Netgear N600 Wireless Router User Manual

							NETGEAR VPN Configuration171
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
a.
In the Network Security Policy list, expand the new connection by double\
-clicking its 
name or clicking the + symbol. My Identity and Security Policy appear below the 
connection name.
b.  Click  Security Policy  to show the Security Policy screen.
c. In the Select Phase 1 Negotiation Mode group, select the  Main Mode radio button. 
4.  Configure the VPN client identity.
In this step, you provide information about the remote VPN client PC. Yo\
u have to provide 
the pre-shared key that you configured in the wireless modem router and \
either a fixed IP 
address or a fixed virtual IP address of the VPN client PC.
a.In the Network Security Policy list on the left side of the Security Pol\
icy Editor window, 
click  My Identity . 
b. In the Select Certificate list, select None. 
c.  In the ID Type list, select Domain Name, and enter toGW_A.com  (in this example).  
						

							NETGEAR VPN Configuration172
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
d. 
In the Virtual Adapter list, select  Disabled.
e.  In the Internet Interface section, in the Name list, select Intel PRO/100VE Network 
Connection (in this example; your Ethernet adapter might be different), and then\
 in 
the IP Addr field, enter 192.168.2.3 (in this example). 
f.  Click the Pre-Shared Key button.
g.  In the Pre-Shared Key screen, click  Enter Key. Enter the N600 Wireless Dual Band 
Gigabit ADSL2+ Modem Router DGND3700’s pre-shared key and click  OK. In this 
example, 12345678  is entered, though the screen shows asterisks. This field is 
case-sensitive.
5.  Configure the VPN Client Authentication Proposal. 
In this step, you provide the type of encryption (DES or 3DES) to be u\
sed for this 
connection. This selection has to match your selection in the VPN router\
 configuration.
a.In the Network Security Policy list on the left side of the Security Pol\
icy Editor window, 
expand the Security Policy heading by double-clicking its name or clicki\
ng the + 
symbol.
b.  Expand the Authentication subheading by double-clicking its name or clic\
king the + 
symbol. Then select Proposal 1 below Authentication. 
c. In the Authentication Method drop-down list, select  Pre-Shared Key. 
d.  In the Encrypt Alg drop-down list, select the type of encryption. In thi\
s example, use 
Triple DES. 
e.  In the Hash Alg drop-down list, select  SHA-1. 
f.  In the SA Life drop-down list, select Unspecified. 
g.  In the Key Group drop-down list, select Diffie-Hellman Group 2.  
						

							NETGEAR VPN Configuration173
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
6. 
Configure the VPN Client Key Exchange Proposal. 
In this step, you provide the type of encryption (DES or 3DES) to be u\
sed for this 
connection. This selection has to match your selection in the VPN router\
 configuration.
a.Expand the Key Exchange subheading by double-clicking its name or clicki\
ng the + 
symbol. Then select  Proposal 1 below Key Exchange. 
b. In the SA Life drop-down list, select  Unspecified. 
c.  In the Compression drop-down list, select  None. 
d.  Select the Encapsulation Protocol (ESP)  check box. 
e.  In the Encrypt Alg drop-down list, select the type of encryption. In thi\
s example, use 
Triple DES .
f.  In the Hash Alg drop-down list, select  SHA-1. 
g.  In the Encapsulation drop-down list, select  Tunnel. 
h.  Leave the Authentication Protocol (AH)  check box cleared. 
7.  Save the VPN client settings. 
From the File menu at the top of the Security Policy Editor window, sele\
ct  Save. 
After you have configured and saved the VPN client information, your PC \
automatically 
opens the VPN connection when you attempt to access any IP addresses in \
the range of 
the remote VPN router’s LAN.
8.  Check the VPN connection. 
						

							NETGEAR VPN Configuration174
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
To check the VPN connection, you can initiate a request from the remote \
PC to the VPN 
router’s network by using the Connect option in the wireless modem ro\
uter screen:
Right-click the system 
tray icon to open the 
pop-up menu.
My Connections\DGD3300v2
Since the remote PC has a dynamically assigned WAN IP address, it has to\
 initiate the 
request. 
a.
Right-click the system tray icon to open the pop-up menu. 
b.  Select  Connect to open the My Connections list.
c.  Select  toDGND3300v2.
The wireless modem router reports the results of the attempt to connect.\
 Once the 
connection is established, you can access resources of the network conne\
cted to the 
VPN router. 
Right-click the system 
tray icon to open the 
pop-up menu.
My Connections\DGD3300v2
To perform a ping test using this example, start from the remote PC:
a. Establish an Internet connection from the PC.
b.  On the Windows taskbar, click the  Start button, and then select Run.
c.  Type   ping -t  192.168.0.1, and then click OK. 
						

