NETGEAR, Inc
Reference Manual for the ADSL Modem Wireless Router DG834G
v1.2, October
Trademarks
Statement of Conditions
Federal Communications Commission FCC Radiation Exposure Statement
v1.2, October
European Union Statement of Compliance
v1.2, October
Bestätigung des Herstellers/Importeurs
Customer Support
Product and Publication Details
Certificate of the Manufacturer/Importer
Voluntary Control Council for Interference VCCI Statement
v1.2, October
Chapter About This Manual
Contents
Reference Manual for the ADSL Modem Wireless Router DG834G
Configuring Your Internet Connection
Protecting Your Network
Wireless Configuration
Chapter
Chapter
Chapter
Advanced Configuration
Chapter
Managing Your Network
Chapter
Troubleshooting
Chapter
Virtual Private Networking
Appendix B
Technical Specifications
NETGEAR VPN Configuration
Appendix A
v1.2, October
Chapter About This Manual
Audience, Scope, Conventions, and Formats
http//kbserver.netgear.com/products/DG834G v3.asp
How to Print this Manual
Printing a Page in the HTML View
Printing a Chapter
Printing the Full Manual
Reference Manual for the ADSL Modem Wireless Router DG834G
About This Manual
v1.2, October
About the Modem Router
Chapter Introduction
A Powerful, True Firewall
Key Features
Easy Installation and Management
802.11 Standards-based Wireless Networking
Protocol Support
Auto Sensing and Auto Uplink LAN Ethernet Connections
Virtual Private Networking VPN
DG834G ADSL Modem Wireless Router Resource CD, including this guide
Content Filtering
Wi-Fi Multimedia WMM Quality of Service QoS
What’s in the Box?
Introduction
The Router’s Front Panel
Reference Manual for the ADSL Modem Wireless Router DG834G
LED Descriptions
The Router’s Rear Panel
What You Need Before You Begin
Chapter Configuring Your Internet Connection
Connecting the Router to the Internet
Manual Setup
Understanding ADSL Microfilters
Internet Configuration Requirements
Computers Set to DHCP
ADSL Microfilter
ADSL Microfilter with Built-In Splitter
Manually Setting Up Your Modem Router
Page
Page
Line
Reference Manual for the ADSL Modem Wireless Router DG834G
Configuring Your Internet Connection
v1.2, October
The power light is lit after turning on the firewall
computer or “Preparing a Computer for Network Access” in Appendix C
Page
Wizard-Detected PPPoE Login Account Setup
Wizard-Detected PPPoA Login Account Setup
Auto-Detecting Your Internet Connection Type
Wizard-Detected IP Over ATM Account Setup
Wizard-Detected Dynamic IP Account Setup
Wizard-Detected Fixed IP Static Account Setup
Testing Your Internet Connection
Reference Manual for the ADSL Modem Wireless Router DG834G
Manually Configuring Your Internet Connection
ISP Does Not Require Login
ISP Does Require Login
Internet Connection Requires Login and Uses PPPoE
How to Perform Manual Configuration
Internet Connection Requires Login and Uses PPPoA
Internet Connection Does Not Require A Login
Page
ADSL Settings
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
Configuring Your Internet Connection
3-20
specifications, please see Appendix A, “Technical Specifications”
Chapter Wireless Configuration
Considerations for a Wireless Network
Observe Performance, Placement, and Range Guidelines
Implement Appropriate Wireless Security
LUHOHVVDWD 6HFXULW\2SWLRQV
5DQJH8SWRHHW
WPA-802.1x, WPA2-802.1x. Wi-Fi Protected Access WPA with user authentication implemented using IEE 802.1x and RADIUS servers
v1.2, October
Understanding Wireless Settings
Reference Manual for the ADSL Modem Wireless Router DG834G
Wireless Configuration
Wireless Access Point
Wireless Network
Wireless Security Options
Wireless Station Access List
Security Options
Reference Manual for the ADSL Modem Wireless Router DG834G
How to Set Up and Test Basic Wireless Connectivity
How to Restrict Wireless Access to Your Network
Restricting Wireless Access Based on the Wireless Station Access List
Restricting Wireless Access Based on the Wireless Network Name SSID
2. From the Wireless Settings menu, Wireless Station Access List section, click the Setup Access List button to display the list, shown below
Choosing WEP Authentication and Security Encryption Methods
Encryption Choices
Authentication Type Selection
How to Configure WEP
5. Select the Authentication Type
6. Select the Encryption Strength setting
How to Configure WPA-PSK/WPA2-PSK Security
How to Configure WPA-802.1x/WPA2-802.1x Security
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
Wireless Configuration
4-16
Chapter Protecting Your Network
How to Change the Built-In Password
Changing the Administrator Login Timeout
Configuring Basic Firewall Services
Blocking Keywords, Sites, and Services
How to Block Keywords and Sites
2. Select the Block Sites link of the Security menu
Firewall Rules
Inbound Rules Port Forwarding
Inbound Rule Example A Local Public Web Server
Inbound Rule Example Allowing Videoconferencing
Considerations for Inbound Rules
Outbound Rules Service Blocking
