NETGEAR FVL328 Reference Manual page 206

Reference Manual for the NETGEAR ProSafe VPN Client
– From the Remote VPN Endpoint Address Type drop-down box, select IP Address.
– Type 0.0.0.0 as the Address Data of the client because we are assuming the remote PC will
have a dynamically assigned IP address. This will also be entered in the NETGEAR
ProSafe VPN Client Internal Network IP Address field, as seen in
H-9.
– Type 86400 in the SA Life Time (Seconds) field.
– Type 0 in the SA Life Time (Kbytes) field.
– Check the IPSec PFS check box to enable Perfect Forward Secrecy. This will also be
entered in the NETGEAR ProSafe VPN Client Security Policy Enable Perfect Forward
Secrecy check box, as seen in
– From the PFS Key Group drop-down box, select Group 2 (1024 Bit). This will also be
entered in the NETGEAR ProSafe VPN Client Security Policy PFS Key Group
drop-down selection box, as seen in
– From the Traffic Selector Local IP drop-down box, select Subnet addresses. This will
also be entered in the NETGEAR ProSafe VPN Client Connection Remote Party Identity
and Addressing ID Type field, as seen in
page H-8.
– Type the starting LAN IP Address of the FVL328 in the Local IP Start IP Address field.
For this example, we used 192.168.0.0 which is the default LAN IP address of the
FVL328. This will also be entered in the NETGEAR ProSafe VPN Client Connection
Remote Party Identity and Addressing Subnet field, as seen in
New Connection" on page
– Type the LAN Subnet Mask of the FVL328 (255.255.255.0 in our example) in the Local
IP Subnet Mask field. This will also be entered in the NETGEAR ProSafe VPN Client
Connection Remote Party Identity and Addressing Mask field, as seen in
Editor New Connection" on page
– From the Traffic Selector Remote IP drop-down box, select Single addresses.
– Type 0.0.0.0 as the start IP Address of the in the Remote IP Start IP Address field because
we are assuming the remote PC will have a dynamically assigned IP address. This will
also be entered in the NETGEAR ProSafe VPN Client My Identity Internal Network IP
Address field, as seen in
– Select the Enable Encryption check box. This will also be selected in the NETGEAR
ProSafe VPN Client Security Policy Key Exchange (Phase 2) Encapsulation Protocol
(ESP) check box, as seen in
page H-12.
H-6
"Security Policy" on page
"Security Policy" on page
H-8.
H-8.
"My Identity" on page
"Connection Security Policy Key Exchange (Phase 2)" on
NETGEAR VPN Client to NETGEAR FVL328 or FWAG114 VPN Router
202-10015-01
H-10.
"Security Policy Editor New Connection" on
H-9.
"My Identity" on page
H-10.
"Security Policy Editor
"Security Policy