Home » Netgear Manuals » Bridges & Routers » Netgear FVS338 » Manual Viewer

Netgear FVS338 FVS338 Reference Manual - Page 94

Using the VPN Wizard for Client and Gateway Configurations - setup one to one nat

UPC - 606449037197

Add to My Manuals
Save this manual to your list of manuals

Page 94 highlights

FVS338 ProSafe VPN Firewall 50 Reference Manual Table 5-1 summarizes the WAN addressing requirements for either dual WAN mode. Table 5-1. IP Addressing for VPNs in Dual WAN Port Systems Configuration WAN IP address Rollover Modea VPN Road Warrior (client-to-gateway) Fixed or DHCP VPN Gateway-to-Gateway Fixed or DHCP VPN Telecommuter (client-to-gateway NAT router) Fixed or DHCP FQDN required FQDN required FQDN required a. All tunnels must be re-established after a rollover using the new WAN IP address. Using the VPN Wizard for Client and Gateway Configurations You use the VPN Wizard to configure multiple gateway or client VPN tunnel policies. The section below provides wizard and NETGEAR VPN Client configuration procedures for the following scenarios: • Using the wizard to configure a VPN tunnel between 2 VPN gateways • Using the wizard to configure a VPN tunnel between a VPN gateway and a VPN client Configuring a VPN tunnel connection requires that all settings and parameters on both sides of the VPN tunnel match or mirror each other precisely, which can be a daunting task. The VPN Wizard efficiently guides you through the setup procedure with a series of questions that will determine the IPsec keys and VPN policies it sets up. The VPN Wizard will also set the parameters for the network connection: Security Association, traffic selectors, authentication algorithm, and encryption. The parameters used by the VPN wizard are based on the recommendations of the VPN Consortium (VPNC), an organization that promotes multi-vendor VPN interoperability. Creating Gateway to Gateway VPN Tunnels with the Wizard Figure 5-2 Follow these steps to set up a gateway VPN tunnel using the VPN Wizard. 5-2 Virtual Private Networking v1.0, March 2009

