Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

Set Up Virtual Private Networking With IPSec Connections 
369  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
The Router Status screen displays.
6. Select VPN > IPSec VPN. 
The IPSec VPN submenu tabs display with the IKE Policies screen for IPv4 in view.
7. To add an IKE policy for IPv6 instead of IPv4, in the upper right, select the IPv6 radio button.
The IKE Policies screen displays the IPv6 settings.
8. Under the List of IKE Policies table, click the Add button. 
The Add IKE Policy screen...

Set Up Virtual Private Networking With IPSec Connections 
370 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
9. Enter the settings as described in the following table.
Other than the nature of the IP addresses, the settings that you must enter for IPv4 and 
IPv6 settings are identical. 

Set Up Virtual Private Networking With IPSec Connections 
371  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
SettingDescription
Mode Config Record
Do you want to use 
Mode Config Record?Specify whether the IKE policy uses a Mode Config record. For information about 
how to define a Mode Config record, see Mode Config Overview on page
 394.
Select a radio button:
• No. If you did not define a Mode Config record, leave the No radio button 
selected, which disables Mode Config for this IKE policy....

Set Up Virtual Private Networking With IPSec Connections 
372 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Identifier Type From the menu, select an ISAKMP identifier to be used by the VPN firewall and 
specify the identifier in the Identifier field:
• Local Wan IP. The WAN IP address of the VPN firewall. When you select this 
option, the Identifier field automatically shows the IP address of the selected 
WAN interface.
• FQDN. The Internet address for the VPN firewall.
• User FQDN. The email...

Set Up Virtual Private Networking With IPSec Connections 
373  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Diffie-Hellman (DH) 
GroupThe DH Group sets the strength of the algorithm in bits. The higher the group, the 
more secure the exchange. From the menu, select the strength:
• Group 1 (768 bit). 
• Group 2 (1024 bit). This is the default setting.
• Group 5 (1536 bit). 
Note:Ensure that the DH group is configured identically on both sides.
SA-Lifetime (sec) The period in seconds for which...

Set Up Virtual Private Networking With IPSec Connections 
374 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
10. Click the Apply button.
Your settings are saved. The IKE policy is added to the List of IKE Policies table.
Associate a Manually added IKE policy with an Existing VPN Policy
The following procedure describes you can add an IKE policy that you added manually with 
an existing VPN policy. An IKE policy that is not associated with a VPN policy is inactive.
To associate a manually added...

Set Up Virtual Private Networking With IPSec Connections 
375  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
The VPN Policies screen displays the IPV4 settings.
7. To change a VPN policy for IPv6 instead of IPv4, in the upper right, select the IPv6 radio 
button.
The VPN Policies screen displays the IPv6 settings.
Note:You can associate an IKE policy only with an Auto policy.
8. In the List of VPN Policies table, click the Edit button for the VPN policy with which you want 
to associate the IKE...

Set Up Virtual Private Networking With IPSec Connections 
376 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
6. If the IKE policy that you want to change is associated with a VPN policy, first disable the 
VPN policy:
a.Select VPN > IPSec VPN > VPN Policies.
The VPN Policies screen displays the IPv4 settings.
b. To disable a VPN policy for IPv6 instead of IPv4, in the upper right, select the IPv6 
radio button.
The VPN Policies screen displays the IPv6 settings.
c. In the List of VPN policies...

Set Up Virtual Private Networking With IPSec Connections 
377  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
The VPN policy is reenabled. The gray circle to the left of the VPN policy turns green.
Remove One or More IKE Policies
The following procedure describes how you can remove one or more IKE policies that you no 
longer need.
WARNING:
If you remove an IKE policy that is associated with a VPN policy but 
do not replace it with another IKE policy that you associate with the 
same VPN policy,...

Set Up Virtual Private Networking With IPSec Connections 
378 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
c. In the List of VPN policies table, select the VPN policy that is associated with the 
IKE policy that you want to change.
Note:When you use the VPN IPsec Wizard, the VPN and IKE policies that 
are added automatically have the same name.
d. Click the Disable button.
The VPN policy is disabled. The green circle to the left of the VPN policy turns gray.
7. Select VPN > IPSec VPN. 
The...