Virtual Private Networking Using IPSec and L2TP Connections
273
NETGEAR ProSAFE VPN Firewall FVS318G v2
4. Specify the settings that are described in the following table.
5. To use the new settings immediately, click the App
ly button.
6. To keep the settings for future use, click the Sav
e button.
Configure the Mode Config Global Parameters
To specify the global parameters:
1. Right-click the
VPN client icon in your Windows system tray, and select Configuration
Panel.
The Configuration Panel screen
displays.
Table 60. VPN client IPSec configuration settings (Mode Config)
Setting Description
VPN Client
address
This field is masked out because Mode Config is selected. After an IPSec connection is
established, the IP address that is issued by the VPN firewall displays in this field.
Address Type Select Subnet address from the list.
Remote host
address
The address that you must enter depends on whether you specified a LAN IP network
address in the Local IP Address field on the Add Mode Config Record screen of the
VPN firewall:
• I
f you left the Lo
cal IP Address field blank, enter the VPN firewall’s default LAN IP
address as the remote host address that opens the VPN tunnel. For example, enter
192.168.1.1.
• If
you specified a LAN IP network address in the Lo
cal IP Address field, enter the
address that you specified as the remote host address that opens the VPN tunnel.
Subnet mask Enter 255.255.255.0 as th
e remote subnet mask of the VPN firewall that opens the VPN
tunnel. This is the LAN IP subnet mask that you specified in the Local Subnet Mask field
on the Add Mode Config Record screen of the VPN firewall. If you left the Local Subnet
Mask field blank, enter the VPN firewall’s default IP subnet mask.
ESP Encryption From the list, select 3DES as the encryption algorithm.
Authentication From the list, select SHA-1 as the authentication algorithm.
Mode From the list, select Tunnel as the encapsulation mode.
PFS and Group Select the PFS check box, and select the DH2 (1024) key group from the list.
Note: On the VPN firewall, this key group is referred to as Diffie-Hellman Group 2 (1024
bit).