PREMIUM BUSINESS GATEWAY - DEVG2020 DIGITAL BUSINESS USER GUIDE
NEED MORE SUPPORT? If you have questions beyond this guide, we want to help. To learn more about your Business Broadband or Digital Business tools and features, visit the Business Broadband support page at http://www.telstra.com.au/business-enterprise/help-support/softwaredownloads/index.htm or if you are a Digital Business customer, visit Digital Business Online Support page at http://www.telstra.
WHAT’S INSIDE 1. INSTALLING THE NETGEAR DEVG2020 GATEWAY 4 2. TURNING ON/OFF WIFI (WIRELESS) 6 2.1. CHANGING WIFI CREDENTIALS 7 3. ACTIVATE DIGITAL BUSINESS BROADBAND BACK-UP 10 4. NETGEAR GATEWAY CONFIGURATION FOR REMOTE CLIENT ACCESS 12 4.1. CONFIGURATION OF THE GATEWAY VIA THE GUI 12 4.2. CONFIGURATION OF THE GATEWAY VIA THE WIZARD 13 5. PROCEDURE FOR INSTALLING VPN PROSAFE CLIENT LITE FOR WINDOWS 16 6. HOW TO OPEN A VPN CONNECTION WITH THE PROSAFE CLIENT 22 7.
1. INSTALLING THE NETGEAR DEVG2020 GATEWAY Please have your Digital Business Configuration Summary emailed to you when you purchased Digital Business. The Configuration Summary contains the login credentials required to configure the gateway and connect to the internet. Connecting the DEVG2020 Gateway: 1. Plug the power adaptor into the wall socket 2. Connect the other end to the socket on the gateway labelled ‘Power(12V, 2.5A)’. Turn On the power point on the wall socket 3.
. Take the provided white Ethernet cable with yellow tips and connect one end to a yellow port on the gateway labelled ‘LAN. Connect the other end to your computer or laptop’s Ethernet port. 6. Open up a web browser on your computer and type in telstrabusiness.com. Follow the on-screen instructions to connect to the internet. The login and password required to connect to the internet is provided on your Configuration Summary email. VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 VERSION 2.
2. TURNING ON/OFF WIFI (WIRELESS) The DEVG2020 Gateway is delivered with its WiFi turned On and configured with a unique WiFi Id and WPA2 Key (Password). The Id, also known as SSID, and the WPA2 Key, are available on a card provided in the packaging (Figure 1). Figure 1: WiFi Credentials Card You can switch Off the WiFi on the router by pressing the WiFi On/Off button on the front of the Gateway (Figure 2).
2.1. CHANGING WIFI CREDENTIALS Login into the Netgear DEVG2020 Genie to change the default provide WiFi credentials. Connect a PC/laptop to the Gateway, and open an internet browser. The IP address and login credentials to the Netgear DEVG2020 Genie is printed at the bottom of the gateway (Figure 3). Figure 3: DEVG2020 Genie URL and Login Credentials Enter the IP address 192.168.15.1 into internet browser. Press Enter to access the Genie’s Login page (Figure 4).
Figure 5: Genie Welcome Page Click on “Wireless” in the left hand menu to view and modify the WiFi credentials (Figure 5). Figure 6: Wireless Setting In the field Name (SSID), in Figure 6 above, type in the new Wireless network name. Note: WPA2-PSK [AES] must be selected under section Security Options. Scroll down the page to change the WPA2 key in the field name Paraphrase. Press Apply to save changes (Figure 7). VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 VERSION 2.
Figure 7: Changing WPA2 Key (Password) Figure 8: Wireless Network credentials updated The new SSID and WPA2 key will displayed on the welcome page (Figure 8). Note: Computers, Tablets and phones must be reconfigured to connect to the Wireless network using the new credentials. This includes previously connected devices. VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 VERSION 2.
3. ACTIVATE DIGITAL BUSINESS BROADBAND BACK-UP Figure 9: Digital Business Broadband Back-up. Enter the IP address 192.168.15.1 into internet browser and press Enter to access the Genie’s Login page (Figure 4). Type the user name “admin”, password “telstra” and press Enter to reach the Genie’s Welcome Page (Figure 9). Figure 9: Genie Welcome Page Click on “Mobile Internet” in the left hand menu (Figure 9) to reach the Mobile Set-up page (Figure 10).
Figure 10: Mobile Set-up Set “Does your Internet connection require a login?” to No Select “telstra.extranet” for the APN. Type in “*99***1#” in the Dial String. Click Apply to save the changes and press Logout . Connect the Mobile broadband USB modem to the either USB ports on the gateway. Reboot the Gateway by turning Off the power and waiting 1 minute before turning it On. VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 VERSION 2.
4. NETGEAR GATEWAY CONFIGURATION FOR REMOTE CLIENT ACCESS This section describes the connection configuration details for remote client use to access the Gateway. 4.1. CONFIGURATION OF THE GATEWAY VIA THE GUI This section outlines how to configure VPN access from the Netgear gateway GUI after the initial Wizard installation 1. Under the ‘ADVANCED’ tab, click on the ‘VPN’ menu and then click on the ‘Manage VPN’ link. Configurig VPN Connection 2. 3. 4. 5.
