NETGEAR FWG114P v2 manual Virtual Private Networking

Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P v2

–From the Remote VPN Endpoint Address Type drop-down box, select IP Address.

–Type 0.0.0.0 as the Address Data of the client because we are assuming the remote PC will have a dynamically assigned IP address. This will also be entered in the VPN Client Internal Network IP Address field, as seen in “My Identity” on page 8-40.

–Type 86400 in the SA Life Time (Seconds) field.

–Type 0 in the SA Life Time (Kbytes) field.

–Check the IPSec PFS check box to enable Perfect Forward Secrecy. This will also be entered in the VPN Client Security Policy Enable Perfect Forward Secrecy check box, as seen in “Security Policy” on page 8-41.

–From the PFS Key Group drop-down box, select Group 2 (1024 Bit). This will also be entered in the VPN Client Security Policy PFS Key Group drop-down selection box, as seen in “Security Policy” on page 8-41.

–From the Traffic Selector Local IP drop-down box, select Subnet addresses. This will also be entered in the VPN Client Connection Remote Party Identity and Addressing ID Type field, as seen in “Security Policy Editor New Connection” on page 8-39.

Note: Selecting ANY for the Traffic Selectors means all traffic goes through the IPSec tunnel and prevents access to the Internet.

–Type the starting LAN IP Address of the FWG114P v2 in the Local IP Start IP Address field. For this example, we used 192.168.0.0 which is the default LAN IP address of the FWG114P v2. This will also be entered in the VPN Client Connection Remote Party Identity and Addressing Subnet field, as seen in “Security Policy Editor New Connection” on page 8-39.

–Type the LAN Subnet Mask of the FWG114P v2 (255.255.255.0 in our example) in the Local IP Subnet Mask field. This will also be entered in the VPN Client Connection Remote Party Identity and Addressing Mask field, as seen in “Security Policy Editor New Connection” on page 8-39.

–From the Traffic Selector Remote IP drop-down box, select Single addresses.

–Type 0.0.0.0 as the start IP Address of the in the Remote IP Start IP Address field because we are assuming the remote PC will have a dynamically assigned IP address. This will also be entered in the VPN Client My Identity Internal Network IP Address field, as seen in “My Identity” on page 8-40.

–Select the Enable Encryption check box. This will also be selected in the VPN Client Security Policy Key Exchange (Phase 2) Encapsulation Protocol (ESP) check box, as seen in “Connection Security Policy Key Exchange (Phase 2)” on page 8-43.

–From the ESP Configuration Encryption Algorithm drop-down box, select 3DES. This will also be entered in the VPN Client Security Policy Key Exchange (Phase 2) Encrypt Alg field, as seen in “Connection Security Policy Key Exchange (Phase 2)” on page 8-43.

Virtual Private Networking 8-37

201-10301-02, May 2005