Home » Netgear Manuals » Network Security & Firewall Devices » Netgear FVG318v1 » Manual Viewer

Netgear FVG318v1 FVG318 Reference Manual - Page 37

Check the router status lights to verify correct router operation.

Add to My Manuals
Save this manual to your list of manuals

Page 37 highlights

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual • Some cable modem ISPs require you to use the MAC address of the computer registered on the account. If so, in the Router MAC Address section of the Basic Settings menu, select, "Use this Computer's MAC Address." The router will then capture and use the MAC address of the computer that you are now using. You must be using the computer that is registered with the ISP. Click Apply to save your settings. Restart the network in the correct sequence. Check the router status lights to verify correct router operation. • If the Power light does not turn solid green within 2 minutes after turning the router on, reset the router according to the instructions in the Reference Manual on the CD. • If the Wireless light does not come on, verify that the wireless feature is turned on according to the instructions in the Reference Manual on the CD. Tips for Accessing the VPN firewall The table below describes how you access the VPN firewall router, depending on the state of the VPN firewall router. Table 2-2. Accessing the firewall router Firewall State Access Options Description Factory Default Note: The VPN firewall router is supplied in the factory default state. Also, the factory default state is restored when you use the factory reset button. See "To backup and restore your configuration:" on page 7-5 for more information on this feature. Automatic Access via the Smart Wizard Configuration Assistant Manually enter a URL to bypass the Smart Wizard Configuration Assistant Any time a browser is opened on any computer connected to the VPN firewall router, the VPN firewall router will automatically connect to that browser and display the Configuration Assistant welcome page. There is no need to enter the VPN firewall router URL in the browser, or provide the login user name and password. You can bypass the Smart Wizard Configuration Assistant feature by typing http://192.168.0.1/basicsetting.htm in the browser address bar and pressing Enter. You will not be prompted for a user name or password. This will enable you to manually configure the VPN firewall router even when it is in the factory default state. When manually configuring the firewall, you must complete the configuration by clicking Apply when you finish entering your settings. If you do not do so, a browser on any PC connected to the firewall will automatically display the firewall Configuration Assistant welcome page rather than the browser's home page. Connecting the Firewall to the Internet v1.0, September 2007 2-13

