NETGEAR FVS318v3 The FVS318v3-to-VPN Client Case

Reference Manual for the ProSafe VPN Firewall FVS318v3
VPN Configuration of NETGEAR FVS318v3 E-27
January 2005
The FVS318v3-to-VPN Client Case
Client-to-Gateway VPN Tunnel Overview
The operational differences between gateway-to-gateway and client-to-gateway VPN tunnels are
summarized as follows:
Table E-4. Policy Summary
VPN Consortium Scenario: Scenario 1
Type of VPN PC/Client-to-Gateway
Security Scheme: IKE with Preshared Secret/Key
Date Tested: November 2004
Model/Firmware Tested:
NETGEAR-Gateway A FVS318v3 with firmware version v3.0_14
NETGEAR-Client B NETGEAR ProSafe VPN Client v10.3.5
IP Addressing:
NETGEAR-Gateway A Static IP address
NETGEAR-Client B Dynamic IP address
Table E-5. Differences betwe en VPN tunnel types
Operation Gateway-to-Gateway VPN Tunnels Client-to-Gateway VPN Tunnel s
Exchange Mode Main Mode—The IP addresses of both
gateways are known (especially when
FQDN is used), so each gateway can
use the Internet source of the traffic for
validation purposes.
Aggressiv e Mode—The IP address of
the client is not known in advance, so the
gateway is programmed to accept valid
traffic sourced from any Internet location
(i.e., less secure).
Direction/Type Both Directions—Either end of the VPN
tunnel may initiate traffic (usually). Remote Access—The client end of the VPN tunnel must initiate traffic because
its IP address is not know in advance,
which prevents the gateway end of the
VPN tunnel from initiating traffic.