Configure Netbios Bridging With Ipsec Vpn - NETGEAR SRX5308 Reference Manual

3. In the IKE SA Parameters section of the screen, locate the DPD fields, and complete the
settings as explained the following table:
Table 49. Dead Peer Detection settings
Setting
IKE SA Parameters
Enable Dead Peer
Detection
4. Click Apply to save your settings.

Configure NetBIOS Bridging with IPSec VPN

Windows networks use the network basic input/output system (NetBIOS) for several basic
network services such as naming and neighborhood device discovery. Because VPN routers
do not normally pass NetBIOS traffic, these network services do not function for hosts on
opposite ends of a VPN connection. To solve this problem, you can configure the VPN
firewall to bridge NetBIOS traffic over the VPN tunnel.

To enable NetBIOS bridging on a configured VPN tunnel:
1. Select VPN > IPSec VPN > VPN Policies. The VPN Policies screen displays (see
Figure 106 on page 168).
2. In the List of VPN Policies table, click the Edit table button to the right of the VPN policy that
you want to edit. The Edit VPN Policy screen displays. (The following figure shows only the
top part of the screen with the General section.)
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Description
Select the Yes radio button to enable DPD. When the VPN firewall detects an
IKE connection failure, it deletes the IPSec and IKE SA and forces a
reestablishment of the connection. You need to specify the detection period in
the Detection Period field and the maximum number of times that the VPN
firewall attempts to reconnect in the Reconnect after failure count field.
Detection Period
Reconnect after
failure count
Virtual Private Networking Using IPSec Connections
The period in seconds between consecutive
DPD R-U-THERE messages, which are sent only when the
IPSec traffic is idle. The default setting is 10 seconds.
The maximum number of DPD failures before the VPN
firewall tears down the connection and then attempts to
reconnect to the peer. The default is 3 failures.
196