1. Home
    2. /
  2. Manuals
    3. /
  3. NETGEAR
    4. /
  4. FWG114P
    5. /
  5. 53
Page 261 / 296 Scroll up to view Page 256 - 260
NETGEAR VPN Configuration FVS318 or FVM318 to FWG114P v2
G-1
201-10301-02, May 2005
Appendix G
NETGEAR VPN Configuration
FVS318 or FVM318 to FWG114P v2
This appendix provides a case study on how to configure a secure IPSec VPN tunnel between a
NETGEAR FVS318 or FVM318 to a FWG114P v2. The configuration options and screens for the
FVS318 and FVM318 are the same.
Configuration Template
The configuration in this document follows the addressing and configuration mechanics defined
by the VPN Consortium. Gather all the necessary information before you begin the configuration
process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and
all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.
Table G-1.
Summary
VPN Consortium Scenario:
Scenario 1
Type of VPN
LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)
Security Scheme:
IKE with Preshared Secret/Key (not Certificate-based)
Date Tested:
December 2003
Model/Firmware Tested:
NETGEAR-Gateway A
FVS318 firmware version A1.4 or 2.0; FVM318 firmware version 1.1
NETGEAR-Gateway B
FWG114P with firmware version 2 Release 2
IP Addressing:
NETGEAR-Gateway A
Static IP address
NETGEAR-Gateway B
Static IP address
Page 262 / 296
Reference Manual for the ProSafe Wireless 802.11g
Firewall/Print Server Model FWG114P v2
G-2
NETGEAR VPN Configuration FVS318 or FVM318 to FWG114P v2
201-10301-02, May 2005
Figure G-1:
Addressing and Subnet Used for Examples
Step-By-Step Configuration of FVS318 or FVM318 Gateway A
1.
Log in to the FVS318 or FVM318 labeled Gateway A as in the illustration.
Out of the box, the FVS318 or FVM318 is set for its default LAN address of
with its default user name of
admin
and default password of
password
. For
this example we will assume you have set the local LAN address as 10.5.6.1 for Gateway A
and have set your own password.
Figure G-2:
NETGEAR FVS318 VPN Settings Pre-Configuration
Gateway A
22.23.24.25
14.15.16.17
10.5.6.0/24
172.23.9.0/24
172.23.9.1
10.5.6.1
WAN IP
WAN IP
LAN IP
LAN IP
Gateway B
VPNC Example
Network Interface Addressing
Page 263 / 296
Reference Manual for the ProSafe Wireless 802.11g
Firewall/Print Server Model FWG114P v2
NETGEAR VPN Configuration FVS318 or FVM318 to FWG114P v2
G-3
201-10301-02, May 2005
2.
Click the VPN Settings link on the left side of the Settings management GUI. Click the radio
button of the first available VPN leg (all 8 links are available in the example). Click the Edit
button below. This will take you to the VPN Settings – Main Mode Menu.
Figure G-3:
Figure 3 – NETGEAR FVS318 VPN Settings (part 1) – Main Mode
–
In the Connection Name box, enter in a unique name for the VPN tunnel to be configured
between the NETGEAR devices. For this example we have used
toFVS328
.
–
Enter a Local IPSec Identifier
name for the NETGEAR FVS318 Gateway A. This name
must be entered in the other endpoint as Remote IPSec Identifier. In this example we used
14.15.16.17
as the local identifier.
–
Enter a Remote IPSec Identifier
name for the remote NETGEAR FWG114P v2 Gateway
B. This name must be entered in the other endpoint as Local IPSec Identifier. In this
example we used
22.23.24.25
as the remote identifier.
–
Choose a subnet from local address from the “Tunnel can be accessed from” pull-down
menu.
–
Type the starting LAN IP Address of Gateway A (
10.5.6.1
in our example) in the Local IP
Local LAN start IP Address field.
–
Type the finishing LAN IP Address of Gateway A (
0.0.0.0
in our example) in the Local IP
Local LAN finish IP Address field.
–
Type the LAN Subnet Mask of Gateway A (
255.255.255.0
in our example) in the Local
LAN IP Subnetmask field.
Page 264 / 296
Reference Manual for the ProSafe Wireless 802.11g
Firewall/Print Server Model FWG114P v2
G-4
NETGEAR VPN Configuration FVS318 or FVM318 to FWG114P v2
201-10301-02, May 2005
–
Choose a subnet from local address from the “Tunnel can access” pull-down menu.
–
Type the starting LAN IP Address of Gateway B (
172.23.9.1
in our example) in the Local
IP Remote LAN Start IP Address field.
–
Type the finishing LAN IP Address of Gateway B (
0.0.0.0
in our example) in the Local IP
Remote LAN Finish IP Address field.
–
Type the LAN Subnet Mask of Gateway B (
255.255.255.0
in our example) in the Remote
LAN IP Subnetmask field.
–
Type the WAN IP address (
22.23.24.25
in our example) of Gateway B in the Remote
WAN IP or FQDN field.
Figure G-4:
Figure 4 – NETGEAR FVS318 VPN Settings (part 2) – Main Mode
–
From the Secure Association drop-down box, select Main Mode.
–
Next to Perfect Forward Secrecy, select the Enabled radio button.
–
From the Encryption Protocol drop-down box, select 3DES.
–
In the PreShared Key box, type a unique text string to be used as the shared key between
Gateway A and Gateway B.
In this example we used
hr5xb84l6aa9r6
. You must make
sure the key is the same for both gateways.
–
In the Key Life box, enter in 3600 seconds.
–
In the IKE Life Time, enter 28800 seconds.
–
Check the NETBIOS Enable box if you wish to pass NetBIOS traffic over the VPN
tunnel, allowing functions, such as Microsoft Network Neighborhood browsing.
3.
Click the Apply button in the lower center of the screen to save all changes and return to the
VPN Settings screen.
4.
When the screen returns to the VPN Settings, make sure the Enable check box is selected.
Page 265 / 296
Reference Manual for the ProSafe Wireless 802.11g
Firewall/Print Server Model FWG114P v2
NETGEAR VPN Configuration FVS318 or FVM318 to FWG114P v2
G-5
201-10301-02, May 2005
Step-By-Step Configuration of FWG114P Gateway B
1.
Log in to the NETGEAR FVS328 labeled Gateway B as in the illustration.
Out of the box, the FVS328 is set for its default LAN address of
with its
default user name of
admin
and default password of
password
. For this example we will
assume you have set the local LAN address as 172.23.9.1 for Gateway B and have set your
own user name and password.
2.
Click the IKE Policies link under the VPN category link on the left side of the Settings
management GUI. This will open the IKE Policies Menu. Click Add. This will open a new
screen titled IKE Policy Configuration.
Figure G-5:
NETGEAR FVS328 IKE Policy Configuration – Part 1
–
Enter an appropriate name for the policy in the Policy Name field. This name is not
supplied to the remote VPN Endpoint. It is used to help you manage the IKE policies. In
our example we have used FVS318 as the Policy Name. In the Policy Name field type
FVS318
.
–
From the Direction/Type drop-down box, select Both Directions.
–
From the Exchange Mode drop-down box, select Main Mode.
–
From the Local Identity drop-down box, select WAN IP Address (WAN IP address will
automatically be populated into the Local Identity Data field after policy is applied).
–
From the Remote Identity drop-down box, select Remote WAN IP (WAN IP address will
automatically be populated into the Local Identity Data field after policy is applied).

Rate

4 / 5 based on 1 vote.

Popular NETGEAR Models

Famous Router IPs
Famous Router Companies
Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top