Manually Assigning Ip Addresses To Remote Vpn Users (Modeconfig); Mode Config Operation - NETGEAR DGFV338 ProSafe Reference Manual

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual
9. Click Reset to cancel any changes and revert to the previous settings.
10. Click Apply to save the settings.
Note: Selection of the Authentication Protocol, usually PAP or CHAP, is configured
on the individual IKE policy screens.
Manually Assigning IP Addresses to Remote VPN Users
(ModeConfig)
To simply the process of connecting remote VPN clients to the DGFV338, the ModeConfig
module can be used to assign IP addresses to remote users, including a network access IP address,
subnet mask, and name server addresses from the router. Remote users are given IP addresses
available in secured network space so that remote users appear as seamless extensions of the
network.
In the following example, we configured the ProSafe DGFV338 using ModeConfig, and then
configured a PC running ProSafe VPN Client software using these IP addresses.
• NETGEAR ProSafe Wireless ADSL Modem VPN Firewall Router
– WAN IP address: 172.21.4.1
– LAN IP address/subnet: 192.168.2.1/255.255.255.0
• NETGEAR ProSafe VPN Client software IP address: 192.168.1.2

Mode Config Operation

After IKE Phase 1 is complete, the VPN connection initiator (remote user/client) asks for IP
configuration parameters such as IP address, subnet mask and name server addresses. The Mode
Config module will allocate an IP address from the configured IP address pool and will activate a
temporary IPSec policy using the template security proposal information configured in the Mode
Config record.
Note: After configuring a Mode Config record, you must go to the IKE Policies menu
and configure an IKE policy using the newly-created Mode Config record as the
Remote Host Configuration Record. The VPN Policies menu does not need to be
edited.
5-32
v1.0, May 2008
Virtual Private Networking