SonicWALL SMA - Page 37

SonicWallSMAConnectTunnel12.0DeploymentPlanningGuide
CommonVPNConfigurations
37
2 ClickConfigure.TheNetworkTunnelClientSettingspageisdisplayed.
3 ClickEditnexttoAddresspools.
4OntheAddressPoolspage,clickNew.
5IntheNamefield,enteralabelfortheIPaddresspoolthatwi llbeusedtoallocateaddressestothe
networktunnelclients.
6Thereareseveral
waystospecifyanaddresspool.Ifyou’renotsurewhichonetochoose,select
Translatedaddresspool(SourceNAT)sothattheappliancewillassignnon‐routableIPaddressesto
clientsanduseSourceNATtotranslatethemtoasingleaddress.Thedrawbackisthatapplicationsthat
requirereverse
connections,suchasVoIPoractive‐modeFTP,maynotfunctionproperly.
7 ClickSave.TheaddresspoolappearsintheAddressPoolslist.
8 Selectthecheckboxnexttotheaddresspoolyoujustconfigured.
9 ClickSave.
10 ClickOK.YoushouldnowbebackontheConfigureCommunity‐AccessMethodspage.
11 ClickNexttodefinethezoneoftrustforemployees.GotoCreatingZonesofTrustonpage31.
ConfiguringEndPointControlforEmployees
ConfiguretheEmployeescommunitytousethezoneoftrustyouconfiguredin CreatingaStandardZonefor
TrustedUsersonpage32.(Theconditionsyousetinarealdeploymentwillofcoursebedifferent—thisisjusta
demonstrationofhowEPCworks.)
TospecifytheTrustedzoneforEmployees:
1IntheStandardzoneslist,selectthecheckboxnexttoTrustedandthenclicktherightarrow(>>)button.
ItisnowintheInuselist.
2UnderZonefallbackoptions,clickPlaceintoquarantinezoneandthenselectUntrustedfromthe
drop‐downmenu.
3 ClickNexttoselectWorkPlace
appearancesettingsforemployees.