Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

Set Up Virtual Private Networking With IPSec Connections 
349  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
9. Collect the information that you must use to configure the VPN client. 
You can print the following table to keep track of this information.
Use the NETGEAR ProSAFE VPN Client Wizard to Create a Secure Connection 
to the VPN Firewall
Note:In this section, the NETGEAR ProSAFE VPN Client is referred to as 
the VPN client.
The VPN client lets you set up the VPN connection manually (see...

Set Up Virtual Private Networking With IPSec Connections 
350 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
2. From the main menu, select Configuration > Wizard.
3. Select the A router or a VPN gateway radio button.
4. Click the Next button. 

Set Up Virtual Private Networking With IPSec Connections 
351  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
5. Specify the following VPN tunnel parameters:
•IP or DNS public (external) address of the remote equipment. Enter the remote IP 
address or DNS name of the VPN firewall. For example, enter 192.168.15.175.
•Preshared key. Enter the pre-shared key that you already specified on the VPN 
firewall. For example, enter I7!KL39dFG_8.
•IP private (internal) address of the remote network. Enter...

Set Up Virtual Private Networking With IPSec Connections 
352 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
a.In the tree list pane of the Configuration Panel screen, click Gateway (the default 
name given to the authentication phase). 
The Authentication pane displays in the Configuration Panel screen, with the 
Authentication tab selected by default.
b. Click the Advanced tab in the Authentication pane.
c. Specify the settings that are described in the following table.
SettingDescription...

Set Up Virtual Private Networking With IPSec Connections 
353  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
9. Configure the global parameters:
a.In the tree list pane of the Configuration Panel screen, click Global Parameters.
b. Specify the default lifetimes in seconds:
•Authentication (IKE), Default. The default lifetime value is 3600 seconds. 
Change this setting to 28800 seconds to match the configuration of the VPN 
firewall.
•Encryption (IPSec), Default. The default lifetime value is...

Set Up Virtual Private Networking With IPSec Connections 
354 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
10. Click the Save button.
Your settings are saved and the VPN client configuration is complete.
For information about testing the new VPN tunnel connection, see Test the Connection 
and View Connection and Status Information on page 360.
Manually Create a Secure Connection to the VPN Firewall Using the NETGEAR 
ProSAFE VPN Client
Note:In this section, the NETGEAR ProSAFE VPN Client is...

Set Up Virtual Private Networking With IPSec Connections 
355  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
2. In the tree list pane of the Configuration Panel screen, right-click VPN Configuration, and 
select New Phase 1.
3. Change the name of the authentication phase (the default name is Gateway):
a.Right-click the authentication phase name.
b. Select Rename.
c. Type vpn_client.
d. Click anywhere in the tree list pane.
Note:This is the name for the authentication phase that is used only for...

Set Up Virtual Private Networking With IPSec Connections 
356 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
4. Specify the settings that are described in the following table.
5. Click the Save button.
Your settings are saved.
6. Click the Advanced tab in the Authentication pane.
SettingDescription
Interface From the menu, select Any.
Remote Gateway Enter the remote IP address or DNS name of the VPN firewall. For example, enter 
192.168.15.175.
Preshared Key Select the Preshared Key radio...

Set Up Virtual Private Networking With IPSec Connections 
357  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
7. Specify the settings that are described in the following table.
8. Click the Save button.
SettingDescription
Advanced features
Aggressive Mode Select this check box to enable aggressive mode as the mode of negotiation with 
the VPN firewall.
NAT-T From the menu, select Automatic. 
The VPN client and VPN firewall can now negotiate NAT-T.
Local and Remote ID
Local ID As the type of ID,...

Set Up Virtual Private Networking With IPSec Connections 
358 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Your settings are saved. Continue the manual configuration of the VPN client with the 
IPSec configuration.
9. In the tree list pane of the Configuration Panel screen, right-click the vpn_client 
authentication phase name and select New Phase 2.
10. Change the name of the IPSec configuration (the default name is Tunnel):
a.Right-click the IPSec configuration name.
b. Select Rename.
c....