NETGEAR FVG318NA manual FVG318-to-VPN Client Case, Client-to-Gateway VPN Tunnel Overview

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

The FVG318-to-VPN Client Case

Table C-4. Policy Summary

VPN Consortium Scenario:		Scenario 1
Type of VPN		PC/Client-to-Gateway
Security Scheme:		IKE with Preshared Secret/Key
Date Tested:		November 2004
IP Addressing:
	NETGEAR-Gateway A	Static IP address
	NETGEAR-Client B	Dynamic IP address

Client-to-Gateway VPN Tunnel Overview

The operational differences between gateway-to-gateway and client-to-gateway VPN tunnels are summarized as follows:

Table C-5. Differences between VPN tunnel types

Operation	Gateway-to-Gateway VPN Tunnels	Client-to-Gateway VPN Tunnels
Exchange Mode	Main Mode—The IP addresses of both	Aggressive Mode—The IP address of
	gateways are known (especially when	the client is not known in advance, so the
	FQDN is used), so each gateway can	gateway is programmed to accept valid
	use the Internet source of the traffic for	traffic sourced from any Internet location
	validation purposes.	(i.e., less secure).
Direction/Type	Both Directions—Either end of the VPN	Remote Access—The client end of the
	tunnel may initiate traffic (usually).	VPN tunnel must initiate traffic because
		its IP address is not know in advance,
		which prevents the gateway end of the
		VPN tunnel from initiating traffic.

VPN Configuration of NETGEAR FVG318 C-13

v1.0, September 2007