NETGEAR ProSafe SRX5308 Reference Manual page 142

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Table 30. IPSec VPN Wizard settings for a client-to-gateway tunnel
Setting
About VPN Wizard
This VPN tunnel will connect to
the following peers:
Connection Name and Remote IP Type
What is the new Connection
Name?
What is the pre-shared key?
This VPN tunnel will use
following local WAN Interface:
Enable RollOver
End Point Information
What is the Remote Identifier
Information?
What is the Local Identifier
Information?
Secure Connection Remote Accessibility
What is the remote LAN IP
Address?
What is the remote LAN Subnet
Mask?
a. Both local and remote endpoints should be defined as either FQDNs or IP addresses. A combination of
an IP address and an FQDN is not supported.
3. Click Apply to save your settings. The IPSec VPN policy is now added to the List of VPN
Policies table on the VPN Policies screen. By default, the VPN policy is enabled.
Virtual Private Networking Using IPSec Connections
Description
Select the VPN Client radio button. The default remote FQDN
(srx_remote.com) and the default local FQDN (srx_local.com) appear in
the End Point Information section of the screen.
Enter a descriptive name for the connection. This name is used to help
you to manage the VPN settings; the name is not supplied to the remote
VPN endpoint.
Enter a pre-shared key. The key needs to be entered both here and on
the remote VPN gateway, or the remote VPN client. This key needs to
have a minimum length of 8 characters and should not exceed
49 characters.
From the drop-down list, select one of the four WAN interfaces of the
VPN firewall to specify which WAN interface the VPN tunnel uses as the
local endpoint.
If you have configured the VPN firewall to function in WAN auto-rollover
mode (see Configure the Auto-Rollover Mode and Failure Detection
Method on page 34), select the Enable RollOver check box. Then, from
the corresponding drop-down list, select the backup WAN interface. After
an auto-rollover has occurred, the VPN tunnel will be reestablished using
the backup WAN interface.
a
When you select the Client radio button in the About VPN Wizard section
of the screen, the default remote FQDN (srx_remote.com) is
automatically entered. Use the default remote FQDN or enter another
FQDN.
When you select the Client radio button in the About VPN Wizard section
of the screen, the default local FQDN (srx_local.com) is automatically
entered. Use the default local FQDN or enter another FQDN.
These fields are masked out for VPN client connections.
142