Manuals / NETGEAR / Computer Equipment / Network Router

NETGEAR DG834G 28800 8 hours, 3600 1 hour, 3. VPN Tunnel Configuration Worksheet, v1.2, October

Models: DG834G

1 204

Download 204 pages 51.21 Kb

Page 116

Reference Manual for the ADSL Modem Wireless Router DG834G

Table 8-3. VPN Tunnel Configuration Worksheet

	Connection Name:				RoadWarrior

	Pre-Shared Key:				12345678

	Secure Association -- Main Mode or Manual Keys:				Main

	Perfect Forward Secrecy -- Enabled or Disabled:				Disabled

	Encryption Protocol -- DES or 3DES:				3DES

	Authentication Protocol -- MD5 or SHA-1:				SHA-1

	Diffie-Hellman (DH) Group -- Group 1 or Group 2:				Group 2

	Key Life in seconds:				28800 (8 hours)

	IKE Life Time in seconds:				3600 (1 hour)

					FQDN or Gateway IP
	VPN Endpoint	Local IPSec ID	LAN IP Address	Subnet Mask	(WAN IP Address)

	Client	toDG834	—	—	Dynamic

	DG834G v3	toClient	192.168.3.1	255.255.255.0	22.23.24.25

Follow this procedure to configure a client-to-gateway VPN tunnel using the VPN Wizard.

8-8	Virtual Private Networking

v1.2, October 2006

Image 116

NETGEAR manual 28800 8 hours, 3600 1 hour, Reference Manual for the ADSL Modem Wireless Router DG834G, v1.2, October

