Оценок - 0, средний балл: 0
(
)
)
|
Фрагмент инструкции
In this example, 22.23.24.25 is used. The resulting connection settings are shown in Figure 6-10. 3. Configure the security policy in the NETGEAR ProSafe VPN Client software: a. In the Network Security Policy list, expand the new connection by double-clicking its name or clicking the + symbol. My Identity and Security Policy subheadings appear below the connection name. b. Click the Security Policy subheading to view the Security Policy settings. Figure 6-10 c. In the Select Phase 1 Negotiation Mode section of the screen, select the Main Mode radio button. 4. Configure the VPN client identity. In this step, you provide information about the remote VPN client PC. You must provide the pre-shared key that you configured in the DG834G v5 and either a fixed IP address or a fixed virtual IP address of the VPN client PC. Virtual Private Networking v1.0, March 2010 Wireless ADSL2+ Modem Router DG834Gv5 User Manual a. In the Network Security Policy list on the left side of the Security Policy Editor window, click My Identity. Figure 6-11 b. In the Select Certificate drop-down list, select None. c. Select IP Address in the ID Type drop-down list. If you are using a virtual fixed IP address, enter this address in the Internal Network IP Address field. Otherwise, leave this field empty. d. In the Internet Interface section of the screen, select the adapter that you use to access the Internet. If you have a dial-up Internet account, select PPP Adapter in the Name field. If you have a dedicated cable or DSL line, select your Ethernet adapter. If you will be switching between adapters or if you have only one adapter, select Any. e. In the My Identity section of the screen, click the Pre-Shared Key button. The Pre-Shared Key screen displays: Figure 6-12 Virtual Private Networking v1.0, March 2010 Wireless ADSL2+ Modem Router DG834Gv5 User Manual f. Click Enter Key. Enter the DG834G v5 pre-shared key, and then click OK. In this example, 12345678 is entered. This field is case-sensitive. 5. Configure the VPN Client Authentication Proposal. In this step, you provide the type of encryption (DES or 3DES) to be used for this connection. This selection must match your selection in the DG834G v5 configuration. a. In the Network Security Policy list on the left side of the Security Policy Editor window, expand the Security Policy heading by double-clicking its name or clicking the + symbol. b. Expand the Authentication subheading by double clicking its name or clicking the + symbol. Then select Proposal 1 below Authentication. Figure 6-13 c. In the Authentication Method drop-down list, select Pre-Shared key. d. In the Encrypt Alg drop-down list, select the type of encryption that is configured for the Encryption Protocol in the DG834G v5 in Table 6-3 on page 6-6. In this example, use Triple DES. e. In the Hash Alg drop-down list, select SHA-1. f. In the SA Life drop-down list, select Unspecified. g. In the Key Group drop-down list, select Diffie-Hellman Group 2. 6. Configure the VPN client key exchange proposal. Virtual Private Networking v1.0, March 2010 Wireless ADSL2+ Modem Router DG834Gv5 User Manual In this step, you provide the type of encryption (DES or 3DES) to be used for this connection. This selection must match your selection in the DG834G v5 configuration. a. Expand the Key Exchange subheading by double-clicking its name or clicking the + symbol. Then select Proposal 1 below Key Exchange. Figure 6-14 b. In the SA Life drop-down list, select Unspecified. c. In the Compression drop-down list, select None. d. Select the Encapsulation Protocol (ESP) check box. e. In the Encrypt Alg drop-down list, select the type of encryption that is configured for the Encryption Protocol in the DG834G v5 in Table 6-3 on page 6-6. In this example, use Triple DES. f. In the Hash Alg drop-down list, select SHA-1. g. In the Encapsulation drop-down list, select Tunnel. h. Leave the Authentication Protocol (AH) check box cleared. 7. Save the VPN Client Settings. In the Security Policy Editor window, select File > Save. After you have configured and saved the VPN client information, your PC automatically opens the VPN connection when you attempt to access any IP addresses in the range of the remote VPN router’s LAN. Virtual Private Networking v1.0, March 2010 Wireless ADSL2+ Modem Router DG834Gv5 User Manual 8. Check the VPN connection. To check the VPN Connection, you can initiate a request from the remote PC to the DG834G v5 modem router’s network by using the Connect option in the NETGEAR ProSafe menu bar. The NETGEAR ProSafe client reports the results of the attempt to connect. Since the remote PC has a dynamically assigned WAN IP address, it must initiate the request. To perform a ping test using our example, start from the remote PC: a. Establish an Internet connection from the PC. b. On the Windows taskbar, click the Start button, and then click Run. c. Type ping -t 192.168.3.1, and then click OK. Figure 6-15 This causes a continuous pin...