Virtual Private Networking; Considerations For Dual Wan Port Systems - NETGEAR DGFV338 ProSafe Reference Manual

This chapter describes how to use the virtual private networking (VPN) features of the ProSafe
DGFV338. VPN tunnels provide secure, encrypted communications between your local network
and a remote network or computer.
This chapter includes the following sections:
• "Considerations for Dual WAN Port Systems" on page 5-1
• "Using the VPN Wizard" on page 5-2
• "VPN Tunnel Policies" on page 5-6
• "Creating a VPN Gateway Connection: DGFV338 to FVX538" on page 5-10
• "Creating a VPN Client Connection: VPN Client to DGFV338" on page 5-16
• "Certificate Authorities" on page 5-23
• "Configuring Extended Authentication (XAUTH)" on page 5-27
• "Manually Assigning IP Addresses to Remote VPN Users (ModeConfig)" on page 5-32
• "Configuring Keepalives and Dead Peer Detection" on page 5-40
• "Configuring NetBIOS Bridging with VPN" on page 5-42

Considerations for Dual WAN Port Systems

If both the ADSL port and the Ethernet port of the ProSafe DGFV338 are configured, you can
enable Auto-rollover mode for increased system reliability. If only one port is configured, you will
operate as either Dedicated ADSL or Dedicated Ethernet, depending on which is configured. This
WAN mode choice affects how the VPN features are configured.
Table 5-1. IP addressing requirements for VPNs in dual WAN port systems
Configuration and WAN IP address
VPN Road Warrior
(client-to-gateway)
VPN Gateway-to-Gateway

Virtual Private Networking

Rollover Mode
Fixed FQDN required
Dynamic FQDN required
Fixed FQDN required
Dynamic FQDN required
v1.0, May 2008
* Dedicated Mode
Allowed (FQDN optional)
FQDN required
Allowed (FQDN optional)
FQDN required
Chapter 5
5-1