Administrator's Guide - Kerio Software Archive

Kerio VPN
To make sure that the specified port is really free, view the Error log to see whether
an error of this type has not been reported.
Custom Routes
Other networks to which a VPN route will be set for the client can be specified in this
section. By default, routes to all local subnets at the VPN server’s side are defined — see
chapter 23.4).
Hint:
Use the 255.255.255.255 network mask to define a route to a certain host. This
can be helpful for example when a route to a host in the demilitarized zone at the
VPN server’s side is being added.
23.2 Configuration of VPN clients
The following conditions must be met to enable connection of remote clients to local networks
via encrypted channels:
• The Kerio VPN Client must be installed at remote clients (for detailed description, refer
to a stand-alone document, Kerio VPN Client — User Guide).
• Users whose accounts are used for authentication to Kerio VPN Client must possess
rights enabling them connect to the VPN server in Kerio Control (see chapter 16.116.1).
• Connection to the VPN server from the Internet as well as communication between
VPN clients must be allowed by traffic rules.
Hint::
VPN clients correctly connected to the firewall can be overviewed in the Administration
Console, section Status → VPN clients. For details, see chapter 19.3.
Basic configuration of traffic rules for VPN clients
Figure 23.7
Common traffic rules for VPN clients
314