Page 101 / 157
Scroll up to view Page 96 - 100
Wireless ADSL2+ Modem Router DG834Gv5 User Manual
Virtual Private Networking
6-23
v1.0, March 2010
6.
Click
Done
on the Summary screen (see
Figure 6-24
) to complete the configuration
procedure. The VPN Policies screen displays, showing that the new tunnel is enabled.
7.
Repeat these steps for the DG834G v5 on LAN B, and pay special attention to using the
following network settings:
•
WAN IP of the remote VPN gateway (for example,
14.15.16.17
)
•
LAN IP settings of the remote VPN gateway:
–
IP Address (for example,
192.168.0.1
)
–
Subnet Mask (for example,
255.255.255.0
)
–
Preshared Key (for example,
12345678
)
8.
Use the VPN Status screen to activate the VPN tunnel by performing the following steps:
Figure 6-26
Note:
See
“Using Auto Policy to Configure VPN Tunnels” on page 6-32
for
information about how to enable the IKE keepalive capability on an existing
VPN tunnel.
Note:
The VPN Status screen is only one of three ways to active a VPN tunnel. See
“Activating a VPN Tunnel” on page 6-25
for information about the other ways.
Page 102 / 157
Wireless ADSL2+ Modem Router DG834Gv5 User Manual
6-24
Virtual Private Networking
v1.0, March 2010
a.
On the DG834G v5 main menu, select VPN Status. The VPN Status/Log screen displays:
b.
Click the
VPN Status
button to get the Current VPN Tunnels (SAs) screen:
c.
Click
Connect
for the VPN tunnel you want to activate. View the VPN Status/Log screen
(
Figure 6-29
) to verify that the tunnel is connected.
Figure 6-27
Figure 6-28
Page 103 / 157
Wireless ADSL2+ Modem Router DG834Gv5 User Manual
Virtual Private Networking
6-25
v1.0, March 2010
VPN Tunnel Control
Activating a VPN Tunnel
There are three ways to activate a VPN tunnel:
•
Use the VPN Status screen.
•
Activate the VPN tunnel by pinging the remote endpoint.
•
Start using the VPN tunnel.
Using the VPN Status Page to Activate a VPN Tunnel
To use the VPN Status screen to activate a VPN tunnel:
1.
Log in to the modem router.
2.
On the main menu, select VPN Status. The VPN Status/Log screen displays:
Note:
See
“Using Auto Policy to Configure VPN Tunnels” on page 6-32
for information
about how to enable the IKE keepalive capability on an existing VPN tunnel.
Figure 6-29
Page 104 / 157
Wireless ADSL2+ Modem Router DG834Gv5 User Manual
6-26
Virtual Private Networking
v1.0, March 2010
3.
Click
VPN Status
to get the Current VPN Tunnels (SAs) screen:
4.
Click
Connect
for the VPN tunnel that you want to activate.
Activating the VPN Tunnel by Pinging the Remote Endpoint
To activate the VPN tunnel by pinging the remote endpoint (for example, 192.168.3.1), perform
the following steps depending on whether your configuration is client-to-gateway or gateway-to-
gateway:
•
Client-to-gateway configuration
. To check the VPN connection, you can initiate a request
from the remote PC to the DG834G v5’s network by using the Connect option in the
NETGEAR ProSafe menu bar. The NETGEAR ProSafe client reports the results of the
attempt to connect. Since the remote PC has a dynamically assigned WAN IP address, it must
initiate the request.
To perform a ping test using our example, start from the remote PC:
a.
Establish an Internet connection from the PC.
b.
On the Windows taskbar, click the
Start
button, and then click
Run
.
Figure 6-30
Note:
This section uses 192.168.3.1 for an example remote endpoint LAN IP address.
Page 105 / 157
Wireless ADSL2+ Modem Router DG834Gv5 User Manual
Virtual Private Networking
6-27
v1.0, March 2010
c.
Type
ping -t 192.168.3.1,
and then click
OK
.
This causes a continuous ping to be sent to the first DG834G v5. Within two minutes, the
ping response should change from
timed out
to
reply
.
Once the connection is established, you can open a browser on the PC and enter the LAN IP
address of the remote DG834G v5. After a short wait, you should see the login screen of the
modem router (unless another PC already has the DG834G v5 management interface open).
•
Gateway-to-gateway configuration
. Test the VPN tunnel by pinging the remote network
from a PC attached to the DG834G v5.
a.
Open a command prompt (for example, Start > Run > cmd).
Figure 6-31
Note:
You can use Ctrl-C to stop the pinging.
Figure 6-32
Running a ping test
to the LAN from the PC
19216811.live