Netgear DGB111G Operations Instructions download pdf (Page 110)

Reference Manual for the Model Wireless ADSL Firewall Router DG834G

8-4 Virtual Private Networking (Advanced Feature)

202-10006-05, June 2005

To set up a VPN connection, you must configure each endpoint with specific identification and

connection information describing the other endpoint. You must configure the outbound VPN

settings on one end to match the inbound VPN settings on other end, and vice versa.

This set of configuration information defines a security association (SA) between the two VPN

endpoints. When planning your VPN, you must make a few choices first:

• Will the local end be any device on the LAN, a portion of the local network (as defined by a

subnet or by a range of IP addresses), or a single PC?

• Will the remote end be any device on the remote LAN, a portion of the remote network (as

defined by a subnet or by a range of IP addresses), or a single PC?

• Will either endpoint use Fully Qualified Domain Names (FQDNs)? FQDNs supplied by

Dynamic DNS providers (see “The Use of a Fully Qualified Domain Name (FQDN)” on page

F-7) can allow a VPN endpoint with a dynamic IP address to initiate or respond to a tunnel

request. Otherwise, the side using a dynamic IP address must always be the initiator.

Table 8-1. VPN Tunnel Configuration Worksheet

Connection Name:

Pre-Shared Key:

Secure Association -- Main Mode or Manual Keys:

Perfect Forward Secrecy -- Enabled or Disabled:

NETBIOS -- Enabled or Disabled:

Encryption Protocol -- DES or 3DES:

Authentication Protocol -- MD5 or SHA-1:

Diffie-Hellman (DH) Group -- Group 1 or Group 2:

Key Life in seconds:

IKE Life Time in seconds:

VPN Endpoint Local IPSec ID LAN IP Address Subnet Mask

FQDN or Gateway IP

(WAN IP Address)

1 2 ... 105 106 107 108 109 110 111 112 113 114 115 ... 267 268

No comments

Netgear DGB111G Operations Instructions Page 110