NETGEAR DG834GSP Bedienungsanleitung

NETGEAR VPN Configuration B-1

v1.0, June 2007

Appendix B

NETGEAR VPN Configuration

DG834GSP to FVL328

This appendix is a case study on how to configure a secure IPSec VPN tunnel from a NETGEAR

DG834GSP to a FVL328. This case study follows the VPN Consortium interoperability profile

guidelines (found at http://www.vpnc.org/InteropProfiles/Interop-01.html).

Configuration Profile

The configuration in this document follows the addressing and configuration mechanics defined

by the VPN Consortium. Gather all the necessary information before you begin the configuration

process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and

all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.

Table B-1. Profile Summary

VPN Consortium Scenario: Scenario 1

Type of VPN LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)

Security Scheme: IKE with Preshared Secret/Key (not Certificate-based)

IP Addressing:

NETGEAR-Gateway A Static IP address

NETGEAR-Gateway B Static IP address

Reference Manual for the ADSL Modem Wireless Router DG834GSP

B-2 NETGEAR VPN Configuration

v1.0, June 2007

Step-By-Step Configuration

1. Configure the DG834GSP as in the Gateway-to-Gateway procedures using the VPN Wizard

(see “How to Set Up a Gateway-to-Gateway VPN Configuration” on page 8-21), being certain

to use appropriate network addresses for the environment.

The LAN Addresses used in this example are as follows:

a. In Step 1, enter toFVL328 for the Connection Name.

b. In Step 2, enter 22.23.24.25 for the remote WAN's IP address.

c. In Step 3, enter the following:

• IP Address = 172.23.9.1

• Subnet Mask = 255.255.255.0

Figure B-1

Note: Product updates are available on the NETGEAR, Inc. web site at

http://kbserver.netgear.com/DG834GSP.asp.

Unit WAN IP LAN IP LAN Subnet Mask

DG834G 14.15.16.17 10.5.6.1 255.255.255.0

FVL328 22.13.24.25 172.23.9.1 255.255.255.0

Gateway A

22.23.24.25

14.15.16.17

10.5.6.0/24 172.23.9.0/24

172.23.9.110.5.6.1

WAN IP WAN IP LAN IPLAN IP

Gateway B

VPNC Example

Network Interface Addressing

DG834G FVL328

Reference Manual for the ADSL Modem Wireless Router DG834GSP

NETGEAR VPN Configuration B-3

v1.0, June 2007

Figure B-2

toFVL328 10.5.6.1 172.23.9.1

toFVL328

22.23.24.25

10 5 6

172 23 9

Click VPN Policies under

Advanced - VPN to invoke

this screen

Reference Manual for the ADSL Modem Wireless Router DG834GSP

B-4 NETGEAR VPN Configuration

v1.0, June 2007

2. Configure the FVL328 as in the Gateway-to-Gateway procedures for the VPN Wizard (see

“How to Set Up a Gateway-to-Gateway VPN Configuration” on page 8-21), being certain to

use appropriate network addresses for the environment.

a. In Step 1, enter toDG834 for the Connection Name

b. In Step 2, enter 14.15.16.17 for the remote WAN's IP address

c. In Step 3, enter the following:

• IP Address = 10.5.6.1

• Subnet Mask = 255.255.255.0

Reference Manual for the ADSL Modem Wireless Router DG834GSP

NETGEAR VPN Configuration B-5

v1.0, June 2007

Figure B-3

toDG834

22.23.24.25 14.15.16.17

14.15.16.17

22.23.24.25

14.15.16.17

172.23.9.1 10.5.6.1

172 23 9

10 5 6

Click IKE Policies under

VPN to invoke this screen

Click VPN Policies under

VPN to invoke this screen

Reference Manual for the ADSL Modem Wireless Router DG834GSP

B-6 NETGEAR VPN Configuration

v1.0, June 2007

3. Test the VPN tunnel by pinging the remote network from a PC attached to the DG834GSP.

a. Open the command prompt (Start -> Run -> cmd)

b. ping 172.23.9.1

DG834GSP with FQDN to FVL328

This appendix is a case study on how to configure a VPN tunnel from a NETGEAR DG834GSP to

a FVL328 using a Fully Qualified Domain Name (FQDN) to resolve the public address of one or

both routers. This case study follows the VPN Consortium interoperability profile guidelines

(found at http://www.vpnc.org/InteropProfiles/Interop-01.html).

