Manuel d'utilisation / d'entretien du produit DG834 ADSL Firewall Router DG834 DG834 du fabricant NETGEAR
Aller à la page of 236
202-10005 -0 5, June 2005 202-10005-05 June 2005 NETGEAR , Inc. 4500 Great America Parkway Santa Clara, CA 95 054 USA Phone 1-888-NETGEAR Reference Manual for the ADSL Firewall Router DG834.
ii 202-10005 -0 5, June 2005 © 2005 by NETGEAR, Inc. All rights reserved. T rademarks NETGEAR is a t rademark of Netgear , Inc. Microsoft, W indows, and W indow s NT are registered trademar ks of Microsoft Corporation. Other brand and product names are registered tradem arks or trad emarks of their respective holders.
202-10005 -0 5, June 2005 iii Es wird hiermit bestätigt, daß da s DG834 ADSL Firewall Router gemäß de r im BMP T -AmtsblVfg 243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschrifts mäßige Betreiben ei niger Geräte (z.B.
202-10005-05, Jun e 20 05 iv.
Contents v 202-10005-0 5, June 2005 Content s Chapter 1 About This Manual Audience, Scope, Conventions, and Formats . ......... ............. ................. ............ ............ 1-1 How to Use This Manual ............. ................. ......
202-10005-05 , June 2005 vi Contents Record Y our Internet Connec tion Information .... ................. ................ ................ ..... 3-3 Connecting the DG834 to Y o ur LAN ... ... ... .... ... ... ... ............. ... .... ... ... ... ..
Contents vii 202-10005-0 5, June 2005 How to Set Y our T ime Zone ...... ................ ............. ................ ................ ............. ... 4-13 How to Schedule Firewall Services .... ....... ...... ............. ............. ........
202-10005-05 , June 2005 viii Contents Reserved IP addresses ............ ................ ................ ................. ............ ............ 6-6 How to Configure LAN TCP/IP S ettings .... ................ ................ ................ .
Contents ix 202-10005-0 5, June 2005 Chapter 8 T roubleshooting Basic Functioning .................. ................ ............. ................ ................ ............. ............... 8- 1 Power LED Not On ............. ................ ..
202-10005-05 , June 2005 x Contents Domain Name Server ... ................ ............. ................ ................ ............. ................ . B-9 IP Configuration by DHCP .... .... ... ... ... .... ............ .... ... ... ... .... ...
Contents xi 202-10005-0 5, June 2005 Appendix D Vi rtual Private Networking What is a VPN? .............. ................. ................ ............. ................ ............. ................ .... D-1 What Is IPSec and How Does It Work? ...
202-10005-05 , June 2005 xii Contents S tep 2: Config urin g the NETGEAR ProSafe VPN Client on the Remote PC at the T e lec ommut er ’s Home Office .... ... ... ... .... ... ... ... ............. ... .... ... ... ... .... ... ... ............. .. E-17 Monitoring the VPN T unnel (T elecommuter Ex ample) .
About This Manual 1-1 202-10005-0 5, June 2005 Chapter 1 About This Manual This chapter describes the intended audience, sc ope, conventions, and formats of this manual. Audience, Scope, Conventions, and Format s This reference manual assumes that the reader h as basic to interme diate computer and Internet skills.
Reference Manual for the ADSL Firewall Router DG834 1-2 About This Manual 202-10005-05, June 2005 How to Use This Manual The HTML version of this ma nual includes the following: • Buttons, and , for browsing forw ards or backwards throu gh the manual one p age at a time • A button that displays the table of cont ents and an button.
Reference Manual for the ADSL Firewall Router DG834 About This Manual 1-3 202-10005-0 5, June 2005 How to Print this Manual T o print this manual you can choose one of the fo llowing several options, a ccording to your needs. • Printing a Page in the HTML V iew .
Reference Manual for the ADSL Firewall Router DG834 1-4 About This Manual 202-10005-05, June 2005.
Introduction 2-1 202-10005-0 5, June 2005 Chapter 2 Introduction This chapter describes the features of the N ETGEAR DG834 ADSL Firewall Router. The DG834 ADSL router is a combination of a built-in AD.
Reference Manual for the ADSL Firewall Router DG834 2-2 Introduction 202-10005-05, June 2005 • Extensive Internet protoco l support • T rustworthy VPN Communic ations over the Internet • VPN W i.
Reference Manual for the ADSL Firewall Router DG834 Introduction 2-3 202-10005-0 5, June 2005 • Remote management The router all ows you to log in to the W eb management interface from a remot e location via the Internet.
Reference Manual for the ADSL Firewall Router DG834 2-4 Introduction 202-10005-05, June 2005 • PPP over Ethernet (PPPoE) PPP over Ethernet is a protocol for connecting remote hosts to the Internet over an ADSL connection by simulating a dial-up connection.
Reference Manual for the ADSL Firewall Router DG834 Introduction 2-5 202-10005-0 5, June 2005 Auto Sensing and Auto Uplin k™ LAN Ethernet Connections W ith its internal 4-port 10/100 switch, th e DG834 can co nnect to either a 10 Mbps stan dard Ethernet network or a 100 M bps Fast Ethernet network.
Reference Manual for the ADSL Firewall Router DG834 2-6 Introduction 202-10005-05, June 2005 Figure 2-1: DG834 Front Pan el Y ou can use the LEDs to verify various conditions. Ta b l e 2 - 1 lists and des cribe s each LED on the front panel of the router.
Reference Manual for the ADSL Firewall Router DG834 Introduction 2-7 202-10005-0 5, June 2005 Figure 2-2: DG834 Rear Panel V iewed from left to right, the rear panel contains the following elements: .
Reference Manual for the ADSL Firewall Router DG834 2-8 Introduction 202-10005-05, June 2005.
Connecting the Router to the Internet 3-1 202-10005-0 5, June 2005 Chapter 3 Connecting the Router to the Internet This chapter describes how to set up the router on your Local Area Network (LAN) and connect to the Internet.
Reference Manual for the ADSL Firewall Router DG834 3-2 Connecting the Router to the In ternet 202-10005-05, June 2005 Each device such as a telephone, fax machine, answering machine, or caller ID display will require an ADSL microfilter .
Reference Manual for the ADSL Firewall Router DG834 Connectin g the R oute r to the Internet 3-3 202-10005-0 5, June 2005 Internet Configuration Requirement s Depending on how your ISP set up your Int.
Reference Manual for the ADSL Firewall Router DG834 3-4 Connecting the Router to the In ternet 202-10005-05, June 2005 ISP Multiplexing Method and V irtual Circuit Number: The default settings of your DG834 ADSL Firewall Router will work fine for most ISPs.
Reference Manual for the ADSL Firewall Router DG834 Connectin g the R oute r to the Internet 3-5 202-10005-0 5, June 2005 Note: The Resource CD included with your router contains an animated Installation Assistant to help you throug h this procedure. How to Connect the Router There are four steps to connecting your firewall: 1.
Reference Manual for the ADSL Firewall Router DG834 3-6 Connecting the Router to the In ternet 202-10005-05, June 2005 . Figure 3-4: Connectin g an ADSL microfilter and phone Note: T o use a one-line .
