NETGEAR DGND3300v2 User Manual page 103

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2
- Any. Any outgoing traffic from the computers in the Local IP fields triggers an
attempted VPN connection to the remote VPN endpoint. Be sure you want this option
before selecting it.
• Finish IP Address. Enter the finish IP address for a range of addresses. This has to be an
address range used on the remote LAN.
• Subnet Mask. Enter the network mask.
VPN Auto Policy IKE Settings
• Direction. This setting is used when the N300 wireless modem router determines if the
IKE policy matches the current traffic. Select an option.
- Responder only. Incoming connections are allowed, but outgoing connections are
blocked.
- Initiator and Responder. Both incoming and outgoing connections are allowed.
• Exchange Mode. Ensure that the remote VPN endpoint is set to use Main Mode.
• Diffie-Hellman (DH) Group. The Diffie-Hellman algorithm is used when keys are
exchanged. The DH Group setting determines the bit size used in the exchange. This
value needs to match the value used on the remote VPN gateway.
• Local Identity Type. Select an option to match the Remote Identity Type setting on the
remote VPN endpoint.
- WAN IP Address
- Fully Qualified Domain Name. Your domain name.
• Fully Qualified User Name. Your name, e-mail address, or other ID.
• Local Identity Data. Enter the data for the local identity type that you selected. (If WAN
IP Address is selected, no input is required.)
• Remote Identity Type. Select the option that matches the Local Identity Type setting on
the remote VPN endpoint.
- IP Address. The Internet IP address of the remote VPN endpoint.
- Fully Qualified Domain Name. The domain name of the remote VPN endpoint.
- Fully Qualified User Name. The name, email address, or other ID of the remote VPN
endpoint.
• Remote Identity Data. Enter the data for the remote identity type that you selected. If IP
Address is selected, no input is required.
VPN Auto Policy Parameters
• Encryption Algorithm. The encryption algorithm used for both IKE and IPSec. This
setting has to match the setting used on the remote VPN gateway. DES and 3DES are
supported.
- DES. The Data Encryption Standard (DES) processes input data that is 64 bits wide,
encrypting these values using a 56-bit key. Faster but less secure than 3DES.
- 3DES. (Triple DES) achieves a higher level of security by encrypting the data three
times using DES with three different, unrelated keys.
.
Your Internet IP address.
Virtual Private Networking
103