NETGEAR FVS338 - ProSafe VPN Firewall 50 Router Installation and operating instructions

Application Note
Creating a VPN Policy for the FVX538 or FVS338
ProSafe® VPN Firewall with a Remote Endpoint of
0.0.0.0
Summary
This application note describes how to configure a VPN policy to support a remote
gateway IP set to 0.0.0.0.on one WAN interface of a NETGEAR FVX538 or FVS338
ProSafe VPN Firewall. This is an updated version using the version 2.x router firmware.
Procedure
This application note describes how to create a VPN Client policy using the VPN Wizard
and then editing that policy to set a remote endpoint of 0.0.0.0. It also describes how to
set the remote endpoint to 0.0.0.0. for VPN policies that were manually created.
This procedure was tested using the following:
•NETGEAR FVX538 ProSafe VPN Firewall with version V 2.x firmware
oIP address subnet: 192.168.1.1; 255.255.255.0
Using the VPN Wizard to Create a VPN Policy
VPN menu, select the VPN Wizard submenu.1. From the
Select the VPN client radio button.
2.
3. Type the connection name and preshared key.
4. Click Apply.

Verifying the IKE and VPN policy
1. From the VPN menu, select Policies.
2. Select the VPN Policies tab to verify that the VPN policy is in the list.
3. Select the IKE Policies tab to verify that the IKE policy is in the list.

Modifying the Remote Endpoint Address
1. From the VPN menu, select the Policies submenu.
2. Select the VPN Policies tab, and click Edit for the VPN policy you created (in this
example conn1)..
3. From the Edit VPN Policy screen, under Remote Endpoint, select the FQDN radio
button, and then change the address from fvx_remote.com to 0.0.0.0.
4. Select the IKE Policies tab to verify that the VPN policy of 0.0.0.0 is in the list.

Setting the Remote Endpoint Address for a Manually Created VPN
Policy
After you manually add an IKE and VPN policy, you can manually set the remote
endpoint address.
To manually set the remote endpoint address:
1. From the VPN menu, select the Policies submenu.
2. Select the VPN Policies tab, and then click Edit for the VPN policy you want to edit
(in this example, conn1.).
3. When the Edit VPN Policy screen displays, set the Remote Endpoint to FQDN,
and type 0.0.0.0
4. From the Remote IP drop-down menu, select Any.
If these two fields are configured correctly, the policy will appear as a policy with an * in
the IKE and VPN policy tables showing that they are configured as client policies. If the
FQDN field contains 0.0.0.0, the behavior of this policy will be identical to a policy
configured using the VPN Wizard.
Conclusion
This configuration can support remote endpoint having dynamic IP address without using
an FQDN name.
November 27, 2006

Copyright © 2006 NETGEAR®