Manuals / NETGEAR / Computer Equipment / Network Router

NETGEAR DG834G manual Using Manual Policy to Configure VPN Tunnels

Models: DG834G

1 204

Download 204 pages 51.21 Kb

Page 156

Using Manual Policy to Configure VPN Tunnels

Reference Manual for the ADSL Modem Wireless Router DG834G

Using Manual Policy to Configure VPN Tunnels

As an alternative to IKE, you may use Manual Keying, in which you must specify each phase of the connection. A "Manual" VPN policy requires all settings for the VPN tunnel to be manually input at each end (both VPN endpoints).

Click the VPN Policies link of the main menu, and then click the Add Manual Policy radio button to display the Manual Keys menu shown in Figure 8-47.

Figure 8-47

8-48	Virtual Private Networking

v1.2, October 2006

Image 156

NETGEAR DG834G manual Using Manual Policy to Configure VPN Tunnels

Contents

Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR, IncTrademarks Statement of ConditionsFederal Communications Commission FCC Radiation Exposure Statement v1.2, OctoberEuropean Union Statement of Compliance v1.2, OctoberBestätigung des Herstellers/Importeurs v1.2, OctoberProduct and Publication Details Certificate of the Manufacturer/ImporterVoluntary Control Council for Interference VCCI Statement Customer Supportv1.2, October Contents Reference Manual for the ADSL Modem Wireless Router DG834GConfiguring Your Internet Connection Chapter About This ManualWireless Configuration ChapterChapter Protecting Your NetworkAdvanced Configuration ChapterManaging Your Network ChapterTroubleshooting ChapterVirtual Private Networking ChapterTechnical Specifications NETGEAR VPN ConfigurationAppendix A Appendix Bv1.2, October Chapter About This Manual Audience, Scope, Conventions, and Formatshttp//kbserver.netgear.com/products/DG834G v3.asp How to Print this Manual Printing a Page in the HTML ViewPrinting a Chapter Printing the Full Manual Reference Manual for the ADSL Modem Wireless Router DG834G About This Manualv1.2, October Chapter Introduction About the Modem RouterKey Features A Powerful, True Firewall802.11 Standards-based Wireless Networking Easy Installation and ManagementProtocol Support Virtual Private Networking VPN Auto Sensing and Auto Uplink LAN Ethernet ConnectionsContent Filtering Wi-Fi Multimedia WMM Quality of Service QoSWhat’s in the Box? DG834G ADSL Modem Wireless Router Resource CD, including this guideThe Router’s Front Panel Reference Manual for the ADSL Modem Wireless Router DG834GLED Descriptions IntroductionThe Router’s Rear Panel Chapter Configuring Your Internet Connection Connecting the Router to the InternetManual Setup What You Need Before You BeginInternet Configuration Requirements Understanding ADSL MicrofiltersComputers Set to DHCP ADSL MicrofilterADSL Microfilter with Built-In Splitter Manually Setting Up Your Modem Router Page Page Reference Manual for the ADSL Modem Wireless Router DG834G Configuring Your Internet Connectionv1.2, October Linecomputer or “Preparing a Computer for Network Access” in Appendix C The power light is lit after turning on the firewallPage Wizard-Detected PPPoE Login Account Setup Wizard-Detected PPPoA Login Account SetupAuto-Detecting Your Internet Connection Type Wizard-Detected Dynamic IP Account Setup Wizard-Detected IP Over ATM Account SetupWizard-Detected Fixed IP Static Account Setup Testing Your Internet Connection Manually Configuring Your Internet Connection ISP Does Not Require LoginISP Does Require Login Reference Manual for the ADSL Modem Wireless Router DG834GHow to Perform Manual Configuration Internet Connection Requires Login and Uses PPPoEInternet Connection Requires Login and Uses PPPoA Internet Connection Does Not Require A Login Page ADSL Settings Reference Manual for the ADSL Modem Wireless Router DG834G Configuring Your Internet Connection3-20 v1.2, OctoberChapter Wireless Configuration