R56 - Check Point

In the Virtual IP address for DHCP server replies, specify an IP address from the sub
network of the IP addresses which are designated for Office Mode usage (e.g.
10.130.56.254). Since Office Mode supports DHCP Relay method for IP
assignment, you can direct the DHCP server as to where to send its replies. The
routing on the DHCP server and that of internal routers must be adjusted so that
packets from the DHCP server to this address are routed through the gateway.
Under Multiple Interfaces, specify whether you want routing to be done after the
encapsulation of Office Mode packets, to allow traffic to be routed correctly when
your gateway has multiple external interfaces.
If you wish to use the Anti-Spoofing feature, continue to step 5, otherwise skip to
step 7.
5 Create a network object to represent the address space you’ve allocated for Office Mode
on your DHCP server, by selecting Manage >Network Objects >New > Network.
In the Network Properties — General tab, set the DHCP address range as follows:
In Network Address specify the first address that is used (e.g. 10.130.56.0).
In Net Mask enter the subnet mask according to the amount of addresses that is used
(entering 255.255.255.0, for example, designates that all 254 IP addresses from
10.130.56.1 until 10.130.56.254 are set aside for SecureClient Office Mode addresses
on the DHCP server).
Changes to the Broadcast Address section and the Network Properties — NAT tab are
not necessary.
Close the network object properties window.
6 Return to the Gateway object, open the Remote Access > Office Mode page. In the
Additional IP addresses for Anti-Spoofing, select the network object you have created
with the IP address range you have set aside for Office Mode on the DHCP server.
7 Install the policy.
8 Make sure that all the internal routers are configured to route all the traffic destined to
the internal address space you had reserved to Office Mode users through the VPN-1
Pro Gateway. For instance, in the example above it is required to add routes to the class
C sub network of 10.130.56.0 through the gateway’s IP address.
Note - Office mode is supported only in Connect Mode.
Configuring the Gateway for Visitor Mode
To enable the Visitor mode on the Gateway:
On the Gateway object running the Visitor Mode Server, Remote Access page > Visitor
Mode section, select Support Visitor Mode.
SecuRemote/SecureClient. 8