Netgear DG834GSP User Manual download pdf

NETGEAR VPN Configuration B-1

v1.0, June 2007

Appendix B

NETGEAR VPN Configuration

DG834GSP to FVL328

This appendix is a case study on how to configure a secure IPSec VPN tunnel from a NETGEAR

DG834GSP to a FVL328. This case study follows the VPN Consortium interoperability profile

guidelines (found at http://www.vpnc.org/InteropProfiles/Interop-01.html).

Configuration Profile

The configuration in this document follows the addressing and configuration mechanics defined

by the VPN Consortium. Gather all the necessary information before you begin the configuration

process. Verify whether the firmware is up to date, all of the addresses that will be necessary, and

all of the parameters that need to be set on both sides. Check that there are no firewall restrictions.

Table B-1. Profile Summary

VPN Consortium Scenario: Scenario 1

Type of VPN LAN-to-LAN or Gateway-to-Gateway (not PC/Client-to-Gateway)

Security Scheme: IKE with Preshared Secret/Key (not Certificate-based)

IP Addressing:

NETGEAR-Gateway A Static IP address

NETGEAR-Gateway B Static IP address

1 2 3 4 5 6 ... 31 32

Summary of Contents

Page 1 - NETGEAR VPN Configuration

NETGEAR VPN Configuration B-1v1.0, June 2007Appendix BNETGEAR VPN ConfigurationDG834GSP to FVL328 This appendix is a case study on how to configure a

Page 2 - Step-By-Step Configuration

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-10 NETGEAR VPN Configurationv1.0, June 20074. On the FVL328, configure the Dynamic DNS s

Page 3 - Advanced - VPN to invoke

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-11v1.0, June 2007c. Click Show Status. The resulting screen sh

Page 4 - B-4 NETGEAR VPN Configuration

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-12 NETGEAR VPN Configurationv1.0, June 20075. Configure the DG834GSP as in the Gateway-t

Page 5 - VPN to invoke this screen

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-13v1.0, June 2007Figure B-11Note: The pings may fail the first

Page 6 - DG834GSP with FQDN to FVL328

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-14 NETGEAR VPN Configurationv1.0, June 2007Configuration Summary (Telecommuter Example)T

Page 7 - Figure B-5

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-15v1.0, June 2007• Step 2: Configuring the NETGEAR ProSafe VPN

Page 8

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-16 NETGEAR VPN Configurationv1.0, June 2007Figure B-13Fully Qualified Domain NametoDG834

Page 9 - Figure B-7

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-17v1.0, June 20072. Click Apply when done to get the VPN Polic

Page 10 - Figure B-8

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-18 NETGEAR VPN Configurationv1.0, June 2007Step 2: Configuring the NETGEAR ProSafe VPN C

Page 11 - Figure B-10)

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-19v1.0, June 2007b. From the Edit menu of the Security Policy

Page 12

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-2 NETGEAR VPN Configurationv1.0, June 2007Step-By-Step Configuration1. Configure the DG8

Page 13 - Figure B-11

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-20 NETGEAR VPN Configurationv1.0, June 2007c. Select Secure in the Connection Security c

Page 14 - (Telecommuter Example)

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-21v1.0, June 2007b. Click on the Security Policy subheading to

Page 15

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-22 NETGEAR VPN Configurationv1.0, June 2007a. In the Network Security Policy list on the

Page 16 - Figure B-13

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-23v1.0, June 2007e. Click the Pre-Shared Key button.f. In the

Page 17 - Figure B-14

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-24 NETGEAR VPN Configurationv1.0, June 2007c. In the Authentication Method menu, select

Page 18

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-25v1.0, June 2007a. Expand the Key Exchange subheading by doub

Page 19 - Figure B-15

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-26 NETGEAR VPN Configurationv1.0, June 2007To check the VPN Connection, you can initiate

Page 20 - Figure B-16

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-27v1.0, June 2007c. Type ping -t 10.1.1.1, and then click OK.

Page 21 - Figure B-17

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-28 NETGEAR VPN Configurationv1.0, June 2007Monitoring the VPN Tunnel (Telecommuter Examp

Page 22 - Figure B-18

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-29v1.0, June 2007While the connection is being established, th

Page 23 - Figure B-19

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-3v1.0, June 2007Figure B-2toFVL32810.5.6.1172.23.9.1toFVL32822

Page 24 - Figure B-20

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-30 NETGEAR VPN Configurationv1.0, June 20072. To view the VPN tunnels status, click the

Page 25 - Figure B-21

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-31v1.0, June 2007

Page 26 - Figure B-22

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-32 NETGEAR VPN Configurationv1.0, June 2007

Page 27 - Figure B-24

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-4 NETGEAR VPN Configurationv1.0, June 20072. Configure the FVL328 as in the Gateway-to-G

Page 28 - Figure B-25

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-5v1.0, June 2007Figure B-3toDG834toDG834toDG834toDG834toDG8342

Page 29 - Figure B-26

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-6 NETGEAR VPN Configurationv1.0, June 20073. Test the VPN tunnel by pinging the remote n

Page 30 - Figure B-27

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-7v1.0, June 2007Table B-2. Profile SummaryVPN Consortium Scena

Page 31

Reference Manual for the ADSL Modem Wireless Router DG834GSPB-8 NETGEAR VPN Configurationv1.0, June 2007The Use of a Fully Qualified Domain Name (FQDN

Page 32

Reference Manual for the ADSL Modem Wireless Router DG834GSPNETGEAR VPN Configuration B-9v1.0, June 20073. On the DG834GSP, configure the Dynamic DNS