NETGEAR, Inc
Reference Manual for the ADSL Modem Wireless Router DG834G
Statement of Conditions
Trademarks
Federal Communications Commission FCC Radiation Exposure Statement
v1.2, October
v1.2, October
European Union Statement of Compliance
v1.2, October
Bestätigung des Herstellers/Importeurs
Certificate of the Manufacturer/Importer
Product and Publication Details
Voluntary Control Council for Interference VCCI Statement
Customer Support
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
Contents
Configuring Your Internet Connection
Chapter About This Manual
Chapter
Wireless Configuration
Chapter
Protecting Your Network
Chapter
Advanced Configuration
Managing Your Network
Chapter
Chapter
Troubleshooting
Virtual Private Networking
Chapter
NETGEAR VPN Configuration
Technical Specifications
Appendix A
Appendix B
v1.2, October
Chapter About This Manual
Audience, Scope, Conventions, and Formats
http//kbserver.netgear.com/products/DG834G v3.asp
How to Print this Manual
Printing a Page in the HTML View
Printing a Chapter
Printing the Full Manual
Reference Manual for the ADSL Modem Wireless Router DG834G
About This Manual
v1.2, October
About the Modem Router
Chapter Introduction
A Powerful, True Firewall
Key Features
Easy Installation and Management
802.11 Standards-based Wireless Networking
Protocol Support
Auto Sensing and Auto Uplink LAN Ethernet Connections
Virtual Private Networking VPN
Wi-Fi Multimedia WMM Quality of Service QoS
Content Filtering
What’s in the Box?
DG834G ADSL Modem Wireless Router Resource CD, including this guide
Reference Manual for the ADSL Modem Wireless Router DG834G
The Router’s Front Panel
LED Descriptions
Introduction
The Router’s Rear Panel
Connecting the Router to the Internet
Chapter Configuring Your Internet Connection
Manual Setup
What You Need Before You Begin
Understanding ADSL Microfilters
Internet Configuration Requirements
Computers Set to DHCP
ADSL Microfilter
ADSL Microfilter with Built-In Splitter
Manually Setting Up Your Modem Router
Page
Page
Configuring Your Internet Connection
Reference Manual for the ADSL Modem Wireless Router DG834G
v1.2, October
Line
The power light is lit after turning on the firewall
computer or “Preparing a Computer for Network Access” in Appendix C
Page
Wizard-Detected PPPoE Login Account Setup
Wizard-Detected PPPoA Login Account Setup
Auto-Detecting Your Internet Connection Type
Wizard-Detected IP Over ATM Account Setup
Wizard-Detected Dynamic IP Account Setup
Wizard-Detected Fixed IP Static Account Setup
Testing Your Internet Connection
ISP Does Not Require Login
Manually Configuring Your Internet Connection
ISP Does Require Login
Reference Manual for the ADSL Modem Wireless Router DG834G
Internet Connection Requires Login and Uses PPPoE
How to Perform Manual Configuration
Internet Connection Requires Login and Uses PPPoA
Internet Connection Does Not Require A Login
Page
ADSL Settings
Configuring Your Internet Connection
Reference Manual for the ADSL Modem Wireless Router DG834G
3-20
v1.2, October
Considerations for a Wireless Network
Chapter Wireless Configuration
Observe Performance, Placement, and Range Guidelines
specifications, please see Appendix A, “Technical Specifications”
Implement Appropriate Wireless Security
LUHOHVVDWD 6HFXULW\2SWLRQV
5DQJH8SWRHHW
WPA-802.1x, WPA2-802.1x. Wi-Fi Protected Access WPA with user authentication implemented using IEE 802.1x and RADIUS servers
Reference Manual for the ADSL Modem Wireless Router DG834G
Understanding Wireless Settings
Wireless Configuration
v1.2, October
Wireless Access Point
Wireless Network
Security Options
Wireless Station Access List
Reference Manual for the ADSL Modem Wireless Router DG834G
Wireless Security Options
How to Set Up and Test Basic Wireless Connectivity
How to Restrict Wireless Access to Your Network
Restricting Wireless Access Based on the Wireless Station Access List
Restricting Wireless Access Based on the Wireless Network Name SSID
2. From the Wireless Settings menu, Wireless Station Access List section, click the Setup Access List button to display the list, shown below
