Vpn Tunnel Configuration - NETGEAR DGND3700 User Manual

N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
• Will either endpoint use fully qualified domain names (FQDNs)? FQDNs supplied by
Dynamic DNS providers (see
can allow a VPN endpoint with a dynamic IP address to initiate or respond to a tunnel
request. Otherwise, the side using a dynamic IP address has to always be the initiator.
• Which method will you use to configure your VPN tunnels?
- The VPN Wizard using VPNC defaults (see the following table)
- The typical automated Internet Key Exchange (IKE) setup (see
Configure VPN Tunnels
- A manual keying setup in which you have to specify each phase of the connection
(see Use Manual Policy to Configure VPN Tunnels
Table 16. Parameters recommended by the VPNC and used in the VPN Wizard
Parameter
Secure Association
Authentication Method
Encryption Method
Authentication Protocol
Diffie-Hellman (DH) Group
Key Life
IKE Life Time
• What level of IPSec VPN encryption will you use?
- DES. The Data Encryption Standard (DES) processes input data that is 64 bits wide,
encrypting these values using a 56-bit key. Faster but less secure than 3DES.
- 3DES. Triple DES achieves a higher level of security by encrypting the data three
times using DES with three different, unrelated keys.
• What level of authentication will you use?
- MDS. 128 bits, faster but less secure.
- SHA-1. 160 bits, slower but more secure.

VPN Tunnel Configuration

There are two tunnel configurations and three ways to configure them:
• Use the VPN Wizard to configure a VPN tunnel (recommended for most situations):
- See Set Up a Client-to-Gateway VPN Configuration
- See Set Up a Gateway-to-Gateway VPN Configuration
• When the VPN Wizard and its VPNC defaults (see
appropriate for your special circumstances, but you want to automate the Internet Key
Exchange (IKE) setup, see
Use a Fully Qualified Domain Name (FQDN)
on page 112)
Factory Default Setting
Main Mode
Pre-Shared Key
3DES
SHA-1
Group 2 (1024 bit)
8 hours
1 hour
Use Auto Policy to Configure VPN Tunnels
Virtual Private Networking
89
Use Auto Policy to
on page 119)
on page 90.
on page 101.
Table 16 on page 89) are not
on page 112.
on page 163)