Manuals / NETGEAR / Computer Equipment / Network Router

NETGEAR DG834G manual VPN Tunnel, 22.23.24.25, 0.0.0.0

Models: DG834G

1 204

Download 204 pages 51.21 Kb

Page 115

VPN Tunnel

	VPN Tunnel
22.23.24.25	0.0.0.0
DG834G
	PC
	(Running NETGEAR
PCs	ProSafe VPN Client)

DG834G

Note: This section default parameters not covered by these VPN Tunnels in Special

The worksheet below identifies the parameters used in the worksheet is at “Planning a VPN” on page 8-4.

Virtual Private Networking

8-7

v1.2, October 2006

Image 115

NETGEAR DG834G manual VPN Tunnel, 22.23.24.25, 0.0.0.0

Contents

NETGEAR, Inc Reference Manual for the ADSL Modem Wireless Router DG834Gv1.2, October TrademarksStatement of Conditions Federal Communications Commission FCC Radiation Exposure Statementv1.2, October European Union Statement of Compliancev1.2, October Bestätigung des Herstellers/ImporteursCustomer Support Product and Publication DetailsCertificate of the Manufacturer/Importer Voluntary Control Council for Interference VCCI Statementv1.2, October Chapter About This Manual ContentsReference Manual for the ADSL Modem Wireless Router DG834G Configuring Your Internet ConnectionProtecting Your Network Wireless ConfigurationChapter ChapterChapter Advanced ConfigurationChapter Managing Your NetworkChapter TroubleshootingChapter Virtual Private NetworkingAppendix B Technical SpecificationsNETGEAR VPN Configuration Appendix Av1.2, October Audience, Scope, Conventions, and Formats Chapter About This Manualhttp//kbserver.netgear.com/products/DG834G v3.asp Printing a Page in the HTML View How to Print this ManualPrinting a Chapter Printing the Full Manual About This Manual Reference Manual for the ADSL Modem Wireless Router DG834Gv1.2, October About the Modem Router Chapter IntroductionA Powerful, True Firewall Key FeaturesEasy Installation and Management 802.11 Standards-based Wireless NetworkingProtocol Support Auto Sensing and Auto Uplink LAN Ethernet Connections Virtual Private Networking VPNDG834G ADSL Modem Wireless Router Resource CD, including this guide Content FilteringWi-Fi Multimedia WMM Quality of Service QoS What’s in the Box?Introduction The Router’s Front PanelReference Manual for the ADSL Modem Wireless Router DG834G LED DescriptionsThe Router’s Rear Panel What You Need Before You Begin Chapter Configuring Your Internet ConnectionConnecting the Router to the Internet Manual SetupUnderstanding ADSL Microfilters Internet Configuration RequirementsADSL Microfilter Computers Set to DHCPADSL Microfilter with Built-In Splitter Manually Setting Up Your Modem Router Page Page Line Reference Manual for the ADSL Modem Wireless Router DG834GConfiguring Your Internet Connection v1.2, OctoberThe power light is lit after turning on the firewall computer or “Preparing a Computer for Network Access” in Appendix CPage Wizard-Detected PPPoA Login Account Setup Wizard-Detected PPPoE Login Account SetupAuto-Detecting Your Internet Connection Type Wizard-Detected IP Over ATM Account Setup Wizard-Detected Dynamic IP Account SetupWizard-Detected Fixed IP Static Account Setup Testing Your Internet Connection Reference Manual for the ADSL Modem Wireless Router DG834G Manually Configuring Your Internet ConnectionISP Does Not Require Login ISP Does Require LoginInternet Connection Requires Login and Uses PPPoE How to Perform Manual ConfigurationInternet Connection Requires Login and Uses PPPoA Internet Connection Does Not Require A Login Page ADSL Settings v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GConfiguring Your Internet Connection 3-20specifications, please see Appendix A, “Technical Specifications” Chapter Wireless ConfigurationConsiderations for a Wireless Network Observe Performance, Placement, and Range GuidelinesLUHOHVVDWD 6HFXULW\2SWLRQV Implement Appropriate Wireless Security5DQJH8SWRHHW WPA-802.1x, WPA2-802.1x. Wi-Fi Protected Access WPA with user authentication implemented using IEE 802.1x and RADIUS servers v1.2, October Understanding Wireless SettingsReference Manual for the ADSL Modem Wireless Router DG834G Wireless ConfigurationWireless Access Point Wireless NetworkWireless Security Options Wireless Station Access ListSecurity Options Reference Manual for the ADSL Modem Wireless Router DG834GHow to Set Up and Test Basic Wireless Connectivity How to Restrict Wireless Access to Your Network Restricting Wireless Access Based on the Wireless Station Access List Restricting Wireless Access Based on the Wireless Network Name SSID2. From the Wireless Settings menu, Wireless Station Access List section, click the Setup Access List button to display the list, shown below Choosing WEP Authentication and Security Encryption Methods Encryption Choices Authentication Type Selection5. Select the Authentication Type How to Configure WEP6. Select the Encryption Strength setting How to Configure WPA-PSK/WPA2-PSK Security How to Configure WPA-802.1x/WPA2-802.1x Security v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GWireless Configuration 4-16Chapter Protecting Your Network How to Change the Built-In