User manual NETGEAR FIREWALL ROUTER

[. . . ] Reference Manual for the Model Wireless ADSL Firewall Router DG834G NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR 202-10006-05 June 2005 202-10006-05, June 2005 © 2005 by NETGEAR, Inc. Trademarks NETGEAR is a trademark of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. [. . . ] Remote Endpoint--the IP address on the remote VPN Endpoint. Action--the action will be either a "Drop" or a "Connect" button. SLifeTime (Secs)--the remaining Soft Lifetime for this SA in seconds. When the Soft Lifetime becomes zero, the SA (Security Association) will re-negotiated. HLifeTime (Secs)--the remaining Hard Lifetime for this SA in seconds. When the Hard Lifetime becomes zero, the SA (Security Association) will be terminated. (It will be re-established if required. ) · · · · · Virtual Private Networking (Advanced Feature) 202-10006-05, June 2005 8-31 Reference Manual for the Model Wireless ADSL Firewall Router DG834G Figure 8-36: Current VPN Tunnels (SAs) Screen Deactivating a VPN Tunnel Sometimes a VPN tunnel must be deactivated for testing purposes. There are two ways to deactivate a VPN tunnel: · · Policy table on VPN Policies page VPN Status page Using the Policy Table on the VPN Policies Page to Deactivate a VPN Tunnel To use the VPN Policies page to deactivate a VPN tunnel, perform the following steps: 1. Open the DG834G management interface and click on VPN Policies to get the VPN Policies screen (Figure 8-38). 8-32 Virtual Private Networking (Advanced Feature) 202-10006-05, June 2005 Reference Manual for the Model Wireless ADSL Firewall Router DG834G Figure 8-37: VPN Policies 3. Clear the Enable check box for the VPN tunnel you want to deactivate and click Apply. (To reactivate the tunnel, check the Enable box and click Apply. ) Using the VPN Status Page to Deactivate a VPN Tunnel To use the VPN Status page to deactivate a VPN tunnel, perform the following steps: 1. Open the DG834G management interface and click on VPN Status to get the VPN Status/Log screen (Figure 8-38). Virtual Private Networking (Advanced Feature) 202-10006-05, June 2005 8-33 Reference Manual for the Model Wireless ADSL Firewall Router DG834G Figure 8-38: VPN Status/Log Screen 3. Click VPN Status (Figure 8-38) to get the Current VPN Tunnels (SAs) screen (Figure 8-39). Click Drop for the VPN tunnel you want to deactivate. Figure 8-39: Current VPN Tunnels (SAs) Screen 8-34 Virtual Private Networking (Advanced Feature) 202-10006-05, June 2005 Reference Manual for the Model Wireless ADSL Firewall Router DG834G Note: When NETBIOS is enabled (which it is in the VPNC defaults implemented by the VPN Wizard), automatic traffic will reactivate the tunnel. To prevent reactivation from happening, either disable NETBIOS or disable the policy for the tunnel (see "Using the Policy Table on the VPN Policies Page to Deactivate a VPN Tunnel" on page 8-32). Deleting a VPN Tunnel To delete a VPN tunnel: 1. Open the DG834G management interface and click VPN Policies to display the VPN Policies screen (Figure 8-40). Select the radio button for the VPN tunnel to be deleted and click the Delete button. Figure 8-40: VPN Policies How to Set Up VPN Tunnels in Special Circumstances When the VPN Wizard and its VPNC defaults (see Table 8-2) are not appropriate for your special circumstances, use one of the following alternatives: · Auto Policy--for a typical automated Internet Key Exchange (IKE) setup, see "Using Auto Policy to Configure VPN Tunnels" on page 8-36. Auto Policy uses the IKE protocol to define the authentication scheme and automatically generate the encryption keys. Virtual Private Networking (Advanced Feature) 202-10006-05, June 2005 8-35 Reference Manual for the Model Wireless ADSL Firewall Router DG834G · Manual Policy--for a Manual Keying setup in which you must specify each phase of the connection, see "Using Manual Policy to Configure VPN Tunnels" on page 8-48. Rather, you manually enter all the authentication and key parameters. You have more control over the process, however the process is more complex and there are more opportunities for errors or configuration mismatches between your DG834G and the corresponding VPN endpoint gateway or client workstation. Using Auto Policy to Configure VPN Tunnels You need to configure matching VPN settings on both VPN endpoints. The outbound VPN settings on one end must match to the inbound VPN settings on other end, and vice versa. See "Example of Using Auto Policy" on page 8-41 for an example of using Auto Policy. Configuring VPN Network Connection Parameters All VPN tunnels on the DG834G wireless router require configuring several network parameters. This section describes those parameters and how to access them. [. . . ] RFCs can be found at www. ietf. org. See Routing Information Protocol. Glossary PPP over Ethernet PPTP PSTN Point-to-Point Protocol RADIUS RFC RIP 4 Reference Manual for the Model Wireless ADSL Firewall Router DG834G router A device that forwards data between networks. An IP router forwards data based on IP source and destination addresses. A protocol in which routers periodically exchange information with one another so that they can determine minimum distance paths between sources and destinations. [. . . ]