NETGEAR DG834 v3 manuale d’uso

202-10153-01 October 200 6 NETGEAR , Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Reference Manual for the ADSL Modem Router DG834 v3[...]

ii v1.1, October 2006 © 2006 by NETGEAR, Inc. All rights reserved. T rademarks NETGEAR is a trademark of Netge ar , Inc. Microsoft, W indows, and W indow s NT are registered trademar ks of Microsoft Corporation. Other brand and product names are registered tradem arks or trademarks of their respective holders. St atement of Conditions In the inter[...]

v1.1, October 2006 iii European Union St atement of Compliance Hereby , NETGEAR, Inc. declares that thi s modem router is in compliance with the es sential requirements and other relevant provisions of Directive 1999/5/EC. Èesky [Czech] NETGEAR, Inc. tímto prohl ašuje, že tento DG834 ADSL Modem Router je ve shodì se základními požadavky a d[...]

v1.1, Oct ober 2006 iv A printed copy of the EU Declaratio n of Conformity certificate for this prod uct is provided in the DG834 v 3 product package. Bestätigung des Hers tellers/Importeurs Es wird hiermit bestätigt, daß da s DG834 ADSL Modem Router gemäß der im BMP T -AmtsblVfg 243/1991 und Vfg 46/ 1992 aufgeführten Bestimmungen entstört i[...]

v1.1, October 2006 v V oluntar y Control Council for Int erference (VCCI) S tatement This equipment is in the second category (information equipment to be used in a residential area or an adjacent area thereto) and conforms to the standards set by the V o luntary Control Council for In terference by Da ta Processing Equipment and Electronic Office [...]

v1.1, Oct ober 2006 vi[...]

vii v1.1, October 2006 Content s Reference Manual for the ADSL Modem Router DG834 v3 Chapter 1 About This Manual Audience, Scope, Conventions, and Formats . ... ............. ................ ............. ............. ..... 1-1 How to Print this Manual ........................... ............. ................ ............. ................ .....[...]

viii v1.1, Octo b er 2006 Firewall Rules ........ ................ ............. ............. ................ ............. ............. ................ .... .3 - 5 Inbound Rules (Port Forwarding) ....... ............. ............. ............. ................ ............. .. 3-6 Outbound Rules (Service Blocking) ....... ...... ... ........[...]

ix v1.1, October 2006 Respond to Ping on Internet W A N Port ............. ............. ................. ............ ............ 5-4 MTU Size ........... ................ ............. ............. ................ ............. ............. ................ .. 5-4 Configuring LAN IP Settings ........ ............. ............. .............[...]

x v1.1, Octo b er 2006 LAN or Internet Port LEDs Not On ......... ............ ............. ................. ............ ............ 7-2 T r oubleshooting the Web Configuration Interface ........... ................ ................ ............... 7-3 T r oubleshooting the ISP Connection ............ ................ ............. ............[...]

About This Manual 1-1 v1.1, October 2006 Chapter 1 About This Manual This chapter describes the intended audience, sc ope, conventions, and formats of this manual. Audience, Scope, Conventions, and Format s This reference manual assumes that the reader h as basic to interme diate computer and Internet skills. However , basic comp uter network, Inte[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 1-2 About This Manual v1.1, Octo b er 2006 How to Print this Manual T o print this manual you can choose one of the fo llowing several options, a ccording to your needs. • Printing a Page in the HTML V iew . Each page in the HTML version of the manu al is dedicated to a major topic. Use t[...]

Introduction 2-1 v1.1, October 2006 Chapter 2 Introduction This chapter describes the features of the NETGEAR DG834 ADSL Modem Router. The DG834 ADSL Modem Router is a combina tion of a built-in ADSL modem, modem router, 4-port switch, and firewall which enables your entire network to safel y share an Internet connection that otherwise would be use[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 2-2 Introduction v1.1, Octo b er 2006 Key Features The DG834 ADSL Modem Router provides the following features: • A built-in ADSL modem • A powerful, true firewall • Easy , W eb-based setup for in stallation and management • Extensive Internet protocol sup port • T rustworthy VPN [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Introduction 2-3 v1.1, October 2006 Easy Inst allation and Management Y ou can install, configure, and operate the DG8 34 v3 within minutes after connecting it to the network. The following features simplif y installation and management tasks: • Browser-based management Browser-based configurat[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 2-4 Introduction v1.1, Octo b er 2006 • Automatic Configuration of Attached PCs by DHCP The DG834 v3 dy namically assigns network co nfiguration information, including IP , modem router, and domain name server (DNS) addresses, to attached PCs on the LAN using the Dynamic Host Configuratio[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Introduction 2-5 v1.1, October 2006 V irtual Private Networking (VPN) The DG834 ADSL Modem Router provides a secu re encrypted connection between your local area network (LAN) and r emote networks or clie nts. It includes the following VPN features: • Supports 5 VPN connec tions. • Supports i[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 2-6 Introduction v1.1, Octo b er 2006 — Detect and remove spyware — V iew attempts to access content restricted by Parental Controls — Purchase subscriptions for Parental Cont rols and T rend Micro Internet Security • T rend Micro Internet Security Y ou can install this program on u[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Introduction 2-7 v1.1, October 2006 The Modem Router’ s Front Panel The DG834 ADSL Mo dem Router front panel sho wn below contains stat us LEDs. Y ou can use the LEDs to verify various conditions. Ta b l e 2 - 1 lists and describe s each LED on the front panel of the modem router. These LEDs ar[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 2-8 Introduction v1.1, Octo b er 2006 The Router’ s Rear Panel The rear panel of the DG83 4 ADSL Modem Router ( Figure 2-2 ) contains port connections. V iewed from left to right, the rear panel contains the following elements: 1. RJ-1 1 ADSL port for connectin g the firewall to an ADSL l[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Introduction 2-9 v1.1, October 2006 Connecting the Router to the Internet T o connect your DG834 ADSL Modem Rout er to the Internet, refer to the ADSL Modem Router Setup Manual on the ADSL Modem Router Resource CD or online as shown in the following table. Ta b l e 2 - 1 . Language URL Dutch http[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 2-10 Introduction v1.1, Octo b er 2006[...]