Configuration Profile

The configuration in this document follows the addressing and configuration mechanics defined

by the VPN Consortium. Gather all the necessary information before you begin the configuration

process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and

all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.

Figure B-4

Note: The pings may fail the first time. If this happens, try the pings a second

time.

Reference Manual for the ADSL Modem Wireless Router DG834GSP

NETGEAR VPN Configuration B-7

v1.0, June 2007

Table B-2. Profile Summary

VPN Consortium Scenario: Scenario 1

Type of VPN LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)

Security Scheme: IKE with Preshared Secret/Key (not Certificate-based)

IP Addressing:

NETGEAR-Gateway A Fully Qualified Domain Name (FQDN)

NETGEAR-Gateway B FDQN

Figure B-5

Note: Product updates are available on the NETGEAR, Inc. web site at

http://kbserver.netgear.com/DG834GSP.asp.

Gateway A

fvl328.dyndns.org

dg834g.dyndns.org

10.5.6.0/24 172.23.9.0/24

172.23.9.110.5.6.1

WAN IP WAN IP LAN IPLAN IP

Gateway B

VPNC Example

Network Interface Addressing

DG834G FVL328

(FQDN) (FQDN)

Reference Manual for the ADSL Modem Wireless Router DG834GSP

B-8 NETGEAR VPN Configuration

v1.0, June 2007

The Use of a Fully Qualified Domain Name (FQDN)

Many ISPs (Internet Service Providers) provide connectivity to their customers using dynamic

instead of static IP addressing. This means that a user’s IP address does not remain constant over

time which presents a challenge for gateways attempting to establish VPN connectivity.

A Dynamic DNS (DDNS) service allows a user whose public IP address is dynamically assigned

to be located by a host or domain name. It provides a central public database where information

(such as email addresses, host names and IP addresses) can be stored and retrieved. Now, a

gateway can be configured to use a 3rd party service in lieu of a permanent and unchanging IP

address to establish bi-directional VPN connectivity.

To use DDNS, you must register with a DDNS service provider. Example DDNS Service

Providers include:

• DynDNS: www.dyndns.org

• TZO.com: netgear.tzo.com

• ngDDNS: ngddns.iego.net

In this example, Gateway A is configured using an example FQDN provided by a DDNS Service

provider. In this case we established the hostname dg834g.dyndns.org for gateway A using the

DynDNS service. Gateway B will use the DDNS Service Provider when establishing a VPN

tunnel.

In order to establish VPN connectivity Gateway A must be configured to use Dynamic DNS, and

Gateway B must be configured to use a DNS hostname to find Gateway A provided by a DDNS

Service Provider. Again, the following step-by-step procedures assume that you have already

registered with a DDNS Service Provider and have the configuration information necessary to set

up the gateways.

Step-By-Step Configuration

1. Log in to the DG834GSP labeled Gateway A as in the illustration.

Out of the box, the DG834GSP is set for its default LAN address of http://10.1.1.1 with its

default user name of admin and default password of password. For this example we will

assume you have set the local LAN address as 10.5.6.1 for Gateway A and have set your own

password.

2. Click on the Dynamic DNS link on the left side of the Settings management GUI. This will

take you to the Dynamic DNS Menu.

Reference Manual for the ADSL Modem Wireless Router DG834GSP

NETGEAR VPN Configuration B-9

v1.0, June 2007

3. On the DG834GSP, configure the Dynamic DNS settings.

a. Browse to the Dynamic DNS Setup Screen (see Figure B-6) in the Advanced menu.

b. Configure this screen with appropriate account and hostname settings and then click

Apply.

• Check the box Use a Dynamic DNS Service.

• Host Name = dg834g.dyndns.org

• User Name = <user's account username>

• Password = <user's account password>

c. Click Show Status. The resulting screen should show Update OK: good (see Figure B-7).