Reference Manual for the ADSL Firewall Router DG834 Connectin g the R oute r to the Internet 3-7 202-10005-0 5, June 2005 c. Connect the Ethernet cable ( C) from your DG834’ s LAN port to the Ethernet adapter in your computer .
Reference Manual for the ADSL Firewall Router DG834 3-8 Connecting the Router to the In ternet 202-10005-05, June 2005 3. L OG IN TO THE DG834. Note: Y our computer needs to be co nfigured for DHCP . For instructions on configurin g for DHCP , please see Appendix C, “Preparing Y our Network” .
Reference Manual for the ADSL Firewall Router DG834 Connectin g the R oute r to the Internet 3-9 202-10005-0 5, June 2005 Figure 3-9: Setup Wi zard 4. C ONNECT TO THE I NTER NET The router is now properly attached to your network. Y ou are now ready to configure your router to connect to the Internet.
Reference Manual for the ADSL Firewall Router DG834 3-10 Connecting the Router to the Intern et 202-10005-05, June 2005 Note: If instead of the Setup W izard menu, the main menu of the rout er’ s Configuration Manager as shown in Figure 3-15 appears, click the Setup W izard link in the upper left to bring up this menu.
Reference Manual for the ADSL Firewall Router DG834 Connectin g th e Rou te r to the In te rn et 3-11 202-10005-0 5, June 2005 Figure 3-10: Setup W izard menu for PPPoE login account s Enter the PPPoE login user name and password.
Reference Manual for the ADSL Firewall Router DG834 3-12 Connecting the Router to the Intern et 202-10005-05, June 2005 Figure 3-12: Setup W izard menu for Dynamic IP address Click Apply to set Dynamic IP as the connection method.
Reference Manual for the ADSL Firewall Router DG834 Connectin g th e Rou te r to the In te rn et 3-13 202-10005-0 5, June 2005 4. Click the T est button to test your Internet connecti on. If the NETGEAR W eb sit e does not appear within one minute, refer to Chapter 8, “T roubleshooting” .
Reference Manual for the ADSL Firewall Router DG834 3-14 Connecting the Router to the Intern et 202-10005-05, June 2005 DNS servers are required to perform the functio n of translating an Internet name such as www .netgear .com to a numeric IP address.
Reference Manual for the ADSL Firewall Router DG834 Connectin g th e Rou te r to the In te rn et 3-15 202-10005-0 5, June 2005 Figure 3-15: Basic Settings menu How to Perform Manual Configuration W e recommend that you start the manu al configuration from the Setup W izard: 1.
Reference Manual for the ADSL Firewall Router DG834 3-16 Connecting the Router to the Intern et 202-10005-05, June 2005 • Internet Connection Does No t Require a Login 6. Usually the default ADSL Settings work fine for most ISPs and you can skip this st ep.
Reference Manual for the ADSL Firewall Router DG834 Connectin g th e Rou te r to the In te rn et 3-17 202-10005-0 5, June 2005 Note : Disabling NA T will reboot the router and re set all the DG834 conf iguration settings to the factory default.
Reference Manual for the ADSL Firewall Router DG834 3-18 Connecting the Router to the Intern et 202-10005-05, June 2005 Internet Connection Does Note Req uire A Login 1. If your Internet connection does not require a login, select No a nd fill in the settings according to the instructions below .
Reference Manual for the ADSL Firewall Router DG834 Connectin g th e Rou te r to the In te rn et 3-19 202-10005-0 5, June 2005 6. Router MAC Address: This section determines the Ethernet MAC addres s that will be used by the router on the Internet port.
Reference Manual for the ADSL Firewall Router DG834 3-20 Connecting the Router to the Intern et 202-10005-05, June 2005.
Protecting Your Network 4-1 202-10005-0 5, June 2005 Chapter 4 Protecting Y our Network This chapter describes how to use the basic fire wall features of the DG834 ADSL Firewall Router to protect your n etwork. Protecting Access to Y our DG 834 ADSL Firewall Router For security reasons, the router has its own user name and password.
Reference Manual for the ADSL Firewall Router DG834 4-2 Protecting Your Networ k 202-10005-05, June 2005 Figure 4-2: Set Pass word menu 3. T o change the passw ord, first enter the old p assword, and then enter the new password twice. 4. Click Apply to sav e your changes.
Reference Manual for the ADSL Firewall Router DG834 Protecting Your Network 4-3 202-10005-0 5, June 2005 Blocking Keywords, Sites, and Services The router pr ovides a va riety of options for bloc king Internet based content and communications services.
Reference Manual for the ADSL Firewall Router DG834 4-4 Protecting Your Networ k 202-10005-05, June 2005 Figure 4-3: Block Sites menu 3. T o enab le keyword blockin g, sele ct one of the following: • Per Schedule—to turn on keyword blocking according to the settings on the Schedule page.
Reference Manual for the ADSL Firewall Router DG834 Protecting Your Network 4-5 202-10005-0 5, June 2005 7. Click Apply to save your settings. Firewall Rules Firewall rules are used to block or allow specific traffic passing through from one side of the router to the other .
Reference Manual for the ADSL Firewall Router DG834 4-6 Protecting Your Networ k 202-10005-05, June 2005 • T o edit an existing rule, select its button on the left side of the table and click Edit. • T o delete an existing rule, select its button on the left side of the table and click Delet e.
Reference Manual for the ADSL Firewall Router DG834 Protecting Your Network 4-7 202-10005-0 5, June 2005 Figure 4-5: Rule example: A Local Public W eb Server The parameters are: •S e r v i c e From this list, select the application or serv ice to be allowed or blocked.
Reference Manual for the ADSL Firewall Router DG834 4-8 Protecting Your Networ k 202-10005-05, June 2005 •L o g Y ou can select whether the traffic will be l ogged. The choices are: – Never — no log entries will be made for this service. – Always — any traffic for this service type will be logged.
Reference Manual for the ADSL Firewall Router DG834 Protecting Your Network 4-9 202-10005-0 5, June 2005 • If the IP address of the local server computer is assigned by DHCP , it may change when the computer is rebooted. T o avoid this, use the Re served IP address feature in the LAN IP menu to keep the computer ’ s IP address constant.
Reference Manual for the ADSL Firewall Router DG834 4-10 Protecting Your Networ k 202-10005-05, June 2005 Figure 4-7: Rule example: Blocking Ins tan t Mes senger The parameters are: •S e r v i c e From this list, select the application or serv ice to be allowed or blocked.
Reference Manual for the ADSL Firewall Router DG834 Protecting Your Network 4 -11 202-10005-0 5, June 2005 • W AN Users These settings determine which packets are cove red by the rule, based on their destination W AN IP address. Select the desired option: – Any — all IP addresses are covered by this rule.
Reference Manual for the ADSL Firewall Router DG834 4-12 Protecting Your Networ k 202-10005-05, June 2005 For any traffic attempting to pass through the fire wall, the packet informa tion is subjected to the rules in the order shown in the Rules T able, beg inning at the top and proceeding to th e default rules at the bottom.
Reference Manual for the ADSL Firewall Router DG834 Protecting Your Network 4 -13 202-10005-0 5, June 2005 • T o c reate a new Service, clic k the Add Custom Service button. • T o edit an existing Service, select its button on the left side of the table and click Edit Service.