Protecting Your Network 3-1 v1.1, October 2006 Chapter 3 Protecting Y our Network This chapter describes how to u se the basic firewall features of the DG834 ADSL Modem Router to protect your net work. It also describes how to configure T rend Micro Home Network Secu rity . Protecting Access to Y our DG834 ADSL Modem Router For security reasons, th[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-2 Protecting Yo ur Network v1.1, Octo b er 2006 2. From the Main Menu of the browser interface, under the Maintenanc e hea ding, select Set Password to bring up the menu shown in Figure 3-2 . 3. T o change the passw ord, first enter the old p assword, and then enter the new password twice[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Protecting Your Network 3-3 v1.1, October 2006 Configuring Basic Firewall Services Basic firewall services you can configure includ e access blocking and scheduling of firewa ll security . These topics are presented below . Blocking Keywords, Sites, and Services The modem rout er provides a varie[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-4 Protecting Yo ur Network v1.1, Octo b er 2006 2. Select the Block Sites link of the Security menu. 3. T o enable ke yword blocking, sele ct one of the following: • Per Schedule—to turn on keyword blocking according to the settings on the S chedule page. • Always—to turn on keywo[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Protecting Your Network 3-5 v1.1, October 2006 Y ou can specify one trusted user , which is a co mputer that will be exempt from blocking and logging. Since the trusted user will be identifie d by an IP address, you should configure that computer with a fixed IP address. 7. Click Apply to save yo[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-6 Protecting Yo ur Network v1.1, Octo b er 2006 T o access the rules configuration of the DG834 v3, click the Firewall Rules link on the main menu, then click Add for either an Outbound or Inbound Service. • T o edit an existing rule, select its button on the left side of the table and [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Protecting Your Network 3-7 v1.1, October 2006 Remember that allowing inbound services opens holes in your fi rewall. Only enab le those ports that are necessary for yo ur network. Following are tw o ap plication examples of in bound rules: Inbound Rule Example: A Local Public W eb Server If you [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-8 Protecting Yo ur Network v1.1, Octo b er 2006 – Any — all IP addresses are covered by this rule. – Address range — if this optio n is selected, you must enter the Start and Finish fields. – Single address — enter the required address in the Start field. •L o g Y ou can sel[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Protecting Your Network 3-9 v1.1, October 2006 Considerations for Inbound Rules • If your external IP address is assigned dynamically by your ISP , the IP address may change periodically as the DHCP lease expires. Cons ider using the Dynamic DNS feature in the Advanced menu so that external use[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-10 Protecting Yo ur Networ k v1.1, Octo b er 2006 Outbound Rule Example: Blocking Inst ant Messenger If you want to block Instant Messenger usage by employees during working hours, you can create an outbound rul e to block that application from a ny internal IP address to any external add[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Protecting Your Network 3 -11 v1.1, October 2006 – Single address — enter the required address in the Start field. • W AN Users These settings determine which packets are cove red by the rule, based on their destination W AN IP address. Select the desired option: – Any — all IP addresse[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-12 Protecting Yo ur Networ k v1.1, Octo b er 2006 For any traffic attempting to pass through the fire wall, the packet informa tion is subjected to the rules in the order shown in the Rules T able, beginning at the top and pro ceeding to the default rules at the bottom. In some cases, the[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Protecting Your Network 3 -13 v1.1, October 2006 • T o edit an existing Service, select its button on the left side of the table and click Edit Service. • T o delete an existing Service, select its button on the left side of the table and clic k Delete Service. 3. Use the page shown b elo w t[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-14 Protecting Yo ur Networ k v1.1, Octo b er 2006 2. Select the Schedule link of the Secur ity menu to display menu shown below . 3. Select your T ime Zone. This setting will be u sed for the blocking sc hedule according to your local time zone and for time-stamping log entries. Select th[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Protecting Your Network 3 -15 v1.1, October 2006 How to Schedule Firewall Services If you enabled services blocking in the Bl ock Servic es menu or Port forwar ding in the Ports menu, you can set up a schedule for when blocking occurs or when access is not restricted. 1. Log in to the modem route[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-16 Protecting Yo ur Networ k v1.1, Octo b er 2006 Security Service Settings Click Security Service under Co ntent Filtering on the Main menu to get the Security Service Settings menu shown below: T o install Home Network Security , click the T r end Micro banner and then follow the on-scr[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Protecting Your Network 3 -17 v1.1, October 2006 • Client V irus Protection S tatus . Provides information on all computers on you r network. – IP Address : The computer ’ s IP address – Computer Name : The name of the computer (as shown in Control Panel > System) – Antivirus Softwar[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-18 Protecting Yo ur Networ k v1.1, Octo b er 2006 Parent al Controls Settings Click Parental Controls under Cont ent Filtering on the Main menu to get the T rend Micro Parental Controls menu show n below: T o configure Parent al Controls: • Click Always to turn on Pa rental Controls all[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Protecting Your Network 3 -19 v1.1, October 2006 T o select Parenta l Controls Mode: • Click Use General Controls to select Genera l mode. In General mode, one access profile applies to all users. • Click Use Per-User Controls to select Per -Use r mode. In Per-User mo de, each us er ha s an i[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-20 Protecting Yo ur Networ k v1.1, Octo b er 2006 b. T o create a custom profile, click Use Custom Settings and then sele ct the chec k boxes as desired. (For additional ch oices, click More Categories). c. T o allow unrestricted Internet access , click No Re strictions. d. Click Apply . [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Protecting Your Network 3 -21 v1.1, October 2006 • Illegal/Questionable : Sites that advocate or advise on pe rforming illegal acts such as service theft, evad ing law enforcement, fraud, bur glary technique s, and plagiarism. Also includes sites that provide or sell questi onable educational m[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 3-22 Protecting Yo ur Networ k v1.1, Octo b er 2006[...]

