Document Outline

• Reference Manual for the ADSL Firewall Router DG834
  • Product and Publication Details
• Contents
• Chapter 1 About This Manual
  • Audience, Scope, Conventions, and Formats
  • How to Use This Manual
  • How to Print this Manual
• Chapter 2 Introduction
  • About the Router
  • Key Features
    • A Powerful, True Firewall
    • Easy Installation and Management
    • Protocol Support
    • Virtual Private Networking (VPN)
    • Content Filtering
    • Auto Sensing and Auto Uplink™ LAN Ethernet Connections
  • What’s in the Box?
    • The Router’s Front Panel
    • The Router’s Rear Panel
• Chapter 3 Connecting the Router to the Internet
  • What You Need Before You Begin
    • ADSL Microfilter Requirements
      • ADSL Microfilter
      • ADSL Microfilter with Built-In Splitter
    • Ethernet Cabling Requirements
    • Computer Hardware Requirements
    • LAN Configuration Requirements
    • Internet Configuration Requirements
    • Where Do I Get the Internet Configuration Parameters?
    • Record Your Internet Connection Information
  • Connecting the DG834 to Your LAN
    • How to Connect the Router
  • Auto-Detecting Your Internet Connection Type
    • Wizard-Detected PPPoE Login Account Setup
    • Wizard-Detected PPPoA Login Account Setup
    • Wizard-Detected Dynamic IP Account Setup
    • Wizard-Detected IP Over ATM Account Setup
    • Wizard-Detected Fixed IP (Static) Account Setup
  • Testing Your Internet Connection
  • Manually Configuring Your Internet Connection
    • How to Perform Manual Configuration
      • Internet Connection Requires Login and Uses PPPoE
      • Internet Connection Requires Login and Uses PPPoA
      • Internet Connection Does Note Require A Login
    • ADSL Settings
• Chapter 4 Protecting Your Network
  • Protecting Access to Your DG834 ADSL Firewall Router
    • How to Change the Built-In Password
    • Changing the Administrator Login Timeout
  • Configuring Basic Firewall Services
    • Blocking Keywords, Sites, and Services
    • How to Block Keywords and Sites
  • Firewall Rules
    • Inbound Rules (Port Forwarding)
      • Inbound Rule Example: A Local Public Web Server
      • Inbound Rule Example: Allowing Videoconferencing
      • Considerations for Inbound Rules
    • Outbound Rules (Service Blocking)
      • Outbound Rule Example: Blocking Instant Messenger
    • Order of Precedence for Rules
  • Services
    • How to Define Services
  • Setting Times and Scheduling Firewall Services
    • How to Set Your Time Zone
    • How to Schedule Firewall Services
• Chapter 5 Managing Your Network
  • Backing Up, Restoring, or Erasing Your Settings
    • How to Back Up the Configuration to a File
    • How to Restore the Configuration from a File
    • How to Erase the Configuration
  • Upgrading the Router’s Firmware
    • How to Upgrade the Router Firmware
  • Network Management Information
    • Viewing Router Status and Usage Statistics
    • Viewing Attached Devices
    • Viewing, Selecting, and Saving Logged Information
      • Selecting What Information to Log
      • Saving Log Files on a Server
    • Examples of Log Messages
      • Activation and Administration
      • Dropped Packets
  • Enabling Security Event E-mail Notification
  • Running Diagnostic Utilities and Rebooting the Router
  • Enabling Remote Management
    • Configuring Remote Management
• Chapter 6 Advanced Configuration
  • Configuring Advanced Security
    • Setting Up A Default DMZ Server
      • How to Configure a Default DMZ Server
    • Connect Automatically, as Required
    • Disable Port Scan and DOS Protection
    • Respond to Ping on Internet WAN Port
    • MTU Size
  • Configuring LAN IP Settings
    • DHCP
      • Use Router as DHCP server
      • Reserved IP addresses
    • How to Configure LAN TCP/IP Settings
    • Configuring Dynamic DNS
    • How to Configure Dynamic DNS
  • Using Static Routes
    • Static Route Example
    • How to Configure Static Routes
  • Universal Plug and Play (UPnP)
• Chapter 7 Virtual Private Networking (Advanced Feature)
  • Overview of VPN Configuration
    • Client-to-Gateway VPN Tunnels
    • Gateway-to-Gateway VPN Tunnels
  • Planning a VPN
  • VPN Tunnel Configuration
  • How to Set Up a Client-to-Gateway VPN Configuration
    • Step 1: Configuring the Client-to-Gateway VPN Tunnel on the DG834
    • Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC
  • How to Set Up a Gateway-to-Gateway VPN Configuration
  • VPN Tunnel Control
    • Activating a VPN Tunnel
      • Using the VPN Status Page to Activate a VPN Tunnel
      • Activate the VPN Tunnel by Pinging the Remote Endpoint
      • Start Using a VPN Tunnel to Active It
    • Verifying the Status of a VPN Tunnel
    • Deactivating a VPN Tunnel
      • Using the Policy Table on the VPN Policies Page to Deactivate a VPN Tunnel
      • Using the VPN Status Page to Deactivate a VPN Tunnel
    • Deleting a VPN Tunnel
  • How to Set Up VPN Tunnels in Special Circumstances
    • Using Auto Policy to Configure VPN Tunnels
      • Configuring VPN Network Connection Parameters
      • Example of Using Auto Policy
    • Using Manual Policy to Configure VPN Tunnels
• Chapter 8 Troubleshooting
  • Basic Functioning
    • Power LED Not On
    • Test LED Never Turns On or Test LED Stays On
    • LAN or WAN Port LEDs Not On
  • Troubleshooting the Web Configuration Interface
  • Troubleshooting the ISP Connection
    • ADSL link
      • WAN LED Blinking Yellow
      • WAN LED Off
    • Obtaining a WAN IP Address
    • Troubleshooting PPPoE or PPPoA
    • Troubleshooting Internet Browsing
  • Troubleshooting a TCP/IP Network Using the Ping Utility
    • Testing the LAN Path to Your Router
    • Testing the Path from Your Computer to a Remote Device
  • Restoring the Default Configuration and Password
    • Using the Reset button
  • Problems with Date and Time
• Appendix A Technical Specifications
• Appendix B Network and Routing Basics
  • Related Publications
  • Basic Router Concepts
    • What is a Router?
