NETGEAR FR314 Reference Manual page 104

Reference Guide for the Model FR314, FR318 and FV318 Cable/DSL Firewall and VPN Routers
If you have an FR318 with the VPN Upgrade Option, you can configure one security association.
If you have an FV318, you can configure up to five security associations. A security association is
configured as follows:
In the Security Association pull-down menu, select "Add New SA" to define a new security
1.
association, or select the name of an existing security association to modify its configuration.
SA Type: Select whether this security association will be between two Netgear VPN routers
2.
(Peer Netgear Router) or between a remote PC and your Netgear VPN router (VPN Client).
This option selects the necessary encryption method for each type of VPN connection.
SA Name: Enter a descriptive name for this Security Association.
3.
If the other endpoint is a Netgear VPN router and it does not have a fixed (permanent, static)
IP address, enter the other router's Unique Firewall Identifier as the SA Name.
Gateway Address: If the remote endpoint (VPN router or client) to which you will be
4.
connecting has a fixed IP address, enter it here.
If the remote endpoint has a dynamically-assigned IP address, enter "0.0.0.0" in the Gateway
Address field. In this case, the remote endpoint must initiate the connection.
Note: At least one of the two endpoints must have a fixed IP address.
Security Policy: Select the Encryption Algorithm that will be used for encoding data to be
5.
transferred over this tunnel.
The content of this box differs depending on whether you have selected a connection to a Peer
Netgear Router or to a VPN Client PC. In either case, you are offered the choice of a faster
56-bit payload encryption or a stronger 168-bit encryption.
For connection to a Peer Netgear Router, your encryption choices are:
— Fast Encrypt (ESP ARCFour) – uses ARCFour encryption, which is similar to Single DES
but faster.
— Strong Encrypt (ESP 3DES) – uses Triple DES (3DES) for maximum security with a
slower throughput.
For connection to a VPN Client PC, your encryption choices are:
— Encrypt and authenticate (ESP DES HMAC MD5) – uses Single DES encryption.
— Strong Encrypt and authenticate (ESP 3DES HMAC MD5) – uses Triple DES (3DES) for
maximum security with a slower throughput.
Security Policy: Enter the Shared Secret that will match the secret used by the remote
6.
endpoint.
10-6 Virtual Private Networking