Manuals / NETGEAR / Computer Equipment / Network Router

NETGEAR manual Reference Manual for the ADSL Modem Wireless Router DG834G, B-32, v1.2, October

Models: DG834G

1 204

Download 204 pages 51.21 Kb

Page 202

Reference Manual for the ADSL Modem Wireless Router DG834G

B-32	NETGEAR VPN Configuration

v1.2, October 2006

Image 202

NETGEAR Reference Manual for the ADSL Modem Wireless Router DG834G, B-32, NETGEAR VPN Configuration, v1.2, October

Contents

Reference Manual for the ADSL Modem Wireless Router DG834G NETGEAR, IncFederal Communications Commission FCC Radiation Exposure Statement TrademarksStatement of Conditions v1.2, OctoberEuropean Union Statement of Compliance v1.2, OctoberBestätigung des Herstellers/Importeurs v1.2, OctoberVoluntary Control Council for Interference VCCI Statement Product and Publication DetailsCertificate of the Manufacturer/Importer Customer Supportv1.2, October Configuring Your Internet Connection ContentsReference Manual for the ADSL Modem Wireless Router DG834G Chapter About This ManualChapter Wireless ConfigurationChapter Protecting Your NetworkManaging Your Network Advanced ConfigurationChapter ChapterVirtual Private Networking TroubleshootingChapter ChapterAppendix A Technical SpecificationsNETGEAR VPN Configuration Appendix Bv1.2, October Audience, Scope, Conventions, and Formats Chapter About This Manualhttp//kbserver.netgear.com/products/DG834G v3.asp Printing a Page in the HTML View How to Print this ManualPrinting a Chapter Printing the Full Manual About This Manual Reference Manual for the ADSL Modem Wireless Router DG834Gv1.2, October Chapter Introduction About the Modem RouterKey Features A Powerful, True Firewall802.11 Standards-based Wireless Networking Easy Installation and ManagementProtocol Support Virtual Private Networking VPN Auto Sensing and Auto Uplink LAN Ethernet ConnectionsWhat’s in the Box? Content FilteringWi-Fi Multimedia WMM Quality of Service QoS DG834G ADSL Modem Wireless Router Resource CD, including this guideLED Descriptions The Router’s Front PanelReference Manual for the ADSL Modem Wireless Router DG834G IntroductionThe Router’s Rear Panel Manual Setup Chapter Configuring Your Internet ConnectionConnecting the Router to the Internet What You Need Before You BeginInternet Configuration Requirements Understanding ADSL MicrofiltersADSL Microfilter Computers Set to DHCPADSL Microfilter with Built-In Splitter Manually Setting Up Your Modem Router Page Page v1.2, October Reference Manual for the ADSL Modem Wireless Router DG834GConfiguring Your Internet Connection Linecomputer or “Preparing a Computer for Network Access” in Appendix C The power light is lit after turning on the firewallPage Wizard-Detected PPPoA Login Account Setup Wizard-Detected PPPoE Login Account SetupAuto-Detecting Your Internet Connection Type Wizard-Detected Dynamic IP Account Setup Wizard-Detected IP Over ATM Account SetupWizard-Detected Fixed IP Static Account Setup Testing Your Internet Connection ISP Does Require Login Manually Configuring Your Internet ConnectionISP Does Not Require Login Reference Manual for the ADSL Modem Wireless Router DG834GHow to Perform Manual Configuration Internet Connection Requires Login and Uses PPPoEInternet Connection Requires Login and Uses PPPoA Internet Connection Does Not Require A Login Page ADSL Settings 3-20 Reference Manual for the ADSL Modem Wireless Router DG834GConfiguring Your Internet Connection v1.2, OctoberObserve Performance, Placement, and Range Guidelines Chapter Wireless ConfigurationConsiderations for a Wireless Network specifications, please see Appendix A, “Technical Specifications”LUHOHVVDWD 6HFXULW\2SWLRQV Implement Appropriate Wireless Security5DQJH8SWRHHW WPA-802.1x, WPA2-802.1x. Wi-Fi Protected Access WPA with user authentication implemented using IEE 802.1x and RADIUS servers Wireless Configuration Understanding Wireless SettingsReference Manual for the ADSL Modem Wireless Router DG834G v1.2, OctoberWireless Network Wireless Access PointReference Manual for the ADSL Modem Wireless Router DG834G Wireless Station Access ListSecurity Options Wireless Security OptionsHow to Set Up and Test Basic Wireless Connectivity How to Restrict Wireless Access to Your Network Restricting Wireless Access Based on the Wireless Network Name SSID Restricting Wireless Access Based on the Wireless Station Access List2. From the Wireless Settings menu, Wireless Station Access List section, click the Setup Access List button to display the list, shown below Choosing WEP Authentication and Security Encryption Methods Authentication Type Selection Encryption Choices5. Select the Authentication Type How to Configure WEP6. Select the Encryption Strength setting How to Configure WPA-PSK/WPA2-PSK Security How to Configure WPA-802.1x/WPA2-802.1x Security 4-16 Reference Manual for the ADSL Modem Wireless Router DG834GWireless Configuration v1.2, OctoberHow to Change the Built-In Password Chapter Protecting Your NetworkChanging the Administrator Login Timeout Blocking Keywords, Sites, and Services Configuring Basic Firewall ServicesHow to Block Keywords and Sites 2. Select the Block Sites link of the Security menu Firewall Rules Inbound Rules Port Forwarding Inbound Rule Example A Local Public Web Server Inbound Rule Example Allowing Videoconferencing Outbound Rules Service Blocking Considerations for Inbound RulesOutbound Rule Example Blocking Instant Messenger Order of Precedence for Rules Services How to Define ServicesSetting Times and Scheduling Firewall Services How to Set Your Time Zone5. Click Apply to save your settings How to Schedule Firewall Services Protecting Your Network Reference Manual for the ADSL Modem Wireless Router DG834G5-16 v1.2, OctoberHow to Back Up the Configuration to a File Backing Up, Restoring, or Erasing Your SettingsChapter Managing Your Network Upgrading the Modem Router’s Firmware How to Restore the Configuration from a FileHow to Erase the Configuration the modem router. See “The Router’s Rear Panel” on pageHow to Upgrade the Modem Router Firmware Network Management Information Viewing Modem Router Status and Usage StatisticsTable 6-1. Menu 3.2 - Modem Router Status Fields Reference Manual for the ADSL Modem Wireless Router DG834GThis screen shows the following parameters Managing Your NetworkManaging Your Network Reference Manual for the ADSL Modem Wireless Router DG834GTable 6-1. Menu 3.2 - Modem Router Status Fields continued v1.2, OctoberTable 6-2. Router Statistics Fields Reference Manual for the ADSL Modem Wireless Router DG834GThis screen shows the following statistics Managing Your NetworkTable 6-3. Connection Status Fields for PPPoA Reference Manual for the ADSL Modem Wireless Router DG834GThis screen shows the following statistics Managing Your NetworkViewing Attached Devices Viewing, Selecting, and Saving Logged Information6-10 Reference Manual for the ADSL Modem Wireless Router DG834GAn example of the logs file is shown below Managing Your NetworkLog entries are described in Table 6-4 below Selecting What Information to Log Activation and AdministrationExamples of Log Messages Saving Log Files on a ServerEnabling Security Event E-mail Notification Dropped PacketsSend alerts and logs via email Running Diagnostic Utilities and Rebooting the Modem Router Enabling Remote Management Configuring Remote Management3. Select the Turn Remote Management On check box To allow access from any IP address on the Internet, select Everyone Managing Your Network Reference Manual for the ADSL Modem Wireless Router DG834G6-18 v1.2, OctoberChapter Advanced Configuration Configuring