Reference Manual for the ProSafe Wireless 802.11g
Firewall/Print Server Model FWG114P v2
Virtual Private Networking
8-37
201-10301-02, May 2005
–
From the Remote VPN Endpoint Address Type drop-down box, select
IP Address
.
–
Type
0.0.0.0
as the Address Data of the client because we are assuming the remote PC will
have a dynamically assigned IP address. This will also be entered in the VPN Client
Internal Network IP Address field, as seen in
“My Identity” on page 8-40
.
–
Type
86400
in the SA Life Time (Seconds) field.
–
Type
0
in the SA Life Time (Kbytes) field.
–
Check the
IPSec PFS
check box to enable Perfect Forward Secrecy. This will also be
entered in the VPN Client Security Policy Enable Perfect Forward Secrecy check box, as
seen in
“Security Policy” on page 8-41
.
–
From the PFS Key Group drop-down box, select
Group 2 (1024 Bit)
. This will also be
entered in the VPN Client Security Policy PFS Key Group drop-down selection box, as
seen in
“Security Policy” on page 8-41
.
–
From the Traffic Selector Local IP drop-down box, select
Subnet addresses
. This will
also be entered in the VPN Client Connection Remote Party Identity and Addressing ID
Type field, as seen in
“Security Policy Editor New Connection” on page 8-39
.
Note:
Selecting ANY for the Traffic Selectors means all traffic goes through the IPSec
tunnel and prevents access to the Internet.
–
Type the starting LAN IP Address of the FWG114P v2 in the Local IP Start IP Address
field. For this example, we used
192.168.0.0
which is the default LAN IP address of the
FWG114P v2
.
This will also be entered in the VPN Client Connection Remote Party
Identity and Addressing Subnet field, as seen in
“Security Policy Editor New Connection”
on page 8-39
.
–
Type the LAN Subnet Mask of the FWG114P v2 (
255.255.255.0
in our example) in the
Local IP Subnet Mask field. This will also be entered in the VPN Client Connection
Remote Party Identity and Addressing Mask field, as seen in
“Security Policy Editor New
Connection” on page 8-39
.
–
From the Traffic Selector Remote IP drop-down box, select
Single addresses
.
–
Type
0.0.0.0
as the start IP Address of the in the Remote IP Start IP Address field because
we are assuming the remote PC will have a dynamically assigned IP address. This will
also be entered in the VPN Client My Identity Internal Network IP Address field, as seen
in
“My Identity” on page 8-40
.
–
Select the
Enable Encryption
check box. This will also be selected in the VPN Client
Security Policy Key Exchange (Phase 2) Encapsulation Protocol (ESP) check box, as seen
in
“Connection Security Policy Key Exchange (Phase 2)” on page 8-43
.
–
From the ESP Configuration Encryption Algorithm drop-down box, select
3DES
. This
will also be entered in the VPN Client Security Policy Key Exchange (Phase 2) Encrypt
Alg field, as seen in
“Connection Security Policy Key Exchange (Phase 2)” on page 8-43
.
19216811.live