Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

SecureClient / VPN Domain question

2 views
Skip to first unread message

part1...@yahoo.com

unread,
Feb 7, 2007, 4:27:35 PM2/7/07
to
My company was recently bought by another company so I had to switch
IP schemes. The scheme they are using is 10.0.0.0/255.0.0.0 and that
is what I have defined as my VPN domain on my firewall. Now when
SecureClients are on a 10. network they can not authenticate or access
network resources.

I was thinking of making the VPN domain a smaller network range but
that would stop the SecureClients from communicating with other parts
of the network. My network segment is actually 10.170.4.0/22 but
SecureClients would need to communicate with several other 10.
networks (10.160, 10.150, ect..)

Can anyone give me an idea on how this might be setup?

Thanks,
Dan

Mr.U

unread,
Feb 8, 2007, 4:51:33 AM2/8/07
to
Use a feature called "Office Mode"

JJ

unread,
Feb 8, 2007, 10:16:26 PM2/8/07
to
Office Mode and dynamic interface resolving will do the trick. If there's
not that many 10. networks, you should just define the ones you use anyway.

Ray

<part1...@yahoo.com> wrote in message
news:1170883655.6...@s48g2000cws.googlegroups.com...

part1...@yahoo.com

unread,
Feb 12, 2007, 4:53:43 PM2/12/07
to
On Feb 8, 10:16 pm, "JJ" <j...@jay.com> wrote:
> Office Mode and dynamic interface resolving will do the trick. If there's
> not that many 10. networks, you should just define the ones you use anyway.
>
> Ray
>
> <part11c...@yahoo.com> wrote in message

>
> news:1170883655.6...@s48g2000cws.googlegroups.com...
>
>
>
> > My company was recently bought by another company so I had to switch
> > IP schemes. The scheme they are using is 10.0.0.0/255.0.0.0 and that
> > is what I have defined as my VPN domain on my firewall. Now when
> > SecureClients are on a 10. network they can not authenticate or access
> > network resources.
>
> > I was thinking of making the VPN domain a smaller network range but
> > that would stop the SecureClients from communicating with other parts
> > of the network. My network segment is actually 10.170.4.0/22 but
> > SecureClients would need to communicate with several other 10.
> > networks (10.160, 10.150, ect..)
>
> > Can anyone give me an idea on how this might be setup?
>
> > Thanks,
> > Dan- Hide quoted text -
>
> - Show quoted text -

I am using Office Mode which is set to a 192.168.123.0/255.255.255.0
network. I did some testing in my test environment and from my home
network and found that any time I set my client IP range to 10.
anything it doesn't work. It won't even authenticate let alone get a
Office Mode address.

Dan

Mr.U

unread,
Feb 13, 2007, 5:11:04 AM2/13/07
to
Have you used: dynamic interface resolving as JJ told you?

0 new messages