NETGEAR DGND3300v2 - RangeMax Dual Band Wireless-N Modem Router User Manual page 154

Verify that the firmware is up to date, and that you have all the addresses and parameters to
be set on both sides. Check that there are no firewall restrictions.
10.506.0/24
Gateway A
(DGND3300v2)
LAN IP
10.5.6.1
Figure 72. VPNC Example, Network Interface Addressing
Table 9. N300 Wireless Modem Router with FQDN to Gateway B Profile Summary
VPN Consortium Scenario
Type of VPN
Security scheme:
IP addressing:
NETGEAR-Gateway A
NETGEAR-Gateway B
Using a Fully Qualified Domain Name (FQDN)
Many ISPs provide connectivity to their customers using dynamic instead of static IP
addressing. This means that a user's IP address does not remain constant over time, which
presents a challenge for gateways attempting to establish VPN connectivity.
A Dynamic DNS (DDNS) service allows a user whose public IP address is dynamically
assigned to be located by a host or domain name. It provides a central public database where
information (such as email addresses, host names, and IP addresses) can be stored and
retrieved. Now, a gateway can be configured to use a third-party service instead of a
permanent and unchanging IP address to establish bidirectional VPN connectivity.
To use DDNS, you must register with a DDNS service provider. Some DDNS service
providers include:
• DynDNS: www.dyndns.org
• TZO.com: netgear.tzo.com
• ngDDNS: ngddns.iego.net
In this example, Gateway A is configured using a sample FQDN provided by a DDNS service
provider. In this case we established the hostname dgnd3300v2.dyndns.org for Gateway A
using the DynDNS service. Gateway B uses the DDNS service provider when establishing a
VPN tunnel.
154 | Appendix C. NETGEAR VPN Configuration
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Internet
WAN IP
example.org
(FQDN)
Scenario 1
LAN-to-LAN or gateway-to-gateway (not PC/client-to-gateway)
IKE with pre-shared secret/key (not certificate based)
Fully qualified domain name (FQDN)
FQDN
Gateway B
WAN IP
example2.org
(FQDN)
172.23.9.0/24
LAN IP
172.23.9.1