Home » Netgear Manuals » Bridges & Routers » Netgear FVS338 » Manual Viewer

Netgear FVS338 FVS338 Reference Manual - Page 34

these DNS Servers, Gateway IP Address - login

UPC - 606449037197

Add to My Manuals
Save this manual to your list of manuals

Page 34 highlights

FVS338 ProSafe VPN Firewall 50 Reference Manual - My IP Address: IP address assigned by the ISP to make the connection with the ISP server. - Server IP Address: IP address of the PPTP server. • Other (PPPoE): If you have installed login software such as WinPoET or Enternet, then your connection type is PPPoE. Select this connection and configure the following fields: - Account Name: Valid account name for the PPPoE connection - Domain Name: Name of your ISPs domain or your domain name if your ISP has assigned one. You may leave this field blank. - Idle Timeout: Select Keep Connected, to keep the connection always on. To logout after the connection is idle for a period of time, select Idle Time and enter the number of minutes to wait before disconnecting, in the timeout field. 3. If your ISP has assigned a fixed (static or permanent) IP address, select the Use Static IP Address radio box and fill in the following fields: a. IP Address: Static IP address assigned to you. This will identify the router to your ISP. b. Subnet Mask: This is usually provided by the ISP or your network administrator. c. Gateway IP Address: IP address of the ISP's gateway. This is usually provided by the ISP or your network administrator. If your ISP has not assigned a Static IP address, select the Get dynamically from ISP radio box. The ISP will automatically assign an IP address to the router using DHCP network protocol. 4. If your ISP has not assigned any Domain Name Servers (DNS) addresses, select the Get dynamically from ISP radio box. If your ISP has assigned DNS addresses, select the Use these DNS Servers radio box. Ensure that you fill in valid DNS server IP addresses in the fields. Incorrect DNS entries may cause connectivity issues. Note: Domain name servers (DNS) convert Internet names such as www.google.com, www.netgear.com, etc. to Internet addresses called IP addresses. Incorrect settings here will result in connectivity problems. 5. Click Apply to save the settings or click Cancel to revert to the previous settings. 6. Click Test to try and connect to the NETGEAR Web site. If you connect successfully and your settings work, then you may click Logout or go on and configure additional settings. You can also click on the Broadband Status link or the Current IP Address link to check on connection status and current IP address. 2-10 Connecting the FVS338 to the Internet v1.0, March 2009

