NETGEAR DG834GSP Manual de usuario

NETGEAR VPN Configuration B-1

v1.0, June 2007

Appendix B

NETGEAR VPN Configuration

DG834GSP to FVL328

This appendix is a case study on how to configure a secure IPSec VPN tunnel from a NETGEAR

DG834GSP to a FVL328. This case study follows the VPN Consortium interoperability profile

guidelines (found at http://www.vpnc.org/InteropProfiles/Interop-01.html).

Configuration Profile

The configuration in this document follows the addressing and configuration mechanics defined

by the VPN Consortium. Gather all the necessary information before you begin the configuration

process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and

all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.

Table B-1. Profile Summary

VPN Consortium Scenario: Scenario 1

Type of VPN LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)

Security Scheme: IKE with Preshared Secret/Key (not Certificate-based)

IP Addressing:

NETGEAR-Gateway A Static IP address

NETGEAR-Gateway B Static IP address

Reference Manual for the ADSL Modem Wireless Router DG834GSP

B-2 NETGEAR VPN Configuration

v1.0, June 2007

Step-By-Step Configuration

1. Configure the DG834GSP as in the Gateway-to-Gateway procedures using the VPN Wizard

(see “How to Set Up a Gateway-to-Gateway VPN Configuration” on page 8-21), being certain

to use appropriate network addresses for the environment.

The LAN Addresses used in this example are as follows:

a. In Step 1, enter toFVL328 for the Connection Name.

b. In Step 2, enter 22.23.24.25 for the remote WAN's IP address.

c. In Step 3, enter the following:

• IP Address = 172.23.9.1

• Subnet Mask = 255.255.255.0

Figure B-1

Note: Product updates are available on the NETGEAR, Inc. web site at

http://kbserver.netgear.com/DG834GSP.asp.

Unit WAN IP LAN IP LAN Subnet Mask

DG834G 14.15.16.17 10.5.6.1 255.255.255.0

FVL328 22.13.24.25 172.23.9.1 255.255.255.0

Gateway A

22.23.24.25

14.15.16.17

10.5.6.0/24 172.23.9.0/24

172.23.9.110.5.6.1

WAN IP WAN IP LAN IPLAN IP

Gateway B

VPNC Example

Network Interface Addressing

DG834G FVL328

Reference Manual for the ADSL Modem Wireless Router DG834GSP

NETGEAR VPN Configuration B-3

v1.0, June 2007

Figure B-2

toFVL328 10.5.6.1 172.23.9.1

toFVL328

22.23.24.25

10 5 6

172 23 9

Click VPN Policies under

Advanced - VPN to invoke

this screen

Reference Manual for the ADSL Modem Wireless Router DG834GSP

B-4 NETGEAR VPN Configuration

v1.0, June 2007

2. Configure the FVL328 as in the Gateway-to-Gateway procedures for the VPN Wizard (see

“How to Set Up a Gateway-to-Gateway VPN Configuration” on page 8-21), being certain to

use appropriate network addresses for the environment.

a. In Step 1, enter toDG834 for the Connection Name

b. In Step 2, enter 14.15.16.17 for the remote WAN's IP address

c. In Step 3, enter the following:

• IP Address = 10.5.6.1

• Subnet Mask = 255.255.255.0

Reference Manual for the ADSL Modem Wireless Router DG834GSP

NETGEAR VPN Configuration B-5

v1.0, June 2007

Figure B-3

toDG834

22.23.24.25 14.15.16.17

14.15.16.17

22.23.24.25

14.15.16.17

172.23.9.1 10.5.6.1

172 23 9

10 5 6

Click IKE Policies under

VPN to invoke this screen

Click VPN Policies under

VPN to invoke this screen

Reference Manual for the ADSL Modem Wireless Router DG834GSP

B-6 NETGEAR VPN Configuration

v1.0, June 2007

3. Test the VPN tunnel by pinging the remote network from a PC attached to the DG834GSP.

a. Open the command prompt (Start -> Run -> cmd)

b. ping 172.23.9.1

DG834GSP with FQDN to FVL328

This appendix is a case study on how to configure a VPN tunnel from a NETGEAR DG834GSP to

a FVL328 using a Fully Qualified Domain Name (FQDN) to resolve the public address of one or

both routers. This case study follows the VPN Consortium interoperability profile guidelines

(found at http://www.vpnc.org/InteropProfiles/Interop-01.html).

