Manuals / NETGEAR / Computer Equipment / Network Router

NETGEAR DG834G manual Click VPN Policies under Advanced - VPN to invoke this screen, Figure B-2

Models: DG834G

1 204

Download 204 pages 51.21 Kb

Page 173

toFVL328

Reference Manual for the ADSL Modem Wireless Router DG834G

toFVL328

10.5.6.1

Click VPN Policies under Advanced - VPN to invoke this screen

172.23.9.1

toFVL328

22.23.24.25

10

5

6

172

23

9

Figure B-2

NETGEAR VPN Configuration

B-3

v1.2, October 2006

Image 173

NETGEAR DG834G manual Click VPN Policies under Advanced - VPN to invoke this screen, Figure B-2, NETGEAR VPN Configuration

Contents

NETGEAR, Inc Reference Manual for the ADSL Modem Wireless Router DG834GStatement of Conditions TrademarksFederal Communications Commission FCC Radiation Exposure Statement v1.2, Octoberv1.2, October European Union Statement of Compliancev1.2, October Bestätigung des Herstellers/ImporteursCertificate of the Manufacturer/Importer Product and Publication DetailsVoluntary Control Council for Interference VCCI Statement Customer Supportv1.2, October Reference Manual for the ADSL Modem Wireless Router DG834G ContentsConfiguring Your Internet Connection Chapter About This ManualChapter Wireless ConfigurationChapter Protecting Your NetworkChapter Advanced ConfigurationManaging Your Network ChapterChapter TroubleshootingVirtual Private Networking ChapterNETGEAR VPN Configuration Technical SpecificationsAppendix A Appendix Bv1.2, October http//kbserver.netgear.com/products/DG834G v3.asp Chapter About This ManualAudience, Scope, Conventions, and Formats Printing a Chapter How to Print this ManualPrinting a Page in the HTML View Printing the Full Manual v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GAbout This Manual About the Modem Router Chapter IntroductionA Powerful, True Firewall Key FeaturesEasy Installation and Management 802.11 Standards-based Wireless NetworkingProtocol Support Auto Sensing and Auto Uplink LAN Ethernet Connections Virtual Private Networking VPNWi-Fi Multimedia WMM Quality of Service QoS Content FilteringWhat’s in the Box? DG834G ADSL Modem Wireless Router Resource CD, including this guideReference Manual for the ADSL Modem Wireless Router DG834G The Router’s Front PanelLED Descriptions IntroductionThe Router’s Rear Panel Connecting the Router to the Internet Chapter Configuring Your Internet ConnectionManual Setup What You Need Before You BeginUnderstanding ADSL Microfilters Internet Configuration RequirementsADSL Microfilter with Built-In Splitter Computers Set to DHCPADSL Microfilter Manually Setting Up Your Modem Router Page Page Configuring Your Internet Connection Reference Manual for the ADSL Modem Wireless Router DG834Gv1.2, October LineThe power light is lit after turning on the firewall computer or “Preparing a Computer for Network Access” in Appendix CPage Auto-Detecting Your Internet Connection Type Wizard-Detected PPPoE Login Account SetupWizard-Detected PPPoA Login Account Setup Wizard-Detected IP Over ATM Account Setup Wizard-Detected Dynamic IP Account SetupWizard-Detected Fixed IP Static Account Setup Testing Your Internet Connection ISP Does Not Require Login Manually Configuring Your Internet ConnectionISP Does Require Login Reference Manual for the ADSL Modem Wireless Router DG834GInternet Connection Requires Login and Uses PPPoE How to Perform Manual ConfigurationInternet Connection Requires Login and Uses PPPoA Internet Connection Does Not Require A Login Page ADSL Settings Configuring Your Internet Connection Reference Manual for the ADSL Modem Wireless Router DG834G3-20 v1.2, OctoberConsiderations for a Wireless Network Chapter Wireless ConfigurationObserve Performance, Placement, and Range Guidelines specifications, please see Appendix A, “Technical Specifications”5DQJH8SWRHHW Implement Appropriate Wireless SecurityLUHOHVVDWD 6HFXULW\2SWLRQV