---
title: "Complete the Secure Tunnel Settings fields for Gateway appliances"
slug: "secure-tunnel-settings-v6-6"
description: "Configure the Secure Tunnel Settings fields for Gateway appliances, which includes allowed sources for Client tunneling and the weighting factor for local Client tunneling."
tags: ["Appliance Configuration", "Gateway", "Tunneling"]
updated: 2026-02-03T01:36:51Z
published: 2026-02-03T01:36:51Z
canonical: "support.appgate.com/secure-tunnel-settings-v6-6"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Secure Tunnel Settings

Complete the following fields to configure secure tunnel settings for **Gateway** appliances:

- ***Client Hostname/IP.*** This hostname is only used to advise Clients where to find this appliance. Use only fully qualified domain names or IPv4 / IPv6 address.

> [!NOTE]
> **NOTE**
> 
> You must renew the appliance certificate after changing the Client Hostname or Client connections will fail.

> [!NOTE]
> NOTE
> 
> For an Appgate Gateway to allow clients to create tunnels using either IPv4 or IPv6, the Gateway must be configured with a single FQDN that has both an IPv4 A record and IPv6 AAAA record for that FQDN in public DNS.

- ***Local Client Tunneling - Load Balancing Weighting Factor.*** This weighting factor can be set independently of the external one.

> [!NOTE]
> **NOTE**
> 
> Before changing the weighting factor please refer to the detailed explanation in the manual.

- ***Connect via Local Network.*** When a Client is on the local LAN it will connect using the Local Client hostname/IP(s) instead of the external one.
- ***Client Tunneling - Allowed Destinations.*** List the destinations the Gateway will allow (firewall rule) for secure tunnel traffic.
- ***Client Tunnel DTLS/QUIC Port.*** For a Gateway appliance, this is used for DTLS protocol tunneling between Gateway and Client, default 443.