NETGEAR DEVG2020 DOT User manual

PREMIUMBUSINESS
GATEWAY-DEVG2020
DOT (DIGITAL OFFICE
TECHNOLOGY)™ USER
GUIDE

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 2
VERSION 2.03
NEED MORE SUPPORT?
If you have questions beyond this guide, we want to help.
To learn more about your Business Broadband or DOT tools and features, visit the Business Broadband support
page at http://www.telstra.com.au/business-enterprise/help-support/software-downloads/index.htm or if
you are a DOT customer, visit DOT Online Support page at http://www.telstra.com/dot/support
To speak with a DOT consultant, or set up a DOT training session, phone us on 13 2000 and say “Digital Office
Technology” when prompted. Our consultants are available 24 hours a day.
When calling, please have your Account Number or phone number, including area code, ready for the consultant.
CONVENTIONS USED IN THIS GUIDE
The following typographical conventions are used in this guide for simplicity and readability:
Web addresses, e-mail addresses and hyperlinks are shown in bold italics, for example
www.telstraenterprise.com.au.
© Telstra Corporation Limited (ABN 33 051 775 556) 2013. All rights reserved.
This work is copyright. Apart from any use as permitted under the Copyright Act 1968, information contained within this manual
cannot be used for any other purpose other than the purpose for which it was released. No part of this publication may be
reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, photocopying,
recording or otherwise, without the written permission of Telstra Corporation Limited.
Words mentioned in this book that are known to be trademarks, whether registered or unregistered, have been capitalised or
use initial capitals. Terms identified as trademarks include Cisco®, Microsoft®, Microsoft PC®, Apple®, AirPort®, Mac®,
Linksys®.

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 3
VERSION 2.03
WHAT’S INSIDE
1. INSTALLING THE NETGEAR DEVG2020 GATEWAY 4
2. TURNING ON/OFF WIFI (WIRELESS) 6
2.1. CHANGING WIFI CREDENTIALS 7
3. ACTIVATE DOT BROADBAND BACK-UP 10
4. NETGEAR GATEWAY CONFIGURATION FOR REMOTE
CLIENT ACCESS 12
4.1. CONFIGURATION OF THE GATEWAY VIA THE GUI 12
4.2. CONFIGURATION OF THE GATEWAY VIA THE WIZARD 13
5. PROCEDURE FOR INSTALLING VPN PROSAFE CLIENT
LITE FOR WINDOWS 16
6. HOW TO OPEN A VPN CONNECTION WITH THE PROSAFE
CLIENT 22
7. SITE-TO-SITE VPN CONFIGURATION 23
APPENDIX 1 –MINIMUM SYSTEM REQUIREMENTS FOR PROSAFE VPN
CLIENT 25

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 4
VERSION 2.03
1. INSTALLING THE NETGEAR DEVG2020 GATEWAY
Please have your DOT Configuration Summary emailed to you when you purchased DOT.
The Configuration Summary contains the login credentials required to configure the gateway and connect to the
internet.
Connecting the DEVG2020 Gateway:
1. Plug the power adaptor into the wall socket
2. Connect the other end to the socket on the gateway labelled ‘Power(12V, 2.5A)’. Turn On the power point
on the wall socket
3. Turn On the gateway by pressing the Power ON/OFF button
4. Take the provided grey ADSL cable and connect one end to the grey port on the gateway labelled ‘DSL.
Connect the other end of the cable to the phone socket in your wall

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 5
VERSION 2.03
5. Take the provided white Ethernet cable with yellow tips and connect one end to a yellow port on the
gateway labelled ‘LAN. Connect the other end to your computer or laptop’s Ethernet port.
6. Open up a web browser on your computer and type in telstrabusiness.com. Follow the on-screen
instructions to connect to the internet. The login and password required to connect to the internet is
provided on your Configuration Summary email.

