Like every other website on the planet, SmallNetBuilder uses cookies. Our cookies track login status, but we only allow admins to log in anyway, so those don't apply to you. Any other cookies you pick up during your visit come from advertisers, which we don't control.
If you continue to use the site, you agree to tolerate our use of cookies. Thank you!

Router Charts

Click for Router Charts

Router Ranker

Click for Router Ranker

NAS Charts

Click for NAS Charts

NAS Ranker

Click for NAS Ranker

More Tools

Click for More Tools

LAN & WAN Reviews

Installation/Configuration - more

Now we're ready to add a user to the SSL312. Click the Users and Groups link underneath the Access Administration heading. In the Users and Groups screen, click Add User. Refer to Figure 10. Fill in the information for any new users you may want to add at this point. You will use one of the user accounts to login in to the VPN portal later.

SSL312 - Administration - Users and Groups (click image to enlarge)

Figure 10: SSL312 - Administration - Users and Groups (click image to enlarge)

To specify how the SSL312 connects to the network, click the VPN Tunnel link underneath the Access Administration heading. The VPN Tunnel Client screen appears.

SSL312 - Administration - VPN Tunnel (click image to enlarge)

Figure 11: SSL312 - Administration - VPN Tunnel (click image to enlarge)

Notice the client address range start and client address range end. Those addresses represent the pool of addresses that will be available for assignment for the PPP connection that are made when we start the VPN tunnel. The range of numbers must not overlap with the network that we wish to connect to.

For example, if our network starts at 192.168.1.1, we would need to choose another unused subnet like 192.168.250.1 - 192.168.250.254. We will also need to add the route for the VPN tunnel client. Refer to Figure 11, which shows that I added the 192.168.0.x network so that the 192.168.250.x network could communicate with it.

VERY IMPORTANT: You will also need a static route set up in the firewall/router for the 192.168.250.x network (or the client network range you have configured) that points to the IP address of the SSL312. In my case, I needed a static route set up in such a way that any 192.168.250.x traffic is routed to the SSL312 gateway at 192.168.0.25. Without the static route back to the SSL312 from our firewall/router, packets may become lost and cause the VPN tunnel not to work correctly.

Also, be sure and take the time to confirm that port 443 (HTTPS) can be reached externally from the internet to the SSL312. Most firewalls/routers will need a rule set up to allow traffic from the outside (i.e. internet) to come inside the network to the SSL312. The procedure for doing this varies greatly depending on the kind of firewall/router and the design of your network. Save yourself some headaches and frustration by taking the time now to ensure that this level of connectivity is functioning correctly.

More LAN & WAN

Wi-Fi System Tools
Check out our Wi-Fi System Charts, Ranker and Finder!

Support Us!

If you like what we do and want to thank us, just buy something on Amazon. We'll get a small commission on anything you buy. Thanks!

Over In The Forums

I have changed my LAN IP address to 192.168.1.1 (ASUS idiotically assigns 192.168.50.1 as default IP address after reset)So it is trying to get a cert...
All previous commands did not work. So any new command for this model?Nevermind. Found outCode: nvram erase
With my new ISP connection, i am hitting 850Mbps-920Mbps download speed on speedtest at times, but at other times between 400 and 600Mbps, all measure...
There is a client listed for my RT-AC68U that I do not recognize. I've renamed my other five devices so that I can quickly identify them in the client...
My friend is going to upgrade his system, and he's asking me for advice to do so. I have enough knowledge on router side, but for cable modem, there i...

Don't Miss These

  • 1
  • 2
  • 3