Planning A Vpn; Vpn Configuration Choices - NETGEAR FVM318 Reference Manual

Reference Manual for the Model FVM318 Cable/DSL ProSafe Wireless VPN Security Firewall
access to network resources when NAT is enabled and remote computers have been assigned
private IP addresses.
• Secure access from a remote PC, such as a telecommuter connecting to an office network.
VPN client access allows a remote PC to connect to your network from any location on the
Internet. In this case, the remote PC is one tunnel endpoint, running VPN client software. The
FVM318 firewall router on your network is the other tunnel endpoint
• The FVM318 firewall supports up to eight concurrent tunnels.
These scenarios are described below.
Note: The FVM318 firewall uses industry standard VPN protocols. However, due to
variations in how manufacturers interpret these standards, many VPN products are not
interoperable. NETGEAR provides support for connections between FVM318 firewalls,
and between an FVM318 firewall and the SafeNet SoftRemote VPN Client for
Windows. Although the FVS318 can interoperate with many other VPN products, it is
not possible for NETGEAR to provide specific technical support for every other
interconnection. Please see NETGEAR's web site for additional VPN information.

Planning a VPN

When you set up a VPN, it is helpful to plan the network configuration and record the
configuration parameters on a worksheet. These topics are discussed below.

VPN Configuration Choices

When planning your VPN, you must make a few choices first:
• To set up a VPN connection, you must configure each endpoint with specific identification and
connection information describing the other endpoint. This set of configuration information
defines a security association (SA) between the two points. The FVS318 is capable of eight
Security Associations which are commonly referred to as tunnels.
• Will the remote end be a network or a single PC?
Note: To connect remote networks, the LAN IP address ranges of each connected network
must be different. The connection will not work if both ends are using the NETGEAR default
address range of 192.168.0.x.
4-2 Virtual Private Networking