NETGEAR DG834 V3 manual How to Set Up VPN Tunnels in Special Circumstances

Reference Manual for the ADSL Modem Router DG834 v3

How to Set Up VPN Tunnels in Special Circumstances

When the VPN Wizard and its VPNC defaults (see Table 6-2) are not appropriate for your special circumstances, use one of the following alternatives:

•Auto Policy—for a typical automated Internet Key Exchange (IKE) setup, see “Using Auto Policy to Configure VPN Tunnels” on page 6-36. Auto Policy uses the IKE protocol to define the authentication scheme and automatically generate the encryption keys.

•Manual Policy—for a Manual Keying setup in which you must specify each phase of the connection, see “Using Manual Policy to Configure VPN Tunnels” on page 6-46. Manual Policy does not use IKE. Rather, you manually enter all the authentication and key parameters. You have more control over the process, however the process is more complex and there are more opportunities for errors or configuration mismatches between your DG834 v3 and the corresponding VPN endpoint gateway or client workstation.

Using Auto Policy to Configure VPN Tunnels

You need to configure matching VPN settings on both VPN endpoints. The outbound VPN settings on one end must match to the inbound VPN settings on other end, and vice versa.

See “Example of Using Auto Policy” on page 6-41for an example of using Auto Policy.

Configuring VPN Network Connection Parameters

All VPN tunnels on the DG834 ADSL Modem Router require configuring several network parameters. This section describes those parameters and how to access them.

The most common configuration scenarios will use IKE to manage the authentication and encryption keys. The IKE protocol performs negotiations between the two VPN endpoints to automatically generate and update the required encryption parameters.

Click the VPN Policies link of the main menu, and then click the Add Auto Policy button to display the VPN - Auto Policy menu shown in Figure 6-41.

6-36 Virtual Private Networking (Advanced Feature)

v1.1, October 2006