Contents

Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR, IncTrademarks Statement of ConditionsFederal Communications Commission FCC Radiation Exposure Statement v1.2, OctoberEuropean Union Statement of Compliance v1.2, OctoberBestätigung des Herstellers/Importeurs v1.2, OctoberProduct and Publication Details Certificate of the Manufacturer/ImporterVoluntary Control Council for Interference VCCI Statement Customer Supportv1.2, October Contents Reference Manual for the ADSL Modem Wireless Router DG834GConfiguring Your Internet Connection Chapter About This ManualWireless Configuration ChapterChapter Protecting Your NetworkAdvanced Configuration ChapterManaging Your Network ChapterTroubleshooting ChapterVirtual Private Networking ChapterTechnical Specifications NETGEAR VPN ConfigurationAppendix A Appendix Bv1.2, October http//kbserver.netgear.com/products/DG834G v3.asp Chapter About This ManualAudience, Scope, Conventions, and Formats Printing a Chapter How to Print this ManualPrinting a Page in the HTML View Printing the Full Manual v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GAbout This Manual Chapter Introduction About the Modem RouterKey Features A Powerful, True Firewall802.11 Standards-based Wireless Networking Easy Installation and ManagementProtocol Support Virtual Private Networking VPN Auto Sensing and Auto Uplink LAN Ethernet ConnectionsContent Filtering Wi-Fi Multimedia WMM Quality of Service QoSWhat’s in the Box? DG834G ADSL Modem Wireless Router Resource CD, including this guideThe Router’s Front Panel Reference Manual for the ADSL Modem Wireless Router DG834GLED Descriptions IntroductionThe Router’s Rear Panel Chapter Configuring Your Internet Connection Connecting the Router to the InternetManual Setup What You Need Before You BeginInternet Configuration Requirements Understanding ADSL MicrofiltersADSL Microfilter with Built-In Splitter Computers Set to DHCPADSL Microfilter Manually Setting Up Your Modem Router Page Page Reference Manual for the ADSL Modem Wireless Router DG834G Configuring Your Internet Connectionv1.2, October Linecomputer or “Preparing a Computer for Network Access” in Appendix C The power light is lit after turning on the firewallPage Auto-Detecting Your Internet Connection Type Wizard-Detected PPPoE Login Account SetupWizard-Detected PPPoA Login Account Setup Wizard-Detected Dynamic IP Account Setup Wizard-Detected IP Over ATM Account SetupWizard-Detected Fixed IP Static Account Setup Testing Your Internet Connection Manually Configuring Your Internet Connection ISP Does Not Require LoginISP Does Require Login Reference Manual for the ADSL Modem Wireless Router DG834GHow to Perform Manual Configuration Internet Connection Requires Login and Uses PPPoEInternet Connection Requires Login and Uses PPPoA Internet Connection Does Not Require A Login Page ADSL Settings Reference Manual for the ADSL Modem Wireless Router DG834G Configuring Your Internet Connection3-20 v1.2, OctoberChapter Wireless Configuration Considerations for a Wireless NetworkObserve Performance, Placement, and Range Guidelines specifications, please see Appendix A, “Technical Specifications”5DQJH8SWRHHW Implement Appropriate Wireless SecurityLUHOHVVDWD 6HFXULW\2SWLRQV WPA-802.1x, WPA2-802.1x. Wi-Fi Protected Access WPA with user authentication implemented using IEE 802.1x and RADIUS servers Understanding Wireless Settings Reference Manual for the ADSL Modem Wireless Router DG834GWireless Configuration v1.2, OctoberWireless Network Wireless Access PointWireless Station Access List Security OptionsReference Manual for the ADSL Modem Wireless Router DG834G Wireless Security OptionsHow to Set Up and Test Basic Wireless Connectivity How to Restrict Wireless Access to Your Network Restricting Wireless Access Based on the Wireless Network Name SSID Restricting Wireless Access Based on the Wireless Station Access List2. From the Wireless Settings menu, Wireless Station Access List section, click the Setup Access List button to display the list, shown below Choosing WEP Authentication and Security Encryption Methods Authentication Type Selection Encryption Choices6. Select the Encryption Strength setting How to Configure WEP5. Select the Authentication Type How to Configure WPA-PSK/WPA2-PSK Security How to Configure WPA-802.1x/WPA2-802.1x Security Reference Manual for the ADSL Modem Wireless Router DG834G Wireless Configuration4-16 v1.2, OctoberHow to Change the Built-In Password Chapter Protecting Your NetworkChanging the Administrator Login Timeout How to Block Keywords and Sites Configuring Basic Firewall ServicesBlocking Keywords, Sites, and Services 2. Select the Block Sites link of the Security menu Firewall Rules Inbound Rules Port Forwarding Inbound Rule Example A Local Public Web Server Inbound Rule Example Allowing Videoconferencing Outbound Rules Service Blocking Considerations for