12.12.3. Configuring a VPN Network

You configure VPN networks at the vpn networks level.

To create a VPN network, use the following command:

Admin@UGOS# create vpn networks

Provide the following parameters:

Parameter

Description

name

VPN network name.

description

VPN network description.

ip-range

Range of IP addresses to be used by the clients and the server. Format: <IP_start-IP_end>.

Exclude addresses assigned to the VPN interface used with this network from the range. Do not enter network addresses or the broadcast address here.

mask

Subnet mask, e.g. 255.255.255.0.

use-system-dns

Assign DNS servers used by UserGate to the client:

  • on: use system DNS servers.

  • off: do not use system DNS servers.

dns-servers

DNS servers to pass to the client if system servers are not used.

Important! When using non-system servers, use-system-dns off is a required parameter.

Important! If not using system DNS servers, you can specify a maximum of 2 servers.

routes-ip

VPN route. Specify an IP address in the following formats: "A.B.C.D" or "A.B.C.D/m".

routes-ip-list

VPN route. Specify a group of IP addresses. For more details on creating IP address groups using CLI, see Configuring IP addresses.

To update network parameters, use the following command:

Admin@UGOS# set vpn networks <network-name>

The parameters available to update are the same as those used to add a VPN network.

To delete a VPN network, use the following command:

Admin@UGOS# delete vpn networks <network-name>

You can also delete individual parameters of a network:

Admin@UGOS# delete vpn networks <network-name> <network-configuration-name>

You can delete the following parameters:

  • dns-servers.

  • routes-ip.

  • routes-ip-list.

To display information about a VPN network, use the following command:

Admin@UGOS# show vpn networks <network-name>