NETGEAR DG834GSP Manual de usuario
NETGEAR VPN Configuration B-1
v1.0, June 2007
Appendix B
NETGEAR VPN Configuration
DG834GSP to FVL328
This appendix is a case study on how to configure a secure IPSec VPN tunnel from a NETGEAR
DG834GSP to a FVL328. This case study follows the VPN Consortium interoperability profile
guidelines (found at http://www.vpnc.org/InteropProfiles/Interop-01.html).
Configuration Profile
The configuration in this document follows the addressing and configuration mechanics defined
by the VPN Consortium. Gather all the necessary information before you begin the configuration
process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and
all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.
Table B-1. Profile Summary
VPN Consortium Scenario: Scenario 1
Type of VPN LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)
Security Scheme: IKE with Preshared Secret/Key (not Certificate-based)
IP Addressing:
NETGEAR-Gateway A Static IP address
NETGEAR-Gateway B Static IP address
Reference Manual for the ADSL Modem Wireless Router DG834GSP
B-2 NETGEAR VPN Configuration
v1.0, June 2007
Step-By-Step Configuration
1. Configure the DG834GSP as in the Gateway-to-Gateway procedures using the VPN Wizard
(see “How to Set Up a Gateway-to-Gateway VPN Configuration” on page 8-21), being certain
to use appropriate network addresses for the environment.
The LAN Addresses used in this example are as follows:
a. In Step 1, enter toFVL328 for the Connection Name.
b. In Step 2, enter 22.23.24.25 for the remote WAN's IP address.
c. In Step 3, enter the following:
• IP Address = 172.23.9.1
• Subnet Mask = 255.255.255.0
Figure B-1
Note: Product updates are available on the NETGEAR, Inc. web site at
http://kbserver.netgear.com/DG834GSP.asp.
Unit WAN IP LAN IP LAN Subnet Mask
DG834G 14.15.16.17 10.5.6.1 255.255.255.0
FVL328 22.13.24.25 172.23.9.1 255.255.255.0
Gateway A
22.23.24.25
14.15.16.17
10.5.6.0/24 172.23.9.0/24
172.23.9.110.5.6.1
WAN IP WAN IP LAN IPLAN IP
Gateway B
VPNC Example
Network Interface Addressing
DG834G FVL328
Reference Manual for the ADSL Modem Wireless Router DG834GSP
NETGEAR VPN Configuration B-3
v1.0, June 2007
Figure B-2
toFVL328 10.5.6.1 172.23.9.1
toFVL328
22.23.24.25
10
10 5 6
172 23 9
Click VPN Policies under
Advanced - VPN to invoke
this screen
Reference Manual for the ADSL Modem Wireless Router DG834GSP
B-4 NETGEAR VPN Configuration
v1.0, June 2007
2. Configure the FVL328 as in the Gateway-to-Gateway procedures for the VPN Wizard (see
“How to Set Up a Gateway-to-Gateway VPN Configuration” on page 8-21), being certain to
use appropriate network addresses for the environment.
a. In Step 1, enter toDG834 for the Connection Name
b. In Step 2, enter 14.15.16.17 for the remote WAN's IP address
c. In Step 3, enter the following:
• IP Address = 10.5.6.1
• Subnet Mask = 255.255.255.0
Reference Manual for the ADSL Modem Wireless Router DG834GSP
NETGEAR VPN Configuration B-5
v1.0, June 2007
Figure B-3
toDG834
toDG834
toDG834
toDG834
toDG834
22.23.24.25 14.15.16.17
14.15.16.17
22.23.24.25
14.15.16.17
172.23.9.1 10.5.6.1
172 23 9
10 5 6
1
Click IKE Policies under
VPN to invoke this screen
Click VPN Policies under
VPN to invoke this screen
Reference Manual for the ADSL Modem Wireless Router DG834GSP
B-6 NETGEAR VPN Configuration
v1.0, June 2007
3. Test the VPN tunnel by pinging the remote network from a PC attached to the DG834GSP.
a. Open the command prompt (Start -> Run -> cmd)
b. ping 172.23.9.1
DG834GSP with FQDN to FVL328
This appendix is a case study on how to configure a VPN tunnel from a NETGEAR DG834GSP to
a FVL328 using a Fully Qualified Domain Name (FQDN) to resolve the public address of one or
both routers. This case study follows the VPN Consortium interoperability profile guidelines
(found at http://www.vpnc.org/InteropProfiles/Interop-01.html).
Configuration Profile
The configuration in this document follows the addressing and configuration mechanics defined
by the VPN Consortium. Gather all the necessary information before you begin the configuration
process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and
all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.
Figure B-4
Note: The pings may fail the first time. If this happens, try the pings a second
time.
Reference Manual for the ADSL Modem Wireless Router DG834GSP
NETGEAR VPN Configuration B-7
v1.0, June 2007
Table B-2. Profile Summary
VPN Consortium Scenario: Scenario 1
Type of VPN LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)
Security Scheme: IKE with Preshared Secret/Key (not Certificate-based)
IP Addressing:
NETGEAR-Gateway A Fully Qualified Domain Name (FQDN)
NETGEAR-Gateway B FDQN
Figure B-5
Note: Product updates are available on the NETGEAR, Inc. web site at
http://kbserver.netgear.com/DG834GSP.asp.
