Netgear N600 Wireless Router User Manual

Virtual Private Networking101
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Note:  
While your PC is connected to a remote LAN through a VPN, you 
might not have normal Internet access. If this is the case, you have 
to close the VPN connection to have normal Internet access.
Set Up a Gateway-to-Gateway VPN Configuration
Note:  This section describes how to use the VPN Wizard to set up the  VPN tunnel using the VPNC default parameters listed in  Table  16 on 
page
  89. If you have...

Virtual Private Networking102
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Note:  The LAN IP address ranges of each VPN endpoint has to be 
different. The connection will fail if both are using the NETGEAR 
default address range of 192.168.0.x.
To configure a gateway-to-gateway VPN tunnel using the VPN Wizard: 
1. Log in to Gateway A on LAN A. From the main menu, select  VPN Wizard. Click  Next, 
and the Step 1 of 3 screen displays.
2.  Fill in the Connection Name and pre-shared key...

Virtual Private Networking103
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
3. 
Fill in the IP address or FQDN for the target VPN endpoint WAN connectio\
n, and click  Next. 
and the Step 3 of 3 screen displays.
 
4.  Fill in the IP Address  and Subnet Mask  fields for the target endpoint that can use this 
tunnel, and click  Next.
The VPN Wizard Summary screen displays: 
To view the VPNC-recommended authentication and encryption settings used\
 by the 
VPN Wizard, click the  here link....

Virtual Private Networking104
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Note:  See Use Auto Policy to Configure VPN Tunnels 
on page
 112 for 
information about how to enable the IKE keep-alive capability on an 
existing VPN tunnel.
6.  Repeat these steps for the  gateway on
  LAN B, and pay special attention to the following 
network settings:
•     WAN IP of the remote VPN gateway (for example, 14.15.16.17)
•     LAN IP settings of the remote VPN gateway:
-     IP address (for...

Virtual Private Networking105
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
b. 
Click the VPN Status button to display the Current VPN Tunnels (SAs) screen: 
c. Click  Connect for the VPN tunnel you want to activate. View the VPN Status/Log 
screen to verify that the tunnel is connected.
VPN Tunnel Control
Activate a VPN Tunnel
There are three ways to activate a VPN tunnel:
•     Use the VPN Status screen.
•     Ping the remote endpoint.
•     Start using the VPN tunnel.
Note:   See Use...

Virtual Private Networking106
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
2. 
On the main menu, select VPN Status . The VPN Status/Log screen displays:
3. Click  VPN Status to display the Current VPN Tunnels (SAs) screen:
4. Click  Connect  for the VPN tunnel that you want to activate.
Activate the VPN Tunnel by Pinging the Remote Endpoint
Note:  This section uses 192.168.3.1 for a sample remote endpoint LAN IP 
address.
To activate the VPN tunnel by pinging the remote endpoint (for...

Virtual Private Networking107
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
menu bar. The NETGEAR ProSafe client reports the results of the attempt \
to connect. 
Since the remote PC has a dynamically assigned WAN IP address, it has to\
 initiate the 
request. 
To perform a ping test using our example, start from the remote PC:
a.
Establish an Internet connection from the PC.
b.  On the Windows taskbar, click the  Start button, and then select Run.
c.  Type   ping -t 192.168.3.1 , and...

Virtual Private Networking108
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Note:  The pings might fail the first time. If they do, then try the pings a 
second time.
Start Using a VPN Tunnel to Activate It
To use a VPN tunnel, use a web browser to go to a URL whose IP address o\
r range is 
covered by the policy for that VPN tunnel.
Verify the Status of a VPN Tunnel
To use the VPN Status screen to determine the status of a VPN tunnel:
1. 
Log in to the wireless modem router.
2.  On the...

Virtual Private Networking109
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
3. 
On the VPN Status/Log screen, click VPN Status to display the Current VPN Tunnels (SAs) 
screen.
This table lists the following data for each active VPN tunnel. 
•     SPI. Each SA has a unique SPI (security parameter index) for traffic in e\
ach direction. 
For manual key exchange, the SPI is specified in the policy definition. \
For automatic 
key exchange, the SPI is generated by the IKE protocol. 
•...

Virtual Private Networking110
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
2. 
On the main menu, select VPN Policies to display the VPN Policies screen:
3. In the Policy Table, clear the  Enable check box for the VPN tunnel that you want to 
deactivate, and then click  Apply. (To reactivate the tunnel, select the  Enable check box, and 
then click Apply .)
Use the VPN Status Screen to Deactivate a VPN Tunnel
To deactivate a VPN tunnel:
1. Log in to the wireless modem router.
2.  On the...