NETGEAR FVS318G Reference Manual page 245

NETGEAR ProSAFE VPN Firewall FVS318G v2
Table 51. Add IKE Policy screen settings (continued)
Setting Description
Authentication Method Select the authentication method:
•
•
Pre-shared key
Diffie-Hellman (DH) The DH Group sets the strength of the algorithm in bits. The higher the group, the
Group more secure the exchange. From the list, select the strength:
•
•
•
Note:
SA-Lifetime (sec) The period in seconds for which the IKE SA is valid. When the period times out,
the next rekeying occurs. The default is 28800 seconds (eight hours).
Enable Dead Peer Select whether Dead Peer Detection (DPD) is enabled:
Detection
•
Note: See also
Configure Keep-Alives
and Dead Peer
•
Detection
on page 276.
Detection Period
Reconnect after
failure count
Virtual Private Networking Using IPSec and L2TP Connections
Pre-shared key. A secret that is shared between the VPN firewall and the
remote endpoint.
RSA-Signature. Uses the active self-signed certificate that you uploaded on
the Certificates screen (see
page 311). The pre-shared key is masked out when you select the
RSA-Signature button.
A key with a minimum length of 8 characters and no more
than 49 characters. Do not use a double quote (''), single
quote ('), or space in the key.
Group 1 (768 bit).
Group 2 (1024 bit). This is the default setting.
Group 5 (1536 bit).
Ensure that the DH group is configured identically on both sides.
Yes. This feature is enabled. When the VPN firewall detects an IKE
connection failure, it deletes the IPSec and IKE SA and forces a
reestablishment of the connection. You must specify the detection period in
the Detection Period field and the maximum number of times that the VPN
firewall attempts to reconnect in the Reconnect after failure count field.
No. This feature is disabled. This is the default setting.
The period in seconds between consecutive
DPD R-U-THERE messages, which are sent only when the
IPSec traffic is idle.
The maximum number of DPD failures before the VPN firewall
tears down the connection and then attempts to reconnect to
the peer. The default is 3 failures.
245
Manage VPN Self-Signed Certificates
on