4.2. CONFIGURATION OF THE GATEWAY VIA THE WIZARD 1. Tick the ‘Setup Remote Access (VPN)’ checkbox in the Wizard, and click the ‘Next’ button. INITIAL PAGE OF SETUP WIZARD VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 VERSION 2.
2. Tick the ‘Enable VPN’ checkbox. 3. Enter a Pre-Shared Key (PSK) password. This is an alpha-numeric string with a maximum length of 32 characters. 4. In the ‘VPN Client IP Pool’ and ‘Subnet Mask’ fields, enter the IP address and Subnet Mask. This will determine the pool of IP addresses to assign to the Clients connecting through VPN.
10. Click on the ‘Next’ button to finalise the process. At this point, the remote client to GW VPN server feature is configured and running on the device. CONFIGURING VPN REMOTE CLIENT USERS ADDING VPN REMOTE CLIENT USERS VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 VERSION 2.
5. PROCEDURE FOR INSTALLING VPN PROSAFE CLIENT LITE FOR WINDOWS In order to access your gateway remotely over secure VPN, you will need to install the ProSafe Lite client on a Windows PC (with minimum system requirements as outlined in Appendix 1), as per the procedure below : 1. 2. 3. 4. 5. 6. 7. Download the ProSafe Lite VPN client zip file from www.telstra.com/business/vpnsetup and save it on your pc. Navigate to the folder where you saved the downloaded zip file.
8. The application will now be running in the system tray. Right click the icon in the system tray, and select “Configuration Panel”. 9. Click the “Configuration” pull down menu in the top left corner, and select “Import”. 10. In the “Look in:” field, navigate to the folder where you extracted the downloaded zip file, and then select the file “global default settings config.tgb” and click “Open” VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 VERSION 2.
11. The Configuration Panel will now look like the screen capture below : 12. Select “Fixed Line Config” on the left side navigation pane, and enter your IP address and Pre-shared key in the “Authentication” tab to match the configuration in Netgear DEVG2020 gateway, as per screen shot below. Do not change any other settings in this tab. VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 VERSION 2.
13. Select the “Advanced” tab and populate User Name and Password set up on the Netgear gateway VPN settings, as per screen shot below. Do not change any other settings in this tab. 14. Next select “Tunnel” on the left side navigation pane. Check and confirm that “Remote LAN address” matches the LAN IP Address range configured on the Netgear gateway. If you are using the default 192.168.15.1, then no change is required. Do not change any other settings on this tab, or the “Advanced” tab. 15.
16. Next click the Configuration pull down menu in the top left corner of the Configuration Pz`anel, and select “Export”. Choose whether you want to secure the configuration with a password, then enter a name for the configuration, and click “Save”, as per screen shot below. 17. If you have Mobile Broadband backup, and wish to be able to use VPN when Mobile Broadband is in use for the WAN connection on your Netgear DEVG2020 gateway, you will need to setup a second configuration.
18. The next step is to save this configuration by using the export function as per step 16, but with a different name, as per screen shot below. After completing build of the MBB config, reload the Fixed Line configuration saved at step 16, by using the import function available from the “Configuration” pull down menu (as per steps 9 and 10) and click the “Apply” and “Save” buttons, as per step 15. VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 VERSION 2.
6. HOW TO OPEN A VPN CONNECTION WITH THE PROSAFE CLIENT Import the Fixed line or MBB connection configuration, as above, according to whether your Negear DEVG gateway is connected with fixed line (ADSL or NBN), or Mobile Broadband. 1) Right click on “Tunnel”, and select “Open Tunnel” 2) A window pops up above the system tray, showing status of the connection. Once the tunnel is opened, the Prosafe client system tray icon turns green, as per screen shot below.
7. SITE-TO-SITE VPN CONFIGURATION This section describes the connection configuration details for Site-to-Site VPN connection establishment between 2 DEVG2020 GW devices. The LAN subnets of these 2 devices have to be in unique range for the connection to be established successfully. 1. On the first DEVG2020 GW device, navigate to the Advanced tab and select VPN > “Manage VPN” menu on the left pane. Browse down to the Site-to-Site VPN configuration section of the page. 2.
4. On the second DEVG2020 GW device, repeat steps (1) through (3) above 5. Once the configuration is complete, enable VPN on both GWs 6. At this point, the IPSec VPN tunnel will be established between these 2 DEVG2020 GWs and LAN side resources from one GW access the other through this tunnel. You should now be able to see/navigate to devices at the other site. VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG2020 VERSION 2.
APPENDIX 1 – MINIMUM SYSTEM REQUIREMENTS FOR PROSAFE VPN CLIENT The minimum requirements for the ProSafe VPN Client are : OS supported: • Windows XP 32-bit, all service packs • Windows Server 2003 32-bit • Windows Server 2008 32/64-bit • Windows Vista 32/64-bit • Windows 7 32/64-bit • Windows 8 32/64-bit Disk space and memory The size of the setup, the size of the installed program, and the impact of the program on RAM are all below 10MB VPN CONFIGURATION GUIDE PREMIUM BUSINESS GATEWAY - DEVG20
