Chapter 7 Virtual Private Networking Using Ipsec Connections; Considerations For Dual Wan Port Systems; (Multiple Wan Port Models Only) - NETGEAR UTM5 Reference Manual

Virtual Private Networking
7.
Using IPSec Connections
This chapter describes how to use the IP security (IPSec) virtual private networking (VPN)
features of the UTM to provide secure, encrypted communications between your local network
and a remote network or computer. This chapter contains the following sections:
• Use the IPSec VPN Wizard for Client and Gateway Configurations
• Test the Connection and View Connection and Status Information
• Manage IPSec VPN Policies
• Configure Extended Authentication (XAUTH)
• Assign IP Addresses to Remote Users (Mode Config)
• Configure Keep-Alives and Dead Peer Detection
• Configure NetBIOS Bridging with IPSec VPN
• Configure the PPTP Server
• Configure the L2TP Server

Considerations for Dual WAN Port Systems

(Multiple WAN Port Models Only)

On the multiple WAN port models only, if two WAN ports are configured, you can enable
either auto-rollover mode for increased system reliability or load balancing mode for optimum
bandwidth efficiency. Your WAN mode selection impacts how the VPN features need to be
configured.
Note: For the UTM9S only, you can also use a DSL interface in
combination with a WAN interface for VPN tunnel failover.
The use of fully qualified domain names (FQDNs) in VPN policies is mandatory when the
WAN ports function in auto-rollover mode or load balancing mode, and is also required for
VPN tunnel failover. When the WAN ports function in load balancing mode, you cannot
configure VPN tunnel failover. An FQDN is optional when the WAN ports function in load
249
7