NETGEAR DGND3300-100NAS VPN Auto Policy Screen Settings, Fields and Settings Description

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual

The DGND3300v2 VPN tunnel network connection fields are defined in the following table.

Table 5. VPN - Auto Policy Screen Settings

Fields and Settings		Description
General	Policy Name	Enter a unique name. This name is not supplied to the remote VPN
		endpoint. It is used only to help you manage the policies.
	Remote VPN	• The remote VPN endpoint must have this VPN’s gateway address
	Endpoint	entered as its remote VPN endpoint.
		• If the remote endpoint has a dynamic IP address, select Dynamic IP
		Address. No address data input is required. You can set up multiple
		remote dynamic IP policies, but only one such policy can be enabled
		at a time. Otherwise, select an option (IP address or domain name)
		and enter the address of the remote VPN endpoint to which you want
		to connect.
	IKE Keep Alive	• If you want to ensure that a connection is kept open, or, if that is not
		possible, that it is quickly reestablished when disconnected, select
		this check box.
		• The ping IP address must be associated with the remote endpoint.
		The remote LAN address must be used. This IP address will be
		pinged periodically to generate traffic for the VPN tunnel. The remote
		keep-alive IP address must be covered by the remote LAN IP range
		and must correspond to a device that can respond to ping. The range
		should be made as narrow as possible to meet this objective.
Local LAN	Subnet Mask	The network mask.
The remote VPN	Single/Start IP	• Enter the IP address for a single address, or the starting address for
	Address	an address range. A single address setting is used when you want to
endpoint must
		make a single server on your LAN available to remote users. A range
have these IP
		must be an address range used on your LAN.
addresses entered
		• Any. The remote VPN endpoint can be at any IP address.
as its remote
addresses.	Finish IP Address	For an address range, enter the finish IP address. This must be an
		address range used on your LAN.
Remote LAN	IP Address	Single PC - no Subnet. Select this option if there is no LAN (only a
		single PC) at the remote endpoint. If this option is selected, no
The remote VPN		additional data is required. The typical application is a PC running the
endpoint must		VPN client at the remote end.
have these IP	Single/Start IP	• Enter an IP address that is on the remote LAN. You can use this
addresses entered
as its local	Address	setting when you want to access a server on the remote LAN.
		• For a range of addresses, enter the starting IP address. This must be
addresses.
		an address range used on the remote LAN.
		• Any. Any outgoing traffic from the computers in the Local IP fields
		triggers an attempted VPN connection to the remote VPN endpoint.
		Be sure you want this option before selecting it.
	Finish IP Address	Enter the finish IP address for a range of addresses. This must be an
		address range used on the remote LAN.
	Subnet Mask	Enter the network mask.

Chapter 6. Virtual Private Networking 103