User manual NETGEAR DG834B REFERENCE MANUAL

[. . . ] 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR 202-10005-05 June 2005 202-10005-05, June 2005 © 2005 by NETGEAR, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. [. . . ] Since the remote PC has a dynamically assigned WAN IP address, it must initiate the request. To perform a ping test using our example, start from the remote PC: a. Type ping -t 192. 168. 3. 1 and then click OK. Figure 7-32: Running a Ping test to the LAN from the PC This will cause a continuous ping to be sent to the first DG834. After between several seconds and two minutes, the ping response should change from "timed out" to "reply. " Note: Use Cntl-C to stop the pinging. Figure 7-33: Ping test results Virtual Private Networking (Advanced Feature) 202-10005-05, June 2005 7-29 Reference Manual for the ADSL Firewall Router DG834 Once the connection is established, you can open the browser of the PC and enter the LAN IP address of the remote DG834. After a short wait, you should see the login screen of the Router (unless another PC already has the DG834 management interface open). · Gateway-to-Gateway Configuration--test the VPN tunnel by pinging the remote network from a PC attached to the DG834. a. ping 192. 168. 3. 1. Figure 7-34: Pinging test results Note: The pings may fail the first time. Start Using a VPN Tunnel to Active It To use a VPN tunnel, use a Web browser to go to a URL whose IP address or range is covered by the policy for that VPN tunnel. Verifying the Status of a VPN Tunnel To use the VPN Status page to determine the status of a VPN tunnel, perform the following steps: 1. Open the DG834 management interface and click on VPN Status to get the VPN Status/Log screen (Figure 7-35). Log--this log shows the details of recent VPN activity, including the building of the VPN tunnel. If there is a problem with the VPN tunnel, refer to the log for information about what might be the cause of the problem. Click Clear Log to delete all log entries. 7-30 Virtual Private Networking (Advanced Feature) 202-10005-05, June 2005 Reference Manual for the ADSL Firewall Router DG834 Figure 7-35: VPN Status/Log Screen 3. Click on VPN Status (Figure 7-30) to get the Current VPN Tunnels (SAs) screen (Figure 7-31). · SPI--each SA has a unique SPI (Security Parameter Index) for traffic in each direction. For "Manual" key exchange, the SPI is specified in the Policy definition. For "Automatic" key exchange, the SPI is generated by the IKE protocol. Action--the action will be either a "Drop" or a "Connect" button. When the Soft Lifetime becomes zero, the SA (Security Association) will re-negotiated. When the Hard Lifetime becomes zero, the SA (Security Association) will be terminated. (It will be re-established if required. ) · · · · · Virtual Private Networking (Advanced Feature) 202-10005-05, June 2005 7-31 Reference Manual for the ADSL Firewall Router DG834 Figure 7-36: Current VPN Tunnels (SAs) Screen Deactivating a VPN Tunnel Sometimes a VPN tunnel must be deactivated for testing purposes. There are two ways to deactivate a VPN tunnel: · · Policy table on VPN Policies page VPN Status page Using the Policy Table on the VPN Policies Page to Deactivate a VPN Tunnel To use the VPN Policies page to deactivate a VPN tunnel, perform the following steps: 1. Open the DG834 management interface and click on VPN Policies to get the VPN Policies screen (Figure 7-38). 7-32 Virtual Private Networking (Advanced Feature) 202-10005-05, June 2005 Reference Manual for the ADSL Firewall Router DG834 Figure 7-37: VPN Policies 3. Clear the Enable check box for the VPN tunnel you want to deactivate and click Apply. (To reactivate the tunnel, check the Enable box and click Apply. ) Using the VPN Status Page to Deactivate a VPN Tunnel To use the VPN Status page to deactivate a VPN tunnel, perform the following steps: 1. [. . . ] Short for Remote Authentication Dial-In User Service, RADIUS is an authentication system. Using RADIUS, you must enter your user name and password before gaining access to a network. This information is passed to a RADIUS server, which checks that the information is correct, and then authorizes access. Though not an official standard, the RADIUS specification is maintained by a working group of the IETF. [. . . ]