NETGEAR CG3000DCR, Руководство пользователя

Страница: 32 / 44

VPN
32
CG3000DCR Advanced Cable Modem Gateway
Set Up a Client-to-Gateway VPN Configuration
Setting up a VPN between a remote computer running the VPN client and a network gateway
involves these two steps:
1. Configure the VPN tunnel between the remote computer and the network gateway.
2. Configure the VPN client endpoint.
Table 3. Sample client-to-gateway VPN tunnel
VPN Tunnel Configuration
Connection Name RoadWarrior
Pre-Shared Key 12345678
Secure Association Main
Perfect Forward
Secrecy Disabled
Encryption Protocol 3DES
Authentication
Protocol SHA-1
Diffie-Hellman (DH)
Group Group 2
Key Life in seconds 28800 (8 hours)
IKE Life Time in
seconds 3600 (1 hour)
VPN Endpoint Local IPSec ID LAN IP Address Subnet Mask FQDN or

Gateway IP

(WAN IP Address)
Client toCG3000D — — Dynamic
CG3000DCR toClient 192.168.3.1 255.255.255.0 22.23.24.25
Configure the VPN Client on the Remote Computer
This overview assumes that the computer running the client has a dynamically assigned IP
address. The computer must have a VPN client program installed that supports IPSec.

To configure the VPN client:
1. Add a connection.
2. Configure the security policy in the VPN client software.
3. Configure the VPN client identity.
4. Configure the VPN client authentication.