LAN: 132.147.164.1 WAN: https://66.0.247.34/ admin:aw051884 EvergreenLAN 132.147.160.0/255.255.255.0 VPN: Automatic Policy or Manual Policy. with auto, the SPI is generated by the IKE protocol Phase 1 is the IKE Policy mode: agressive local and remote identities / names local (fully qualified username) :netgear remote (fully qualified username) :sonicwall-firewallid pre-shared key dh group sa lifetime: 28800s/480m/8h Phase 2 is the Network Settings (VPN Parameters) ike policy to use (phase 1) remote vpn endpoint sa lifetime ? perfect forward secrecy (and dh group) local and remote subnets ESP Encrypt and Authenticate (3DES/MD5) SPI - Each SA has a unique SPI (Security Parameter Index). For "Manual" key exchange, the SPI is specified in the Policy. For "Automatic" key exchange, the SPI is generated by the IKE protocol. Policy Name - The name of the VPN policy associated with this SA. Endpoint - The IP address on the remote VPN Endpoint. Protocol - The IPSec protocol used for this SA.