NETGEAR ADSL MODEM WIRELESS DG834G - Manual (Page 146)

Reference Manual for the ADSL Modem Wireless Router DG834G
8-38 Virtual Private Networking
v1.2, October 2006
How to Set Up VPN Tunnels in Special Circumstances
When the VPN Wizard and its VPNC defaults (see Table 8-2 ) are not appropriate for your special
circumstances, use one of the following alternatives:
• Auto Policy—for a typical automated Internet Key Exchange (IKE) setup, see “Using Auto
Policy to Configure VPN Tunnels” on page 8-38 . Auto Policy uses the IKE protocol to define
the authentication scheme and automatically generate the encryption keys.
• Manual Policy—for a Manual Keying setup in which you must specify each phase of the
connection, see
“Using Manual Policy to Configure VPN Tunnels” on page 8-49 . Manual
Policy does not use IKE. Rather, you manually enter all the authentication and key parameters.
You have more control over the process, however the process is more complex and there are
more opportunities for errors or configuration mismatches between your DG834G v3 and the
corresponding VPN endpoint gateway or client workstation.
Using Auto Policy to Configure VPN Tunnels
You need to configure matching VPN settings on both VPN endpoints. The outbound VPN
settings on one end must match to the inbound VPN settings on other end, and vice versa.
See “Example of Using Auto Policy” on page 8-43 for an example of using Auto Policy.
Configuring VPN Network Connection Parameters
All VPN tunnels on the ADSL Modem Wireless Router require configuring several network
parameters. This section describes those parameters and how to access them.
The most common configuration scenarios will use IKE to manage the authentication and
encryption keys. The IKE protocol performs negotiations between the two VPN endpoints to
automatically generate and update the required encryption parameters.
Click the VPN Policies link of the main menu, and then click the Add Auto Policy button to
display the VPN - Auto Policy menu shown in
Figure 8-40 .