NETGEAR DGFV338 - ProSafe Wireless ADSL Modem VPN Firewall... Quick guide

Version 1.1
VPN Configuration of ProSafe Client and Netgear ProSafe Router:
This document will guide you on how to create IKE and auto-VPN policies for your ProSafe
Netgear Router, as well as how to configure the VPN Pro-Safe VPN client in order to allow a
Virtual Private Network to be established over the internet.
NOTE: This document assumes that your router is either receiving a public IP address on the
WAN interface or that the gateway device(s) have the correct port forwarding or DMZ configured
so that port 500 UDP is open for the router, these gateway devices must also allow VPN pass-
through.

Version 1.1
Router Settings:
As we configure the Netgear VPN Router, there will be information we’ll add which will later be
used in the configuration of the ProSafe Client Software. This information will be marked with red
numbered circles. You can print this form to help keep track of this information.
Pre-Shared Key: _____________________________________________________
Remote Identifier Information: ___________________________________________
Local Identifier Information: _____________________________________________
Router’s LAN Network IP Address: _______________________________________
Router’s LAN Network IP Mask: __________________________________________
Router’s WAN IP Address: _______________________________________________
➊
➊➊
➊
➋
➋➋
➋
➌
➌➌
➌
➍
➍➍
➍
➎
➎➎
➎
➏
➏➏
➏

Version 1.1
Creation of the VPN Policy on the ProSafe Router:
•From the Router’s GUI, go to the
VPN section and then select the
VPN wizard.
•There, select the option for VPN
Client.
.
Now you will have the following fields available:
•
Connection Name:
The name can
be any alphanumeric string. It
identifies your tunnel, but it bears no
relevance to the connection.
➊
➊➊
➊ Pre-Shared Key: The name can be
any alphanumeric string from 8 to
49 characters long.
➋
➋➋
➋ Remote Identifier Information:
The name can be any alphanumeric
string. It is a name that identifies the
remote peer in the VPN Connection
(Client). You can leave the default
or create your own identifier.
➌
➌➌
➌ Local Identifier Information: The
name can be any alphanumeric
string. It is a name that identifies the
local peer in the VPN Connection
(Router). You can leave the default
or create your own identifier.
•WAN Interface: If your router has
more than one WAN Interface, you’ll
be prompted to select which interface
to use for the VPN Tunnel.
➊
➊➊
➊
➋
➋➋
➋
➌
➌➌
➌

Version 1.1
Once you apply, you will see the policy we created in the list of VPN Policies. Make note of the
following:
➍
➍➍
➍ Router’s LAN Network IP
Address: The firsts segment in the
“Local” box. In our screenshot
described as 192.168.1.0 – but may
change depending on the setup of
your router.
➎
➎➎
➎ Router’s LAN Network IP Mask:
The second segment in the “Local”
box. In our screenshot described as
255.255.255.0 – but may change
depending on the setup of your
router.
NOTE: The values you used for the fields marked with red circles will be referenced them with the
same circled numbers while configuring the ProSafe VPN Client software.

Version 1.1
Creation of the VPN Policy on the ProSafe Client:
Before you start configuring the VPN Client, go through the following checklist and make sure you
have all this information.
•After installing the VPN Client
Software, right click in the tray icon
for the VPN Client and select the
option Security Policy Editor.
•Right click on “My Connections”
and add a new connection. The
name does not have to be the same
one you used in your VPN Router,
but it is advised you use the same to
facilitate identification of relating
policies. In this example the name
will be “VPN”.

Version 1.1
•Click on the name of your new
created policy and change the ID
Type field to IP Subnet
➎
➎➎
➎ The Subnet field will be the value
of your Router’s LAN Network IP
Address.
➏
➏➏
➏ The value of the Mask field will be
the value of your Router’s LAN
Network IP Mask.
•Next, tick the checkbox next to
Use: Secure Gateway Tunnel.
➌
➌➌
➌ The ID Type field will be the value
of your Local Identifier
Information.
➏
➏➏
➏ The value of the Gateway IP
Address will be the value of your
Router’s WAN IP Address.
➎
➎➎
➎
➏
➏➏
➏
➏
➏➏
➏
➌
➌➌
➌

Version 1.1
•Click on the plus sign next to your
policy name and then on My
Identity.
•Change the Select Certificate field
from “Automatically during IKE
Negotiation” to “None”, and click
on the Pre-Shared Key button that
will appear on the top right.
•On the box that will pop up, click
on the Enter Key button.

Version 1.1
•Input the Pre-Shared Key that you
have used when creating the VPN
Policy on the Router and click on the
OK Button.
•Next, change the ID Type to Domain
name.
➋
➋➋
➋ In the field that will open, add the value
of your Remote Identifier
Information.
➋
➋➋
➋

Version 1.1
•In the left box, click now on
Security Policy.
•Select Aggressive Mode and tick
the Enable Perfect Forward
Secrecy (PFS) checkbox.
•Leave the PFS Key Group as
Diffie-Hellman Group 2.
•For last, click on the Save button
at the top left of the Security
Policy Editor:

Version 1.1
Connecting:
To connect, right click on the tray icon of the Netgear VPN client with your mouse, select connect
and select the connection you just created. If your settings are correct you’ll receive a message
confirming the connection.