Reference Manual for the ADSL Firewall Router DG834 4-14 Protecting Your Networ k 202-10005-05, June 2005 Figure 4-1 1: S chedule Services menu 3. Select your T ime Zone. This setting will be u sed for the blocking sc hedule according to your local time zone and for time-stamping log entries.
Reference Manual for the ADSL Firewall Router DG834 Protecting Your Network 4 -15 202-10005-0 5, June 2005 2. Select the Schedule link of the Security menu to display menu shown above in the Schedule Services menu . 3. T o block Internet services based on a schedule, select Every Day or select one or more days.
Reference Manual for the ADSL Firewall Router DG834 4-16 Protecting Your Networ k 202-10005-05, June 2005.
Managing Your Network 5-1 202-10005-0 5, June 2005 Chapter 5 Managing Y our Network This chapter describes how to perform networ k management tasks with your DG834 ADSL Firewall Router. Backing Up, Restoring, or Erasing Y our Settings The configuration settings of the DG834 ADSL router are stored in a configuration file in the router.
Reference Manual for the ADSL Firewall Router DG834 5-2 Managi ng Your Netw ork 202-10005-05, June 2005 4. St o r e t h e .cfg file on a computer on your network. How to Restore the Conf iguration from a File 1. Log in to the router at its default LAN address of http://192.
Reference Manual for the ADSL Firewall Router DG834 Managing Your Network 5-3 202-10005-0 5, June 2005 How to Upgrade the Router Firmware Note: NETG EAR recommends that you b ack up your configuration b efore doing a firmware upgrade. After the upgrade is complete, you may need to rest ore your configuration settings.
Reference Manual for the ADSL Firewall Router DG834 5-4 Managi ng Your Netw ork 202-10005-05, June 2005 Network Management Information The DG834 provide s a variety of status an d usage information which is discussed below .
Reference Manual for the ADSL Firewall Router DG834 Managing Your Network 5-5 202-10005-0 5, June 2005 Click the Show S tatistics button to disp lay router usage statistics, as shown in Figure 5-3 below: T able 5-1. Menu 3.2 - Router S t atus Fields Field Description Account Name The Host Name assigned to the router in the Basic Settings menu.
Reference Manual for the ADSL Firewall Router DG834 5-6 Managi ng Your Netw ork 202-10005-05, June 2005 Figure 5-4: Router S t atistics screen This screen shows the following statistics:. Click the Connection S tatus bu tton to display router conn ection status, as shown in Figure 5-5 and Figure 5-6 .
Reference Manual for the ADSL Firewall Router DG834 Managing Your Network 5-7 202-10005-0 5, June 2005 Figure 5-5: Connectio n St atus screen for Dynamic IP Clicking the Renew button updates the status information. This screen shows the following statistics: T able 5-1.
Reference Manual for the ADSL Firewall Router DG834 5-8 Managi ng Your Netw ork 202-10005-05, June 2005 An alternate view of the Connection Status screen is shown in Figure 5-6 belo w: Figure 5-6: Connection St atus screen for PPPoA Clicking the Renew button updates the status information.
Reference Manual for the ADSL Firewall Router DG834 Managing Your Network 5-9 202-10005-0 5, June 2005 V iewing Att ached Devices The Attached Devices me nu contains a table of all IP devic es that the router ha s discovered on the local network.
Reference Manual for the ADSL Firewall Router DG834 5-10 Managi ng Your Netw ork 202-10005-05, June 2005 Figure 5-8: Security Logs menu Log entries are described in T able 5-1 below:.
Reference Manual for the ADSL Firewall Router DG834 Managing Your Network 5-11 202-10005-0 5, June 2005 Log action buttons are described in Ta b l e 5 - 2 below: Selecting What Information to Log Besides the standard information listed above, you can choose to log additional info rmation.
Reference Manual for the ADSL Firewall Router DG834 5-12 Managi ng Your Netw ork 202-10005-05, June 2005 Saving Log Files on a Server Y ou can choose to write the logs to a computer ru nning a syslog program. T o activate this feature, select to Broadcast on Lan or enter the IP address of the server where the Syslog file will be written.
Reference Manual for the ADSL Firewall Router DG834 Managing Your Network 5-13 202-10005-0 5, June 2005 Enabling Security Event E-mail Notification In order to receive logs and alerts by e-mail, you mu st provide your e- mail information in the E-mail subheading: Figure 5-9: E-mail menu • T urn e-mail notification on .
Reference Manual for the ADSL Firewall Router DG834 5-14 Managi ng Your Netw ork 202-10005-05, June 2005 If the W eekly , Daily or Hourly option is selecte d and the log fills up before the specified period, the log is automatica lly e-mailed to the specified e-mail address.
Reference Manual for the ADSL Firewall Router DG834 Managing Your Network 5-15 202-10005-0 5, June 2005 Enabling Remote Management Using the Remote Manageme nt page , you can allow a user or users on the Internet to configure, upgrade an d check the status of your DG834 ADSL Firewall Router.
Reference Manual for the ADSL Firewall Router DG834 5-16 Managi ng Your Netw ork 202-10005-05, June 2005 When accessing your router from the Internet, you will type your router's W AN IP address in your browser's Addre ss (in IE) or Loc ation (in Netscape) box, follo wed by a colon (:) and the custom port number .
Advanced Configuration 6-1 202-10005-0 5, June 2005 Chapter 6 Advanced Configuration This chapter describes how to configure the ad vanced features of your DG834 ADSL Firewall Router.
Reference Manual for the ADSL Firewall Router DG834 6-2 Advanced Configuration 202-10005-05, June 2005 Incoming traf fic from the Internet is normally disc arded by the router unless the traffic is a response to one of your local comp uters or a service that you have configured in the Ports menu.
Reference Manual for the ADSL Firewall Router DG834 Advanced Configuration 6-3 202-10005-0 5, June 2005 Connect Automatica lly , as Required Normally , this option should be en abled, so that an Internet conn ection will be made automatically , whenever Internet-bound traf fic is detected.
Reference Manual for the ADSL Firewall Router DG834 6-4 Advanced Configuration 202-10005-05, June 2005 These addresses are part of the Internet Engineering T a sk Force (IETF)-designated private address range for use in private networks, and should be suitable in most applications.
Reference Manual for the ADSL Firewall Router DG834 Advanced Configuration 6-5 202-10005-0 5, June 2005 • RIP V ersion This controls the format and th e broadcasting met hod o f the RIP packets that the router sends. It recognizes both formats when receiving.
Reference Manual for the ADSL Firewall Router DG834 6-6 Advanced Configuration 202-10005-05, June 2005 • An IP Address from the range you have defined • Subnet Mas k • Gateway IP Address is the .
Reference Manual for the ADSL Firewall Router DG834 Advanced Configuration 6-7 202-10005-0 5, June 2005 How to Configure LAN TCP/IP Settings 1. Log in to the router at its default LAN address of http://192.
Reference Manual for the ADSL Firewall Router DG834 6-8 Advanced Configuration 202-10005-05, June 2005 The router contains a client that can connect to a dynamic DNS service provider . T o use this feature, you must select a service provider and obtain an account with them.
Reference Manual for the ADSL Firewall Router DG834 Advanced Configuration 6-9 202-10005-0 5, June 2005 7. T ype the User Name for your dynamic DNS account.
