Configure Mode Config Operation On The Vpn Firewall - NETGEAR SRX5308 Reference Manual

Note: After configuring a Mode Config record, you need to manually
configure an IKE policy and select the newly created Mode Config
record from the Select Mode Config Record drop-down list (see

Configure Mode Config Operation on the VPN Firewall

page 179). You do not need to make changes to any VPN policy.
Note: An IP address that is allocated to a VPN client is released only after
the VPN client has gracefully disconnected or after the SA liftetime
for the connection has timed out.
Configure Mode Config Operation on the VPN Firewall
To configure Mode Config on the VPN firewall, first create a Mode Config record, and then
select the Mode Config record for an IKE policy.

To configure Mode Config on the VPN firewall:
1. Select VPN > IPSec VPN > Mode Config. The Mode Config screen displays:
Figure 109.
As an example, the screen shows two Mode Config records with the names EMEA Sales
and NA Sales:
• For EMEA Sales, a first pool (172.16.100.1 through 172.16.100.99) and second pool
(172.16.200.1 through 172.16.200.99) are shown.
• For NA Sales, a first pool (172.25.100.50 through 172.25.100.99), a second pool
(172.25.210.1 through 172.25.210.99), and a third pool (172.25.220.80 through
172.25.220.99) are shown.
2. Under the List of Mode Config Records table, click the Add table button. The Add Mode
Config Record screen displays:
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Virtual Private Networking Using IPSec Connections
179
on