NETGEAR fvs114 manual VPN Policy Configuration for Auto Key Negotiation, Field Description Remote

		Reference Manual for the ProSafe VPN Firewall FVS114
Table 6-1.	IKE Policy Configuration fields
Field		Description
Remote		These parameters apply to the target remote FVS114, VPN gateway, or
		VPN client.
Remote Identity Type		Use this field to identify the remote FVS114. You can choose one of the
		following four options from the drop-down list:
		• By its Internet (WAN) port IP address.
		• By its Fully Qualified Domain Name (FQDN) — your domain name.
		• By a Fully Qualified User Name — your name, E-mail address, or
		other ID.
		• By DER ASN.1 DN — the binary DER encoding of your ASN.1 X.500
		Distinguished Name.
Remote Identity Data		This field lets you identify the target remote FVS114 by name.
IKE SA Parameters		These parameters determine the properties of the IKE Security
		Association.
Encryption Algorithm		Choose the encryption algorithm for this IKE policy:
		• DES is the default
		• 3DES is more secure
Authentication Algorithm		If you enable Authentication Header (AH), this menu lets you to select from
		these authentication algorithms:
		• MD5 — the default
		• SHA-1 — more secure
Authentication Method		You may select Pre-Shared Key or RSA Signature.
Pre-Shared Key		Specify the key according to the requirements of the Authentication
		Algorithm you selected.
		• For MD5, the key length should be 16 bytes.
		• For SHA-1, the key length should be 20 bytes.
RSA Signature		RSA Signature requires a certificate.
Diffie-Hellman (D-H) Group		The DH Group setting determines the bit size used in the key exchange.
		This must match the value used on the remote VPN gateway or client.
SA Life Time		The amount of time in seconds before the Security Association expires;
		over an hour (3600) is common.

VPN Policy Configuration for Auto Key Negotiation

An already defined IKE policy is required for VPN - Auto Policy configuration. From the VPN Policies section of the main menu, you can navigate to the VPN - Auto Policy configuration menu.

Advanced Virtual Private Networking 6-5

202-10098-01, April 2005