ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
5-6 Virtual Private Networking Using IPsec
v1.2, June 2008
• Both the remote WAN address and your local WAN address are required. When choosing
these addresses, follow the guidelines in Tabl e 5-1 above.
• The remote WAN IP address must be a public address or the Internet name of the remote
gateway. The Internet name is the Fully Qualified Domain Name (FQDN) as registered in
a Dynamic DNS service. Both local and remote endpoints should be defined as either IP
addresses or Internet Names (FQDN). A combination of IP address and Internet Name is
not permissible.
6. Enter the Local WAN IP Address or Internet Name of your gateway, the FVS336G.
The Local WAN IP address is used in the IKE negotiation phase. The WAN IP address
assigned by your ISP may display automatically. You can modify the address to use your
FQDN. An FQDN is required if the WAN Mode you selected is auto-rollover.
7. Enter the Remote LAN IP Address and Subnet Mask of the remote gateway.
The information entered here must match the Local LAN IP and Subnet Mask of the remote
gateway; otherwise the secure tunnel will fail to connect. The IP address range used on the
remote LAN must be different from the IP address range used on the local LAN.
8. Click the VPN Wizard Default Values option arrow at the top right of the screen to view the
recommended VPNC parameters that will be used for additional settings configured by the
Wizard.
9. Click Apply to save your settings. The VPN Policies screen is displayed showing the new
policy as enabled. Click Edit in the Action column adjacent to the policy to confirm your
policy settings.