Figure 206 - Tunneling— RoutingUse the Routing Table to specify policy based on routing into the VPN tunnel. Each routing tableentry has a destination, network mask, and default gateway.1. Click New and update the following parameters.n Destination— Specify the destination network to be routed into the VPN tunnel.n Netmask— Specify the network mask of the network to be routed into the VPN tunnel.n Gateway— Specify the gateway to which traffic should be routed. This IP address shouldbe the ‘controller-ip’ of the controller on which the VPN connection is terminated. See"Controller Configuration for VPN" on page 277 for more information.2. Click Next to continue.3. The DHCP Server window appears. Use this table to define DHCP pools of different typesbased on your deployment modes as described in the following section.DHCP Server ConfigurationThe Virtual Controller (VC) on an W-Instant AP enables different DHCP pools (variousdeployment models) in addition to allocating IP subnets to each branch. The following modes ofDHCP server are supported:l Local Subnet— In this mode, the VC assigns an IP address from a configured subnet andforwards traffic to both corporate and non-corporate destinations. This is achieved byappropriately translating the network address (NAT) and forwarding the packet through theIPSec tunnel or through the uplink.l L2 Switching Mode— In this mode, W-Instant supports the following two types to supportL2 switching mode of connection to corporate:n Distributed L2— In this mode, the VC assigns an IP address from a configured subnetand forwards traffic to both corporate and non-corporate destinations. The VC adds theVLAN configured in this subnet to the controller VLAN multicast table enabling the L2subnet to act as an extension of the VLAN on the controller. Corporate traffic is sent onthe IPSec tunnel and non-corporate traffic is sent on the uplink.Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 263 | VPN Configuration
