To Next Page

To Previous Page

Virtual Private Networking Using IPSec Connections

183

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308

Note: The settings that are explained in the following table are specifically

for a Mode Config configuration. Table 38 on page 164 explains the

general IKE policy settings.

Table 44. Add IKE Policy screen settings for a Mode Config configuration

Settings Description

Mode Config Record

Do you want to use

Mode Config Record?

Select the Yes radio button.

Note: Because Mode Config functions only in Aggressive mode, selecting the Yes

radio button sets the tunnel exchange mode to Aggressive mode and disables the

Main mode. Mode Config also requires that both the local and remote ends are

defined by their FQDNs.

Select Mode

Config Record

From the drop-down list, select the Mode Config record that

you added to the List of Mode Config Records table in step 4

on page 181. In this example, we are using NA Sales.

General

Policy Name A descriptive name of the IKE policy for identification and management purposes.

In this example, we are using ModeConfigNA_Sales.

Note: The name is not supplied to the remote VPN endpoint.

Direction / Type Responder is automatically selected when you select the Yes radio button in the

Mode Config Record section of the screen. This ensures that the VPN firewall

responds to an IKE request from the remote endpoint but does not initiate one.

Exchange Mode Aggressive mode is automatically selected you select the Yes radio button in the

Mode Config Record section of the screen.

Local

Select Local Gateway From the drop-down list, select one of the four WAN interfaces to function as the

local gateway.

Identifier Type From the drop-down list, select FQDN.

Note: Mode Config requires that the VPN firewall (that is, the local end) is defined

by an FQDN.

Identifier Enter an FQDN for the VPN firewall. In this example, we are

using router.com.

NETGEAR SRX5308 User Manual

Questions and Answers: