NETGEAR DG834GSP Manuel utilisateur
NETGEAR VPN Configuration B-1
v1.0, June 2007
Appendix B
NETGEAR VPN Configuration
DG834GSP to FVL328
This appendix is a case study on how to configure a secure IPSec VPN tunnel from a NETGEAR
DG834GSP to a FVL328. This case study follows the VPN Consortium interoperability profile
guidelines (found at http://www.vpnc.org/InteropProfiles/Interop-01.html).
Configuration Profile
The configuration in this document follows the addressing and configuration mechanics defined
by the VPN Consortium. Gather all the necessary information before you begin the configuration
process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and
all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.
Table B-1. Profile Summary
VPN Consortium Scenario: Scenario 1
Type of VPN LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)
Security Scheme: IKE with Preshared Secret/Key (not Certificate-based)
IP Addressing:
NETGEAR-Gateway A Static IP address
NETGEAR-Gateway B Static IP address
Reference Manual for the ADSL Modem Wireless Router DG834GSP
B-2 NETGEAR VPN Configuration
v1.0, June 2007
Step-By-Step Configuration
1. Configure the DG834GSP as in the Gateway-to-Gateway procedures using the VPN Wizard
(see “How to Set Up a Gateway-to-Gateway VPN Configuration” on page 8-21), being certain
to use appropriate network addresses for the environment.
The LAN Addresses used in this example are as follows:
a. In Step 1, enter toFVL328 for the Connection Name.
b. In Step 2, enter 22.23.24.25 for the remote WAN's IP address.
c. In Step 3, enter the following:
• IP Address = 172.23.9.1
• Subnet Mask = 255.255.255.0
Figure B-1
Note: Product updates are available on the NETGEAR, Inc. web site at
http://kbserver.netgear.com/DG834GSP.asp.
Unit WAN IP LAN IP LAN Subnet Mask
DG834G 14.15.16.17 10.5.6.1 255.255.255.0
FVL328 22.13.24.25 172.23.9.1 255.255.255.0
Gateway A
22.23.24.25
14.15.16.17
10.5.6.0/24 172.23.9.0/24
172.23.9.110.5.6.1
WAN IP WAN IP LAN IPLAN IP
Gateway B
VPNC Example
Network Interface Addressing
DG834G FVL328
Reference Manual for the ADSL Modem Wireless Router DG834GSP
NETGEAR VPN Configuration B-3
v1.0, June 2007
Figure B-2
toFVL328 10.5.6.1 172.23.9.1
toFVL328
22.23.24.25
10
10 5 6
172 23 9
Click VPN Policies under
Advanced - VPN to invoke
this screen
Reference Manual for the ADSL Modem Wireless Router DG834GSP
B-4 NETGEAR VPN Configuration
v1.0, June 2007
2. Configure the FVL328 as in the Gateway-to-Gateway procedures for the VPN Wizard (see
“How to Set Up a Gateway-to-Gateway VPN Configuration” on page 8-21), being certain to
use appropriate network addresses for the environment.
a. In Step 1, enter toDG834 for the Connection Name
b. In Step 2, enter 14.15.16.17 for the remote WAN's IP address
c. In Step 3, enter the following:
• IP Address = 10.5.6.1
• Subnet Mask = 255.255.255.0
Reference Manual for the ADSL Modem Wireless Router DG834GSP
NETGEAR VPN Configuration B-5
v1.0, June 2007
Figure B-3
toDG834
toDG834
toDG834
toDG834
toDG834
22.23.24.25 14.15.16.17
14.15.16.17
22.23.24.25
14.15.16.17
172.23.9.1 10.5.6.1
172 23 9
10 5 6
1
Click IKE Policies under
VPN to invoke this screen
Click VPN Policies under
VPN to invoke this screen
Reference Manual for the ADSL Modem Wireless Router DG834GSP
B-6 NETGEAR VPN Configuration
v1.0, June 2007
3. Test the VPN tunnel by pinging the remote network from a PC attached to the DG834GSP.
a. Open the command prompt (Start -> Run -> cmd)
b. ping 172.23.9.1
DG834GSP with FQDN to FVL328
This appendix is a case study on how to configure a VPN tunnel from a NETGEAR DG834GSP to
a FVL328 using a Fully Qualified Domain Name (FQDN) to resolve the public address of one or
both routers. This case study follows the VPN Consortium interoperability profile guidelines
(found at http://www.vpnc.org/InteropProfiles/Interop-01.html).
