Plan A Vpn - NETGEAR DGN2200v3 User Manual

A VPN between two or more NETGEAR VPN-enabled routers is a good way to connect
branch or home offices and business partners over the Internet. VPN tunnels also enable
access to network resources across the Internet. In this case, use gateways on each end of
the tunnel to form the VPN tunnel end points. See
on page 117 for information about how to set up this configuration.
Configuration

Plan a VPN

When you set up a VPN, it is helpful to plan the network configuration and record the
configuration parameters on a worksheet:
Table 4. VPN Tunnel Configuration Worksheet
Parameter
Connection Name
Pre-Shared Key
Secure Association
Perfect Forward secrecy
Encryption Protocol
Authentication Protocol
Diffie-Hellman (DH) Group
Key Life in seconds
IKE Life Time in seconds
VPN Endpoint
To set up a VPN connection, you need to configure each endpoint with specific identification
and connection information describing the other endpoint. You configure the outbound VPN
settings on one end to match the inbound VPN settings on other end, and vice versa.
This set of configuration information defines a security association (SA) between the two
VPN endpoints. When planning your VPN, you have to make a few choices first:
Will the local end be any device on the LAN, a portion of the local network (as defined by
•
a subnet or by a range of IP addresses), or a single PC?
Will the remote end be any device on the remote LAN, a portion of the remote network
•
(as defined by a subnet or by a range of IP addresses), or a single PC?
Will either endpoint use fully qualified domain names (FQDNs)? FQDNs supplied by
•
Dynamic DNS providers (see
page 149) can allow a VPN endpoint with a dynamic IP address to initiate or respond to a
N300 Wireless ADSL2+ Modem Router DGN2200v3
Value to Be Entered Field Selection
N/A
N/A
N/A
N/A
N/A
Local IPSecID LAN IP Address
Using a Fully Qualified Domain Name (FQDN)
Virtual Private Networking
Set Up a Gateway-to-Gateway VPN
N/A
N/A
Main Mode
Enabled
DES
MD5
Group 1
N/A
N/A
Subnet Mask
105
Manual Keys
Disabled
3DES
SHA-1
Group 2
FQDN or Gateway
IP (WAN IP Address
on