1. Home
    2. /
  2. Manuals
    3. /
  3. NETGEAR
    4. /
  4. FVS328
    5. /
  5. 39
Page 191 / 224 Scroll up to view Page 186 - 190
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVS328
G-7
December 2003, M-10041-01
Step-By-Step Configuration of FVS328 Gateway B
1.
Log in to the NETGEAR FVS328, labeled Gateway B in the illustration.
Out of the box, the FVS328 is set for its default LAN address of
with its
default user name of
admin
and default password of
password
. For this example we will
assume you have set the local LAN address as 172.23.9.1 for Gateway B.
2.
Click IKE Policies link under the VPN category and click Add on the IKE Policies Menu.
Figure G-6:
NETGEAR FVS328 IKE Policy Configuration – Part 1
–
Enter an appropriate name for the policy in the Policy Name field. This name is not
supplied to the remote VPN Endpoint. It is used to help you manage the IKE policies. In
our example we have used FVS318 as the Policy Name. In the Policy Name field type
FVS318
.
–
From the Direction/Type drop-down box, select Both Directions.
–
From the Exchange Mode drop-down box, select Main Mode.
–
From the Local Identity drop-down box, select WAN IP Address (WAN IP address will
automatically be populated into the Local Identity Data field after policy is applied).
–
From the Remote Identity drop-down box, select Fully Qualified Domain Name.
–
Type the FQDN (
netgear.dnydns.org
in our example) in the Remote Identity Data field.
Page 192 / 224
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
G-8
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVS328
December 2003, M-10041-01
Figure G-7:
NETGEAR FVS328 IKE Policy Configuration – Part 2
–
From the Encryption Algorithm drop-down box, select 3DES.
–
From the Authentication Algorithm drop-down box, select MD5.
–
From the Authentication Method radio button, select Pre-shared Key.
–
In the Pre-Shared Key field, type
hr5xb84l6aa9r6
. You must make sure the key is the
same for both gateways.
–
From the Diffie-Hellman (DH) Group drop-down box, select Group 1 (768 Bit).
–
In the SA Life Time field, type 28800.
3.
Click Apply. This will bring you back to the IKE Policies Menu.
Figure G-8:
NETGEAR FVS328 IKE Policies (Post Configuration)
The FVS318
IKE Policy is now displayed in the IKE Policies page.
4.
Click the VPN Policies link under the VPN category on the left side of the Settings
management GUI. This will take you to the VPN Policies Menu page. Click Add Auto Policy.
This will open a new screen titled VPN – Auto Policy.
Page 193 / 224
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVS328
G-9
December 2003, M-10041-01
Figure G-9:
NETGEAR FVS328 VPN – Auto Policy (part 1)
–
Enter a unique name to identify this policy. This name is not supplied to the remote VPN
endpoint. In our example we have used to318 as the Policy Name. In the Policy Name
field type
to318
.
–
From the IKE policy drop-down box, select the IKE Policy that was set up in the earlier
step – the FVS318 IKE Policy.
–
From the Remote VPN Endpoint Address Type drop-down box, select IP Address.
–
Type the WAN IP Address of Gateway A (
14.15.16.17
in our example) in the Remote
VPN Endpoint Address Data field.
–
Type
300
in the SA Life Time (Seconds) field.
–
Type
0
in the SA Life Time (Kbytes) field.
–
Check the IPSec PFS check box.
–
From the PFS Key Group drop-down box, select Group 2 (1024 Bit).
–
From the Traffic Selector Local IP drop-down box, select Subnet address.
–
Type the starting LAN IP Address of Gateway B (
172.23.9.1
in our example) in the Local
IP Start IP Address field.
–
Type the finishing LAN IP Address of Gateway B (
0.0.0.0
in our example) in the Local IP
Finish IP Address field.
–
Type the LAN Subnet Mask of Gateway B (
255.255.255.0
in our example) in the Local IP
Subnet Mask field.
Page 194 / 224
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
G-10
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVS328
December 2003, M-10041-01
Figure G-10:
NETGEAR FVS328 VPN – Auto Policy (part 2)
–
From the Traffic Selector Remote IP drop-down box, select Subnet address.
–
Type the starting LAN IP Address of Gateway A (
10.5.6.1
in our example) in the Remote
IP Start IP Address field.
–
Type the finishing LAN IP Address of Gateway A (
0.0.0.0
in our example) in the Remote
IP Finish IP Address field.
–
Type the LAN Subnet Mask of Gateway A (
255.255.255.0
in our example) in the Remote
IP Subnet Mask field.
–
From the AH Configuration Authentication Algorithm drop-down box, select MD5.
–
Select the Enable Encryption check box.
–
From the ESP Configuration Encryption Algorithm drop-down box, select 3DES.
–
Select the Enable Authentication check box.
–
From the ESP Configuration Authentication Algorithm drop-down box, select MD5.
–
Select the NETBIOS Enable check box.
5.
Click the Apply Button. You will be taken back to the VPN Policies Menu page.
Page 195 / 224
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVS328
G-11
December 2003, M-10041-01
Figure G-11:
NETGEAR FVS328 VPN Policies Menu (Post Configuration)
6.
When the screen returns to the VPN Policies, make sure the Enable check box is selected.
Click the Apply button.
Test the VPN Connection
1.
From a PC behind the NETGEAR FVS318 or FVM318 Gateway A, attempt to ping the
remote FVS328 Gateway B LAN Interface address (example address 172.23.9.1).
2.
From the FVS318 or FVM318, click the Router Status link on the left side of the Settings
management menu. Click the Show VPN Status button. This will take you to the IPSec
Connection Status Screen. If the connection is functioning properly, the State fields will show
“Estab.”
3.
From the FVS328, click the VPN Status link under the VPN section of the main menu. The
VPN Logs and status are displayed.

Rate

3.5 / 5 based on 2 votes.

Popular NETGEAR Models

Famous Router IPs
Famous Router Companies
Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top