NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual page 190

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Note: The settings that are explained in
Config configuration.
policy settings.
Table 5-16. Add IKE Policy Settings for a Mode Config Configuration
Item
Mode Config Record
Do you want to use
Mode Config Record?
General
Policy Name
Direction / Type
Exchange Mode
Local
Select Local Gateway
Identifier Type
5-48
Table 5-10 on page 5-25
Description (or Subfield and Description)
Select the Yes radio button.
Note: Because Mode Config functions only in Aggressive mode, selecting the
Yes radio button sets the tunnel exchange mode to Aggressive mode and
disables the Main mode. Mode Config also requires that both the local and
remote ends are defined by their FQDNs.
Select Mode From the drop-down list, select the Mode Config record that
Config Record you created in
using NA Sales.
A descriptive name of the IKE policy for identification and management
purposes. In this example, we are using ModeConfigNA_Sales.
Note: The name is not supplied to the remote VPN endpoint.
Responder is automatically selected when you select the Yes radio button in
the Mode Config Record section of the screen. This ensures that the VPN
firewall responds to an IKE request from the remote endpoint but does not
initiate one.
Aggressive mode is automatically selected you select the Yes radio button in
the Mode Config Record section of the screen.
From the drop-down list, select one of the four WAN interfaces to function as
the local gateway.
From the drop-down list, select FQDN.
Note: Mode Config requires that the VPN firewall (that is, the local end) is
defined by an FQDN.
Identifier Enter an FQDN for the VPN firewall. In this example, we
are using srx_local2.com.
Virtual Private Networking Using IPsec Connections
v1.0, April 2010
Table 5-16 are specifically for a Mode
explains the general IKE
step 5 on page 5-46. In this example, we are