Using The Vpn Wizard; Creating A Vpn Tunnel To A Gateway - NETGEAR DGFV338 ProSafe Reference Manual

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual
Table 5-1. IP addressing requirements for VPNs in dual WAN port systems
Configuration and WAN IP address
VPN Telecommuter
(client-to-gateway through a
NAT router)
*. All tunnels must be re-established after a rollover using the new WAN IP address.
Tip: When using dual WAN port networks, use the VPN Wizard to configure the basic
parameters and then edit the VPN and IKE Policy menus, if necessary, for the
various VPN scenarios.

Using the VPN Wizard

Configuring a VPN tunnel connection requires that all settings and parameters on both sides of the
VPN tunnel match or mirror each other precisely, which can be a daunting task. The VPN Wizard
efficiently guides you through the setup procedure with a series of questions that will determine
the IPSec keys and VPN policies it sets up. Using the information you provide, the VPN Wizard
will automatically configure the parameters for the network connection: Security Association,
traffic selectors, authentication algorithm, and encryption. The choices made by the VPN Wizard
are based on the recommended practices of the VPN Consortium (VPNC), an organization that
promotes multi-vendor VPN interoperability. You will be able to view the suggested VPNC
recommendations on the VPN Wizard summary page before establishing a VPN tunnel
connection.

Creating a VPN Tunnel to a Gateway

To set up a Gateway-to-Gateway VPN tunnel using the VPN Wizard:
1. Select Gateway as your VPN tunnel connection. The Wizard needs to know whether you are
planning to connect to a remote gateway/LAN or to a remote client/PC.
2. Select a Connection Name. Enter an appropriate name for the connection. This name is not
supplied to the remote VPN Endpoint. It is used to help you manage the VPN settings.
3. Enter a Pre-shared Key. The key must be entered both here and on the remote VPN gateway,
or the remote VPN client. This key length should be minimum 8 characters and should not
exceed 49 characters. This method does not require using a CA (Certificate Authority).
5-2
Rollover Mode
Fixed FQDN required
Dynamic FQDN required
v1.0, May 2008
* Dedicated Mode
Allowed (FQDN optional)
FQDN required
Virtual Private Networking