NETGEAR DG834Gv1 - 54 Mbps Wireless ADSL Firewall... User manual

202-10006-05, June 2005
202-10006-05
June 2005
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
Phone 1-888-NETGEAR
Reference Manual for the
Model Wireless ADSL
Firewall Router DG834G

ii
202-10006-05, June 2005
© 2005 by NETGEAR, Inc. All rights reserved.
Trademarks
NETGEAR is a trademark of Netgear, Inc.
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to
part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and
used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to
radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try
to correct the interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Federal Communications Commission (FCC) Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. In order to avoid
the possibility of exceeding the FCC radio frequency exposure limits, human proximity to the antenna shall not be less
than 20 cm (8 inches) during normal operation.
EN 55 022 Declaration of Conformance
This is to certify that the DG834G Wireless ADSL Firewall Router is shielded against the generation of radio
interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by
the application of EN 55 022 Class B (CISPR 22).
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß das DG834G Wireless ADSL Firewall Router gemäß der im BMPT-AmtsblVfg 243/1991
und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B.

202-10006-05, June 2005
iii
Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der
Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Certificate of the Manufacturer/Importer
It is hereby certified that the DG834G Wireless ADSL Firewall Router has been suppressed in accordance with the
conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example,
test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the
notes in the operating instructions.
Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the second category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas.
When used near a radio or TV receiver, it may become the cause of radio interference.
Read instructions for correct handling.
Customer Support
Refer to the Support Information Card that shipped with your DG834G Wireless ADSL Firewall Router.
World Wide Web
NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL)
http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer
or Netscape are required.
Product and Publication Details
Model Number: DG834G
Publication Date: June 2005
Product Family: router
Product Name: DG834G Wireless ADSL Firewall Router
Home or Business Product: Business
Language: English
Publication Part Number: 202-10006-05

202-10006-05, June 2005
iv

Contents v
202-10006-05, June 2005
Contents
Chapter 1
About This Manual
Audience, Scope, Conventions, and Formats ................................................................1-1
How to Use This Manual ................................................................................................1-2
How to Print this Manual .................................................................................................1-3
Chapter 2
Introduction
About the Router ............................................................................................................2-1
Key Features ..................................................................................................................2-1
A Powerful, True Firewall .........................................................................................2-2
802.11 Standards-based Wireless Networking ........................................................2-2
Easy Installation and Management ..........................................................................2-3
Protocol Support ......................................................................................................2-3
Virtual Private Networking (VPN) .............................................................................2-5
Content Filtering .......................................................................................................2-5
Auto Sensing and Auto Uplink™ LAN Ethernet Connections ..................................2-5
What’s in the Box? ..........................................................................................................2-5
The Router’s Front Panel .........................................................................................2-6
The Router’s Rear Panel .........................................................................................2-7
Chapter 3
Connecting the Router to the Internet
What You Need Before You Begin ..................................................................................3-1
ADSL Microfilter Requirements ................................................................................3-1
ADSL Microfilter .................................................................................................3-1
ADSL Microfilter with Built-In Splitter .................................................................3-2
Ethernet Cabling Requirements ...............................................................................3-2
Computer Hardware Requirements .........................................................................3-2
LAN Configuration Requirements ............................................................................3-2
Internet Configuration Requirements .......................................................................3-3

202-10006-05, June 2005
vi Contents
Where Do I Get the Internet Configuration Parameters? .........................................3-3
Record Your Internet Connection Information ..........................................................3-3
Connecting the DG834G to Your LAN ............................................................................3-5
How to Connect the Router ......................................................................................3-5
Auto-Detecting Your Internet Connection Type ..............................................................3-9
Wizard-Detected PPPoE Login Account Setup ......................................................3-10
Wizard-Detected PPPoA Login Account Setup ......................................................3-11
Wizard-Detected Dynamic IP Account Setup .........................................................3-11
Wizard-Detected IP Over ATM Account Setup ......................................................3-12
Wizard-Detected Fixed IP (Static) Account Setup ..................................................3-13
Testing Your Internet Connection ..................................................................................3-14
Manually Configuring Your Internet Connection ...........................................................3-14
How to Perform Manual Configuration ...................................................................3-15
Internet Connection Requires Login and Uses PPPoE ...................................3-16
Internet Connection Requires Login and Uses PPPoA ...................................3-17
Internet Connection Does Note Require A Login ............................................3-18
ADSL Settings ........................................................................................................3-19
Chapter 4
Wireless Configuration
Considerations for a Wireless Network ..........................................................................4-1
Observe Performance, Placement, and Range Guidelines .....................................4-1
Implement Appropriate Wireless Security ................................................................4-2
Understanding Wireless Settings ...................................................................................4-3
How to Set Up and Test Basic Wireless Connectivity ..............................................4-7
How to Restricting Wireless Access to Your Network ..............................................4-8
Restricting Access to Your Network by Turning Off Wireless Connectivity ........4-9
Restricting Wireless Access Based on the Wireless Network Name (SSID) .....4-9
Restricting Wireless Access Based on the Wireless Station Access List ..........4-9
Choosing WEP Authentication and Security Encryption Methods .........................4-11
Authentication Type Selection .........................................................................4-11
Encryption Choices ..........................................................................................4-12
How to Configure WEP ..........................................................................................4-13
How to Configure WPA-PSK ..................................................................................4-14

