Home » Netgear Manuals » Bridges & Routers » Netgear FVS338 » Manual Viewer

Netgear FVS338 FVS338 Reference Manual - Page 44

Starting IP Address, Primary DNS Server, WINS Server, Lease Time., Enable DNS Proxy, LAN TCP/IP, Setup - windows 7 vpn client

UPC - 606449037197

Add to My Manuals
Save this manual to your list of manuals

Page 44 highlights

FVS338 ProSafe VPN Firewall 50 Reference Manual b. Enter the Starting IP Address. This address specifies the first of the contiguous addresses in the IP address pool. Any new DHCP client joining the LAN will be assigned an IP address between this address and the Ending IP Address. The IP address 192.168.1.2 is the default start address. c. Enter the Ending IP Address. This address specifies the last of the contiguous addresses in the IP address pool. Any new DHCP client joining the LAN will be assigned an IP address between the Starting IP address and this IP address. The IP address 192.168.1.100 is the default ending address. Note: The Starting and Ending DHCP addresses should be in the same "network" as the LAN TCP/IP address of the router (the IP Address in LAN TCP/IP Setup section). • Primary DNS Server. (Optional) If an IP address is specified, the VPN firewall will provide this address as the primary DNS server IP address. If no address is specified, the VPN firewall will provide its own LAN IP address as the primary DNS server IP address. • Secondary DNS Server. (Optional) If an IP address is specified, the VPN firewall will provide this address as the secondary DNS server IP address. d. Enter a WINS Server IP address. This box can specify the Windows NetBios Server IP if one is present in your network. This field is optional. e. Enter a Lease Time. This specifies the duration for which IP addresses will be leased to clients. f. To enable the DHCP server to provide LDAP server information, check the Enable LDAP Information checkbox and fill in the fields accordingly. g. Check the Enable DNS Proxy radio box. This is optional-the default is enabled. If enabled, the VPN firewall will provide a LAN IP Address for DNS address name resolution. Note: If you change the LAN IP address of the firewall while connected through the browser, you will be disconnected. You must then open a new connection to the new IP address and log in again. For example, if you change the default IP address 192.168.1.1 to 10.0.0.1, you must enter http://10.0.0.1 in your browser to reconnect to the web management interface. 3-4 LAN Configuration v1.0, March 2009

