1. Home
    2. /
  2. Manuals
    3. /
  3. NETGEAR
    4. /
  4. FVL328
    5. /
  5. 44
Page 216 / 234 Scroll up to view Page 211 - 215
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2
H-4
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVL328
May 2004, 202-10030-02
4.
Select the Use a dynamic DNS service radio button for the service you are using. In this
example we are using www.DynDNS.org as the service provider.
–
Type the Host Name that your dynamic DNS service provider gave you.
The dynamic DNS service provider may call this the domain name. In this example we are
using dyndns.org as the domain suffix.
–
Type the User Name for your dynamic DNS account. In this example we used netgear as
the Host Name. This means that the complete FQDN we are using is netgear.dyndns.org
and the Host Name is “netgear.”
–
Type the Password (or key) for your dynamic DNS account.
5.
Click Apply to save your configuration.
6.
Click on the VPN Settings link on the left side of the Settings management GUI.
Figure H-3:
NETGEAR FVS318 VPN Settings Pre-Configuration
7.
Click the VPN Settings link on the left side of the Settings management GUI. Click the radio
button of first available VPN leg (all 8 links are available in the example). Click the Edit
button below. This will take you to the VPN Settings – Main Mode Menu.
Note:
The router supports only basic DDNS and the login and password may not be
secure. If your ISP assigns a private WAN IP address such as 192.168.x.x or 10.x.x.x,
the dynamic DNS service will not work because private addresses will not be routed on
the Internet.
Page 217 / 234
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVL328
H-5
May 2004, 202-10030-02
Figure H-4:
NETGEAR FVS318 VPN Settings (part 1) – Main Mode
–
In the Connection Name box, enter in a unique name for the VPN tunnel to be configured
between the NETGEAR devices. For this example we have used
toFVL328
.
–
Enter a Local IPSec Identifier
name for the NETGEAR FVS318 Gateway A. This name
must be entered in the other endpoint as Remote IPSec Identifier. In this example we used
netgear.dyndns.org
(the FQDN) as the local identifier.
–
Enter a Remote IPSec Identifier
name for the remote NETGEAR FVL328 Gateway B.
This name must be entered in the other endpoint as Local IPSec Identifier. In this example
we used
22.23.24.25
as the remote identifier.
–
Choose a subnet from local address from the Tunnel can be accessed from pull-down
menu.
–
Type the starting LAN IP Address of Gateway A (
10.5.6.1
in our example) in the Local IP
Local LAN start IP Address field.
–
Type the finishing LAN IP Address of Gateway A (
0.0.0.0
in our example) in the Local IP
Local LAN finish IP Address field.
–
Type the LAN Subnet Mask of Gateway A (
255.255.255.0
in our example) in the
Local
LAN IP Subnetmask field.
–
Choose a subnet from local address from the Tunnel can access
pull-down menu.
Page 218 / 234
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2
H-6
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVL328
May 2004, 202-10030-02
–
Type the starting LAN IP Address of Gateway B (
172.23.9.1
in our example) in the Local
IP Remote LAN Start IP Address field.
–
Type the finishing LAN IP Address of Gateway B (
0.0.0.0
in our example) in the Local IP
Remote LAN Finish IP Address field.
–
Type the LAN Subnet Mask of Gateway B (
255.255.255.0
in our example) in the Remote
LAN IP Subnetmask field.
–
Type the WAN IP address (
22.23.24.25
in our example) of Gateway B in the Remote
WAN IP or FQDN field.
Figure H-5:
Figure 4 – NETGEAR FVS318 VPN Settings (part 2) – Main Mode
–
From the Secure Association drop-down box, select Main Mode.
–
Next to Perfect Forward Secrecy, select the Enabled radio button.
–
From the Encryption Protocol drop-down box, select 3DES.
–
In the PreShared Key box, type a unique text string to be used as the shared key between
Gateway A and Gateway B.
In this example we used
hr5xb84l6aa9r6
. You must make
sure the key is the same for both gateways.
–
In the Key Life box, enter in 3600 seconds.
–
In the IKE Life Time, enter 28800 seconds.
–
Check the
NETBIOS Enable box if you wish to pass NetBIOS traffic over the VPN
tunnel, allowing functions such as Microsoft Network Neighborhood browsing.
8.
Click the Apply button in the lower center of the screen to save all changes. This will return
you to the VPN Settings screen.
Page 219 / 234
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVL328
H-7
May 2004, 202-10030-02
Figure H-6:
NETGEAR FVS318 VPN Settings After Inputting Configuration Info
9.
When the screen returns to the VPN Settings, make sure the Enable check box is selected.
Step-By-Step Configuration of FVL328 Gateway B
1.
Log in to the NETGEAR FVL328, labeled Gateway B in the illustration.
Out of the box, the FVL328 is set for its default LAN address of
with its
default user name of
admin
and default password of
password
. For this example we will
assume you have set the local LAN address as 172.23.9.1 for Gateway B.
2.
Click IKE Policies link under the VPN category and click Add on the IKE Policies Menu.
Page 220 / 234
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2
H-8
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVL328
May 2004, 202-10030-02
Figure H-7:
NETGEAR FVL328 IKE Policy Configuration – Part 1
–
Enter an appropriate name for the policy in the Policy Name field. This name is not
supplied to the remote VPN Endpoint. It is used to help you manage the IKE policies. In
our example we have used FVS318 as the Policy Name. In the Policy Name field type
FVS318
.
–
From the Direction/Type drop-down box, select Both Directions.
–
From the Exchange Mode drop-down box, select Main Mode.
–
From the Local Identity drop-down box, select WAN IP Address (WAN IP address will
automatically be populated into the Local Identity Data field after policy is applied).
–
From the Remote Identity drop-down box, select Fully Qualified Domain Name.
–
Type the FQDN (
netgear.dnydns.org
in our example) in the Remote Identity Data field.

Rate

4 / 5 based on 1 vote.

Popular NETGEAR Models

Famous Router IPs
Famous Router Companies
Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top