Configuration Profile
The configuration in this document follows the addressing and configuration mechanics defined
by the VPN Consortium. Gather all the necessary information before you begin the configuration
process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and
all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.
Figure B-4
Note: The pings may fail the first time. If this happens, try the pings a second
time.
Reference Manual for the ADSL Modem Wireless Router DG834GSP
NETGEAR VPN Configuration B-7
v1.0, June 2007
Table B-2. Profile Summary
VPN Consortium Scenario: Scenario 1
Type of VPN LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)
Security Scheme: IKE with Preshared Secret/Key (not Certificate-based)
IP Addressing:
NETGEAR-Gateway A Fully Qualified Domain Name (FQDN)
NETGEAR-Gateway B FDQN
Figure B-5
Note: Product updates are available on the NETGEAR, Inc. web site at
http://kbserver.netgear.com/DG834GSP.asp.
Gateway A
fvl328.dyndns.org
dg834g.dyndns.org
10.5.6.0/24 172.23.9.0/24
172.23.9.110.5.6.1
WAN IP WAN IP LAN IPLAN IP
Gateway B
VPNC Example
Network Interface Addressing
DG834G FVL328
(FQDN) (FQDN)
Reference Manual for the ADSL Modem Wireless Router DG834GSP
B-8 NETGEAR VPN Configuration
v1.0, June 2007
The Use of a Fully Qualified Domain Name (FQDN)
Many ISPs (Internet Service Providers) provide connectivity to their customers using dynamic
instead of static IP addressing. This means that a user’s IP address does not remain constant over
time which presents a challenge for gateways attempting to establish VPN connectivity.
A Dynamic DNS (DDNS) service allows a user whose public IP address is dynamically assigned
to be located by a host or domain name. It provides a central public database where information
(such as email addresses, host names and IP addresses) can be stored and retrieved. Now, a
gateway can be configured to use a 3rd party service in lieu of a permanent and unchanging IP
address to establish bi-directional VPN connectivity.
To use DDNS, you must register with a DDNS service provider. Example DDNS Service
Providers include:
• DynDNS: www.dyndns.org
• TZO.com: netgear.tzo.com
• ngDDNS: ngddns.iego.net
In this example, Gateway A is configured using an example FQDN provided by a DDNS Service
provider. In this case we established the hostname dg834g.dyndns.org for gateway A using the
DynDNS service. Gateway B will use the DDNS Service Provider when establishing a VPN
tunnel.
In order to establish VPN connectivity Gateway A must be configured to use Dynamic DNS, and
Gateway B must be configured to use a DNS hostname to find Gateway A provided by a DDNS
Service Provider. Again, the following step-by-step procedures assume that you have already
registered with a DDNS Service Provider and have the configuration information necessary to set
up the gateways.
Step-By-Step Configuration
1. Log in to the DG834GSP labeled Gateway A as in the illustration.
Out of the box, the DG834GSP is set for its default LAN address of http://10.1.1.1 with its
default user name of admin and default password of password. For this example we will
assume you have set the local LAN address as 10.5.6.1 for Gateway A and have set your own
password.
2. Click on the Dynamic DNS link on the left side of the Settings management GUI. This will
take you to the Dynamic DNS Menu.