Outbound Rule Example Blocking Instant Messenger
Order of Precedence for Rules
How to Define Services
Services
How to Set Your Time Zone
Setting Times and Scheduling Firewall Services
5. Click Apply to save your settings
How to Schedule Firewall Services
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
5-16
Protecting Your Network
Backing Up, Restoring, or Erasing Your Settings
How to Back Up the Configuration to a File
Chapter Managing Your Network
the modem router. See “The Router’s Rear Panel” on page
How to Restore the Configuration from a File
How to Erase the Configuration
Upgrading the Modem Router’s Firmware
How to Upgrade the Modem Router Firmware
Viewing Modem Router Status and Usage Statistics
Network Management Information
Managing Your Network
Reference Manual for the ADSL Modem Wireless Router DG834G
This screen shows the following parameters
Table 6-1. Menu 3.2 - Modem Router Status Fields
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
Table 6-1. Menu 3.2 - Modem Router Status Fields continued
Managing Your Network
Managing Your Network
Reference Manual for the ADSL Modem Wireless Router DG834G
This screen shows the following statistics
Table 6-2. Router Statistics Fields
Managing Your Network
Reference Manual for the ADSL Modem Wireless Router DG834G
This screen shows the following statistics
Table 6-3. Connection Status Fields for PPPoA
Viewing, Selecting, and Saving Logged Information
Viewing Attached Devices
Managing Your Network
Reference Manual for the ADSL Modem Wireless Router DG834G
An example of the logs file is shown below
6-10
Log entries are described in Table 6-4 below
Saving Log Files on a Server
Activation and Administration
Examples of Log Messages
Selecting What Information to Log
Dropped Packets
Enabling Security Event E-mail Notification
Send alerts and logs via email
Running Diagnostic Utilities and Rebooting the Modem Router
Configuring Remote Management
Enabling Remote Management
3. Select the Turn Remote Management On check box
To allow access from any IP address on the Internet, select Everyone
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
6-18
Managing Your Network
Configuring Advanced Security
Chapter Advanced Configuration
How to Configure a Default DMZ Server
Setting Up A Default DMZ Server
Connect Automatically, as Required
Respond to Ping on Internet WAN Port
Configuring LAN IP Settings
Enable PPPoE-Relay
Disable Port Scan and DOS Protection
The LAN TCP/IP Setup parameters are IP Address
Use Router as DHCP server
DHCP
Reserved IP addresses
2. Click Edit or Delete
How to Configure LAN TCP/IP Settings
Configuring Dynamic DNS
How to Configure Dynamic DNS
Advanced Configuration
4. Select the Use a dynamic DNS service check box
Static Route Example
Using Static Routes
How to Configure Static Routes
Universal Plug and Play UPnP
3. To save, cancel or refresh the table
Chapter Virtual Private Networking
VPN Tunnel
DG834G
PC Running NETGEAR ProSafe VPN Client
DG834G VPN Firewall
VPN Tunnel
Virtual Private Networking
v1.2, October
Table 8-1. VPN Tunnel Configuration Worksheet
Planning a VPN
What method will you use to configure your VPN tunnels?
VPN Tunnel Configuration
See “How to Set Up a Client-to-Gateway VPN Configuration” on page
See “How to Set Up a Gateway-to-Gateway VPN Configuration” on page
22.23.24.25
DG834G
VPN Tunnel
DG834G
Table 8-3. VPN Tunnel Configuration Worksheet
28800 8 hours
3600 1 hour
Reference Manual for the ADSL Modem Wireless Router DG834G
A remote VPN client single PC
Virtual Private Networking
Reference Manual for the ADSL Modem Wireless Router DG834G
The Summary screen below displays
8-10
1 hour
Step 2 Configuring the NETGEAR ProSafe VPN Client on the Remote PC
c. Select Secure in the Connection Security check-box group
h. Select the Connect using Secure Gateway Tunnel check box
b. Choose None in the Select Certificate menu
5. Configure the VPN Client Authentication Proposal
c. In the Authentication Method menu, select Pre-Shared key
f. In the Hash Alg menu, select SHA-1
Information on the progress and status of the VPN client connection can be viewed by opening the NETGEAR ProSafe Log Viewer
9. The Connection Monitor screen for this connection is shown below
v1.2, October
Wireless Router DG834G
VPN Tunnel
Virtual Private Networking
28800 8 hours
3600 1 hour
192.168.0.x
8-23
A remote VPN Gateway
Reference Manual for the ADSL Modem Wireless Router DG834G
Virtual Private Networking
Enter the WAN IP address of the remote VPN gateway e.g
8-25
Reference Manual for the ADSL Modem Wireless Router DG834G
The Summary screen below displays
Virtual Private Networking
1 hour
WAN IP of the remote VPN gateway e.g
a. Open the DG834G v3 management interface and click on VPN Status to get the VPN Status/Log screen Figure
Using the VPN Status Page to Activate a VPN Tunnel
VPN Tunnel Control
Activating a VPN Tunnel
Activate the VPN Tunnel by Pinging the Remote Endpoint
a. Open command prompt i.e., Start - Run - cmd
