To whom it may concern:

 

The guide posted on the Support page (
http://www.shrew.net/support/wiki/HowtoAdtran) suggests that users
configure the VPN Selectors in the Netvanta as <Private Internal Subnet>
to "Any":

 

 

 

This is incorrect and will break all Internet access for the internal
subnet because the traffic would be "allowed"; the router thinks that
Internet traffic should be sent to the VPN client, instead of "Source
NAT'd" as it should be. The correct configuration of the VPN Selectors
should be one of the following:

 

(a)     <Private Internal Subnet> to <VPN Client Subnet>

a.       Following the guide this would be 10.1.2.0/24 to 10.2.27.0/24

(b)     Any to <VPN Client Subnet>

a.       Following the guide this would be "Any" to 10.2.27.0/24

 

Please update the guide posted on the Shrew Support Page.

 

Best regards,

 

Adam Ackerman

ADTRAN Netvanta Tech Support

<<image001.jpg>>

_______________________________________________
vpn-help mailing list
[email protected]
http://lists.shrew.net/mailman/listinfo/vpn-help

Reply via email to