---
title: "Setting up site-to-site on Netgear BR500 router"
slug: "site-to-site-netgear-br500-router"
description: "Using the Netgear management interface, configure the VPN using the Net-2-Net Remote Gateway IP.If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead."
updated: 2026-05-07T09:04:42Z
published: 2026-05-07T09:04:42Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.nordlayer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Setting up site-to-site on Netgear BR500 router

**Note**: If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead.

## Configuring the tunnel on the Netgear Management Interface

1. Open the Netgear management interface

2. In the left panel, select Security, then select IPSec VPN

![01 Setting up site-to-site on Netgear BR500 router.png](https://cdn.document360.io/fc1049cd-8f71-4b89-b9b8-dbca9fdcdd16/Images/Documentation/01%20Setting%20up%20site-to-site%20on%20Netgear%20BR500%20router.png){height="" width=""}

3. Select the Add to create a new profile

![02 Setting up site-to-site on Netgear BR500 router.png](https://cdn.document360.io/fc1049cd-8f71-4b89-b9b8-dbca9fdcdd16/Images/Documentation/02%20Setting%20up%20site-to-site%20on%20Netgear%20BR500%20router.png){height="" width=""}


4. Fill in the following information:

![03 Setting up site-to-site on Netgear BR500 router.png](https://cdn.document360.io/fc1049cd-8f71-4b89-b9b8-dbca9fdcdd16/Images/Documentation/03%20Setting%20up%20site-to-site%20on%20Netgear%20BR500%20router.png){height="" width=""}

* **Policy Name**: Create the name of your own choice.
* **Mode**: Net-2-Net
* **Remote Gateway IP**: Enter the IP address of your NordLayer server with a dedicated IP.
* **Local Subnet and Local Mask**: Enter your LAN subnet and subnet mask.
* **Remote Subnet**: Enter 10.6.0.0
* **Remote Mask**: 255.255.240.0

5. Generate a pre-shared key (we will also need this value on our end) and choose IKEv2

![04 Setting up site-to-site on Netgear BR500 router.png](https://cdn.document360.io/fc1049cd-8f71-4b89-b9b8-dbca9fdcdd16/Images/Documentation/04%20Setting%20up%20site-to-site%20on%20Netgear%20BR500%20router.png){height="" width=""}

6. At the Advanced Settings fill in the following information:

![05 Setting up site-to-site on Netgear BR500 router.png](https://cdn.document360.io/fc1049cd-8f71-4b89-b9b8-dbca9fdcdd16/Images/Documentation/05%20Setting%20up%20site-to-site%20on%20Netgear%20BR500%20router.png){height="" width=""}

* **Phase 1 Proposal**: sha1-aes256-dh5 (sha256-aes256-dh14 highly recommended)
* **Exchange Mode**: main
* **Negotiation Mode**: Initiator
* **Phase 1 SA Lifetime**: 28800 seconds

![06 Setting up site-to-site on Netgear BR500 router.png](https://cdn.document360.io/fc1049cd-8f71-4b89-b9b8-dbca9fdcdd16/Images/Documentation/06%20Setting%20up%20site-to-site%20on%20Netgear%20BR500%20router.png){height="" width=""}

* **DPD**: Enable
* **DPD Interval**: 10 seconds
* **Encapsulation Mode**: Tunnel Mode
* **Proposal (Phase 2)**: esp-sha1-aes256 (esp-sha256-aes256 highly recommended)
* **SA Lifetime (Phase 2)**: 3600 seconds

 
## Ending note:

In order to finalize the site-to-site tunnel, please create a setup in [Sites tab of the NordLayer Control Panel](/v1/docs/site-to-site).

* Pre-shared key - you can generate it or we can provide it
* Encryption  details (AES, SHA and DH group) - AES256, SHA256 and DH group 14 are recommended (also must support IKEv2)
* Remote gateway/router public IP (must be reachable while connected to the server with a dedicated IP)
* Remote subnet and mask (the subnet is used in your local network)

**Note**: In case you are experiencing different results, make sure that you have you carefully gone through all the steps. Having said that, in case the issue persists please feel free to contact our [24/7 customer support team](/docs/how-do-i-contact-nordlayer-customer-support).