NETGEAR N300 User Manual page 133

N300 Wireless ADSL2+ Modem Router DGN2200v3
• Single/Start IP Address. The IP address for a single address, or the starting address for
an address range used on the LAN. If you want to make a single server on your LAN
available to remote users, use a single address Any settings. The remote VPN endpoint
can be at any IP address.
• Finish IP Address. For an address range, enter the finish IP address. This has to be an
address range used on your LAN.
• Subnet Mask. Enter the network mask.
VPN Manual Policy Remote LAN Settings
The remote VPN endpoint has to have these IP addresses entered as its local addresses.
• IP Address. Select Single PC - no Subnet if there is no LAN (only a single PC) at the
remote endpoint. If this option is selected, no additional data is required. The typical
application is a PC running the VPN client at the remote end.
• Single/Start IP Address. Enter an IP address on the remote LAN. You can use this
setting to access a server.
- For a range of addresses, enter the starting IP address. This has to be an address
range used on the remote LAN.
- Any. Any outgoing traffic from specified Local IP computers triggers an attempted
VPN connection to the remote VPN endpoint. Be sure you want this option before
selecting it.
• Finish IP Address. Enter the finish IP address for a range of addresses. This has to be
an address range used on the remote LAN.
• Subnet Mask. Enter the network mask.
VPN Manual Policy ESP Settings
ESP (Encapsulating Security Payload) provides security for the payload (data) sent through
the VPN tunnel.
• SPI. Enter the required Security Policy Indexes (SPIs). Each policy has to have unique
SPIs. These settings need to match the remote VPN endpoint. The in setting here has to
match the out setting on the remote VPN endpoint, and the out setting here has to match
the in setting on the remote VPN endpoint.
• Encryption. Select an encryption algorithm, and enter the key in the field provided. For
3DES, the keys should be 24 ASCII characters, and for DES, the keys should be 8 ASCII
characters.
- DES. The Data Encryption Standard (DES) processes input data that is 64 bits wide,
encrypting these values using a 56-bit key. Faster but less secure than 3DES.
- 3DES. (Triple DES) achieves a higher level of security by encrypting the data three
times using DES with three different, unrelated keys.
• Authentication. Specify the authentication and the key.
Virtual Private Networking
133