Netgear FWAG114 FWAG114 Reference Manual - Page 76

Table 7-1., IKE Policy Configuration Fields

Get Netgear FWAG114 - ProSafe Dual Band Wireless VPN Firewall Router PDF manuals and user guides
UPC - 606449026955
View all Netgear FWAG114 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 76 highlights

Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 The IKE Policy Configuration fields are defined in the following table. Table 7-1. IKE Policy Configuration Fields Field General Policy Name Direction/Type Description These settings identify this policy and determine its major characteristics. The descriptive name of the IKE policy. Each policy should have a unique policy name. This name is not supplied to the remote VPN endpoint. It is only used to help you identify IKE policies. This setting is used when determining if the IKE policy matches the current traffic. The drop-down menu includes the following: • Initiator - Outgoing connections are allowed, but incoming are blocked. • Responder - Incoming connections are allowed, but outgoing are blocked. • Both Directions - Both outgoing and incoming connections are allowed. • Remote Access - This is to allow only incoming client connections, where the IP address of the remote client is unknown. Exchange Mode Local Local Identity Type Local Identity Data If Remote Access is selected, the "Exchange Mode" MUST be "Aggressive," and the 'Identities' below (both Local and Remote) MUST be "Name." On the matching VPN Policy, the IP address of the remote VPN endpoint should be set to 0.0.0.0. Main Mode or Aggressive Mode. This setting must match the setting used on the remote VPN endpoint. • Main Mode is slower but more secure. Also, the "Identity" below must be established by IP address. • Aggressive Mode is faster but less secure. The "Identity" below can be by name (host name, domain name, email address, etc.) instead of by IP address. These parameters apply to the Local FWAG114 wireless firewall. Use this field to identify the local FWAG114. You can choose one of the following four options from the drop-down list: • By its Internet (WAN) port IP address. • By its Fully Qualified Domain Name (FQDN) -- your domain name. • By a Fully Qualified User Name -- your name, E-mail address, or other ID. • By DER ASN.1 DN -- the binary DER encoding of your ASN.1 X.500 Distinguished Name. This field lets you identify the local FWAG114 by name. 7-4 Virtual Private Networking

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114
7-4
Virtual Private Networking
The IKE Policy Configuration fields are defined in the following table.
Table 7-1.
IKE Policy Configuration Fields
Field
Description
General
These settings identify this policy and determine its major characteristics.
Policy Name
The descriptive name of the IKE policy. Each policy should have a unique
policy name. This name is not supplied to the remote VPN endpoint. It is
only used to help you identify IKE policies.
Direction/Type
This setting is used when determining if the IKE policy matches the current
traffic. The drop-down menu includes the following:
•
Initiator – Outgoing connections are allowed, but incoming are blocked.
•
Responder – Incoming connections are allowed, but outgoing are
blocked.
•
Both Directions – Both outgoing and incoming connections are allowed.
•
Remote Access – This is to allow only incoming client connections,
where the IP address of the remote client is unknown.
If Remote Access is selected, the “Exchange Mode” MUST be
“Aggressive,” and the ‘Identities’ below (both Local and Remote) MUST
be “Name.” On the matching VPN Policy, the IP address of the remote
VPN endpoint should be set to 0.0.0.0.
Exchange Mode
Main Mode or Aggressive Mode. This setting must match the setting used
on the remote VPN endpoint.
•
Main Mode is slower but more secure. Also, the “Identity” below must be
established by IP address.
•
Aggressive Mode is faster but less secure. The “Identity” below can be by
name (host name, domain name, email address, etc.) instead of by IP
address.
Local
These parameters apply to the Local FWAG114 wireless firewall.
Local Identity Type
Use this field to identify the local FWAG114. You can choose one of the
following four options from the drop-down list:
•
By its Internet (WAN) port IP address.
•
By its Fully Qualified Domain Name (FQDN) -- your domain name.
•
By a Fully Qualified User Name -- your name, E-mail address, or
other ID.
•
By DER ASN.1 DN -- the binary DER encoding of your ASN.1 X.500
Distinguished Name.
Local Identity Data
This field lets you identify the local FWAG114 by name.