→ Applies to: SynetoOS 4.x
Remote Access Service (RAS) uses destinations to define which network resources VPN users can access and for split tunneling.
A destination is a custom-named IP network resource (or multiple) defined by the RAS administrator. Each destination has a name and a network destination, which are the actual network resources.
Destinations are needed when:
- you set up RAS and want to route only specific subnets through the VPN tunnel, which is split tunneling
- you set up the access control list (ACL) for VPN users
Step 1. Connect to Syneto Central (https://central.syneto.eu/)
Step 2. From the left menu, click on Remote Access
Step 3. Select Destinations
Step 4. Click Edit, add the required information and click on Add
The following table provides possible examples:
Name (user defined) | Network Destination (user defined) | Description |
My internal network | 192.168.1.0/24 | An entire subnet |
My host | 192.168.1.123 | A specific host |
My host on port 8080 | 192.168.1.123:8080 | A specific host, on port 8080 only |
My network on port 8080 | 192.168.1.0/24:8080 | An entire subnet, on port 8080 only |
All hosts on port 22 | *:22 | All hosts, on port 22 only |
My internal networks | 192.168.1.0/24, 192.168.2.0/24 | Multiple subnets |
My network on ports 80 and 443 | 192.168.1.0/24:80, 192.168.1.0/24:443 | An entire subnet, on ports 80 and 443 only |