1. Home
    2. /
  2. Manuals
    3. /
  3. NETGEAR
    4. /
  4. SRX5308
    5. /
  5. 42
Page 206 / 469 Scroll up to view Page 201 - 205
Virtual Private Networking Using IPSec
and
L2TP Connections
206
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Tip:
To ensure that tunnels stay active, after completing the wizard, manually
edit the VPN policy to enable keep-alives, which periodically sends ping
packets to the host on the peer side of the network to keep the tunnel
alive. For more information, see
Configure Keep-Alives
on page
266.
Tip:
For DHCP WAN configurations, first set up the tunnel with IP addresses.
After you validate the connection, you can use the wizard to create new
policies using the FQDN for the WAN addresses.
3.
Click
Apply
to save your settings. The IPSec VPN policy is now added to the List of VPN
Policies table on the VPN Policies screen for IPv4. By default, the VPN policy is enabled.
This VPN tunnel will use the
following local WAN Interface
Select a WAN interface from the drop-down list to specify which local WAN
interface the VPN tunnel uses as the local endpoint.
(Optional) Select the
Enable RollOver?
check box to enable VPN rollover,
and select a WAN interface from the drop-down list to the right of the check
box to specify the interface to which the VPN rollover should occur.
Note:
If the VPN firewall is configured to function in WAN auto-rollover
mode, you can use the VPN Wizard to configure VPN rollover and do not
need to configure this manually.
End Point Information
a
What is the Remote WAN’s IP
Address or Internet Name?
Enter the IPv4 address or Internet name (FQDN) of the WAN interface on
the remote VPN tunnel endpoint.
What is the Local WAN’s IP
Address or Internet Name?
When you select the Gateway radio button in the About VPN Wizard
section of the screen, the IPv4 address of the VPN firewall’s active WAN
interface is automatically entered.
Secure Connection Remote Accessibility
What is the remote LAN IP
Address?
Enter the LAN IPv4 address of the remote gateway.
Note:
The remote LAN IPv4 address needs to be in a different subnet from
the local LAN IP address. For example, if the local subnet is 192.168.1.x,
the remote subnet could be 192.168.10.x but could not be 192.168.1.x. If
this information is incorrect, the tunnel fails to connect.
What is the remote LAN
Subnet Mask?
Enter the LAN subnet mask for the remote gateway.
a. Both local and remote endpoints should be defined as either FQDNs or IP addresses. A combination of
an IP address and an FQDN is not supported.
Table 44.
IPSec VPN Wizard settings for an IPv4 gateway-to-gateway tunnel (continued)
Setting
Description
Page 207 / 469
Virtual Private Networking Using IPSec
and
L2TP Connections
207
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Figure 128.
4.
Configure a VPN policy on the remote gateway that allows connection to the VPN firewall.
5.
Activate the IPSec VPN connection:
a.
Select
VPN > Connection Status
.
The Connection Status submenu tabs display with
the IPSec VPN Connection Status screen in view:
Figure 129.
b.
Locate the policy in the table, and click the
Connect
table button. The IPSec VPN
connection becomes active.
Note:
When using FQDNs, if the Dynamic DNS service is slow to update
its servers when your DHCP WAN address changes, the VPN tunnel
fails because the FQDNs do not resolve to your new address. If you
have the option to configure the update interval, set it to an
appropriately short time.
Page 208 / 469
Virtual Private Networking Using IPSec
and
L2TP Connections
208
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Create an IPv6 Gateway-to-Gateway VPN Tunnel with the
Wizard
Figure 130.
To set up an IPv6 gateway-to-gateway VPN tunnel using the VPN Wizard:
1.
Select
VPN > IPSec VPN > VPN Wizard
.
2.
In the upper right of the screen, select the
IPv6
radio button. The VPN Wizard screen
displays the IPv6 settings. (The following screen contains some examples that do not relate
to other examples in this manual.)
Figure 131.
Page 209 / 469
Virtual Private Networking Using IPSec
and
L2TP Connections
209
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
To view the wizard default settings, click the
VPN Wizard default values
option arrow
in
the upper right of the screen. A pop-up screen displays (see the following figure),
showing the wizard default values. The default values are the same for IPv4 and IPv6.
Figure 132.
3.
Complete the settings as described in the following table:
Table 45.
IPSec VPN Wizard settings for an IPv6 gateway-to-gateway tunnel
Setting
Description
About VPN Wizard
This VPN tunnel will connect
to the following peers
Select the
Gateway
radio button. The local WAN port’s IP address or
Internet name displays in the End Point Information section of the screen.
Connection Name and Remote IP Type
What is the new Connection
Name?
Enter a descriptive name for the connection. This name is used to help you
to manage the VPN settings; the name is not supplied to the remote VPN
endpoint.
Page 210 / 469
Virtual Private Networking Using IPSec
and
L2TP Connections
210
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Tip:
To ensure that tunnels stay active, after completing the wizard, manually
edit the VPN policy to enable keep-alives, which periodically sends ping
packets to the host on the peer side of the network to keep the tunnel
alive. For more information, see
Configure Keep-Alives
on page
266.
Tip:
For DHCP WAN configurations, first set up the tunnel with IP addresses.
After you validate the connection, you can use the wizard to create new
policies using the FQDN for the WAN addresses.
4.
Click
Apply
to save your settings. The IPSec VPN policy is now added to the List of VPN
Policies table on the VPN Policies screen for IPv6. By default, the VPN policy is enabled.
This VPN tunnel will use the
following local WAN Interface
Select a WAN interface from the drop-down list to specify which local WAN
interface the VPN tunnel uses as the local endpoint.
(Optional) Select the
Enable RollOver?
check box to enable VPN rollover,
and select a WAN interface from the drop-down list to the right of the check
box to specify the interface to which the VPN rollover should occur.
Note:
If the VPN firewall is configured to function in WAN auto-rollover
mode, you can use the VPN Wizard to configure VPN rollover and do not
need to configure this manually.
What is the pre-shared key?
Enter a pre-shared key. The key needs to be entered both here and on the
remote VPN gateway. This key needs to have a minimum length of
8
characters and should not exceed 49 characters.
End Point Information
a
What is the Remote WAN’s IP
Address or Internet Name?
Enter the IPv6 address or Internet name (FQDN) of the WAN interface on
the remote VPN tunnel endpoint.
What is the Local WAN’s IP
Address or Internet Name?
When you select the Gateway radio button in the About VPN Wizard
section of the screen, the IPv6 address of the VPN firewall’s active WAN
interface is automatically entered.
Secure Connection Remote Accessibility
What is the remote LAN IP
Address?
Enter the LAN IPv6 address of the remote gateway.
Note:
The remote LAN IPv6 address needs to be different from the local
LAN IPv6 address. For example, if the local LAN IPv6 address is fec0::1,
the remote LAN IPv6 address could be fec0:1::1 but could not be fec0::1.
If this information is incorrect, the tunnel fails to connect.
IPv6 Prefix Length
Enter the prefix length for the remote gateway.
a. Both local and remote endpoints should be defined as either FQDNs or IP addresses. A combination of
an IP address and an FQDN is not supported.
Table 45.
IPSec VPN Wizard settings for an IPv6 gateway-to-gateway tunnel (continued)
Setting
Description

Rate

3.5 / 5 based on 2 votes.

Popular NETGEAR Models

Famous Router IPs
Famous Router Companies
Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top