Netgear N600 Wireless Router User Manual

Virtual Private Networking91
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
The following worksheet identifies the parameters used in this procedure\
. For a blank 
worksheet, see 
Plan a VPN on page  88.
Table 17.  VPN tunnel configuration worksheet  
ParameterValue to Be EnteredField Selection
Connection Name RoadWarriorN/A
Pre-Shared Key 12345678N/A
Secure Association N/AMain ModeManual Keys
Perfect Forward secrecy N/AEnabledDisabled
Encryption Protocol N/ADES3DES
Authentication...

Virtual Private Networking92
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
2. 
Click  Next to proceed. 
3. Fill in the Connection Name and pre-shared key fields.
The connection name is for convenience and does not affect how the VPN t\
unnel 
functions.
4.  Select the radio button for the type of target end point, and click  Next.
5. Enter the remote IP address, and click  Next. 

Virtual Private Networking93
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
The Summary screen displays: 
Note:  To view the VPNC-recommended authentication and encryption 
settings used by the VPN Wizard, click the 
here link. 
6.  Click  Done on the Summary screen. The VPN Policies screen displays, showing that t\
he 
new tunnel is enabled:
To view or modify the tunnel settings, select its radio button and click\
  Edit. 
Note:
  See Use Auto Policy to Configure VPN Tunnels on page  112...

Virtual Private Networking94
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
The PC has to have the NETGEAR ProSafe VPN Client program installed, whi\
ch supports 
IPSec. Go to the NETGEAR website (http://www.netgear.com
) for information about how to 
purchase the NETGEAR ProSafe VPN client.
Note:  Before installing the NETGEAR ProSafe VPN Client software, be 
sure to turn off any virus protection or firewall software you might be \
running on your PC. You might need to insert your...

Virtual Private Networking95
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
c. 
Rename the new connection so that it matches the  Connection Name field in the 
VPN Settings screen of the wireless modem router on LAN A. Choose connec\
tion 
names that make sense to the people using and administering the VPN.
Note:   In this example, the connection name used on the client side of the 
VPN tunnel is togw_a, and it does not have to match the 
RoadWarrior connection name used on the gateway...

Virtual Private Networking96
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
b. 
Click the Security Policy subheading to view the Security Policy settings.
Figure 44.  Security Policy settings, Client-to-Gateway A
c. In the Select Phase 1 Negotiation Mode section of the screen, select the\
  Main Mode 
radio button. 
4.  Configure the VPN client identity.
In this step, you provide information about the remote VPN client PC. Yo\
u have to provide 
the pre-shared key that you configured in...

Virtual Private Networking97
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
c. 
In the  ID Type  drop-down list, select  IP Address. If you are using a virtual fixed IP 
address, enter this address in the  Internal Network IP Address field. Otherwise, 
leave this field empty. 
d.  In the Internet Interface section of the screen, select the adapter that\
 you use to 
access the Internet. If you have a dial-up Internet account, in the  Name list, select 
PPP Adapter . If you have a dedicated...

Virtual Private Networking98
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
d. 
In the Encrypt Alg drop-down list, select the type of encryption that is configured for 
the encryption protocol in the wireless modem router, as listed in  Table  15 on 
page
  88. This example uses Triple DES. 
e.  In the Hash Alg drop-down list, select SHA-1. 
f.  In the SA Life drop-down list, select  Unspecified. 
g.  In the Key Group drop-down list, select  Diffie-Hellman Group 2. 
6.  Configure the VPN...

Virtual Private Networking99
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
To check the VPN connection, you can initiate a request from the remote \
PC to the 
wireless modem router’s network by using the Connect option in the NE\
TGEAR ProSafe 
menu bar. The NETGEAR ProSafe client reports the results of the attempt \
to connect. 
Since the remote PC has a dynamically assigned WAN IP address, it has to\
 initiate the 
request. 
To perform a ping test using our example, start from the...

Virtual Private Networking100
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
To launch this function, click the Windows
 Start button, then select Programs > 
NETGEAR ProSafe VPN Client > Log Viewer . The VPN Status/Log screen for a 
successful connection is shown in the following figure:
Note:  Use the active VPN tunnel information and pings to determine 
whether a failed connection is due to the VPN tunnel or some reason 
outside the VPN tunnel.
The Connection Monitor screen for this...