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 6
VERSION 2.03
2. TURNING ON/OFF WIFI (WIRELESS)
The DEVG2020 Gateway is delivered with its WiFi turned On and configured with a unique WiFi Id and WPA2 Key
(Password). The Id, also known as SSID, and the WPA2 Key, are available on a card provided in the packaging
(Figure 1).
Figure 1: WiFi Credentials Card
You can switch Off the WiFi on the router by pressing the WiFi On/Off button on the front of the Gateway (Figure
2).
Figure 2: Turning On/Off the WiFi

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 7
VERSION 2.03
2.1. CHANGING WIFI CREDENTIALS
Login into the Netgear DEVG2020 Genie to change the default provide WiFi credentials.
Connect a PC/laptop to the Gateway, and open an internet browser.
The IP address and login credentials to the Netgear DEVG2020 Genie is printed at the bottom of the gateway
(Figure 3).
Figure 3: DEVG2020 Genie URL and Login Credentials
Enter the IP address 192.168.15.1 into internet browser. Press Enter to access the Genie’s Login page (Figure 4).
Type the user name “admin”, password “telstra” and press Enter to reach the Genie’s Welcome Page (Figure 5).
Figure 4: DEVG2020 Genie

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 8
VERSION 2.03
Figure 5: Genie Welcome Page
Click on “Wireless” in the left hand menu to view and modify the WiFi credentials (Figure 5).
Figure 6: Wireless Setting
In the field Name (SSID), in Figure 6 above, type in the new Wireless network name.
Note: WPA2-PSK [AES] must be selected under section Security Options.
Scroll down the page to change the WPA2 key in the field name Paraphrase. Press Apply to save changes
(Figure 7).

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 9
VERSION 2.03
Figure 7: Changing WPA2 Key (Password)
Figure 8: Wireless Network credentials updated
The new SSID and WPA2 key will displayed on the welcome page (Figure 8).
Note: Computers, Tablets and phones must be reconfigured to connect to the Wireless network using the new
credentials. This includes previously connected devices.

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 10
VERSION 2.03
3. ACTIVATE DOT BROADBAND BACK-UP
Figure 9: DOT Broadband Back-up.
Enter the IP address 192.168.15.1 into internet browser and press Enter to access the Genie’s Login page (Figure
4). Type the user name “admin”, password “telstra” and press Enter to reach the Genie’s Welcome Page (Figure
9).
Figure 9: Genie Welcome Page
Click on “Mobile Internet” in the left hand menu (Figure 9) to reach the Mobile Set-up page (Figure 10).

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 11
VERSION 2.03
Figure 10: Mobile Set-up
Set “Does your Internet connection require a login?” to No
Select “telstra.extranet” for the APN.
Type in “*99***1#” in the Dial String.
Click Apply to save the changes and press Logout .
Connect the Mobile broadband USB modem to the either USB ports on the gateway.
Reboot the Gateway by turning Off the power and waiting 1 minute before turning it On.

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 12
VERSION 2.03
4. NETGEAR GATEWAY CONFIGURATION FOR REMOTE CLIENT
ACCESS
This section describes the connection configuration details for remote client use to access the Gateway.
4.1. CONFIGURATION OF THE GATEWAY VIA THE GUI
This section outlines how to configure VPN access from the Netgear gateway GUI after the initial Wizard
installation
1. Under the ‘ADVANCED’ tab, click on the ‘VPN’ menu and then click on the ‘Manage VPN’ link.
Configurig VPN Connection
2. Under the ‘Remote Client to GW VPN Configuration’ heading, Click the ‘Edit’ button to activate
the Pre-Shared Key (PSK) textbox.
3. Enter a Pre-Shared that will be used for the Phase 1 IKEv1 negotiation and then click the
adjacent ‘Save’ button. (This is an alpha-numeric string with a maximum length of 32 characters)
4. In the ‘VPN remote Virtual IP’ and ‘Mask’ fields, enter the IP address and Subnet Mask. This will
determine the pool of IP addresses to assign to the Clients connecting through VPN. (NOTE: this
IP address range entered here must be separate to the LAN IP address setup for this DEVG2020
device.)
5. Click the ‘Save’ button.
Adding Remote VPN Users
6. Under the ‘VPN Users’ heading, Click on the ‘Add’ button.
7. Enter the Username and Password for the client to connect with into the corresponding text
boxes
8. Click on the ‘Save’ button to confirm the details.
9. Repeat steps 7-9 for any additional client users.
Enabling VPN Status
10. Under the ‘VPN Status’ heading, click on the ‘Enable’ radio button.
11. Click on the ‘Apply’ button at the top of the frame.

