Virtual Private Networking Using IPSec and L2TP Connections
243
NETGEAR ProSAFE VPN Firewall FVS318G v2
5.
Complete the settings as described in the following table:
Table 51. Add IKE Policy screen settings
Setting
Description
Mode Config Record
Do you want to use
Mode Config Record?
Specify whether the IKE policy uses a Mode Config record. For information about
how to define a Mode Config record, see
Mode Config Operation
on page 261.
Select one of the following radio buttons:
•
Yes
. IP addresses are assigned to remote VPN clients. You must select a
Mode Config record from the list.
Because Mode Config functions only in Aggressive mode, selecting the
Yes
radio button sets the tunnel exchange mode to Aggressive mode and disables
the Main mode. Mode Config also requires that both the local and remote
endpoints are defined by their FQDNs.
•
No
. Disables Mode Config for this IKE policy.
Note:
You can use an IPv6 IKE policy to assign IPv4 addresses to clients through
a Mode Config record, but you cannot assign IPv6 addresses to clients.
Select Mode
Config Record
From the list, select one of the Mode Config records that you
defined on the Add Mode Config Record screen (see
Configure Mode Config Operation on the VPN Firewall
on
page 262).
Note:
Click the
View Selected
button to open the Selected
Mode Config Record Details pop-up screen.
General
Policy Name
A descriptive name of the IKE policy for identification and management purposes.
Note:
The name is not supplied to the remote VPN endpoint.
Direction / Type
From the list, select the connection method for the VPN firewall:
•
Initiator
. The VPN firewall initiates the connection to the remote endpoint.
•
Responder
. The VPN firewall responds only to an IKE request from the
remote endpoint.
•
Both
. The VPN firewall can both initiate a connection to the remote endpoint
and respond to an IKE request from the remote endpoint.
Exchange Mode
From the list, select the mode of exchange between the VPN firewall and the
remote VPN endpoint:
•
Main
. This mode is slower than the Aggressive mode but more secure.
•
Aggressive
. This mode is faster than the Main mode but less secure.