Note Use Ctrl-C to stop the pinging
Figure 8-31 Running a Ping test to the LAN from the PC
Start Using a VPN Tunnel to Activate It
Verifying the Status of a VPN Tunnel
This table lists the following data for each active VPN Tunnel
Deactivating a VPN Tunnel
Using the VPN Status Page to Deactivate a VPN Tunnel
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
8-36
Virtual Private Networking
8-37
Deleting a VPN Tunnel
Reference Manual for the ADSL Modem Wireless Router DG834G
Virtual Private Networking
How to Set Up VPN Tunnels in Special Circumstances
Using Auto Policy to Configure VPN Tunnels
Configuring VPN Network Connection Parameters
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
Virtual Private Networking
8-39
Any-the remote VPN endpoint may be at any IP address
Fully Qualified Domain Name-your domain name
IP Address-the Internet IP address of the remote VPN endpoint
v1.2, October
VPN Tunnel
Virtual Private Networking
8-43
3. Click Add Auto Policy
8-45
Authentication Algorithm = MD5 Pre-shared Key =
Reference Manual for the ADSL Modem Wireless Router DG834G
Virtual Private Networking
5. Click Apply. The Get VPN Policies web page is displayed
a. Open the DG834G v3 management interface and click on VPN Status to display the VPN Status/Log screen Figure
Using Manual Policy to Configure VPN Tunnels
Any-the remote VPN endpoint may be at any IP address
MD5-128 bits, faster but less secure
Go to “Restoring the Default Configuration and Password” on page
Chapter Troubleshooting
Go to “Troubleshooting the Web Configuration Interface” on page
Go to “Troubleshooting the ISP Connection” on page
Power LED Not On
Test LED Never Turns On or Test LED Stays On
LAN or Internet Port LEDs Not On
Troubleshooting the Web Configuration Interface
Troubleshooting the ISP Connection
ADSL link
Internet LED Blinking Amber
Internet LED Off
Obtaining a WAN IP Address
Troubleshooting PPPoE or PPPoA
Troubleshooting a TCP/IP Network Using the Ping Utility
Troubleshooting Internet Browsing
Testing the LAN Path to Your Router
Testing the Path from Your Computer to a Remote Device
Restoring the Default Configuration and Password
Problems with Date and Time
Using the Reset button
Date shown is January 1
Appendix A Technical Specifications
Technical Specifications
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
Technical Specifications
v1.2, October
Appendix B NETGEAR VPN Configuration
Configuration Profile
DG834G v3 to FVL328
Step-By
see “How to Set Up a Gateway-to
Figure B-2
Click VPN Policies under Advanced - VPN to invoke this screen
Reference Manual for the ADSL Modem Wireless Router DG834G
NETGEAR VPN Configuration
a. In Step 1, enter toDG834 for the Connection Name
NETGEAR VPN Configuration
Click IKE Policies under VPN to invoke this screen
Click VPN Policies under VPN to invoke this screen
Reference Manual for the ADSL Modem Wireless Router DG834G
DG834G v3 with FQDN to FVL328
Configuration Profile
Figure B-4
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
NETGEAR VPN Configuration
VPNC Example Network Interface Addressing
The Use of a Fully Qualified Domain Name FQDN
Step-By-Step Configuration
Check the box Use a Dynamic DNS Service
Host and Domain Name = fvl328.dyndns.org
Figure B-10
Reference Manual for the ADSL Modem Wireless Router DG834G
NETGEAR VPN Configuration
Figure B-9
The LAN Addresses used in this example are as follows
B-13
Reference Manual for the ADSL Modem Wireless Router DG834G
NETGEAR VPN Configuration
Figure B-11
Step 1 Configuring the Client-to- Main Office
Configuration Summary Telecommuter Example
Page
Subnet address
Main Mode Fully Qualified Domain Name
Dynamic IP address IKE Keep Alive is optional
must match Remote LAN IP
B-17
Reference Manual for the ADSL Modem Wireless Router DG834G
NETGEAR VPN Configuration
Figure B-14
Page
Figure B-15
Figure B-16
h. Select the Connect using Secure Gateway Tunnel check box
Figure B-17
4. Configure the VPN Client Identity
b. Choose None in the Select Certificate menu
Figure B-19
5. Configure the VPN Client Authentication Proposal
Figure B-20
c. In the Authentication Method menu, select Pre-Shared key
6. Configure the VPN Client Key Exchange Proposal
g. In the Key Group menu, select Diffie-Hellman Group
d. Check the Encapsulation Protocol ESP checkbox
8. Check the VPN Connection
Figure B-21
Figure B-22
c. Type ping -t 192.168.0.1, and then click OK
Viewing the PC Client’s Connection Monitor and Log Viewer
Monitoring the VPN Tunnel Telecommuter Example
Figure B-26
Viewing the VPN Router’s VPN Status and Log Information
B-30
Reference Manual for the ADSL Modem Wireless Router DG834G
NETGEAR VPN Configuration
Figure B-27
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
NETGEAR VPN Configuration
B-31
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
NETGEAR VPN Configuration
B-32
Appendix C Related Documents
Related Documents
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
Related Documents
v1.2, October