NETGEAR DGND3300-100NAS manual

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual

Step 2: Configure Gateway B (VPN Router at Regional Office)

This procedure assumes that the PC running the client has a dynamically assigned IP address.

The PC must have a VPN client program installed that supports IPSec (in this case study, the NETGEAR VPN ProSafe Client is used). Go to the NETGEAR website (www.netgear.com) for information about how to purchase the NETGEAR ProSafe VPN Client.

Note: Before installing the software, be sure to turn off any virus protection or firewall software you might be running on your PC.

1.Install the NETGEAR ProSafe VPN Client on the remote PC, and then reboot.

a.You might need to insert your Windows CD to complete the installation.

b.If you do not have a modem or dial-up adapter installed in your PC, you might see the warning message stating “The NETGEAR ProSafe VPN Component requires at least one dial-up adapter be installed.” You can disregard this message.

c.Install the IPSec component. You might have the option to install either the VPN adapter or the IPSec component or both. The VPN adapter is not necessary.

d.The system should show the ProSafe icon ( ) in the system tray after you reboot.

e.Double-click the system tray icon to open the Security Policy Editor.

2.Add a new connection.

a.Run the NETGEAR ProSafe Security Policy Editor program, and create a VPN connection.

b.From the Edit menu of the Security Policy Editor, select Add > Connection. A New Connection listing appears in the list of policies.

c.Rename the new connection to match the connection name you entered in the VPN settings of Gateway A. Choose connection names that make sense to the people using and administrating the VPN.

160 Appendix C. NETGEAR VPN Configuration

Image 160

NETGEAR DGND3300-100NAS user manual Configure Gateway B VPN Router at Regional Office

Contents

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Trademarks Technical SupportStatement of Conditions Table of Contents Network Maintenance Advanced Settings Part Appendix C Netgear VPN Configuration Router Internet Setup Using the Setup Manual Logging In to Your N300 Wireless Modem Router To log in to the N300 wireless modem router Using the Setup Wizard To use the Setup Wizard Viewing or Manually Configuring Your ISP Settings To view or configure the basic settings Router Internet Setup ISP does not require login Settings Description Router Internet Setup Configuring Adsl Settings Manual Wireless Settings Planning Your Wireless Network Wireless Placement and Range Guidelines See Manually Configuring Your Wireless Settings on Wireless Security Options Manually Configuring Your Wireless Settings To view or manually configure the wireless settings Name 11N Ssid WPA-802.1x Configuring WEP Wireless SecurityNetwork Key 8-63 characters To configure WEP data encryption Configuring WPA, WPA2, or Mixed WPA2 + WPA Wireless Security To configure WPA or WPA2 in the N300 wireless modem router Using Push N Connect WPS to Configure Your Wireless Network Using a WPS Button to Add a WPS Client Using PIN Entry to Add a WPS Client To use a PIN to add a WPS client Configuring Advanced WPS Settings Adding More WPS Clients To add a wireless client device that is WPS enabledAdding Both WPS and Non-WPS Clients Restricting Access to Your N300 Wireless Modem Router Wireless Guest Networks To configure a wireless guest network Web-Based Interface Live Parental ControlsTotal Home Protection Flexible Settings Minimal Software Installation Security Settings Protecting Access to Your N300 Wireless Modem Router Changing the Built-In Password Restricting Access by MAC AddressTo restrict access based on MAC addresses Select the Turn Access Control On check box Blocking Access to Internet Sites To block access to Internet sites Firewall Rules To add or edit a rule from the Firewall Rules screen Field Outbound Rules Inbound Rules Scheduling Blocking on Port Forwarding Adding a Pre-set Port Forwarding Rule Adding a Custom Port Forwarding Rule To configure port triggering Port Triggering Blocking Access to Internet Services Scheduling Blocking To block access to Internet servicesTo schedule blocking Viewing Logs of Web Access or Attempted Web Access Configuring Email Alert and Web Access Log Notifications Field Description Security Settings Setting the Time Network Maintenance Upgrading the Firmware Manually Check for Firmware Upgrades Viewing N300 Wireless Modem Router Status Information Field Description Dhcp Connection Status Statistics Managing the Configuration File Viewing a List of Attached Devices Running Diagnostic Utilities and Rebooting the Router Backing Up and Restoring the ConfigurationErasing the Configuration Do not interrupt the reboot process Enabling Remote Management Access Select the Turn Remote Management On check box Http//134.177.0.1238080 in your browser Traffic MeterTo monitor traffic on your router Network Maintenance Network Maintenance Up data USB port File Sharing Scenarios USB Drive RequirementsBus Speed/Second Sharing Photos with Friends and Family Storing Files in a Central Location for PrintingSharing Large Files with Colleagues To share files with your friends and family \\readyshare USB Storage Basic Settings\\readyshare\USBStorage Editing a Network Folder Fields and Buttons Description Configuring USB Storage Advanced Settings Fields Description Http Creating a Network Folder Unmounting a USB Drive Media Server SettingsSpecifying Approved USB Devices Locating the Internet Port IP Address Connecting to the USB Drive from a Remote ComputerSelect the Allow only approved devices check box Connecting to the USB Drive with Microsoft Network Settings Accessing the Router’s USB Drive Remotely Using FTPConfiguring Windows 98SE and Windows ME Enabling File and Printer Sharing Configuring Windows 2000 and Windows XP Overview of VPN Configuration Virtual Private Networking Gateway-to-Gateway VPN Tunnels Client-to-Gateway VPN TunnelsGateway B Planning a VPN Parameter Value to Be Entered Field Selection VPN Tunnel Configuration Parameter Factory Default Setting Setting Up a Client-to-Gateway VPN Configuration Configure the Client-to-Gateway VPN Tunnel Address Virtual Private Networking Configure the Netgear ProSafe VPN Client Select the Connect using Secure Gateway Tunnel check box Security Policy settings, Client-to-Gateway a Virtual Private Networking Virtual Private Networking Leave the Authentication Protocol AH check box cleared Select the Encapsulation Protocol ESP check box Virtual Private Networking Setting Up a Gateway-to-Gateway VPN Configuration Gateway-to-Gateway VPN Tunnel Configuration Worksheet Gateway a Gateway B Virtual Private Networking Virtual Private Networking VPN Tunnel Control Activating a VPN Tunnel Using the VPN Status Screen to Activate a VPN Tunnel To use the VPN Status screen to activate a VPN tunnel Activating the VPN Tunnel by Pinging the Remote Endpoint Verifying the Status of a VPN Tunnel Start Using a VPN Tunnel to Activate ItType ping Deactivating a VPN Tunnel To use the VPN Policies screen to deactivate a VPN tunnel Using the VPN Status Screen to Deactivate a VPN TunnelTo use the VPN Status screen to deactivate a VPN tunnel Deleting a VPN Tunnel Setting Up VPN Tunnels in Special CircumstancesTo delete a VPN tunnel Using Auto Policy to Configure VPN Tunnels Configuring VPN Network Connection Parameters Virtual Private Networking VPN Auto Policy Screen Settings Fields and Settings Description IKE Fully Qualified Domain Name. Your domain name DH Group setting in the IKE section Example of Using Auto Policy To use Auto Policy VPN Auto Policy screen displays Enter these policy settings Auto Policy Field Description Click Apply. The VPN Policies screen displays Using Manual Policy to Configure VPN Tunnels Fields and Settings Description SPI Advanced Settings Part Using the LAN Setup Options Settings Using the N300 Wireless Modem Router as a Dhcp Server LAN TCP/IP Address Reservation To reserve an IP address Using a Dynamic DNS Service To configure Dynamic DNSTo edit or delete a reserved address entry Click Edit or Delete Configuring the WAN Setup Options Select the Use a Dynamic DNS Service check box WAN Setup fields are described in the following table Setting Description Setting Up a Default DMZ Server Setting Up Quality of Service QoSTo assign a computer or server to be a default DMZ server Configuring QoS for Internet Access QoS for Applications and Online Gaming Advanced Settings Part 1 Click Setup QoS Rule QoS for a Router LAN PortQoS for a MAC Address Click Add Priority Rule Editing or Deleting an Existing QoS Policy Configuring Static RoutesTo edit or delete an existing QoS policy To add or edit a static route Wireless Repeating Also Called WDS Wireless Repeating Function Setting Up the Base Station To set up the base station Setting Up a Repeater Unit To configure a N300 wireless modem router as a repeater unit Advanced Settings Part 1 Fine-tuning your network Common Connection Types Assessing Your Speed Requirements Network Connection Theoretical Raw Transfer Time Optimizing Your Network Bandwidth Optimizing Wireless Performance Identify critical wireless linksChoose placement carefully Reduce interference Choose your settings Changing the MTU Size Universal Plug and Play To change the MTU sizeTo turn on Universal Plug and Play Application Advanced Settings Part Quick Tips Recommendation Instructions Troubleshooting with the LEDs Restoring the Factory Configuration Settings on Situation Recommended Action Cannot Access the N300 Wireless Modem Router Menu Cannot Access the Internet Checking the ConfigurationChecking the WAN IP Address To check the WAN IP address Troubleshooting a Network Using the Ping Utility Testing the Path from Your Computer to a Remote Device Testing the LAN Path to Your RouterTo ping the router from a running Windows PC Problems with Date and Time Wireless Connectivity Viewing Available Networks Appendix A. Troubleshooting Restoring the Factory Configuration Settings Using the Restore Factory Settings Button Feature Default Setting Router login Internet connectionLocal network LAN 192.168.0.1 Feature Default Setting NETGEAR-2.4G Technical Specifications Interface Specifications Configuration Profile Gateway a Unit Step-by-Step ConfigurationLAN Subnet Mask N300 Wireless Modem Router with Fqdn to Gateway B Configuration Profile Using a Fully Qualified Domain Name Fqdn VPN Consortium Scenario Step-by-Step Configuration Click Show Status Configuration Summary Telecommuter Example Device LAN IP Address LAN Subnet Mask Setting Up Client-to-Gateway VPN Telecommuter Example VPN Consortium Scenario Configure Gateway a VPN Router at Main Office Configure Gateway B VPN Router at Regional Office Connection Security section, select Secure Appendix C. Netgear VPN Configuration Appendix C. Netgear VPN Configuration Select the Encapsulation Protocol ESP check box Select toDGND3300v2 Monitoring the VPN Tunnel Telecommuter Example Viewing the VPN Router’s VPN Status and Log Information Regulatory Compliance Information FCC Requirements for Operation in the United States Europe EU Declaration of Conformity Interference Reduction TableEdoc in Languages of the European Community 1999/5/EG befindet Slovensko Related Documents Document Link Index Index Ping 89, 142 Ssid Index