Reference Manual for the ADSL Firewall Router DG834 6-10 Advanced C onfiguration 202-10005-05, June 2005 In this case you must define a static route, tell ing your router that 134.177.0.0 should be accessed through the ISDN router at 192.1 68 . 0.1 00.
Reference Manual for the ADSL Firewall Router DG834 Advanced Configuration 6-11 202-10005-0 5, June 2005 3. T o add or edit a Static Route: a. Click the Edit button to open the Edit Menu, shown in Figure 6-6 . Figure 6-6: S tat ic Route Entry and Edit Menu b.
Reference Manual for the ADSL Firewall Router DG834 6-12 Advanced C onfiguration 202-10005-05, June 2005 Universal Plug and Play (UPnP) Universal Plug and Play (UPnP) helps devices, su ch as Internet appliances and computers, access the network and conne ct to other devices as need ed.
Reference Manual for the ADSL Firewall Router DG834 Advanced Configuration 6-13 202-10005-0 5, June 2005 • UPnP Portmap T able : The UPnP Portmap T able displays the IP address of each UPnP device that is currently accessing the Router and which ports (Internal and External) that device has opene d.
Reference Manual for the ADSL Firewall Router DG834 6-14 Advanced C onfiguration 202-10005-05, June 2005.
Virtual Private Networking (Advanced Featur e) 7-1 202-10005-0 5, June 2005 Chapter 7 V irtual Private Networking (Advanced Feature) This chapter describes how to u se the virtual private network i ng (VPN) features of the DG834 ADSL router. VPN communications paths are ca lled tunnels.
Reference Manual for the ADSL Firewall Router DG834 7-2 Virtual Private Networking (Advanced Feature) 202-10005-05, June 2005 Overview of VPN Configuration T wo common sc enarios for config uring VPN tunnels are between a remote personal computer an d a network gateway and between two or more network gateways.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking (Advanced Feature) 7-3 202-10005-0 5, June 2005 Figure 7-2: Gateway-to-Gateway VPN T unnel A VPN between two or more NETGEAR VPN-enabled routers is a good way to connect branch or home offices and business partners ove r the Inte rne t.
Reference Manual for the ADSL Firewall Router DG834 7-4 Virtual Private Networking (Advanced Feature) 202-10005-05, June 2005 T o set up a VPN connection, you must configure e ach endpoint with spec ific identification and connection information describing the other endp oin t.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking (Advanced Feature) 7-5 202-10005-0 5, June 2005 • What method will you use to configure your VP N tun nels? — The VPN.
Reference Manual for the ADSL Firewall Router DG834 7-6 Virtual Private Networking (Advanced Feature) 202-10005-05, June 2005 VPN T unnel Configuration There are two tunnel configurations and three wa.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking (Advanced Feature) 7-7 202-10005-0 5, June 2005 Figure 7-3: Client-to -Gateway VPN T unnel S tep 1: Configuring the Clien.
Reference Manual for the ADSL Firewall Router DG834 7-8 Virtual Private Networking (Advanced Feature) 202-10005-05, June 2005 The works heet below iden tifies the parameters used in th e following pro cedure. A blank worksheet is at “Planning a VP N” on page 7-3 .
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking (Advanced Feature) 7-9 202-10005-0 5, June 2005 Figure 7-4: VPN Wizard S ta rt Screen 2. Fill in the Connection Na me and the pre-shared key , select the type of target end point, and click Next to proceed.
Reference Manual for the ADSL Firewall Router DG834 7-10 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 The Summary screen below displays.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 11 202-10005-0 5, June 2005 T o view the VPNC recommended authenticatio n and encry ptio n settings used by the VPN W izard, click the “ here ” link (see Figure 7-6 ).
Reference Manual for the ADSL Firewall Router DG834 7-12 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 Note : Refer to “Using Auto Policy to Co nfigure VPN T unnels” on pa ge 7-36 to enable the IKE keepalive capability on an existing VPN tunnel.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 13 202-10005-0 5, June 2005 Note: In this example, the Connection Name used on the client side of .
Reference Manual for the ADSL Firewall Router DG834 7-14 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 • In this example, type 192.168.3.1 in the Subnet field as the network address of the DG834. •E n t e r 255.255 .255.0 in the Mask field as the LA N Subnet Mask of the DG834.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 15 202-10005-0 5, June 2005 • In the Network Security Policy list on the le ft side of the Security Policy Editor window , click on My Identity . Figure 7-12: Security Po licy Editor My Identity • Choose None in the Select Certificate menu.
Reference Manual for the ADSL Firewall Router DG834 7-16 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 5. Configure the VPN Client Authentication Proposal. In this step, yo u will provide the type of encryption (DES or 3DES) to b e used for this connection.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 17 202-10005-0 5, June 2005 • Expand the Key Exchange subheading by doub le clicking its name or clicking on the “+” symbol. Then select Propo sal 1 below Key Exchange.
Reference Manual for the ADSL Firewall Router DG834 7-18 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 8. Check the VPN Connection. T o check the VPN Connection, you can initiate a request from the remote PC to the DG834’ s network by using the “Con nect” option in the NETGEAR ProSafe me nu bar .
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 19 202-10005-0 5, June 2005 Information on the progress and status of the VPN client connection can be viewed by opening the NETGEAR ProSafe Log V i ewer .
Reference Manual for the ADSL Firewall Router DG834 7-20 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 • The DG834 has a LAN IP address of 192.168.3.1. • The VPN client PC has a dyna mically assigned address of 192.168.2.2.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 21 202-10005-0 5, June 2005 Note: The LAN IP address ranges of each VPN endpoint must be dif ferent. The connection will fail if both are using the NETGEAR default address range of 192.
Reference Manual for the ADSL Firewall Router DG834 7-22 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 Follow this procedure to configure a gateway- to-gateway VPN tunnel using the VPN W izard. 1. Log in to the DG834 on LAN A at its default LAN address of http://192.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 23 202-10005-0 5, June 2005 3. Fill in the IP Address or FQDN for the ta rget VPN end point W AN connection and click Next . Figure 7-23: Remote IP 4.
Reference Manual for the ADSL Firewall Router DG834 7-24 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 The Summary screen below displays.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 25 202-10005-0 5, June 2005 T o view the VPNC recommended authenticatio n and encry ptio n settings used by the VPN W izard, click the “ here ” link (see Figure 7-2 5 ).
Reference Manual for the ADSL Firewall Router DG834 7-26 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 6. Repeat for the DG834 on LAN B and pa y special attentio n to use the following network settings as appropriate. • W AN IP of the remote VPN gateway (e.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 27 202-10005-0 5, June 2005 Figure 7-29: Current VPN T unnels (SAs) Screen c. Look at the VPN S tatus/Log screen ( Figure 7 -28 ) to verify that the tunnel is conn ec te d.
Reference Manual for the ADSL Firewall Router DG834 7-28 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 Figure 7-30: VPN St atus/Log Screen 3. Click on VPN S tatus ( Figure 7-30 ) to get the Current VPN T unnels (SAs) screen ( Figure 7-31 ).
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 29 202-10005-0 5, June 2005 T o activate the VPN tunnel by pinging the remote endpoint (e.
Reference Manual for the ADSL Firewall Router DG834 7-30 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 Once the connection is establish e d, yo u can op en the browser of the PC and enter the LAN IP address of the remote DG834.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 31 202-10005-0 5, June 2005 Figure 7-35: VPN St atus/Log Screen 3. Click on VPN S tatus ( Figure 7-30 ) to get the Current VPN T unnels (SAs) screen ( Figure 7-31 ).
