NETGEAR 54 Mbps Wireless ADSL Firewall DG834G - Manual (Page 129)

Wireless ADSL2+ Modem Router DG834G User Manual
Virtual Private Networking 6-35
v1.0, May 2008
Remote LAN
The remote
VPN endpoint
must have these
IP addresses
entered as its
Local
addresses. IP Address Single PC - no Subnet . Select this option if there is no LAN (only a
single PC) at the remote endpoint. If this option is selected, no
additional data is required. The typical application is a PC running the
VPN client at the remote end.
Single/Start IP
Address • Enter an IP address that is on the remote LAN. You can use this
setting when you want to access a server on the remote LAN.
• For a range of addresses, enter the starting IP address. This must be
an address range used on the remote LAN.
• Any. Any outgoing traffic from the Local IP computers will trigger an
attempted VPN connection to the remote VPN endpoint. Please be
sure you want this option before selecting it.
Finish IP
Address Enter the finish IP address for a range of addresses. This must be an
address range used on the remote LAN.
Subnet Mask Enter the network mask.
IKE Direction This setting is used when determining if the IKE policy matches the
current traffic. Select an option.
• Responder only. Incoming connections are allowed, but outgoing
connections are blocked.
• Initiator and Responder. Both incoming and outgoing connections
are allowed.
Exchange Mode Ensure that the remote VPN endpoint is set to use Main Mode.
Diffie-Hellman
(DH) Group
The Diffie-Hellman algorithm is used when exchanging keys. The DH
Group setting determines the number of bit size used in the exchange.
This value must match the value used on the remote VPN gateway.
Local Identity
Type Select an option to match the Remote Identity Type setting on the
remote VPN endpoint.
• WAN IP Address
.
Your Internet IP address.
• Fully Qualified Domain Name. Your domain name.
• Fully Qualified User Name. Your name, e-mail address, or other ID.
Local Identity
Data Enter the data for the local identity type that you selected. (If WAN IP
Address
is selected, no input is required.)
Remote Identity
Type Select the desired option to match the Local Identity Type setting on
the remote VPN endpoint.
• IP Address. The Internet IP address of the remote VPN endpoint.
• Fully Qualified Domain Name. The domain name of the remote
VPN endpoint.
• Fully Qualified User Name. The name, E-mail address, or other ID
of the remote VPN endpoint.
Remote Identity
Data Enter the data for the remote identity type that you selected. If IP
Address
is selected, no input is required.
Table 6-5. VPN-Auto Policy Screen Settings (continued)
Fields and Settings Description