NETGEAR ProSafe FVS114 Reference Manual page 99

The VPN Manual Policy fields are defined in the following table.
Table 6-1. VPN Manual Policy Configuration Fields
Field
General
Policy Name
Remote VPN Endpoint
Traffic Selector
Local IP
Remote IP
Authenticating Header (AH)
Configuration
SPI - Incoming
SPI - Outgoing
Enable Authentication
Advanced Virtual Private Networking
Reference Manual for the ProSafe VPN Firewall FVS114
Description
These settings identify this policy and determine its major characteristics.
The name of the VPN policy. Each policy should have a unique policy
name. This name is not supplied to the remote VPN Endpoint. It is used to
help you identify VPN policies.
The WAN Internet IP address of the remote VPN firewall or client to which
you wish to connect. The remote VPN endpoint must have this FVS114's
WAN Internet IP address entered as its Remote VPN Endpoint.
These settings determine if and when a VPN tunnel will be established. If
network traffic meets all criteria, then a VPN tunnel will be created.
The drop down menu allows you to configure the source IP address of the
outbound network traffic for which this VPN policy will provide security.
Usually, this address is from your network address space. The choices are:
• ANY for all valid IP addresses in the Internet address space
• Single IP Address
• Range of IP Addresses
• Subnet Address
The drop down menu allows you to configure the destination IP address of
the outbound network traffic for which this VPN policy will provide security.
Usually, this address is from the remote site's corporate network address
space. The choices are:
• ANY for all valid IP addresses in the Internet address space
• Single IP Address
• Range of IP Addresses
• Subnet Address
AH specifies the authentication protocol for the VPN header. These
settings must match the remote VPN endpoint.
Note: The Incoming settings here must match the Outgoing settings on the
remote VPN endpoint, and the Outgoing settings here must match the
Incoming settings on the remote VPN endpoint.
Enter a hexadecimal value (3 - 8 chars). Any value is acceptable, provided
the remote VPN endpoint has the same value in its Outgoing SPI field.
Enter a hexadecimal value (3 - 8 chars). Any value is acceptable, provided
the remote VPN endpoint has the same value in its Incoming SPI field.
Use this check box to enable or disable AH. Authentication is often not
used. In this case, leave the check box unchecked.
202-10098-01, April 2005
6-11