English dropdown-ico

Manual NETGEAR FVS318v3

242 pages 6.25 mb
Download

Go to site of 242

Summary
  • NETGEAR FVS318v3 - page 1

    January 2005 202-10059-02 Version 3 January 2005 NETGEAR , Inc. 4500 Great America Parkway Santa Clara, CA 95 054 USA Reference Manual for the ProSafe VPN Firewall FVS318v3 ...

  • NETGEAR FVS318v3 - page 2

    ii January 2005 © 2005 by NETGEAR, Inc. All rights reserved. T rademarks NETGEAR is a trademark of Netge ar , Inc. Microsoft, W indows, and W indow s NT are registered trademar ks of Microsoft Corporation. Other brand and product names are registered tradem arks or trad emarks of their respective holders. St atement of Conditions In the interest o ...

  • NETGEAR FVS318v3 - page 3

    January 2005 iii Bestätigung des Hers tellers/Importeurs Es wird hiermit bestätigt, daß das FVS318v3 ProSaf e VPN Firewall gemäß der im BMP T -AmtsblVfg 243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschrifts mäßige Betreiben ei niger Geräte (z.B. T estsender) kann jedoch gewissen Beschränkungen unterli egen. Les ...

  • NETGEAR FVS318v3 - page 4

    January 2005 iv Product and Publication Det ails Model Number: FVS318v3 Publication Date: January 2005 Product Family: Router Product Name: FVS318v3 ProSafe VPN Firewall Home or Business Prod uc t: Business Language: Engl ish ...

  • NETGEAR FVS318v3 - page 5

    Contents v January 2005 Content s Chapter 1 About This Manual Audience, Scope, Conventions, and Formats . ......... ................. ............. ................ ........ 1-1 How to Use This Manual ................. ................ ............. ................ ................ ............. ..... 1-2 How to Print this Manual . ............. . ...

  • NETGEAR FVS318v3 - page 6

    January 2005 vi Contents Using the Smart Setup Wizard .... ................. ................ ............. ................ ............. ...... 3-1 1 How to Manually Configure Y our Internet Co nnection ........... ................. ............ .......... 3-12 Chapter 4 Firewall Protection and Content Filtering Firewall Protection and Content Fi ...

  • NETGEAR FVS318v3 - page 7

    Contents vii January 2005 Importing a Security Policy .................... ...... ............. ................. ............ .......... 5-19 How to Set Up a Gateway-to-Gat eway VPN Co nfiguration ............. ................ ............. 5-20 Procedure to Configure a Gatew ay-to-Gateway VPN Tunnel ............. ................ ... 5-21 VPN T ...

  • NETGEAR FVS318v3 - page 8

    January 2005 viii Contents Backing Up the Configuration ... ............. ................ ............. ............. ................ ........ 7-7 Restoring the Configuration ............... ................ ............. ................. ................ ........ 7-7 Erasing the Configuration ... ............. ................ ................ ...

  • NETGEAR FVS318v3 - page 9

    Contents ix January 2005 Netmask ............. ............. ............. ................ ............. ................ ............. ................ . B -4 Subnet Addressing ... ............. ................. ............ ................. ............. ................ ....... B-5 Private IP Addresses .......... ... .... ............. ... .. ...

  • NETGEAR FVS318v3 - page 10

    January 2005 x Contents VPNC IKE Phase II Parameters ............. ............ ................. ................ ................ .. C-1 1 T esting and Troubleshooting ............... ............. ................ ................ ................ ............ C-1 1 Additional Reading ................ ... ... .... ... ............. ... ... ... . ...

  • NETGEAR FVS318v3 - page 11

    Contents xi January 2005 Configuring the VPN T u nnel ........... ... .... ... ... ... ... .... ... ... ... .... ... ... ............. ... ... .... ... ... . E-6 Viewing and Editing the VPN Parameters .......... ................. ................ ................ .... E-9 Initiating and Checking the VPN Connecti ons ............. ................ . ...

  • NETGEAR FVS318v3 - page 12

    January 2005 xii Contents ...