							NETGEAR VPN Configuration175
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
This causes a continuous ping to be sent to the VPN router. Within 2 min\
utes, the ping 
response should change from 
timed out to reply .
Once the connection is established, you can open the browser on the PC a\
nd enter the LAN 
IP address of the VPN router. After a short wait, you should see the log\
in screen of the VPN 
router (unless another PC already has the VPN router management interfa\
ce open).
Note:   You can use the VPN router diagnostics to test the VPN connection 
from the VPN router to the client PC. To do this, on the wireless 
modem router main menu, select Diagnostics.
Monitoring the VPN Tunnel (Telecommuter Example)
To view information about the progress and status of the VPN client conn\
ection, open the Log 
Viewer. In Windows, click  Start, and select Programs > N600 Wireless Dual Band Gigabit 
ADSL2+ Modem Router DGND3700 > Log Viewer .
Note:  Use the active VPN tunnel information and pings to determine 
whether a failed connection is due to the VPN tunnel or some 
reason outside the VPN tunnel.
The Connection Monitor screen displays:
While the connection is being established, the connection name listed in\
 this screen shows 
SA before the name of the connection. When the connection is successful,\
 the SA changes 
to the yellow key symbol. 
						

							NETGEAR VPN Configuration176
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Note:  While your PC is connected to a remote LAN through a VPN, you 
might not have normal Internet access. If this is the case, you need 
to close the VPN connection to have normal Internet access.
View the VPN Router’s VPN Status and Log Information
To view information about the status of the VPN client connection, open \
the VPN router’s 
VPN Status screen:
To view status and log information:
1. On the wireless modem router main menu, select  Router Status, and then click the 
VPN Status  button. The VPN Status/Log screen displays:
2. To view the VPN tunnels status, click  VPN Status. 
						

							177
C
C.   Notification of Compliance
NETGEAR Dual Band - Wireless
Regulatory Compliance Information
This section includes user requirements for operating this product in ac\
cordance with National laws for usage of radio 
spectrum and operation of radio devices. Failure of the end-user to comp\
ly with the applicable requirements may 
result in unlawful operation and adverse action against the end-user by \
the applicable National regulatory authority.Note: Note:  This products firmware limits operation to only the channels allowed in\
 a particular Region or Country.  
Therefore, all options described in this users guide may not be availab\
le in your version of the product.
Europe - EU Declaration of Conformity
Marking by the above symbol indicates compliance with the Essential Requ\
irements of the R&TTE Directive of the 
European Union (1999/5/EC). This equipment meets the following conform\
ance standards: 
EN300 328 (2.4Ghz), EN301 489-17, EN301 893 (5Ghz), EN60950-1
For complete DoC please visit the NETGEAR EU Declarations of Conformity \
website at: 
http://support.netgear.com/app/answers/detail/a_id/11621/ 
EDOC in Languages of the European Community
Language Statement
Cesky [Czech] NETGEAR Inc.  
 tímto prohlašuje, že tento Radiolan je ve shode se základní\
mi požadavky 
a dalšími príslušnými ustanoveními smernice 1999/5/ES.\
Dansk [Danish] Undertegnede NETGEAR Inc.  erklærer herved, at følgende udstyr Radiolan overholder de 
væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF.
Deutsch 
[German] Hiermit erklärt NETGEAR Inc., dass sich das Gerät Radiolan in Übereinstimmung mit den 
grundlegenden Anforderungen und den übrigen einschlägigen Bestimmu\
ngen der 
Richtlinie 1999/5/EG befindet.
Eesti [Estonian] Käesolevaga kinnitab NETGEAR Inc. seadme Radiolan vastavust direktiivi 1999/5/EÜ 
põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjak\
ohastele sätetele.
English Hereby, NETGEAR Inc. , declares that this Radiolan is in compliance with the essential 
requirements and other relevant provisions of Directive 1999/5/EC. 
						

