Skip to content

Commit 803b7f6

Browse files
defguard-communitygitbook-bot
authored andcommitted
GITBOOK-390: change request with no subject merged in GitBook
1 parent dfbbcb8 commit 803b7f6

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

admin-and-features/features-and-configuration/wireguard/create-your-vpn-network.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,8 +30,18 @@ It's a name that will be visible both on the UI, but also in the desktop client
3030

3131
By providing the VPN IPs/masks, you are configuring both: **the VPN internal networks and VPN server IPs**. Every gateway will bind to these addresses and Defguard will also generate and assign IP addresses for devices in this location from these networks.
3232

33+
{% hint style="warning" %}
34+
Defguard assigns IP addresses to clients by sequentially scanning each defined subnet and selecting the first available address. If no free address is found in any of the configured networks, the client will not receive an IP assignment. In such cases, you’ll need to adjust the network configuration - such as expanding the address pool by decreasing the netmask - to accommodate additional clients.
35+
{% endhint %}
36+
3337
This field can contain multiple IP addresses (both IPv4 and IPv6), separated by a comma (e.g. `10.10.20.1/24,fc00::abcd:0:1/96`).
3438

39+
{% hint style="info" %}
40+
## Dual-stack VPN networks
41+
42+
Defguard supports dual-stack VPN networks, allowing simultaneous assignment of both IPv4 and IPv6 addresses to clients. Each VPN network can include multiple IPv4 and IPv6 subnets, and connected clients will automatically receive one address from each defined subnet. This enables seamless communication over both IP versions within a single VPN session.
43+
{% endhint %}
44+
3545
#### Examples
3646

3747
1. 10.11.0.1/8

0 commit comments

Comments
 (0)