Netgear N600 Wireless Router User Manual

							USB Storage81
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Create a Network Folder
To create a network folder:
1. 
From the USB Storage (Advanced Settings) screen, click the  Create a Network Folder 
button to open the Create Network Folder screen: 
2.  Create a folder.
•     You can specify the folder’s  shared name, and change Read Access  and Write 
Access from  All-no password to admin. 
•      The password for admin  is the same one that is used to log in to the wireless modem 
router main menu. By default it is password.
3.  Click  Apply so that your changes take effect.
Available 
Network Folders Shared Name
• You can click the name shown or you can type it into the address 
field of your web browser.
•  If Not Shared is shown, then the default share has been deleted 
and no other share for the root folder exists. Click the link to 
change this setting. 
Read/Write 
Access • 
Shows the permissions and access controls on the network 
folder. 
•  All-no password allows all users to access the network folder. 
•  admin prompts you to enter the same password that you use to 
log in to the wireless modem router main menu. 
Folder Name Full path of the used by the network folder. 
Volume Name Volume name from the storage device (either USB drive or HDD). 
Total/Free 
Space The current utilization of the storage device. 
Table 14.  USB Storage (Advanced Settings)  (Continued)
FieldsDescription 
						

							USB Storage82
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Unmount a USB Drive
WARNING!
Unmount the USB drive first before physically unplugging it from 
the wireless modem router. If the USB disk is removed or a cable 
is pulled while data is being written to the disk, it could result in 
file or disk corruption.
To unmount a USB disk drive so that no users can access it, from the USB\
 Settings screen, 
click the Safely Remove USB button. This takes the drive offline.
Specify Approved USB Devices
You can specify which USB devices are approved for use when connected to\
 the router.
To specify a USB device:
1.  On the router main menu, under Advanced, select  USB Settings. 
2. Click  Approved Devices. 
3. On the USB Drive Approved Devices screen, select the USB device from the\
  Available 
USB Devices list.
4.  Click  Add. 
						

							USB Storage83
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
5. 
Select the  Allow only approved devices  check box.
6.  Click  Apply so that your change takes effect.
If you want to approve another USB device, you have to first click the  Safely Remove USB 
Device button to unmount the currently connected USB device. Connect the other\
 USB 
device, and then repeat this process.
Connect to the USB Drive from a Remote Computer
To connect to the USB drive from remote computers using a web browser, y\
ou have to use 
the router’s Internet port IP address.
Locate the Internet Port IP Address
The Router Status screen shows the Internet port IP address:
To locate the Internet port IP address:
1.  Log in to the wireless modem router.
2.  In the main menu, under Maintenance, select  Router Status.
3.  Record the IP address that is listed for the Internet port. This is the \
IP address you can use 
to connect to the router remotely.
Access the Router’s USB Drive Remotely Using FTP
You can connect to the router’s USB drive using a web browser:
1. Connect to the router by typing ftp:// and the Internet port IP address in the address field 
of Internet Explorer or Netscape Navigator, for example, ftp://10.1.65.4. If you are using 
Dynamic DNS, you can type the DNS name rather than the IP address.
2.  Type the account name and password that has access rights to the USB dri\
ve.
The directories of the USB drive that your account has access to display\
, for example, 
share/partition1/directory1. You can now read and copy files from the US\
B directory.
Connect to the USB Drive with Microsoft Network Settings
You can access the USB drive from local computers on your home or office\
 network using 
Microsoft Networking settings. You have to be running Microsoft Windows \
2000, XP, or older 
versions of Windows with Microsoft Networking enabled. You can use norma\
l Explorer 
operations such as dragging and dropping, opening files, or cutting and \
pasting files from:
•     Microsoft Windows Start menu, Run option
•     Windows Explorer
•     Network Neighborhood or My Network Place 
						

							USB Storage84
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
Enable File and Printer Sharing
Each computer’s network properties have to be set to enable network c\
ommunication with 
the USB drive. File and Printer Sharing for Microsoft Networking have to\
 be enabled, as 
described in the following sections.
Note:  In Windows 2000 and Windows XP, File and Printer Sharing is 
enabled by default.
Configure Windows 98SE and Windows ME
The easiest way to get to your network properties is to go to your deskt\
op, right-click 
Network Neighborhood and then select 
Properties. File and Printer Sharing for Microsoft 
Windows should be listed. If it is not, click  Add and follow the installation prompts.
Note:  If you have any questions about File and Printer Sharing, contact 
Microsoft for assistance.
Configure Windows 2000 and Windows XP
Right-click the network connection for your local area network. File and\
 Printer Sharing for 
Microsoft Windows should be listed. If it is not, click  Install and follow the installation prompts.
Set Up a Media Server
Setting the N600 Wireless Modem Router as a ReadyDLNA media server enabl\
es playback 
of videos, movies, and pictures on DLNA/UPnP AV-compliant media players \
like Xbox360, 
Playstation, and NETGEARs Digital Entertainer Live. 
ReadyDLNA means the N600 Wireless Modem Router serves media in DLNA-comp\
atible 
form to DLNA/UPnP AV-compliant media players. 
						

