Netgear SRX5308 SRX5308 Reference Manual - Page 143
Virtual Private Networking Using IPsec Connections
![]() |
UPC - 606449065145
View all Netgear SRX5308 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 143 highlights
Chapter 5 Virtual Private Networking Using IPsec Connections This chapter describes how to use the IP security (IPsec) virtual private networking (VPN) features of the VPN firewall to provide secure, encrypted communications between your local network and a remote network or computer. This chapter contains the following sections: • "Considerations for Multi-WAN Port Systems" on this page • "Using the IPsec VPN Wizard for Client and Gateway Configurations" on page 5-3 • "Testing the Connections and Viewing Status Information" on page 5-16 • "Managing IPsec VPN Policies" on page 5-20 • "Configuring Extended Authentication (XAUTH)" on page 5-37 • "Assigning IP Addresses to Remote Users (Mode Config)" on page 5-42 • "Configuring Keepalives and Dead Peer Detection" on page 5-55 • "Configuring NetBIOS Bridging with IPsec VPN" on page 5-59 Considerations for Multi-WAN Port Systems If two WAN ports of the VPN firewall are configured, you can enable either auto-rollover mode for increased system reliability or load balancing mode for optimum bandwidth efficiency. Your WAN mode selection impacts how the VPN features must be configured. The use of fully qualified domain names (FQDNs) in VPN policies is mandatory when the WAN ports function in auto-rollover mode or load balancing mode, and is also required for VPN tunnel failover. When the WAN ports function in load balancing mode, you cannot configure VPN tunnel failover. An FQDN is optional when the WAN ports function in load balancing mode if the IP addresses are static, but mandatory if the WAN IP addresses are dynamic. See "Virtual Private Networks" on page B-9 for more information about the IP addressing requirements for VPNs in the dual WAN modes. For information about how to select and configure a Dynamic DNS service for resolving FQDNs, see "Configuring Dynamic DNS" on page 2-27. For information about WAN mode configuration, see "Configuring the WAN Mode" on page 2-16. 5-1 v1.0, April 2010
![](/manual_guide/products/netgear-srx5308-srx5308-reference-manual-43ed089/143.png)