NETGEAR ProSafe FVS336Gv2 Reference Manual page 341

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Setting
This VPN tunnel will use the
following local WAN Interface
End Point Information
What is the Remote WAN's IP
Address or Internet Name?
What is the Local WAN's IP
Address or Internet Name?
Secure Connection Remote Accessibility
What is the remote LAN IP
Address?
What is the remote LAN
Subnet Mask?
a. Both local and remote endpoints must be defined as either FQDNs or IP addresses. The VPN firewall does not support
a combination of an IP address and an FQDN.
8. Click the Apply button.
Your settings are saved. The VPN Policies screen displays the IPv4 settings with the
new, automatically generated VPN policy in the List of VPN Policies table.
9. On the remote gateway, configure a VPN policy that allows connection to the VPN firewall.
Set Up Virtual Private Networking With IPSec Connections
Description
Select a WAN interface from the menu.
The VPN tunnel uses the WAN interface as the local endpoint.
To enable VPN rollover, select the Enable RollOver? check box.
The menu to the right of the check box automatically selects the WAN
interface that is available for rollover.
Configuring VPN rollover is optional. With VPN rollover, if the WAN
interface that functions as the local endpoint goes down, the VPN tunnel is
reestablished on the other WAN interface.
Note: If the VPN firewall is configured to function in WAN auto-rollover
mode, you can use the VPN Wizard to configure VPN rollover and do not
need to configure VPN rollover manually.
a
Enter the IPv4 address or Internet name (FQDN) of the WAN interface on
the remote VPN tunnel endpoint.
When you select the Gateway radio button in the About VPN Wizard
section, the IPv4 address of the VPN firewall's active WAN interface is
automatically entered and you do not need to enter it manually.
Enter the LAN IPv4 address of the remote gateway.
Note: The remote LAN IPv4 address must be in a different subnet from the
local LAN IP address. For example, if the local subnet is 192.168.1.x, the
remote subnet could be 192.168.10.x but could not be 192.168.1.x. If this
information is incorrect, the tunnel fails to connect.
Enter the LAN subnet mask for the remote gateway.
339