Configuring the Network Tunnel Service
The network tunnel service controls access from the Connect Tunnel client, the OnDemand Tunnel agent, and
the Mobile Connect agent. In order to deploy the network tunnel clients to users, you must first make one or
more IP address pools available to the community. Configuring the network tunnel service requires setting up IP
address pools that are used to allocate IP addresses to the clients; these IP addresses become the clients’ end
points on VPN connections.
Network tunnel service configuration also allows you to enable Web resource filtering so that you can enforce
the same URL-based rules that administrators define for ExtraWeb in tunnel sessions. Web resource filtering
also allows you to leverage single sign-on functionality when accessing Web applications.
You can add custom connections to configure Connect Tunnel to access a different default appliance or realm, or
list other appliances and realms the client can connect to. By default, Connect Tunnel is configured to access the
realm and appliance from which it was downloaded.
To configure the network tunnel service
In the AMC, navigate to System Configuration > Services.
In the Access Services section, under Network tunnel service area, Configure.
The Network Tunnel Service page displays.
- In the IP Address Pools area, create one or more IP address pools. For more information, see Configuring IP Address Pools.
- To enable and configure Web resource filtering, click Edit in the Web resource filtering area. For more
information, see Configuring Web Resource Filtering.
- To configure a custom connection in which Connect Tunnel can access the current or a different default
appliance or realm, or list other appliances and realms the client can connect to, click the New button in
the Custom Connections area. For more information, see Configuring Custom Connections.
Was This Article Helpful?
Help us to improve our support portal