ProSecure Unified Threat Management (UTM) Appliance Reference Manual

8.On the Add IKE Policy screen, complete the fields, select the radio buttons, and make your selections from the pull-down menus as explained Table 7-16.

Note: The settings that are explained in Table 7-16are specifically for a Mode Config configuration. Table 7-10 on page 7-27explains the general IKE policy settings.

Table 7-16. Add IKE Policy Settings for a Mode Config Configuration

Item

Description (or Subfield and Description)

 

 

 

 

Mode Config Record

 

 

 

 

 

 

Do you want to use

Select the Yes radio button.

Mode Config Record?

Note: Because Mode Config functions only in Aggressive Mode, selecting the

 

Yes radio button sets the tunnel exchange mode to Aggressive mode and

 

disables the Main mode. Mode Config also requires that both the local and

 

remote ends are defined by their FQDNs.

 

 

 

 

Select Mode

 

From the pull-down menu, select the Mode Config record

 

Config Record

 

that you created in step 5 above. In this example, we are

 

 

 

using NA Sales.

 

 

 

 

General

 

 

 

 

 

 

Policy Name

A descriptive name of the IKE policy for identification and management

 

purposes.

 

 

Note: The name is not supplied to the remote VPN endpoint.

 

 

Direction / Type

Responder is automatically selected when you select the Mode Config record

 

(see above). This ensures that the UTM responds to an IKE request from the

 

remote endpoint but does not initiate one.

 

 

Exchange Mode

Aggressive Mode is automatically selected when you select the Mode Config

 

record (see above).

 

 

 

 

Local

 

 

 

 

 

 

Select Local Gateway

For the dual-WAN port models only, select a radio button to specify the WAN1

(dual-WAN port

or WAN2 interface.

 

models only)

 

 

 

 

 

Identifier Type

From the pull-down menu, select FQDN.

 

Note: Mode Config requires that the UTM (that is, the local end) is defined by a

 

FQDN.

 

 

Identifier

 

Enter a FQDN for the UTM. In this example, we are using

 

 

 

utm25_local.com.

 

 

 

 

7-48

Virtual Private Networking Using IPsec Connections

v1.0, January 2010

Page 260
Image 260
NETGEAR UTM50-100NAS, UTM5-100NAS manual Add IKE Policy Settings for a Mode Config Configuration, Mode Config Record