ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N

Table 58. Add IKE Policy screen settings for a Mode Config configuration (continued)

Setting

Description

 

 

 

Extended Authentication

 

 

 

 

XAUTH Configuration

Select one of the following radio buttons to specify whether Extended

 

Authentication (XAUTH) is enabled, and, if enabled, which device is used to verify

 

user account information:

Note: For more

None. XAUTH is disabled. This the default setting.

information about

Edge Device. The wireless VPN firewall functions as a VPN concentrator on

XAUTH and its

which one or more gateway tunnels terminate. The authentication modes that

authentication

are available for this configuration are User Database, RADIUS PAP, and

modes, see Configure

RADIUS CHAP.

 

XAUTH for VPN

IPSec Host. The wireless VPN firewall functions as a VPN client of the remote

Clients on page 239.

gateway. In this configuration, the wireless VPN firewall is authenticated by a

 

 

remote gateway with a user name and password combination.

 

 

 

 

Authentication

For an Edge Device configuration, from the drop-down list,

 

Type

select one of the following authentication types:

 

 

User Database. XAUTH occurs through the wireless VPN

 

 

firewall’s user database. You can add users on the Add User

 

 

screen (see User Database Configuration on page 240).

 

 

Radius PAP. XAUTH occurs through RADIUS Password

 

 

Authentication Protocol (PAP). The local user database is

 

 

first checked. If the user account is not present in the local

 

 

user database, the wireless VPN firewall connects to a

 

 

RADIUS server. For more information, see RADIUS Client

 

 

and Server Configuration on page 240.

 

 

Radius CHAP. XAUTH occurs through RADIUS Challenge

 

 

Handshake Authentication Protocol (CHAP). For more

 

 

information, see RADIUS Client and Server Configuration on

 

 

page 240.

 

 

 

 

Username

The user name for XAUTH.

 

 

 

 

Password

The password for XAUTH.

 

 

 

9.Click Apply to save your settings. The IKE policy is added to the List of IKE Policies table.

Configure the ProSafe VPN Client for Mode Config Operation

When the Mode Config feature is enabled, the following information is negotiated between the VPN client and the wireless VPN firewall during the authentication phase:

Virtual IP address of the VPN client

DNS server address (optional)

WINS server address (optional)

The virtual IP address that is issued by the wireless VPN firewall is displayed in the VPN Client Address field on the VPN client’s IPSec pane.

Virtual Private Networking Using IPSec and L2TP Connections

251

Page 251
Image 251
NETGEAR FVS318N manual Configure the ProSafe VPN Client for Mode Config Operation, 251, Radius Chap, Xauth for VPN