Reference Manual for the ADSL Firewall Router DG834 7-32 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 Figure 7-36: Current VPN T unnels (SAs) Screen Deactivating a VPN T unnel Sometimes a VPN tunnel must be deactivated for testing purposes.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 33 202-10005-0 5, June 2005 Figure 7-37: VPN Policies 3. Clear the Enable check box for the VPN tunnel you want to d eactivate and click Apply . (T o reactivate the tunnel, check th e Enable box and click Apply .
Reference Manual for the ADSL Firewall Router DG834 7-34 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 Figure 7-38: VPN St atus/Log Screen 3. Click VPN S tatus ( Figure 7-38 ) to get the Current VPN T unnels (SAs) screen ( Figure 7-39 ).
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 35 202-10005-0 5, June 2005 Deleting a VPN T unnel T o delete a VPN tunnel: 1. Log in to the Router. 2. Open the DG834 management interface and c lick VPN Policies to displ ay the VPN Policies screen ( Figure 7-40 ).
Reference Manual for the ADSL Firewall Router DG834 7-36 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 • Manual Policy —for a Manual Keying setup in whic h you must specify each phase of the connection, see “Using Manual Policy to Configure VPN T unnels” on page 7 -48 .
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 37 202-10005-0 5, June 2005 Figure 7-41: DG834 VPN T unnel Auto Policy Configuration Menu.
Reference Manual for the ADSL Firewall Router DG834 7-38 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 The DG834 VPN tunnel ne twork connection fields are defined as follows: General These settings identify this policy and determine its major characteristics.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 39 202-10005-0 5, June 2005 Remote LAN This identifies which PCs on the re mote LAN are covered by this policy .
Reference Manual for the ADSL Firewall Router DG834 7-40 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 Local Identity Data —enter the data for the selection above. (If "W AN IP Address" is selected, no input is required.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 41 202-10005-0 5, June 2005 This setting applies to both IK E and IPSe c SAs. When configurin g the remote endpoint to match this setting, you may h ave to spec ify the "K ey Group" used.
Reference Manual for the ADSL Firewall Router DG834 7-42 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 T able 7-1. VPN T unnel Configuration W orksheet Connection Name: GtoG P.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 43 202-10005-0 5, June 2005 2. Open the DG834 on LAN A management interface and click on VPN Policies. Figure 7-43: VPN Policies Screen 3. Click Add Auto Policy .
Reference Manual for the ADSL Firewall Router DG834 7-44 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 — Remote Identity T ype = use default se tting • Parameters — Encr.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 45 202-10005-0 5, June 2005 Figure 7-44: VPN Auto Policies Scre en.
Reference Manual for the ADSL Firewall Router DG834 7-46 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 5. Click Apply . The Get VPN Policies web page is displayed. Figure 7-45: VPN Policies Screen 6. Repeat for the DG834 on LAN B and pa y special attentio n to use the following network settings as appropriate.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 47 202-10005-0 5, June 2005 Figure 7-46: VPN St atus/Log Screen b. Click VPN S tatus ( Figure 7-46 ) to display the Current VPN T unnels (SAs) screen ( Figure 7-47 ).
Reference Manual for the ADSL Firewall Router DG834 7-48 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 Using Manual Policy to Configure VPN T unnels As an alternative to IKE, you may use Manual Ke yin g, in which you must specify each phase of the connectio n.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking ( Advanced Feature) 7- 49 202-10005-0 5, June 2005 General The DG834 VPN tunnel ne twork connection fields are defined as follows: • Policy Name —enter a unique name to identify this po licy .
Reference Manual for the ADSL Firewall Router DG834 7-50 Virtual Private Networking ( Advanced Feature) 202-10005-05, June 2005 • Range address —enter the starting IP address in the "Single/S tart IP address" field, and the finish IP address in the "Finish IP address" fiel d.
Troubleshooting 8-1 202-10005-0 5, June 2005 Chapter 8 T roubleshooting This chapter gives informatio n about troublesho oting your DG834 ADSL Firewall Router. After each problem description, instructions are provided to help you di agnose and solve the problem.
Reference Manual for the ADSL Firewall Router DG834 8-2 Troubleshooting 202-10005- 05 , June 2005 If a port’ s LED is lit, a link has been establis hed to the connected device. If a LAN port is connected to a 100 Mbps device, verify that the port’ s LED is green.
Reference Manual for the ADSL Firewall Router DG834 Troubleshooting 8- 3 202-10005- 05 , June 2005 • Make sure that power is turned on to the co nnected hu b or workstatio n. • Be sure you are using the correct cable: — When connectin g th e router ’ s W AN ADSL port , us e the c able that was supp lie d with the DG834.
Reference Manual for the ADSL Firewall Router DG834 8-4 Troubleshooting 202-10005- 05 , June 2005 • Click the Refresh or Reload button in the W e b browser .
Reference Manual for the ADSL Firewall Router DG834 Troubleshooting 8- 5 202-10005- 05 , June 2005 If disconnecting telephon es does not result in a green W AN LED the problem may be one of the following: • Check that the telephone company has made the connection to your line and tested it.
Reference Manual for the ADSL Firewall Router DG834 8-6 Troubleshooting 202-10005- 05 , June 2005 • Y our ISP only allows one Ethernet MAC address to connect to Internet, and may check for your computer ’ s MAC address. In this case: Inform your ISP that you have bought a new network de vice, and ask them to use the router ’ s MAC address.
Reference Manual for the ADSL Firewall Router DG834 Troubleshooting 8- 7 202-10005- 05 , June 2005 A DNS server is a host on the Internet that translates Interne t names (such as www addresses) to numeric IP addresses. T ypically your ISP will provide the addresses of one or two DNS servers for your use.
Reference Manual for the ADSL Firewall Router DG834 8-8 Troubleshooting 202-10005- 05 , June 2005 • W rong physical connections — Make sure the LAN port LED is on. If the LED is of f, follow the instructions in “LAN or W AN Port LEDs Not On” on page 8-2 .
Reference Manual for the ADSL Firewall Router DG834 Troubleshooting 8- 9 202-10005- 05 , June 2005 Restoring the Default Co nfiguration and Password This section explains how to restore the fact ory default configuratio n settings, changing the router ’ s administration passwo rd to password and the IP address to 192.
Reference Manual for the ADSL Firewall Router DG834 8-10 Troubleshooting 202-10005- 05 , June 2005.
Technical Specifications A-1 202-10005-0 5, June 2005 Appendix A T echnical S pecifications This appendix provides tech nical specifications for the DG834 ADSL Firewall Router.
Reference Manual for the ADSL Firewall Router DG834 A-2 Technical Specifications 202-10005-05, June 2005 Electromagnetic Emissions Meets requirements of: FCC Part 15 Class B VCCI Class B EN 55 022 (CISPR 22), Class B Interface S pecifications LAN: 10BASE-T or 100BASE-Tx, RJ-45 W AN: ADSL, Dual RJ-1 1, pins 2 and 3 T1.
Network and Routing Basics B-1 202-10005-0 5, June 2005 Appendix B Network and Routing Basics This chapter provides an overview of IP networks and routing. Related Publications As you read this document, you may be dire cted to various RFC documents for further information.
