Extending Subnet Mask in Dial-Up VPN IPSec

[arie_arie]

Hi,

I want to know what are the impacts to existing dial-up clients when I extend/expand the netmask (say from 255.255.255.0 to 255.255.252.0) in dynamic Dial-Up VPN IPSec on the Hub?

Maybe someone can give insight about this.

Thank you

Ari

[AEK]

Hi

I don't see any impact.

[arie_arie]

Hi,

Will the existing established dialup client do re-establish tunnel after I change the netmask on the hub?

Thank you

[AEK]

Hi

Theoretically I don't see an impact (they still connected), but always a good idea to try it with a test VPN.

[hbac · Accepted solution]

Hi @arie_arie,

I tested in my lab and existing dialup client shouldn't get disconnected. However, if you have an address object for dialup VPN subnet in the static route or firewall policy, you will need to change its subnet mask as well. 

Regards, 

[arie_arie]

Hi,

Thank you for the test result.