NETGEAR UTM5 Reference Manual page 254

ProSecure Unified Threat Management (UTM) Appliance
Table 58. IPSec VPN Wizard settings for a gateway-to-gateway tunnel (continued)
Setting
End Point Information
What is the Remote WAN's IP
Address or Internet Name?
What is the Local WAN's IP
Address or Internet Name?
Secure Connection Remote Accessibility
What is the remote LAN IP
Address?
What is the remote LAN
Subnet Mask?
a. Both local and remote endpoints should be defined as either FQDNs or IP addresses. A combination of
an IP address and a FQDN is not supported.
Tip: To ensure that tunnels stay active, after completing the wizard, manually
edit the VPN policy to enable keep-alives, which periodically sends ping
packets to the host on the peer side of the network to keep the tunnel
alive. For more information, see
Tip: For DHCP WAN configurations, first set up the tunnel with IP addresses.
After you have validated the connection, you can use the wizard to
create new policies using the FQDN for the WAN addresses.
3. Click Apply to save your settings. The IPSec VPN policy is now added to the List of VPN
Policies table on the VPN Policies screen. By default, the VPN policy is enabled.
Figure 146.
Virtual Private Networking Using IPSec Connections
Description
a
Enter the IP address or Internet name (FQDN) of the WAN interface on the
remote VPN tunnel endpoint.
When you select the Gateway radio button in the About VPN Wizard
section of the screen, the IP address of the UTM's active WAN interface is
automatically entered.
Enter the LAN IP address of the remote gateway.
Note: The remote LAN IP address needs to be in a different subnet than
the local LAN IP address. For example, if the local subnet is 192.168.1.x,
then the remote subnet could be 192.168.10.x. but could not be
192.168.1.x. If this information is incorrect, the tunnel will fail to connect.
Enter the LAN subnet mask of the remote gateway.
Configure Keep-Alives
254
on page 310.