Question V7610 Netgear BUSINESS GATEWAY VPN pool ip address understand concept

[zillah2004]

Dear folks

https://www.telstra.com.au/content/...stra-gateway-prov7610-configuration-guide.pdf

I have got V7610 Netgear GATEWAY and I followed the attached document to setup Client to Gateway VPN page 5 and 6 says :

In the VPN remote virtual IP field, enter an IP address and mask and click Save. This is the range of IP addresses that the remote clients will be configured with when the VPN tunnel is set up. Note that this range must not be in the range of LAN IP addresses set up for the V7610 device "

I chose My gateway range of DHCP LAN ip address from 192.168.0.101-192.168.0.199

How can I assign the VPN remote virtual IP to be different from the DHCP LAN range 101-199 ??

Thx

 

[SamirD]

I've never understood how Netgear sets up their vpn client. Hopefully someone with more insight will enlighten us both.

 

[mxnerd]

Just follow what the manual says.

Chatper 3.1
The virtual remote IP can be anything in 192.168.x.x, 172.16.x.x - 172.31.x.x or 10.x.x.x range, as long as it does not conflict with what OP selected as his LAN IP range. Then create users (up to 10). When remote users connect, they will automatically get an IP address in virtual IP range.

And then jump to Chapter 3.5 for WIndows instructions.

Do exactly what the manual ask you to do.

This is an IPSEC VPN router, not an OpenVPN router.

 

[zillah2004]

Just follow what the manual says.

Thx mxned ,,,,,yes i did follow the manual and now it is working but I want to understand pools

Chatper 3.1
The virtual remote IP can be anything in 192.168.x.x, 172.16.x.x - 172.31.x.x or 10.x.x.x range, as long as it does not conflict with what OP selected as his LAN IP range. Then create users (up to 10). When remote users connect, they will automatically get an IP address in virtual IP range.

I couldn't locate the above quote under 3.1,,,,,can you please tell me which page ?

I would assume :
if my LAN within the range 192.168.x.x I need to choose virtual remote IPs in the range of 192.168.x.x
But if my LAN within the range 172.16.x.x-172.31.x.x I need to choose virtual remote IPs in the range of 172.16.x.x-172.31.x.x
And if my LAN within the range 10.x.x.x I need to choose virtual remote IPs in the range 10.x.x.x

Reason saying that then remote clients when connected to VPN should have same networks as LAN yes supposed to be different ranges if ip addresses

If my above assumption is right why in his example page 5 he assigned 192.168.16.1 ? Isn't this a unique ip address not a pool of ip addresses ?
Is there a typo ? means supposed to be 192.168.16.0/24 (without number in the last octet)

https://imgur.com/a/xA9yH24

 

[mxnerd]

192.168.x.x, 172.16.x.x - 172.31.x.x or 10.x.x.x ranges are private networks.

Private network - Wikipedia

en.wikipedia.org

You and anyone at their own home/company can use any private IP range for their LAN, the devices need to in the same 192.168.0.x or 192.168.1.x or other private IP ranges so they can communicate with each other in their own home/company.

The virtual IP range that you want to give remote user's computer however has to be in a different range since the traffic routes through public internet.

OK,

The page dispalyed 192.168.16.1 for user 1 probably is that the router ask you to assign IP individually for each remote user, then assign 192.168.16.2 for user 2 , etc.

Regarding the pool concept, you are right. A pool should be 192.168.16.0, but sometimes engineer use .1, although that's not the correct way.

The server IP (10.200.2.45) shown in the manual actually should be the public WAN IP address of your router. You can find your own public IP address by visting

What's My IP Address? Networking Tools & More

Your IP Address plus Port Scanners, Traceroute, HTTP Compression Test, Ping, Whois, DNS, IP Geo Location, Password Generator and many more tools and how-to's

www.whatsmyip.org

IP Chicken - Free Public IP Address Lookup

Discover your public IP address instantly with IP Chicken. Fast and free IP lookup service.

www.ipchicken.com

etc. or just google "what is my ip"

If you are a home user and you are getting different WAN IP address everytime you reboot the router, you need to let remote users know the new IP address.

I do not own the router, you have to test it yourself.

 

[SamirD]

This was always the problem most people would run into, including myself. A vpn client could connect and gets an IP that they can't connect to the rest of the lan with.