NETGEAR FVS328 Router Manual PDF (Setup & Configuration Guide)

Page 176 / 224 Scroll up to view Page 171 - 175

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

F-2

NETGEAR VPN Configuration FVS318 or FVM318 to FVS328

December 2003, M-10041-01

Figure F-1:

Addressing and Subnet Used for Examples

Step-By-Step Configuration of FVS318 or FVM318 Gateway A

1.

Log in to the FVS318 or FVM318 labeled Gateway A as in the illustration.

Out of the box, the FVS318 or FVM318 is set for its default LAN address of

http://192.168.0.1

with its default user name of

admin

and default password of

password

. For

this example we will assume you have set the local LAN address as 10.5.6.1 for Gateway A

and have set your own password.

Figure F-2:

NETGEAR FVS318 VPN Settings Pre-Configuration

Gateway A

22.23.24.25

14.15.16.17

10.5.6.0/24

172.23.9.0/24

172.23.9.1

10.5.6.1

WAN IP

LAN IP

Gateway B

VPNC Example

Network Interface Addressing

Page 177 / 224

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

NETGEAR VPN Configuration FVS318 or FVM318 to FVS328

F-3

December 2003, M-10041-01

2.

Click the VPN Settings link on the left side of the Settings management GUI. Click the radio

button of first available VPN leg (all 8 links are available in the example). Click the Edit

button below. This will take you to the VPN Settings – Main Mode Menu.

Figure F-3:

Figure 3 – NETGEAR FVS318 VPN Settings (part 1) – Main Mode

–

In the Connection Name box, enter in a unique name for the VPN tunnel to be configured

between the NETGEAR devices. For this example we have used

toFVS328

.

–

Enter a Local IPSec Identifier

name for the NETGEAR FVS318 Gateway A. This name

must be entered in the other endpoint as Remote IPSec Identifier. In this example we used

14.15.16.17

as the local identifier.

–

Enter a Remote IPSec Identifier

name for the remote NETGEAR FVS328 Gateway B.

This name must be entered in the other endpoint as Local IPSec Identifier. In this example

we used

22.23.24.25

as the remote identifier.

–

Choose a subnet from local address from the Tunnel can be accessed from pull-down

menu.

–

Type the starting LAN IP Address of Gateway A (

10.5.6.1

in our example) in the Local IP

Local LAN start IP Address field.

–

Type the finishing LAN IP Address of Gateway A (

0.0.0.0

in our example) in the Local IP

Local LAN finish IP Address field.

–

Type the LAN Subnet Mask of Gateway A (

255.255.255.0

in our example) in the Local

LAN IP Subnetmask field.

Page 178 / 224

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

F-4

NETGEAR VPN Configuration FVS318 or FVM318 to FVS328

December 2003, M-10041-01

–

Choose a subnet from local address from the Tunnel can access

pull-down menu.

–

Type the starting LAN IP Address of Gateway B (

172.23.9.1

in our example) in the Local

IP Remote LAN Start IP Address field.

–

Type the finishing LAN IP Address of Gateway B (

0.0.0.0

in our example) in the Local IP

Remote LAN Finish IP Address field.

–

Type the LAN Subnet Mask of Gateway B (

255.255.255.0

in our example) in the Remote

LAN IP Subnetmask field.

–

Type the WAN IP address (

22.23.24.25

in our example) of Gateway B in the Remote

WAN IP or FQDN field.

Figure F-4:

Figure 4 – NETGEAR FVS318 VPN Settings (part 2) – Main Mode

–

From the Secure Association drop-down box, select Main Mode.

–

Next to Perfect Forward Secrecy, select the Enabled radio button.

–

From the Encryption Protocol drop-down box, select 3DES.

–

In the PreShared Key box, type a unique text string to be used as the shared key between

Gateway A and Gateway B.

In this example we used

hr5xb84l6aa9r6

. You must make

sure the key is the same for both gateways.

–

In the Key Life box, enter in 3600 seconds.

–

In the IKE Life Time, enter 28800 seconds.

–

Check the NETBIOS Enable box if you wish to pass NetBIOS traffic over the VPN

tunnel, allowing functions such as Microsoft Network Neighborhood browsing.

3.

Click the Apply button in the lower center of the screen to save all changes and return to the

VPN Settings screen.

4.

When the screen returns to the VPN Settings, make sure the Enable check box is selected.

Page 179 / 224

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

NETGEAR VPN Configuration FVS318 or FVM318 to FVS328

F-5

December 2003, M-10041-01

Step-By-Step Configuration of FVS328 Gateway B

1.

Log in to the NETGEAR FVS328 labeled Gateway B as in the illustration.

Out of the box, the FVS328 is set for its default LAN address of

http://192.168.0.1

with its

default user name of

admin

and default password of

password

. For this example we will

assume you have set the local LAN address as 172.23.9.1 for Gateway B and have set your

own user name and password.

2.

Click the IKE Policies link under the VPN category link on the left side of the Settings

management GUI. This will open the IKE Policies Menu. Click Add. This will open a new

screen titled IKE Policy Configuration.

Figure F-5:

NETGEAR FVS328 IKE Policy Configuration – Part 1

–

Enter an appropriate name for the policy in the Policy Name field. This name is not

supplied to the remote VPN Endpoint. It is used to help you manage the IKE policies. In

our example we have used FVS318 as the Policy Name. In the Policy Name field type

FVS318

.

–

From the Direction/Type drop-down box, select Both Directions.

–

From the Exchange Mode drop-down box, select Main Mode.

–

From the Local Identity drop-down box, select WAN IP Address (WAN IP address will

automatically be populated into the Local Identity Data field after policy is applied).

–

From the Remote Identity drop-down box, select Remote WAN IP (WAN IP address will

automatically be populated into the Local Identity Data field after policy is applied).

Page 180 / 224

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

F-6

NETGEAR VPN Configuration FVS318 or FVM318 to FVS328

December 2003, M-10041-01

Figure F-6:

NETGEAR FVS328 IKE Policy Configuration – Part 2

–

From the Encryption Algorithm drop-down box, select 3DES.

–

From the Authentication Algorithm drop-down box, select MD5.

–

From the Authentication Method radio button, select Pre-shared Key.

–

In the Pre-Shared Key field, type

hr5xb84l6aa9r6

. You must make sure the key is the

same for both gateways.

–

From the Diffie-Hellman (DH) Group drop-down box, select Group 1 (768 Bit).

–

In the SA Life Time field, type 28800.

3.

Click the Apply Button. This will bring you back to the IKE Policies Menu.

Figure F-7:

NETGEAR FVS328 IKE Policies (Post Configuration)

The FVS318

IKE Policy is now displayed in the IKE Policies page.

4.

Click the VPN Policies link under the VPN category link on the left side of the Settings

management GUI. This will take you to the VPN Policies Menu page. Click Add Auto Policy.

This will open a new screen titled VPN – Auto Policy.

Rate

Popular NETGEAR Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share