1. Home
    2. /
  2. Manuals
    3. /
  3. NETGEAR
    4. /
  4. FVG318
    5. /
  5. 17
Page 81 / 176 Scroll up to view Page 76 - 80
ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual
Basic Virtual Private Networking
5-3
v1.0, September 2007
A VPN between two or more NETGEAR VPN-enabled firewalls is a good way to connect branch
or home offices and business partners over the Internet. VPN tunnels also enable access to network
resources across the Internet. In this case, use FVG318s on each end of the tunnel to form the VPN
tunnel end points. See
“Setting Up a Gateway-to-Gateway VPN Configuration” on page 5-19
to
set up this configuration.
Planning a VPN
To set up a VPN connection, you must configure each endpoint with specific identification and
connection information describing the other endpoint. You must configure the outbound VPN
settings on one end to match the inbound VPN settings on other end, and vice versa.
This set of configuration information defines a security association (SA) between the two VPN
endpoints. When planning your VPN, you must make a few choices first:
•
Will the local end be any device on the LAN, a portion of the local network (as defined by a
subnet or by a range of IP addresses), or a single PC?
•
Will the remote end be any device on the remote LAN, a portion of the remote network (as
defined by a subnet or by a range of IP addresses), or a single PC?
•
Will either endpoint use Fully Qualified Domain Names (FQDNs)? Many DSL accounts are
provisioned with DHCP addressing, where the IP address of the WAN port can change from
time to time. Under these circumstances, configuring the WAN port with a dynamic DNS
(DynDNS) service provider simplifies the configuration task. When DynDNS is configured on
the WAN port, configure the VPN using FDQN.
FQDNs supplied by Dynamic DNS providers can allow a VPN endpoint with a dynamic IP
address to initiate or respond to a tunnel request. Otherwise, the side using a dynamic IP
address must always be the initiator.
•
What method will you use to configure your VPN tunnels?
–
The VPN Wizard using VPNC defaults (see
Table 5-1
)
–
Advanced methods (see
Chapter 6, “Advanced Virtual Private Networking
”)
Table 5-1. Parameters recommended by the VPNC and used in the VPN Wizard
Parameter
Factory Default
Secure Association
Main Mode
Authentication Method
Pre-shared Key
Encryption Method
3DES
Page 82 / 176
ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual
5-4
Basic Virtual Private Networking
v1.0, September 2007
•
What level of IPSec VPN encryption will you use?
–
DE – The Data Encryption Standard (DES) processes input data that is 64 bits wide,
encrypting these values using a 56 bit key. Faster but less secure than 3DES.
–
3DES – (Triple DES) achieves a higher level of security by encrypting the data three times
using DES with three different, unrelated keys.
–
AES
•
What level of authentication will you use?
–
MDS – 128 bits, faster but less secure.
–
SHA-1 – 160 bits, slower but more secure.
VPN Tunnel Configuration
There are two tunnel configurations and three ways to configure them:
•
Use the VPN Wizard to configure a VPN tunnel (recommended for most situations):
–
See
“Setting Up a Client-to-Gateway VPN Configuration” on page 5-5
.
–
See
“Setting Up a Gateway-to-Gateway VPN Configuration” on page 5-19
.
•
See
Chapter 6, “Advanced Virtual Private Networking
” when the VPN Wizard and its VPNC
defaults (see
Table 5-1
on
page 5-4
) are not appropriate for your special circumstances.
Authentication Protocol
SHA-1
Diffie-Hellman (DH) Group
Group 2 (1024 bit)
Key Life
8 hours
IKE Life Time
24 hours
NETBIOS
Enabled
Note:
NETGEAR publishes additional interoperability scenarios with various
gateway and client software products.
Table 5-1. Parameters recommended by the VPNC and used in the VPN Wizard
Parameter
Factory Default
Page 83 / 176
ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual
Basic Virtual Private Networking
5-5
v1.0, September 2007
Setting Up a Client-to-Gateway VPN Configuration
Setting up a VPN between a remote PC running the NETGEAR ProSafe VPN Client and a
network gateway (see
Figure 5-3
) involves the following two steps:
•
“Step 1: Configuring the Client-to-Gateway VPN Tunnel on the FVG318” on page 5-5
uses
the VPN Wizard to configure the VPN tunnel between the remote PC and network gateway.
•
“Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC” on page 5-7
configures the NETGEAR ProSafe VPN Client endpoint.
Step 1: Configuring the Client-to-Gateway VPN Tunnel on the
FVG318
Follow this procedure to configure a client-to-gateway VPN tunnel using the VPN Wizard.
1.
Log in to the FVG318 at its LAN address of
with its default user name of
admin
and password of
password
.
Figure 5-3
Note:
This section uses the VPN Wizard to set up the VPN tunnel using the VPNC
default parameters listed in
Table 5-1 on page 5-4
. If you have special requirements
not covered by these VPNC-recommended parameters, refer to
Chapter 6,
“Advanced Virtual Private Networking
” to set up the VPN tunnel.
FVG318
Page 84 / 176
ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual
5-6
Basic Virtual Private Networking
v1.0, September 2007
2.
Select
VPN > VPN Wizard
from the menu. The WPN Wizard screen will display.
3.
Check the VPN Client radio button and enter the Connection Name and the pre-shared key.
The End Point Information will be populated automatically for access by remote PCs running
VPN client software.
Figure 5-4
Note:
The Connection Name is arbitrary and is used for management and
identification purposes only.
Enter the new Connection
Name: (
RoadWarrior
in this
example)
Enter the pre-shared key:
(
12345678
in this example)
Select the radio button:
A remote VPN client (single
PC)
Page 85 / 176
ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual
Basic Virtual Private Networking
5-7
v1.0, September 2007
4.
Click the VPN Wizard Default Values link on the VPN Wizard screen to display the VPN
default values shown below. The Wizard sets most parameters to defaults as proposed by the
VPN Consortium.
5.
Click
Apply
on the VPN Wizard screen to complete the configuration procedure. The VPN
Policies screen will display showing that the new tunnel is enabled.
To view or modify the tunnel settings, click
Edit
.
To enable/disable the tunnel, select the checkbox and click
Enable
or
Disable.
Step 2: Configuring the NETGEAR ProSafe VPN Client on the
Remote PC
This procedure describes how to configure the NETGEAR ProSafe VPN Client. This example
assumes the PC running the client has a dynamically assigned IP address.
Figure 5-5
Figure 5-6

Rate

4 / 5 based on 1 vote.

Popular NETGEAR Models

Famous Router IPs
Famous Router Companies
Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top