Vpn Tunnel Configuration - NETGEAR DGND3300v2 - RangeMax Dual Band Wireless-N Modem Router User Manual

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
- The typical automated Internet Key Exchange (IKE) setup (see
Configure VPN Tunnels
- A manual keying setup in which you must specify each phase of the connection (see
Using Manual Policy to Configure VPN Tunnels
Table 2. Parameters Recommended by the VPNC and Used in the VPN Wizard
Parameter
Secure Association
Authentication Method
Encryption Method
Authentication Protocol
Diffie-Hellman (DH) Group
Key Life
IKE Life Time
• What level of IPSec VPN encryption will you use?
- DES. The Data Encryption Standard (DES) processes input data that is 64 bits wide,
encrypting these values using a 56-bit key. Faster but less secure than 3DES.
- 3DES. Triple DES achieves a higher level of security by encrypting the data three
times using DES with three different, unrelated keys.
• What level of authentication will you use?
- MDS. 128 bits, faster but less secure.
- SHA-1. 160 bits, slower but more secure.

VPN Tunnel Configuration

There are two tunnel configurations and three ways to configure them:
• Use the VPN Wizard to configure a VPN tunnel (recommended for most situations):
- See Setting Up a Client-to-Gateway VPN Configuration
- See Setting Up a Gateway-to-Gateway VPN Configuration
• See Using Auto Policy to Configure VPN Tunnels
its VPNC defaults (see
circumstances, but you want to automate the Internet Key Exchange (IKE) setup.
• See Using Manual Policy to Configure VPN Tunnels
and its VPNC defaults (see
circumstances and you must specify each phase of the connection. You manually enter
all the authentication and key parameters. You have more control over the process;
however, the process is more complex, and there are more opportunities for errors or
on page 101)
Factory Default Setting
Main Mode
Pre-Shared Key
3DES
SHA-1
Group 2 (1024 bit)
8 hours
1 hour
Table 2 on page 79) are not appropriate for your special
Table 2 on page 79) are not appropriate for your special
Using Auto Policy to
on page 109)
on page 80.
on page 90.
on page 101 when the VPN Wizard and
on page 109 when the VPN Wizard
Chapter 6. Virtual Private Networking | 79