NETGEAR FWG114Pv2 - Wireless Firewall With USB Print Server Reference Manual page 149

Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P v2
– From the Remote VPN Endpoint Address Type drop-down box, select IP Address.
– Type 0.0.0.0 as the Address Data of the client because we are assuming the remote PC will
have a dynamically assigned IP address. This will also be entered in the VPN Client
Internal Network IP Address field, as seen in
– Type 86400 in the SA Life Time (Seconds) field.
– Type 0 in the SA Life Time (Kbytes) field.
– Check the IPSec PFS check box to enable Perfect Forward Secrecy. This will also be
entered in the VPN Client Security Policy Enable Perfect Forward Secrecy check box, as
seen in "Security Policy" on page
– From the PFS Key Group drop-down box, select Group 2 (1024 Bit). This will also be
entered in the VPN Client Security Policy PFS Key Group drop-down selection box, as
seen in "Security Policy" on page
– From the Traffic Selector Local IP drop-down box, select Subnet addresses. This will
also be entered in the VPN Client Connection Remote Party Identity and Addressing ID
Type field, as seen in
Selecting ANY for the Traffic Selectors means all traffic goes through the IPSec
Note:
tunnel and prevents access to the Internet.
– Type the starting LAN IP Address of the FWG114P v2 in the Local IP Start IP Address
field. For this example, we used 192.168.0.0 which is the default LAN IP address of the
FWG114P v2. This will also be entered in the VPN Client Connection Remote Party
Identity and Addressing Subnet field, as seen in
on page 8-39.
– Type the LAN Subnet Mask of the FWG114P v2 (255.255.255.0 in our example) in the
Local IP Subnet Mask field. This will also be entered in the VPN Client Connection
Remote Party Identity and Addressing Mask field, as seen in
Connection" on page
– From the Traffic Selector Remote IP drop-down box, select Single addresses.
– Type 0.0.0.0 as the start IP Address of the in the Remote IP Start IP Address field because
we are assuming the remote PC will have a dynamically assigned IP address. This will
also be entered in the VPN Client My Identity Internal Network IP Address field, as seen
in "My Identity" on page
– Select the Enable Encryption check box. This will also be selected in the VPN Client
Security Policy Key Exchange (Phase 2) Encapsulation Protocol (ESP) check box, as seen
in "Connection Security Policy Key Exchange (Phase 2)" on page
– From the ESP Configuration Encryption Algorithm drop-down box, select 3DES. This
will also be entered in the VPN Client Security Policy Key Exchange (Phase 2) Encrypt
Alg field, as seen in
Virtual Private Networking
8-41.
8-41.
"Security Policy Editor New Connection" on page
8-39.
8-40.
"Connection Security Policy Key Exchange (Phase 2)" on page
201-10301-02, May 2005
"My Identity" on page
"Security Policy Editor New Connection"
"Security Policy Editor New
8-43.
8-40.
8-39.
8-43.
8-37