WPA-802.1x, WPA2-802.1x. Wi-Fi Protected Access WPA with user authentication implemented using IEE 802.1x and RADIUS servers Reference Manual for the ADSL Modem Wireless Router DG834G Understanding Wireless SettingsWireless Configuration v1.2, OctoberWireless Access Point Wireless NetworkSecurity Options Wireless Station Access ListReference Manual for the ADSL Modem Wireless Router DG834G Wireless Security OptionsHow to Set Up and Test Basic Wireless Connectivity How to Restrict Wireless Access to Your Network Restricting Wireless Access Based on the Wireless Station Access List Restricting Wireless Access Based on the Wireless Network Name SSID2. From the Wireless Settings menu, Wireless Station Access List section, click the Setup Access List button to display the list, shown below Choosing WEP Authentication and Security Encryption Methods Encryption Choices Authentication Type Selection6. Select the Encryption Strength setting How to Configure WEP5. Select the Authentication Type How to Configure WPA-PSK/WPA2-PSK Security How to Configure WPA-802.1x/WPA2-802.1x Security Wireless Configuration Reference Manual for the ADSL Modem Wireless Router DG834G4-16 v1.2, OctoberChapter Protecting Your Network How to Change the Built-In PasswordChanging the Administrator Login Timeout How to Block Keywords and Sites Configuring Basic Firewall ServicesBlocking Keywords, Sites, and Services 2. Select the Block Sites link of the Security menu Firewall Rules Inbound Rules Port Forwarding Inbound Rule Example A Local Public Web Server Inbound Rule Example Allowing Videoconferencing Considerations for Inbound Rules Outbound Rules Service BlockingOutbound Rule Example Blocking Instant Messenger Order of Precedence for Rules How to Define Services ServicesHow to Set Your Time Zone Setting Times and Scheduling Firewall Services5. Click Apply to save your settings How to Schedule Firewall Services 5-16 Reference Manual for the ADSL Modem Wireless Router DG834GProtecting Your Network v1.2, OctoberChapter Managing Your Network Backing Up, Restoring, or Erasing Your SettingsHow to Back Up the Configuration to a File How to Erase the Configuration How to Restore the Configuration from a FileUpgrading the Modem Router’s Firmware the modem router. See “The Router’s Rear Panel” on pageHow to Upgrade the Modem Router Firmware Viewing Modem Router Status and Usage Statistics Network Management InformationThis screen shows the following parameters Reference Manual for the ADSL Modem Wireless Router DG834GTable 6-1. Menu 3.2 - Modem Router Status Fields Managing Your NetworkTable 6-1. Menu 3.2 - Modem Router Status Fields continued Reference Manual for the ADSL Modem Wireless Router DG834GManaging Your Network v1.2, OctoberThis screen shows the following statistics Reference Manual for the ADSL Modem Wireless Router DG834GTable 6-2. Router Statistics Fields Managing Your NetworkThis screen shows the following statistics Reference Manual for the ADSL Modem Wireless Router DG834GTable 6-3. Connection Status Fields for PPPoA Managing Your NetworkViewing, Selecting, and Saving Logged Information Viewing Attached DevicesAn example of the logs file is shown below Reference Manual for the ADSL Modem Wireless Router DG834G6-10 Managing Your NetworkLog entries are described in Table 6-4 below Examples of Log Messages Activation and AdministrationSelecting What Information to Log Saving Log Files on a ServerDropped Packets Enabling Security Event E-mail NotificationSend alerts and logs via email Running Diagnostic Utilities and Rebooting the Modem Router 3. Select the Turn Remote Management On check box Configuring Remote ManagementEnabling Remote Management To allow access from any IP address on the Internet, select Everyone 6-18 Reference Manual for the ADSL Modem Wireless Router DG834GManaging Your Network v1.2, OctoberConfiguring Advanced