Contents vii
202-10006-05, June 2005
Chapter 5
Protecting Your Network
Protecting Access to Your DG834G Wireless ADSL Firewall Router .............................5-1
How to Change the Built-In Password .....................................................................5-1
Changing the Administrator Login Timeout ..............................................................5-2
Configuring Basic Firewall Services ...............................................................................5-2
Blocking Keywords, Sites, and Services ..................................................................5-3
How to Block Keywords and Sites ...........................................................................5-3
Firewall Rules .................................................................................................................5-5
Inbound Rules (Port Forwarding) .............................................................................5-6
Inbound Rule Example: A Local Public Web Server ..........................................5-6
Inbound Rule Example: Allowing Videoconferencing ........................................5-8
Considerations for Inbound Rules .....................................................................5-8
Outbound Rules (Service Blocking) .........................................................................5-9
Outbound Rule Example: Blocking Instant Messenger .....................................5-9
Order of Precedence for Rules ..............................................................................5-11
Services ........................................................................................................................5-12
How to Define Services ..........................................................................................5-12
Setting Times and Scheduling Firewall Services ..........................................................5-13
How to Set Your Time Zone ...................................................................................5-13
How to Schedule Firewall Services ........................................................................5-14
Chapter 6
Managing Your Network
Backing Up, Restoring, or Erasing Your Settings ...........................................................6-1
How to Back Up the Configuration to a File .............................................................6-1
How to Restore the Configuration from a File ..........................................................6-2
How to Erase the Configuration ...............................................................................6-2
Upgrading the Router’s Firmware ...................................................................................6-2
How to Upgrade the Router Firmware .....................................................................6-3
Network Management Information .................................................................................6-4
Viewing Router Status and Usage Statistics ............................................................6-4
Viewing Attached Devices ........................................................................................6-9
Viewing, Selecting, and Saving Logged Information ................................................6-9
Selecting What Information to Log ..................................................................6-11
Saving Log Files on a Server ..........................................................................6-12

202-10006-05, June 2005
viii Contents
Examples of Log Messages ...................................................................................6-12
Activation and Administration ..........................................................................6-12
Dropped Packets .............................................................................................6-12
Enabling Security Event E-mail Notification .................................................................6-13
Running Diagnostic Utilities and Rebooting the Router ................................................6-14
Enabling Remote Management ....................................................................................6-15
Configuring Remote Management .........................................................................6-15
Chapter 7
Advanced Configuration
Configuring Advanced Security ......................................................................................7-1
Setting Up A Default DMZ Server ............................................................................7-1
How to Configure a Default DMZ Server ...........................................................7-2
Connect Automatically, as Required ........................................................................7-3
Disable Port Scan and DOS Protection ...................................................................7-3
Respond to Ping on Internet WAN Port ...................................................................7-3
MTU Size .................................................................................................................7-3
Configuring LAN IP Settings ...........................................................................................7-3
DHCP .......................................................................................................................7-5
Use Router as DHCP server .............................................................................7-5
Reserved IP addresses .....................................................................................7-6
How to Configure LAN TCP/IP Settings ...................................................................7-7
Configuring Dynamic DNS .......................................................................................7-7
How to Configure Dynamic DNS ..............................................................................7-8
Using Static Routes ........................................................................................................7-9
Static Route Example ...............................................................................................7-9
How to Configure Static Routes .............................................................................7-10
Universal Plug and Play (UPnP) ...................................................................................7-12
Chapter 8
Virtual Private Networking (Advanced Feature)
Overview of VPN Configuration ......................................................................................8-2
Client-to-Gateway VPN Tunnels ..............................................................................8-2
Gateway-to-Gateway VPN Tunnels .........................................................................8-2
Planning a VPN ..............................................................................................................8-3
VPN Tunnel Configuration ..............................................................................................8-6
How to Set Up a Client-to-Gateway VPN Configuration .................................................8-6

