Netgear UTM25-100NAS Reference Manual - Page 255
Table 7-15. Add Mode Config Record Settings continued, Description or Subfield and Description
![]() |
UPC - 606449061383
View all Netgear UTM25-100NAS manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 255 highlights
ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual Table 7-15. Add Mode Config Record Settings (continued) Item Description (or Subfield and Description) WINS Server DNS Server If there is a WINS server on the local network, enter its IP address in the Primary field. You can enter the IP address of a second WINS server in the Secondary field. Enter the IP address of the DNS server that is used by remote VPN clients in the Primary field. You can enter the IP address of a second DNS server in the Secondary field. Traffic Tunnel Security Level Note: Generally, the default setting work well for a Mode Config configuration. PFS Key Group Select this checkbox to enable Perfect Forward Secrecy (PFS), and then select a Diffie-Hellman (DH) group from the pull-down menu. The DH Group sets the strength of the algorithm in bits. The higher the group, the more secure the exchange. From the pull-down menu, select one of the following three strengths: • Group 1 (768 bit). • Group 2 (1024 bit). This is the default setting. • Group 5 (1536 bit). SA Lifetime The lifetime of the Security Association (SA) is the period or the amount of transmitted data after which the SA becomes invalid and must be renegotiated. From the pull-down menu, select how the SA lifetime is specified: • Seconds. In the SA Lifetime field, enter a period in seconds. The minimum value is 300 seconds. The default value is 3600 seconds. • KBytes. In the SA Lifetime field, enter a number of kilobytes. The minimum value is 1920000 KB. Encryption Algorithm From the pull-down menu, select one of the following five algorithms to negotiate the security association (SA): • DES. Data Encryption Standard (DES) • 3DES. Triple DES. This is the default algorithm. • AES-128. Advanced Encryption Standard (AES) with a 128-bits key size. • AES-192. AES with a 192-bits key size. • AES-256. AES with a 256-bits key size. Integrity Algorithm From the pull-down menu, select one of the following two algorithms to be used in the VPN header for the authentication process: • SHA-1. Hash algorithm that produces a 160-bit digest. This is the default setting. • MD5. Hash algorithm that produces a 128-bit digest. Local IP Address The local IP address to which remote VPN clients have access. Typically, this is the UTM's LAN subnet, such as 192.168.1.0. Note: If you do not specify a local IP address, the UTM's default LAN subnet is used. Local Subnet Mask The local subnet mask. Typically, this is 255.255.255.0. Virtual Private Networking Using IPsec Connections v1.0, September 2009 7-45
![](/manual_guide/products/netgear-utm25100nas-reference-manual-87aaf49/255.png)