NETGEAR DG834 v3 Network Router User Manual


 
Reference Manual for the ADSL Modem Router DG834 v3
Virtual Private Networking (Advanced Feature) 6-47
v1.1, October 2006
Remote VPN Endpoint—select the desired option (IP address or Fully Qualified Domain
Name) and enter the address of the remote VPN endpoint to which you wish to connect.
Note: The remote VPN endpoint must have this VPN Gateway's address entered as its
"Remote VPN Endpoint".
Local LAN. This identifies which PCs on your LAN are covered by this policy. For each
selection, data must be provided as follows:
Single address—enter an IP address in the "Single/Start IP address" field. Typically, this
setting is used when you wish to make a single Server on your LAN available to remote users.
Range address—enter the starting IP address in the "Single/Start IP address" field, and the
finish IP address in the "Finish IP address" field. This must be an address range used on your
LAN.
Subnet address—enter an IP address in the "Single/Start IP address" field, and the desired
network mask in the "Subnet Mask" field.
The remote VPN endpoint must have these IP addresses entered as its "Remote" addresses.
Remote LAN. This identifies which PCs on the remote LAN are covered by this policy. For each
selection, data must be provided as follows:
Single PC - no Subnet—select this option if there is no LAN (only a single PC) at the remote
endpoint. If this option is selected, no additional data is required.
Single address—enter an IP address in the "Single/Start IP address" field. This must be an
address on the remote LAN. Typically, this setting is used when you wish to access a server on
the remote LAN.
Range address—enter the starting IP address in the "Single/Start IP address" field, and the
finish IP address in the "Finish IP address" field. This must be an address range used on the
remote LAN.
Subnet address—enter an IP address in the "Single/Start IP address" field, and the desired
network mask in the "Subnet Mask" field.
The remote VPN endpoint must have these IP addresses entered as its "Local" addresses.
ESP Configuration. ESP (Encapsulating Security Payload) provides security for the payload
(data) sent through the VPN tunnel.
SPI—enter the required security policy indexes (SPIs). Each policy must have unique SPIs. These
settings must match the remote VPN endpoint. The "in" setting here must match the "out" setting
on the remote VPN endpoint, and the "out" setting here must match the "in" setting on the remote
VPN endpoint.