NETGEAR FVS318 - ProSafe VPN Firewall Router Reference Manual page 78

Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall
For each FVS318, fill in the Connection Name VPN settings as illustrated above.
b.
• The Connection Names can be the same: VPNAB
• Local IPSec Identifier name in the FVS318 on LAN A: LAN_A
Note: The IPSec names must unique in this VPN network.
• Local IPSec Identifier in the FVS318 on LAN B: LAN_B
• Remote IPSec Identifier in the FVS318 on LAN A: LAN_B
• Remote IPSec Identifier in the FVS318 on LAN B: LAN_A
• Remote LAN IP Address in the FVS318 on LAN A: 192.168.0.1
and Remote Subnet Mask in the FVS318 on LAN A: 255.255.255.0
This is the LAN IP Address and Subnet Mask for the FVS318 on LAN B.
Note: With these IP settings, using this VPN tunnel, you can connect to any device on
LAN B. Alternatively, you can specify a single address, a subnet of local addresses, or
a range of local addresses on LAN B which will limit the VPN tunnel to connecting to
just those devices. For example, you can specify the IP address of a single address on
LAN B and a Subnet Mask of 255.255.255.255 which will limit the VPN tunnel to
connecting to just that device.
• Remote LAN IP Address in the FVS318 on LAN B: 192.168.3.1
and Remote Subnet Mask in the FVS318 on LAN B: 255.255.255.0
This is the LAN IP Address for the FVS318 on LAN A.
• Remote WAN IP Address in the FVS318 on LAN A: 10.0.0.1
This is the WAN IP Address for the FVS318 on LAN B.
You can look up the WAN IP Address of the FVS318 on LAN B by viewing its WAN
Status screen. When the FVS318 on LAN B is connected to the Internet, log in, go to
its Maintenance menu Router Status link. If you find the WAN Port DHCP field says
"DHCP Client" or "PPPOE," then it is a dynamic address. For a dynamic address, you
would enter 0.0.0.0 in the configuration screen of the FVS318 on LAN A as the WAN
IP Address for the FVS318 on LAN B. Alternatively, you could use the FQDN of the
FVS318.
Note: If one FVS318 has a dynamic IP address and you do not use FQDN, that
FVS318 must always initiate the connection.
• Remote WAN IP Address in the FVS318 on LAN B: 24.0.0.1
This is the WAN IP Address for the FVS318 on LAN A.
Under Secure Association, select Main Mode and fill in the settings below.
c.
6-14
M-10146-01
Virtual Private Networking