NETGEAR FVS318 - ProSafe VPN Firewall Router Reference Manual page 199

Figure G-8: NETGEAR FVL328 VPN v1.4 – Auto Policy (part 1)
– Enter a unique name to identify this policy. This name is not supplied to the remote VPN
endpoint. In our example we have used to318 as the Policy Name. In the Policy Name
field type to318.
– From the IKE policy drop-down box, select the IKE Policy that was set up in the earlier
step – this being the FVS318 IKE Policy.
– From the Remote VPN Endpoint Address Type drop-down box, select IP Address.
– Type the WAN IP Address of Gateway A (14.15.16.17 in our example) in the Remote
VPN Endpoint Address Data field.
– Type 300 in the SA Life Time (Seconds) field.
– Type 0 in the SA Life Time (Kbytes) field.
– Check the IPSec PFS checkbox to enable Perfect Forward Secrecy.
– From the PFS Key Group drop-down box, select Group 2 (1024 Bit).
– From the Traffic Selector Local IP drop-down box, select Subnet addresses".
– Type the starting LAN IP Address of Gateway B (172.23.9.1 in our example) in the Local
IP Start IP Address field.
– Type the LAN Subnet Mask of Gateway B (255.255.255.0 in our example) in the Local IP
Subnet Mask field.
NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to FVL328
Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall
M-10146-01
G-9