Inbound RulesOutbound Rule Example Blocking Instant Messenger Order of Precedence for Rules Services How to Define ServicesSetting Times and Scheduling Firewall Services How to Set Your Time Zone5. Click Apply to save your settings How to Schedule Firewall Services Reference Manual for the ADSL Modem Wireless Router DG834G 5-16Protecting Your Network v1.2, OctoberChapter Managing Your Network Backing Up, Restoring, or Erasing Your SettingsHow to Back Up the Configuration to a File How to Restore the Configuration from a File How to Erase the ConfigurationUpgrading the Modem Router’s Firmware the modem router. See “The Router’s Rear Panel” on pageHow to Upgrade the Modem Router Firmware Network Management Information Viewing Modem Router Status and Usage StatisticsReference Manual for the ADSL Modem Wireless Router DG834G This screen shows the following parametersTable 6-1. Menu 3.2 - Modem Router Status Fields Managing Your NetworkReference Manual for the ADSL Modem Wireless Router DG834G Table 6-1. Menu 3.2 - Modem Router Status Fields continuedManaging Your Network v1.2, OctoberReference Manual for the ADSL Modem Wireless Router DG834G This screen shows the following statisticsTable 6-2. Router Statistics Fields Managing Your NetworkReference Manual for the ADSL Modem Wireless Router DG834G This screen shows the following statisticsTable 6-3. Connection Status Fields for PPPoA Managing Your NetworkViewing Attached Devices Viewing, Selecting, and Saving Logged InformationReference Manual for the ADSL Modem Wireless Router DG834G An example of the logs file is shown below6-10 Managing Your NetworkLog entries are described in Table 6-4 below Activation and Administration Examples of Log MessagesSelecting What Information to Log Saving Log Files on a ServerEnabling Security Event E-mail Notification Dropped PacketsSend alerts and logs via email Running Diagnostic Utilities and Rebooting the Modem Router 3. Select the Turn Remote Management On check box Configuring Remote ManagementEnabling Remote Management To allow access from any IP address on the Internet, select Everyone Reference Manual for the ADSL Modem Wireless Router DG834G 6-18Managing Your Network v1.2, OctoberChapter Advanced Configuration Configuring Advanced SecuritySetting Up A Default DMZ Server How to Configure a Default DMZ ServerConnect Automatically, as Required Configuring LAN IP Settings Enable PPPoE-RelayDisable Port Scan and DOS Protection Respond to Ping on Internet WAN PortThe LAN TCP/IP Setup parameters are IP Address DHCP Use Router as DHCP serverReserved IP addresses How to Configure LAN TCP/IP Settings 2. Click Edit or DeleteAdvanced Configuration Configuring Dynamic DNSHow to Configure Dynamic DNS 4. Select the Use a dynamic DNS service check box Using Static Routes Static Route ExampleHow to Configure Static Routes Universal Plug and Play UPnP 3. To save, cancel or refresh the table Chapter Virtual Private Networking PC Running NETGEAR ProSafe VPN Client VPN TunnelDG834G VPN Tunnel Virtual Private Networkingv1.2, October DG834G VPN FirewallPlanning a VPN Table 8-1. VPN Tunnel Configuration WorksheetWhat method will you use to configure your VPN tunnels? See “How to Set Up a Gateway-to-Gateway VPN Configuration” on page VPN Tunnel ConfigurationSee “How to Set Up a Client-to-Gateway VPN Configuration” on page DG834G VPN TunnelDG834G 22.23.24.2528800 8 hours 3600 1 hourReference Manual for the ADSL Modem Wireless Router DG834G Table 8-3. VPN Tunnel Configuration WorksheetA remote VPN client single PC Reference Manual for the ADSL Modem Wireless Router DG834G The Summary screen below displays8-10 Virtual Private Networking1 hour Step 2 Configuring the NETGEAR ProSafe VPN Client on the Remote PC c. Select Secure in the Connection Security check-box group h. Select the Connect using Secure Gateway Tunnel check box b. Choose None in the Select Certificate menu 5. Configure the VPN Client Authentication Proposal c. In the Authentication Method menu, select Pre-Shared key f. In the Hash Alg menu, select SHA-1 Information on the progress and status of the VPN client connection can be viewed by opening the NETGEAR ProSafe Log Viewer 9. The Connection Monitor screen for this connection is shown below Wireless Router DG834G VPN TunnelVirtual Private Networking v1.2, October192.168.0.x 28800 8 hours3600 1 hour A remote VPN Gateway Reference Manual for the ADSL Modem Wireless Router DG834GVirtual Private Networking 8-23Enter the WAN IP address of the remote VPN gateway e.g Reference Manual for the ADSL Modem Wireless Router DG834G The Summary screen below displaysVirtual Private Networking 8-251 hour WAN IP of the remote VPN gateway e.g a. Open the DG834G v3 management interface and click on VPN Status to get the VPN Status/Log screen Figure Activating a VPN Tunnel Using the VPN Status Page to Activate a VPN TunnelVPN Tunnel Control Activate