Managing Your Network 4-1 v1.1, October 2006 Chapter 4 Managing Y our Network This chapter describes how to perform networ k management tasks with your DG834 ADSL Modem Router. Backing Up, Restoring, or Erasing Y our Settings The configuration settings of the DG834 ADSL Modem Router are stored in a configuration file in the modem rout er. This file[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 4-2 Mana ging Your Ne twork v1.1, Octo b er 2006 How to Restore the Conf iguration from a File 1. Log in to the modem router at its default LAN address of http://192.16 8.0.1 with its default User Name of admin , default password of password , or using whatever User Name, Password and LAN a[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Managing Your Network 4-3 v1.1, October 2006 How to Upgrade the Modem Router Firmware 1. Download and unzip the new so ftware file from NETGEAR. The W eb browser used to upload new firmware into the modem router must support HTTP uploads. NETGEAR recommends using Microsoft In ternet Explorer 5.0 [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 4-4 Mana ging Your Ne twork v1.1, Octo b er 2006 Network Management Information The DG834 v3 provides a variety of status and usag e information which is discuss ed below . V iewing Modem Router St atus and Usage St atistics From the Main Menu, under Maintenance, select Modem Router S tatus[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Managing Your Network 4-5 v1.1, October 2006 T a ble 4-1. M enu 3.2 - Modem R outer Status Fields Field Description Account Name The Host Name assigne d to the modem route r in the Basic Settings menu. Firmware V ersion Displays the modem router firmware version. ADSL Port These parameters apply [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 4-6 Mana ging Your Ne twork v1.1, Octo b er 2006 Click the Show S tatistics button to display modem router usage statistics, as shown in Figure 4-3 below: This screen shows the following statistics:. Figure 4-4 T able 4-1. Router St atistics Fields Field Description W AN, LAN, or Serial Por[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Managing Your Network 4-7 v1.1, October 2006 Click the Connection St atus button to display modem router connection statu s, as shown in Figure 4-5 below: Clicking the Renew button updates the status information. This screen shows the following statistics: Line Attenuation The line attenuation wi[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 4-8 Mana ging Your Ne twork v1.1, Octo b er 2006 V iewing Att ached Devices The Attached Devices menu contains a table of all IP devices that the modem router has discovered on the local network. From the Ma in Menu of the browser interface, under the Maintenance heading, select Attached De[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Managing Your Network 4-9 v1.1, October 2006 An example of the log s file is shown below . Log entries are described in Ta b l e 4 - 1 below: Figure 4-7[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 4-10 Managing Your Netw ork v1.1, Octo b er 2006 Log action buttons are described in Ta b l e 4 - 2 be low: Selecting What Information to Log Besides the standard information listed above, you can choose to log additional info rmation. Those optional selections are as follows: • Attempted[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Managing Your Network 4-11 v1.1, October 2006 Saving Log Files on a Server Y ou can choose to write the logs to a computer ru nning a syslog program. T o activate this feature, select to Broadcast on Lan or enter the IP address of the server where the Syslog file will be written. Examples of Log [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 4-12 Managing Your Netw ork v1.1, Octo b er 2006 Enabling Security Event E-mail Notification In order to receive logs and alerts by e-mail, you must provid e you r e-ma il information in the E- mail subheading: • T urn e-mail notification on . Select this ch eck box if you want to receive[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Managing Your Network 4-13 v1.1, October 2006 — Check My Mail Server requir es authe ntication if you need to login to your SMT P server to send E-mail. If you check this box, you must enter the user name and password for the mail server . • Send alert immediately . Select the corresponding c[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 4-14 Managing Your Netw ork v1.1, Octo b er 2006 • Reboot the modem router to enable new network configurations to take effect or to clear problems with the modem router’ s network connection. From the Main Menu of the browser interfa ce, under the Maintena nce heading, select the Modem[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Managing Your Network 4-15 v1.1, October 2006 Configuring Remote Management 1. Log in to the modem router at its default LAN address of http://192.16 8.0.1 with its default User Name of admin , default password of password , or using whatever User Name, Password and LAN address you have chosen fo[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 4-16 Managing Your Netw ork v1.1, Octo b er 2006 W eb browser access normally uses the standard HTTP service port 80. For gre ater security , you can change the remote manag eme nt W eb in terface to a custom port by entering that number in the box provided . Choose a number between 1024 an[...]

