Netgear UTM50-100NAS User Manual
ProSecure Unified Threat Management (UTM) Appliance Reference Manual
Virtual Private Networking Using IPsec Connections
7-3
v1.0, January 2010
Using the IPsec VPN Wizard for Client and Gateway
Configurations
Configurations
You can use the IPsec VPN Wizard to configure multiple gateway or client VPN tunnel policies.
The section below provides wizard and NETGEAR
ProSaf
e VPN Client Software configuration
procedures for the following scenarios:
•
Using the wizard to configure a VPN tunnel between two VPN gateways.
•
Using the wizard to configure a VPN tunnel between a VPN gateway and a VPN client.
Configuring a VPN tunnel connection requires that all settings on both sides of the VPN tunnel
match or mirror each other precisely, which can be a daunting task. The VPN Wizard efficiently
guides you through the setup procedure with a series of questions that determine the IPsec keys
and VPN policies it sets up. The VPN Wizard also configures the settings for the network
connection: security association (SA), traffic selectors, authentication algorithm, and encryption.
The settings that are used by the VPN wizard are based on the recommendations of the VPN
Consortium (VPNC), an organization that promotes multi-vendor VPN interoperability.
match or mirror each other precisely, which can be a daunting task. The VPN Wizard efficiently
guides you through the setup procedure with a series of questions that determine the IPsec keys
and VPN policies it sets up. The VPN Wizard also configures the settings for the network
connection: security association (SA), traffic selectors, authentication algorithm, and encryption.
The settings that are used by the VPN wizard are based on the recommendations of the VPN
Consortium (VPNC), an organization that promotes multi-vendor VPN interoperability.
VPN “Gateway-to-Gateway”
Fixed
FQDN required
FQDN Allowed (optional)
Dynamic
FQDN required
FQDN required
VPN “Telecommuter”
(client-to-gateway through a
NAT router)
(client-to-gateway through a
NAT router)
Fixed
FQDN required
FQDN Allowed (optional)
Dynamic
FQDN required
FQDN required
a. All tunnels must be re-established after a rollover using the new WAN IP address.
Table 7-1. IP Addressing for VPNs in Dual WAN Port Systems
Configuration and WAN IP address
Rollover Mode
a
Load Balancing Mode