PasswordChanging the Administrator Login Timeout Blocking Keywords, Sites, and Services Configuring Basic Firewall ServicesHow to Block Keywords and Sites 2. Select the Block Sites link of the Security menu Firewall Rules Inbound Rules Port Forwarding Inbound Rule Example A Local Public Web Server Inbound Rule Example Allowing Videoconferencing Considerations for Inbound Rules Outbound Rules Service BlockingOutbound Rule Example Blocking Instant Messenger Order of Precedence for Rules How to Define Services ServicesHow to Set Your Time Zone Setting Times and Scheduling Firewall Services5. Click Apply to save your settings How to Schedule Firewall Services v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834G5-16 Protecting Your NetworkHow to Back Up the Configuration to a File Backing Up, Restoring, or Erasing Your SettingsChapter Managing Your Network the modem router. See “The Router’s Rear Panel” on page How to Restore the Configuration from a FileHow to Erase the Configuration Upgrading the Modem Router’s FirmwareHow to Upgrade the Modem Router Firmware Viewing Modem Router Status and Usage Statistics Network Management InformationManaging Your Network Reference Manual for the ADSL Modem Wireless Router DG834GThis screen shows the following parameters Table 6-1. Menu 3.2 - Modem Router Status Fieldsv1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GTable 6-1. Menu 3.2 - Modem Router Status Fields continued Managing Your NetworkManaging Your Network Reference Manual for the ADSL Modem Wireless Router DG834GThis screen shows the following statistics Table 6-2. Router Statistics FieldsManaging Your Network Reference Manual for the ADSL Modem Wireless Router DG834GThis screen shows the following statistics Table 6-3. Connection Status Fields for PPPoAViewing, Selecting, and Saving Logged Information Viewing Attached DevicesManaging Your Network Reference Manual for the ADSL Modem Wireless Router DG834GAn example of the logs file is shown below 6-10Log entries are described in Table 6-4 below Saving Log Files on a Server Activation and AdministrationExamples of Log Messages Selecting What Information to LogDropped Packets Enabling Security Event E-mail NotificationSend alerts and logs via email Running Diagnostic Utilities and Rebooting the Modem Router Enabling Remote Management Configuring Remote Management3. Select the Turn Remote Management On check box To allow access from any IP address on the Internet, select Everyone v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834G6-18 Managing Your NetworkConfiguring Advanced Security Chapter Advanced ConfigurationHow to Configure a Default DMZ Server Setting Up A Default DMZ ServerConnect Automatically, as Required Respond to Ping on Internet WAN Port Configuring LAN IP SettingsEnable PPPoE-Relay Disable Port Scan and DOS ProtectionThe LAN TCP/IP Setup parameters are IP Address Use Router as DHCP server DHCPReserved IP addresses 2. Click Edit or Delete How to Configure LAN TCP/IP SettingsHow to Configure Dynamic DNS Configuring Dynamic DNSAdvanced Configuration 4. Select the Use a dynamic DNS service check box Static Route Example Using Static RoutesHow to Configure Static Routes Universal Plug and Play UPnP 3. To save, cancel or refresh the table Chapter Virtual Private Networking DG834G VPN TunnelPC Running NETGEAR ProSafe VPN Client DG834G VPN Firewall VPN TunnelVirtual Private Networking v1.2, OctoberTable 8-1. VPN Tunnel Configuration Worksheet Planning a VPNWhat method will you use to configure your VPN tunnels? See “How to Set Up a Client-to-Gateway VPN Configuration” on page VPN Tunnel ConfigurationSee “How to Set Up a Gateway-to-Gateway VPN Configuration” on page 22.23.24.25 DG834GVPN Tunnel DG834GTable 8-3. VPN Tunnel Configuration Worksheet 28800 8 hours3600 1 hour Reference Manual for the ADSL Modem Wireless Router DG834GA remote VPN client single PC Virtual Private Networking Reference Manual for the ADSL Modem Wireless Router DG834GThe Summary screen below displays 8-101 hour Step 2 Configuring the NETGEAR ProSafe VPN Client on the Remote PC c. Select Secure in the Connection Security check-box group h. Select the Connect using Secure Gateway Tunnel check box b. Choose None in the Select Certificate menu 5. Configure the VPN Client Authentication Proposal c. In the Authentication Method menu, select Pre-Shared key f. In the Hash Alg menu, select SHA-1 Information on the progress and status of the VPN client connection can be viewed by opening the NETGEAR ProSafe Log Viewer 9. The Connection Monitor screen for this connection is shown below v1.2, October Wireless Router DG834GVPN Tunnel Virtual Private Networking3600 1 hour 28800 8 hours192.168.0.x 8-23 A remote VPN GatewayReference Manual for the ADSL Modem Wireless Router DG834G Virtual Private NetworkingEnter the WAN IP address of the remote VPN gateway e.g 8-25 Reference Manual for the ADSL Modem Wireless Router DG834GThe Summary screen below displays Virtual Private Networking1 hour WAN IP of the remote VPN gateway e.g a. Open the DG834G v3 