Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

Set Up Virtual Private Networking With IPSec Connections 
379  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
involved. A manual VPN policy cannot use the Internet Key Exchange (IKE) negotiation 
protocol.
•Auto. Some settings for the VPN tunnel are generated automatically through the use of 
the IKE protocol to perform negotiations between the two VPN endpoints (the local ID 
endpoint and the remote ID endpoint). You still must manually enter all settings on the 
remote VPN endpoint (unless the...

Set Up Virtual Private Networking With IPSec Connections 
380 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select VPN > IPSec VPN > VPN Policies.
The VPN Policies screen displays the IPv4 settings. The following figure...

Set Up Virtual Private Networking With IPSec Connections 
381  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Manually Add a VPN Policy
The following procedure describes how to add a VPN policy manually.
To manually add a VPN policy:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR...

Set Up Virtual Private Networking With IPSec Connections 
382 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
8. Under the List of VPN Policies table, click the Add button.
The Add New VPN Policy screen displays. The Add New VPN Policy screen for IPv4 and 
the Add New VPN Policy screen for IPv6 are almost identical.
9. Enter the settings as described in the following table.  

Set Up Virtual Private Networking With IPSec Connections 
383  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Other than the nature of the IP addresses, the settings that you must enter for IPv4 and 
IPv6 are identical with one exception. The IPv4 settings require a subnet mask but the 
IPv6 settings require a prefix length.
SettingDescription
General
Policy Name A descriptive name of the VPN policy for identification and management 
purposes.
Note:The name is not supplied to the remote VPN...

Set Up Virtual Private Networking With IPSec Connections 
384 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Enable Keepalive Select a radio button to specify if keep-alive is enabled:
• No. Keep-alive requests are disabled for the VPN tunnel. This is the default 
setting.
• Ye s. Keep-alive requests are enabled for the VPN tunnel. Periodically, the 
VPN firewall sends keep-alive requests (ping packets) to the remote 
endpoint to keep the tunnel alive. You must specify the information in the...

Set Up Virtual Private Networking With IPSec Connections 
385  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Encryption Algorithm From the menu, select the algorithm to negotiate the security association (SA):
• 3DES. Triple DES. This is the default algorithm.
• None. No encryption algorithm.
• DES. Data Encryption Standard (DES).
• AES-128. Advanced  Encryption  Standard  (AES)  with  a  128-bit  key  size.
• AES-192. AES with a 192-bit key size.
• AES-256. AES with a 256-bit key size.
Key-In...

Set Up Virtual Private Networking With IPSec Connections 
386 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
10. Click the Apply button.
Your settings are saved. The VPN policy is added to the List of VPN Policies table.
Change a VPN Policy
The following procedure describes how to change an existing VPN policy that was added 
either automatically or manually.
To change a VPN policy:
1. On your computer, launch an Internet browser.
Auto Policy Parameters
Note:These fields apply only when you...

Set Up Virtual Private Networking With IPSec Connections 
387  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative...

Set Up Virtual Private Networking With IPSec Connections 
388 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did...