Vpn Tunnel Configuration - NETGEAR DGN2200v1 User Manual

N300 Wireless ADSL2+ Modem Router DGN2200
page 146) can allow a VPN endpoint with a dynamic IP address to initiate or respond to a
tunnel request. Otherwise, the side using a dynamic IP address has to always be the
initiator.
Which method will you use to configure your VPN tunnels?
•
The VPN Wizard using VPNC defaults (see
-
the BPNC and Used in the VPN Wizard
The typical automated Internet Key Exchange (IKE) setup (see
-
Configure VPN Tunnels
A manual keying setup in which you need to specify each phase of the connection
-
(see
Use Manual Policy to Configure VPN Tunnels
Table 4. Parameters Recommended by the BPNC and Used in the VPN Wizard
Parameter
Secure Association
Authentication Method
Encryption Method
Authentication Protocol
Diffie-Hellman (DH) Group
Key Life
IKE Life Time
What level of IPSec VPN encryption will you use?
•
DES. The Data Encryption Standard (DES) processes input data that is 64 bits wide,
-
encrypting these values using a 56-bit key. Faster but less secure than 3DES.
3DES. Triple DES achieves a higher level of security by encrypting the data three
-
times using DES with three different, unrelated keys.
What level of authentication will you use?
•
MDS. 128 bits, faster but less secure.
-
SHA-1. 160 bits, slower but more secure.
-

VPN Tunnel Configuration

There are two tunnel configurations and three ways to configure them:
Use the VPN Wizard to configure a VPN tunnel (recommended for most situations):
•
See
- Set Up a Client-to-Gateway VPN Configuration
See
- Set Up a Gateway-to-Gateway VPN Configuration
See
• Use Auto Policy to Configure VPN Tunnels
its VPNC defaults are not appropriate for your special circumstances, but you want to
automate the Internet Key Exchange (IKE) setup.
Table 4, Parameters Recommended by
on page 97).
on page 118).
Factory Default Setting
Main Mode
Pre-Shared Key
3DES
SHA-1
Group 2 (1024 bit)
8 hours
1 hour
on page 118 when the VPN Wizard and
Chapter 8. Virtual Private Networking
Use Auto Policy to
on page 125)?
on page 98.
on page 108.
| 97