Page 96 / 185 Scroll up to view Page 91 - 95
Virtual Private Networking
96
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
b.
Click the
Security Policy
subheading to view the Security Policy settings.
Figure 44.
Security Policy settings, Client-to-Gateway A
c.
In the Select Phase 1 Negotiation Mode section of the screen, select the
Main Mode
radio button.
4.
Configure the VPN client identity.
In this step, you provide information about the remote VPN client PC. You have to provide
the pre-shared key that you configured in the wireless modem router and either a fixed IP
address or a fixed virtual IP address of the VPN client PC.
a.
In the Network Security Policy list on the left side of the Security Policy Editor window,
click
My Identity
.
b.
In the
Select Certificate
drop-down list, select
None
.
Downloaded from
www.Manualslib.com
manuals search engine
Page 97 / 185
Virtual Private Networking
97
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
c.
In the
ID Type
drop-down list, select
IP Address
. If you are using a virtual fixed IP
address, enter this address in the
Internal Network IP Address
field. Otherwise,
leave this field empty.
d.
In the Internet Interface section of the screen, select the adapter that you use to
access the Internet. If you have a dial-up Internet account, in the
Name
list, select
PPP Adapter
. If you have a dedicated cable or ADSL line, select your Ethernet
adapter. If you will be switching between adapters or if you have only one adapter,
select
Any
.
e.
In the My Identity section of the screen, click the
Pre-Shared Key
button. The
Pre-Shared Key screen displays:
f.
Click
Enter Key
. Enter the wireless modem router pre-shared key, and then click
OK
. In this example, 12345678
is entered, though asterisks are displayed in the
field. This field is case-sensitive.
5.
Configure the VPN client authentication proposal.
In this step, you provide the type of encryption (DES or 3DES) to be used for this
connection. This selection has to match your selection in the wireless modem router
configuration.
a.
In the Network Security Policy list on the left side of the Security Policy Editor window,
expand the Security Policy heading by double-clicking its name or clicking the
+
symbol.
b.
Expand the Authentication subheading by double-clicking its name or clicking the
+
symbol. Then select
Proposal 1
below Authentication.
c.
In the
Authentication Method
drop-down list, select
Pre-Shared key
.
Downloaded from
www.Manualslib.com
manuals search engine
Page 98 / 185
Virtual Private Networking
98
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
d.
In the
Encrypt Alg
drop-down list, select the type of encryption that is configured for
the encryption protocol in the wireless modem router, as listed in
Table 15
on
page 88. This example uses Triple DES.
e.
In the
Hash Alg
drop-down list, select
SHA-1
.
f.
In the
SA Life
drop-down list, select
Unspecified
.
g.
In the
Key Group
drop-down list, select
Diffie-Hellman Group 2
.
6.
Configure the VPN client key exchange proposal.
In this step, you provide the type of encryption (DES or 3DES) to be used for this
connection. This selection has to match your selection in the wireless modem router
configuration.
a.
Expand the Key Exchange subheading by double-clicking its name or clicking the
+
symbol. Then select
Proposal 1
below Key Exchange.
b.
In the
SA Life
drop-down list, select
Unspecified
.
c.
In the
Compression
drop-down list, select
None
.
d.
Select the
Encapsulation Protocol (ESP)
check box.
e.
In the
Encrypt Alg
drop-down list, select the type of encryption that is configured for
the encryption protocol in the wireless modem router, as listed in
Table 15
on
page 88. This example uses Triple DES.
f.
In the
Hash Alg
drop-down list, select
SHA-1
.
g.
In the
Encapsulation
drop-down list, select
Tunnel
.
h.
Leave the
Authentication Protocol (AH)
check box cleared.
7.
Save the VPN client settings.
In the Security Policy Editor window, select
File > Save
.
After you have configured and saved the VPN client information, your PC automatically
opens the VPN connection when you attempt to access any IP addresses in the range of
the remote VPN router’s LAN.
8.
Check the VPN connection.
Downloaded from
www.Manualslib.com
manuals search engine
Page 99 / 185
Virtual Private Networking
99
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
To check the VPN connection, you can initiate a request from the remote PC to the
wireless modem router’s network by using the Connect option in the NETGEAR ProSafe
menu bar. The NETGEAR ProSafe client reports the results of the attempt to connect.
Since the remote PC has a dynamically assigned WAN IP address, it has to initiate the
request.
To perform a ping test using our example, start from the remote PC:
a.
Establish an Internet connection from the PC.
b.
On the Windows taskbar, click the
Start
button, and then select
Run
.
c.
Type
ping -t 192.168.3.1
, and then click
OK
.
This causes a continuous ping to be sent to the first wireless modem router. After
between several seconds and 2 minutes, the ping response should change from
timed out
to
reply
.
Once the connection is established, you can open a browser on the PC and enter the
LAN IP address of the remote gateway. After a short wait, you should see the login
screen of the wireless modem router (unless another PC is already logged in to the
wireless modem router).
You can view information about the progress and status of the VPN client connection by
opening the NETGEAR ProSafe Log Viewer.
Downloaded from
www.Manualslib.com
manuals search engine
Page 100 / 185
Virtual Private Networking
100
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
To launch this function, click the Windows
Start
button, then select
Programs >
NETGEAR ProSafe VPN Client > Log Viewer
. The VPN Status/Log screen for a
successful connection is shown in the following figure:
Note:
Use the active VPN tunnel information and pings to determine
whether a failed connection is due to the VPN tunnel or some reason
outside the VPN tunnel.
The Connection Monitor screen for this connection is shown in the following figure:
In this example you can see these settings:
The wireless modem router has a GW address (public IP WAN address) of 22.23.24.25.
The wireless modem router has a remote address (LAN IP address) of 192.168.3.1.
The VPN client PC has a local address (dynamically assigned address) of 192.168.2.2.
While the connection is being established, the
Connection Name
field in this screen displays
SA
before the name of the connection. When the connection is successful, the
SA
changes
to the yellow key symbol shown in the previous figure.
Downloaded from
www.Manualslib.com
manuals search engine

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top