    • Routing Information Protocol
    • IP Addresses and the Internet
    • Netmask
    • Subnet Addressing
    • Private IP Addresses
    • Single IP Address Operation Using NAT
    • MAC Addresses and Address Resolution Protocol
    • Related Documents
    • Domain Name Server
    • IP Configuration by DHCP
  • Internet Security and Firewalls
    • What is a Firewall?
    • Stateful Packet Inspection
    • Denial of Service Attack
  • Ethernet Cabling
    • Category 5 Cable Quality
    • Inside Twisted Pair Cables
    • Uplink Switches, Crossover Cables, and MDI/MDIX Switching
• Appendix C Preparing Your Network
  • Preparing Your Computers for TCP/IP Networking
  • Configuring Windows 95, 98, and Me for TCP/IP Networking
    • Installing or Verifying Windows Networking Components
    • Enabling DHCP to Automatically Configure TCP/IP Settings in Windows 95B, 98, and Me
    • Selecting the Windows’ Internet Access Method
    • Verifying TCP/IP Properties
  • Configuring Windows NT4, 2000 or XP for IP Networking
    • Installing or Verifying Windows Networking Components
  • DHCP Configuration of TCP/IP in Windows XP, 2000, or NT4
    • DHCP Configuration of TCP/IP in Windows XP
    • DHCP Configuration of TCP/IP in Windows 2000
    • DHCP Configuration of TCP/IP in Windows NT4
    • Verifying TCP/IP Properties for Windows XP, 2000, and NT4
  • Configuring the Macintosh for TCP/IP Networking
    • MacOS 8.6 or 9.x
    • MacOS X
    • Verifying TCP/IP Properties for Macintosh Computers
  • Verifying the Readiness of Your Internet Account
    • Are Login Protocols Used?
    • What Is Your Configuration Information?
    • Obtaining ISP Configuration Information for Windows Computers
    • Obtaining ISP Configuration Information for Macintosh Computers
  • Restarting the Network
• Appendix D Virtual Private Networking
  • What is a VPN?
  • What Is IPSec and How Does It Work?
    • IPSec Security Features
    • IPSec Components
    • Encapsulating Security Payload (ESP)
    • Authentication Header (AH)
    • IKE Security Association
      • Mode
    • Key Management
  • Understand the Process Before You Begin
  • VPN Process Overview
    • Network Interfaces and Addresses
      • Interface Addressing
      • Firewalls
    • Setting Up a VPN Tunnel Between Gateways
  • VPNC IKE Security Parameters
    • VPNC IKE Phase I Parameters
    • VPNC IKE Phase II Parameters
  • Testing and Troubleshooting
  • Additional Reading
• Appendix E NETGEAR VPN Configuration
  • DG834 to FVL328
    • Configuration Profile
    • Step-By-Step Configuration
  • DG834 with FQDN to FVL328
    • Configuration Profile
      • The Use of a Fully Qualified Domain Name (FQDN)
    • Step-By-Step Configuration
  • Configuration Summary (Telecommuter Example)
  • Setting Up the Client-to-Gateway VPN Configuration (Telecommuter Example)
    • Step 1: Configuring the Client-to-Gateway VPN Tunnel on the VPN Router at the Employer’s Main Office
    • Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC at the Telecommuter’s Home Office
  • Monitoring the VPN Tunnel (Telecommuter Example)
    • Viewing the PC Client’s Connection Monitor and Log Viewer
    • Viewing the VPN Router’s VPN Status and Log Information
• Glossary