Using a Fully Qualified Domain Name Fqdn | NETGEAR DGND3300-100NAS

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual

Verify that the firmware is up to date, and that you have all the addresses and parameters to be set on both sides. Check that there are no firewall restrictions.

10.506.0/24			172.23.9.0/24
10.506.0/24
	Gateway A
	(DGND3300v2)
			Gateway B
LAN IP	WAN IP	Internet	LAN IP
LAN IP	WAN IP	WAN IP	LAN IP
10.5.6.1	example.org	example2.org	172.23.9.1
	(FQDN)	(FQDN)

Figure 72. VPNC Example, Network Interface Addressing

Table 9. N300 Wireless Modem Router with FQDN to Gateway B Profile Summary

VPN Consortium Scenario		Scenario 1

Type of VPN		LAN-to-LAN or gateway-to-gateway (not PC/client-to-gateway)

Security scheme:		IKE with pre-shared secret/key (not certificate based)

IP addressing:

	NETGEAR-Gateway A	Fully qualified domain name (FQDN)

	NETGEAR-Gateway B	FQDN

Using a Fully Qualified Domain Name (FQDN)

Many ISPs provide connectivity to their customers using dynamic instead of static IP addressing. This means that a user’s IP address does not remain constant over time, which presents a challenge for gateways attempting to establish VPN connectivity.

A Dynamic DNS (DDNS) service allows a user whose public IP address is dynamically assigned to be located by a host or domain name. It provides a central public database where information (such as email addresses, host names, and IP addresses) can be stored and retrieved. Now, a gateway can be configured to use a third-party service instead of a permanent and unchanging IP address to establish bidirectional VPN connectivity.

To use DDNS, you must register with a DDNS service provider. Some DDNS service providers include:

•DynDNS: www.dyndns.org

•TZO.com: netgear.tzo.com

•ngDDNS: ngddns.iego.net

In this example, Gateway A is configured using a sample FQDN provided by a DDNS service provider. In this case we established the hostname dgnd3300v2.dyndns.org for Gateway A using the DynDNS service. Gateway B uses the DDNS service provider when establishing a VPN tunnel.

154 Appendix C. NETGEAR VPN Configuration

Image 154

NETGEAR DGND3300-100NAS user manual Using a Fully Qualified Domain Name Fqdn, VPN Consortium Scenario

Contents

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Trademarks Technical SupportStatement of Conditions Table of Contents Network Maintenance Advanced Settings Part Appendix C Netgear VPN Configuration Router Internet Setup Using the Setup Manual Logging In to Your N300 Wireless Modem Router To log in to the N300 wireless modem router Using the Setup Wizard To use the Setup Wizard Viewing or Manually Configuring Your ISP Settings To view or configure the basic settings Router Internet Setup ISP does not require login Settings Description Router Internet Setup Configuring Adsl Settings Manual Wireless Settings Planning Your Wireless Network Wireless Placement and Range Guidelines See Manually Configuring Your Wireless Settings on Wireless Security Options Manually Configuring Your Wireless Settings To view or manually configure the wireless settings Name 11N Ssid WPA-802.1x Configuring WEP Wireless SecurityNetwork Key 8-63 characters To configure WEP data encryption Configuring WPA, WPA2, or Mixed WPA2 + WPA Wireless Security To configure WPA or WPA2 in the N300 wireless modem router Using Push N Connect WPS to Configure Your Wireless Network Using a WPS Button to Add a WPS Client Using PIN Entry to Add a WPS Client To use a PIN to add a WPS client Configuring Advanced WPS Settings Adding More WPS Clients To add a wireless client device that is WPS enabledAdding Both WPS and Non-WPS Clients Restricting Access to Your N300 Wireless Modem Router Wireless Guest Networks To configure a wireless guest network Web-Based Interface Live Parental ControlsTotal Home Protection Flexible Settings Minimal Software Installation Security Settings Protecting Access to Your N300 Wireless Modem Router Changing the Built-In Password Restricting Access by MAC AddressTo restrict access based on MAC addresses Select the Turn Access Control On check box Blocking Access to Internet Sites To block access to Internet sites Firewall Rules To add or edit a rule from the Firewall Rules screen Field Outbound Rules Inbound Rules Scheduling Blocking on Port Forwarding Adding a Pre-set Port Forwarding Rule Adding a Custom Port Forwarding Rule To configure port triggering Port Triggering Blocking Access to Internet Services Scheduling Blocking To block access to Internet servicesTo schedule blocking Viewing Logs of Web Access or Attempted Web Access Configuring Email Alert and Web Access Log Notifications Field Description Security Settings Setting the Time Network Maintenance Upgrading the Firmware Manually Check for Firmware Upgrades Viewing N300 Wireless Modem Router Status Information Field Description Dhcp Connection Status Statistics Managing the Configuration File Viewing a List of Attached Devices Erasing the Configuration Running Diagnostic Utilities and Rebooting the RouterBacking Up and Restoring the Configuration Do not interrupt the reboot process Enabling Remote Management Access Select the Turn Remote Management On check box Http//134.177.0.1238080 in your browser Traffic MeterTo monitor traffic on your router Network Maintenance Network Maintenance Up data USB port File Sharing Scenarios USB Drive RequirementsBus Speed/Second Sharing Large Files with Colleagues Sharing Photos with Friends and FamilyStoring Files in a Central Location for Printing To share files with your friends and family \\readyshare USB Storage Basic Settings\\readyshare\USBStorage Editing a Network Folder Fields and Buttons Description Configuring USB Storage Advanced Settings Fields Description Http Creating a Network Folder Unmounting a USB Drive Media Server SettingsSpecifying Approved USB Devices Locating the Internet Port IP Address Connecting to the USB Drive from a Remote ComputerSelect the Allow only approved devices check box Configuring Windows 98SE and Windows ME Connecting to the USB Drive with Microsoft Network SettingsAccessing the Router’s USB Drive Remotely Using FTP Enabling File and Printer Sharing Configuring Windows 2000 and Windows XP Overview of VPN Configuration Virtual Private Networking Gateway-to-Gateway VPN Tunnels Client-to-Gateway VPN TunnelsGateway B Planning a VPN Parameter Value to Be Entered Field Selection VPN Tunnel Configuration Parameter Factory Default Setting Setting Up a Client-to-Gateway VPN Configuration Configure the Client-to-Gateway VPN Tunnel Address Virtual Private Networking Configure the Netgear ProSafe VPN Client Select the Connect using Secure Gateway Tunnel check box Security Policy settings, Client-to-Gateway a Virtual Private Networking Virtual Private Networking Leave the Authentication Protocol AH check box cleared Select the Encapsulation Protocol ESP check box Virtual Private Networking Setting Up a Gateway-to-Gateway VPN Configuration Gateway-to-Gateway VPN Tunnel Configuration Worksheet Gateway a Gateway B Virtual Private Networking Virtual Private Networking VPN Tunnel Control Activating a VPN Tunnel Using the VPN Status Screen to Activate a VPN Tunnel To use the VPN Status screen to activate a VPN tunnel Activating the VPN Tunnel by Pinging the Remote Endpoint Verifying the Status of a VPN Tunnel Start Using a VPN Tunnel to Activate ItType ping Deactivating a VPN Tunnel To use the VPN Policies screen to deactivate a VPN tunnel Using the VPN Status Screen to Deactivate a VPN TunnelTo use the VPN Status screen to deactivate a VPN tunnel Deleting a VPN Tunnel Setting Up VPN Tunnels in Special CircumstancesTo delete a VPN tunnel Using Auto Policy to Configure VPN Tunnels Configuring VPN Network Connection Parameters Virtual Private Networking VPN Auto Policy Screen Settings Fields and Settings Description IKE Fully Qualified Domain Name. Your domain name DH Group setting in the IKE section Example of Using Auto Policy To use Auto Policy VPN Auto Policy screen displays Enter these policy settings Auto Policy Field Description Click Apply. The VPN Policies screen displays Using Manual Policy to Configure VPN Tunnels Fields and Settings Description SPI Advanced Settings Part Using the LAN Setup Options Settings Using the N300 Wireless Modem Router as a Dhcp Server LAN TCP/IP Address Reservation To reserve an IP address To edit or delete a reserved address entry Using a Dynamic DNS ServiceTo configure Dynamic DNS Click Edit or Delete Configuring the WAN Setup Options Select the Use a Dynamic DNS Service check box WAN Setup fields are described in the following table Setting Description Setting Up a Default DMZ Server Setting Up Quality of Service QoSTo assign a computer or server to be a default DMZ server Configuring QoS for Internet Access QoS for Applications and Online Gaming Advanced Settings Part 1 QoS for a MAC Address Click Setup QoS RuleQoS for a Router LAN Port Click Add Priority Rule Editing or Deleting an Existing QoS Policy Configuring Static RoutesTo edit or delete an existing QoS policy To add or edit a static route Wireless Repeating Also Called WDS Wireless Repeating Function Setting Up the Base Station To set up the base station Setting Up a Repeater Unit To configure a N300 wireless modem router as a repeater unit Advanced Settings Part 1 Fine-tuning your network Common Connection Types Assessing Your Speed Requirements Network Connection Theoretical Raw Transfer Time Optimizing Your Network Bandwidth Choose placement carefully Optimizing Wireless PerformanceIdentify critical wireless links Reduce interference Choose your settings Changing the MTU Size To turn on Universal Plug and Play Universal Plug and PlayTo change the MTU size Application Advanced Settings Part Quick Tips Recommendation Instructions Troubleshooting with the LEDs Restoring the Factory Configuration Settings on Situation Recommended Action Cannot Access the N300 Wireless Modem Router Menu Checking the WAN IP Address Cannot Access the InternetChecking the Configuration To check the WAN IP address Troubleshooting a Network Using the Ping Utility Testing the Path from Your Computer to a Remote Device Testing the LAN Path to Your RouterTo ping the router from a running Windows PC Problems with Date and Time Wireless Connectivity Viewing Available Networks Appendix A. Troubleshooting Restoring the Factory Configuration Settings Using the Restore Factory Settings Button Local network LAN Feature Default Setting Router loginInternet connection 192.168.0.1 Feature Default Setting NETGEAR-2.4G Technical Specifications Interface Specifications Configuration Profile Gateway a Unit Step-by-Step ConfigurationLAN Subnet Mask N300 Wireless Modem Router with Fqdn to Gateway B Configuration Profile Using a Fully Qualified Domain Name Fqdn VPN Consortium Scenario Step-by-Step Configuration Click Show Status Configuration Summary Telecommuter Example Device LAN IP Address LAN Subnet Mask Setting Up Client-to-Gateway VPN Telecommuter Example VPN Consortium Scenario Configure Gateway a VPN Router at Main Office Configure Gateway B VPN Router at Regional Office Connection Security section, select Secure Appendix C. Netgear VPN Configuration Appendix C. Netgear VPN Configuration Select the Encapsulation Protocol ESP check box Select toDGND3300v2 Monitoring the VPN Tunnel Telecommuter Example Viewing the VPN Router’s VPN Status and Log Information Regulatory Compliance Information FCC Requirements for Operation in the United States Europe EU Declaration of Conformity Interference Reduction TableEdoc in Languages of the European Community 1999/5/EG befindet Slovensko Related Documents Document Link Index Index Ping 89, 142 Ssid Index