							USB Storage85
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
To set up a media server:
1. 
On the main menu, under USB Storage, select  Media Server.
•     Enable Media Server  enables the N600 Wireless Modem Router to act as a media 
server.
•     Media Server Name is the name that shows up on media players.
•      Under Content Scan, Automatic scans for media files whenever new files are added 
to the ReadyShare USB storage.
•     You can also schedule scan periodically or click  Scan Now to scan for new media 
immediately.
2.  Click  Apply to save your settings. 
						

							86
7
7.   Virtual Private Networking
Setting up secure encrypted communications
This chapter describes how to use the virtual private networking (VPN)\
 features of the wireless modem router. VPN communications paths are called tunnels. VPN tunnels p\
rovide secure, 
encrypted communications between your local network and a remote network\
 or computer. See 
Appendix B, NETGEAR VPN Configuration.
This chapter is organized as follows: •     Overview of VPN Configuration 
•     Plan a VPN 
•     VPN Tunnel Configuration   
•     Set Up a Client-to-Gateway VPN Configuration 
•     Set Up a Gateway-to-Gateway VPN Configuration 
•     VPN Tunnel Control 
•     Set Up VPN Tunnels in Special Circumstances  
						

							Virtual Private Networking87
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
Overview of VPN Configuration
Two common scenarios for VPN tunnels are between a remote PC and a netwo\
rk gateway, 
and between two or more network gateways. The N600 Wireless Dual Band Gi\
gabit ADSL2+ 
Modem Router DGND3700 supports both types. It supports up to five concur\
rent tunnels.
Client-to-Gateway VPN Tunnels
Client-to-gateway VPN tunnels provide secure access from a remote PC, su\
ch as a 
telecommuter connecting to an office network.
VPN Tunnel
Internet PC running NETGEAR
ProSafe VPN clientModem Router DGND3700
Figure 41. Telecommuter VPN tunnel
A VPN client access allows a remote PC to connect to your network from a\
ny location on the 
Internet. The remote PC is one tunnel endpoint, running the VPN client s\
oftware. The 
wireless modem router on your network is the other tunnel endpoint. See \
Set Up a 
Client-to-Gateway VPN Configuration on page  90 for information about how to set up this 
configuration.
Gateway-to-Gateway VPN Tunnels
Gateway-to-gateway VPN tunnels provide secure access between networks, s\
uch as a 
branch or home office and a main office.
VPN Tunnel
Internet
Modem Router DGND3700
Gateway A  (Home)Modem Router DGND3700
Gateway B (Office)
Figure 42. VPN Tunnel between networks 
						

							Virtual Private Networking88
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
A VPN between two or more NETGEAR VPN-enabled routers is a good way to c\
onnect 
branch or home offices and business partners over the Internet. VPN tunn\
els also enable 
access to network resources across the Internet. In this case, use gatew\
ays on each end of 
the tunnel to form the VPN tunnel endpoints. See Set Up a Gateway-to-Gateway VPN 
Configuration on page  101 for information about how to set up this configuration.
Plan a VPN
When you set up a VPN, it is helpful to plan the network configuration a\
nd record the 
configuration parameters on a worksheet:
Table 15.  VPN tunnel configuration worksheet  
ParameterValue to Be EnteredField Selection
Connection Name N/A
Pre-Shared Key N/A
Secure Association N/AMain ModeManual Keys
Perfect Forward Secrecy N/AEnabledDisabled
Encryption Protocol N/ADES3DES
Authentication Protocol N/AMD5SHA-1
Diffie-Hellman (DH) Group N/AGroup 1Group 2
Key Life in seconds N/A
IKE Life Time in seconds N/A
VPN Endpoint Local IPSecIDLAN IP AddressSubnet MaskFQDN or Gateway 
IP (WAN IP Address
To set up a VPN connection, you have to configure each endpoint with spe\
cific identification 
and connection information describing the other endpoint. You have to co\
nfigure the 
outbound VPN settings on one end to match the inbound VPN settings on ot\
her end, and vice 
versa.
This set of configuration information defines a security association (S\
A) between the two 
VPN endpoints. When planning your VPN, you should make a few choices fir\
st:
•     Will the local end be any device on the LAN, a portion of the local netw\
ork (as defined by 
a subnet or by a range of IP addresses), or a single PC?
•      Will the remote end be any device on the remote LAN, a portion of the re\
mote network (as 
defined by a subnet or by a range of IP addresses), or a single PC? 
						

