NETGEAR Sprint 6100D User Manual page 116


In the Remote Side section, enter the LAN-side IP subnet of the gateway with the
subnet mask in CIDR format.
Note: The gateway and the client's network must have different subnet ranges that do
not overlap.
8. Click the Phase 1 tab.
9. Specify the following:

Lifetime: Enter 1800 and select Seconds.

DH Group: Select 1024 (2).

Encryption: Select 3DES.

Authentication: Select SHA-1.

Exchange Mode: Select Main.

Proposal Check: Select Obey.

Nonce Size: Enter 16.
10. Click the Phase 2 tab.
11. Specify the following:

Lifetime: Enter 1800 and select Seconds.

PFS Group: Select 1024 (2).

Encryption: Select the DES, 3DES, AES 2256, AES 192, and AES 128 check boxes.

Authentication: Select the HMAC MDS and HMAC SHA-1 check boxes.
12. Click the ID tab.
13. Specify the following:

Leave the Local Identifier and Remote Identifier fields set to Address.

Select XAuth PSK in the Authentication Method section and type the pre-shared
key, user name, and password that you specified in the gateway.
14. Click the Options tab.
15. Specify the following:

Select these check boxes:
•
IPSec DOI
Set up a Virtual Private Network (VPN) 109