Choosing WEP Authentication and Security Encryption Methods
Encryption Choices
Authentication Type Selection
How to Configure WEP
5. Select the Authentication Type
6. Select the Encryption Strength setting
How to Configure WPA-PSK/WPA2-PSK Security
How to Configure WPA-802.1x/WPA2-802.1x Security
Wireless Configuration
Reference Manual for the ADSL Modem Wireless Router DG834G
4-16
v1.2, October
Chapter Protecting Your Network
How to Change the Built-In Password
Changing the Administrator Login Timeout
Configuring Basic Firewall Services
Blocking Keywords, Sites, and Services
How to Block Keywords and Sites
2. Select the Block Sites link of the Security menu
Firewall Rules
Inbound Rules Port Forwarding
Inbound Rule Example A Local Public Web Server
Inbound Rule Example Allowing Videoconferencing
Considerations for Inbound Rules
Outbound Rules Service Blocking
Outbound Rule Example Blocking Instant Messenger
Order of Precedence for Rules
How to Define Services
Services
How to Set Your Time Zone
Setting Times and Scheduling Firewall Services
5. Click Apply to save your settings
How to Schedule Firewall Services
5-16
Reference Manual for the ADSL Modem Wireless Router DG834G
Protecting Your Network
v1.2, October
Backing Up, Restoring, or Erasing Your Settings
How to Back Up the Configuration to a File
Chapter Managing Your Network
How to Erase the Configuration
How to Restore the Configuration from a File
Upgrading the Modem Router’s Firmware
the modem router. See “The Router’s Rear Panel” on page
How to Upgrade the Modem Router Firmware
Viewing Modem Router Status and Usage Statistics
Network Management Information
This screen shows the following parameters
Reference Manual for the ADSL Modem Wireless Router DG834G
Table 6-1. Menu 3.2 - Modem Router Status Fields
Managing Your Network
Table 6-1. Menu 3.2 - Modem Router Status Fields continued
Reference Manual for the ADSL Modem Wireless Router DG834G
Managing Your Network
v1.2, October
This screen shows the following statistics
Reference Manual for the ADSL Modem Wireless Router DG834G
Table 6-2. Router Statistics Fields
Managing Your Network
This screen shows the following statistics
Reference Manual for the ADSL Modem Wireless Router DG834G
Table 6-3. Connection Status Fields for PPPoA
Managing Your Network
Viewing, Selecting, and Saving Logged Information
Viewing Attached Devices
An example of the logs file is shown below
Reference Manual for the ADSL Modem Wireless Router DG834G
6-10
Managing Your Network
Log entries are described in Table 6-4 below
Examples of Log Messages
Activation and Administration
Selecting What Information to Log
Saving Log Files on a Server
Dropped Packets
Enabling Security Event E-mail Notification
Send alerts and logs via email
Running Diagnostic Utilities and Rebooting the Modem Router
Configuring Remote Management
Enabling Remote Management
3. Select the Turn Remote Management On check box
To allow access from any IP address on the Internet, select Everyone
6-18
Reference Manual for the ADSL Modem Wireless Router DG834G
Managing Your Network
v1.2, October
Configuring Advanced Security
Chapter Advanced Configuration
How to Configure a Default DMZ Server
Setting Up A Default DMZ Server
Connect Automatically, as Required
Enable PPPoE-Relay
Configuring LAN IP Settings
Disable Port Scan and DOS Protection
Respond to Ping on Internet WAN Port
The LAN TCP/IP Setup parameters are IP Address
Use Router as DHCP server
DHCP
Reserved IP addresses
2. Click Edit or Delete
How to Configure LAN TCP/IP Settings
Configuring Dynamic DNS
How to Configure Dynamic DNS
Advanced Configuration
4. Select the Use a dynamic DNS service check box
Static Route Example
Using Static Routes
How to Configure Static Routes
Universal Plug and Play UPnP
3. To save, cancel or refresh the table
Chapter Virtual Private Networking
VPN Tunnel
DG834G
PC Running NETGEAR ProSafe VPN Client
Virtual Private Networking
VPN Tunnel
v1.2, October
DG834G VPN Firewall
Table 8-1. VPN Tunnel Configuration Worksheet
Planning a VPN
What method will you use to configure your VPN tunnels?