Configuration Profile

The configuration in this document follows the addressing and configuration mechanics defined

by the VPN Consortium. Gather all the necessary information before you begin the configuration

process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and

all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.

Figure B-4

Note: The pings may fail the first time. If this happens, try the pings a second

time.

Reference Manual for the ADSL Modem Wireless Router DG834GSP

NETGEAR VPN Configuration B-7

v1.0, June 2007

Table B-2. Profile Summary

VPN Consortium Scenario: Scenario 1

Type of VPN LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)

Security Scheme: IKE with Preshared Secret/Key (not Certificate-based)

IP Addressing:

NETGEAR-Gateway A Fully Qualified Domain Name (FQDN)

NETGEAR-Gateway B FDQN

Figure B-5

Note: Product updates are available on the NETGEAR, Inc. web site at

http://kbserver.netgear.com/DG834GSP.asp.

Gateway A

fvl328.dyndns.org

dg834g.dyndns.org

10.5.6.0/24 172.23.9.0/24

172.23.9.110.5.6.1

WAN IP WAN IP LAN IPLAN IP

Gateway B

VPNC Example

Network Interface Addressing

DG834G FVL328

(FQDN) (FQDN)

Reference Manual for the ADSL Modem Wireless Router DG834GSP

B-8 NETGEAR VPN Configuration

v1.0, June 2007

The Use of a Fully Qualified Domain Name (FQDN)

Many ISPs (Internet Service Providers) provide connectivity to their customers using dynamic

instead of static IP addressing. This means that a user’s IP address does not remain constant over

time which presents a challenge for gateways attempting to establish VPN connectivity.

A Dynamic DNS (DDNS) service allows a user whose public IP address is dynamically assigned

to be located by a host or domain name. It provides a central public database where information

(such as email addresses, host names and IP addresses) can be stored and retrieved. Now, a

gateway can be configured to use a 3rd party service in lieu of a permanent and unchanging IP

address to establish bi-directional VPN connectivity.

To use DDNS, you must register with a DDNS service provider. Example DDNS Service

Providers include:

• DynDNS: www.dyndns.org

• TZO.com: netgear.tzo.com

• ngDDNS: ngddns.iego.net

In this example, Gateway A is configured using an example FQDN provided by a DDNS Service

provider. In this case we established the hostname dg834g.dyndns.org for gateway A using the

DynDNS service. Gateway B will use the DDNS Service Provider when establishing a VPN

tunnel.

In order to establish VPN connectivity Gateway A must be configured to use Dynamic DNS, and

Gateway B must be configured to use a DNS hostname to find Gateway A provided by a DDNS

Service Provider. Again, the following step-by-step procedures assume that you have already

registered with a DDNS Service Provider and have the configuration information necessary to set

up the gateways.

Step-By-Step Configuration

1. Log in to the DG834GSP labeled Gateway A as in the illustration.

Out of the box, the DG834GSP is set for its default LAN address of http://10.1.1.1 with its

default user name of admin and default password of password. For this example we will

assume you have set the local LAN address as 10.5.6.1 for Gateway A and have set your own

password.

2. Click on the Dynamic DNS link on the left side of the Settings management GUI. This will

take you to the Dynamic DNS Menu.

Reference Manual for the ADSL Modem Wireless Router DG834GSP

NETGEAR VPN Configuration B-9

v1.0, June 2007

3. On the DG834GSP, configure the Dynamic DNS settings.

a. Browse to the Dynamic DNS Setup Screen (see Figure B-6) in the Advanced menu.

b. Configure this screen with appropriate account and hostname settings and then click

Apply.

• Check the box Use a Dynamic DNS Service.

