NETGEAR ProSafe FVS336Gv2 Reference Manual page 409

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Setting
Remote LAN address The address that you must enter depends on whether you specified a local IP
Subnet mask
Encryption
Authentication
Mode
PFS and Group
12. Click the Save button.
Your settings are saved. Continue the Mode Config configuration of the VPN client with
the global parameters.
13. Click Global Parameters in the left column of the Configuration Panel screen. The Global
Parameters pane displays in the Configuration Panel screen:
Set Up Virtual Private Networking With IPSec Connections
Description
address for the Mode Config record on the VPN firewall:
• If you did not specify a local IP address for the Mode Config record, enter the
VPN firewall's default LAN IP address in the Remote LAN Address field as
the remote host address that opens the VPN tunnel. For example, enter
192.168.1.1.
• If you specified a local IP address for the Mode Config record, enter that
address in the Remote LAN Address field as the remote host address that
opens the VPN tunnel.
For more information about the local LAN address for the Mode Config record,
see Configure Mode Config Operation on the VPN Firewall
specifically the description of the Local IP Address field on the Add Mode
Config Record screen.
The address that you must enter depends on whether you specified a local subnet
mask for the Mode Config record on the VPN firewall:
• If you did not specify a local subnet mask for the Mode Config record, in the
Subnet mask field, enter the VPN firewall's default LAN subnet mask. For
example, enter 255.255.255.0.
• If you specified a local subnet mask for the Mode Config record, in the Subnet
mask field, enter that subnet mask.
For more information about the local subnet mask for the Mode Config record,
see Configure Mode Config Operation on the VPN Firewall
specifically the description of the Local Subnet Mask field on the Add Mode
Config Record screen.
From the menu, select 3DES as the encryption algorithm.
From the menu, select SHA-1 as the authentication algorithm.
From the menu, select Tunnel as the encapsulation mode.
Select the PFS check box and from the menu, select the DH2 (1024) key group.
Note: On the VPN firewall, this key group is referred to as Diffie-Hellman Group 2
(1024 bit).
407
on page 395,
on page 395,