Netgear DG834 DG834v3 Reference Manual - Page 112

Policy Name, Remote VPN Endpoint, IKE Keep-alive, Single address, Subnet address, General., Local LAN. - vpn server

Get Netgear DG834 - ADSL Firewall Router PDF manuals and user guides
UPC - 606449029109
View all Netgear DG834 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 112 highlights

Reference Manual for the ADSL Modem Router DG834 v3 The DG834 v3 VPN tunnel network connection fields are defined as follows: General. These settings identify this policy and determine its major characteristics. • Policy Name-Enter a unique name to identify this policy. This name is not supplied to the remote VPN endpoint. It is used only to help you manage the policies. • Remote VPN Endpoint-If the remote endpoint has a dynamic IP address, select "Dynamic IP address". No "Address Data" input is required. You can set up multiple remote dynamic IP policies, but only one such policy can be enabled at a time. Otherwise, select the desired option (IP address or Domain Name) and enter the address of the remote VPN endpoint to which you wish to connect. Note: The remote VPN endpoint must have this VPN Gateway's address entered as its "Remote VPN Endpoint". • IKE Keep-alive-Enable this if you wish to ensure that a connection is kept open, or, if that is not possible, that it is quickly re-established when disconnected. The Ping IP Address must be associated with the remote endpoint. The remote LAN address must be used. This IP address will be "pinged" periodically to generate traffic for the VPN tunnel. The remote keep-alive IP address must be covered by the remote LAN IP range and must correspond to a device that can respond to ping. The range should be made as narrow as possible to meet this objective. Local LAN. This identifies which PCs on your LAN are covered by this policy. For each selection, data must be provided as follows: • Single address-enter an IP address in the "Single/Start IP address" field. Typically, this setting is used when you wish to make a single Server on your LAN available to remote users. • Range address-enter the starting IP address in the "Single/Start IP address" field, and the finish IP address in the "Finish IP address" field. This must be an address range used on your LAN. • Subnet address-enter an IP address in the "Single/Start IP address" field, and the desired network mask in the "Subnet Mask" field. The remote VPN endpoint must have these IP addresses entered as its "Remote" addresses. Remote LAN. This identifies which PCs on the remote LAN are covered by this policy. For each selection, data must be provided as follows: 6-38 Virtual Private Networking (Advanced Feature) v1.1, October 2006

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
Reference Manual for the ADSL Modem Router DG834 v3
6-38
Virtual Private Networking (Advanced Feature)
v1.1, October 2006
The DG834 v3 VPN tunnel network connection fields are defined as follows:
General.
These settings identify this policy and determine its major characteristics.
•
Policy Name
—Enter a unique name to identify this policy. This name is not supplied to the
remote VPN endpoint. It is used only to help you manage the policies.
•
Remote VPN Endpoint
—If the remote endpoint has a dynamic IP address, select "Dynamic
IP address". No "Address Data" input is required. You can set up multiple remote dynamic IP
policies, but only one such policy can be enabled at a time. Otherwise, select the desired
option (IP address or Domain Name) and enter the address of the remote VPN endpoint to
which you wish to connect.
•
IKE Keep-alive
—Enable this if you wish to ensure that a connection is kept open, or, if that is
not possible, that it is quickly re-established when disconnected.
The Ping IP Address must be associated with the remote endpoint. The remote LAN address
must be used. This IP address will be "pinged" periodically to generate traffic for the VPN
tunnel. The remote keep-alive IP address must be covered by the remote LAN IP range and
must correspond to a device that can respond to ping. The range should be made as narrow as
possible to meet this objective.
Local LAN.
This identifies which PCs on your LAN are covered by this policy. For each
selection, data must be provided as follows:
•
Single address
—enter an IP address in the "Single/Start IP address" field. Typically, this
setting is used when you wish to make a single Server on your LAN available to remote users.
•
Range address
—enter the starting IP address in the "Single/Start IP address" field, and the
finish IP address in the "Finish IP address" field. This must be an address range used on your
LAN.
•
Subnet address
—enter an IP address in the "Single/Start IP address" field, and the desired
network mask in the "Subnet Mask" field. The remote VPN endpoint must have these IP
addresses entered as its "Remote" addresses.
Remote LAN.
This identifies which PCs on the remote LAN are covered by this policy. For each
selection, data must be provided as follows:
Note:
The remote VPN endpoint must have this VPN Gateway's address entered as
its "Remote VPN Endpoint".