Home » Netgear Manuals » Network Security & Firewall Devices » Netgear FVG318v1 » Manual Viewer

Netgear FVG318v1 FVG318 Reference Manual - Page 169

The FVG318-to-VPN Client Case, Client-to-Gateway VPN Tunnel Overview

Add to My Manuals
Save this manual to your list of manuals

Page 169 highlights

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual The FVG318-to-VPN Client Case Table C-4. Policy Summary VPN Consortium Scenario: Type of VPN Security Scheme: Date Tested: IP Addressing: NETGEAR-Gateway A NETGEAR-Client B Scenario 1 PC/Client-to-Gateway IKE with Preshared Secret/Key November 2004 Static IP address Dynamic IP address Client-to-Gateway VPN Tunnel Overview The operational differences between gateway-to-gateway and client-to-gateway VPN tunnels are summarized as follows: Table C-5. Differences between VPN tunnel types Operation Exchange Mode Direction/Type Gateway-to-Gateway VPN Tunnels Client-to-Gateway VPN Tunnels Main Mode-The IP addresses of both gateways are known (especially when FQDN is used), so each gateway can use the Internet source of the traffic for validation purposes. Aggressive Mode-The IP address of the client is not known in advance, so the gateway is programmed to accept valid traffic sourced from any Internet location (i.e., less secure). Both Directions-Either end of the VPN tunnel may initiate traffic (usually). Remote Access-The client end of the VPN tunnel must initiate traffic because its IP address is not know in advance, which prevents the gateway end of the VPN tunnel from initiating traffic. VPN Configuration of NETGEAR FVG318 v1.0, September 2007 C-13