Advanced Configuration 5-1 v1.1, October 2006 Chapter 5 Advanced Configuration This chapter describes how to configure the advanced features of your DG834 ADSL Mod em Router. Configuring Advanced Security The DG834 ADSL Modem Router provides a variety of advanced features, such as: • Setting up a Demilitarized Zone (DMZ) Server • Connecting Aut[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 5-2 Advanced Configuration v1.1, Octo b er 2006 Setting Up A Default DMZ Server The Default DMZ Server feature is helpful when usin g some online games and videoconferencing applications that are incompatible with NA T . Th e modem router is programmed to recognize some of these application[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Advanced Configuration 5-3 v1.1, October 2006 2. From the Main Menu, under Adva nced, click the W AN Setup link to view the page shown in Figure 5-1 : 3. Select the Default DM Z Server check box. 4. T ype the IP address for that server . 5. Click Apply to save your changes. Connect Automatica lly[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 5-4 Advanced Configuration v1.1, Octo b er 2006 Respond to Ping on Internet W AN Port If you want the modem route r to respond to a 'ping' from the Internet, select the ‘Respond to Ping on Internet W AN Port’ check box. This should only be used as a diagnostic tool, since it a[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Advanced Configuration 5-5 v1.1, October 2006 These addresses are part of the Internet Engineering T a sk Force (IETF)-designated private address range for use in private networks, and should be suitable in most applications. If your network has a requirement to use a different IP addressing sc h[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 5-6 Advanced Configuration v1.1, Octo b er 2006 • RIP V ersion This controls the format and the broadcasting method of the RIP packets that the modem router sends. It recognizes both formats when r eceiving. By default, this is set for RIP-1. — RIP-1 is universally supported . RIP-1 is [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Advanced Configuration 5-7 v1.1, October 2006 The router will deliver the following parame ters to any LAN device that requests DHCP: • An IP Address from the rang e you have defined • Subnet Mas k • Gateway IP Address is the router ’ s LAN IP address • Primary DNS Server , if you enter[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 5-8 Advanced Configuration v1.1, Octo b er 2006 How to Configure LAN TCP/IP Settings 1. Log in to the router at its default LAN address of http://192.168.0.1 with its default User Name of admin , default password of password , or using whatever User Name, Password and LAN address you have c[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Advanced Configuration 5-9 v1.1, October 2006 The router contains a client that can connect to a dynamic DNS service provider . T o use this feature, you must select a service provider and obtain an account with them. After you have configured your accoun t inform ation in the router , whenever y[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 5-10 Advanced C onfiguration v1.1, Octo b er 2006 9. If your dynamic DNS provider allows the use of wildcards in resolving your URL, you can select the Use wildcards check box to activate this feature. For example, the wildcard feature will cause *.yourhost.dyndns.or g to be aliased to the [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Advanced Configuration 5-11 v1.1, October 2006 In this exam ple: • The Destination IP Address and IP Subnet Mask fi elds specify that this static route applies to all 134.177.x.x addresses. • The Modem Router IP Address fields specifies that all traffic for these addresses should be forwarded[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 5-12 Advanced C onfiguration v1.1, Octo b er 2006 3. T o add or edit a Static Route: a. Click the Add to add a new route or the Edit button to edit an existing route. The S tatic Routes screen will be displayed, as shown in Figure 5-6 . b. T ype a route name for this static route in the Rou[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Advanced Configuration 5-13 v1.1, October 2006 Universal Plug and Play (UPnP) Universal Plug and Play (UPnP) helps devices, su ch as Internet appliances and computers, access the network and connect to oth er devices as need ed. UPnP devices ca n automatically discover the services from other reg[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 5-14 Advanced C onfiguration v1.1, Octo b er 2006 • UPnP Portmap T able : The UPnP Portmap T able displays the IP address of each UPnP device that is currently accessing the Router and which ports (Internal and External) that device has opene d. The UPnP Portmap T able also displays what [...]