							Notification of Compliance178
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Español [Spanish]
Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los 
requisitos esenciales y cualesquiera otras disposiciones aplicables o ex\
igibles de la 
Directiva 1999/5/CE.
Ελληνική [Greek] ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ NETGEAR Inc.  ΔΗΛΩΝΕΙ ΟΤΙ Radiolan ΣΥΜΜΟΡΦΩΝΕΤΑΙ  ΠΡΟΣ 
ΤΙΣ ΟΥΣΙΩΔΕΙΣ  ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ  ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ ΟΔΗΓΙΑΣ 
1999/5/ΕΚ.
Français [French] Par la présente NETGEAR Inc. déclare que lappareil Radiolan est conforme aux 
exigences essentielles et aux autres dispositions pertinentes de la dire\
ctive 1999/5/CE.
Italiano [Italian] Con la presente NETGEAR Inc. dichiara che questo Radiolan è conforme ai requisiti 
essenziali ed alle altre disposizioni pertinenti stabilite dalla diretti\
va 1999/5/CE.
Latviski [Latvian] Ar šo NETGEAR Inc.  deklarē, ka Radiolan atbilst Direkt īvas 1999/5/EK būtiskajām 
prasībām un citiem ar to saistītajiem noteikumiem.
Lietuvi ų 
[Lithuanian]  Šiuo 
NETGEAR Inc.  deklaruoja, kad šis Radiolan atitinka esminius reikalavimus ir kitas\
 
1999/5/EB Direktyvos nuostatas.
Nederlands 
[Dutch] Hierbij verklaart NETGEAR Inc. dat het toestel Radiolan in overeenstemming is met de 
essentiële eisen en de andere relevante bepalingen van richtlijn 1999\
/5/EG.
Malti [Maltese] Hawnhekk, NETGEAR Inc., jiddikjara li dan Radiolan jikkonforma mal-htigijiet essenzjali u 
ma provvedimenti ohrajn relevanti li hemm fid-Dirrettiva 1999/5/EC.
Magyar 
[Hungarian] Alulírott, NETGEAR Inc. nyilatkozom, hogy a Radiolan megfelel a vonatkozó alapvetõ 
követelményeknek és az 1999/5/EC irányelv egyéb elõí\
rásainak.
Polski [Polish] Niniejszym NETGEAR Inc. oświadcza, że Radiolan jest zgodny z zasadniczymi 
wymogami oraz pozosta łymi stosownymi postanowieniami Dyrektywy 1999/5/EC.
Português 
[Portuguese] NETGEAR Inc. declara que este Radiolan está conforme com os requisitos essenciais\
 e 
outras disposições da Directiva 1999/5/CE.
Slovensko 
[Slovenian] NETGEAR Inc. izjavlja, da je ta Radiolan v skladu z bistvenimi zahtevami\
 in ostalimi 
relevantnimi dolo
čili direktive 1999/5/ES.
Slovensky 
[Slovak] NETGEAR Inc. týmto vyhlasuje, že Radiolan sp
ĺňa základné požiadavky a všetky 
príslušné ustanovenia Smernice 1999/5/ES.
Suomi [Finnish] NETGEAR Inc. vakuuttaa täten että Radiolan tyyppinen laite on direktiivin 1999\
/5/EY 
oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen \
mukainen.
Svenska 
[Swedish] Härmed intygar NETGEAR Inc. att denna Radiolan står I överensstämmelse med de 
väsentliga egenskapskrav och övriga relevanta bestämmelser som \
framgår av direktiv 
1999/5/EG. 
						

