NETGEAR FVS318N manual Add IKE Policy screen settings, 226, Setting Description Mode Config Record

ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N

4.Complete the settings as explained in the following table:

Table 52. Add IKE Policy screen settings

Setting	Description
Mode Config Record
Do you want to use	Specify whether the IKE policy uses a Mode Config record. For information about
Mode Config Record?	how to define a Mode Config record, see Mode Config Operation on page 243.
	Select one of the following radio buttons:
	• Yes. IP addresses are assigned to remote VPN clients. You need to select a
	Mode Config record from the drop-down list.
	Because Mode Config functions only in Aggressive mode, selecting the Yes
	radio button sets the tunnel exchange mode to Aggressive mode and disables
	the Main mode. Mode Config also requires that both the local and remote
	endpoints are defined by their FQDNs.
	• No. Disables Mode Config for this IKE policy.
	Note: You can use an IPv6 IKE policy to assign IPv4 addresses to clients through
	a Mode Config record, but you cannot assign IPv6 addresses to clients.
	Select Mode	From the drop-down list, select one of the Mode Config
	Config Record	records that you defined on the Add Mode Config Record
		screen (see Configure Mode Config Operation on the
		Wireless VPN Firewall on page 244).
		Note: Click the View Selected button to open the Selected
		Mode Config Record Details pop-up screen.
General
Policy Name	A descriptive name of the IKE policy for identification and management purposes.
	Note: The name is not supplied to the remote VPN endpoint.
Direction / Type	From the drop-down list, select the connection method for the wireless VPN
	firewall:
	• Initiator. The wireless VPN firewall initiates the connection to the remote
	endpoint.
	• Responder. The wireless VPN firewall responds only to an IKE request from the
	remote endpoint.
	• Both. The wireless VPN firewall can both initiate a connection to the remote
	endpoint and respond to an IKE request from the remote endpoint.
Exchange Mode	From the drop-down list, select the mode of exchange between the wireless VPN
	firewall and the remote VPN endpoint:
	• Main. This mode is slower than the Aggressive mode but more secure.
	• Aggressive. This mode is faster than the Main mode but less secure.

Virtual Private Networking Using IPSec and L2TP Connections

226