NETGEAR FWG114P Router Manual PDF (Setup & Configuration Guide)

Page 266 / 296 Scroll up to view Page 261 - 265

Reference Manual for the ProSafe Wireless 802.11g

Firewall/Print Server Model FWG114P v2

G-6

NETGEAR VPN Configuration FVS318 or FVM318 to FWG114P v2

201-10301-02, May 2005

Figure G-6:

NETGEAR FVS328 IKE Policy Configuration – Part 2

–

From the Encryption Algorithm drop-down box, select 3DES.

–

From the Authentication Algorithm drop-down box, select MD5.

–

From the Authentication Method radio button, select Pre-shared Key.

–

In the Pre-Shared Key field, type

hr5xb84l6aa9r6

. You must make sure the key is the

same for both gateways.

–

From the Diffie-Hellman (DH) Group drop-down box, select Group 1 (768 Bit).

–

In the SA Life Time field, type 28800.

3.

Click the Apply Button. This will bring you back to the IKE Policies Menu.

Figure G-7:

NETGEAR FVS328 IKE Policies (Post Configuration)

The FVS318

IKE Policy is now displayed in the IKE Policies page.

4.

Click the VPN Policies link under the VPN category link on the left side of the Settings

management GUI. This will take you to the VPN Policies Menu page. Click Add Auto Policy.

This will open a new screen titled VPN – Auto Policy.

Page 267 / 296

Reference Manual for the ProSafe Wireless 802.11g

Firewall/Print Server Model FWG114P v2

NETGEAR VPN Configuration FVS318 or FVM318 to FWG114P v2

G-7

201-10301-02, May 2005

Figure G-8:

NETGEAR FVS328 VPN – Auto Policy (part 1)

–

Enter a unique name to identify this policy. This name is not supplied to the remote VPN

endpoint. In our example we have used

to318

as the Policy Name. In the Policy Name

field type

to318

.

–

From the IKE policy drop-down box, select the IKE Policy that was set up in the earlier

step – this being the FVS318 IKE Policy.

–

From the Remote VPN Endpoint Address Type drop-down box, select IP Address.

–

Type the WAN IP Address of Gateway A (

14.15.16.17

in our example) in the

Remote

VPN Endpoint Address Data field.

–

Type

300

in the SA Life Time (Seconds) field.

–

Type

0

in the SA Life Time (Kbytes) field.

–

Check the IPSec PFS check box.

–

From the PFS Key Group drop-down box, select Group 2 (1024 Bit).

–

From the Traffic Selector Local IP drop-down box, select Subnet address.

–

Type the starting LAN IP Address of Gateway B (

172.23.9.1

in our example) in the Local

IP Start IP Address field.

–

Type the finishing LAN IP Address of Gateway B (

0.0.0.0

in our example) in the Local IP

Finish IP Address field.

Page 268 / 296

Reference Manual for the ProSafe Wireless 802.11g

Firewall/Print Server Model FWG114P v2

G-8

NETGEAR VPN Configuration FVS318 or FVM318 to FWG114P v2

201-10301-02, May 2005

–

Type the LAN Subnet Mask of Gateway B (

255.255.255.0

in our example) in the Local IP

Subnet Mask field.

Figure G-9:

NETGEAR FWG114P v2 VPN – Auto Policy (part 2)

–

From the Traffic Selector Remote IP drop-down box, select Subnet address.

–

Type the starting LAN IP Address of Gateway A (

10.5.6.1

in our example) in the Remote

IP Start IP Address field.

–

Type the finishing LAN IP Address of Gateway A (

0.0.0.0

in our example) in the Remote

IP Finish IP Address field.

–

Type the LAN Subnet Mask of Gateway A (

255.255.255.0

in our example) in the Remote

IP Subnet Mask field.

–

From the AH Configuration Authentication Algorithm drop-down box, select MD5.

–

Select Enable Encryption in the ESP Configuration Enable Encryption check box.

–

From the ESP Configuration Encryption Algorithm drop-down box, select 3DES.

–

Select Enable Authentication in the ESP Configuration Enable Authentication check box.

–

From the ESP Configuration Authentication Algorithm drop-down box, select MD5.

–

Select NETBIOS Enable in the NETBIOS Enable check box.

5.

Click the Apply Button. You will be taken back to the VPN Policies Menu page.

Page 269 / 296

Reference Manual for the ProSafe Wireless 802.11g

Firewall/Print Server Model FWG114P v2

NETGEAR VPN Configuration FVS318 or FVM318 to FWG114P v2

G-9

201-10301-02, May 2005

Figure G-10:

NETGEAR FWG114P v2 VPN Policies Menu (Post Configuration)

6.

When the screen returns to the

VPN Policies

, make sure the

Enable

check box is selected.

Click the

Apply

button.

Test the VPN Connection

1.

From a PC behind the NETGEAR FVS318 or FVM318 gateway A attempt to ping the remote

FWG114P v2 gateway B LAN Interface address (example address 172.23.9.1).

2.

From a PC behind the FWG114P v2 gateway B attempt to ping the remote NETGEAR

FVS318 or FVM318 gateway A LAN Interface address (example address 10.5.6.1).

3.

Click the Broadband Status link on the left side of the FWG114P v2 Settings management

GUI. Click the Show VPN Status button below. This will take you to the IPSec Connection

Status Screen. If the connection is functioning properly, the State fields will show “Estab.”

4.

Click the Router Status link on the left side of the FVS318 Settings management GUI. Click

the Show VPN Logs button below. NETGEAR log files should be similar to the example

below.

Page 270 / 296

Reference Manual for the ProSafe Wireless 802.11g

Firewall/Print Server Model FWG114P v2

G-10

NETGEAR VPN Configuration FVS318 or FVM318 to FWG114P v2

201-10301-02, May 2005

Rate

Popular NETGEAR Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share