Virtual Private Networking (Advanced Feature) 6-1 v1.1, October 2006 Chapter 6 V i rtual Private Networking (Advanced Feature) This chapter describes how to u se the virtual private networking (VPN) features of the DG834 ADSL Modem Router. VPN communications paths are called tunnels. VPN tunne ls provide secure, encrypted comm unications between yo[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-2 Virtual Private Networking (Advanced Feature) v1.1, Octo b er 2006 Client-to-Gateway VPN T unnels Client-to-Gateway VPN T unnels provide secure access from a remote PC, such as a telecommuter connecting to an office network (see Figure 6-1 ). A VPN client access allows a remote PC to c [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking (Advanced Feature) 6-3 v1.1, October 2006 A VPN between two or more NETGEAR VPN-enabled routers is a good way to connect branch or home offices and business partners ove r the Inte rne t. VPN tunnels also enable access to network resources across the Internet. In this c[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-4 Virtual Private Networking (Advanced Feature) v1.1, Octo b er 2006 This set of configuration information defines a security association (SA) between the two VPN endpoints. When planning your VPN, you must make a few choices first: • W ill the local end be any device on the LAN, a port[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking (Advanced Feature) 6-5 v1.1, October 2006 — MDS: 128 bits, faster but less secure. — SHA-1: 160 bits, slower but more secure. VPN T unnel Configuration There are two tunnel configurations and three ways to configure them: • Use the VPN W izard to configure a VPN t[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-6 Virtual Private Networking (Advanced Feature) v1.1, Octo b er 2006 How to Set Up a Client-to -Gateway VPN Configuration Setting up a VPN between a remote PC runn ing the NETGEAR ProSafe VPN Client and a network gateway (see Figure 6-3 ) involves the following two steps: • “Step 1: C[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking (Advanced Feature) 6-7 v1.1, October 2006 Follow this procedure to configure a client-t o-gateway VPN tunnel using th e VPN W izard. T able 6-1. VPN T unnel Configuration W orksheet Connection Name: RoadW arrior Pre-Shared Key: 12345678 Secure Association -- Main Mode o[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-8 Virtual Private Networking (Advanced Feature) v1.1, Octo b er 2006 1. Log in to the DG834 v3 at its LAN address of http://192.168.0.1 with it s default user name of admin and password of pas s w or d . Click the VPN W izard link in the main menu to display this screen. Click Next to pro[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking (Advanced Feature) 6-9 v1.1, October 2006 The Summary screen below displays. Figure 6-6[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-10 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 T o view the VPNC recommended authenticatio n and encryptio n se ttings used by the VPN W izard, click the “ here ” link (see Figure 6-6 ). Click Bac k to return to the Summary screen. 3. Click Done on the Summary [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 11 v1.1, October 2006 T o view or modify the tunnel settings, select th e radio button next t o the tunnel entry and click Edit. S tep 2: Configuring the NETGE AR ProSafe VPN C lient on the Remote PC This procedure describes how to configure the N[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-12 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 b. From the Edit menu of the Security Policy Ed itor , click Add, then Connection. A “New Connection” listing appears in the list of polici es. Rename the “New Co nnection” so that it matches the Connection Nam[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 13 v1.1, October 2006 c. Select the Secure in the Connection Security check box. d. Select IP Subnet in the ID T ype menu. e. In this example, type 192.168. 3.1 in the Subnet field as the network address of the DG834 v3. f. Enter 255.255.255.0 in [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-14 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 b. Click on the Security Policy subheading to show the Security Policy menu. c. Select the Main Mode in the Select Phase 1 Negotiation Mode check box. 4. Configure the VPN Client Identity . In this step, you will provi[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 15 v1.1, October 2006 a. In the Network Security Policy list on the le ft side of the Security Policy Editor window , click on My Identity . b. Choose None in the Sele ct Certificate menu. c. Select IP Address in the ID T y pe menu. If yo u are us[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-16 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 5. Configure the VPN Client Authentication Proposal. In this step, you will provide the ty pe of encryption (DES o r 3DES) to be used for thi s connection. This selection mu st match your selection in the DG8 34 v3 con[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 17 v1.1, October 2006 a. Expand the Key Exchang e subheading by d ouble clicking its name or clicking on the “+” symbol. Then select Propo sal 1 below Key Exchange. b. In the SA Life menu, select Unspecified. c. In the Compression menu, select[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-18 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 T o check the VPN Connection, you can initiate a request from the remote PC to the DG834 v3’ s network by using the “Co nnect” option in the NETGEAR ProSafe menu bar . The NETGEAR ProSafe client will report the r[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 19 v1.1, October 2006 Information on the progress and status of the VPN client connection can be viewed by opening the NETGEAR ProSafe Log V iewer . 1. T o launch this function, click on the W indow s Start button, then select Programs, then NETGE[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-20 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 In this example you can see the following: • The DG834 v3 has a p ub lic IP W AN address of 22.23.24.25 . • The DG834 v3 has a LAN IP ad dres s of 192.168.3.1. • The VPN client PC has a dyna mically assigned addr[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 21 v1.1, October 2006 Set the LAN IPs on each DG834 v3 to differen t subnets and configure each properly for the Internet. The exampl es below assume th e followi ng settings: T able 6-1. VPN T unnel Configuration W orksheet Connection Name: GtoG [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-22 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 Follow this procedure to configure a gateway- to-gateway VPN tunnel using the VPN W izard. 1. Log in to the DG834 v3 on LAN A at its default LAN address of http://192.168. 0.1 with its default user name of ad min and p[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 23 v1.1, October 2006 3. Fill in the IP Address or F QDN for the ta rget VPN endpoint W AN co nnection and click Next . 