NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8 Router, Справочное руководство

Страница: 79 / 202

Refer
e
nc
e
Man
ual
for
the
Pr
oSafe
8
02.11
g
Wire
less
VPN F
irewa
ll FVG31
8
Ba
sic Virtua
l Pr
iva
te Ne
twor
king
6-
3
BETA
Figu
re 6-
2:
Ga
te
way
-t
o
-g
at
eway VPN
tunne
l
A
V
PN
b
etwee
n two or mo
re NETGEAR VPN-en
able
d
firewalls
is a go
od
way to co
nn
ect branch
or ho
me of
fices
an
d bu
sine
ss partn
ers ov
er
th
e
In
ternet. VPN tunnels
also
enable
ac
ces
s to
ne
twork
resourc
es across the Internet.
In this ca
se,
use
F
VG318s on eac
h end of
the tunnel to form the
VPN
tunnel
end points. See
“How to
Set Up a Gateway-to-Gateway
VP
N Co
nfig
uratio
n”
on
p
ag
e 6-2
0
to set
up this configuration.
Planning a VPN
To
set up a VP
N co
nn
ectio
n, you
must
con
figu
re e
ach endpoint with spe
cific identification and
co
nn
ectio
n in
forma
tion
des
cribin
g th
e oth
er en
dp
oin
t. Y
ou mu
st co
nfig
ure
th
e ou
tb
ou
nd
VPN
settings on one end
to matc
h the i
nbound VPN settings on other end, and vice versa.
This se
t of configuration informa
tion
defines
a se
curity associa
tion (SA) betwee
n the
tw
o VPN
endpoints.
When planning your VPN,
you must ma
ke a fe
w choices
firs
t:
•
W
ill the
local end
be any devi
ce
on the
LAN, a portion of
the
local network
(as defi
ned by a
subnet or by a range
of IP
ad
dresse
s), or a single PC?
•
W
ill the
remote end be
any devi
ce
on the remote LAN, a portion of the remote network (as
de
fined by a subnet or by a range
of IP a
ddresse
s),
or a single PC?
•
W
ill either endpoint use Fully Qualified Doma
in Names (FQDNs)? Many
DSL
accounts are
provis
ioned with DHCP addres
sing,
w
he
re the IP
addres
s of the
W
AN port ca
n change from
time to
time. Under the
se circums
tanc
es, co
nfig
urin
g th
e W
A
N
p
ort with
a
dy
nam
ic DNS
(DynDN
S) se
rvice
provider simplifies the config
ura
tion ta
sk. When D
ynDNS is configure
d on
the
W
AN port, configure the VPN using FDQN
.
VPN
Gateway
A
VPN
Gateway
B
VPN
Tunnel
PCs
PCs