Section	Page
ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual	1
Contents	7
About This Manual	13
Conventions, Formats, and Scope	13
How to Use This Manual	14
How to Print this Manual	14
Revision History	15
Chapter 1 Introduction	17
Key Features of the VPN Firewall Router	17
802.11g and 802.11b Wireless Networking	18
Wireless Multimedia (WMM) Support	18
A Powerful, True Firewall with Content Filtering	18
Security	19
Autosensing Ethernet Connections with Auto Uplink	19
Extensive Protocol Support	19
Easy Installation and Management	20
Maintenance and Support	21
Package Contents	21
The FVG318 Front Panel	21
The FVG318 Rear Panel	22
Chapter 2 Connecting the Firewall to the Internet	25
Installing Your FVG318	25
Configuring the FVG318 for Internet Access with Auto Detect	28
Manually Configuring your Internet Connection	31
Configuring Dynamic DNS (If Needed)	33
Configuring Your Time Zone	35
Troubleshooting Tips	36
Be sure to restart your network in the correct sequence.	36
Make sure the Ethernet cables are securely plugged in.	36
Make sure the computer & router wireless settings match exactly.	36
Make sure the network settings of the computer are correct.	36
Check the router status lights to verify correct router operation.	37
Tips for Accessing the VPN firewall	37
Chapter 3 Configuring Wireless Connectivity	39
Observing Performance, Placement, and Range Guidelines	39
Implementing Appropriate Wireless Security	40
Understanding Wireless Settings	41
Security Check List for SSID and WEP Settings	45
Setting Up and Testing Basic Wireless Connectivity	46
Restricting Wireless Access by MAC Address	47
Configuring WEP Security Settings	48
Configuring WPA with RADIUS	50
Configuring WPA2 with RADIUS	52
Configuring WPA and WPA2 with RADIUS	53
Configuring WPA-PSK	55
Configuring WPA2-PSK	56
Configuring WPA-PSK and WPA2-PSK	58
Chapter 4 Firewall Protection and Content Filtering	61
Firewall Protection and Content Filtering Overview	61
Block Sites	61
Using Rules to Block or Allow Specific Kinds of Traffic	64
Inbound Rules (Port Forwarding)	66
Inbound Rule Example: A Local Public Web Server	67
Inbound Rule Example: Allowing a Videoconference from Restricted Addresses	67
Considerations for Inbound Rules	68
Outbound Rules (Service Blocking)	68
Outbound Rule Example: Blocking Instant Messenger	68
Order of Precedence for Rules	69
Default DMZ Server	70
Attack Checks	71
Services	72
Using a Schedule to Block or Allow Specific Traffic	73
Getting E-Mail Notifications of Firewall Logs	74
Chapter 5 Basic Virtual Private Networking	79
Overview of VPN Configuration	80
Client-to-Gateway VPN Tunnels	80
Gateway-to-Gateway VPN Tunnels	80
Planning a VPN	81
VPN Tunnel Configuration	82
Setting Up a Client-to-Gateway VPN Configuration	83
Step 1: Configuring the Client-to-Gateway VPN Tunnel on the FVG318	83
Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC	85
Monitoring the Progress and Status of the VPN Client Connection	93
Transferring a Security Policy to Another Client	95
Setting Up a Gateway-to-Gateway VPN Configuration	97
Activating a VPN Tunnel	101
Verifying the Status of a VPN Tunnel	103
Deactivating a VPN Tunnel	104
Using the Policy Table on the VPN Policies Screen to Deactivate a VPN Tunnel	104
Using the VPN Status Page to Deactivate a VPN Tunnel	105
Deleting a VPN Tunnel	105
Chapter 6 Advanced Virtual Private Networking	107
Using IKE and VPN Policies to Manage VPN Traffic	107
Using Automatic Key Management	108
IKE Policy Automatic Key and Authentication Management	108
VPN Policy Configuration for Auto Key and Manual Negotiation	109
Using Digital Certificates for IKE Auto-Policy Authentication	113
Certificate Revocation List (CRL)	113
VPN Configuration Scenarios on the FVG318	114
VPN Consortium Scenario 1: Gateway-to-Gateway with Preshared Secrets	115
FVG318 Gateway A to FVG318 Gateway B (IKE and VPN Policies)	116
Checking Your VPN Connections	119
VPN Consortium Scenario 2: FVG318 Gateway to Gateway with Digital Certificates	121
Chapter 7 Maintenance	125
Viewing VPN Firewall Router Status Information	125
Upgrading the Firewall Software	128
Backing Up and Restoring Settings	129
Changing the Administrator Password	130
Chapter 8 Advanced Configuration	131
Configuring Dynamic DNS	131
Using the LAN IP Setup Options	132
Configuring LAN TCP/IP Setup Parameters	132
Using the Firewall as a DHCP server	133
Using Address Reservation	134
Configuring Static Routes	135
Configuring RIP	136
Static Route Example	137
Enabling Remote Management Access	138
SNMP Administration	140
Enabling Universal Plug and Play (UPnP)	142
Chapter 9 Troubleshooting	143
Basic Functioning	143
Power LED Not On	143
LEDs Never Turn Off	144
LAN or Internet Port LEDs Not On	144
Troubleshooting the Web Configuration Interface	144
Troubleshooting the ISP Connection	145
Troubleshooting a TCP/IP Network Using a Ping Utility	147
Testing the LAN Path to Your Firewall	147
Testing the Path from Your PC to a Remote Device	148
Restoring the Default Configuration and Password	148
Problems with Date and Time	149
Appendix A Default Settings and Technical Specifications	151
Default Settings	151
Technical Specifications	153
Appendix B Related Documents	155
Appendix C VPN Configuration of NETGEAR FVG318	157
Case Study Overview	157
Gathering the Network Information	157
Configuring the Gateways	158
Activating the VPN Tunnel	159
The FVG318-to-FVG318 Case	159
Configuring the VPN Tunnel	160
Viewing and Editing the VPN Parameters	161
Initiating and Checking the VPN Connections	162
The FVG318-to-FVS318v2 Case	163
Configuring the VPN Tunnel	163
Viewing and Editing the VPN Parameters	164
Initiating and Checking the VPN Connections	165
The FVG318-to-FVL328 Case	166
Configuring the VPN Tunnel	166
Viewing and Editing the VPN Parameters	167
Initiating and Checking the VPN Connections	168
The FVG318-to-VPN Client Case	169
Client-to-Gateway VPN Tunnel Overview	169
Configuring the VPN Tunnel	170