Netgear SRX5308 User Manual download pdf (Page 236)

Virtual Private Networking Using IPSec and L2TP Connections

236

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308

Policy Type From the drop-down list, select one of the following policy types:

• Auto Policy. Some settings (the ones in the Manual Policy Parameters

section of the screen) for the VPN tunnel are generated automatically.

• Ma

nual Policy. All settings need to be specified manually, including the ones

in the Manual Policy Parameters section of the screen.

Select Local Gateway Select a WAN interface from the drop-down list to specify the WAN interface for

the local gateway.

Remote Endpoint Select a radio button to specify how th

e remote endpoint is defined:

• IP Add

ress. Enter the IP address of the remote endpoint in the fields to the

right of the radio button.

• FQ

DN. Enter the FQDN of the remote endpoint in the field to the right of the

radio button.

Enable NetBIOS? Select this check box to enable NetBIOS broadcasts to travel over the VPN

tunnel. For more information about NetBIOS, see Configure NetBIOS Bridging

with IPSec VPN o

n page 262. This feature is disabled by default.

Enable RollOver?

Note: This does not

ply to IPv6 policies.

(IPv4 only) Select this check box to allow th

e VPN tunnel to roll over to the other

WAN interface when the WAN mode is set to Auto-Rollover and an actual

rollover occurs. This feature is disabled by default.

Select a WAN interface from the drop-down list.

Enable Auto Initiate Select this check box to enable the VPN tunn

el to autoestablish itself without the

presence of any traffic.

Note: The direction and type of the IKE policy th

at is associated with this VPN

policy need to be either Initiator or Both but cannot be Responder. For more

information, see Manually Add or Edit an IKE Policy on pa

ge 227.

Enable Keepalive

Note: See also

Configure Keep-Alives

and Dead Peer

Detection on pag

e 259.

Select a radio button to specify if keep-alive is enabled:

• Ye

s. This feature is enabled: Periodically, the VPN firewall sends keep-alive

requests (ping packets) to the remote endpoint to keep the tunnel alive. You

need to specify the ping IP address in the Ping IP Address field, the detection

period in the Detection Period field, and the maximum number of keep-alive

requests that the VPN firewall sends in the Reconnect after failure count field.

• No.

This feature is disabled. This is the default setting.

Ping IP Address The IP address that the VPN firewall pings. The address

eeds to be of a host that can respond to ICMP ping

requests.

Detection Period The period in seconds between the ke

ep-alive requests. The

default setting is 10 seconds.

Reconnect after

fai

lure count

The maximum number of keep-alive requests before the

VPN firewall tears down the connection and then attempts to

reconnect to the remote endpoint. The default setting is

3 keep-alive requests.

Table 55. Add New VPN Policy screen settings for IPv4 and IPv6 (continued)

Setting Description

1 2 ... 231 232 233 234 235 236 237 238 239 240 241 ... 459 460

Comments to this Manuals

No comments

Netgear SRX5308 User Manual Page 236

Comments to this Manuals

Related products and manuals for Routers Netgear SRX5308