the VPN Tunnel by Pinging the Remote Endpoint Figure 8-31 Running a Ping test to the LAN from the PC a. Open command prompt i.e., Start - Run - cmdNote Use Ctrl-C to stop the pinging Start Using a VPN Tunnel to Activate It Verifying the Status of a VPN Tunnel This table lists the following data for each active VPN Tunnel Using the VPN Status Page to Deactivate a VPN Tunnel Deactivating a VPN TunnelReference Manual for the ADSL Modem Wireless Router DG834G 8-36Virtual Private Networking v1.2, OctoberDeleting a VPN Tunnel Reference Manual for the ADSL Modem Wireless Router DG834GVirtual Private Networking 8-37Configuring VPN Network Connection Parameters How to Set Up VPN Tunnels in Special CircumstancesUsing Auto Policy to Configure VPN Tunnels Reference Manual for the ADSL Modem Wireless Router DG834G Virtual Private Networking8-39 v1.2, OctoberAny-the remote VPN endpoint may be at any IP address Fully Qualified Domain Name-your domain name IP Address-the Internet IP address of the remote VPN endpoint VPN Tunnel Virtual Private Networking8-43 v1.2, October3. Click Add Auto Policy Authentication Algorithm = MD5 Pre-shared Key = Reference Manual for the ADSL Modem Wireless Router DG834GVirtual Private Networking 8-455. Click Apply. The Get VPN Policies web page is displayed a. Open the DG834G v3 management interface and click on VPN Status to display the VPN Status/Log screen Figure Using Manual Policy to Configure VPN Tunnels Any-the remote VPN endpoint may be at any IP address MD5-128 bits, faster but less secure Chapter Troubleshooting Go to “Troubleshooting the Web Configuration Interface” on pageGo to “Troubleshooting the ISP Connection” on page Go to “Restoring the Default Configuration and Password” on pageLAN or Internet Port LEDs Not On Power LED Not OnTest LED Never Turns On or Test LED Stays On Troubleshooting the Web Configuration Interface Internet LED Blinking Amber Troubleshooting the ISP ConnectionADSL link Obtaining a WAN IP Address Internet LED OffTroubleshooting PPPoE or PPPoA Testing the LAN Path to Your Router Troubleshooting a TCP/IP Network Using the Ping UtilityTroubleshooting Internet Browsing Testing the Path from Your Computer to a Remote Device Using the Reset button Restoring the Default Configuration and PasswordProblems with Date and Time Date shown is January 1 v1.2, October Appendix A Technical SpecificationsTechnical Specifications v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GTechnical Specifications DG834G v3 to FVL328 Appendix B NETGEAR VPN ConfigurationConfiguration Profile see “How to Set Up a Gateway-to Step-ByClick VPN Policies under Advanced - VPN to invoke this screen Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration Figure B-2a. In Step 1, enter toDG834 for the Connection Name Click IKE Policies under VPN to invoke this screen Click VPN Policies under VPN to invoke this screenReference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationFigure B-4 DG834G v3 with FQDN to FVL328Configuration Profile Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationVPNC Example Network Interface Addressing v1.2, OctoberStep-By-Step Configuration The Use of a Fully Qualified Domain Name FQDNCheck the box Use a Dynamic DNS Service Host and Domain Name = fvl328.dyndns.org Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationFigure B-9 Figure B-10The LAN Addresses used in this example are as follows Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationFigure B-11 B-13Configuration Summary Telecommuter Example Step 1 Configuring the Client-to- Main OfficePage Main Mode Fully Qualified Domain Name Dynamic IP address IKE Keep Alive is optionalmust match Remote LAN IP Subnet addressReference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationFigure B-14 B-17Page Figure B-15 h. Select the Connect using Secure Gateway Tunnel check box Figure B-164. Configure the VPN Client Identity Figure B-17b. Choose None in the Select Certificate menu 5. Configure the VPN Client Authentication Proposal Figure B-19c. In the Authentication Method menu, select Pre-Shared key 6. Configure the VPN Client Key Exchange Proposalg. In the Key Group menu, select Diffie-Hellman Group Figure B-20Figure B-21 d. Check the Encapsulation Protocol ESP checkbox8. Check the VPN Connection Figure B-22 c. Type ping -t 192.168.0.1, and then click OK Monitoring the VPN Tunnel Telecommuter Example Viewing the PC Client’s Connection Monitor and Log ViewerViewing the VPN Router’s VPN Status and Log Information Figure B-26Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationFigure B-27 B-30Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationB-31 v1.2, OctoberReference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationB-32 v1.2, Octoberv1.2, October Appendix C Related DocumentsRelated Documents v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GRelated Documents