Home » Netgear Manuals » Bridges & Routers » Netgear FVS338 » Manual Viewer

Netgear FVS338 FVS338 Reference Manual - Page 68

Setting Up One-to-One NAT Mapping, Security, Firewall Rules, Inbound Services - multiple public ip

UPC - 606449037197

Add to My Manuals
Save this manual to your list of manuals

Page 68 highlights

FVS338 ProSafe VPN Firewall 50 Reference Manual Figure 4-8 Setting Up One-to-One NAT Mapping In this example, we will configure multi-NAT to support multiple public IP addresses on one WAN interface. By creating an inbound rule, we will configure the firewall to host an additional public IP address and associate this address with a Web server on the LAN. Tip: If your ISP allows you to have more than one public IP address for your use, you can use the additional public IP addresses to map to servers on your LAN. One of these public IP addresses will be used as the primary IP address of the router. This address will be used to provide Internet access to your LAN PCs through NAT. The other addresses are available to map to your servers. To configure the FVS338 for additional IP addresses: 1. Select Security from the main menu and Firewall Rules from the submenu. 2. Click Add under the Inbound Services table. The Add LAN WAN Inbound Service screen will display. 3. From the service pull-down menu, select the HTTP service for a Web server. 4. From the Action pull-down menu, select Allow Always. 5. In the Send to LAN Server field, enter the local IP address of your Web server PC. 6. From the Public Destination IP Address pull down menu, choose Other Public IP Address. 7. Enter one of your public Internet addresses that will be used by clients on the Internet to reach your Web server. 4-14 Firewall Protection and Content Filtering v1.0, March 2009

