Like every other website on the planet, SmallNetBuilder uses cookies. Our cookies track login status, but we only allow admins to log in anyway, so those don't apply to you. Any other cookies you pick up during your visit come from advertisers, which we don't control.
If you continue to use the site, you agree to tolerate our use of cookies. Thank you!

Router Charts

Click for Router Charts

Router Ranker

Click for Router Ranker

NAS Charts

Click for NAS Charts

NAS Ranker

Click for NAS Ranker

More Tools

Click for More Tools

LAN & WAN Reviews

Installation/Configuration - more

Now we're ready to add a user to the SSL312. Click the Users and Groups link underneath the Access Administration heading. In the Users and Groups screen, click Add User. Refer to Figure 10. Fill in the information for any new users you may want to add at this point. You will use one of the user accounts to login in to the VPN portal later.

SSL312 - Administration - Users and Groups (click image to enlarge)

Figure 10: SSL312 - Administration - Users and Groups (click image to enlarge)

To specify how the SSL312 connects to the network, click the VPN Tunnel link underneath the Access Administration heading. The VPN Tunnel Client screen appears.

SSL312 - Administration - VPN Tunnel (click image to enlarge)

Figure 11: SSL312 - Administration - VPN Tunnel (click image to enlarge)

Notice the client address range start and client address range end. Those addresses represent the pool of addresses that will be available for assignment for the PPP connection that are made when we start the VPN tunnel. The range of numbers must not overlap with the network that we wish to connect to.

For example, if our network starts at 192.168.1.1, we would need to choose another unused subnet like 192.168.250.1 - 192.168.250.254. We will also need to add the route for the VPN tunnel client. Refer to Figure 11, which shows that I added the 192.168.0.x network so that the 192.168.250.x network could communicate with it.

VERY IMPORTANT: You will also need a static route set up in the firewall/router for the 192.168.250.x network (or the client network range you have configured) that points to the IP address of the SSL312. In my case, I needed a static route set up in such a way that any 192.168.250.x traffic is routed to the SSL312 gateway at 192.168.0.25. Without the static route back to the SSL312 from our firewall/router, packets may become lost and cause the VPN tunnel not to work correctly.

Also, be sure and take the time to confirm that port 443 (HTTPS) can be reached externally from the internet to the SSL312. Most firewalls/routers will need a rule set up to allow traffic from the outside (i.e. internet) to come inside the network to the SSL312. The procedure for doing this varies greatly depending on the kind of firewall/router and the design of your network. Save yourself some headaches and frustration by taking the time now to ensure that this level of connectivity is functioning correctly.

More LAN & WAN

Wi-Fi System Tools
Check out our Wi-Fi System Charts, Ranker and Finder!

Support Us!

If you like what we do and want to thank us, just buy something on Amazon. We'll get a small commission on anything you buy. Thanks!

Over In The Forums

Hi, I am new to Merlin firmware. Used to have RT-N16 on Asus firmware which was working pretty well for almost 10 years. Now, with new AC88U flashed w...
I currently have Xfinity Gigabit Internet. I use the Xfinity router with Wi-Fi off and a Apple Airport extreme plugged into the Xfinity to extend the ...
Which Asus routers use the same power adapters? I would be helpful to have a list with part numbers. For example, I know that the RT-AC66U B1 and the ...
Hello,Came across this firmware today regarding the adblock.My current router is Asus RT-AC55UHP, is there any way I will be able to use merlin's firm...
We just had a 300 mbps Internet service installed in our home, and my desktop routinely registers average speeds of 315 mbps. Needless to say, I'm ver...

Don't Miss These

  • 1
  • 2
  • 3