NETGEAR fvs114 manual IKE Policy Configuration fields, Field Description General

Reference Manual for the ProSafe VPN Firewall FVS114

The IKE Policy Configuration fields are defined in the following table.

Table 6-1.	IKE Policy Configuration fields
Field		Description
General		These settings identify this policy and determine its major characteristics.
Policy Name		The descriptive name of the IKE policy. Each policy should have a unique
		policy name. This name is not supplied to the remote VPN endpoint. It is
		only used to help you identify IKE policies.
Direction/Type		This setting is used when determining if the IKE policy matches the current
		traffic. The drop-down menu includes the following:
		• Initiator — Outgoing connections are allowed, but incoming are blocked.
		• Responder — Incoming connections are allowed, but outgoing are
		blocked.
		• Both Directions — Both outgoing and incoming connections are allowed.
		• Remote Access — This is to allow only incoming client connections,
		where the IP address of the remote client is unknown.
		If Remote Access is selected, the Exchange Mode must be Aggressive,
		and the Identities below (both Local and Remote) must be Name. On the
		matching VPN Policy, the IP address of the remote VPN endpoint should
		be set to 0.0.0.0.
Exchange Mode		Main Mode or Aggressive Mode. This setting must match the setting used
		on the remote VPN endpoint.
		• Main Mode is slower but more secure. Also, the Identity below must be
		established by IP address.
		• Aggressive Mode is faster but less secure. The Identity below can be by
		name (host name, domain name, and e-mail address) instead of by IP
		address.
Local		These parameters apply to the Local FVS114 VPN Firewall.
Local Identity Type		Use this field to identify the local FVS114. You can choose one of the
		following four options from the drop-down list:
		• By its Internet (WAN) port IP address.
		• By its Fully Qualified Domain Name (FQDN) — your domain name.
		• By a Fully Qualified User Name — your name, E-mail address, or
		other ID.
		• By DER ASN.1 DN — the binary DER encoding of your ASN.1 X.500
		Distinguished Name.
Local Identity Data		This field lets you identify the local FVS114 by name.

6-4 Advanced Virtual Private Networking

202-10098-01, April 2005