NETGEAR ProSAFE SRX5308 - Page 250

VPN Mode Configuration Commands
250
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
vpn sslvpn client ipv6
This command configures the SSL client IP address range. After you have issued the vpn
sslvpn client ipv6 command, you enter the vpn-config [sslvpn-client-ipv6-settings]
mode, and then you can configure one keyword and associated parameter or associated
keyword at a time in the order that you prefer.
Command example:
SRX5308> vpn sslvpn client ipv6
vpn-config[sslvpn-client-ipv6-settings]> enable_full_tunnel N
vpn-config[sslvpn-client-ipv6-settings]> begin_client_address 4000::1000:2
vpn-config[sslvpn-client-ipv6-settings]> end_client_address 4000::1000:50
vpn-config[sslvpn-client-ipv6-settings]> save
Related show command: show vpn sslvpn client
Step 1 Format vpn sslvpn client ipv6
Mode vpn
Step 2 Format enable_full_tunnel {Y | N}
begin_client_address <ipv6-address>
end_client_address <ipv6-address>
Mode vpn-config [sslvpn-client-ipv6-settings]
Keyword Associated Keyword to
Select or Parameter to Type
Description
enable_full_tunnel Y or N Enables or disables full-tunnel support:
• Yes. Enables full-tunnel support.
• No. Disables full-tunnel support and enables
split-tunnel support. If you enable split-tunnel
support and you assign an entirely different
subnet to the VPN tunnel clients from the
subnet that is used by the local network, you
need to add a client route to ensure that a VPN
tunnel client connects to the local network over
the VPN tunnel (see the vpn sslvpn route add
command).
begin_client_address ipv6-address The start IP address of the IPv6 client range. The
default address is 4000::1.
end_client_address ipv6-address The end IP address of the IPv6 client range. The
default address is 4000::200.