NETGEAR DGND3300-100NAS user manual Spi

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual

Table 7. VPN Manual Policy Fields and Settings (Continued)

Fields and Settings		Description
Local LAN IP Address	Subnet Mask	Enter the network mask.
The remote VPN	Single PC - no	Select this option if there is no LAN (only a single PC) at the
	Subnet	remote endpoint. If this option is selected, no additional data is
endpoint must have
		required.
these IP addresses
entered as its remote	Single/Start IP	• The IP address for a single address, or the starting address for
addresses.
	Address	an address range used on the LAN. If you want to make a single
		server on your LAN available to remote users, use a single
		address settings.
		• Any. The remote VPN endpoint can be at any IP address.
	Finish IP	For an address range, enter the finish IP address. This must be an
	Address	address range used on your LAN.
	Subnet Mask	Enter the network mask.
Remote LAN IP Address	IP Address	Single PC - no Subnet. Select this option if there is no LAN (only
		a single PC) at the remote endpoint. If this option is selected, no
The remote VPN		additional data is required. The typical application is a PC running
endpoint must have		the VPN client at the remote end.
these IP addresses	Single/Start IP	• Enter an IP address on the remote LAN. You can use this setting
entered as its local
	Address	to access a server.
addresses.
		• For a range of addresses, enter the starting IP address. This
		must be an address range used on the remote LAN.
		• Any. Any outgoing traffic from specified Local IP computers
		triggers an attempted VPN connection to the remote VPN
		endpoint. Be sure you want this option before selecting it.
	Finish IP	Enter the finish IP address for a range of addresses. This must be
	Address	an address range used on the remote LAN.
	Subnet Mask	Enter the network mask.
ESP Configuration	SPI	Enter the required Security Policy Indexes (SPIs). Each policy
		must have unique SPIs. These settings must match the remote
ESP (Encapsulating		VPN endpoint. The in setting here must match the out setting on
Security Payload)		the remote VPN endpoint, and the out setting here must match the
provides security for the		in setting on the remote VPN endpoint.
payload (data) sent	Encryption	Select an encryption algorithm, and enter the key in the field
through the VPN tunnel.
		provided. For 3DES, the keys should be 24 ASCII characters, and
		for DES, the keys should be 8 ASCII characters.
		• DES. The Data Encryption Standard (DES) processes input data
		that is 64 bits wide, encrypting these values using a 56-bit key.
		Faster but less secure than 3DES.
		• 3DES. (Triple DES) achieves a higher level of security by
		encrypting the data three times using DES with three different,
		unrelated keys.
	Authentication

Chapter 6. Virtual Private Networking 111