62 Chapter 2 Configuring serversNN46110-600Select Profiles > Groups > Edit > Connectivity and click the Address PoolName list to select the address pools used by remote users to access the VPNRouter. The list shows all pools that are defined on the VPN Router.Optionally, select New to define a new pool and enter the name of the pool.The default for this option is Default.6 Click OK to save the entries for the IP address pool and return to the RemoteUser IP Address Pool window.You can use internal address pools to select the block of addresses a particularusers local address comes from. You can name internal pools, but you must alsospecify the pool name in the user’s group profile. For example, a profile forsoftware engineering and hardware engineering groups can select addresses fromthe engineering address pool. You can also define a default internal address poolto supply an address when the preferred pool is exhausted or otherwiseunavailable.Configuring DHCP relayThe DHCP relay agent on a VPN Router forwards DHCP and BOOTP messagesbetween a server and a client on different subnets. When a locally attached hostissues a DHCP or BOOTP request as a broadcast message, the VPN Router relaysthe message to a specified DHCP or BOOTP server. The DHCP relay agent alsoforwards DHCP replies from server to client.You can enable or disable DHCP relay for each interface and specify the DHCPservers for each interface. When you enable DHCP relay on an interface, the VPNRouter forwards DHCP requests from the interface to the DHCP server configuredfor the same interface.The DHCP relay agent unicasts DHCP packets only to the specified Helperservers (up to 3). Server 1 address is required. Server 2 and Server 3 addresses areoptional. Additionally, you can enable and disable each DHCP server by checkingor unchecking Enable.Note: The DHCP relay agent can run only on all the private physicalinterfaces and tunnels.