Security Chapter Advanced ConfigurationHow to Configure a Default DMZ Server Setting Up A Default DMZ ServerConnect Automatically, as Required Enable PPPoE-Relay Configuring LAN IP SettingsDisable Port Scan and DOS Protection Respond to Ping on Internet WAN PortThe LAN TCP/IP Setup parameters are IP Address Use Router as DHCP server DHCPReserved IP addresses 2. Click Edit or Delete How to Configure LAN TCP/IP SettingsAdvanced Configuration Configuring Dynamic DNSHow to Configure Dynamic DNS 4. Select the Use a dynamic DNS service check box Static Route Example Using Static RoutesHow to Configure Static Routes Universal Plug and Play UPnP 3. To save, cancel or refresh the table Chapter Virtual Private Networking PC Running NETGEAR ProSafe VPN Client VPN TunnelDG834G Virtual Private Networking VPN Tunnelv1.2, October DG834G VPN FirewallTable 8-1. VPN Tunnel Configuration Worksheet Planning a VPNWhat method will you use to configure your VPN tunnels? See “How to Set Up a Gateway-to-Gateway VPN Configuration” on page VPN Tunnel ConfigurationSee “How to Set Up a Client-to-Gateway VPN Configuration” on page VPN Tunnel DG834GDG834G 22.23.24.253600 1 hour 28800 8 hoursReference Manual for the ADSL Modem Wireless Router DG834G Table 8-3. VPN Tunnel Configuration WorksheetA remote VPN client single PC The Summary screen below displays Reference Manual for the ADSL Modem Wireless Router DG834G8-10 Virtual Private Networking1 hour Step 2 Configuring the NETGEAR ProSafe VPN Client on the Remote PC c. Select Secure in the Connection Security check-box group h. Select the Connect using Secure Gateway Tunnel check box b. Choose None in the Select Certificate menu 5. Configure the VPN Client Authentication Proposal c. In the Authentication Method menu, select Pre-Shared key f. In the Hash Alg menu, select SHA-1 Information on the progress and status of the VPN client connection can be viewed by opening the NETGEAR ProSafe Log Viewer 9. The Connection Monitor screen for this connection is shown below VPN Tunnel Wireless Router DG834GVirtual Private Networking v1.2, October192.168.0.x 28800 8 hours3600 1 hour Reference Manual for the ADSL Modem Wireless Router DG834G A remote VPN GatewayVirtual Private Networking 8-23Enter the WAN IP address of the remote VPN gateway e.g The Summary screen below displays Reference Manual for the ADSL Modem Wireless Router DG834GVirtual Private Networking 8-251 hour WAN IP of the remote VPN gateway e.g a. Open the DG834G v3 management interface and click on VPN Status to get the VPN Status/Log screen Figure Activating a VPN Tunnel Using the VPN Status Page to Activate a VPN TunnelVPN Tunnel Control Activate the VPN Tunnel by Pinging the Remote Endpoint Figure 8-31 Running a Ping test to the LAN from the PC a. Open command prompt i.e., Start - Run - cmdNote Use Ctrl-C to stop the pinging Start Using a VPN Tunnel to Activate It Verifying the Status of a VPN Tunnel This table lists the following data for each active VPN Tunnel Deactivating a VPN Tunnel Using the VPN Status Page to Deactivate a VPN Tunnel8-36 Reference Manual for the ADSL Modem Wireless Router DG834GVirtual Private Networking v1.2, OctoberReference Manual for the ADSL Modem Wireless Router DG834G Deleting a VPN TunnelVirtual Private Networking 8-37Configuring VPN Network Connection Parameters How to Set Up VPN Tunnels in Special CircumstancesUsing Auto Policy to Configure VPN Tunnels Virtual Private Networking Reference Manual for the ADSL Modem Wireless Router DG834G8-39 v1.2, OctoberAny-the remote VPN endpoint may be at any IP address Fully Qualified Domain Name-your domain name IP Address-the Internet IP address of the remote VPN endpoint Virtual Private Networking VPN Tunnel8-43 v1.2, October3. Click Add Auto Policy Reference Manual for the ADSL Modem Wireless Router DG834G Authentication Algorithm = MD5 Pre-shared Key =Virtual