Netgear FVS336G-300NAS Specifications download pdf (Page 403)

100

101

Set Up Virtual Private Networking With IPSec Connections

403

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3

General

Policy Name A descriptive name of the IKE policy for identification and management purposes.

This example uses ModeConfigAME_Sales.

Note: The name is not supplied to the remote VPN endpoint.

Direction / Type Responder is automatically selected when you select the Mode Config record in

the Mode Config Record section. This ensures that the VPN firewall responds to

an IKE request from the remote endpoint but does not initiate one.

Exchange Mode Aggressive mode is automatically selected when you select the Mode Config

record in the Mode Config Record section.

Local

Select Local Gateway Select a WAN interface from the menu to specify the WAN interface for the local

gateway.

Identifier Type From the menu, select FQDN.

Note: Mode Config requires that the VPN firewall (that is, the local endpoint) is

defined by an FQDN.

Identifier Enter an FQDN for the VPN firewall. This example uses router.com.

Remote

Identifier Type From the menu, select FQDN.

Note: Mode Config requires that the remote endpoint is defined by an FQDN.

Identifier Enter the FQDN for the remote endpoint. This must be an FQDN that is not used

in any other IKE policy. This example uses client.com.

IKE SA Parameters

Encryption Algorithm To negotiate the security association (SA), from the menu, select the 3DES

algorithm.

Authentication

Algorithm

From the menu, select the SHA-1 algorithm to be used in the VPN header for the

authentication process.

Authentication Method Select Pre-shared key as the authentication method, and enter a key in the

Pre-shared key field.

Pre-shared key A key with a minimum length of 8 characters and no more than 49 characters. Do

not use a double quote (''), single quote ('), or space in the key. This example uses

H8!spsf3#JYK2!.

Diffie-Hellman (DH)

Group

The DH Group sets the strength of the algorithm in bits. From the menu, select

Group 2 (1024 bit).

SA-Lifetime (sec) The period in seconds for which the IKE SA is valid. When the period times out,

the next rekeying occurs. The default setting is 28800 seconds (eight hours).

However, for a Mode Config configuration, NETGEAR recommends 3600 seconds

(one hour).

Setting Description

1 2 ... 398 399 400 401 402 403 404 405 406 407 408 ... 692 693

Comments to this Manuals

No comments

Netgear FVS336G-300NAS Specifications Page 403

Comments to this Manuals