ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
ix
v1.2, June 2008
Configuring Source MAC Filtering .......................................................... ......................4-24
Configuring IP/MAC Address Binding Alerts ................................................................4-26
Configuring Port Triggering ...........................................................................................4-27
Setting a Schedule to Block or Allow Specific Traffic ....................................................4-29
Configuring a Bandwidth Profile ................................... ................................................4-30
Configuring Session Limits ................................................. ..........................................4-32
E-Mail Notifications of Event Logs and Alerts ...............................................................4-33
Administrator Tips ......................................................................................................... 4-33
Chapter 5
Virtual Private Networking Using IPsec
Considerations for Dual WAN Port Systems ................... ...............................................5-1
Configuring an IPsec VPN Connection using the VPN Wizard ......................................5-4
Creating a VPN Tunnel to a Gateway ......................................................................5-4
Creating a VPN Tunnel Connection to a VPN Client .......... ... ... ... .... ... .....................5-8
Managing VPN Tunnel Policies .......................................................... ..........................5-13
About IKE ........................................................................ .......................................5-13
Managing IKE Policies ........................................... ... ... ... .... ...................................5-13
About the IKE Policy Table .....................................................................................5-14
VPN Policy ......................................... .... ... ... ... ... .... ... ... ..........................................5-14
VPN Tunnel Connection Status ..............................................................................5-16
Creating a VPN Client Connection: VPN Client to FVS336G .......................................5-16
Configuring the FVS336G ................................................................ ......................5-17
Configuring the VPN Client ............................................. .... ... ... ... .... ... ... ... ... ..........5-17
Testing the Connection ...........................................................................................5-19
Configuring Extended Authentication (XAUTH) ............................................................5-19
Configuring XAUTH for VPN Clients ................................................................ ......5-20
User Database Configuration ................................................................................. 5-21
RADIUS Client Configuration .............................................................. ...................5-21
Manually Assigning IP Addresses to Remote Users (ModeConfig) .............................5-23
Mode Config Operation .................................................................... ... ... ... ... .... ... ... 5-23
Configuring the VPN Firewall ........................................................................... ... ... 5-24
Configuring the ProSafe VPN Client for ModeConfig .............................................5-27
Configuring Keepalives and Dead Peer Detection .......................................................5-29
Configuring Keepalive ......................................................................... ...................5-29
Configuring NetBIOS Bridging with VPN ................................................... ...................5-31