There are two examples each of communication with and without IIP, check the SRCIP / DSTIP in the packets to understand the key differences.
Familiarity with basic networking concepts like static routes / default routes / nating etc. is needed for proper understanding
For easier viewing, a ppt containing these slides is attached
Key Points to note:
1. The IIP is first seen on the wire only when VPN traffic is exiting NetScaler Gateway towards the Destination the VPN Client wants to connect.
2. The exit interface of NetScaler Gateway for VPN Traffic is always determined by route lookup of the Destination the VPN Client wants to connect.
3. The Source IP of the packet exiting NetScaler Gateway
- Will be the SNIP determined by route-lookup, If IIP is Disabled
- Will be the IIP assigned to the VPN Client, If IIP is Enabled, regardless of the exit interface.