4. Identify the IP addresses at the target endp oint which can use th is tunnel, and click Next . Figure 6-23 Figure 6-24 Enter[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-24 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 The Summary screen below displays. Figure 6-25[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 25 v1.1, October 2006 T o view the VPNC recommended authenticatio n and encryptio n se ttings used by the VPN W izard, click the “ here ” link (see Figure 6-25 ). Click Back to return to the Summary screen. 5. Click Done on the Summary screen [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-26 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 6. Repeat for the DG834 v3 on LA N B and pay sp ecial attention to use the following network settings as appropriate. • W AN IP of the remote VPN gateway (e.g., 14.15.16.17 ) • LAN IP settings of the remote VPN gat[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 27 v1.1, October 2006 b. Click on VPN Status ( Figu re 6-30 ) to get the Current VPN T unnels (SAs) screen ( Figure 6-29 ). Click on Connect for the VPN tunnel you want to activate. c. Look at the VPN Status/Log screen ( Figure 6-28 ) to verify th[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-28 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 Using the VPN St atus Page to Activate a VPN T unnel T o use the VPN Status screen to activate a VPN tunnel, perform the following steps: 1. Log in to the Modem Router. 2. Open the DG834 v3 management interface an d cl[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 29 v1.1, October 2006 Activate the VPN T unnel by Pinging the Remote End point T o activate the VPN tunnel by pinging the remote endpoint (e.g., 192.168.3. 1), do the following steps depending on whether your configuration is client -to-gateway or[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-30 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 Once the connection is establish ed, yo u can op en the browser of the PC and enter the LAN IP address of the remote DG834 v3. After a short wait, you should see the login screen of the Modem Router (unless another PC [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 31 v1.1, October 2006 Log—this log shows the details of recent VPN activity , includ ing the building of the VPN tunnel. If there is a problem with the VPN tunnel, refer to the log for information about what might be the cause of the prob lem. ?[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-32 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 • HLifeTime (Secs) —the remaining Hard Lifetime for this SA in seconds. When the Hard Lifetime becomes zero, the SA (Security Association) will be terminated. (It will be re- established if required.) Deactivating [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 33 v1.1, October 2006 Using the Policy T able on the VPN Policies Page to Deactivate a VPN T unnel T o use the VPN Policies page to deactivate a VPN tunnel, perform the following steps: 1. Log in to the Modem Router. 2. Open the DG83 4 v3 manage m[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-34 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 2. Open the DG834 v3 management interface an d click on VPN S tatus to get the VPN Statu s/Log screen ( Figure 6-38 ). 3. Click VPN S tatus ( Figu re 6-38 ) to get the Current VPN T unnels (SAs) screen ( Figure 6-39 ).[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 35 v1.1, October 2006 1. Log in to the Modem Router. 2. Open the DG834 v3 management interface and click VPN Policies to display the VPN Policies screen ( Figure 6-40 ). Select the radio button for th e VPN tunnel to be deleted and click the Delet[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-36 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 How to Set Up VPN T unnels in S pecial Circumstances When the VPN W izard and its VPNC de faults (see Ta b l e 6 - 2 ) are not appropriat e for your special circumstances, use one of the following alternatives: • Aut[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 37 v1.1, October 2006 Figure 6-41[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-38 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 The DG834 v3 VPN tunnel netw ork connection fields are de fin ed as follows: General. These settings identify this policy and determine i t s major characteristics. • Policy Name —Enter a unique name to identify th[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 39 v1.1, October 2006 • Single PC - no Subnet — select this option if there is no L AN (only a single PC) at the remote endpoint. If this option is selected, no additional data is requ ired. The typical application is a PC running the VPN clie[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-40 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 • Fully Qualified User Name — the name, E-mail address, or other ID of the remote VPN endpoint. Remote Identity Data —enter the data for the selection above. (If "IP Ad dress" is selected, no input is r[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 41 v1.1, October 2006 Example of Using Auto Policy 1. Set the LAN IPs on each DG834 v3 to differen t subnets and configure each properly for the Internet. The following settings are assumed for this example: Figure 6-42 T able 6-1. VPN T unnel Con[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-42 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 2. Open the DG834 v3 on LAN A management interface and click on VPN Policies. 3. Click Add Auto Policy . 4. Enter policy settings (see Figure 6-44 ). • General — Policy Name = GtoG — Remote VPN Endpoint Address T[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 43 v1.1, October 2006 — Pre-shared Key = 12345678 Figure 6-44[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-44 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 5. Click Apply . The Get VPN Policies web page is displayed. 6. Repeat for the DG834 v3 on LA N B and pay sp ecial attention to use the following network settings as appropriate. • General, Remote Address Data (e.g.,[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 45 v1.1, October 2006 a. Open the DG834 v3 management interface an d click on VPN Status to display the VPN St atus/Log screen ( Figu re 6-46 ). b. Click VPN S tatus ( Figu re 6-46 ) to display the Current VPN T unnels (SAs) screen ( Figure 6-47 )[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-46 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 Using Manual Policy to Configure VPN T u nnels As an alternative to IKE, you may use Manual Ke ying, in which you mu st specify each ph ase of the connectio n. A "Ma nu al " VPN policy requires all settings f[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 47 v1.1, October 2006 • Remote VPN Endpoint —s elect the desired option (IP addr ess or Fully Qualified Domain Name) and enter the address of the remote VP N endpoint to which you wish to connect. Note: The remote VPN endpoint must have this V[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-48 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006 Encryption —select the desired Encryption Algorithm, a nd enter the key in the field provided. For 3DES, the keys should be 24 ASCII characters and for DES, the keys sho uld be 8 ASCII characters. • DES—the Data [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Virtual Private Networking ( Advanced Feature) 6- 49 v1.1, October 2006[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 6-50 Virtual Private Networking (Adv anced Feature) v1.1, Octo b er 2006[...]