Contents ix
202-10006-05, June 2005
Step 1: Configuring the Client-to-Gateway VPN Tunnel on the DG834G ................8-7
Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC .........8-12
How to Set Up a Gateway-to-Gateway VPN Configuration ..........................................8-20
VPN Tunnel Control ......................................................................................................8-27
Activating a VPN Tunnel ........................................................................................8-27
Using the VPN Status Page to Activate a VPN Tunnel ....................................8-27
Activate the VPN Tunnel by Pinging the Remote Endpoint .............................8-28
Start Using a VPN Tunnel to Active It ..............................................................8-30
Verifying the Status of a VPN Tunnel .....................................................................8-30
Deactivating a VPN Tunnel ....................................................................................8-32
Using the Policy Table on the VPN Policies Page to Deactivate a VPN Tunnel 8-32
Using the VPN Status Page to Deactivate a VPN Tunnel ...............................8-33
Deleting a VPN Tunnel ...........................................................................................8-35
How to Set Up VPN Tunnels in Special Circumstances ...............................................8-35
Using Auto Policy to Configure VPN Tunnels ........................................................8-36
Configuring VPN Network Connection Parameters .........................................8-36
Example of Using Auto Policy .........................................................................8-41
Using Manual Policy to Configure VPN Tunnels ....................................................8-48
Chapter 9
Troubleshooting
Basic Functioning ...........................................................................................................9-1
Power LED Not On ...................................................................................................9-2
Test LED Never Turns On or Test LED Stays On .....................................................9-2
LAN or WAN Port LEDs Not On ...............................................................................9-2
Troubleshooting the Web Configuration Interface ..........................................................9-3
Troubleshooting the ISP Connection ..............................................................................9-4
ADSL link .................................................................................................................9-4
WAN LED Blinking Yellow ..................................................................................9-4
WAN LED Off .....................................................................................................9-4
Obtaining a WAN IP Address ...................................................................................9-5
Troubleshooting PPPoE or PPPoA ..........................................................................9-6
Troubleshooting Internet Browsing ..........................................................................9-6
Troubleshooting a TCP/IP Network Using the Ping Utility ..............................................9-7
Testing the LAN Path to Your Router .......................................................................9-7
Testing the Path from Your Computer to a Remote Device .....................................9-8

202-10006-05, June 2005
xContents
Restoring the Default Configuration and Password ........................................................9-9
Using the Reset button .............................................................................................9-9
Problems with Date and Time .........................................................................................9-9
Appendix A
Technical Specifications
Appendix B
Network and Routing Basics
Related Publications ...................................................................................................... B-1
Basic Router Concepts .................................................................................................. B-1
What is a Router? ................................................................................................... B-1
Routing Information Protocol ................................................................................... B-2
IP Addresses and the Internet ................................................................................. B-2
Netmask .................................................................................................................. B-4
Subnet Addressing .................................................................................................. B-4
Private IP Addresses ............................................................................................... B-7
Single IP Address Operation Using NAT ................................................................. B-7
MAC Addresses and Address Resolution Protocol ................................................. B-8
Related Documents ................................................................................................. B-9
Domain Name Server .............................................................................................. B-9
IP Configuration by DHCP ...................................................................................... B-9
Internet Security and Firewalls .................................................................................... B-10
What is a Firewall? ................................................................................................ B-10
Stateful Packet Inspection ..................................................................................... B-10
Denial of Service Attack .........................................................................................B-11
Ethernet Cabling ...........................................................................................................B-11
Category 5 Cable Quality .......................................................................................B-11
Inside Twisted Pair Cables .................................................................................... B-12
Uplink Switches, Crossover Cables, and MDI/MDIX Switching ............................ B-13
Appendix C
Preparing Your Network
Preparing Your Computers for TCP/IP Networking .......................................................C-1
Configuring Windows 95, 98, and Me for TCP/IP Networking .......................................C-2
Installing or Verifying Windows Networking Components .......................................C-2
Enabling DHCP to Automatically Configure TCP/IP Settings in Windows 95B, 98, and Me
C-4
Selecting the Windows’ Internet Access Method ....................................................C-6