Secure Mobile Access 12.5 Administration Guide

Table of Contents

Adding Static IP Address Pools

To add a static IP address pool

  1. In the AMC, navigate to System Configuration > Services.

  2. In the Access Services section, under Network tunnel service area, Configure. The Network Tunnel Service page displays.

  3. In the IP Address Pools section, click the + (New) icon. The IP Address Pool page displays.

    In dual-stack mode, each address pool includes both IPv4 and IPv6 addresses. Remember, the IPv6 range cannot exceed 65535 addresses. When you add an IPv4 or IPv6 range, the user interface automatically calculates the end address if you provide only the starting address and subnet mask/prefix. This end address will ensure the total does not go over 65535 addresses.

  4. In the Name field, type a name for the address pool.

  5. In the Description field, type a descriptive comment about the address pool.

  6. Click Routed address pool - static, and then click New.

  7. Specify the IP address or addresses to make available to the tunnel clients. Type IP addresses and subnet masks using dotted decimal form (n.n.n.n).

    • To define a single host, type an IP address and a Subnet mask/Prefix of 255.255.255.255.

    • To specify a range of IP addresses, type the beginning address in the IP address field and the ending address in the IP range end field, and specify a Subnet mask/Prefix.

    • To define an entire subnet, type the network address in the IP address field and fill in the Subnet mask/Prefix field. The subnet mask is converted to a range and values are filled in as appropriate. If the IP address of the subnet is entered, it is converted to the first usable address in the network, but addresses in the middle of the subnet are used as is. The ending address is filled in with the highest usable address in the subnet.

      You can configure IPv4 and IPv6 addresses regardless of the current network configuration. However, warning appears indicating that pool ranges may be ignored if the addresses are not compatible with the IP address of the internal interface.

  8. Click OK. The pool is added to the list of available IP address pools.

  9. (Optional) To change the virtual interface settings for configuring the client interface, click to expand the Advanced area. The Virtual interface settings are preconfigured with the DNS server, WINS server, and Search domains as defined on the Network Settings page. (For more information, see Configuring Basic Network Settings.) To change these settings, select the Customize default settings checkbox and then specify custom values for any settings that you want to change.

  10. (Optional) You can request a specific subnet for a DHCP address using Option 118, as defined in RFC 3011. If the DHCP server does not support this option, it will ignore the request. To request an address in a specific subnet, enter an address within that subnet.

  11. Click Save.