Reference Manual for the ADSL Firewall Router DG834 B-2 Network and Routing Basics 202-10005-05, June 2005 Routing Information Protocol One of the protocol s used by a rout er to build an d maintain a picture of the network is the Routing Information Protocol (RIP).
Reference Manual for the ADSL Firewall Router DG834 Network and Routing Basics B-3 202-10005-0 5, June 2005 Figure 8-1: Three Main Add ress Classes The five address classes are: • Class A Class A addresses can hav e up to 16,777,214 hosts on a sin gle network.
Reference Manual for the ADSL Firewall Router DG834 B-4 Network and Routing Basics 202-10005-05, June 2005 This addressing structure allows IP addresses to uniquely identify each physical network and each node on each ph ysical network .
Reference Manual for the ADSL Firewall Router DG834 Network and Routing Basics B-5 202-10005-0 5, June 2005 Subnet addressing al lows us to split one IP network ad dress into smaller multiple physical networks known as su bnetworks. Some of the node numbers are used as a su bnet number instead .
Reference Manual for the ADSL Firewall Router DG834 B-6 Network and Routing Basics 202-10005-05, June 2005 The following table di splays several common netm ask values in both the dotted-decimal and the masklength formats.
Reference Manual for the ADSL Firewall Router DG834 Network and Routing Basics B-7 202-10005-0 5, June 2005 When a device broadcasts to its segment neighb ors, it uses a destination address of the local network address with al l ones for the host address.
Reference Manual for the ADSL Firewall Router DG834 B-8 Network and Routing Basics 202-10005-05, June 2005 Figure 8-3: Sing le IP Address Operation Using NA T This scheme of fers the additional benefit of firewall-like protection because the internal LAN addresses are not available to the Internet thro ugh the translated connection.
Reference Manual for the ADSL Firewall Router DG834 Network and Routing Basics B-9 202-10005-0 5, June 2005 Related Document s The station with the correct IP address responds with its own MAC address directly to the sending device. The receivin g station provides the tr ansmitting station with the required destination MAC address.
Reference Manual for the ADSL Firewall Router DG834 B-10 Network and Routing Ba si cs 202-10005-05, June 2005 The DG834 ADSL router also functions as a DHCP c lient when connecting to the ISP . The router can automatically obtain an IP address, subnet mask, DNS server addresses, and a gateway addre ss if the ISP provides this information by DHCP .
Reference Manual for the ADSL Firewall Router DG834 Network and Routing Basics B-1 1 202-10005-0 5, June 2005 Denial of Service Att ack A hacker may be able to prevent your network from op erating or communicating by launching a Denial of Service (DoS) attack.
Reference Manual for the ADSL Firewall Router DG834 B-12 Network and Routing Ba si cs 202-10005-05, June 2005 10 ft. (3 m) from the wall outlet to the desktop device The patch panel and other connecting hardware must meet the requirements for 100 Mbps operation (Categor y 5 ).
Reference Manual for the ADSL Firewall Router DG834 Network and Routing Basics B-1 3 202-10005-0 5, June 2005 Figure B-2: Crossover T wisted-Pair Cable Figure B-3: Category 5 UTP Cable with Male RJ -45 Plug at Each End Note : Flat “silver satin” tele phone cable may h ave the same RJ-45 plug.
Reference Manual for the ADSL Firewall Router DG834 B-14 Network and Routing Ba si cs 202-10005-05, June 2005 When connecting a PC to a PC, or a hub port to another hub port, the transmit pair must be exchanged with the receive pair . This exchange is done by one of two mechanisms.
Preparing Your Ne twork C-1 202-10005-0 5, June 2005 Appendix C Prep aring Y our Network This appendix describes how to prepare you r ne twork to connect to the Internet through the DG834 ADSL Firewall Router and how to verify th e readiness of broadband Internet service from an Internet service provider (ISP).
Reference Manual for the ADSL Firewall Router DG834 C-2 Preparing Your Networ k 202-10005-05, June 2005 In your IP network, each PC and the router must be assigned a unique IP addresses.
Reference Manual for the ADSL Firewall Router DG834 Preparing Your Ne twork C-3 202-10005-0 5, June 2005 Y ou must have an Ethernet adapter , the TCP/IP protocol, and Client for Micro soft Networks. If you need to install a ne w adapter , follow these steps: a.
Reference Manual for the ADSL Firewall Router DG834 C-4 Preparing Your Networ k 202-10005-05, June 2005 If you need Clie nt for Micro soft Networks: a. Click the Add button. b. Select Client, and then click Ad d. c. Select Microsoft. d. Select Client for Microsoft Networks, and then click OK.
Reference Manual for the ADSL Firewall Router DG834 Preparing Your Ne twork C-5 202-10005-0 5, June 2005 V erify the following settings as shown: • Client for Microsoft Network exists • Ethernet adapter is present • TCP/IP is present • Primary Network Logon is set to W indows logon Click on the Properties button.
Reference Manual for the ADSL Firewall Router DG834 C-6 Preparing Your Networ k 202-10005-05, June 2005 Selecting the W indows’ Internet Access Method 1. On the W indows taskbar , click the S tart button, point to Settings, and th en click Control Panel.
Reference Manual for the ADSL Firewall Router DG834 Preparing Your Ne twork C-7 202-10005-0 5, June 2005 2. Ty p e winipcfg , and then click OK. The IP Configuration window opens, which lists (a mong other things), your IP address, subnet mask, and default gateway .
Reference Manual for the ADSL Firewall Router DG834 C-8 Preparing Your Networ k 202-10005-05, June 2005 DHCP Configuration of TCP/IP in Windows XP , 2000, or NT4 Y ou will find there are many similarities in th e procedures for different W indows systems when using DHCP to config ure TCP/IP .
Reference Manual for the ADSL Firewall Router DG834 Preparing Your Ne twork C-9 202-10005-0 5, June 2005 • Now you should be at the Local Area Network Connection S tatus window . This box displays the co nn ection status, duration, speed, and activity statistics.
Reference Manual for the ADSL Firewall Router DG834 C-10 Prep arin g Your Network 202-10005-05, June 2005 DHCP Configuration of TC P/IP in Windows 2000 Once again, after you have installed the network card, TCP/IP for W indows 2000 is configured. TCP/IP should be added by de fault and set to DHCP without your having to configure it.
Reference Manual for the ADSL Firewall Router DG834 Preparing Your Ne twork C-11 202-10005-0 5, June 2005 • Click on the My Network Places icon on the W indows desktop. This will bring up a window called Network and Dial-up Co nnections. • Right click on Local Ar ea Connection and select Properties .
Reference Manual for the ADSL Firewall Router DG834 C-12 Prep arin g Your Network 202-10005-05, June 2005 • W ith Internet Protocol (TCP/IP) selected, click on Pr operties to open the Internet Protocol (TCP/IP) Propert ies dialogue box. • V erify that • Obtain an IP address automatically is selected.
Reference Manual for the ADSL Firewall Router DG834 Preparing Your Ne twork C-13 202-10005-0 5, June 2005 DHCP Configuration of TCP/IP in Windows NT4 Once you have installed the network card, you need to co nfigure the TCP/IP environment for W indows NT 4.