							Virtual Private Networking89
 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
•     Will either endpoint use fully qualified domain names (FQDNs)? FQDNs s\
upplied by 
Dynamic DNS providers (see  Use a Fully Qualified Domain Name (FQDN)  on page  163) 
can allow a VPN endpoint with a dynamic IP address to initiate or respon\
d to a tunnel 
request. Otherwise, the side using a dynamic IP address has to always be\
 the initiator.
•     Which method will you use to configure your VPN tunnels? -The VPN Wizard using VPNC defaults (see the following table)
- The typical automated Internet Key Exchange (IKE) setup (see Use Auto Policy to 
Configure VPN Tunnels  on page  112)
- A manual keying setup in which you have to specify each phase of the con\
nection 
(see  Use Manual Policy to Configure VPN Tunnels  on page  119)
Table 16.  Parameters recommended by the VPNC and used in the VPN Wizard\
ParameterFactory Default Setting
Secure Association Main Mode
Authentication Method Pre-Shared Key
Encryption Method 3DES
Authentication Protocol SHA-1
Diffie-Hellman (DH) Group Group 2 (1024 bit)
Key Life 8 hours
IKE Life Time 1 hour
•     What level of IPSec VPN encryption will you use?
-DES. The Data Encryption Standard (DES) processes input data that is 64 b\
its wide, 
encrypting these values using a 56-bit key. Faster but less secure than \
3DES. 
- 3DES . Triple DES achieves a higher level of security by encrypting the data \
three 
times using DES with three different, unrelated keys. 
•     What level of authentication will you use? -MDS . 128 bits, faster but less secure.
- SHA-1. 160 bits, slower but more secure.
VPN Tunnel Configuration
There are two tunnel configurations and three ways to configure them:
•     Use the VPN Wizard to configure a VPN tunnel (recommended for most situ\
ations):
-See Set Up a Client-to-Gateway VPN Configuration on page  90.
- See Set Up a Gateway-to-Gateway VPN Configuration on page  101.
•     When the VPN Wizard and its VPNC defaults (see  Table  16 on page  89) are not 
appropriate for your special circumstances, but you want to automate the\
 Internet Key 
Exchange (IKE) setup, see  Use Auto Policy to Configure VPN Tunnels  on page  112. 
						

							Virtual Private Networking90
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 
•     When the VPN Wizard and its VPNC defaults (see 
Table  16 on page  89) are not 
appropriate for your special circumstances and you have to specify each \
phase of the 
connection, see Use Manual Policy to Configure VPN Tunnels  on page  119. You 
manually enter all the authentication and key parameters. You have more \
control over the 
process; however, the process is more complex, and there are more opport\
unities for 
errors or configuration mismatches between your N600 Wireless Dual Band \
Gigabit 
ADSL2+ Modem Router DGND3700 and the corresponding VPN endpoint gateway \
or  client workstation.
Set Up a Client-to-Gateway VPN Configuration
Setting up a VPN between a remote PC running the NETGEAR ProSafe VPN cli\
ent and a 
network gateway involves two steps, described in the following sections:\
•     Step 1: Configure the Client-to-Gateway VPN Tunnel  on page  90 describes how to use 
the VPN Wizard to configure the VPN tunnel between the remote PC and net\
work 
gateway.
•      Step 2: Configure the NETGEAR ProSafe VPN Client  on page  93 shows how to configure 
the NETGEAR ProSafe VPN client endpoint.
VPN tunnel
Internet PC running NETGEAR
ProSafe VPN client
22.23.24.25
0.0.0.0
IP: 192.168.3.1
Figure 43. Wireless Modem Router DGND3700 client-to-gateway VPN tunnel
Step 1: Configure the Client-to-Gateway VPN Tunnel
This section describes using the VPN Wizard to set up the VPN tunnel usi\
ng the VPNC 
default parameters listed in Table
 16 on page  89. If you have special requirements not 
covered by these VPNC-recommended parameters, see Set Up VPN Tunnels in Special 
Circumstances on page  111 for information about how to set up the VPN tunnel.