Adding Clients Routes

The client routes are passed to all NetExtender/Mobile Connect clients and are used to govern which private networks and resources remote user can access by way of the Secure Mobile Access connection.

Group-level routes should be assigned from both primary and additional groups if the user-level option to Add Client Routes is enabled. User-level Routes must always be pushed to the NX client, and global routes must still depend on the Add Client Routes option as they did before. IPv4 and IPv6 routes both follow these rules.

Additional allow and deny policies can be created by destination address or address range and by service type.

To add client routes

1. Navigate to the Clients > Routes page.
2. Select Enabled from the Tunnel All Mode drop-down menu to force all traffic for this user—including traffic destined to the remote users’ local network—over the Secure Mobile Access NetExtender/Mobile Connect tunnel.
3. Click Add Client Route. The Add Client Route dialog box displays.

4. In the Add Client Route dialog box, in the Destination Network field, type the IP address of the trusted network to which you would like to provide access with NetExtender/Mobile Connect. For example, if you are connecting to an existing DMZ with the network 192.168.50.0/24 and you want to provide access to your LAN network 192.168.168.0/24, you would enter 192.168.168.0.

   You can enter an IPv6 route in the Destination Network field, in the form 2007::1:2:3:0.

5. For an IPv4 destination network, type the subnet mask in the Subnet Mask/Prefix field using decimal format (255.0.0.0, 255.255.0.0, or 255.255.255.0). For an IPv6 destination network, type the prefix, such as 112.
6. Click Submit.
7. Repeat this procedure for all necessary routes.