System information
150 Chapter 9 Customizing Services
To change the IP address range for VPN service:
1 In the VPN pane of Server Preferences, change the rst IP address in the range, the last
IP address in the range, or both.
The range of addresses needs to be large enough for the maximum number of remote
computers that will have concurrent VPN connections. VPN service assigns an IP
address to a remote computer for the duration of a VPN connection, and reclaims the
address when the remote computer disconnects.
2 If you have an AirPort Base Station or other Internet router (gateway) that provides
DHCP service, you may need to adjust its IP address range so that the DHCP and VPN
address ranges don’t overlap.
To congure an AirPort Base Station, use AirPort Utility (in /Applications/Utilities/). For
information about changing the settings of an Internet router, see its documentation.
The IP address that VPN service assigns to a remote computer for its VPN connection
doesn’t replace the IP address that the remote computer is already using to connect to
the Internet. The remote computer keeps this IP address and any other IP addresses it’s
using, and adds the IP address assigned to it for VPN.
Providing VPN Service Through an Internet Router
If your server provides VPN service through an AirPort Extreme Base Station, a Time
Capsule, or a network router congured to share an Internet connection, and users’
computers need to make VPN connections through their own base stations or home
routers, your server must be on a dierent IP subnet than the VPN users’ home
computers. To avoid this conict, make sure your server’s IP address doesn’t begin with
the same three numbers—such as 10.0.1 or 192.168.1—as IP addresses on VPN users’
home networks.