Netgear UTM25-100NAS ユーザーズマニュアル

ページ / 480
ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
7-54
Virtual Private Networking Using IPsec Connections
v1.0, September 2009
9. Enter the settings as explained in 
.
10. Click on the disk icon to save the configuration, or select File > Save from the Security Policy 
Editor menu.
11. Close the VPN ProSafe VPN client.
Testing the Mode Config Connection
To test the connection:
1. Right-click on the VPN client icon in the Windows toolbar and click Connect. The connection 
policy you configured appears; in this example “My Connections\ModeConfigTest”.
2. Click on the connection. For this example, the message “Successfully connected to 
MyConnections/ModeConfigTest” is displayed within 30 seconds, and the VPN client icon in 
the toolbar displays “On”.
3. From the client PC, ping a computer on the UTM LAN.
Configuring Keepalives and Dead Peer Detection
In some cases, you might not want a VPN tunnel to be disconnected when traffic is idle; for 
example, when client-server applications over the tunnel cannot tolerate the tunnel establishment 
time. If you require a VPN tunnel to remain connected, you can use the Keepalive and Dead Peer 
Detection (DPD) features to prevent the tunnel from being disconnected and to force a 
reconnection if the tunnel disconnects for any reason.
For DPD to function, the peer VPN device on the other end of the tunnel must also support DPD. 
Keepalive, though less reliable than DPD, does not require any support from the peer device.
Table 7-19. Security Policy Editor: Security Policy, Mode Config Settings
Setting
Description (or Subfield and Description)
Select Phase 1 Negotiation 
Mode
Select the Aggressive Mode radio button.
Enable Perfect Forward 
Secrecy (PFS)
Select the Enable Perfect Forward Secrecy (PFS) checkbox. From the 
pull-down menu below, select Diffie-Hellman Group 2.
Enable Replay Detection
Leave the default setting, which is selection of the Enable Replay 
Detection
 checkbox.