Description:

The Advanced VPN Client generally obtains its IP parameters from the dial-in router via IKE Config Mode. For that purpose a dial-in address range has to be configured in the router.

The amount of connected VPN clients is limited to the amount of available IP addresses. If the configured dial-in address range is too small, the remaining VPN clients cannot establish a VPN connection to the router.

This article describes how to change the dial-in address range for IKEv1 as well as IKEv2.

This description also applies to VPN clients of other manufacturers, which use the IKE Config Mode.


Requirements:


Procedure:

The dial-in address range for IKEv1 and IKEv2 has to be configured in different menus.

The dial-in address ranges for IKEv1 and IKEv2 must not overlap with the DHCP address range. Otherwise the overlapped range cannot be used by the DHCP server.

Also the dial-in address ranges for IKEv1 and IKEv2 must not overlap each other, as otherwise a duplicate address assignment can occur! 


IKEv1:

1. Open the configuration of the router in LANconfig and go to the menu IPv4 → Addresses

2. Adapt the dial-in address range to your needs via the First address and Last address.

Use IP addresses from a network configured locally in the router (e.g. INTRANET). 

The fields belonging to Name server addresses aren't related to the dial-in parameters, but these are global parameters!



IKEv2:

1. Open the configuration of the router in LANconfig and go to the menu  VPN → IKEv2/IPSec → IPv4 addresses.

2. Edit the existing profile and adapt the dial-in address range to your needs via the First address and Last address

Use IP addresses from a network configured locally in the router (e.g. INTRANET).