Netgear FVS318v3 – Cable/DSL ProSafe VPN Firewall with 8-Port Switch 참조 매뉴얼
ProSafe VPN Firewall FVS318v3 Reference Manual
5-4
Advanced Virtual Private Networking
v5.0, January 2012
Direction/Type
This setting is used when determining if the IKE policy matches the current
traffic. The drop-down menu includes the following:
• Initiator — Outgoing connections are allowed, but incoming are blocked.
• Responder — Incoming connections are allowed, but outgoing are
traffic. The drop-down menu includes the following:
• Initiator — Outgoing connections are allowed, but incoming are blocked.
• Responder — Incoming connections are allowed, but outgoing are
blocked.
• Both Directions — Both outgoing and incoming connections are allowed.
• Remote Access — This is to allow only incoming client connections,
• Remote Access — This is to allow only incoming client connections,
where the IP address of the remote client is unknown.
If Remote Access is selected, the Exchange Mode must be Aggressive,
and the Identities below (both Local and Remote) must be Name. On the
matching VPN Policy, the IP address of the remote VPN endpoint should
be set to 0.0.0.0.
and the Identities below (both Local and Remote) must be Name. On the
matching VPN Policy, the IP address of the remote VPN endpoint should
be set to 0.0.0.0.
Exchange Mode
Main Mode or Aggressive Mode. This setting must match the setting used
on the remote VPN endpoint.
• Main Mode is slower but more secure. Also, the Identity below must be
on the remote VPN endpoint.
• Main Mode is slower but more secure. Also, the Identity below must be
established by IP address.
• Aggressive Mode is faster but less secure. The Identity below can be by
name (host name, domain name, and e-mail address) instead of by IP
address.
address.
Local
These parameters apply to the Local VPN firewall.
Local Identity Type
Use this field to identify the local FVS318v3. You can choose one of the
following four options from the drop-down list:
• By its Internet (WAN) port IP address.
• By its Fully Qualified Domain Name (FQDN) — your domain name.
• By a Fully Qualified User Name — your name, E-mail address, or
following four options from the drop-down list:
• By its Internet (WAN) port IP address.
• By its Fully Qualified Domain Name (FQDN) — your domain name.
• By a Fully Qualified User Name — your name, E-mail address, or
other ID.
• By DER ASN.1 DN — the binary DER encoding of your ASN.1 X.500
Distinguished Name.
Local Identity Data
This field lets you identify the local FVS318v3 by name.
Remote
These parameters apply to the target remote FVS318v3, VPN gateway, or
VPN client.
VPN client.
Remote Identity Type
Use this field to identify the remote FVS318v3. You can choose one of the
following four options from the drop-down list:
• By its Internet (WAN) port IP address.
• By its Fully Qualified Domain Name (FQDN) — your domain name.
• By a Fully Qualified User Name — your name, E-mail address, or
following four options from the drop-down list:
• By its Internet (WAN) port IP address.
• By its Fully Qualified Domain Name (FQDN) — your domain name.
• By a Fully Qualified User Name — your name, E-mail address, or
other ID.
• By DER ASN.1 DN — the binary DER encoding of your ASN.1 X.500
Distinguished Name.
Table 5-1. IKE Policy Configuration fields
Field
Description