Figure B-6

Figure B-7

Reference Manual for the ADSL Modem Wireless Router DG834GSP

B-10 NETGEAR VPN Configuration

v1.0, June 2007

4. On the FVL328, configure the Dynamic DNS settings. Assume a properly configured

DynDNS account.

a. Browse to the Dynamic DNS Setup Screen (see Figure B-8) in the Advanced menu.

b. Select the DynDNS.org radio button (see Figure B-8), configure with appropriate account

and hostname settings (see Figure B-9), and then click Apply.

• Host and Domain Name = fvl328.dyndns.org

• User Name = <user's account username>

• Password = <user's account password>

Figure B-8

Andere Handbücher für DG834GSP

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere NETGEAR Modem Handbücher

NETGEAR

NETGEAR CM400 Bedienungsanleitung

NETGEAR

NETGEAR 341U Bedienungsanleitung

NETGEAR

NETGEAR Netgear DM11PSP Bedienungsanleitung

NETGEAR

NETGEAR CM700 Bedienungsanleitung

NETGEAR

NETGEAR CM1000 Bedienungsanleitung

NETGEAR

NETGEAR CVG824G-1STAUS Bedienungsanleitung

NETGEAR

NETGEAR CM500 Bedienungsanleitung

NETGEAR

NETGEAR DGFV338 - ProSafe Wireless ADSL Modem VPN Firewall... Bedienungsanleitung

NETGEAR

NETGEAR AirCard 340U Bedienungsanleitung

NETGEAR

NETGEAR CG3000 Produktinformationsblatt

NETGEAR

NETGEAR DM111Pv2 - ADSL2+ Ethernet Modem Benutzerhandbuch

NETGEAR

NETGEAR NIGHTHAWK CM2000 Bedienungsanleitung

NETGEAR

NETGEAR FVL328 - Cable/DSL ProSafe VPN Firewall... Bedienungsanleitung

NETGEAR

NETGEAR DG834PN - RangeMax ADSL Modem Wireless... Benutzerhandbuch

NETGEAR

NETGEAR D3600 Bedienungsanleitung

NETGEAR

NETGEAR CM600 Bedienungsanleitung

NETGEAR

NETGEAR Nighthawk D7000 Bedienungsanleitung

NETGEAR

NETGEAR CM500 Bedienungsanleitung

NETGEAR

NETGEAR AirCard 785S Bedienungsanleitung

NETGEAR

NETGEAR DM111P - ADSL2+ Ethernet Modem Bedienungsanleitung

NETGEAR

NETGEAR AC329U Bedienungsanleitung

NETGEAR

NETGEAR DG814 - DSL Modem Internet Gateway Bedienungsanleitung

NETGEAR

NETGEAR cg3000-2staus Bedienungsanleitung

NETGEAR

NETGEAR Nighthawk CM2050V Bedienungsanleitung

Beliebte Modem Handbücher anderer Marken

Davicom

Davicom DM562AP Bedienungsanleitung

Zte

Zte WiMAX Bedienungsanleitung

Intelimax

Intelimax MA-2060 Bedienungsanleitung

SMC Networks

SMC Networks D3CM1604V Gebrauchs- und Pflegehandbuch

Telstra

Telstra Wi-Fi 4G Advanced Pro X Bedienungsanleitung

Thrane&Thrane

Thrane&Thrane imarsat EXPLORER 300 Bedienungsanleitung

Samsung

Samsung AceLink SAM-335A Bedienungsanleitung

Enfora

Enfora Enabler-G Kurzanleitung zur Einrichtung

iRZ

iRZ ATM2-232 Bedienungsanleitung

Zhone

Zhone 6310 Bedienungsanleitung

Paradyne

Paradyne Hotwire 7976 Bedienungsanleitung

US Robotics

US Robotics 3453C Bedienungsanleitung

MaxTech

MaxTech Plug & Play Internal Voice/FAX/Data/SVD... Bedienungsanleitung

Zte

Zte MF823 Bedienungsanleitung

Four-Faith

Four-Faith F1403 Bedienungsanleitung

Sierra Wireless

Sierra Wireless AIRLINK MP595W Bedienungsanleitung

Gemtek

Gemtek WiMAX WIXFBR-103 Bedienungsanleitung

Zoom

Zoom 1070 Series Bedienungsanleitung