NETGEAR FVS328 - ProSafe VPN Firewall, Reference Manual

Page: 82 / 228

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
7-8 Virtual Private Networking
May 2004, 202-10031-01
Local IP The drop-down menu allows you to configure the source IP address of the
outbound network traffic for which this VPN policy will provide security.
Usually, this address will be from your network address space. The choices are:
• ANY for all valid IP addresses in the Internet address space
Note : Choosing ANY sends all traffic through the tunnel, which will eliminate
activities such as Web access.
• Single IP Address
• Range of IP Addresses
• Subnet Address
Remote IP The drop-down menu allows you to configure the destination IP address of the
outbound network traffic for which this VPN policy will provide security. Usually,
this address will be from the remote site's corporate network address space.
The choices are:
• ANY for all valid IP addresses in the Internet address space
Note : Choosing ANY sends all traffic to the WAN through the tunnel,
preventing for example, remote management or response to ping.
• Single IP Address
• Range of IP Addresses
• Subnet Address
Authenticating Header
(AH) Configuration
AH specifies the authentication protocol for the VPN header. These settings
must match the remote VPN endpoint.
Enable Authentication Use this check box to enable or disable AH for this VPN policy.
Authentication
Algorithm
If you enable AH, then select the authentication algorithm:
MD5 – the default, or SHA1 - more secure
Encapsulated Security
Payload (ESP)
Configuration
ESP provides security for the payload (data) sent through the VPN tunnel.
Generally, you will want to enable both Encryption and Authentication. Two ESP
modes are available:
Plain ESP encryption or ESP encryption with authentication
These settings must match the remote VPN endpoint.
Enable Encryption Use this check box to enable or disable ESP Encryption.
Encryption
Algorithm
If you enable ESP encryption, then select the encryption algorithm:
DES – the default, or 3DES - more secure
Enable Authentication Use this check box to enable or disable ESP transform for this VPN policy.
Table 7-1. VPN Auto Policy Configuration Fields
Field Description