Advanced SecuritySetting Up A Default DMZ Server How to Configure a Default DMZ ServerConnect Automatically, as Required Disable Port Scan and DOS Protection Configuring LAN IP SettingsEnable PPPoE-Relay Respond to Ping on Internet WAN PortThe LAN TCP/IP Setup parameters are IP Address DHCP Use Router as DHCP serverReserved IP addresses How to Configure LAN TCP/IP Settings 2. Click Edit or DeleteHow to Configure Dynamic DNS Configuring Dynamic DNSAdvanced Configuration 4. Select the Use a dynamic DNS service check box Using Static Routes Static Route ExampleHow to Configure Static Routes Universal Plug and Play UPnP 3. To save, cancel or refresh the table Chapter Virtual Private Networking DG834G VPN TunnelPC Running NETGEAR ProSafe VPN Client v1.2, October VPN TunnelVirtual Private Networking DG834G VPN FirewallPlanning a VPN Table 8-1. VPN Tunnel Configuration WorksheetWhat method will you use to configure your VPN tunnels? See “How to Set Up a Client-to-Gateway VPN Configuration” on page VPN Tunnel ConfigurationSee “How to Set Up a Gateway-to-Gateway VPN Configuration” on page DG834G DG834GVPN Tunnel 22.23.24.25Reference Manual for the ADSL Modem Wireless Router DG834G 28800 8 hours3600 1 hour Table 8-3. VPN Tunnel Configuration WorksheetA remote VPN client single PC 8-10 Reference Manual for the ADSL Modem Wireless Router DG834GThe Summary screen below displays Virtual Private Networking1 hour Step 2 Configuring the NETGEAR ProSafe VPN Client on the Remote PC c. Select Secure in the Connection Security check-box group h. Select the Connect using Secure Gateway Tunnel check box b. Choose None in the Select Certificate menu 5. Configure the VPN Client Authentication Proposal c. In the Authentication Method menu, select Pre-Shared key f. In the Hash Alg menu, select SHA-1 Information on the progress and status of the VPN client connection can be viewed by opening the NETGEAR ProSafe Log Viewer 9. The Connection Monitor screen for this connection is shown below Virtual Private Networking Wireless Router DG834GVPN Tunnel v1.2, October3600 1 hour 28800 8 hours192.168.0.x Virtual Private Networking A remote VPN GatewayReference Manual for the ADSL Modem Wireless Router DG834G 8-23Enter the WAN IP address of the remote VPN gateway e.g Virtual Private Networking Reference Manual for the ADSL Modem Wireless Router DG834GThe Summary screen below displays 8-251 hour WAN IP of the remote VPN gateway e.g a. Open the DG834G v3 management interface and click on VPN Status to get the VPN Status/Log screen Figure VPN Tunnel Control Using the VPN Status Page to Activate a VPN TunnelActivating a VPN Tunnel Activate the VPN Tunnel by Pinging the Remote Endpoint Note Use Ctrl-C to stop the pinging a. Open command prompt i.e., Start - Run - cmdFigure 8-31 Running a Ping test to the LAN from the PC Start Using a VPN Tunnel to Activate It Verifying the Status of a VPN Tunnel This table lists the following data for each active VPN Tunnel Using the VPN Status Page to Deactivate a VPN Tunnel Deactivating a VPN TunnelVirtual Private Networking Reference Manual for the ADSL Modem Wireless Router DG834G8-36 v1.2, OctoberVirtual Private Networking Deleting a VPN TunnelReference Manual for the ADSL Modem Wireless Router DG834G 8-37Using Auto Policy to Configure VPN Tunnels How to Set Up VPN Tunnels in Special CircumstancesConfiguring VPN Network Connection Parameters 8-39 Reference Manual for the ADSL Modem Wireless Router DG834GVirtual Private Networking v1.2, OctoberAny-the remote VPN endpoint may be at any IP address Fully Qualified Domain Name-your domain name IP Address-the Internet IP address of the remote VPN endpoint 8-43 VPN TunnelVirtual Private Networking v1.2, October3. Click Add Auto Policy Virtual Private Networking Authentication Algorithm = MD5 Pre-shared Key =Reference Manual for the ADSL Modem Wireless Router DG834G 8-455. Click Apply. The Get VPN Policies web page is displayed a. Open the DG834G v3 management interface and click on VPN Status to display the VPN Status/Log screen Figure Using Manual Policy to Configure VPN Tunnels Any-the remote VPN endpoint may be at any IP address MD5-128 bits, faster but less secure Go to “Troubleshooting the ISP Connection” on page Chapter TroubleshootingGo to “Troubleshooting the Web Configuration Interface” on page Go to “Restoring the Default Configuration and Password” on pageTest LED Never Turns On or Test LED Stays On Power LED Not OnLAN or Internet Port LEDs Not On Troubleshooting the Web Configuration Interface ADSL link Troubleshooting the ISP ConnectionInternet LED Blinking Amber Obtaining a WAN IP Address Internet LED OffTroubleshooting PPPoE or PPPoA Troubleshooting Internet Browsing Troubleshooting a TCP/IP Network Using the Ping UtilityTesting the LAN Path to Your Router Testing the Path from Your Computer to a Remote Device Problems with Date and Time Restoring the Default Configuration and PasswordUsing the Reset button Date shown is January 1 Technical Specifications Appendix A Technical Specificationsv1.2, October Technical Specifications Reference Manual for the ADSL Modem Wireless Router DG834Gv1.2, October Configuration Profile Appendix B NETGEAR VPN ConfigurationDG834G v3 to FVL328 see “How to Set Up a Gateway-to Step-ByNETGEAR VPN Configuration Click VPN Policies under Advanced - VPN to invoke this screenReference Manual for the ADSL Modem Wireless Router DG834G Figure B-2a. In Step 1, enter toDG834 for the Connection Name Reference Manual for the ADSL Modem Wireless Router DG834G Click IKE Policies under VPN to invoke this screenClick VPN Policies under VPN to invoke this screen NETGEAR VPN ConfigurationConfiguration Profile DG834G v3 with FQDN to FVL328Figure B-4 VPNC Example Network Interface Addressing Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration v1.2, OctoberStep-By-Step Configuration The Use of a Fully Qualified Domain Name FQDNCheck the box Use a Dynamic DNS Service Host and Domain Name = fvl328.dyndns.org Figure B-9 Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration Figure B-10The LAN Addresses used in this example are as follows Figure B-11 Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration B-13Configuration Summary Telecommuter Example Step 1 Configuring the Client-to- Main OfficePage must match Remote LAN IP Main Mode Fully Qualified Domain NameDynamic IP address IKE Keep Alive is optional Subnet addressFigure B-14 Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration B-17Page Figure B-15 h. Select the Connect using Secure Gateway Tunnel check box Figure B-164. Configure the VPN Client Identity Figure B-17b. Choose None in the Select Certificate menu 5. Configure the VPN Client Authentication Proposal Figure B-19g. In the Key Group menu, select Diffie-Hellman Group c. In the Authentication Method menu, select Pre-Shared key6. Configure the VPN Client Key Exchange Proposal Figure B-208. Check the VPN Connection d. Check the Encapsulation Protocol ESP checkboxFigure B-21 Figure B-22 c. Type ping -t 192.168.0.1, and then click OK Monitoring the VPN Tunnel Telecommuter Example Viewing the PC Client’s Connection Monitor and Log ViewerViewing the VPN Router’s VPN Status and Log Information Figure B-26Figure B-27 Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration B-30B-31 Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration v1.2, OctoberB-32 Reference Manual for the ADSL Modem Wireless Router DG834GNETGEAR VPN Configuration v1.2, OctoberRelated Documents Appendix C Related Documentsv1.2, October Related Documents Reference Manual for the ADSL Modem Wireless Router DG834Gv1.2, October