Considerations for a Wireless NetworkObserve Performance, Placement, and Range Guidelines specifications, please see Appendix A, “Technical Specifications”Implement Appropriate Wireless Security LUHOHVVDWD 6HFXULW\2SWLRQV5DQJH8SWRHHW WPA-802.1x, WPA2-802.1x. Wi-Fi Protected Access WPA with user authentication implemented using IEE 802.1x and RADIUS servers Understanding Wireless Settings Reference Manual for the ADSL Modem Wireless Router DG834GWireless Configuration v1.2, OctoberWireless Network Wireless Access PointWireless Station Access List Security OptionsReference Manual for the ADSL Modem Wireless Router DG834G Wireless Security OptionsHow to Set Up and Test Basic Wireless Connectivity How to Restrict Wireless Access to Your Network Restricting Wireless Access Based on the Wireless Network Name SSID Restricting Wireless Access Based on the Wireless Station Access List2. From the Wireless Settings menu, Wireless Station Access List section, click the Setup Access List button to display the list, shown below Choosing WEP Authentication and Security Encryption Methods Authentication Type Selection Encryption ChoicesHow to Configure WEP 5. Select the Authentication Type6. Select the Encryption Strength setting How to Configure WPA-PSK/WPA2-PSK Security How to Configure WPA-802.1x/WPA2-802.1x Security Reference Manual for the ADSL Modem Wireless Router DG834G Wireless Configuration4-16 v1.2, OctoberHow to Change the Built-In Password Chapter Protecting Your NetworkChanging the Administrator Login Timeout Configuring Basic Firewall Services Blocking Keywords, Sites, and ServicesHow to Block Keywords and Sites 2. Select the Block Sites link of the Security menu Firewall Rules Inbound Rules Port Forwarding Inbound Rule Example A Local Public Web Server Inbound Rule Example Allowing Videoconferencing Outbound Rules Service Blocking Considerations for Inbound RulesOutbound Rule Example Blocking Instant Messenger Order of Precedence for Rules Services How to Define ServicesSetting Times and Scheduling Firewall Services How to Set Your Time Zone5. Click Apply to save your settings How to Schedule Firewall Services Reference Manual for the ADSL Modem Wireless Router DG834G 5-16Protecting Your Network v1.2, OctoberBacking Up, Restoring, or Erasing Your Settings How to Back Up the Configuration to a FileChapter Managing Your Network How to Restore the Configuration from a File How to Erase the ConfigurationUpgrading the Modem Router’s Firmware the modem router. See “The Router’s Rear Panel” on pageHow to Upgrade the Modem Router Firmware Network Management Information Viewing Modem Router Status and Usage StatisticsReference Manual for the ADSL Modem Wireless Router DG834G This screen shows the following parametersTable 6-1. Menu 3.2 - Modem Router Status Fields Managing Your NetworkReference Manual for the ADSL Modem Wireless Router DG834G Table 6-1. Menu 3.2 - Modem Router Status Fields continuedManaging Your Network v1.2, OctoberReference Manual for the ADSL Modem Wireless Router DG834G This screen shows the following statisticsTable 6-2. Router Statistics Fields Managing Your NetworkReference Manual for the ADSL Modem Wireless Router DG834G This screen shows the following statisticsTable 6-3. Connection Status Fields for PPPoA Managing Your NetworkViewing Attached Devices Viewing, Selecting, and Saving Logged InformationReference Manual for the ADSL Modem Wireless Router DG834G An example of the logs file is shown below6-10 Managing Your NetworkLog entries are described in Table 6-4 below Activation and Administration Examples of Log MessagesSelecting What Information to Log Saving Log Files on a ServerEnabling Security Event E-mail Notification Dropped PacketsSend alerts and logs via email Running Diagnostic Utilities and Rebooting the Modem Router Configuring Remote Management Enabling Remote Management3. Select the Turn Remote