• Host Name = dg834g.dyndns.org

• User Name = <user's account username>

• Password = <user's account password>

c. Click Show Status. The resulting screen should show Update OK: good (see Figure B-7).

Figure B-6

Figure B-7

Reference Manual for the ADSL Modem Wireless Router DG834GSP

B-10 NETGEAR VPN Configuration

v1.0, June 2007

4. On the FVL328, configure the Dynamic DNS settings. Assume a properly configured

DynDNS account.

a. Browse to the Dynamic DNS Setup Screen (see Figure B-8) in the Advanced menu.

b. Select the DynDNS.org radio button (see Figure B-8), configure with appropriate account

and hostname settings (see Figure B-9), and then click Apply.

• Host and Domain Name = fvl328.dyndns.org

• User Name = <user's account username>

• Password = <user's account password>

Figure B-8

Otros manuales para DG834GSP

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Módem de NETGEAR

NETGEAR

NETGEAR CM500V Manual de usuario

NETGEAR

NETGEAR CM700 Manual de usuario

NETGEAR

NETGEAR Nighthawk CM2500 Manual de usuario

NETGEAR

NETGEAR FVL328 - Cable/DSL ProSafe VPN Firewall... Manual de usuario

NETGEAR

NETGEAR LM1200 Manual de usuario

NETGEAR

NETGEAR DOCSIS 3.0 C6220 Manual de usuario

NETGEAR

NETGEAR DG834PN - RangeMax ADSL Modem Wireless... Guía del usuario

NETGEAR

NETGEAR DM111PSPv2 Manual de usuario

NETGEAR

NETGEAR Orbi Pro SRC60 Manual de usuario

NETGEAR

NETGEAR Orbi RBS50Y Manual de usuario

NETGEAR

NETGEAR CM1150V Manual de usuario

NETGEAR

NETGEAR CM1000v2 Manual de usuario

NETGEAR

NETGEAR CG814WG V3 Manual de usuario

NETGEAR

NETGEAR A7000 Manual de usuario

NETGEAR

NETGEAR 341U Manual de funcionamiento

NETGEAR

NETGEAR AirCard 785S Manual de usuario

NETGEAR

NETGEAR AirCard Manual de usuario

NETGEAR

NETGEAR C6250 Manual de usuario

NETGEAR

NETGEAR DM111PBL Manual de usuario

NETGEAR

NETGEAR DM111P - ADSL2+ Ethernet Modem Manual de usuario

NETGEAR

NETGEAR CG3000D Manual de usuario

NETGEAR

NETGEAR LB1110 Manual de usuario

NETGEAR

NETGEAR AC327U Manual de usuario

NETGEAR

NETGEAR A6200 Manual de usuario

Manuales populares de Módem de otras marcas

Davicom

Davicom DM562AP Manual de usuario

EpiValley

EpiValley TATA indicom SXC-1080 Manual de usuario

Zte

Zte WiMAX Manual de usuario

Intelimax

Intelimax MA-2060 Manual de usuario

SMC Networks

SMC Networks D3CM1604V Manual de uso y cuidado

Telstra

Telstra Wi-Fi 4G Advanced Pro X Manual de usuario

Thrane&Thrane

Thrane&Thrane imarsat EXPLORER 300 Manual de usuario

Samsung

Samsung AceLink SAM-335A Manual de usuario

Enfora

Enfora Enabler-G Guía de configuración rápida

iRZ

iRZ ATM2-232 Manual de usuario

Zhone

Zhone 6310 Manual de usuario

Paradyne

Paradyne Hotwire 7976 Manual de usuario

US Robotics

US Robotics 3453C Manual de usuario

MaxTech

MaxTech Plug & Play Internal Voice/FAX/Data/SVD... Manual de usuario

Zte

Zte MF823 Manual de usuario

Four-Faith

Four-Faith F1403 Manual de usuario

Sierra Wireless

Sierra Wireless AIRLINK MP595W Manual de usuario

Gemtek

Gemtek WiMAX WIXFBR-103 Manual de usuario