VPN Tunnel Configuration
See “How to Set Up a Client-to-Gateway VPN Configuration” on page
See “How to Set Up a Gateway-to-Gateway VPN Configuration” on page
VPN Tunnel
DG834G
DG834G
22.23.24.25
3600 1 hour
28800 8 hours
Reference Manual for the ADSL Modem Wireless Router DG834G
Table 8-3. VPN Tunnel Configuration Worksheet
A remote VPN client single PC
The Summary screen below displays
Reference Manual for the ADSL Modem Wireless Router DG834G
8-10
Virtual Private Networking
1 hour
Step 2 Configuring the NETGEAR ProSafe VPN Client on the Remote PC
c. Select Secure in the Connection Security check-box group
h. Select the Connect using Secure Gateway Tunnel check box
b. Choose None in the Select Certificate menu
5. Configure the VPN Client Authentication Proposal
c. In the Authentication Method menu, select Pre-Shared key
f. In the Hash Alg menu, select SHA-1
Information on the progress and status of the VPN client connection can be viewed by opening the NETGEAR ProSafe Log Viewer
9. The Connection Monitor screen for this connection is shown below
VPN Tunnel
Wireless Router DG834G
Virtual Private Networking
v1.2, October
28800 8 hours
3600 1 hour
192.168.0.x
Reference Manual for the ADSL Modem Wireless Router DG834G
A remote VPN Gateway
Virtual Private Networking
8-23
Enter the WAN IP address of the remote VPN gateway e.g
The Summary screen below displays
Reference Manual for the ADSL Modem Wireless Router DG834G
Virtual Private Networking
8-25
1 hour
WAN IP of the remote VPN gateway e.g
a. Open the DG834G v3 management interface and click on VPN Status to get the VPN Status/Log screen Figure
Using the VPN Status Page to Activate a VPN Tunnel
VPN Tunnel Control
Activating a VPN Tunnel
Activate the VPN Tunnel by Pinging the Remote Endpoint
a. Open command prompt i.e., Start - Run - cmd
Note Use Ctrl-C to stop the pinging
Figure 8-31 Running a Ping test to the LAN from the PC
Start Using a VPN Tunnel to Activate It
Verifying the Status of a VPN Tunnel
This table lists the following data for each active VPN Tunnel
Deactivating a VPN Tunnel
Using the VPN Status Page to Deactivate a VPN Tunnel
8-36
Reference Manual for the ADSL Modem Wireless Router DG834G
Virtual Private Networking
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
Deleting a VPN Tunnel
Virtual Private Networking
8-37
How to Set Up VPN Tunnels in Special Circumstances
Using Auto Policy to Configure VPN Tunnels
Configuring VPN Network Connection Parameters
Virtual Private Networking
Reference Manual for the ADSL Modem Wireless Router DG834G
8-39
v1.2, October
Any-the remote VPN endpoint may be at any IP address
Fully Qualified Domain Name-your domain name
IP Address-the Internet IP address of the remote VPN endpoint
Virtual Private Networking
VPN Tunnel
8-43
v1.2, October
3. Click Add Auto Policy
Reference Manual for the ADSL Modem Wireless Router DG834G
Authentication Algorithm = MD5 Pre-shared Key =
Virtual Private Networking
8-45
5. Click Apply. The Get VPN Policies web page is displayed
a. Open the DG834G v3 management interface and click on VPN Status to display the VPN Status/Log screen Figure
Using Manual Policy to Configure VPN Tunnels
Any-the remote VPN endpoint may be at any IP address
MD5-128 bits, faster but less secure
Go to “Troubleshooting the Web Configuration Interface” on page
Chapter Troubleshooting
Go to “Troubleshooting the ISP Connection” on page
Go to “Restoring the Default Configuration and Password” on page
Power LED Not On
Test LED Never Turns On or Test LED Stays On
LAN or Internet Port LEDs Not On
Troubleshooting the Web Configuration Interface
Troubleshooting the ISP Connection
ADSL link
Internet LED Blinking Amber
Internet LED Off
Obtaining a WAN IP Address
Troubleshooting PPPoE or PPPoA
Troubleshooting a TCP/IP Network Using the Ping Utility
Troubleshooting Internet Browsing
Testing the LAN Path to Your Router
Testing the Path from Your Computer to a Remote Device
Restoring the Default Configuration and Password
Problems with Date and Time
Using the Reset button
Date shown is January 1
Appendix A Technical Specifications
Technical Specifications
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
Technical Specifications
v1.2, October
Appendix B NETGEAR VPN Configuration
Configuration Profile
DG834G v3 to FVL328
Step-By
see “How to Set Up a Gateway-to
Reference Manual for the ADSL Modem Wireless Router DG834G
Click VPN Policies under Advanced - VPN to invoke this screen
NETGEAR VPN Configuration
Figure B-2
a. In Step 1, enter toDG834 for the Connection Name
Click VPN Policies under VPN to invoke this screen
Click IKE Policies under VPN to invoke this screen
Reference Manual for the ADSL Modem Wireless Router DG834G
NETGEAR VPN Configuration
DG834G v3 with FQDN to FVL328
Configuration Profile
Figure B-4
NETGEAR VPN Configuration
Reference Manual for the ADSL Modem Wireless Router DG834G
VPNC Example Network Interface Addressing
v1.2, October
The Use of a Fully Qualified Domain Name FQDN
Step-By-Step Configuration
Check the box Use a Dynamic DNS Service
Host and Domain Name = fvl328.dyndns.org
NETGEAR VPN Configuration
Reference Manual for the ADSL Modem Wireless Router DG834G
Figure B-9
Figure B-10
The LAN Addresses used in this example are as follows
NETGEAR VPN Configuration
Reference Manual for the ADSL Modem Wireless Router DG834G
Figure B-11
B-13
Step 1 Configuring the Client-to- Main Office
Configuration Summary Telecommuter Example
Page
Dynamic IP address IKE Keep Alive is optional
Main Mode Fully Qualified Domain Name
must match Remote LAN IP
Subnet address
NETGEAR VPN Configuration
Reference Manual for the ADSL Modem Wireless Router DG834G
Figure B-14
B-17
Page
Figure B-15
Figure B-16
h. Select the Connect using Secure Gateway Tunnel check box
Figure B-17
4. Configure the VPN Client Identity
b. Choose None in the Select Certificate menu
Figure B-19
5. Configure the VPN Client Authentication Proposal
6. Configure the VPN Client Key Exchange Proposal
c. In the Authentication Method menu, select Pre-Shared key
g. In the Key Group menu, select Diffie-Hellman Group
Figure B-20
d. Check the Encapsulation Protocol ESP checkbox
8. Check the VPN Connection
Figure B-21
Figure B-22
c. Type ping -t 192.168.0.1, and then click OK
Viewing the PC Client’s Connection Monitor and Log Viewer
Monitoring the VPN Tunnel Telecommuter Example
Figure B-26
Viewing the VPN Router’s VPN Status and Log Information
NETGEAR VPN Configuration
Reference Manual for the ADSL Modem Wireless Router DG834G
Figure B-27
B-30
NETGEAR VPN Configuration
Reference Manual for the ADSL Modem Wireless Router DG834G
B-31
v1.2, October
NETGEAR VPN Configuration
Reference Manual for the ADSL Modem Wireless Router DG834G
B-32
v1.2, October
Appendix C Related Documents
Related Documents
v1.2, October
Reference Manual for the ADSL Modem Wireless Router DG834G
Related Documents
v1.2, October