NETGEAR ProSAFE SRX5308 Reference Manual page 225

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Figure 148.
3. Specify the settings that are described in the following table.
Table 51. VPN client IPSec configuration settings
Setting
VPN Client address
Address Type
Remote LAN address Enter 192.168.1.0 as the remote IP address (that is, LAN network address) of the
Subnet mask
ESP
PFS and Group
Virtual Private Networking Using IPSec and L2TP Connections
Description
Either enter 0.0.0.0 as the IP address, or enter a virtual IP address that the VPN
client uses in the VPN firewall's LAN; the computer (for which the VPN client
opened a tunnel) appears in the LAN with this IP address.
Select Subnet address from the drop-down list. This selection defines which
addresses the VPN client can communicate with after the VPN tunnel is
established.
gateway that opens the VPN tunnel.
Enter 255.255.255.0 as the remote subnet mask of the gateway that opens the VPN
tunnel.
Encryption Select 3DES as the encryption algorithm from the drop-down list.
Authentication Select SHA-1 as the authentication algorithm from the drop-down
list.
Mode Select Tunnel as the encapsulation mode from the drop-down list.
Select the PFS check box, and select the DH2 (1024) key group from the
drop-down list.
Note: On the VPN firewall, this key group is referred to as Diffie-Hellman Group 2
(1024 bit).
225