NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall - Page 152

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
5-10 Virtual Private Networking Using IPsec Connections
v1.0, April 2010
Table 5-3. (IPsec) VPN Wizard Settings for a Client-to-Gateway Tunnel
Setting Description (or Subfield and Description)
About VPN Wizard
This VPN tunnel will connect
to the following peers:
Select the VPN Client radio button. The default remote FQDN
(srx_remote1.com) and the default local FQDN (srx_local1.com)
appear in the End Point Information section of the screen.
Connection Name and Remote IP Type
What is the new Connection
Name?
Enter a descriptive name for the connection. This name is used to help
you to manage the VPN settings; the name is not supplied to the
remote VPN endpoint.
What is the pre-shared key? Enter a pre-shared key. The key must be entered both here and on the
remote VPN gateway, or the remote VPN client. This key must have a
minimum length of 8 characters and should not exceed 49 characters.
This VPN tunnel will use
following local WAN Interface:
From the drop-down list, select one of the four WAN interfaces of the
VPN firewall to specify which WAN interface the VPN tunnel uses as
the local endpoint.
Enable RollOver If you have configured the VPN firewall to function in WAN auto-
rollover mode (see “Configuring the Auto-Rollover Mode and Failure
Detection Method” on page 2-18), select the Enable RollOver check
box. Then, from the corresponding drop-down list, select the backup
WAN interface. After an auto-rollover has occurred, the VPN tunnel will
be reestablished using the backup WAN interface.
End Point Information
a
a. Both local and remote endpoints should be defined as either FQDNs or IP addresses. A combination of an IP address and
an FQDN is not supported.
What is the Remote Identifier
Information?
When you select the Client radio button in the About VPN Wizard
section of the screen, the default remote FQDN (srx_remote1.com) is
automatically entered. Use the default remote FQDN or enter another
FQDN.
What is the Local Identifier
Information?
When you select the Client radio button in the About VPN Wizard
section of the screen, the default local FQDN (srx_local.1com) is
automatically entered. Use the default local FQDN or enter another
FQDN.
Secure Connection Remote Accessibility
What is the remote LAN IP
Address?
These fields are masked out for VPN client connections.
What is the remote LAN
Subnet Mask?