Reference Manual for the ADSL Modem Wireless Router DG834GSP
NETGEAR VPN Configuration B-9
v1.0, June 2007
3. On the DG834GSP, configure the Dynamic DNS settings.
a. Browse to the Dynamic DNS Setup Screen (see Figure B-6) in the Advanced menu.
b. Configure this screen with appropriate account and hostname settings and then click
Apply.
• Check the box Use a Dynamic DNS Service.
• Host Name = dg834g.dyndns.org
• User Name = <user's account username>
• Password = <user's account password>
c. Click Show Status. The resulting screen should show Update OK: good (see Figure B-7).
Figure B-6
Figure B-7
Reference Manual for the ADSL Modem Wireless Router DG834GSP
B-10 NETGEAR VPN Configuration
v1.0, June 2007
4. On the FVL328, configure the Dynamic DNS settings. Assume a properly configured
DynDNS account.
a. Browse to the Dynamic DNS Setup Screen (see Figure B-8) in the Advanced menu.
b. Select the DynDNS.org radio button (see Figure B-8), configure with appropriate account
and hostname settings (see Figure B-9), and then click Apply.
• Host and Domain Name = fvl328.dyndns.org
• User Name = <user's account username>
• Password = <user's account password>
Figure B-8
Autres manuels pour DG834GSP
1
Ce manuel convient aux modèles suivants
1
Table des matières
Autres manuels NETGEAR Modem
NETGEAR
NETGEAR GS908E Manuel utilisateur
NETGEAR
NETGEAR 341U Manuel utilisateur
NETGEAR
NETGEAR DM111P - ADSL2+ Ethernet Modem Guide de l'utilisateur
NETGEAR
NETGEAR D6220 Manuel utilisateur
NETGEAR
NETGEAR ATT-340U Manuel utilisateur
NETGEAR
NETGEAR 7550 Manuel utilisateur
NETGEAR
NETGEAR DGFV338 - ProSafe Wireless ADSL Modem VPN Firewall... Manuel utilisateur
NETGEAR
NETGEAR JDGN1000 Manuel
NETGEAR
NETGEAR DG834GVSP Guide de l'utilisateur
NETGEAR
NETGEAR C6300v2 Manuel utilisateur
NETGEAR
NETGEAR MBM621 - 3G HSDPA Ethernet Modem Manuel utilisateur
NETGEAR
NETGEAR LB2120-100AUS Manuel utilisateur
NETGEAR
NETGEAR Nighthawk CM3000 Manuel utilisateur
NETGEAR
NETGEAR CM400 Manuel utilisateur
NETGEAR
NETGEAR CG814M Manuel utilisateur
NETGEAR
NETGEAR CM700 Manuel utilisateur
NETGEAR
NETGEAR Telstra Wi-Fi 4G Advanced II AirCard 790S Manuel utilisateur
NETGEAR
NETGEAR CM212 Manuel utilisateur
NETGEAR
NETGEAR DM200 Manuel utilisateur
NETGEAR
NETGEAR D6400 Manuel utilisateur
Manuels Modem populaires d'autres marques
Davicom
Davicom DM562AP Manuel utilisateur
EpiValley
EpiValley TATA indicom SXC-1080 Manuel utilisateur
Zte
Zte WiMAX Manuel utilisateur
Intelimax
Intelimax MA-2060 Manuel utilisateur
SMC Networks
SMC Networks D3CM1604V Manuel d'utilisation et d'entretien
Telstra
Telstra Wi-Fi 4G Advanced Pro X Manuel utilisateur
US Robotics
US Robotics 3453C Manuel utilisateur
MaxTech
MaxTech Plug & Play Internal Voice/FAX/Data/SVD... Manuel utilisateur
Zte
Zte MF823 Manuel utilisateur
Four-Faith
Four-Faith F1403 Manuel utilisateur
Sierra Wireless
Sierra Wireless AIRLINK MP595W Manuel utilisateur
Gemtek
Gemtek WiMAX WIXFBR-103 Manuel utilisateur