User`s guide

Chapter 10 IPSec VPN Config Screens
LAN-Cell 2 User’s Guide
233
Figure 138 Overlap in a Dynamic VPN Rule
192.168.1.0/24 0.0.0.0
• Enabling the VPN Global Setting option box Do not apply VPN Rules to
overlapped local and remote address ranges causes the LAN-Cell check if a
packet’s destination is also at the local network before forwarding the packet. If it is,
the LAN-Cell sends the traffic to the local network.
• Disabling the option box disables the checking for local network IP addresses and
sends traffic for all overlapping addresses to the remote network. This will disable
your ability to access the LAN-Cell from the local subnet.
IP Alias
You could have an IP alias network that overlaps with the VPN remote network (see Figure
139). For example, you have an IP alias network M (10.1.2.0/24) in LAN-Cell X’s LAN. For
the VPN rule, you configure the VPN network as follows.
• Local IP address start: 192.168.1.1, end: 192.168.1.254
• Remote IP address start: 10.1.2.240, end: 10.1.2.254
• IP addresses 10.1.2.240 to 10.1.2.254 overlap.
Figure 139 Overlap in IP Alias and VPN Remote Networks