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 13
VERSION 2.03
4.2. CONFIGURATION OF THE GATEWAY VIA THE WIZARD
1. Tick the ‘Setup Remote Access (VPN)’ checkbox in the Wizard, and click the ‘Next’ button.
INITIAL PAGE OF SETUP WIZARD

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 14
VERSION 2.03
2. Tick the ‘Enable VPN’ checkbox.
3. Enter a Pre-Shared Key (PSK) password. This is an alpha-numeric string with a maximum length of
32 characters.
4. In the ‘VPN Client IP Pool’ and ‘Subnet Mask’ fields, enter the IP address and Subnet Mask. This will
determine the pool of IP addresses to assign to the Clients connecting through VPN. Note that this IP
address range must be separate to the LAN IP address setup for the DEVG2020 device –eg if the
gateway is configured with the default LAN ip address range of 192.168.15.1, you might choose
192.168.16.1 for the VPN client users.
5. Click the ‘Next’ button.
VPN CONFIGURATION ENTRY PAGE
6. Click the ‘Add’ button to set up user accounts for the VPN client.
7. Enter the Username and Password for the client to connect with into the corresponding text boxes.
8. Click the ‘Save’ button to confirm the details.
9. Repeat steps 6-9 for any additional clients. (Note multiple clients can use the same login credentials.)

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 15
VERSION 2.03
10. Click on the ‘Next’ button to finalise the process.
At this point, the remote client to GW VPN server feature is configured and running on the device.
CONFIGURING VPN REMOTE CLIENT USERS
ADDING VPN REMOTE CLIENT USERS

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 16
VERSION 2.03
5. PROCEDURE FOR INSTALLING VPN PROSAFE CLIENT LITE FOR
WINDOWS
In order to access your gateway remotely over secure VPN, you will need to install the ProSafe Lite client on a
Windows PC (with minimum system requirements as outlined in Appendix 1), as per the procedure below :
1. Download the ProSafe Lite VPN client zip file from www.telstra.com/business/vpnsetup and save it on
your pc.
2. Navigate to the folder where you saved the downloaded zip file.
3. Right click on the zip file and select “extract all”
4. Choose a folder to extract it to and click extract
5. Double click on the file NETGEARVPNClientLite_Setup.exe to run the installation process. Follow the
prompts through the install process.
6. After completing the installation, launch the VPN client.
7. Enter your License Number and email address when prompted for Software Activation, and click “Next”,
as per screen shots below. You will find the license number on a card in the box that the DEVG 2020
gateway came in. Each license number can be used for up to five clients. Note that you must be
connected to the internet in order to complete the activation.
Click “Run” after successful activation.

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 17
VERSION 2.03
8. The application will now be running in the system tray. Right click the icon in the system tray, and select
“Configuration Panel”.
9. Click the “Configuration” pull down menu in the top left corner, and select “Import”.
10. In the “Look in:” field, navigate to the folder where you extracted the downloaded zip file, and then select
the file “global default settings config.tgb” and click “Open”

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 18
VERSION 2.03
11. The Configuration Panel will now look like the screen capture below :
12. Select “Fixed Line Config” on the left side navigation pane, and enter your IP address and Pre-shared key
in the “Authentication” tab to match the configuration in Netgear DEVG2020 gateway, as per screen shot
below. Do not change any other settings in this tab.

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 19
VERSION 2.03
13. Select the “Advanced” tab and populate User Name and Password set up on the Netgear gateway VPN
settings, as per screen shot below. Do not change any other settings in this tab.
14. Next select “Tunnel” on the left side navigation pane. Check and confirm that “Remote LAN address”
matches the LAN IP Address range configured on the Netgear gateway. If you are using the default
192.168.15.1, then no change is required. Do not change any other settings on this tab, or the
“Advanced” tab.
15. Next click apply and save, as per screen shot below

VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 20
VERSION 2.03
16. Next click the Configuration pull down menu in the top left corner of the Configuration Pz`anel, and select
“Export”. Choose whether you want to secure the configuration with a password, then enter a name for
the configuration, and click “Save”, as per screen shot below.
17. If you have Mobile Broadband backup, and wish to be able to use VPN when Mobile Broadband is in use
for the WAN connection on your Netgear DEVG2020 gateway, you will need to setup a second
configuration. This second configuration is exactly the same as the ADSL configuration above, except
that the Remote Gateway address field at step 12 above will be different. The address will be of the
following format :
<MBB service nr in international format>.mobile.telstra.com.au
For example if the phone nr of the mobile broadband service is 0407 123 456, then the remote gateway
address would be : “61407123456.mobile.telstra.com.au”, as per screen shot below.
You should also rename the config, to identify it is mobile broadband, by right clicking and selecting
“Rename”, as per screen shot below.