management interface and click on VPN Status to get the VPN Status/Log screen Figure VPN Tunnel Control Using the VPN Status Page to Activate a VPN TunnelActivating a VPN Tunnel Activate the VPN Tunnel by Pinging the Remote Endpoint Note Use Ctrl-C to stop the pinging a. Open command prompt i.e., Start - Run - cmdFigure 8-31 Running a Ping test to the LAN from the PC Start Using a VPN Tunnel to Activate It Verifying the Status of a VPN Tunnel This table lists the following data for each active VPN Tunnel Deactivating a VPN Tunnel Using the VPN Status Page to Deactivate a VPN Tunnelv1.2, October Reference Manual for the ADSL Modem Wireless Router DG834G8-36 Virtual Private Networking8-37 Deleting a VPN TunnelReference Manual for the ADSL Modem Wireless Router DG834G Virtual Private NetworkingUsing Auto Policy to Configure VPN Tunnels How to Set Up VPN Tunnels in Special CircumstancesConfiguring VPN Network Connection Parameters v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GVirtual Private Networking 8-39Any-the remote VPN endpoint may be at any IP address Fully Qualified Domain Name-your domain name IP Address-the Internet IP address of the remote VPN endpoint v1.2, October VPN TunnelVirtual Private Networking 8-433. Click Add Auto Policy 8-45 Authentication Algorithm = MD5 Pre-shared Key =Reference Manual for the ADSL Modem Wireless Router DG834G Virtual Private Networking5. Click Apply. The Get VPN Policies web page is displayed a. Open the DG834G v3 management interface and click on VPN Status to display the VPN Status/Log screen Figure Using Manual Policy to Configure VPN Tunnels Any-the remote VPN endpoint may be at any IP address MD5-128 bits, faster but less secure Go to “Restoring the Default Configuration and Password” on page Chapter TroubleshootingGo to “Troubleshooting the Web Configuration Interface” on page Go to “Troubleshooting the ISP Connection” on pageTest LED Never Turns On or Test LED Stays On Power LED Not OnLAN or Internet Port LEDs Not On Troubleshooting the Web Configuration Interface ADSL link Troubleshooting the ISP ConnectionInternet LED Blinking Amber Internet LED Off Obtaining a WAN IP AddressTroubleshooting PPPoE or PPPoA Troubleshooting Internet Browsing Troubleshooting a TCP/IP Network Using the Ping UtilityTesting the LAN Path to Your Router Testing the Path from Your Computer to a Remote Device Problems with Date and Time Restoring the Default Configuration and PasswordUsing the Reset button Date shown is January 1 Technical Specifications Appendix A Technical Specificationsv1.2, October Technical Specifications Reference Manual for the ADSL Modem Wireless Router DG834Gv1.2, October Configuration Profile Appendix B NETGEAR VPN ConfigurationDG834G v3 to FVL328 Step-By see “How to Set Up a Gateway-toFigure B-2 Click VPN Policies under Advanced - VPN to invoke this screenReference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN Configurationa. In Step 1, enter toDG834 for the Connection Name NETGEAR VPN Configuration Click IKE Policies under VPN to invoke this screenClick VPN Policies under VPN to invoke this screen Reference Manual for the ADSL Modem Wireless Router DG834GConfiguration Profile DG834G v3 with FQDN to FVL328Figure B-4 v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration VPNC Example Network Interface AddressingThe Use of a Fully Qualified Domain Name FQDN Step-By-Step ConfigurationCheck the box Use a Dynamic DNS Service Host and Domain Name = fvl328.dyndns.org Figure B-10 Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration Figure B-9The LAN Addresses used in this example are as follows B-13 Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration Figure B-11Step 1 Configuring the Client-to- Main Office Configuration Summary Telecommuter ExamplePage 255.255.255.0 Single address Dynamic IP address IKE Keep Alive is optionalmust match Remote LAN IP Subnet addressB-17 Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration Figure B-14Page Figure B-15 Figure B-16 h. Select the Connect using Secure Gateway Tunnel check boxFigure B-17 4. Configure the VPN Client Identityb. Choose None in the Select Certificate menu Figure B-19 5. Configure the VPN Client Authentication ProposalFigure B-20 c. In the Authentication Method menu, select Pre-Shared key6. Configure the VPN Client Key Exchange Proposal g. In the Key Group menu, select Diffie-Hellman Group8. Check the VPN Connection d. Check the Encapsulation Protocol ESP checkboxFigure B-21 Figure B-22 c. Type ping -t 192.168.0.1, and then click OK Viewing the PC Client’s Connection Monitor and Log Viewer Monitoring the VPN Tunnel Telecommuter ExampleFigure B-26 Viewing the VPN Router’s VPN Status and Log InformationB-30 Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration Figure B-27v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration B-31v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration B-32Related Documents Appendix C Related Documentsv1.2, October Related Documents Reference Manual for the ADSL Modem Wireless Router DG834Gv1.2, October