Management On check box To allow access from any IP address on the Internet, select Everyone Reference Manual for the ADSL Modem Wireless Router DG834G 6-18Managing Your Network v1.2, OctoberChapter Advanced Configuration Configuring Advanced SecuritySetting Up A Default DMZ Server How to Configure a Default DMZ ServerConnect Automatically, as Required Configuring LAN IP Settings Enable PPPoE-RelayDisable Port Scan and DOS Protection Respond to Ping on Internet WAN PortThe LAN TCP/IP Setup parameters are IP Address DHCP Use Router as DHCP serverReserved IP addresses How to Configure LAN TCP/IP Settings 2. Click Edit or DeleteConfiguring Dynamic DNS How to Configure Dynamic DNSAdvanced Configuration 4. Select the Use a dynamic DNS service check box Using Static Routes Static Route ExampleHow to Configure Static Routes Universal Plug and Play UPnP 3. To save, cancel or refresh the table Chapter Virtual Private Networking VPN Tunnel DG834GPC Running NETGEAR ProSafe VPN Client VPN Tunnel Virtual Private Networkingv1.2, October DG834G VPN FirewallPlanning a VPN Table 8-1. VPN Tunnel Configuration WorksheetWhat method will you use to configure your VPN tunnels? VPN Tunnel Configuration See “How to Set Up a Client-to-Gateway VPN Configuration” on pageSee “How to Set Up a Gateway-to-Gateway VPN Configuration” on page DG834G VPN TunnelDG834G 22.23.24.2528800 8 hours 3600 1 hourReference Manual for the ADSL Modem Wireless Router DG834G Table 8-3. VPN Tunnel Configuration WorksheetA remote VPN client single PC Reference Manual for the ADSL Modem Wireless Router DG834G The Summary screen below displays8-10 Virtual Private Networking1 hour Step 2 Configuring the NETGEAR ProSafe VPN Client on the Remote PC c. Select Secure in the Connection Security check-box group h. Select the Connect using Secure Gateway Tunnel check box b. Choose None in the Select Certificate menu 5. Configure the VPN Client Authentication Proposal c. In the Authentication Method menu, select Pre-Shared key f. In the Hash Alg menu, select SHA-1 Information on the progress and status of the VPN client connection can be viewed by opening the NETGEAR ProSafe Log Viewer 9. The Connection Monitor screen for this connection is shown below Wireless Router DG834G VPN TunnelVirtual Private Networking v1.2, October28800 8 hours 3600 1 hour192.168.0.x A remote VPN Gateway Reference Manual for the ADSL Modem Wireless Router DG834GVirtual Private Networking 8-23Enter the WAN IP address of the remote VPN gateway e.g Reference Manual for the ADSL Modem Wireless Router DG834G The Summary screen below displaysVirtual Private Networking 8-251 hour WAN IP of the remote VPN gateway e.g a. Open the DG834G v3 management interface and click on VPN Status to get the VPN Status/Log screen Figure Using the VPN Status Page to Activate a VPN Tunnel VPN Tunnel ControlActivating a VPN Tunnel Activate the VPN Tunnel by Pinging the Remote Endpoint a. Open command prompt i.e., Start - Run - cmd Note Use Ctrl-C to stop the pingingFigure 8-31 Running a Ping test to the LAN from the PC Start Using a VPN Tunnel to Activate It Verifying the Status of a VPN Tunnel This table lists the following data for each active VPN Tunnel Using the VPN Status Page to Deactivate a VPN Tunnel Deactivating a VPN TunnelReference Manual for the ADSL Modem Wireless Router DG834G 8-36Virtual Private Networking v1.2, OctoberDeleting a VPN Tunnel Reference Manual for the ADSL Modem Wireless Router DG834GVirtual Private Networking 8-37How to Set Up VPN Tunnels in Special Circumstances Using Auto Policy to Configure VPN TunnelsConfiguring VPN Network Connection Parameters Reference Manual for the ADSL Modem Wireless Router DG834G Virtual Private Networking8-39 v1.2, OctoberAny-the remote VPN endpoint may be at any IP address Fully Qualified Domain Name-your domain name IP Address-the Internet IP address of the remote VPN endpoint