Section	Page
FVS338 ProSafe VPN Firewall 50 Reference Manual	1
Contents	7
About This Manual	13
Conventions, Formats and Scope	13
Revision History	14
Chapter 1 Introduction	15
Key Features	15
Full Routing on Both the Broadband and Serial WAN Ports	16
A Powerful, True Firewall with Content Filtering	16
Security	17
Autosensing Ethernet Connections with Auto Uplink	17
Extensive Protocol Support	17
Easy Installation and Management	18
Maintenance and Support	19
Package Contents	20
Router Hardware Components	20
Router Front Panel	20
Router Rear Panel	22
Factory Default Login	23
Chapter 2 Connecting the FVS338 to the Internet	25
Connecting the VPN Firewall to Your Network	25
Logging in to the VPN Firewall	25
Configuring your Internet Connection	26
Setting the Router’s MAC Address (Advanced Options)	30
Manually Configuring Your Internet Connection	32
Programming the Traffic Meter (if Desired)	35
Configuring the WAN Mode	37
Configuring Dynamic DNS (If Needed)	38
Chapter 3 LAN Configuration	41
Choosing the Firewall DHCP Options	41
Configuring the LAN Setup Options	42
Configuring Multi-Home LAN IPs	45
Managing Groups and Hosts	46
Creating the Network Database	47
Setting Up Address Reservation	50
Configuring Static Routes	50
Static Route Example	51
RIP Configuration	52
Chapter 4 Firewall Protection and Content Filtering	55
About Firewall Security	55
Using Rules to Block or Allow Specific Kinds of Traffic	56
Setting LAN WAN Rules	61
LAN WAN Outbound Services Rules	62
LAN WAN Inbound Services Rules	63
Attack Checks	64
Session Limit	66
Inbound Rules Examples	67
Outbound Rules Example – Blocking Instant Messenger	70
Adding Customized Services	71
Specifying Quality of Service (QoS) Priorities	73
Setting a Schedule to Block or Allow Specific Traffic	74
Setting Block Sites (Content Filtering)	74
Enabling Source MAC Filtering	77
IP/MAC Binding	78
Setting Up Port Triggering	80
Bandwidth Limiting	82
E-Mail Notifications of Event Logs and Alerts	84
Administrator Information	88
Chapter 5 Virtual Private Networking	93
Considerations for Dual WAN Port Systems	93
Using the VPN Wizard for Client and Gateway Configurations	94
Creating Gateway to Gateway VPN Tunnels with the Wizard	94
Creating a Client to Gateway VPN Tunnel	97
Testing the Connections and Viewing Status Information	103
NETGEAR VPN Client Status and Log Information	103
FVS338 VPN Connection Status and Logs	105
IKE Policies	106
IKE Policy Operation	106
IKE Policy Table	107
VPN Policies	108
VPN Policy Operation	108
VPN Policy Table	108
VPN Tunnel Connection Status	109
Extended Authentication (XAUTH) Configuration	110
Configuring XAUTH for VPN Clients	111
User Database Configuration	112
RADIUS Client Configuration	113
Assigning IP Addresses to Remote Users (ModeConfig)	115
ModeConfig Operation	116
Setting Up ModeConfig	116
Configuring the ProSafe VPN Client for ModeConfig	120
Certificates	123
Trusted Certificates (CA Certificates)	124
Self Certificates	125
Managing your Certificate Revocation List (CRL)	128
Chapter 6 Router and Network Management	129
Performance Management	129
VPN Firewall Features That Reduce Traffic	129
VPN Firewall Features That Increase Traffic	132
Using QoS to Shift the Traffic Mix	134
Tools for Traffic Management	135
Administration	135
Changing Passwords and Settings	135
RADIUS Server External Authentication	137
Enabling Remote Management Access	138
Using a SNMP Manager	141
Settings Backup and Firmware Upgrade	143
Setting the Time Zone	145
Monitoring the Router	146
Enabling the Traffic Meter	147
Setting Login Failures and Attacks Notification	148
Viewing Port Triggering Status	150
Viewing Router Configuration and System Status	151
Monitoring WAN Ports Status	152
Monitoring VPN Tunnel Connection Status	153
VPN Logs	154
DHCP Log	154
Performing Diagnostics	155
Chapter 7 Troubleshooting	159
Basic Functions	159
Power LED Not On	159
LEDs Never Turn Off	160
LAN or Internet Port LEDs Not On	160
Troubleshooting the Web Configuration Interface	160
Troubleshooting the ISP Connection	162
Troubleshooting a TCP/IP Network Using a Ping Utility	163
Testing the LAN Path to Your Firewall	163
Testing the Path from Your PC to a Remote Device	164
Restoring the Default Configuration and Password	165
Problems with Date and Time	165
Appendix A Default Settings and Technical Specifications	167
Appendix B System Logs and Error Messages	171
System Log Messages	171
System Startup	171
Reboot	172
NTP	172
Login/Logout	173
Firewall Restart	173
IPSec Restart	174
WAN Status	174
Web Filtering and Content Filtering Logs	177
Traffic Metering Logs	179
Unicast Logs	179
FTP Logging	180
Invalid Packet Logging	180
Routing Logs	183
LAN to WAN Logs	184
WAN to LAN Logs	184
Appendix C Related Documents	185
Appendix D Two Factor Authentication	187
Why do I need Two-Factor Authentication?	187
What are the benefits of Two-Factor Authentication?	187
What is Two-Factor Authentication	188
NETGEAR Two-Factor Authentication Solutions	188

Match case Limit results 1 per page

FVS338 ProSafe VPN Firewall 50 Reference Manual

3-4

LAN Configuration

v1.0, March 2009

Enter the

Starting IP Address

. This address specifies the first of the contiguous addresses

in the IP address pool. Any new DHCP client joining the LAN will be assigned an IP

address between this address and the Ending IP Address. The IP address 192.168.1.2 is the

default start address.

Enter the

Ending IP Address

. This address specifies the last of the contiguous addresses

in the IP address pool. Any new DHCP client joining the LAN will be assigned an IP

address between the Starting IP address and this IP address. The IP address 192.168.1.100

is the default ending address.

•

Primary DNS Server

. (Optional) If an IP address is specified, the VPN firewall will

provide this address as the primary DNS server IP address. If no address is specified, the

VPN firewall will provide its own LAN IP address as the primary DNS server IP address.

•

Secondary DNS Server

. (Optional) If an IP address is specified, the VPN firewall will

provide this address as the secondary DNS server IP address.

Enter a

WINS Server

IP address. This box can specify the Windows NetBios Server IP if

one is present in your network. This field is optional.

Enter a

Lease Time.

This specifies the duration for which IP addresses will be leased to

clients.

To enable the DHCP server to provide LDAP server information, check the Enable LDAP

Information checkbox and fill in the fields accordingly.

Check the

Enable DNS Proxy

radio box. This is optional—the default is enabled. If

enabled, the VPN firewall will provide a LAN IP Address for DNS address name

resolution.

Note:

The Starting and Ending DHCP addresses should be in the same “network”

as the LAN TCP/IP address of the router (the IP Address in

LAN TCP/IP

Setup

section).

Note:

If you change the LAN IP address of the firewall while connected through

the browser, you will be disconnected. You must then open a new

connection to the new IP address and log in again. For example, if you

change the default IP address 192.168.1.1 to 10.0.0.1, you must enter

http://10.0.0.1

in your browser to reconnect to the web management

interface.