NETGEAR DGND3300v2 User Manual page 102

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2
The DGND3300v2 VPN tunnel network connection fields are defined in the following
sections.
VPN Auto Policy General Settings
• Policy Name. Enter a unique name. This name is not supplied to the remote VPN
endpoint. It is used only to help you manage the policies.
• Remote VPN Endpoint. The remote VPN endpoint has to have this VPN gateway's
address entered as its remote VPN endpoint.
If the remote endpoint has a dynamic IP address, select Dynamic IP Address. No
address data input is required. You can set up multiple remote dynamic IP policies, but
only one such policy can be enabled at a time. Otherwise, select an option (IP address or
domain name) and enter the address of the remote VPN endpoint to which you want to
connect.
• IKE Keep Alive. If you want to ensure that a connection is kept open, or, if that is not
possible, that it is quickly re-established when a connection is lost select this check box.
The ping IP address has to be associated with the remote endpoint. You have to use the
remote LAN address. This IP address will be pinged periodically to generate traffic for the
VPN tunnel. The remote keep-alive IP address needs to be covered by the remote LAN
IP range and to correspond to a device that can respond to a ping. The range should be
made as narrow as possible to meet this objective.
VPN Auto Policy Local LAN Settings
The remote VPN endpoint needs to have these IP addresses entered as its remote
addresses.
• Subnet Mask. The network mask.
• Single/Start IP Address. Enter the IP address for a single address, or the starting
address for an address range. A single address setting is used when you want to make a
single server on your LAN available to remote users. A range has to be an address range
used on your LAN. Any. The remote VPN endpoint might be at any IP address.
• Finish IP Address. For an address range, enter the finish IP address. This needs to be
an address range used on your LAN.
VPN Auto Policy Remote LAN Settings
The remote VPN endpoint has to have these IP addresses entered as its local addresses.
• IP Address. If there is no LAN (only a single computer) at the remote endpoint, select
Single PC - no Subnet option. If this option is selected, no additional data is required.
The typical application is a computer running the VPN client at the remote end.
• Single/Start IP Address. Enter an IP address that is on the remote LAN. You can use
this setting when you want to access a server on the remote LAN.
- For a range of addresses, enter the starting IP address. This needs to be an address
range used on the remote LAN.
Virtual Private Networking
102