Home » Netgear Manuals » Network Security & Firewall Devices » Netgear FVG318v1 » Manual Viewer

Netgear FVG318v1 FVG318 Reference Manual - Page 171

Connect Using Secure Gateway Tunnel, Local IP Traffic Selector

Add to My Manuals
Save this manual to your list of manuals

Page 171 highlights

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual b. Add a new connection using the Edit/Add/Connection menu and rename it Scenario_1. (Scenario_1 is used in this example to reflect the fact that the connection uses the PreShared Key security scheme and encryption parameters proposed by the VPN Consortium, but you may want to choose a name for your connection that is meaningful to your specific installation. The name you choose does not have to match the name used at the gateway end of the VPN tunnel.) Figure C-7 c. Program the Scenario_1 connection screen as follows (see Figure C-8): • Connection Security: Secure • Remote Party Identity and Addressing: Select IP Subnet from the ID Type menu and then enter 10.5.6.1 for Subnet, 255.255.255.0 for Mask, and leave All for Protocol. (The Subnet and Mask parameters entered here must match the Start IP address and Subnet Mask parameters of the Local IP Traffic Selector on the VPN Auto policy screen shown in Figure C-9 for the gateway router.) • Enable Connect Using Secure Gateway Tunnel; select Domain Name for ID_Type; enter fvs_local for Domain Name; and enter 14.15.16.17 for Gateway IP Address. (Domain Name must match the Local Identity Data parameter of the IKE Policy Configuration screen shown in Figure C-8 for the gateway router. Also, Gateway IP Address must match the WAN IP address of the gateway router shown in Figure C-8.) • Expand the Scenario_1 screen hierarchy by clicking the + sign in front of Scenario_1. Then expand the rest of the screen hierarchies by clicking the rest of the + signs. VPN Configuration of NETGEAR FVG318 v1.0, September 2007 C-15

