Virtual Private Networking Using IPSec and L2TP Connections
277
NETGEAR ProSAFE VPN Firewall FVS318G v2
establishment time. If you require a VPN tunnel to remain connected, you can use the
keep-alive and Dead Peer Detection (DPD) features to prevent the tunnel from being
disconnected and to force a reconnection if the tunnel disconnects for any reason.
For DPD to function, the peer VPN device on the other end of the tunn
el must
also support
DPD. Keep-alive, though less reliable than DPD, does not require any support from the peer
device.
This section contains the following topics:
• Configure Keep-Alives
• Configure Dead Peer Detection
Configure Keep-Alives
The keep-alive feature maintains the IPSec SA by sending periodic ping requests to a host
across the tunnel and monitoring the replies.
To configure the keep-alive feature on a configured VPN policy:
1. Log in to the unit:
a. In the address field of any of the qualified web browsers, enter
https://192.168.1.1.
The NETGEAR Configuration Manager Login screen d
isplays.
b. In the Username
field, enter admin and in the Password / Passcode field, enter
password.
Use lowercase letters. If you changed the password, enter your personalized
password. Leave the domain as it is (geardomain).
c. Click
the Logi
n button.
The Router Status screen displays. After five minutes of inactivity
, which is the default
login time-out, you are automatically logged out.
2. Select V
P
N > IPSec VPN > VPN Policies.
The VPN Policies screen displays the IPv4 settings.
3. Specify the IP version for which you want to edit a VPN policy:
• IPv4. In th
e upper right of the screen, the IPv4 radio button is already selected by
default. Go to Step 4.
• IPv6. Sele
ct the IPv6 radio button.
The VPN Policies screen for IPv6 displays.