Section	Page
FVS338 ProSafe VPN Firewall 50 Reference Manual	1
Contents	7
About This Manual	13
Conventions, Formats and Scope	13
Revision History	14
Chapter 1 Introduction	15
Key Features	15
Full Routing on Both the Broadband and Serial WAN Ports	16
A Powerful, True Firewall with Content Filtering	16
Security	17
Autosensing Ethernet Connections with Auto Uplink	17
Extensive Protocol Support	17
Easy Installation and Management	18
Maintenance and Support	19
Package Contents	20
Router Hardware Components	20
Router Front Panel	20
Router Rear Panel	22
Factory Default Login	23
Chapter 2 Connecting the FVS338 to the Internet	25
Connecting the VPN Firewall to Your Network	25
Logging in to the VPN Firewall	25
Configuring your Internet Connection	26
Setting the Router’s MAC Address (Advanced Options)	30
Manually Configuring Your Internet Connection	32
Programming the Traffic Meter (if Desired)	35
Configuring the WAN Mode	37
Configuring Dynamic DNS (If Needed)	38
Chapter 3 LAN Configuration	41
Choosing the Firewall DHCP Options	41
Configuring the LAN Setup Options	42
Configuring Multi-Home LAN IPs	45
Managing Groups and Hosts	46
Creating the Network Database	47
Setting Up Address Reservation	50
Configuring Static Routes	50
Static Route Example	51
RIP Configuration	52
Chapter 4 Firewall Protection and Content Filtering	55
About Firewall Security	55
Using Rules to Block or Allow Specific Kinds of Traffic	56
Setting LAN WAN Rules	61
LAN WAN Outbound Services Rules	62
LAN WAN Inbound Services Rules	63
Attack Checks	64
Session Limit	66
Inbound Rules Examples	67
Outbound Rules Example – Blocking Instant Messenger	70
Adding Customized Services	71
Specifying Quality of Service (QoS) Priorities	73
Setting a Schedule to Block or Allow Specific Traffic	74
Setting Block Sites (Content Filtering)	74
Enabling Source MAC Filtering	77
IP/MAC Binding	78
Setting Up Port Triggering	80
Bandwidth Limiting	82
E-Mail Notifications of Event Logs and Alerts	84
Administrator Information	88
Chapter 5 Virtual Private Networking	93
Considerations for Dual WAN Port Systems	93
Using the VPN Wizard for Client and Gateway Configurations	94
Creating Gateway to Gateway VPN Tunnels with the Wizard	94
Creating a Client to Gateway VPN Tunnel	97
Testing the Connections and Viewing Status Information	103
NETGEAR VPN Client Status and Log Information	103
FVS338 VPN Connection Status and Logs	105
IKE Policies	106
IKE Policy Operation	106
IKE Policy Table	107
VPN Policies	108
VPN Policy Operation	108
VPN Policy Table	108
VPN Tunnel Connection Status	109
Extended Authentication (XAUTH) Configuration	110
Configuring XAUTH for VPN Clients	111
User Database Configuration	112
RADIUS Client Configuration	113
Assigning IP Addresses to Remote Users (ModeConfig)	115
ModeConfig Operation	116
Setting Up ModeConfig	116
Configuring the ProSafe VPN Client for ModeConfig	120
Certificates	123
Trusted Certificates (CA Certificates)	124
Self Certificates	125
Managing your Certificate Revocation List (CRL)	128
Chapter 6 Router and Network Management	129
Performance Management	129
VPN Firewall Features That Reduce Traffic	129
VPN Firewall Features That Increase Traffic	132
Using QoS to Shift the Traffic Mix	134
Tools for Traffic Management	135
Administration	135
Changing Passwords and Settings	135
RADIUS Server External Authentication	137
Enabling Remote Management Access	138
Using a SNMP Manager	141
Settings Backup and Firmware Upgrade	143
Setting the Time Zone	145
Monitoring the Router	146
Enabling the Traffic Meter	147
Setting Login Failures and Attacks Notification	148
Viewing Port Triggering Status	150
Viewing Router Configuration and System Status	151
Monitoring WAN Ports Status	152
Monitoring VPN Tunnel Connection Status	153
VPN Logs	154
DHCP Log	154
Performing Diagnostics	155
Chapter 7 Troubleshooting	159
Basic Functions	159
Power LED Not On	159
LEDs Never Turn Off	160
LAN or Internet Port LEDs Not On	160
Troubleshooting the Web Configuration Interface	160
Troubleshooting the ISP Connection	162
Troubleshooting a TCP/IP Network Using a Ping Utility	163
Testing the LAN Path to Your Firewall	163
Testing the Path from Your PC to a Remote Device	164
Restoring the Default Configuration and Password	165
Problems with Date and Time	165
Appendix A Default Settings and Technical Specifications	167
Appendix B System Logs and Error Messages	171
System Log Messages	171
System Startup	171
Reboot	172
NTP	172
Login/Logout	173
Firewall Restart	173
IPSec Restart	174
WAN Status	174
Web Filtering and Content Filtering Logs	177
Traffic Metering Logs	179
Unicast Logs	179
FTP Logging	180
Invalid Packet Logging	180
Routing Logs	183
LAN to WAN Logs	184
WAN to LAN Logs	184
Appendix C Related Documents	185
Appendix D Two Factor Authentication	187
Why do I need Two-Factor Authentication?	187
What are the benefits of Two-Factor Authentication?	187
What is Two-Factor Authentication	188
NETGEAR Two-Factor Authentication Solutions	188

Match case Limit results 1 per page

FVS338 ProSafe VPN Firewall 50 Reference Manual

4-14

Firewall Protection and Content Filtering

v1.0, March 2009

Setting Up One-to-One NAT Mapping

In this example, we will configure multi-NAT to support multiple public IP addresses on one WAN

interface.

By creating an inbound rule, we will configure the firewall to host an additional public

IP address and associate this address with a Web server on the LAN.

To configure the FVS338 for additional IP addresses:

Select

Security

from the main menu and

Firewall Rules

from the submenu.

Click

Add

under the

Inbound Services

table. The

Add LAN WAN Inbound Service

screen

will display.

From the service pull-down menu, select the HTTP service for a Web server.

From the Action pull-down menu, select Allow Always.

In the Send to LAN Server field, enter the local IP address of your Web server PC.

From the Public Destination IP Address pull down menu, choose Other Public IP Address.

Enter one of your public Internet addresses that will be used by clients on the Internet to reach

your Web server.

Figure 4-8

Tip:

If your ISP allows you to have more than one public IP address for your use, you

can use the additional public IP addresses to map to servers on your LAN. One of

these public IP addresses will be used as the primary IP address of the router. This

address will be used to provide Internet access to your LAN PCs through NAT. The

other addresses are available to map to your servers.