VPN Between NETGEAR ProSafe VPN Firewalls and SonicWALL

This describes how to configure VPN between NETGEAR ProSafe VPN Firewalls and SonicWALL VPN appliances. In this example, the two VPN routers will connect over VPN links:

This was tested with these routers and firmware:

Router	Model	Firmware	WAN IP	LAN IP	LAN Netmask
NETGEAR	FVS338	1.6.35	10.3.3.3	192.168.2.1	255.255.255.0
SonicWALL	TZ 170	2.6.0.0	10.1.1.1	192.168.168.168	255.255.255.0

• FVS318 Owners: This document does not apply to the FVS318v3, which does not work with SonicWALL. The general process applies to the FVS318v1 and FVS318v2, but the specific instructions differ.

To Configure the NETGEAR FVS338

Use the VPN Wizard to create the VPN policy.

1. Go to the VPN Wizard menu and click Next to begin a new VPN policy.
2. For Connection Name use a descriptive name such as toSonic.
3. Enter the Pre-Shared Key to be used between the two routers. In this example, we use 1234567890.
4. Select to connect to A remote VPN Gateway.
5. Click Next to go to Step 2.
6. Enter the SonicWALL router's WAN IP address, in this example 10.1.1.1.
7. Click Next to go to Step 3.
8. Enter the SonicWALL router's LAN IP address and set the Subnet Mask. In this example, these values are 192.168.168.0 and 255.255.255.0.
9. Click Next to go to the Summary screen, then click Done to complete the policy.
10. The VPN Policies screen display. Select the policy you just created, and click Edit to examine the settings. The policy resembles the screen below, but with your IP addresses:

    

11. Go to the IKE Polices menu, select the policy you just created, and click Edit to examine the settings. The policy resembles this screen, but with your IP addresses:

    

To Configure the SonicWALL TZ 170

1. Go to the VPN menu and click Add to begin a new VPN policy.
2. In the General tab menu, select IKE using Preshared Secret.
3. For Name use a descriptive name such as toFVS338.
4. For Primary Gateway enter the NETGEAR router's WAN IP address, in this example 10.3.3.3.
5. For Secondary Gateway enter 0.0.0.0.
6. Enter the Shared Secret to be used between the two routers. In this example, we will use 1234567890.
7. For Destination Networks select Specify and click Add.
8. For Network enter the NETGEAR router's LAN IP address. Enter the Subnet Mask. In this example, these values are 192.168.2.0 and 255.255.255.0.
9. Click OK. The policy resembles this screen, but with your IP addresses:

   

10. Select the Proposals tab menu.
11. Change Exchange from Aggressive Mode to Main Mode. The policy resembles the screen below:

    

12. Click OK.

To Test the Connection

1. From a PC on the LAN of the NETGEAR router, continuously ping a PC on the SonicWALL's LAN. There should be a response within 30 seconds.
2. Drop the VPN tunnel. If necessary, power cycle the two routers.
3. From a PC on the LAN of the SonicWALL router, continuously ping a PC on the NETGEAR's LAN. There should be a response within 30 seconds.

N101505.asp July 21, 2005