Virtual Private Networking Using IPSec and L2TP Connections
254
NETGEAR ProSAFE VPN Firewall FVS318G v2
Traffic Selection
Local IP
From the list, select the address or addresses that are part of the VPN tunnel on
the VPN firewall:
•
Any
. All computers and devices on the network. You cannot select
Any
for
both the VPN firewall and the remote endpoint.
•
Single
. A single IP address on the network. Enter the IP address in the
Start IP Address
field.
•
Range
. A range of IP addresses on the network. Enter the starting IP
address in the
Start IP Address
field and the ending IP address in the
End
IP Address
field.
•
Subnet
. A subnet on the network. Enter the starting IP address in the
Start
IP Address field
. In addition, enter the following:
-
Subnet Mask
. For IPv4 addresses on the IPv4 screen only, enter the
subnet mask.
-
IPv6 Prefix Length
. For IPv6 addresses on the IPv6 screen only, enter
the prefix length.
Remote IP
From the list, select the address or addresses that are part of the VPN tunnel on
the remote endpoint. The selections are the same as for the
Local IP
list.
Manual Policy Parameters
Note:
These fields apply only when you select
Manual Policy
as the policy type. When you specify the
settings for the fields in this section, a security association (SA) is created.
SPI-Incoming
The security parameter index (SPI) for the inbound policy. Enter a hexadecimal
value between three and eight characters (for example, 0x1234).
Encryption Algorithm
From the list, select the algorithm to negotiate the security association (SA):
•
3DES
. Triple DES. This is the default algorithm.
•
None
. No encryption algorithm.
•
DES
. Data Encryption Standard (DES).
•
AES-128
. Advanced Encryption Standard (AES) with a 128-bit key size.
•
AES-192
. AES with a 192-bit key size.
•
AES-256
. AES with a 256-bit key size.
Key-In
The encryption key for the inbound policy. The length of the key depends on the
selected encryption algorithm:
•
3DES
. Enter 24 characters.
•
None
. Key does not apply.
•
DES
. Enter 8 characters.
•
AES-128
. Enter 16 characters.
•
AES-192
. Enter 24 characters.
•
AES-256
. Enter 32 characters.
Table 53. Add New VPN Policy screen settings for IPv4 and IPv6 (continued)
Setting
Description
