User's Manual

Reference Manual for the NETGEAR ProSafe VPN Client
Using the Security Policy Editor 5-13
202-10015-01
Configure Authentication (Phase 1)
After you configure Security Policy for a secure connection, the next step is to configure
authentication proposals for this policy, one connection at a time.
Note: If you are using manual keys, skip this topic, and go to Configure Key Exchange (Phase 2).
1. In the Security Policy Editor, in the Network Security Policy list, expand a secure connection
.
2. For the selected connection, expand Security Policy. Authentication (Phase 1) and Key
Exchange (Phase 2) appear.
3. Expand Authentication (Phase 1).
4. Your next step depends on whether you are configuring the first proposal or a subsequent one:
• For the first proposal, click Proposal 1.
• For subsequent proposals, create a new one from scratch or copy an existing one as a base:
– To create one from scratch, click Create New Proposal.
– To copy an existing proposal, click the source proposal, and then click Copy.
5. In the Authentication Method and Algorithms group, select these options for this proposal:
a. In the Authentication Method box, accept the default option, based on how you
configured My Identity:
– If you entered a preshared key, Pre-Shared Key
– If you selected a certificate, RSA Signatures
If your gateway is configured for Extended Authentication (XAUTH), you can select an
XAUTH version of the default option.
b. In the Encryption Algorithm box, click an option:
– For minimal security, DES
– For medium security, Triple-DES (the default)
– For maximum security, AES-128, AES-192, or AES-256
c. In the Hash Algorithm box, click an option:
– For minimal security, MD5
– For maximum security, SHA-1 (the default)