ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
ix
v1.2, June 2008
Configuring Source MAC Filtering ................................................................................4-24
Configuring IP/MAC Address Binding Alerts ................................................................4-26
Configuring Port Triggering ...........................................................................................4-27
Setting a Schedule to Block or Allow Specific Traffic ....................................................4-29
Configuring a Bandwidth Profile ...................................................................................4-30
Configuring Session Limits ...........................................................................................4-32
E-Mail Notifications of Event Logs and Alerts ...............................................................4-33
Administrator Tips .........................................................................................................4-33
Chapter 5
Virtual Private Networking Using IPsec
Considerations for Dual WAN Port Systems ..................................................................5-1
Configuring an IPsec VPN Connection using the VPN Wizard ......................................5-4
Creating a VPN Tunnel to a Gateway ......................................................................5-4
Creating a VPN Tunnel Connection to a VPN Client ...............................................5-8
Managing VPN Tunnel Policies ....................................................................................5-13
About IKE ...............................................................................................................5-13
Managing IKE Policies ...........................................................................................5-13
About the IKE Policy Table .....................................................................................5-14
VPN Policy .............................................................................................................5-14
VPN Tunnel Connection Status ..............................................................................5-16
Creating a VPN Client Connection: VPN Client to FVS336G .......................................5-16
Configuring the FVS336G ......................................................................................5-17
Configuring the VPN Client ....................................................................................5-17
Testing the Connection ...........................................................................................5-19
Configuring Extended Authentication (XAUTH) ............................................................5-19
Configuring XAUTH for VPN Clients ......................................................................5-20
User Database Configuration .................................................................................5-21
RADIUS Client Configuration .................................................................................5-21
Manually Assigning IP Addresses to Remote Users (ModeConfig) .............................5-23
Mode Config Operation ..........................................................................................5-23
Configuring the VPN Firewall .................................................................................5-24
Configuring the ProSafe VPN Client for ModeConfig .............................................5-27
Configuring Keepalives and Dead Peer Detection .......................................................5-29
Configuring Keepalive ............................................................................................5-29
Configuring NetBIOS Bridging with VPN ......................................................................5-31