space, such as 255.255.255.224, or more commonly if your DMZ or LAN is configured in Transparent mode and you have a limited number of public addresses from your ISP. In either case, you may assign a new, unallocated IP range to NetExtender (such as 192.168.10.100 to 192.168.10.200) and configure a route to this range on your gateway appliance.

For example, if your current Transparent range is 67.115.118.75 through 67.115.118.80, and you wish to support 50 concurrent NetExtender clients, configure your SMA X0 interface with an available IP address in the Transparent range, such as 67.115.118.80, and configure your NetExtender range as 192.168.10.100 to 192.168.10.200. Then, on your gateway device, configure a static route to 192.168.10.0, using 67.115.118.80.

Was This Article Helpful?

Help us to improve our support portal

Techdocs Article Helpful form

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.