Firewalls; Setting Up A Vpn Tunnel Between Gateways - NETGEAR FVX538 - ProSafe VPN Firewall 200 Router Reference Manual

Reference Manual for the ProSafe VPN Firewall 200 FVX538
It is also important to make sure the addresses do not overlap or conflict. That is, each set of
addresses should be separate and distinct.
Table 9-1. WAN (Internet/Public) and LAN (Internal/Private) Addressing
Gateway
Gateway A
Gateway A
Gateway B
Gateway B
It will also be important to know the subnet mask of both gateway LAN Connections. Use the
worksheet in Appendix A to gather the necessary address and subnet mask information to aid in
the configuration and troubleshooting process.
Table 9-2. Subnet Addressing
Gateway
Gateway A
Gateway B

Firewalls

It is important to understand that many gateways are also firewalls. VPN tunnels cannot function
properly if firewall settings disallow all incoming traffic. Please refer to the firewall instructions
for both gateways to understand how to open specific protocols, ports, and addresses that you
intend to allow.

Setting Up a VPN Tunnel Between Gateways

A SA, frequently called a tunnel, is the set of information that allows two entities (networks, PCs,
routers, firewalls, gateways) to "trust each other" and communicate securely as they pass
information over the Internet.
D-8
LAN or WAN
LAN (Private)
WAN (Public)
LAN (Private)
WAN (Public)
LAN or WAN
LAN (Private)
LAN (Private)
January 2005
VPNC Example Address
10.5.6.1
14.15.16.17
22.23.24.25
172.23.9.1
Interface Name
Subnet Mask A
Subnet Mask B
Example Subnet Mask
255.255.255.0
255.255.255.0
Virtual Private Networking