NETGEAR FWG114Pv2 - Wireless Firewall With USB Print Server Reference Manual page 120

Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P v2
Table 8-1. VPN Auto Policy Configuration Fields
Field
Traffic Selector
Local IP
Remote IP
Authenticating Header (AH)
Configuration
Enable Authentication
Authentication
Algorithm
Encapsulated Security
Payload (ESP) Configuration
8-8
Description
These settings determine if and when a VPN tunnel will be established. If
network traffic meets all criteria, then a VPN tunnel will be created.
The drop-down menu allows you to configure the source IP address of the
outbound network traffic for which this VPN policy will provide security.
Usually, this address will be from your network address space. The
choices are:
• Default: ANY for all valid IP addresses in the Internet address space
Note: Selecting ANY means all traffic goes through the IPSec tunnel
and prevents access to the Internet.
• Single IP Address
• Range of IP Addresses
• Subnet Address
The drop-down menu allows you to configure the destination IP address of
the outbound network traffic for which this VPN policy will provide security.
Usually, this address will be from the remote site's corporate network
address space. The choices are:
• ANY for all valid IP addresses in the Internet address space
Note: Selecting ANY means all traffic goes through the IPSec tunnel
and prevents access to the Internet.
• Single IP Address
• Range of IP Addresses
• Subnet Address
AH specifies the authentication protocol for the VPN header. These
settings must match the remote VPN endpoint.
Use this checkbox to enable or disable AH for this VPN policy.
If you enable AH, then select the authentication algorithm:
• MD5 is the default.
• SHA1 is more secure.
ESP provides security for the payload (data) sent through the VPN tunnel.
Generally, you will want to enable both Encryption and Authentication.
Two ESP modes are available:
• Plain ESP encryption
• ESP encryption with authentication
These settings must match the remote VPN endpoint.
201-10301-02, May 2005
Virtual Private Networking