Reference Manual for the ADSL Firewall Router DG834 C-14 Prep arin g Your Network 202-10005-05, June 2005 • Highlight the TCP/IP Pr otocol in the Network Pro tocols box, and click on the Properties button.
Reference Manual for the ADSL Firewall Router DG834 Preparing Your Ne twork C-15 202-10005-0 5, June 2005 V erifying TCP/IP Properties fo r Windows XP , 2000, and NT4 T o check your PC’ s TCP/IP configuration: 1. On the W indows taskbar , click the Start button, and then click Run.
Reference Manual for the ADSL Firewall Router DG834 C-16 Prep arin g Your Network 202-10005-05, June 2005 • The default gateway i s 192.168.0.1 4. Ty p e exit Configuring the Macintos h for TCP/IP Networking Beginning with Macintosh Operating Sy stem 7, TCP/ IP is already installed on the Macintosh.
Reference Manual for the ADSL Firewall Router DG834 Preparing Your Ne twork C-17 202-10005-0 5, June 2005 2. If not already selected, select Built- in Ethernet in the Configure list. 3. If not already selected, Select Using DHCP in the TCP/IP tab. 4. Click Save.
Reference Manual for the ADSL Firewall Router DG834 C-18 Prep arin g Your Network 202-10005-05, June 2005 V erifying the Readiness of Y our Internet Account For broadband access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using a cable modem or DSL mode m.
Reference Manual for the ADSL Firewall Router DG834 Preparing Your Ne twork C-19 202-10005-0 5, June 2005 • An IP address and subnet mask • A gateway IP address, which is the address of the ISP’.
Reference Manual for the ADSL Firewall Router DG834 C-20 Prep arin g Your Network 202-10005-05, June 2005 If an IP address appears under Installed Gatewa ys, write down the address. This is the ISP’ s gateway address. Select the address and then click Re move to remove the gateway address.
Reference Manual for the ADSL Firewall Router DG834 Preparing Your Ne twork C-21 202-10005-0 5, June 2005 Rest arting the Network Once you have set up your computers to work with the rou ter , you must reset the network for the devices to be able to communicat e correctly .
Reference Manual for the ADSL Firewall Router DG834 C-22 Prep arin g Your Network 202-10005-05, June 2005.
Virtual Private Networking D-1 202-10005-0 5, June 2005 Appendix D V irtual Private Networking There have been many improvem ents in the Internet including Quality of Service, network performance, and inexpensive technologies, such as DSL.
Reference Manual for the ADSL Firewall Router DG834 D-2 Virtual Private Networking 202-10005-05, June 2005 • Remote Access: Remote access enables telecommuters and mobile workers to access e-mail and business applications.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking D-3 202-10005-0 5, June 2005 • Encapsulating Security Payload (ESP) : Provides confidentiality , authentication, and integrity . • Authentication Header (AH) : Provides authentication and integrity .
Reference Manual for the ADSL Firewall Router DG834 D-4 Virtual Private Networking 202-10005-05, June 2005 The ESP header is inserted into the packet betw een the IP header and any subsequent packet contents. However , because ESP encrypts the data, the payload is changed.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking D-5 202-10005-0 5, June 2005 Mode SAs operate using modes. A mode is the method in which the IPSec protocol is applied to the packet. IPSec can be used in tunne l mode or tran sport mode.
Reference Manual for the ADSL Firewall Router DG834 D-6 Virtual Private Networking 202-10005-05, June 2005 Key Management IPSec uses the Internet Key Exchange (IKE) protoc ol to facilitate and automate the SA setup and the exchange of keys between parties transferring data.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking D-7 202-10005-0 5, June 2005 VPN Process Overview Even though IPSec is standards-based, e ach vendo r has its own set of terms and procedures for implementing the standard.
Reference Manual for the ADSL Firewall Router DG834 D-8 Virtual Private Networking 202-10005-05, June 2005 It will also be importan t to know the subnet mask of both gateway LAN Connections.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking D-9 202-10005-0 5, June 2005 Figure D-5: VPN T u nnel SA The SA contains all the information necessary for gateway A to negotiate a secure and encrypted communication stream with gateway B.
Reference Manual for the ADSL Firewall Router DG834 D-10 Virtual Private Networking 202-10005-05, June 2005 2. IKE Phase I. a. The two parties negotia te the en cr yption and au thenti cation algorithms to use in the IKE SAs. b. The two parties authenticate each other us ing a predetermined mechanism, such as preshared keys or digital certificates.
Reference Manual for the ADSL Firewall Router DG834 Virtual Private Networking D-11 202-10005-0 5, June 2005 VPNC IKE Phase II Parameters The IKE Phase 2 parameters used in Scenario 1 are: •T r i p .
Reference Manual for the ADSL Firewall Router DG834 D-12 Virtual Private Networking 202-10005-05, June 2005 • [RFC 791] Internet Pr otocol DARP A Internet Pr ogram Pr otocol Specifi cation , Information Sciences Institute, US C, September 1981. • [RFC 1058] Routing Informa tion Pr otocol , C Hedrick, Rutgers University , June 1988.
NETGEAR VPN Configuration E-1 202-10005-0 5, June 2005 Appendix E NETGEAR VPN Configuration DG834 to FVL328 This appendix is a case study on how to configure a secure IPSec VPN tunnel from a NETGEAR DG834 to a FVL328. This case study follows the VPN Consor tium interoperability profile guidelines (fou nd at http://www .
Reference Manual for the ADSL Firewall Router DG834 E-2 NETGEAR VPN Configuration 202-10005-05, June 2005 Figure E-1: Addressing and Subnet Used for Examples S tep-By-Step Configuration 1.
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-3 202-10005-0 5, June 2005 Figure E-2: Viewing and editing the VPN para meters of the DG834 at gateway A toFVL 328 10.
Reference Manual for the ADSL Firewall Router DG834 E-4 NETGEAR VPN Configuration 202-10005-05, June 2005 2. Configure the FVL328 as in the Gateway-to-Gatewa y procedures for the VPN W izard (see “How to Set Up a Gateway-to-Gateway VPN Configur ation“ on page 7-20 ), being certain to use appropriate network addresses for the environment.
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-5 202-10005-0 5, June 2005 Figure E-3: Viewing and editing the VPN p ara meters of the FVL328 at gateway B toDG834 toDG834 toDG834 toDG834 toDG834 22.23.24.25 14.1 5.16.17 14.
Reference Manual for the ADSL Firewall Router DG834 E-6 NETGEAR VPN Configuration 202-10005-05, June 2005 3. T est the VPN tunnel by pinging the remote network from a PC attached to the DG834. a. Open the command prompt (S tart -> Run -> cmd) b.
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-7 202-10005-0 5, June 2005 Figure E-5: Addressing and Subnet Used for Examples The Use of a Fully Qualified Domain Nam e (FQDN) Many ISPs (Internet Service Pr oviders) provide connectivity to their customers using dynamic instead of static IP addressing.
Reference Manual for the ADSL Firewall Router DG834 E-8 NETGEAR VPN Configuration 202-10005-05, June 2005 A Dynamic DNS (DDNS) service allows a user whose public IP address is dyna mically assigned to be located by a host or domain name.
