NETGEAR FVL328 Reference Manual page 70

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual
The IKE Policy Configuration fields are defined in the following table.
Table 6-1. IKE Policy Configuration Fields
Field
General
Policy Name
Direction/Type
Exchange Mode
Local
Local Identity Type
Local Identity Data
Remote
6-4
Description
These settings identify this policy and determine its major characteristics.
The descriptive name of the IKE policy. Each policy should have a unique
policy name. This name is not supplied to the remote VPN endpoint. It is
only used to help you identify IKE policies.
This setting is used when determining if the IKE policy matches the current
traffic. The drop-down menu includes the following:
• Initiator – Outgoing connections are allowed, but incoming are blocked.
• Responder – Incoming connections are allowed, but outgoing are
blocked.
• Both Directions – Both outgoing and incoming connections are allowed.
• Remote Access – This is to allow only incoming client connections,
where the IP address of the remote client is unknown.
If Remote Access is selected, the "Exchange Mode" MUST be
"Aggressive," and the 'Identities' below (both Local and Remote) MUST
be "Name." On the matching VPN Policy, the IP address of the remote
VPN endpoint should be set to 0.0.0.0.
Main Mode or Aggressive Mode. This setting must match the setting used
on the remote VPN endpoint.
• Main Mode is slower but more secure.
• Aggressive Mode is faster but less secure.
These parameters apply to the Local FVL328 firewall.
Use this field to identify the local FVL328. You can choose one of the
following four options from the drop-down list:
• By its Internet (WAN) port IP address.
• By its Fully Qualified Domain Name (FQDN) – your domain name.
• By a Fully Qualified User Name – your name, E-mail address, or
other ID.
• By DER ASN.1 DN – the binary Distinguished Encoding Rules (DER)
encoding of your ASN.1 X.500 Distinguished Name.
This field lets you identify the local FVL328 by name.
These parameters apply to the target remote FVL328 firewall, VPN
gateway, or VPN client.
M-10144-01
Virtual Private Networking