Оценок - 0, средний балл: 0
(
)
)
|
Фрагмент инструкции
It is common to use periods over an hour (3600 seconds) for the SA lifetime. This setting applies to both IKE and IPSec SAs. - Enable PFS (Perfect Forward Secrecy). If enabled, security is enhanced by ensuring that the key is changed at regular intervals. Also, even if one key is broken, subsequent keys are no easier to break. (Each key has no relationship to the previous key.) 4.Click Apply when done. Add or Edit a Manual VPN Policy A Manual VPN policy requires all settings (including the keys) for the VPN tunnel to be manually input at each end (both VPN endpoints). No third-party server or organization is involved. 1.Click ADVANCED > Advanced Setup > VPN Policies. 2.Click the Add Manual Policy button. 3.Enter or select the following parameters: •General. These settings identify this policy and determine its major characteristics. - Policy Name. Enter a unique name to identify this policy. This name is not supplied to the remote VPN endpoint. It is used only to help you manage the policies. - Remote VPN Endpoint. Select the desired option (IP address or domain name) and enter the address or domain name of the remote VPN endpoint you wish to connect to. •Local LAN. These settings identify which computers on your LAN are covered by this policy. For each selection, data must be provided as follows: - Single address. Enter an IP address in the Single/Start IP address field. Typically, this setting is used when you wish to make a single server on your LAN available to remote users. - Range address. Enter the starting IP address in the Single/Start IP address field, and the finish IP address in the Finish IP address field. This setting must be an address range used on your LAN. - Subnet address. Enter an IP address in the Single/Start IP address field, and the desired network mask in the Subnet Mask field. The remote VPN endpoint must have these IP addresses entered as its remote addresses. •Remote LAN. These identify which computers on the remote LAN are covered by this policy. For each selection, data must be provided as follows: - Single PC - dynamic IP. Select this option if there is no LAN (only a single computer) at the remote endpoint. If this option is selected, no additional data is required. - Single address. Enter an IP address in the Single/Start IP address field. This setting must be an address on the remote LAN. Typically, this setting is used when you wish to access a server on the remote LAN. - Range address. Enter the starting IP address in the Single/Start IP address field, and the finish IP address in the Finish IP address field. This range must be an address range used on the remote LAN. - Subnet address. Enter an IP address in the Single/Start IP address field, and the desired network mask in the Subnet Mask field. The remote VPN endpoint must have these IP addresses entered as its local addresses. •ESP Configuration. ESP (Encapsulating Security Payload) provides security for the payload (data) sent through the VPN tunnel. - SPI. Enter the required SPIs. Each policy must have unique SPIs. These settings must match the remote VPN endpoint. The Incoming setting here must match the Outgoing setting on the remote VPN endpoint, and the Outgoing setting here must match the Incoming setting on the remote VPN endpoint. - Encryption. Select the desired encryption algorithm, and enter the key in the field provided. For 3DES, the keys should be 24 ASCII characters (48-hex characters). - Authentication. Select the desired authentication algorithm, and enter the key in the field provided. For MD5, the keys should be 16 ASCII characters (32-hex characters). For SHA-1, the keys should be 20 ASCII (40-hex characters). 4.Click Apply when done. 10. Troubleshooting Diagnose and solve problems This chapter provides information to help you diagnose and solve problems you might have with your wireless modem router. If you do not find the solution here, check the NETGEAR support site at for product and contact information. This chapter contains the following sections: •Quick Tips •Troubleshoot with the LEDs •Cannot Log In to the Router •Cannot Access the Internet •Changes Not Saved •Incorrect Date or Time •Wireless Connectivity •Restore the Factory Settings and Password •Troubleshoot Your Network Using the Ping Utility This section describes tips for troubleshooting some common problems. Sequence to Restart Your Network Be sure to restart your network in this sequence: 1.Turn off and unplug the modem. 2.Turn off the wireless modem router and computers. 3.Plug in the modem and turn it on. Wait 2 minutes. 4.Turn on the wireless modem router and wait 2 minutes. 5.Turn on the computers. Check Ethernet Cable Connections Make sure that the Ethernet cables are securely plugged in. •The Internet status LED on the wireless modem router is lit if the Ethernet cable connecting the wireless modem router and the modem is plugged in securely and the modem and wireless mod...