Netgear VPN Firewall 200 FVX538 Manual Do Utilizador

Página de 222
ProSafe VPN Firewall 200 FVX538 Reference Manual
Virtual Private Networking
5-37
v1.0, August 2006
9. Click Reset to cancel any changes and revert to the previous settings.
10. Click Apply to save the settings.
Manually Assigning IP Addresses to Remote Users 
(ModeConfig)
To simply the process of connecting remote VPN clients to the FVX538, the ModeConfig module 
can be used to assign IP addresses to remote users, including a network access IP address, subnet 
mask, and name server addresses from the router. Remote users are given IP addresses available in 
secured network space so that remote users appear as seamless extensions of the network. 
In the following example, we configured the VPN firewall using ModeConfig, and then 
configured a PC running ProSafe VPN Client software using these IP addresses.
NETGEAR ProSafe VPN Firewall 200
WAN IP address: 172.21.4.1
LAN IP address/subnet: 192.168.2.1/255.255.255.0
NETGEAR ProSafe VPN Client software IP address: 192.168.1.2
Mode Config Operation
After IKE Phase 1 is complete, the VPN connection initiator (remote user/client) asks for IP 
configuration parameters such as IP address, subnet mask and name server addresses. The Mode 
Config module will allocate an IP address from the configured IP address pool and will activate a 
temporary IPSec policy using the template security proposal information configured in the Mode 
Config record. 
Note: Selection of the Authentication Protocol, usually PAP or CHAP, is configured 
on the individual IKE policy screens.
Note: After configuring a Mode Config record, you must go to the IKE Policies menu 
and configure an IKE policy using the newly-created Mode Config record as the 
Remote Host Configuration Record. The VPN Policies menu does not need to be 
edited.