User's Manual

88 | Chapter 7. Virtual Private Networking
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 User Manual
- DES. The Data Encryption Standard (DES) processes input data that is 64 bits wide,
encrypting these values using a 56-bit key. Faster but less secure than 3DES.
- 3DES. Triple DES achieves a higher level of security by encrypting the data three
times using DES with three different, unrelated keys.
• What level of authentication will you use?
- MDS. 128 bits, faster but less secure.
- SHA-1. 160 bits, slower but more secure.
VPN Tunnel Configuration
There are two tunnel configurations and three ways to configure them:
• Use the VPN Wizard to configure a VPN tunnel (recommended for most situations):
- See Setting Up a Client-to-Gateway VPN Configuration on page 88.
- See Setting Up a Gateway-to-Gateway VPN Configuration on page 99.
• See Using Auto Policy to Configure VPN Tunnels on page 110 when the VPN Wizard and
its VPNC defaults (see Table 16 on page 87) are not appropriate for your special
circumstances, but you want to automate the Internet Key Exchange (IKE) setup.
• See Using Manual Policy to Configure VPN Tunnels on page 117 when the VPN Wizard
and its VPNC defaults (see Table 16 on page 87) are not appropriate for your special
circumstances and you must specify each phase of the connection. You manually enter
all the authentication and key parameters. You have more control over the process;
however, the process is more complex, and there are more opportunities for errors or
configuration mismatches between your N600 Wireless Dual Band Gigabit ADSL2+
Modem Router DGND3700 and the corresponding VPN endpoint gateway or client
workstation.
Setting Up a Client-to-Gateway VPN Configuration
Setting up a VPN between a remote PC running the NETGEAR ProSafe VPN client and a
network gateway involves two steps, described in the following sections:
• Step 1: Configure the Client-to-Gateway VPN Tunnel on page 89 describes how to use
the VPN Wizard to configure the VPN tunnel between the remote PC and network
gateway.