NETGEAR ProSafe SRX5308 Reference Manual page 153

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Figure 94.
3. Specify the settings that are explained in the following table.
Table 35. VPN client IPSec configuration settings
Setting
VPN Client address
Address Type
Remote LAN address Enter 192.168.1.0 as the remote IP address (that is, LAN network address) of the
Subnet Mask
ESP
PFS and Group
Virtual Private Networking Using IPSec Connections
Description
Either enter 0.0.0.0 as the IP address, or enter a virtual IP address that is used by
the VPN client in the VPN firewall's LAN; the computer (for which the VPN client
opened a tunnel) appears in the LAN with this IP address.
Select Subnet address from the drop-down list. This selection defines which
addresses the VPN client can communicate with after the VPN tunnel is
established.
gateway that opens the VPN tunnel.
Enter 255.255.255.0 as the remote subnet mask of the gateway that opens the VPN
tunnel.
Encryption Select 3DES as the encryption algorithm from the drop-down list.
Authentication Select SHA-1 as the authentication algorithm from the drop-down
list.
Mode Select Tunnel as the encapsulation mode from the drop-down list.
Select the PFS check box, and then select the DH2 (1024) key group from the
drop-down list.
Note: On the VPN firewall, this key group is referred to as Diffie-Hellman Group 2
(1024 bit).
153