Draytek Vigor 2950 Setup Guide download pdf (Page 25)

Appendix

The Role of the Local Address in VPN Tracker

The local address is the IP address that your Mac uses in the remote network when connected through VPN. If the Local Address

field is left empty, the Mac’s actual local IP address (as shown in System Preferences > Network) is used

When to Set the Local Address in VPN Tracker

Always use a fixed Local Address if

‣

multiple clients (users/computers) use the VPN

‣

the DrayTek device is not the default gateway (router) in the remote network

Choosing the Local Address

When connecting to a DrayTek device, the Local Address must not be part of the remote network (i.e. the DrayTek’s LAN) and the

same Local Address may not be used by two VPN clients at the same time. If there is only a single user of the VPN, this will often

automatically be the case if the Local Address field is simply left empty, and VPN Tracker therefore uses the Macs local IP address.

However, in all other circumstances, you should configure a specific address.

Example:The DrayTek’s LAN in this example is the network 192.168.13.0/24

(= 192.168.13.0/255.255.255.0). Choose an arbitrary private network that is not

part of this network, such as 10.22.13.0/24, and manually assign each user of

the VPN a different IP address from that network to be used as the Local

Address in VPN Tracker.

Advanced Users The Local Address is used as the endpoint of the IPsec Security Association (SA) on the VPN Tracker side that is

established in phase 2 of the connection process.

User

IP Address

alice

10.22.13.1

bob

10.22.13.2

charlie

10.22.13.3

...

10.22.13._

1 2 ... 20 21 22 23 24 25 26

No comments

Draytek Vigor 2950 Setup Guide Page 25