sa3450 and sa3000 Series VPN Manager - Release 6.8.2 Release Notes

Hewlett-Packard VPN Server Appliance SA3110/SA3150/SA3400/SA3450

The DHCP information returned for the first VPN Client is:

IP Address: 10.20.1.17

Subnet Mask: 255.255.255.240

DHCP Server: 10.20.1.18

If the VPN device is configured to relay requests to a DHCP

server on an inside network, there must be a secondary IP

address that maps into the address space of the pool of

addresses that the DHCP server issues. This pool can

optionally be selected by specifying the secondary IP

defined on the red interface in the client-IP command as

follows:

remote-group test2

client-ip DHCP 2 10.20.1.18

For example, if a DHCP server is configured with two

pools of addresses:

10.1.1.1 to 10.1.1.20 mask 255.255.255.0

and

20.2.2.1 to 20.2.2.10 mask 255.255.255.240

then the VPN device must be configured with two IP

addresses, one in the 10.1.1.21-10.1.1.254 range and one in

the 20.2.2.11-20.2.2.14 range to support both subnets.

The groups would be configured as follows:

remote-group tenNetwork

client-ip DHCP 20 10.1.1.21

remote-group twentyNetwork

client-ip DHCP 10 20.2.2.11

The red interface would be configured as follows:

int e 0

mode red

ip address 10.1.1.21 mask 255.255.255.0

ip address 20.2.2.11 mask 255.255.255.240