Section	Page
ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual	1
Contents	7
About This Manual	13
Conventions, Formats, and Scope	13
How to Use This Manual	14
How to Print this Manual	14
Revision History	15
Chapter 1 Introduction	17
Key Features of the VPN Firewall Router	17
802.11g and 802.11b Wireless Networking	18
Wireless Multimedia (WMM) Support	18
A Powerful, True Firewall with Content Filtering	18
Security	19
Autosensing Ethernet Connections with Auto Uplink	19
Extensive Protocol Support	19
Easy Installation and Management	20
Maintenance and Support	21
Package Contents	21
The FVG318 Front Panel	21
The FVG318 Rear Panel	22
Chapter 2 Connecting the Firewall to the Internet	25
Installing Your FVG318	25
Configuring the FVG318 for Internet Access with Auto Detect	28
Manually Configuring your Internet Connection	31
Configuring Dynamic DNS (If Needed)	33
Configuring Your Time Zone	35
Troubleshooting Tips	36
Be sure to restart your network in the correct sequence.	36
Make sure the Ethernet cables are securely plugged in.	36
Make sure the computer & router wireless settings match exactly.	36
Make sure the network settings of the computer are correct.	36
Check the router status lights to verify correct router operation.	37
Tips for Accessing the VPN firewall	37
Chapter 3 Configuring Wireless Connectivity	39
Observing Performance, Placement, and Range Guidelines	39
Implementing Appropriate Wireless Security	40
Understanding Wireless Settings	41
Security Check List for SSID and WEP Settings	45
Setting Up and Testing Basic Wireless Connectivity	46
Restricting Wireless Access by MAC Address	47
Configuring WEP Security Settings	48
Configuring WPA with RADIUS	50
Configuring WPA2 with RADIUS	52
Configuring WPA and WPA2 with RADIUS	53
Configuring WPA-PSK	55
Configuring WPA2-PSK	56
Configuring WPA-PSK and WPA2-PSK	58
Chapter 4 Firewall Protection and Content Filtering	61
Firewall Protection and Content Filtering Overview	61
Block Sites	61
Using Rules to Block or Allow Specific Kinds of Traffic	64
Inbound Rules (Port Forwarding)	66
Inbound Rule Example: A Local Public Web Server	67
Inbound Rule Example: Allowing a Videoconference from Restricted Addresses	67
Considerations for Inbound Rules	68
Outbound Rules (Service Blocking)	68
Outbound Rule Example: Blocking Instant Messenger	68
Order of Precedence for Rules	69
Default DMZ Server	70
Attack Checks	71
Services	72
Using a Schedule to Block or Allow Specific Traffic	73
Getting E-Mail Notifications of Firewall Logs	74
Chapter 5 Basic Virtual Private Networking	79
Overview of VPN Configuration	80
Client-to-Gateway VPN Tunnels	80
Gateway-to-Gateway VPN Tunnels	80
Planning a VPN	81
VPN Tunnel Configuration	82
Setting Up a Client-to-Gateway VPN Configuration	83
Step 1: Configuring the Client-to-Gateway VPN Tunnel on the FVG318	83
Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC	85
Monitoring the Progress and Status of the VPN Client Connection	93
Transferring a Security Policy to Another Client	95
Setting Up a Gateway-to-Gateway VPN Configuration	97
Activating a VPN Tunnel	101
Verifying the Status of a VPN Tunnel	103
Deactivating a VPN Tunnel	104
Using the Policy Table on the VPN Policies Screen to Deactivate a VPN Tunnel	104
Using the VPN Status Page to Deactivate a VPN Tunnel	105
Deleting a VPN Tunnel	105
Chapter 6 Advanced Virtual Private Networking	107
Using IKE and VPN Policies to Manage VPN Traffic	107
Using Automatic Key Management	108
IKE Policy Automatic Key and Authentication Management	108
VPN Policy Configuration for Auto Key and Manual Negotiation	109
Using Digital Certificates for IKE Auto-Policy Authentication	113
Certificate Revocation List (CRL)	113
VPN Configuration Scenarios on the FVG318	114
VPN Consortium Scenario 1: Gateway-to-Gateway with Preshared Secrets	115
FVG318 Gateway A to FVG318 Gateway B (IKE and VPN Policies)	116
Checking Your VPN Connections	119
VPN Consortium Scenario 2: FVG318 Gateway to Gateway with Digital Certificates	121
Chapter 7 Maintenance	125
Viewing VPN Firewall Router Status Information	125
Upgrading the Firewall Software	128
Backing Up and Restoring Settings	129
Changing the Administrator Password	130
Chapter 8 Advanced Configuration	131
Configuring Dynamic DNS	131
Using the LAN IP Setup Options	132
Configuring LAN TCP/IP Setup Parameters	132
Using the Firewall as a DHCP server	133
Using Address Reservation	134
Configuring Static Routes	135
Configuring RIP	136
Static Route Example	137
Enabling Remote Management Access	138
SNMP Administration	140
Enabling Universal Plug and Play (UPnP)	142
Chapter 9 Troubleshooting	143
Basic Functioning	143
Power LED Not On	143
LEDs Never Turn Off	144
LAN or Internet Port LEDs Not On	144
Troubleshooting the Web Configuration Interface	144
Troubleshooting the ISP Connection	145
Troubleshooting a TCP/IP Network Using a Ping Utility	147
Testing the LAN Path to Your Firewall	147
Testing the Path from Your PC to a Remote Device	148
Restoring the Default Configuration and Password	148
Problems with Date and Time	149
Appendix A Default Settings and Technical Specifications	151
Default Settings	151
Technical Specifications	153
Appendix B Related Documents	155
Appendix C VPN Configuration of NETGEAR FVG318	157
Case Study Overview	157
Gathering the Network Information	157
Configuring the Gateways	158
Activating the VPN Tunnel	159
The FVG318-to-FVG318 Case	159
Configuring the VPN Tunnel	160
Viewing and Editing the VPN Parameters	161
Initiating and Checking the VPN Connections	162
The FVG318-to-FVS318v2 Case	163
Configuring the VPN Tunnel	163
Viewing and Editing the VPN Parameters	164
Initiating and Checking the VPN Connections	165
The FVG318-to-FVL328 Case	166
Configuring the VPN Tunnel	166
Viewing and Editing the VPN Parameters	167
Initiating and Checking the VPN Connections	168
The FVG318-to-VPN Client Case	169
Client-to-Gateway VPN Tunnel Overview	169
Configuring the VPN Tunnel	170

Match case Limit results 1 per page

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

VPN Configuration of NETGEAR FVG318

C-15

v1.0, September 2007

Add a new connection using the Edit/Add/Connection menu and rename it

Scenario_1

(

Scenario_1

is used in this example to reflect the fact that the connection uses the Pre-

Shared Key security scheme and encryption parameters proposed by the VPN

Consortium, but you may want to choose a name for your connection that is meaningful to

your specific installation. The name you choose does not have to match the name used at

the gateway end of the VPN tunnel.)

Program the

Scenario_1

connection screen as follows (see

Figure C-8

•

Connection Security:

Secure

•

Remote Party Identity and Addressing: Select

IP Subnet

from the ID Type menu and

then enter

10.5.6.1

for

Subnet

255.255.255.0

for

Mask

, and leave

All

for

Protocol

(The

Subnet

and

Mask

parameters entered here must match the

Start IP address

and

Subnet Mask

parameters of the

Local IP Traffic Selector

on the

VPN Auto policy

screen shown in

Figure C-9

for the gateway router.)

•

Enable

Connect Using Secure Gateway Tunnel

; select

Domain Name

for

ID_Type

;

enter

fvs_local

for

Domain Name

; and enter

14.15.16.17

for

Gateway IP Address

(

Domain Name

must match the

Local Identity Data

parameter of the

IKE Policy

Configuration

screen shown in

Figure C-8

for the gateway router. Also,

Gateway IP

Address

must match the WAN IP address of the gateway router shown in

Figure C-8

•

Expand the Scenario_1 screen hierarchy by clicking the + sign in front of Scenario_1.

Then expand the rest of the screen hierarchies by clicking the rest of the + signs.

Figure C-7