							Notification of Compliance179
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
This device is a 2.4 GHz wideband transmission system (transceiver), i\
ntended for use in all EU member states and 
EFTA countries, except in France and Italy where restrictive use applies\
.
In Italy the end-user should apply for a license at the national spectru\
m authorities in order to obtain authorization to 
use the device for setting up outdoor radio links and/or for supplying p\
ublic access to telecommunications and/or 
network services.
This device may not be used for setting up outdoor radio links in France\
 and in some areas the RF output power may 
be limited to 10 mW EIRP in the frequency range of 2454 - 2483.5 MHz. Fo\
r detailed information the end-user should 
contact the national spectrum authority in France.
FCC Requirements for Operation in the United States 
FCC Information to User
This product does not contain any user serviceable components and is to \
be used with approved antennas only. 
Any product changes or modifications will invalidate all applicable regu\
latory certifications and approvals.
FCC Guidelines for Human Exposure
This equipment complies with FCC radiation exposure limits set forth for\
 an uncontrolled environment. This 
equipment should be installed and operated with minimum distance of 20 c\
m between the radiator and your body.
This transmitter must not be co-located or operating in conjunction with\
 any other antenna or transmitter. 
FCC Declaration of Conformity
We, NETGEAR, Inc., 350 East Plumeria Drive, San Jose, CA 95134, declare \
under our sole responsibility that the 
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 complies wi\
th Part 15 Subpart B of FCC 
CFR47 Rules. Operation is subject to the following two conditions:
• This device may not cause harmful interference, and
• This device must accept any interference received, including interferenc\
e that may cause undesired operation.
FCC Radio Frequency Interference Warnings & Instructions
This equipment has been tested and found to comply with the limits for a\
 Class B digital device, pursuant to Part 15 
of the FCC Rules. These limits are designed to provide reasonable protec\
tion against harmful interference in a 
residential installation. This equipment uses and can radiate radio freq\
uency energy and, if not installed and used in 
accordance with the instructions, may cause harmful interference to radi\
o communications. However, there is no 
guarantee that interference will not occur in a particular installation.\
 If this equipment does cause harmful 
interference to radio or television reception, which can be determined b\
y turning the equipment off and on, the user 
is encouraged to try to correct the interference by one or more of the f\
ollowing methods:• Reorient or relocate the receiving antenna.
•  Increase the separation between the equipment and the receiver.
•  Connect the equipment into an electrical outlet on a circuit different f\
rom that which the radio receiver is 
connected.
•  Consult the dealer or an experienced radio/TV technician for help.
FCC Caution
• Any changes or modifications not expressly approved by the party respons\
ible for compliance could void the 
users authority to operate this equipment. 
•  This device complies with Part 15 of the FCC Rules. Operation is subject\
 to the following two conditions: (1) This 
device may not cause harmful interference, and (2) this device must ac\
cept any interference received, including 
interference that may cause undesired operation. 
Íslenska 
[Icelandic]
Hér með lýsir NETGEAR Inc. yfir því að Radiolan er í samræmi við grunnkröfur \
og aðrar 
kröfur, sem gerðar eru í tilskipun 1999/5/EC.
Norsk 
[Norwegian] NETGEAR Inc.
 erklærer herved at utstyret Radiolan er i samsvar med de grunnleggende 
krav og øvrige relevante krav i direktiv 1999/5/EF. 
						

							Notification of Compliance180
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
• 
For product available in the USA market, only channel 1~11 can be operat\
ed. Selection of other channels is not 
possible.
• This device and its antenna(s) must not be co-located or operation in \
conjunction with any other antenna or  transmitter.
Industry Canada
This device complies with RSS-210 of the Industry Canada Rules. Operatio\
n is subject to the following two conditions: 
(1) This device may not cause harmful interference, and (2) this dev\
ice must accept any interference received, 
including interference that may cause undesired operation.
IMPORTANT NOTE: Radiation Exposure Statement:
This equipment complies with IC radiation exposure limits set forth for \
an uncontrolled environment. This equipment 
should be installed and operated with minimum distance 20cm between the \
radiator & your body.
Caution:
The device for the band 5150-5250 MHz is only for indoor usage to reduce\
 po-tential for harmful interference to 
co-channel mobile satellite systems. 
High power radars are allocated as primary users (meaning they have pri\
ority) of 5250-5350 MHz and 5650-5850 MHz 
and these radars could cause interference and/or damage to LE-LAN device\
s. 
Ce dispositif est conforme à la norme CNR-210 dIndustrie Canada appl\
icable aux appareils radio exempts de licence. 
Son fonctionnement est sujet aux deux conditions suivantes: (1) le dis\
positif ne doit pas produire de brouillage 
préjudiciable, et (2) ce dispositif doit accepter tout brouillage r\
eçu, y compris un brouillage susceptible de provoquer un 
fonctionnement indésirable.
NOTE IMPORTANTE: Déclaration dexposition aux radiations:
Cet équipement est conforme aux limites dexposition aux rayonnements\
 IC établies pour un environnement non 
contrôlé. Cet équipement doit être installé et utilisé\
 avec un minimum de 20 cm de distance entre la source de 
rayonnement et votre corps.
Avertissement:
Le dispositif fonctionnant dans la bande 5150-5250 MHz est réservé\
 uniquement pour une utili-sation à lintérieur afin 
de réduire les risques de brouillage préjudiciable aux systèmes\
 de satellites mobiles utilisant les mêmes canaux.
Les utilisateurs de radars de haute puissance sont désignés utilis\
ateurs principaux (c.-à-d., quils ont la priorité) pour 
les bandes 5250-5350 MHz et 5650-5850 MHz et que ces radars pourraient c\
auser du brouillage et/ou des dommages 
aux dispositifs LAN-EL.