Section	Page
FVS338 ProSafe VPN Firewall 50 Reference Manual	1
Contents	7
About This Manual	13
Conventions, Formats and Scope	13
Revision History	14
Chapter 1 Introduction	15
Key Features	15
Full Routing on Both the Broadband and Serial WAN Ports	16
A Powerful, True Firewall with Content Filtering	16
Security	17
Autosensing Ethernet Connections with Auto Uplink	17
Extensive Protocol Support	17
Easy Installation and Management	18
Maintenance and Support	19
Package Contents	20
Router Hardware Components	20
Router Front Panel	20
Router Rear Panel	22
Factory Default Login	23
Chapter 2 Connecting the FVS338 to the Internet	25
Connecting the VPN Firewall to Your Network	25
Logging in to the VPN Firewall	25
Configuring your Internet Connection	26
Setting the Router’s MAC Address (Advanced Options)	30
Manually Configuring Your Internet Connection	32
Programming the Traffic Meter (if Desired)	35
Configuring the WAN Mode	37
Configuring Dynamic DNS (If Needed)	38
Chapter 3 LAN Configuration	41
Choosing the Firewall DHCP Options	41
Configuring the LAN Setup Options	42
Configuring Multi-Home LAN IPs	45
Managing Groups and Hosts	46
Creating the Network Database	47
Setting Up Address Reservation	50
Configuring Static Routes	50
Static Route Example	51
RIP Configuration	52
Chapter 4 Firewall Protection and Content Filtering	55
About Firewall Security	55
Using Rules to Block or Allow Specific Kinds of Traffic	56
Setting LAN WAN Rules	61
LAN WAN Outbound Services Rules	62
LAN WAN Inbound Services Rules	63
Attack Checks	64
Session Limit	66
Inbound Rules Examples	67
Outbound Rules Example – Blocking Instant Messenger	70
Adding Customized Services	71
Specifying Quality of Service (QoS) Priorities	73
Setting a Schedule to Block or Allow Specific Traffic	74
Setting Block Sites (Content Filtering)	74
Enabling Source MAC Filtering	77
IP/MAC Binding	78
Setting Up Port Triggering	80
Bandwidth Limiting	82
E-Mail Notifications of Event Logs and Alerts	84
Administrator Information	88
Chapter 5 Virtual Private Networking	93
Considerations for Dual WAN Port Systems	93
Using the VPN Wizard for Client and Gateway Configurations	94
Creating Gateway to Gateway VPN Tunnels with the Wizard	94
Creating a Client to Gateway VPN Tunnel	97
Testing the Connections and Viewing Status Information	103
NETGEAR VPN Client Status and Log Information	103
FVS338 VPN Connection Status and Logs	105
IKE Policies	106
IKE Policy Operation	106
IKE Policy Table	107
VPN Policies	108
VPN Policy Operation	108
VPN Policy Table	108
VPN Tunnel Connection Status	109
Extended Authentication (XAUTH) Configuration	110
Configuring XAUTH for VPN Clients	111
User Database Configuration	112
RADIUS Client Configuration	113
Assigning IP Addresses to Remote Users (ModeConfig)	115
ModeConfig Operation	116
Setting Up ModeConfig	116
Configuring the ProSafe VPN Client for ModeConfig	120
Certificates	123
Trusted Certificates (CA Certificates)	124
Self Certificates	125
Managing your Certificate Revocation List (CRL)	128
Chapter 6 Router and Network Management	129
Performance Management	129
VPN Firewall Features That Reduce Traffic	129
VPN Firewall Features That Increase Traffic	132
Using QoS to Shift the Traffic Mix	134
Tools for Traffic Management	135
Administration	135
Changing Passwords and Settings	135
RADIUS Server External Authentication	137
Enabling Remote Management Access	138
Using a SNMP Manager	141
Settings Backup and Firmware Upgrade	143
Setting the Time Zone	145
Monitoring the Router	146
Enabling the Traffic Meter	147
Setting Login Failures and Attacks Notification	148
Viewing Port Triggering Status	150
Viewing Router Configuration and System Status	151
Monitoring WAN Ports Status	152
Monitoring VPN Tunnel Connection Status	153
VPN Logs	154
DHCP Log	154
Performing Diagnostics	155
Chapter 7 Troubleshooting	159
Basic Functions	159
Power LED Not On	159
LEDs Never Turn Off	160
LAN or Internet Port LEDs Not On	160
Troubleshooting the Web Configuration Interface	160
Troubleshooting the ISP Connection	162
Troubleshooting a TCP/IP Network Using a Ping Utility	163
Testing the LAN Path to Your Firewall	163
Testing the Path from Your PC to a Remote Device	164
Restoring the Default Configuration and Password	165
Problems with Date and Time	165
Appendix A Default Settings and Technical Specifications	167
Appendix B System Logs and Error Messages	171
System Log Messages	171
System Startup	171
Reboot	172
NTP	172
Login/Logout	173
Firewall Restart	173
IPSec Restart	174
WAN Status	174
Web Filtering and Content Filtering Logs	177
Traffic Metering Logs	179
Unicast Logs	179
FTP Logging	180
Invalid Packet Logging	180
Routing Logs	183
LAN to WAN Logs	184
WAN to LAN Logs	184
Appendix C Related Documents	185
Appendix D Two Factor Authentication	187
Why do I need Two-Factor Authentication?	187
What are the benefits of Two-Factor Authentication?	187
What is Two-Factor Authentication	188
NETGEAR Two-Factor Authentication Solutions	188

Match case Limit results 1 per page

FVS338 ProSafe VPN Firewall 50 Reference Manual

2-10

Connecting the FVS338 to the Internet

v1.0, March 2009

–

My IP Address:

IP address assigned by the ISP to make the connection with the ISP

server.

–

Server IP Address

: IP address of the PPTP server.

•

Other (PPPoE)

: If you have installed login software such as WinPoET or Enternet, then

your connection type is PPPoE. Select this connection and configure the following fields:

–

Account Name

: Valid account name for the PPPoE connection

–

Domain Name:

Name of your ISPs domain or your domain name if your ISP has

assigned one. You may leave this field blank.

–

Idle Timeout:

Select Keep Connected, to keep the connection always on. To logout

after the connection is idle for a period of time, select Idle Time and enter the number

of minutes to wait before disconnecting, in the timeout field.

If your ISP has assigned a fixed (static or permanent) IP address, select the

Use Static IP

Address

radio box and fill in the following fields:

IP Address:

Static IP address assigned to you. This will identify the router to your ISP.

Subnet Mask

: This is usually provided by the ISP or your network administrator.

Gateway IP Address

: IP address of the ISP’s gateway. This is usually provided by the ISP

or your network administrator.

If your ISP has not assigned a Static IP address, select the

Get dynamically from ISP

radio

box. The ISP will automatically assign an IP address to the router using DHCP network

protocol.

If your ISP has not assigned any Domain Name Servers (DNS) addresses, select the

Get

dynamically from ISP

radio box. If your ISP has assigned DNS addresses, select the

Use

these DNS Servers

radio box. Ensure that you fill in valid DNS server IP addresses in the

fields. Incorrect DNS entries may cause connectivity issues.

Click

Apply

to save the settings or click

Cancel

to revert to the previous settings.

Click

Test

to try and connect to the NETGEAR Web site. If you connect successfully and your

settings work, then you may click Logout or go on and configure additional settings.

You can also click on the

Broadband Status

link or the

Current IP Address

link to check on

connection status and current IP address.

Note:

Domain name servers (DNS) convert Internet names such as www.google.com,

www.netgear.com, etc. to Internet addresses called IP addresses. Incorrect

settings here will result in connectivity problems.