I have a VPN Server in DMZ zone and IP address of VPN server is 192.168.1.x, For vpn clients we have assigned a different pool "10.1.2.x"... VPN client connects too the vpn server but they can only ping the VPN server but they are not able too access any other servers.
My question is, i don't have this vlan created on my switches "10.1.2.x" Do i need to create a separate VLAN on switch for VPN client pool "10.1.2.x" ?
In TechNet i have seen this below additional point...
If the static IP address pool consists of ranges of IP addresses that are for a separate subnet, then you need to either enable an IP routing protocol on the remote access server computer or add static IP routes consisting of the {IP Address, Mask} of each range to the routers of the intranet. If the routes are not added, then remote access clients cannot receive traffic from resources on the intranet.