NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN... User manual

Page 1of 8
Version 1.2
VPN Configuration of ProSafe VPN Lite software and NETGEAR ProSafe
Router:
This document will guide you on how to create IKE and auto-VPN policies for your ProSafe
NETGEAR Router, as well as how to configure the ProSafe VPN Lite Client in order to allow a
Virtual Private Network to be established over the Internet.
NOTE: This document assumes that your router is either receiving a public IP address on the
WAN interface or that the gateway device(s) have the correct port forwarding or DMZ configured
so that port 500 UDP is open for the router, these gateway devices must also allow VPN pass-
through.

Page 2of 8
Version 1.2
Router Settings:
As we configure the NETGEAR VPN Router, there will be information we’ll add which will later be
used in the configuration of the ProSafe VPN Lite Client. This information will be marked with red-
numbered circles. You can print this form to help keep track of this information.
Pre-Shared Key: _____________________________________________________
Remote Identifier Information: ___________________________________________
Local Identifier Information: _____________________________________________
Router’s LAN Network IP Address: _______________________________________
Router’s LAN Network Mask: __________________________________________
Router’s WAN IP Address: _______________________________________________
➊
➊➊
➊
➋
➋➋
➋
➌
➌➌
➌
➍
➍➍
➍
➎
➎➎
➎
➏
➏➏
➏

Page 3of 8
Version 1.2
Creation of the VPN Policy on the ProSafe Router:
• From the Router’s GUI, go to the
VPN section and then select the
VPN wizard.
• Select the VPN Client option.
The following fields will now be available:
•
Connection Name:
The name can
be any alphanumeric string. The
name identifies your tunnel, but it
bears no relevance to the
connection.
➊
➊➊
➊ Pre-Shared Key: The pre-shared
key can be any alphanumeric string
from 8 to 49 characters long.
➋
➋➋
➋Remote Identifier Information:
The Remote Identifier can be any
alphanumeric string. It is a name
that identifies the remote peer
(Client) in the VPN Connection. You
can leave the default or create your
own identifier.
➌
➌➌
➌Local Identifier Information: The
Local Identifier can be any
alphanumeric string. It is a name
that identifies the local peer (Router)
in the VPN Connection. You can
leave the default or create your own
identifier.
• WAN Interface: If your router has
more than one WAN Interface, you’ll
be prompted to select which interface
to use for the VPN Tunnel.
➊
➊➊
➊
➋
➋➋
➋
➌
➌➌
➌

Page 4of 8
Version 1.2
Once you apply, you will see the policy we created in the list of VPN Policies. Make note of the
following:
➍
➍➍
➍ Router’s LAN Network IP
Address: The first segment in the
“Local” box. In our screenshot
described as 192.168.1.0 – but may
change depending on the setup of
your router.
➎
➎➎
➎ Router’s LAN Network Mask: The
second segment in the “Local” box.
In our screenshot described as
255.255.255.0 – but may change
depending on the setup of your
router.
NOTE: The values you used for the fields marked with red circles will be referenced with the
same circled numbers while configuring the ProSafe VPN Lite Client software.
➍
➍➍
➍
➎
➎➎
➎

Page 5of 8
Version 1.2
Creation of the VPN Policy on the ProSafe Lite Client:
• After installing and activating the
VPN Lite Client software, right-click
on the VPN Client tray icon and
select Configuration Panel.
• Select Config Wizard from the VPN
Configuration option in the menu.
• Select “A router or a VPN
gateway” to create a new policy to
establish a Client-to-Box connection
with a NETGEAR router or VPN
gateway.

Page 6of 8
Version 1.2
➏
➏➏
➏ The IP or DNS public address of
the remote equipment will be the
value of your Router’s WAN IP
or FQDN.
➊
➊➊
➊ Input the PreShared Key used
when creating the VPN Policy on
the Router.
➍
➍➍
➍The value of the Internal IP
address of remote network field
will be the value of your remote
Router’s LAN Network IP
Subnet.
• Review the Configuration
Summary and click Finish once
you have confirmed that all the
information is correct.
➊
➊➊
➊
➍
➍➍
➍
➏
➏➏
➏

Page 7of 8
Version 1.2
• A new policy should be added
under Root.
• Verify the Remote Gateway to
make sure that it is the remote
Router’s WAN IP or FQDN.
• Click on the policy name, then
select the P1 Advanced button.
• Check Aggressive Mode.
➋
➋➋
➋ Select DNS and enter the router’s
Remote Identifier Information.
➌
➌➌
➌ Select DNS and enter the router’s
Local Identifier Information.
• Click OK to go back to the Phase1
(Authentication) screen.
• Click Save & Apply to save the
settings
➋
➋➋
➋
➌
➌➌
➌
➏
➏➏
➏

Page 8of 8
Version 1.2
Connecting:
To connect and establish the VPN tunnel between the VPN Lite Client and the remote router,
click on Tunnel1, then Open Tunnel. If your settings are correct you’ll receive a message
confirming the connection.
Open Tunnel
Connection Status