Remote SSL VPN subnet

Question

What, exactly, is this? I'm the user who wants to access our small company's network. I want to access the VPN from multiple locations, and my IP addresses are issued by ExpressVPN. So, say, I might be in a Starbucks in Miami trying to access our development environment in Seattle and the remote subnet doesn't make much sense, since when I configure an arbitrary remote VPN subnet I haven't a clue what this remote IP is. 
 This information seems necessary to create a firewall rule for VPN access so I'm not sure what IP host range I should use to create this. Since I'm new to this the nomenclature in the documentation misleads me. Any help would be appreciated. Thanks.

jprusch · Accepted Answer

William, 
 it's not that complicated: The article you linked to is written with the POV of the firewall system. 
 So "local subnet" means the network behind the firewall (the one that you want to reach with your client, of course) 
 And " remote SSL VPN range" means the IP addresses, that are to be assigned to the VPN-clients, this is just a pool of addresses for your VPN-users. You can invent the address for this pool, or use the defintion of that example there. 
 Just make sure that this "range" is not used anywhere else in your networks.

jprusch · Answer

Hello William, 
 I think you want a Client VPN access, not a site-to-site Tunnel. 
 So have a look at "Remote Access/SSL" if you want to use the Sophos-SSL VPN-Client. (which is a modified OpenVPN, btw.)

jprusch · Answer

William, what do you mean by &bdquo;get VPN to work&ldquo;? 
 You mustn&lsquo;t confuse a VPN for anonymous surfing with a VPN to privately access a remote network. Normally you can have only one Client-VPN active at a time. Not both.

Remote SSL VPN subnet

Top Replies