VPN Tunnel Virtual Private Networking8-43 v1.2, October3. Click Add Auto Policy Authentication Algorithm = MD5 Pre-shared Key = Reference Manual for the ADSL Modem Wireless Router DG834GVirtual Private Networking 8-455. Click Apply. The Get VPN Policies web page is displayed a. Open the DG834G v3 management interface and click on VPN Status to display the VPN Status/Log screen Figure Using Manual Policy to Configure VPN Tunnels Any-the remote VPN endpoint may be at any IP address MD5-128 bits, faster but less secure Chapter Troubleshooting Go to “Troubleshooting the Web Configuration Interface” on pageGo to “Troubleshooting the ISP Connection” on page Go to “Restoring the Default Configuration and Password” on pagePower LED Not On Test LED Never Turns On or Test LED Stays OnLAN or Internet Port LEDs Not On Troubleshooting the Web Configuration Interface Troubleshooting the ISP Connection ADSL linkInternet LED Blinking Amber Obtaining a WAN IP Address Internet LED OffTroubleshooting PPPoE or PPPoA Troubleshooting a TCP/IP Network Using the Ping Utility Troubleshooting Internet BrowsingTesting the LAN Path to Your Router Testing the Path from Your Computer to a Remote Device Restoring the Default Configuration and Password Problems with Date and TimeUsing the Reset button Date shown is January 1 Appendix A Technical Specifications Technical Specificationsv1.2, October Reference Manual for the ADSL Modem Wireless Router DG834G Technical Specificationsv1.2, October Appendix B NETGEAR VPN Configuration Configuration ProfileDG834G v3 to FVL328 see “How to Set Up a Gateway-to Step-ByClick VPN Policies under Advanced - VPN to invoke this screen Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration Figure B-2a. In Step 1, enter toDG834 for the Connection Name Click IKE Policies under VPN to invoke this screen Click VPN Policies under VPN to invoke this screenReference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationDG834G v3 with FQDN to FVL328 Configuration ProfileFigure B-4 Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationVPNC Example Network Interface Addressing v1.2, OctoberStep-By-Step Configuration The Use of a Fully Qualified Domain Name FQDNCheck the box Use a Dynamic DNS Service Host and Domain Name = fvl328.dyndns.org Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationFigure B-9 Figure B-10The LAN Addresses used in this example are as follows Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationFigure B-11 B-13Configuration Summary Telecommuter Example Step 1 Configuring the Client-to- Main OfficePage Dynamic IP address IKE Keep Alive is optional must match Remote LAN IPSubnet address 255.255.255.0 Single addressReference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationFigure B-14 B-17Page Figure B-15 h. Select the Connect using Secure Gateway Tunnel check box Figure B-164. Configure the VPN Client Identity Figure B-17b. Choose None in the Select Certificate menu 5. Configure the VPN Client Authentication Proposal Figure B-19c. In the Authentication Method menu, select Pre-Shared key 6. Configure the VPN Client Key Exchange Proposalg. In the Key Group menu, select Diffie-Hellman Group Figure B-20d. Check the Encapsulation Protocol ESP checkbox 8. Check the VPN ConnectionFigure B-21 Figure B-22 c. Type ping -t 192.168.0.1, and then click OK Monitoring the VPN Tunnel Telecommuter Example Viewing the PC Client’s Connection Monitor and Log ViewerViewing the VPN Router’s VPN Status and Log Information Figure B-26Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationFigure B-27 B-30Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationB-31 v1.2, OctoberReference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationB-32 v1.2, OctoberAppendix C Related Documents Related Documentsv1.2, October Reference Manual for the ADSL Modem Wireless Router DG834G Related Documentsv1.2, October