Netgear FVS318v3 – Cable/DSL ProSafe VPN Firewall with 8-Port Switch Reference Manual

Advanced Virtual Private Networking

5-5

An already defined IKE policy is required for VPN - Auto Policy configuration. From the VPN 
Policies section of the main menu, you can navigate to the VPN - Auto Policy configuration menu.

Remote Identity Data

This field lets you identify the target remote FVS318v3 by name.

These parameters determine the properties of the IKE Security 
Association. 

Encryption Algorithm

Choose the encryption algorithm for this IKE policy:
• DES is the default
• 3DES is more secure

Authentication Algorithm

If you enable Authentication Header (AH), this menu lets you to select from 
these authentication algorithms: 
• MD5 — the default
• SHA-1 — more secure

Authentication Method

You may select Pre-Shared Key or RSA Signature. 

Pre-Shared Key

Specify the key according to the requirements of the Authentication 
Algorithm you selected. 
• For MD5, the key length should be 16 bytes. 
• For SHA-1, the key length should be 20 bytes.

RSA Signature

RSA Signature requires a certificate.

Diffie-Hellman (D-H) Group

The DH Group setting determines the bit size used in the key exchange. 
This must match the value used on the remote VPN gateway or client.

SA Life Time

The amount of time in seconds before the Security Association expires; 
over an hour (3600) is common.