Getting Started With VPN Settings in Access Server
The VPN Settings page allows you to configure options like IP address networks, routing, split tunneling, and DNS settings.
The VPN Settings page in the Admin Web UI allows you to configure essential network options, such as dynamic or static IP address assignments, routing or Network Address Translation (NAT), split tunneling, and DNS settings.
This guide provides an introductory overview of these settings to help you get started. For in-depth information, refer to the VPN Settings section of the Admin Web UI User Manual.
Dynamic and static IP address networks
Access Server dynamically assigns IP addresses to users by default, similar to an internal DHCP system. The default subnet for new servers is 172.27.224.0/20, but you can modify this by adjusting the Network Address and Netmask bits fields.
Dynamic IP addresses change with each session. When users connect, they are assigned an available IP address within the subnet, which may vary between connections.
Avoid assigning the same IP and subnet to your VPN if your internal network uses a subnet (e.g., 192.168.0.0/16). Use the Static IP Address Network along with the User Permissions page for users requiring a static IP address.
Find more details on IP addresses here: Static IP Address.
Routing and network address translation (NAT)
You can configure remote user access to private subnets in the Routing section. Depending on your network needs, this can be achieved using either NAT or routing.
NAT works best for simpler setups, using the Access Server's host IP as the source address for VPN client traffic destined for private subnets.
Routing is more advanced and offers additional options, such as "Allow access from these private subnets to all VPN client IP addresses."
For more, see:
Split tunneling
Split tunneling controls whether all internet traffic or only private subnet traffic is routed through the VPN.
To enable split tunneling, set "Should client internet traffic be routed through the VPN?" to No. Then, you will need to define the private subnets your clients need access to.
For more, refer to Understanding How Split Tunneling Works with Access Server.
DNS settings
You can configure specific DNS servers for clients in the DNS Settings section. This feature is handy if you manage private DNS servers for added security or easier access to internal systems.
Set "Have clients use specific DNS servers" to Yes, and enter the addresses of your preferred DNS servers.
For more, see:
Additional steps
You've reviewed key configuration settings for your VPN. You can also consider setting up a hostname and adding users, as well as security steps: