Client-to-Gateway VPN Tunnels, Gateway B | NETGEAR DGND3300-100NAS

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual

Client-to-Gateway VPN Tunnels

Client-to-gateway VPN tunnels provide secure access from a remote PC, such as a telecommuter connecting to an office network.

VPN Tunnel

N300 Wireless Modem Router

DGND3300v2

Internet

PC running NETGEAR

ProSafe VPN client

Figure 49. Telecommuter VPN Tunnel

A VPN client access allows a remote PC to connect to your network from any location on the Internet. The remote PC is one tunnel endpoint, running the VPN client software. The N300 wireless modem router on your network is the other tunnel endpoint. See Setting Up a Client-to-Gateway VPN Configuration on page 80 for information about how to set up this configuration.

Gateway-to-Gateway VPN Tunnels

Gateway-to-gateway VPN tunnels provide secure access between networks, such as a branch or home office and a main office.

	N300 Wireless Modem Router
	DGND3300v2	VPN Tunnel
	Gateway A (Home)	VPN Tunnel	Gateway B
	Gateway A (Home)		Gateway B
			(Office)
		Internet

Figure 50. VPN Tunnel between Networks

A VPN between two or more NETGEAR VPN-enabled routers is a good way to connect branch or home offices and business partners over the Internet. VPN tunnels also enable access to network resources across the Internet. In this case, use gateways on each end of the tunnel to form the VPN tunnel end points. See Setting Up a Gateway-to-Gateway VPN Configuration on page 90 for information about how to set up this configuration.

Chapter 6. Virtual Private Networking 77

Image 77

NETGEAR DGND3300-100NAS user manual Client-to-Gateway VPN Tunnels, Gateway-to-Gateway VPN Tunnels, Gateway B

Contents

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 Statement of Conditions Technical SupportTrademarks Table of Contents Network Maintenance Advanced Settings Part Appendix C Netgear VPN Configuration Using the Setup Manual Router Internet Setup To log in to the N300 wireless modem router Logging In to Your N300 Wireless Modem Router To use the Setup Wizard Using the Setup Wizard To view or configure the basic settings Viewing or Manually Configuring Your ISP Settings Router Internet Setup Settings Description ISP does not require login Router Internet Setup Manual Configuring Adsl Settings Planning Your Wireless Network Wireless Settings See Manually Configuring Your Wireless Settings on Wireless Placement and Range Guidelines Wireless Security Options To view or manually configure the wireless settings Manually Configuring Your Wireless Settings Name 11N Ssid Network Key 8-63 characters Configuring WEP Wireless SecurityWPA-802.1x To configure WEP data encryption Configuring WPA, WPA2, or Mixed WPA2 + WPA Wireless Security To configure WPA or WPA2 in the N300 wireless modem router Using a WPS Button to Add a WPS Client Using Push N Connect WPS to Configure Your Wireless Network Using PIN Entry to Add a WPS Client To use a PIN to add a WPS client Configuring Advanced WPS Settings Adding Both WPS and Non-WPS Clients To add a wireless client device that is WPS enabledAdding More WPS Clients Restricting Access to Your N300 Wireless Modem Router Wireless Guest Networks To configure a wireless guest network Total Home Protection Live Parental ControlsWeb-Based Interface Minimal Software Installation Flexible Settings Protecting Access to Your N300 Wireless Modem Router Security Settings To restrict access based on MAC addresses Restricting Access by MAC AddressChanging the Built-In Password Select the Turn Access Control On check box To block access to Internet sites Blocking Access to Internet Sites Firewall Rules To add or edit a rule from the Firewall Rules screen Scheduling Blocking on Field Outbound Rules Inbound Rules Port Forwarding Adding a Custom Port Forwarding Rule Adding a Pre-set Port Forwarding Rule Port Triggering To configure port triggering Blocking Access to Internet Services To schedule blocking To block access to Internet servicesScheduling Blocking Viewing Logs of Web Access or Attempted Web Access Field Description Configuring Email Alert and Web Access Log Notifications Security Settings Setting the Time Upgrading the Firmware Network Maintenance Manually Check for Firmware Upgrades Viewing N300 Wireless Modem Router Status Information Field Description Dhcp Connection Status Statistics Viewing a List of Attached Devices Managing the Configuration File Backing Up and Restoring the Configuration Running Diagnostic Utilities and Rebooting the RouterErasing the Configuration Do not interrupt the reboot process Enabling Remote Management Access Select the Turn Remote Management On check box To monitor traffic on your router Traffic MeterHttp//134.177.0.1238080 in your browser Network Maintenance Network Maintenance USB port Up data Bus Speed/Second USB Drive RequirementsFile Sharing Scenarios Storing Files in a Central Location for Printing Sharing Photos with Friends and FamilySharing Large Files with Colleagues To share files with your friends and family \\readyshare\USBStorage USB Storage Basic Settings\\readyshare Fields and Buttons Description Editing a Network Folder Configuring USB Storage Advanced Settings Http Fields Description Creating a Network Folder Specifying Approved USB Devices Media Server SettingsUnmounting a USB Drive Select the Allow only approved devices check box Connecting to the USB Drive from a Remote ComputerLocating the Internet Port IP Address Accessing the Router’s USB Drive Remotely Using FTP Connecting to the USB Drive with Microsoft Network SettingsConfiguring Windows 98SE and Windows ME Enabling File and Printer Sharing Configuring Windows 2000 and Windows XP Virtual Private Networking Overview of VPN Configuration Gateway B Client-to-Gateway VPN TunnelsGateway-to-Gateway VPN Tunnels Parameter Value to Be Entered Field Selection Planning a VPN Parameter Factory Default Setting VPN Tunnel Configuration Configure the Client-to-Gateway VPN Tunnel Setting Up a Client-to-Gateway VPN Configuration Address Virtual Private Networking Configure the Netgear ProSafe VPN Client Select the Connect using Secure Gateway Tunnel check box Security Policy settings, Client-to-Gateway a Virtual Private Networking Virtual Private Networking Select the Encapsulation Protocol ESP check box Leave the Authentication Protocol AH check box cleared Virtual Private Networking Setting Up a Gateway-to-Gateway VPN Configuration Gateway a Gateway B Gateway-to-Gateway VPN Tunnel Configuration Worksheet Virtual Private Networking Virtual Private Networking Activating a VPN Tunnel VPN Tunnel Control To use the VPN Status screen to activate a VPN tunnel Using the VPN Status Screen to Activate a VPN Tunnel Activating the VPN Tunnel by Pinging the Remote Endpoint Type ping Start Using a VPN Tunnel to Activate ItVerifying the Status of a VPN Tunnel Deactivating a VPN Tunnel To use the VPN Status screen to deactivate a VPN tunnel Using the VPN Status Screen to Deactivate a VPN TunnelTo use the VPN Policies screen to deactivate a VPN tunnel To delete a VPN tunnel Setting Up VPN Tunnels in Special CircumstancesDeleting a VPN Tunnel Configuring VPN Network Connection Parameters Using Auto Policy to Configure VPN Tunnels Virtual Private Networking Fields and Settings Description VPN Auto Policy Screen Settings Fully Qualified Domain Name. Your domain name IKE DH Group setting in the IKE section To use Auto Policy Example of Using Auto Policy Auto Policy Field Description VPN Auto Policy screen displays Enter these policy settings Click Apply. The VPN Policies screen displays Using Manual Policy to Configure VPN Tunnels Fields and Settings Description SPI Using the LAN Setup Options Advanced Settings Part Settings LAN TCP/IP Using the N300 Wireless Modem Router as a Dhcp Server To reserve an IP address Address Reservation To configure Dynamic DNS Using a Dynamic DNS ServiceTo edit or delete a reserved address entry Click Edit or Delete Select the Use a Dynamic DNS Service check box Configuring the WAN Setup Options Setting Description WAN Setup fields are described in the following table To assign a computer or server to be a default DMZ server Setting Up Quality of Service QoSSetting Up a Default DMZ Server QoS for Applications and Online Gaming Configuring QoS for Internet Access Advanced Settings Part 1 QoS for a Router LAN Port Click Setup QoS RuleQoS for a MAC Address Click Add Priority Rule To edit or delete an existing QoS policy Configuring Static RoutesEditing or Deleting an Existing QoS Policy To add or edit a static route Wireless Repeating Also Called WDS Wireless Repeating Function To set up the base station Setting Up the Base Station To configure a N300 wireless modem router as a repeater unit Setting Up a Repeater Unit Advanced Settings Part 1 Common Connection Types Fine-tuning your network Network Connection Theoretical Raw Transfer Time Assessing Your Speed Requirements Optimizing Your Network Bandwidth Identify critical wireless links Optimizing Wireless PerformanceChoose placement carefully Reduce interference Changing the MTU Size Choose your settings To change the MTU size Universal Plug and PlayTo turn on Universal Plug and Play Application Advanced Settings Part Recommendation Instructions Quick Tips Troubleshooting with the LEDs Situation Recommended Action Restoring the Factory Configuration Settings on Cannot Access the N300 Wireless Modem Router Menu Checking the Configuration Cannot Access the InternetChecking the WAN IP Address To check the WAN IP address Troubleshooting a Network Using the Ping Utility To ping the router from a running Windows PC Testing the LAN Path to Your RouterTesting the Path from Your Computer to a Remote Device Problems with Date and Time Viewing Available Networks Wireless Connectivity Appendix A. Troubleshooting Using the Restore Factory Settings Button Restoring the Factory Configuration Settings Internet connection Feature Default Setting Router loginLocal network LAN 192.168.0.1 NETGEAR-2.4G Feature Default Setting Interface Specifications Technical Specifications Gateway a Configuration Profile LAN Subnet Mask Step-by-Step ConfigurationUnit Configuration Profile N300 Wireless Modem Router with Fqdn to Gateway B VPN Consortium Scenario Using a Fully Qualified Domain Name Fqdn Step-by-Step Configuration Click Show Status Device LAN IP Address LAN Subnet Mask Configuration Summary Telecommuter Example VPN Consortium Scenario Setting Up Client-to-Gateway VPN Telecommuter Example Configure Gateway a VPN Router at Main Office Configure Gateway B VPN Router at Regional Office Connection Security section, select Secure Appendix C. Netgear VPN Configuration Appendix C. Netgear VPN Configuration Select the Encapsulation Protocol ESP check box Select toDGND3300v2 Monitoring the VPN Tunnel Telecommuter Example Viewing the VPN Router’s VPN Status and Log Information FCC Requirements for Operation in the United States Regulatory Compliance Information Edoc in Languages of the European Community Interference Reduction TableEurope EU Declaration of Conformity 1999/5/EG befindet Slovensko Document Link Related Documents Index Index Ping 89, 142 Ssid Index