Page 181 / 224 Scroll up to view Page 176 - 180
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
NETGEAR VPN Configuration FVS318 or FVM318 to FVS328
F-7
December 2003, M-10041-01
Figure F-8:
NETGEAR FVS328 VPN – Auto Policy (part 1)
Enter a unique name to identify this policy. This name is not supplied to the remote VPN
endpoint. In our example we have used “to318” as the Policy Name. In the Policy Name
field type
to318
.
From the IKE policy drop-down box, select the IKE Policy that was set up in the earlier
step – this being the FVS318 IKE Policy.
From the Remote VPN Endpoint Address Type drop-down box, select IP Address.
Type the WAN IP Address of Gateway A (
14.15.16.17
in our example) in the
Remote
VPN Endpoint Address Data field.
Type
300
in the SA Life Time (Seconds) field.
Type
0
in the SA Life Time (Kbytes) field.
Check the IPSec PFS check box.
From the PFS Key Group drop-down box, select Group 2 (1024 Bit).
From the Traffic Selector Local IP drop-down box, select Subnet address.
Type the starting LAN IP Address of Gateway B (
172.23.9.1
in our example) in the Local
IP Start IP Address field.
Type the finishing LAN IP Address of Gateway B (
0.0.0.0
in our example) in the Local IP
Finish IP Address field.
Page 182 / 224
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
F-8
NETGEAR VPN Configuration FVS318 or FVM318 to FVS328
December 2003, M-10041-01
Type the LAN Subnet Mask of Gateway B (
255.255.255.0
in our example) in the Local IP
Subnet Mask field.
Figure F-9:
NETGEAR FVS328 VPN – Auto Policy (part 2)
From the Traffic Selector Remote IP drop-down box, select Subnet address.
Type the starting LAN IP Address of Gateway A (
10.5.6.1
in our example) in the Remote
IP Start IP Address field.
Type the finishing LAN IP Address of Gateway A (
0.0.0.0
in our example) in the Remote
IP Finish IP Address field.
Type the LAN Subnet Mask of Gateway A (
255.255.255.0
in our example) in the Remote
IP Subnet Mask field.
From the AH Configuration Authentication Algorithm drop-down box, select MD5.
Select Enable Encryption in the ESP Configuration Enable Encryption check box.
From the ESP Configuration Encryption Algorithm drop-down box, select 3DES.
Select Enable Authentication in the ESP Configuration Enable Authentication check box.
From the ESP Configuration Authentication Algorithm drop-down box, select MD5.
Select NETBIOS Enable in the NETBIOS Enable check box.
5.
Click the Apply Button. You will be taken back to the VPN Policies Menu page.
Page 183 / 224
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
NETGEAR VPN Configuration FVS318 or FVM318 to FVS328
F-9
December 2003, M-10041-01
Figure F-10:
NETGEAR FVS328 VPN Policies Menu (Post Configuration)
6.
When the screen returns to the
VPN Policies
, make sure the
Enable
check box is selected.
Click the
Apply
button.
Test the VPN Connection
1.
From a PC behind the NETGEAR FVS318 or FVM318 gateway A attempt to ping the remote
FVS328 gateway B LAN Interface address (example address 172.23.9.1)
2.
From a PC behind the FVS328 gateway B attempt to ping the remote NETGEAR FVS318 or
FVM318 gateway A LAN Interface address (example address 10.5.6.1)
3.
Click the Broadband Status link on the left side of the FVS328 Settings management GUI.
Click the Show VPN Status button below. This will take you to the IPSec Connection Status
Screen. If the connection is functioning properly, the State fields will show “Estab.”
4.
Click the Router Status link on the left side of the FVS318 Settings management GUI. Click
the Show VPN Logs button below. NETGEAR log files should be similar to the example
below.
Page 184 / 224
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
F-10
NETGEAR VPN Configuration FVS318 or FVM318 to FVS328
December 2003, M-10041-01
Page 185 / 224
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVS328
G-1
December 2003, M-10041-01
Appendix G
NETGEAR VPN Configuration
FVS318 or FVM318 with FQDN to FVS328
This appendix provides a case study on how to configure a VPN tunnel between a NETGEAR
FVS318 or FVM318 to a FVS328 using a Fully Qualified Domain Name (FQDN) to resolve the
public address of one or both routers. The configurations screens and settings for the FVS318 and
FVM318 are the same.
Configuration Template
The configuration in this document follows the addressing and configuration mechanics defined
by the VPN Consortium. Gather all the necessary information before you begin the configuration
process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and
all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.
Table G-1.
Summary
VPN Consortium Scenario:
Scenario 1
Type of VPN
LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)
Security Scheme:
IKE with Preshared Secret/Key (not Certificate-based)
Date Tested:
December 2003
Model/Firmware Tested:
NETGEAR-Gateway A
FVS318 firmware version A1.4 or 2.0; FVM318 firmware version 1.1
NETGEAR-Gateway B
FVS328 with firmware version 1.0 Release 00
IP Addressing:
NETGEAR-Gateway A
Fully Qualified Domain Name (FQDN)
NETGEAR-Gateway B
Static IP address

Rate

3.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top