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-9 202-10005-0 5, June 2005 3. On the DG834, configure the Dynamic DNS settings. a. Browse to the Dynamic DNS Setup Screen (see Figure E-6 ) in the Advanced menu. Figure E-6: Dynamic DNS Setup Screen b.
Reference Manual for the ADSL Firewall Router DG834 E-10 NETGEAR VPN Configuration 202-10005-05, June 2005 4. On the FVL328, configure th e Dynamic DNS settings. Assume a properly c onfigured DynDNS account. a. Browse to the Dynamic DNS Setup Screen (see Figure E-8 ) in the Advanced menu.
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-11 202-10005-0 5, June 2005 Figure E-9: Dynamic DNS Setup Screen.
Reference Manual for the ADSL Firewall Router DG834 E-12 NETGEAR VPN Configuration 202-10005-05, June 2005 c. Click Show S tatus . The resulting screen should show Update OK: good (see Figure E-10 ).
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-13 202-10005-0 5, June 2005 6. Configure the FVL328 as in the Gateway-to-Gatewa y procedures for the VPN W izard (see “How to Set Up a Gateway-to-Gateway VPN Configur ation“ on page 7-20 ), being certain to use appropriate network addresses for the environment.
Reference Manual for the ADSL Firewall Router DG834 E-14 NETGEAR VPN Configuration 202-10005-05, June 2005 Figure E-12: Addressing and subnet used for telecommuter example Setting Up the Client-to-Gat.
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-15 202-10005-0 5, June 2005 S tep 1: Configuring the Clien t-to-Gateway VPN T unnel on th e VPN Router at the Employer ’ s Main Office Follow this procedure to configure a client-to- gateway VPN tunnel by filling out the VPN Auto Policy screen.
Reference Manual for the ADSL Firewall Router DG834 E-16 NETGEAR VPN Configuration 202-10005-05, June 2005 Figure E-13: VPN Auto Policy screen Fully Qu a lified Doma in Name toDG834G .
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-17 202-10005-0 5, June 2005 2. Click Apply when done to get the VPN Policies scre en. Figure E-14: VPN Policies screen T o view or modify the tunnel sett ings, select th e radio button next to the tunnel entry and click Edit .
Reference Manual for the ADSL Firewall Router DG834 E-18 NETGEAR VPN Configuration 202-10005-05, June 2005 b. If you do not have a mod em or dial-up adapter installed in yo ur PC, you ma y see the warning message stating “The NETGEAR ProSafe VPN Component requires at least one dial-up adapter be installed.
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-19 202-10005-0 5, June 2005 Figure E-16: Security Policy Editor Connection s ettings c. Select Secur e in the Connection Security check box. d. Select IP Subnet in the ID T ype menu.
Reference Manual for the ADSL Firewall Router DG834 E-20 NETGEAR VPN Configuration 202-10005-05, June 2005 b. Click on the Security Policy subheading to show the Security Policy menu. Figure E-17: Security Po licy Editor security policy c. Select the Main Mode in the Select Phase 1 Negotiation Mode check box.
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-21 202-10005-0 5, June 2005 a. In the Network Security Policy list on the left side of the Securit y Policy Editor window , click My Identity . Figure E-18: Security Policy Editor my identity b.
Reference Manual for the ADSL Firewall Router DG834 E-22 NETGEAR VPN Configuration 202-10005-05, June 2005 e. Click the Pre-Shar ed Key button. In the Pr e-Shared Key dialog box, click the Enter Key button. Enter the DG83 4's Pre-Shar ed Key and click OK .
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-23 202-10005-0 5, June 2005 b. Expand the Au thentication subheading by double clicking its name or clicking on the “+” symbol. Then select Propo sal 1 below Authentication .
Reference Manual for the ADSL Firewall Router DG834 E-24 NETGEAR VPN Configuration 202-10005-05, June 2005 a. Expand the Key Exchange subheading by double clickin g its name or c licking on the “+ ” symbol. Then select Propo sal 1 below Key Exchang e .
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-25 202-10005-0 5, June 2005 8. Check the VPN Connection . T o chec k the VPN Connection , you can initiate a request from the remote PC to the VPN router ’ s network by using th e Connect option in the DG834 ADSL router menu bar (see Figure E-22 ).
Reference Manual for the ADSL Firewall Router DG834 E-26 NETGEAR VPN Configuration 202-10005-05, June 2005 c. Ty p e ping -t 192.168. 0.1 , and then click OK . Figure E-23: Running a ping test to the LAN from the PC This will cause a continuous ping to be sent to the VPN router .
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-27 202-10005-0 5, June 2005 2. The Connection Monitor screen i s shown below: Figure E-25: Connection Monitor scre en While the connection is being established, the Connection Name field in this menu will show SA before the name of the connection.
Reference Manual for the ADSL Firewall Router DG834 E-28 NETGEAR VPN Configuration 202-10005-05, June 2005 V iewing the VPN Router ’ s VPN S t atus and Log Information T o view information on the status of the VPN client connection, open the VPN ro uter ’ s VPN S tatus scre en by following the steps below: 1.
Reference Manual for the ADSL Firewall Router DG834 NETGEAR VPN Configuration E-29 202-10005-0 5, June 2005 2. T o view the VPN tunnels status, click the VPN S tatus link on the right side of the main menu.
Reference Manual for the ADSL Firewall Router DG834 E-30 NETGEAR VPN Configuration 202-10005-05, June 2005.
Glossary 1 Glossary 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. 100BASE-Tx IEEE 802.3 specification for 100 Mbps Ethernet over twisted pair wiring.
Reference Manual for the ADSL Firewall Router DG834 2 Glossary Cat 5 Category 5 unshield ed twisted pair (UTP) cab ling. An Ethernet network operating at 10 Mbits/second (10BASE-T) will o ften tolerat.
Reference Manual for the ADSL Firewall Router DG834 Glossary 3 IP Address A four-byte number uniquely defining each host on the Internet. Ranges of addresses are assigned by Internic, an or ganization formed for thi s pu rpo se. Usually written in dotte d-d ecimal notation with periods separ ating the bytes (for example, 134 .
Reference Manual for the ADSL Firewall Router DG834 4 Glossary Netmask A number that explains which p art of an IP add ress comprises the netw ork address and which part is the host address on that network. It can be expressed in dotted-decimal notat ion or as a number appended to the IP address.
Reference Manual for the ADSL Firewall Router DG834 Glossary 5 router A device that for wards data between n etworks. An IP rout er forwards data based on IP source and destination addresses.
Reference Manual for the ADSL Firewall Router DG834 6 Glossary Windows Internet Naming Service WINS. W indows Internet Naming Servi ce is a server process for resolving W indows-based computer names to IP addresses. If a remote network contains a WINS server , your W indows PCs can gather i nformation from that WINS server about its local hosts.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté NETGEAR DG834 ADSL Firewall Router DG834 DG834 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du NETGEAR DG834 ADSL Firewall Router DG834 DG834 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation NETGEAR DG834 ADSL Firewall Router DG834 DG834, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le NETGEAR DG834 ADSL Firewall Router DG834 DG834 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le NETGEAR DG834 ADSL Firewall Router DG834 DG834, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du NETGEAR DG834 ADSL Firewall Router DG834 DG834.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le NETGEAR DG834 ADSL Firewall Router DG834 DG834. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei NETGEAR DG834 ADSL Firewall Router DG834 DG834 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
