Netgear FWG114P v2 ユーザーズマニュアル

8-4

Virtual Private Networking

The IKE Policy Configuration fields are defined in the following table. 

These settings identify this policy and determine its major characteristics.

Policy Name

The descriptive name of the IKE policy. Each policy should have a unique 
policy name. This name is not supplied to the remote VPN endpoint. It is 
only used to help you identify IKE policies.

Direction/Type

This setting is used when determining if the IKE policy matches the current 
traffic. The drop-down menu includes the following:
• Initiator – Outgoing connections are allowed, but incoming are blocked.
• Responder – Incoming connections are allowed, but outgoing are 

blocked.

• Both Directions – Both outgoing and incoming connections are allowed.
• Remote Access – This is to allow only incoming client connections, 

where the IP address of the remote client is unknown.

 

 
If Remote Access is selected, the “Exchange Mode” MUST be 
“Aggressive,” and the ‘Identities’ below (both Local and Remote) MUST 
be “Name.” On the matching VPN Policy, the IP address of the remote 
VPN endpoint should be set to 0.0.0.0.

Exchange Mode

Main Mode or Aggressive Mode. This setting must match the setting used 
on the remote VPN endpoint.
• Main Mode is slower but more secure. Also, the “Identity” below must be 

established by IP address. 

• Aggressive Mode is faster but less secure. The “Identity” below can be by 

name (host name, domain name, e-mail address, and so on) instead of 
by IP address.

These parameters apply to the Local FWG114P v2 Wireless Firewall/Print 
Server.

Local Identity Type

Use this field to identify the local FWG114P v2. You can choose one of the 
following four options from the drop-down list:
• By its Internet (WAN) port IP address.
• By its Fully Qualified Domain Name (FQDN) -- your domain name. 
• By a Fully Qualified User Name -- your name, E-mail address, or 

 

other ID.

• By DER ASN.1 DN -- the binary DER encoding of your ASN.1 X.500 

Distinguished Name.

Local Identity Data

This field lets you identify the local FWG114P v2 by name.