Home » Netgear Manuals » Network Security & Firewall Devices » Netgear FVG318v1 » Manual Viewer

Netgear FVG318v1 FVG318 Reference Manual - Page 79

Basic Virtual Private Networking

Add to My Manuals
Save this manual to your list of manuals

Page 79 highlights

Chapter 5 Basic Virtual Private Networking This chapter describes how to use the virtual private networking (VPN) features of the VPN firewall. VPN communications paths are called tunnels. VPN tunnels provide secure, encrypted communications between your local network and a remote network or computer. The VPN information is organized as follows: • "Overview of VPN Configuration" on page 5-2 provides an overview of the two most common VPN configurations: client-to-gateway and gateway-to-gateway. • "Planning a VPN" on page 5-3 provides the VPN Committee (VPNC) recommended default parameters set by the VPN Wizard. • "VPN Tunnel Configuration" on page 5-4 summarizes the two ways to configure a VPN tunnel: VPN Wizard (recommended for most situations) and Advanced (see Chapter 6, "Advanced Virtual Private Networking). • "Setting Up a Client-to-Gateway VPN Configuration" on page 5-5 provides the steps needed to configure a VPN tunnel between a remote PC and a network gateway using the VPN Wizard and the NETGEAR ProSafe VPN Client. • "Setting Up a Gateway-to-Gateway VPN Configuration" on page 5-19 provides the steps needed to configure a VPN tunnel between two network gateways using the VPN Wizard. • "Activating a VPN Tunnel" on page 5-23 provides the step-by-step procedures for activating, verifying, deactivating, and deleting a VPN tunnel once the VPN tunnel has been configured. • Chapter 6, "Advanced Virtual Private Networking" provides the steps needed to configure VPN tunnels when there are special circumstances and the VPNC recommended defaults of the VPN Wizard are inappropriate. • Appendix B, "Related Documents" has a link to "Virtual Private Networking (VPN)" which discusses Virtual Private Networking (VPN) Internet Protocol security (IPSec). IPSec is one of the most complete, secure, and commercially available, standards-based protocols developed for transporting data. • Appendix C, "VPN Configuration of NETGEAR FVG318" presents a case study on how to configure a secure IPSec VPN tunnel from a NETGEAR FVG318 to a FVL328. This case study follows the VPN Consortium interoperability profile guidelines (found at http://www.vpnc.org/InteropProfiles/Interop-01.html). Basic Virtual Private Networking 5-1 v1.0, September 2007