Private Networking 8-455. Click Apply. The Get VPN Policies web page is displayed a. Open the DG834G v3 management interface and click on VPN Status to display the VPN Status/Log screen Figure Using Manual Policy to Configure VPN Tunnels Any-the remote VPN endpoint may be at any IP address MD5-128 bits, faster but less secure Go to “Troubleshooting the Web Configuration Interface” on page Chapter TroubleshootingGo to “Troubleshooting the ISP Connection” on page Go to “Restoring the Default Configuration and Password” on pageLAN or Internet Port LEDs Not On Power LED Not OnTest LED Never Turns On or Test LED Stays On Troubleshooting the Web Configuration Interface Internet LED Blinking Amber Troubleshooting the ISP ConnectionADSL link Internet LED Off Obtaining a WAN IP AddressTroubleshooting PPPoE or PPPoA Testing the LAN Path to Your Router Troubleshooting a TCP/IP Network Using the Ping UtilityTroubleshooting Internet Browsing Testing the Path from Your Computer to a Remote Device Using the Reset button Restoring the Default Configuration and PasswordProblems with Date and Time Date shown is January 1 v1.2, October Appendix A Technical SpecificationsTechnical Specifications v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GTechnical Specifications DG834G v3 to FVL328 Appendix B NETGEAR VPN ConfigurationConfiguration Profile Step-By see “How to Set Up a Gateway-toReference Manual for the ADSL Modem Wireless Router DG834G Click VPN Policies under Advanced - VPN to invoke this screenNETGEAR VPN Configuration Figure B-2a. In Step 1, enter toDG834 for the Connection Name Click VPN Policies under VPN to invoke this screen Click IKE Policies under VPN to invoke this screenReference Manual for the ADSL Modem Wireless Router DG834G NETGEAR VPN ConfigurationFigure B-4 DG834G v3 with FQDN to FVL328Configuration Profile NETGEAR VPN Configuration Reference Manual for the ADSL Modem Wireless Router DG834GVPNC Example Network Interface Addressing v1.2, OctoberThe Use of a Fully Qualified Domain Name FQDN Step-By-Step ConfigurationCheck the box Use a Dynamic DNS Service Host and Domain Name = fvl328.dyndns.org NETGEAR VPN Configuration Reference Manual for the ADSL Modem Wireless Router DG834GFigure B-9 Figure B-10The LAN Addresses used in this example are as follows NETGEAR VPN Configuration Reference Manual for the ADSL Modem Wireless Router DG834GFigure B-11 B-13Step 1 Configuring the Client-to- Main Office Configuration Summary Telecommuter ExamplePage must match Remote LAN IP Dynamic IP address IKE Keep Alive is optionalSubnet address 255.255.255.0 Single addressNETGEAR VPN Configuration Reference Manual for the ADSL Modem Wireless Router DG834GFigure B-14 B-17Page Figure B-15 Figure B-16 h. Select the Connect using Secure Gateway Tunnel check boxFigure B-17 4. Configure the VPN Client Identityb. Choose None in the Select Certificate menu Figure B-19 5. Configure the VPN Client Authentication Proposal6. Configure the VPN Client Key Exchange Proposal c. In the Authentication Method menu, select Pre-Shared keyg. In the Key Group menu, select Diffie-Hellman Group Figure B-20Figure B-21 d. Check the Encapsulation Protocol ESP checkbox8. Check the VPN Connection Figure B-22 c. Type ping -t 192.168.0.1, and then click OK Viewing the PC Client’s Connection Monitor and Log Viewer Monitoring the VPN Tunnel Telecommuter ExampleFigure B-26 Viewing the VPN Router’s VPN Status and Log InformationNETGEAR VPN Configuration Reference Manual for the ADSL Modem Wireless Router DG834GFigure B-27 B-30NETGEAR VPN Configuration Reference Manual for the ADSL Modem Wireless Router DG834GB-31 v1.2, OctoberNETGEAR VPN Configuration Reference Manual for the ADSL Modem Wireless Router DG834GB-32 v1.2, Octoberv1.2, October Appendix C Related DocumentsRelated Documents v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GRelated Documents