NETGEAR N600 DGND3800B User Manual page 155

N600 Wireless Dual Band Gigabit VDSL2 Modem Router DGND3800B
Verify that the firmware is up to date, and that you have all the addresses and parameters to
be set on both sides. Check that there are no firewall restrictions.
10.506.0/24
Gateway A
(DGND3800)
LAN IP
10.5.6.1
Figure 21. VPNC example, network interface addressing
Table 7. Wireless modem router with FQDN to Gateway B profile summary
VPN Consortium Scenario
Type of VPN
Security scheme:
IP addressing:
Gateway A
Gateway B
Use a Fully Qualified Domain Name (FQDN)
Many ISPs provide connectivity to their customers using dynamic instead of static IP
addressing. This means that a user's IP address does not remain constant over time, which
presents a challenge for gateways attempting to establish VPN connectivity.
A Dynamic DNS (DDNS) service allows a user whose public IP address is dynamically
assigned to be located by a host or domain name. It provides a central public database
where information (such as email addresses, host names, and IP addresses) can be stored
and retrieved. Now, a gateway can be configured to use a third-party service instead of a
permanent and unchanging IP address to establish bidirectional VPN connectivity.
To use DDNS, you have to register with a DDNS service provider. Some DDNS service
providers include:
• DynDNS. www.dyndns.org
• TZO.com. netgear.tzo.com
• ngDDNS. ngddns.iego.net
In this example, Gateway A is configured using a sample FQDN provided by a DDNS service
provider. In this case the host name dgnd3800.dyndns.org for Gateway A was provided using
the DynDNS service. Gateway B uses the DDNS service provider when establishing a VPN
tunnel.
Internet
WAN IP
WAN IP
example.org
example2.org
(FQDN)
(FQDN)
Scenario 1
LAN-to-LAN or gateway-to-gateway (not client-to-gateway)
IKE with pre-shared secret/key (not certificate based)
Fully qualified domain name (FQDN)
FQDN
VPN Configuration
155
172.23.9.0/24
Gateway B
LAN IP
172.23.9.1