Section	Page
ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual	1
Contents	7
About This Manual	13
Conventions, Formats, and Scope	13
How to Use This Manual	14
How to Print this Manual	14
Revision History	15
Chapter 1 Introduction	17
Key Features of the VPN Firewall Router	17
802.11g and 802.11b Wireless Networking	18
Wireless Multimedia (WMM) Support	18
A Powerful, True Firewall with Content Filtering	18
Security	19
Autosensing Ethernet Connections with Auto Uplink	19
Extensive Protocol Support	19
Easy Installation and Management	20
Maintenance and Support	21
Package Contents	21
The FVG318 Front Panel	21
The FVG318 Rear Panel	22
Chapter 2 Connecting the Firewall to the Internet	25
Installing Your FVG318	25
Configuring the FVG318 for Internet Access with Auto Detect	28
Manually Configuring your Internet Connection	31
Configuring Dynamic DNS (If Needed)	33
Configuring Your Time Zone	35
Troubleshooting Tips	36
Be sure to restart your network in the correct sequence.	36
Make sure the Ethernet cables are securely plugged in.	36
Make sure the computer & router wireless settings match exactly.	36
Make sure the network settings of the computer are correct.	36
Check the router status lights to verify correct router operation.	37
Tips for Accessing the VPN firewall	37
Chapter 3 Configuring Wireless Connectivity	39
Observing Performance, Placement, and Range Guidelines	39
Implementing Appropriate Wireless Security	40
Understanding Wireless Settings	41
Security Check List for SSID and WEP Settings	45
Setting Up and Testing Basic Wireless Connectivity	46
Restricting Wireless Access by MAC Address	47
Configuring WEP Security Settings	48
Configuring WPA with RADIUS	50
Configuring WPA2 with RADIUS	52
Configuring WPA and WPA2 with RADIUS	53
Configuring WPA-PSK	55
Configuring WPA2-PSK	56
Configuring WPA-PSK and WPA2-PSK	58
Chapter 4 Firewall Protection and Content Filtering	61
Firewall Protection and Content Filtering Overview	61
Block Sites	61
Using Rules to Block or Allow Specific Kinds of Traffic	64
Inbound Rules (Port Forwarding)	66
Inbound Rule Example: A Local Public Web Server	67
Inbound Rule Example: Allowing a Videoconference from Restricted Addresses	67
Considerations for Inbound Rules	68
Outbound Rules (Service Blocking)	68
Outbound Rule Example: Blocking Instant Messenger	68
Order of Precedence for Rules	69
Default DMZ Server	70
Attack Checks	71
Services	72
Using a Schedule to Block or Allow Specific Traffic	73
Getting E-Mail Notifications of Firewall Logs	74
Chapter 5 Basic Virtual Private Networking	79
Overview of VPN Configuration	80
Client-to-Gateway VPN Tunnels	80
Gateway-to-Gateway VPN Tunnels	80
Planning a VPN	81
VPN Tunnel Configuration	82
Setting Up a Client-to-Gateway VPN Configuration	83
Step 1: Configuring the Client-to-Gateway VPN Tunnel on the FVG318	83
Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC	85
Monitoring the Progress and Status of the VPN Client Connection	93
Transferring a Security Policy to Another Client	95
Setting Up a Gateway-to-Gateway VPN Configuration	97
Activating a VPN Tunnel	101
Verifying the Status of a VPN Tunnel	103
Deactivating a VPN Tunnel	104
Using the Policy Table on the VPN Policies Screen to Deactivate a VPN Tunnel	104
Using the VPN Status Page to Deactivate a VPN Tunnel	105
Deleting a VPN Tunnel	105
Chapter 6 Advanced Virtual Private Networking	107
Using IKE and VPN Policies to Manage VPN Traffic	107
Using Automatic Key Management	108
IKE Policy Automatic Key and Authentication Management	108
VPN Policy Configuration for Auto Key and Manual Negotiation	109
Using Digital Certificates for IKE Auto-Policy Authentication	113
Certificate Revocation List (CRL)	113
VPN Configuration Scenarios on the FVG318	114
VPN Consortium Scenario 1: Gateway-to-Gateway with Preshared Secrets	115
FVG318 Gateway A to FVG318 Gateway B (IKE and VPN Policies)	116
Checking Your VPN Connections	119
VPN Consortium Scenario 2: FVG318 Gateway to Gateway with Digital Certificates	121
Chapter 7 Maintenance	125
Viewing VPN Firewall Router Status Information	125
Upgrading the Firewall Software	128
Backing Up and Restoring Settings	129
Changing the Administrator Password	130
Chapter 8 Advanced Configuration	131
Configuring Dynamic DNS	131
Using the LAN IP Setup Options	132
Configuring LAN TCP/IP Setup Parameters	132
Using the Firewall as a DHCP server	133
Using Address Reservation	134
Configuring Static Routes	135
Configuring RIP	136
Static Route Example	137
Enabling Remote Management Access	138
SNMP Administration	140
Enabling Universal Plug and Play (UPnP)	142
Chapter 9 Troubleshooting	143
Basic Functioning	143
Power LED Not On	143
LEDs Never Turn Off	144
LAN or Internet Port LEDs Not On	144
Troubleshooting the Web Configuration Interface	144
Troubleshooting the ISP Connection	145
Troubleshooting a TCP/IP Network Using a Ping Utility	147
Testing the LAN Path to Your Firewall	147
Testing the Path from Your PC to a Remote Device	148
Restoring the Default Configuration and Password	148
Problems with Date and Time	149
Appendix A Default Settings and Technical Specifications	151
Default Settings	151
Technical Specifications	153
Appendix B Related Documents	155
Appendix C VPN Configuration of NETGEAR FVG318	157
Case Study Overview	157
Gathering the Network Information	157
Configuring the Gateways	158
Activating the VPN Tunnel	159
The FVG318-to-FVG318 Case	159
Configuring the VPN Tunnel	160
Viewing and Editing the VPN Parameters	161
Initiating and Checking the VPN Connections	162
The FVG318-to-FVS318v2 Case	163
Configuring the VPN Tunnel	163
Viewing and Editing the VPN Parameters	164
Initiating and Checking the VPN Connections	165
The FVG318-to-FVL328 Case	166
Configuring the VPN Tunnel	166
Viewing and Editing the VPN Parameters	167
Initiating and Checking the VPN Connections	168
The FVG318-to-VPN Client Case	169
Client-to-Gateway VPN Tunnel Overview	169
Configuring the VPN Tunnel	170

Match case Limit results 1 per page

Basic Virtual Private Networking

5-1

v1.0, September 2007

Chapter 5

Basic Virtual Private Networking

This chapter describes how to use the virtual private networking (VPN) features of the VPN

firewall. VPN communications paths are called tunnels. VPN tunnels provide secure, encrypted

communications between your local network and a remote network or computer.

The VPN information is organized as follows:

•

“Overview of VPN Configuration” on page 5-2

provides an overview of the two most

common VPN configurations: client-to-gateway and gateway-to-gateway.

•

“Planning a VPN” on page 5-3

provides the VPN Committee (VPNC) recommended default

parameters set by the VPN Wizard.

•

“VPN Tunnel Configuration” on page 5-4

summarizes the two ways to configure a VPN

tunnel: VPN Wizard (recommended for most situations) and Advanced (see

Chapter 6,

“Advanced Virtual Private Networking

•

“Setting Up a Client-to-Gateway VPN Configuration” on page 5-5

provides the steps needed

to configure a VPN tunnel between a remote PC and a network gateway using the VPN

Wizard and the NETGEAR ProSafe VPN Client.

•

“Setting Up a Gateway-to-Gateway VPN Configuration” on page 5-19

provides the steps

needed to configure a VPN tunnel between two network gateways using the VPN Wizard.

•

“Activating a VPN Tunnel” on page 5-23

provides the step-by-step procedures for activating,

verifying, deactivating, and deleting a VPN tunnel once the VPN tunnel has been configured.

•

Chapter 6, “Advanced Virtual Private Networking

” provides the steps needed to configure

VPN tunnels when there are special circumstances and the VPNC recommended defaults of

the VPN Wizard are inappropriate.

•

Appendix B, “Related Documents

” has a link to

“Virtual Private Networking (VPN)

” which

discusses Virtual Private Networking (VPN) Internet Protocol security (IPSec). IPSec is one of

the most complete, secure, and commercially available, standards-based protocols developed

for transporting data.

•

Appendix C, “VPN Configuration of NETGEAR FVG318

” presents a case study on how to

configure a secure IPSec VPN tunnel from a NETGEAR FVG318 to a FVL328. This case

study follows the VPN Consortium interoperability profile guidelines (found at

http://www.vpnc.org/InteropProfiles/Interop-01.html