The documentation on VPN configs is unclear, specifically when it comes to entering the range of IP addresses that will be given to clients. There should be some explanation as to what the relationship is between this address range and existing IP subnets on the LAN side. Also, the permitted resource section says we need to enter a set of IP addresses that need to be accessible, but it does not provide all the steps required to make that list of addresses available to the VPN client PCs.