On 7/30/2010 3:12 PM, ADAM ACKERMAN wrote:
To whom it may concern:
The guide posted on the Support page
(http://www.shrew.net/support/wiki/HowtoAdtran) suggests that users
configure the VPN Selectors in the Netvanta as <Private Internal Subnet>
to “Any”:
This is incorrect and will break all Internet access for the internal
subnet because the traffic would be “allowed”; the router thinks that
Internet traffic should be sent to the VPN client, instead of “Source
NAT’d” as it should be. The correct configuration of the VPN Selectors
should be one of the following:
(a) <Private Internal Subnet> to <VPN Client Subnet>
a. Following the guide this would be 10.1.2.0/24 to 10.2.27.0/24
(b) Any to <VPN Client Subnet>
a. Following the guide this would be “Any” to 10.2.27.0/24
Please update the guide posted on the Shrew Support Page.
Best regards,
Thanks Adam. I just updated the howto so the example matches your first
suggestion.
-Matthew
_______________________________________________
vpn-help mailing list
[email protected]
http://lists.shrew.net/mailman/listinfo/vpn-help