Troubleshooting 7-1 v1.1, October 2006 Chapter 7 T roubleshooting This chapter gives information about troubleshooting your DG834 ADSL Modem Rou ter. After each problem description, instructio ns are provided to help yo u diagnose and solve th e problem. For the common problems listed, go to the section indicated. • Is the router on? • Have I c[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 7-2 Troubleshooting v1.1, Octo b er 2006 c. The W AN port LED is lit. If a port’ s LED is lit, a link has been establis hed to the connected device. If a LAN por t is connected to a 100 Mbps device, verify that the port’ s LED is green. If the port is 10 Mbps, the LED will be amber . If[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Troubleshooting 7-3 v1.1, October 2006 • Be sure you are using the correct cable: — When connecting th e router ’ s W AN ADSL p ort , use the cable that was supplied with the DG834 v3. T roubleshooting the Web Configuration Interface If you are unable to acce ss the router ’ s W eb Config[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 7-4 Troubleshooting v1.1, Octo b er 2006 • Click the Refresh or Reload button in the W e b browser . The changes may have occurred, but the W eb browser may be caching the old configuration. T roubleshooting the ISP Connection If your router is unable to access the Internet , you should c[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Troubleshooting 7-5 v1.1, October 2006 Internet LED Off If the Internet LED is of f, disconnect all telephones on the lin e. If this solves the problem, reconnect the telephones one at a time, being careful to use a micr ofilter on each telephone. If the microfilters are connected correc tly , yo[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 7-6 Troubleshooting v1.1, Octo b er 2006 • Y our ISP ma y chec k for your computer's host name. Assign the computer Host Name of your ISP account to the modem router in the browser - based Setup W i zard. • Y our ISP only allows one Ethernet MAC address to connect to Internet, and [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Troubleshooting 7-7 v1.1, October 2006 T roubleshooting Internet Browsing If your modem router can obtain an IP address but your computer is unable to load any W eb pages from the Internet: • Y our computer may not recognize any DNS server addresses. A DNS server is a host on the Internet that [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 7-8 Troubleshooting v1.1, Octo b er 2006 Reply from < IP address >: bytes=32 time=NN ms TTL=xxx If the path is not working, you see this message: Request timed out If the path is not functioning correctly , you could have one of t he following problems: • W rong ph ysical connection[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 Troubleshooting 7-9 v1.1, October 2006 — Y our ISP c ould be rejecting the Ethernet MAC addresses of all but one of your PCs. Many broadband ISPs restrict access by only allo wing traffic from the MAC address of your broadband modem, but some IS Ps additionally restrict access to the MAC addres[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 7-10 Troubleshooting v1.1, Octo b er 2006 Problems with Date and Time The E-mail menu in the Content Filtering section displa ys the current date and time of day . The DG834 ADSL Modem Router uses the Network T ime Protocol (NTP) to obtain th e current time from one of several Network Time [...]

