NETGEAR FVS318N

Virtual Private Networking Using IPv4 IPSec and L2TP Connections
183
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
3. Complete the settings as explained in the following table:
Table 44. Add IKE Policy screen settings
Setting Description
Mode Config Record
Do you want to use
Mode Config Record?
Specify whether or not the IKE policy uses a Mode Config record. For information
about how to define a Mode Config record, see Mode Config Operation on
page 199. Select one of the following radio buttons:
• Ye
s. IP addresses are assigned to remote VPN clients. You need to select a
Mode Config record from the drop-down list.
Because Mode Config functions only in Aggressive mode, selecting the Yes
radio button sets the tunnel exchange mode to Aggressive mode and disables
the Main mode. Mode Config also requires that both the local and remote
endpoints are defined by their FQDNs.
• No. Disabl
es Mode Config for this IKE policy.
Select Mode
Con
fig Record
From the drop-down list, select one of the Mode Config
records that you defined on the Add Mode Config Record
screen (see Configure Mode Config Operation on the
Wireless VPN Firewall o
n page 199).
Note: Click the View Selected button to open the Selected
Mode Config Record Details pop-up screen.
General
Policy Name A descriptive name of the IKE policy for identification and management purposes.
Note: The name is not supplied to the remote VPN endpoint.
Direction / Type From the drop-down list, select the connection method for the wireless VPN
fi
rewall:
• I
nitiator. The wireless VPN firewall initiates the connection to the remote
endpoint.
• Res
ponder. The wireless VPN firewall responds only to an IKE request from the
remote endpoint.
• Both.
The wireless VPN firewall can both initiate a connection to the remote
endpoint and respond to an IKE request from the remote endpoint.
Exchange Mode From the drop-down list, select the mode of exchange between the wireless VPN
fi
rewall and the remote VPN endpoint:
• Main. T
his mode is slower than the Aggressive mode but more secure.
• Agg
ressive. This mode is faster than the Main mode but less secure.
Note: If you specify either an FQDN or a user FQDN name as th
e local ID or
remote ID (see the Identifier sections later in this table), the Aggressive mode is
automatically selected.