Section	Page
FVS338 ProSafe VPN Firewall 50 Reference Manual	1
Contents	7
About This Manual	13
Conventions, Formats and Scope	13
Revision History	14
Chapter 1 Introduction	15
Key Features	15
Full Routing on Both the Broadband and Serial WAN Ports	16
A Powerful, True Firewall with Content Filtering	16
Security	17
Autosensing Ethernet Connections with Auto Uplink	17
Extensive Protocol Support	17
Easy Installation and Management	18
Maintenance and Support	19
Package Contents	20
Router Hardware Components	20
Router Front Panel	20
Router Rear Panel	22
Factory Default Login	23
Chapter 2 Connecting the FVS338 to the Internet	25
Connecting the VPN Firewall to Your Network	25
Logging in to the VPN Firewall	25
Configuring your Internet Connection	26
Setting the Router’s MAC Address (Advanced Options)	30
Manually Configuring Your Internet Connection	32
Programming the Traffic Meter (if Desired)	35
Configuring the WAN Mode	37
Configuring Dynamic DNS (If Needed)	38
Chapter 3 LAN Configuration	41
Choosing the Firewall DHCP Options	41
Configuring the LAN Setup Options	42
Configuring Multi-Home LAN IPs	45
Managing Groups and Hosts	46
Creating the Network Database	47
Setting Up Address Reservation	50
Configuring Static Routes	50
Static Route Example	51
RIP Configuration	52
Chapter 4 Firewall Protection and Content Filtering	55
About Firewall Security	55
Using Rules to Block or Allow Specific Kinds of Traffic	56
Setting LAN WAN Rules	61
LAN WAN Outbound Services Rules	62
LAN WAN Inbound Services Rules	63
Attack Checks	64
Session Limit	66
Inbound Rules Examples	67
Outbound Rules Example – Blocking Instant Messenger	70
Adding Customized Services	71
Specifying Quality of Service (QoS) Priorities	73
Setting a Schedule to Block or Allow Specific Traffic	74
Setting Block Sites (Content Filtering)	74
Enabling Source MAC Filtering	77
IP/MAC Binding	78
Setting Up Port Triggering	80
Bandwidth Limiting	82
E-Mail Notifications of Event Logs and Alerts	84
Administrator Information	88
Chapter 5 Virtual Private Networking	93
Considerations for Dual WAN Port Systems	93
Using the VPN Wizard for Client and Gateway Configurations	94
Creating Gateway to Gateway VPN Tunnels with the Wizard	94
Creating a Client to Gateway VPN Tunnel	97
Testing the Connections and Viewing Status Information	103
NETGEAR VPN Client Status and Log Information	103
FVS338 VPN Connection Status and Logs	105
IKE Policies	106
IKE Policy Operation	106
IKE Policy Table	107
VPN Policies	108
VPN Policy Operation	108
VPN Policy Table	108
VPN Tunnel Connection Status	109
Extended Authentication (XAUTH) Configuration	110
Configuring XAUTH for VPN Clients	111
User Database Configuration	112
RADIUS Client Configuration	113
Assigning IP Addresses to Remote Users (ModeConfig)	115
ModeConfig Operation	116
Setting Up ModeConfig	116
Configuring the ProSafe VPN Client for ModeConfig	120
Certificates	123
Trusted Certificates (CA Certificates)	124
Self Certificates	125
Managing your Certificate Revocation List (CRL)	128
Chapter 6 Router and Network Management	129
Performance Management	129
VPN Firewall Features That Reduce Traffic	129
VPN Firewall Features That Increase Traffic	132
Using QoS to Shift the Traffic Mix	134
Tools for Traffic Management	135
Administration	135
Changing Passwords and Settings	135
RADIUS Server External Authentication	137
Enabling Remote Management Access	138
Using a SNMP Manager	141
Settings Backup and Firmware Upgrade	143
Setting the Time Zone	145
Monitoring the Router	146
Enabling the Traffic Meter	147
Setting Login Failures and Attacks Notification	148
Viewing Port Triggering Status	150
Viewing Router Configuration and System Status	151
Monitoring WAN Ports Status	152
Monitoring VPN Tunnel Connection Status	153
VPN Logs	154
DHCP Log	154
Performing Diagnostics	155
Chapter 7 Troubleshooting	159
Basic Functions	159
Power LED Not On	159
LEDs Never Turn Off	160
LAN or Internet Port LEDs Not On	160
Troubleshooting the Web Configuration Interface	160
Troubleshooting the ISP Connection	162
Troubleshooting a TCP/IP Network Using a Ping Utility	163
Testing the LAN Path to Your Firewall	163
Testing the Path from Your PC to a Remote Device	164
Restoring the Default Configuration and Password	165
Problems with Date and Time	165
Appendix A Default Settings and Technical Specifications	167
Appendix B System Logs and Error Messages	171
System Log Messages	171
System Startup	171
Reboot	172
NTP	172
Login/Logout	173
Firewall Restart	173
IPSec Restart	174
WAN Status	174
Web Filtering and Content Filtering Logs	177
Traffic Metering Logs	179
Unicast Logs	179
FTP Logging	180
Invalid Packet Logging	180
Routing Logs	183
LAN to WAN Logs	184
WAN to LAN Logs	184
Appendix C Related Documents	185
Appendix D Two Factor Authentication	187
Why do I need Two-Factor Authentication?	187
What are the benefits of Two-Factor Authentication?	187
What is Two-Factor Authentication	188
NETGEAR Two-Factor Authentication Solutions	188

Match case Limit results 1 per page

FVS338 ProSafe VPN Firewall 50 Reference Manual

5-2

Virtual Private Networking

v1.0, March 2009

Table 5-1

summarizes the WAN addressing requirements for either dual WAN mode.

Using the VPN Wizard for Client and Gateway Configurations

You use the VPN Wizard to configure multiple gateway or client VPN tunnel policies.

The section below provides wizard and NETGEAR

VPN Client

configuration procedures for the

following scenarios:

•

Using the wizard to configure a VPN tunnel between 2 VPN gateways

•

Using the wizard to configure a VPN tunnel between a VPN gateway and a VPN client

Configuring a VPN tunnel connection requires that all settings and parameters on both sides of the

VPN tunnel match or mirror each other precisely, which can be a daunting task. The VPN Wizard

efficiently guides you through the setup procedure with a series of questions that will determine

the IPsec keys and VPN policies it sets up. The VPN Wizard will also set the parameters for the

network connection: Security Association, traffic selectors, authentication algorithm, and

encryption. The parameters used by the VPN wizard are based on the recommendations of the

VPN Consortium (VPNC), an organization that promotes multi-vendor VPN interoperability.

Creating Gateway to Gateway VPN Tunnels with the Wizard

Follow these steps to set up a gateway VPN tunnel using the VPN Wizard.

Table 5-1.

IP Addressing for VPNs in Dual WAN Port Systems

Configuration

WAN IP address

Rollover Mode

a. All tunnels must be re-established after a rollover using the new WAN IP address.

VPN Road Warrior (client-to-gateway)

Fixed or DHCP

FQDN required

VPN Gateway-to-Gateway

Fixed or DHCP

FQDN required

VPN Telecommuter (client-to-gateway NAT router)

Fixed or DHCP

FQDN required

Figure 5-2