Technical Specifications A-1 v1.1, October 2006 Appendix A T echnical S pecifications This appendix provides technical specifications for the DG834 ADSL Modem Router. Network Protocol and St andards Compatibility Data and Routing Protocols: TC P/IP , RIP-1, RIP-2, DHCP , PPP over Ethernet (PPPoE) or PPP over A TM (PPPoA), RFC 1483 Bridged or Routed[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 A-2 T echnical Specifications v1.1, Octo b er 2006[...]

NETGEAR VPN Configuration B-1 v1.1, October 2006 Appendix B NETGEAR VPN Configuration DG834 v3 to FVL328 This appendix is a case study on how to configure a secure IPSec VPN tunnel from a NETGEAR DG834 v3 to a FVL328. This c ase study follows the VPN Consor tium interoperability profile guidelines (found at http://www .vpnc.or g/Inter opPr ofiles/I[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-2 NETGEAR VPN Configuration v1.1, Octo b er 2006 S tep-By-S tep Configuration 1. Configure the DG834 v3 as in the Gateway-to -Gateway procedures using the V PN W izard (see “How to Set Up a Gateway-to-Gatew ay VPN Configuration” on page 6-20 ), being certain to use appropriate network[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-3 v1.1, October 2006 Figure B-2 toFVL328 10.5.6.1 172.23. 9.1 toFVL328 22.23.24. 25 10 10 5 6 172 23 9 Click VPN Policies under Advanced - VPN to invoke this screen[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-4 NETGEAR VPN Configuration v1.1, Octo b er 2006 2. Configure the FVL328 as in the Gateway-to-Gatewa y procedures for the VPN W izard (se e “How to Set Up a Gateway-to-Gatew ay VPN Configuration” o n page 6-20 ), being certain to use appropriate network addresses for the environment. [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-5 v1.1, October 2006 Figure B-3 toDG834 toDG834 toDG834 toDG834 toDG834 22.23.24.25 14.15.16 .17 14.15.16.17 22.23.24.25 14.15.16.17 172.23.9.1 10.5.6.1 172 23 9 10 5 6 1 Click IKE Policies under VPN to invoke this screen Click VPN Policies under VPN to invoke this scr[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-6 NETGEAR VPN Configuration v1.1, Octo b er 2006 3. T est the VPN tunnel by pinging the remote network from a PC attached to the DG834 v3. a. Open the command prompt (S tart -> Run -> cmd) b. ping 172.23.9 .1 DG834 v3 with FQDN to FVL328 This appendix is a case study on how to conf [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-7 v1.1, October 2006 T able B-1. Profile Summary VPN Consortium Scenario: Scenario 1 T ype of VPN LAN-to-LAN or Gateway- to-Gateway (not PC/Client-to-Gateway) Security Scheme: IKE with Preshared Secret/Key (not Certificate-based) IP Addressing: NETGEAR-Gateway A Fully [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-8 NETGEAR VPN Configuration v1.1, Octo b er 2006 The Use of a Fully Qualified Domain Name (FQDN) Many ISPs (Internet Service Pr oviders) provide connectivity to their customers using dynamic instead of static IP addressing. This means that a user ’ s IP address does not remain co nstant[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-9 v1.1, October 2006 b. Configure this screen with appropriate ac count and hostname settings an d then click Apply . • Check the box Use a Dynamic DNS Service . • Host Name = dg834.dyndns.or g • User Name = < user's account username > • Password = &[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-10 NETGEAR VPN Configuration v1.1, Octo b er 2006 a. Browse to the Dynamic DNS Setup Screen (see Figure B-8 ) in the Advanced menu. b. Select the DynDNS.org radio button (see Figure B-8 ), configure with appropriate account and hostname settings (see Figure B-9 ), and then click Apply . ?[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-11 v1.1, October 2006 • Password = <user's account password> Figure B-9[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-12 NETGEAR VPN Configuration v1.1, Octo b er 2006 c. Click Show S tatus . The resulting screen should show Update OK: good (see Figure B-10 ). 5. Configure the DG834 v3 as in the Gateway-to -Gateway procedures using the V PN W izard (see “How to Set Up a Gateway-to-Gatew ay VPN Configur[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-13 v1.1, October 2006 a. In Step 1, enter toDG834 for the Connection Name. b. In Step 2, enter dg834.dyndns.org for the remote W AN's IP address. c. In Step 3, enter the following: • IP Address = 10.5.6.1 • Subnet Mask = 255.255.255. 0 7. T est the VPN tunnel [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-14 NETGEAR VPN Configuration v1.1, Octo b er 2006 Configuration Summary (T elecommuter Example) The configuration in this document follows the addressing and configuration mechanics defined by the VPN Consortium. Gather all the necessary information befo re you begin the configuration pro[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-15 v1.1, October 2006 Setting Up the Client-to-Gateway VPN Configuration (T elecommuter Example) Setting up a VPN between a remote PC runn ing the NETGEAR ProSafe VPN Client and a network gateway involves the following two steps: • St ep 1: Configuring the Client-to-[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-16 NETGEAR VPN Configuration v1.1, Octo b er 2006 Figure B-13 Fully Qualified Domain Name toDG834G .com (in this example) Fully Qualified Domain Name from DG834G .com (in this example) fromDG834G (in the exa mple) Dynamic IP address Subnet addr ess Single addr ess 192.168.0. 1 (in this ex[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-17 v1.1, October 2006 2. Click Apply when done to get the VPN Policies screen. T o view or modify the tunnel settings, select th e radio button next t o the tunnel entry and click Edit . S tep 2: Configuring the NETGE AR ProSafe VPN C lient on the Remote PC at the T el[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-18 NETGEAR VPN Configuration v1.1, Octo b er 2006 c. Install the IPSec Compon en t. Y ou may have the option to install eit her the VPN Adapter or the IPSec Component or both. The VPN Adapter is not necessary . d. The system should show the ProSafe icon ( ) in the system tray after reboot[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-19 v1.1, October 2006 c. Select Secur e in the Connection Security check box. d. Select IP Subnet in the ID T ype menu. e. In this example, type 192.168. 0.1 in the Subnet field as the network address of the DG834 v3. f. Enter 255.255.255.0 in the Mask field as the LAN[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-20 NETGEAR VPN Configuration v1.1, Octo b er 2006 b. Click on the Security Policy subheading to show the Security Policy menu. c. Select the Main Mode in the Select Phase 1 Negotiation Mode check box. 4. Configure the VPN Client Identity . In this step, you will provide information about [...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-21 v1.1, October 2006 a. In the Network Security Policy list on the left side of the Security Policy Editor window , click My Identity . b. Choose None in the Select Certificate menu. c. Select Domain Name in the ID T ype menu and enter toDG83 4G.com (in this example) [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-22 NETGEAR VPN Configuration v1.1, Octo b er 2006 e. Click the Pre-Shar ed Key button. In the Pr e-Shared Key dialog box, click the Enter Key button. Enter the DG834 v3's Pr e-Shared Key and click OK . In this example, 12345678 is entered. This field is case sensitive. 5. Configure t[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-23 v1.1, October 2006 b. Expand the Aut hentication subheading by d ouble clicking its name or clicking on the “+” symbol. Then select Propos al 1 below Authentication . c. In the Authentication Method menu, select Pre-Shar ed key . d. In the Encry pt A l g menu, s[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-24 NETGEAR VPN Configuration v1.1, Octo b er 2006 a. Expand the Key Exchange subheading by double clicking its name or c licking on the “+” symbol. Then select Propos al 1 below Key Ex chang e . b. In the SA Li fe menu, select Unspecified . c. In the Compression menu, select None . d.[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-25 v1.1, October 2006 8. Check the VPN Connection . T o check the VPN Connection , you can initiate a request from the remote PC to the VPN router ’ s network by using the Connect option in the DG834 ADSL Modem Router menu bar (see Figure B-22 ). Since the remote PC [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-26 NETGEAR VPN Configuration v1.1, Octo b er 2006 c. Ty p e ping -t 192.168.0.1 , and then click OK . This will cause a continuous ping to be sent to the VPN router . After between several seconds and two minutes, the pi ng response should change from timed out to rep l y . Once the conne[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-27 v1.1, October 2006 Monitoring the VPN T unnel (T elecommuter Example) V iewing the PC Client’ s Conn ection Monitor and Log V iewer T o view information on the progress and stat us of the VPN client conn ection, open the DG834 ADSL Modem Router Log V iewer . 1. T [...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-28 NETGEAR VPN Configuration v1.1, Octo b er 2006 V iewing the VPN Router ’ s VPN St atus and Log Information T o view information on the status of the VPN client co nnection, open the VPN router ’ s VPN Status screen by following the steps below: 1. T o view this screen, click the Ro[...]

Reference Manual for the ADSL Mo dem Router DG834 v3 NETGEAR VPN Configuration B-29 v1.1, October 2006 2. T o view the VPN tunnels status, click the VPN S tatus link on the right side of the main menu. Current VPN T unnels (SAs) screen Figure B-27[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 B-30 NETGEAR VPN Configuration v1.1, Octo b er 2006[...]

Related Documents C-1 v1.1, October 2006 Appendix C Related Document s This appendix provides links to reference documents you c an use to gain a more com ple te understanding of the technolog ies used in your NET GEAR product. Document Link Internet Networking and TCP/IP Addressing: http://docum entation.netgear .com/ reference/enu/tcpip/index.htm[...]

Reference Ma n ual for th e ADSL Mod em Ro ut er DG83 4 v3 C-2 Related Documents v1.1, Octo b er 2006[...]