Chapter 16 SSL VPN for FortiOS 5.0 : Setup examples : Multiple user groups with different access permissions example : Creating the firewall addresses : Creating the tunnel client range addresses
  
Creating the tunnel client range addresses
To accommodate the two groups of users, split an otherwise unused subnet into two ranges. The tunnel client addresses must not conflict with each other or with other addresses.
To define tunnel client addresses - web-based manager
1 Go to Firewall Objects > Address > Addresses.
2. Select Create New, enter the following information, and select OK:
Name
Tunnel_group1
Type
IP Range
Subnet / IP Range
10.11.254.[1-50]
Interface
Any
3. Select Create New, enter the following information, and select OK.
Name
Tunnel_group2
Type
IP Range
Subnet / IP Range
10.11.254.[51-100]
Interface
Any