Gateway A
fvl328.dyndns.org
dg834g.dyndns.org
10.5.6.0/24 172.23.9.0/24
172.23.9.110.5.6.1
WAN IP WAN IP LAN IPLAN IP
Gateway B
VPNC Example
Network Interface Addressing
DG834G FVL328
(FQDN) (FQDN)
Reference Manual for the ADSL Modem Wireless Router DG834GSP
B-8 NETGEAR VPN Configuration
v1.0, June 2007
The Use of a Fully Qualified Domain Name (FQDN)
Many ISPs (Internet Service Providers) provide connectivity to their customers using dynamic
instead of static IP addressing. This means that a user’s IP address does not remain constant over
time which presents a challenge for gateways attempting to establish VPN connectivity.
A Dynamic DNS (DDNS) service allows a user whose public IP address is dynamically assigned
to be located by a host or domain name. It provides a central public database where information
(such as email addresses, host names and IP addresses) can be stored and retrieved. Now, a
gateway can be configured to use a 3rd party service in lieu of a permanent and unchanging IP
address to establish bi-directional VPN connectivity.
To use DDNS, you must register with a DDNS service provider. Example DDNS Service
Providers include:
• DynDNS: www.dyndns.org
• TZO.com: netgear.tzo.com
• ngDDNS: ngddns.iego.net
In this example, Gateway A is configured using an example FQDN provided by a DDNS Service
provider. In this case we established the hostname dg834g.dyndns.org for gateway A using the
DynDNS service. Gateway B will use the DDNS Service Provider when establishing a VPN
tunnel.
In order to establish VPN connectivity Gateway A must be configured to use Dynamic DNS, and
Gateway B must be configured to use a DNS hostname to find Gateway A provided by a DDNS
Service Provider. Again, the following step-by-step procedures assume that you have already
registered with a DDNS Service Provider and have the configuration information necessary to set
up the gateways.
Step-By-Step Configuration
1. Log in to the DG834GSP labeled Gateway A as in the illustration.
Out of the box, the DG834GSP is set for its default LAN address of http://10.1.1.1 with its
default user name of admin and default password of password. For this example we will
assume you have set the local LAN address as 10.5.6.1 for Gateway A and have set your own
password.
2. Click on the Dynamic DNS link on the left side of the Settings management GUI. This will
take you to the Dynamic DNS Menu.
Reference Manual for the ADSL Modem Wireless Router DG834GSP
NETGEAR VPN Configuration B-9
v1.0, June 2007
3. On the DG834GSP, configure the Dynamic DNS settings.
a. Browse to the Dynamic DNS Setup Screen (see Figure B-6) in the Advanced menu.
b. Configure this screen with appropriate account and hostname settings and then click
Apply.
• Check the box Use a Dynamic DNS Service.
• Host Name = dg834g.dyndns.org
• User Name = <user's account username>
• Password = <user's account password>
c. Click Show Status. The resulting screen should show Update OK: good (see Figure B-7).
Figure B-6
Figure B-7
Reference Manual for the ADSL Modem Wireless Router DG834GSP
B-10 NETGEAR VPN Configuration
v1.0, June 2007
4. On the FVL328, configure the Dynamic DNS settings. Assume a properly configured
DynDNS account.
a. Browse to the Dynamic DNS Setup Screen (see Figure B-8) in the Advanced menu.
b. Select the DynDNS.org radio button (see Figure B-8), configure with appropriate account
and hostname settings (see Figure B-9), and then click Apply.
• Host and Domain Name = fvl328.dyndns.org
• User Name = <user's account username>
• Password = <user's account password>
Figure B-8
Otros manuales para DG834GSP
1
Este manual sirve para los siguientes modelos
1
Tabla de contenidos
Otros manuales de Módem de NETGEAR
NETGEAR
NETGEAR orbi CBK40 Manual de usuario
NETGEAR
NETGEAR AC327U Manual de usuario
NETGEAR
NETGEAR CM400 Manual de usuario
NETGEAR
NETGEAR 341U Manual de funcionamiento
NETGEAR
NETGEAR CM1000 Manual de usuario
NETGEAR
NETGEAR LB2120 Series Manual de usuario
NETGEAR
NETGEAR DM602 - ADSL-Modem - 8 Mbps DSL Modem Manual de usuario
NETGEAR
NETGEAR CG3000D Manual de usuario
NETGEAR
NETGEAR CM400 Manual de usuario
NETGEAR
NETGEAR CM500 Manual de usuario
NETGEAR
NETGEAR CM1000 Manual de usuario
NETGEAR
NETGEAR Orbi Pro SRC60 Manual de usuario
NETGEAR
NETGEAR 341U Manual de usuario
NETGEAR
NETGEAR DGFV338 - ProSafe Wireless ADSL Modem VPN Firewall... Manual de usuario
NETGEAR
NETGEAR CM400 Manual de usuario
NETGEAR
NETGEAR CM600 Manual de usuario
NETGEAR
NETGEAR A7000 Manual de usuario
NETGEAR
NETGEAR DG834N Manual de usuario
NETGEAR
NETGEAR DM111P - ADSL2+ Ethernet Modem Guía del usuario
NETGEAR
NETGEAR CM500V Manual de usuario
Manuales populares de Módem de otras marcas
US Robotics
US Robotics 3453C Manual de usuario
MaxTech
MaxTech Plug & Play Internal Voice/FAX/Data/SVD... Manual de usuario
Zte
Zte MF823 Manual de usuario
Four-Faith
Four-Faith F1403 Manual de usuario
Sierra Wireless
Sierra Wireless AIRLINK MP595W Manual de usuario
Gemtek
Gemtek WiMAX WIXFBR-103 Manual de usuario