Section	Page
ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual	1
Contents	7
About This Manual	13
Conventions, Formats, and Scope	13
How to Use This Manual	14
How to Print this Manual	14
Revision History	15
Chapter 1 Introduction	17
Key Features of the VPN Firewall Router	17
802.11g and 802.11b Wireless Networking	18
Wireless Multimedia (WMM) Support	18
A Powerful, True Firewall with Content Filtering	18
Security	19
Autosensing Ethernet Connections with Auto Uplink	19
Extensive Protocol Support	19
Easy Installation and Management	20
Maintenance and Support	21
Package Contents	21
The FVG318 Front Panel	21
The FVG318 Rear Panel	22
Chapter 2 Connecting the Firewall to the Internet	25
Installing Your FVG318	25
Configuring the FVG318 for Internet Access with Auto Detect	28
Manually Configuring your Internet Connection	31
Configuring Dynamic DNS (If Needed)	33
Configuring Your Time Zone	35
Troubleshooting Tips	36
Be sure to restart your network in the correct sequence.	36
Make sure the Ethernet cables are securely plugged in.	36
Make sure the computer & router wireless settings match exactly.	36
Make sure the network settings of the computer are correct.	36
Check the router status lights to verify correct router operation.	37
Tips for Accessing the VPN firewall	37
Chapter 3 Configuring Wireless Connectivity	39
Observing Performance, Placement, and Range Guidelines	39
Implementing Appropriate Wireless Security	40
Understanding Wireless Settings	41
Security Check List for SSID and WEP Settings	45
Setting Up and Testing Basic Wireless Connectivity	46
Restricting Wireless Access by MAC Address	47
Configuring WEP Security Settings	48
Configuring WPA with RADIUS	50
Configuring WPA2 with RADIUS	52
Configuring WPA and WPA2 with RADIUS	53
Configuring WPA-PSK	55
Configuring WPA2-PSK	56
Configuring WPA-PSK and WPA2-PSK	58
Chapter 4 Firewall Protection and Content Filtering	61
Firewall Protection and Content Filtering Overview	61
Block Sites	61
Using Rules to Block or Allow Specific Kinds of Traffic	64
Inbound Rules (Port Forwarding)	66
Inbound Rule Example: A Local Public Web Server	67
Inbound Rule Example: Allowing a Videoconference from Restricted Addresses	67
Considerations for Inbound Rules	68
Outbound Rules (Service Blocking)	68
Outbound Rule Example: Blocking Instant Messenger	68
Order of Precedence for Rules	69
Default DMZ Server	70
Attack Checks	71
Services	72
Using a Schedule to Block or Allow Specific Traffic	73
Getting E-Mail Notifications of Firewall Logs	74
Chapter 5 Basic Virtual Private Networking	79
Overview of VPN Configuration	80
Client-to-Gateway VPN Tunnels	80
Gateway-to-Gateway VPN Tunnels	80
Planning a VPN	81
VPN Tunnel Configuration	82
Setting Up a Client-to-Gateway VPN Configuration	83
Step 1: Configuring the Client-to-Gateway VPN Tunnel on the FVG318	83
Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC	85
Monitoring the Progress and Status of the VPN Client Connection	93
Transferring a Security Policy to Another Client	95
Setting Up a Gateway-to-Gateway VPN Configuration	97
Activating a VPN Tunnel	101
Verifying the Status of a VPN Tunnel	103
Deactivating a VPN Tunnel	104
Using the Policy Table on the VPN Policies Screen to Deactivate a VPN Tunnel	104
Using the VPN Status Page to Deactivate a VPN Tunnel	105
Deleting a VPN Tunnel	105
Chapter 6 Advanced Virtual Private Networking	107
Using IKE and VPN Policies to Manage VPN Traffic	107
Using Automatic Key Management	108
IKE Policy Automatic Key and Authentication Management	108
VPN Policy Configuration for Auto Key and Manual Negotiation	109
Using Digital Certificates for IKE Auto-Policy Authentication	113
Certificate Revocation List (CRL)	113
VPN Configuration Scenarios on the FVG318	114
VPN Consortium Scenario 1: Gateway-to-Gateway with Preshared Secrets	115
FVG318 Gateway A to FVG318 Gateway B (IKE and VPN Policies)	116
Checking Your VPN Connections	119
VPN Consortium Scenario 2: FVG318 Gateway to Gateway with Digital Certificates	121
Chapter 7 Maintenance	125
Viewing VPN Firewall Router Status Information	125
Upgrading the Firewall Software	128
Backing Up and Restoring Settings	129
Changing the Administrator Password	130
Chapter 8 Advanced Configuration	131
Configuring Dynamic DNS	131
Using the LAN IP Setup Options	132
Configuring LAN TCP/IP Setup Parameters	132
Using the Firewall as a DHCP server	133
Using Address Reservation	134
Configuring Static Routes	135
Configuring RIP	136
Static Route Example	137
Enabling Remote Management Access	138
SNMP Administration	140
Enabling Universal Plug and Play (UPnP)	142
Chapter 9 Troubleshooting	143
Basic Functioning	143
Power LED Not On	143
LEDs Never Turn Off	144
LAN or Internet Port LEDs Not On	144
Troubleshooting the Web Configuration Interface	144
Troubleshooting the ISP Connection	145
Troubleshooting a TCP/IP Network Using a Ping Utility	147
Testing the LAN Path to Your Firewall	147
Testing the Path from Your PC to a Remote Device	148
Restoring the Default Configuration and Password	148
Problems with Date and Time	149
Appendix A Default Settings and Technical Specifications	151
Default Settings	151
Technical Specifications	153
Appendix B Related Documents	155
Appendix C VPN Configuration of NETGEAR FVG318	157
Case Study Overview	157
Gathering the Network Information	157
Configuring the Gateways	158
Activating the VPN Tunnel	159
The FVG318-to-FVG318 Case	159
Configuring the VPN Tunnel	160
Viewing and Editing the VPN Parameters	161
Initiating and Checking the VPN Connections	162
The FVG318-to-FVS318v2 Case	163
Configuring the VPN Tunnel	163
Viewing and Editing the VPN Parameters	164
Initiating and Checking the VPN Connections	165
The FVG318-to-FVL328 Case	166
Configuring the VPN Tunnel	166
Viewing and Editing the VPN Parameters	167
Initiating and Checking the VPN Connections	168
The FVG318-to-VPN Client Case	169
Client-to-Gateway VPN Tunnel Overview	169
Configuring the VPN Tunnel	170

Match case Limit results 1 per page

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

Connecting the Firewall to the Internet

2-13

v1.0, September 2007

•

Some cable modem ISPs require you to use the MAC address of the computer registered on

the account. If so, in the Router MAC Address section of the Basic Settings menu, select, “Use

this Computer’s MAC Address.” The router will then capture and use the MAC address of the

computer that you are now using. You must be using the computer that is registered with the

ISP. Click

Apply

to save your settings. Restart the network in the correct sequence.

Check the router status lights to verify correct router operation.

•

If the Power light does not turn solid green within 2 minutes after turning the router on, reset

the router according to the instructions in the

Reference Manual

on the CD.

•

If the Wireless light does not come on, verify that the wireless feature is turned on according to

the instructions in the

Reference Manual

on the CD.

Tips for Accessing the VPN firewall

The table below describes how you access the VPN firewall router, depending on the state of the

VPN firewall router.

Table 2-2.

Accessing the firewall router

Firewall State

Access Options

Description

Factory Default

Note

: The VPN

firewall router is

supplied in the

factory default state.

Also, the factory

default state is

restored when you

use the factory reset

button. See

“To

backup and restore

your configuration:”

on page 7-5

for

more information on

this feature.

Automatic Access via

the Smart Wizard

Configuration

Assistant

Any time a browser is opened on any computer connected to

the VPN firewall router, the VPN firewall router will

automatically connect to that browser and display the

Configuration Assistant welcome page.

There is no need to enter the VPN firewall router URL in the

browser, or provide the login user name and password.

Manually enter a URL

to bypass the Smart

Wizard Configuration

Assistant

You can bypass the Smart Wizard Configuration Assistant

feature by typing

http://192.168.0.1/basicsetting.htm

in the browser address bar and pressing

Enter

. You will not

be prompted for a user name or password.

This will enable you to manually configure the VPN firewall

router even when it is in the factory default state. When

manually configuring the firewall, you must complete the

configuration by clicking

Apply

when you finish entering your

settings. If you do not do so, a browser on any PC connected

to the firewall will automatically display the firewall

Configuration Assistant welcome page rather than the

browser’s home page.