  • NETGEAR FVS318v3 - page 13

    About This Manual 1-1 January 2005 Chapter 1 About This Manual This chapter describes the intended audience, sc ope, conventions, and formats of this manual. Audience, Scope, Conventions, and Format s This reference manual assumes that the reader h as basic to interme diate computer and Internet skills. However , basic comp uter network, Inte rnet, ...

  • NETGEAR FVS318v3 - page 14

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 1-2 About This Manual January 2005 How to Use This Manual The HTML version of this ma nual includes the following: • Buttons, and , for browsing forwards or backwards through the manual one p age at a time • A button that displays the table of cont ents and an button. Double-click on a lin ...

  • NETGEAR FVS318v3 - page 15

    Reference Manual for the ProSafe VPN Firewall FVS318v3 About This Manual 1-3 January 2005 How to Print this Manual T o print this manual you can choose one of the fo llowing several options, a ccording to your needs. • Printing a Page in the HTML V iew . Each page in the HTML version of the manu al is dedicated to a major topic. Use the Print but ...

  • NETGEAR FVS318v3 - page 16

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 1-4 About This Manual January 2005 ...

  • NETGEAR FVS318v3 - page 17

    Introduction 2-1 January 2005 Chapter 2 Introduction This chapter describes the features of th e NETGEAR FVS318v3 ProSafe VPN Firewall. Key Features of the VPN Firewall The FVS318v3 ProSafe VPN Firewall with eight-po rt switch connects your local area n etwork (LAN) to the Internet through an external acce ss device such as a cable modem or DSL mod ...

  • NETGEAR FVS318v3 - page 18

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 2-2 Introduction January 2005 A Powerful, T rue Firewall with Content Filtering Unlike simple Internet sharing NA T firewalls, th e FVS318v3 is a true firewall, using stateful packet inspection to defend against hacker attacks. Its firewall features include: • DoS protection. Automatically d ...

  • NETGEAR FVS318v3 - page 19

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Introduction 2-3 January 2005 Autosensing Ethernet Co nn ections with Auto Uplink W ith its internal eight-port 10/100 switch, the FV S318v3 can connect to either a 10 Mbps standard Ethernet network or a 100 M bps Fast Ethernet network. Both the LAN and W AN interfaces are autosensing and capab ...

  • NETGEAR FVS318v3 - page 20

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 2-4 Introduction January 2005 Easy Inst allation and Management Y ou can install, configure, and operate the FVS3 18v3 ProSafe VP N Fire wa ll wit hin minutes after connecting it to the network. Th e following featur es simplify in stallation and management tasks: • Browser-based management ...

  • NETGEAR FVS318v3 - page 21

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Introduction 2-5 January 2005 Package Content s The product package should contain the following it ems: • FVS318v3 ProSafe VPN Firewall. •A C p o w e r a d a p t e r . • Category 5 (Cat 5) Ethernet cable. • Installation Guide. • Resour ce CD (240-101 14-02) for ProSafe VPN Fir ewall ...

  • NETGEAR FVS318v3 - page 22

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 2-6 Introduction January 2005 The FVS318v3 Rear Panel The rear panel of the FVS318v3 VPN Firewall contains the port co nnections listed below . Figure 2-2: FVS318v3 rear p anel V iewed from left to right, the rear panel contains the following features: • Factory default reset push but ton ? ...

  • NETGEAR FVS318v3 - page 23

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Introduction 2-7 January 2005 • DC power input • ON/OFF switch NETGEAR-Related Product s NETGEAR products related to the FVS318 v3 are listed in the following table: NETGEAR Product Registration, Support, and Document ation Register your product at http://www .NETGEAR.com/r egister . Regist ...

  • NETGEAR FVS318v3 - page 24

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 2-8 Introduction January 2005 When the VPN firewall ro uter is connected to the Internet, click the Knowledge Base or the Documentation link under the W eb Supp ort menu to view support information or the documentation for th e VPN firewall router. ...

  • NETGEAR FVS318v3 - page 25

    Connecting the Fire wa ll to the Internet 3-1 January 2005 Chapter 3 Connecting the Firewall to the Internet This chapter describes how to set up the firewall on your LAN, connect to the In ternet, perform basic configuration of you r FVS318v3 ProSafe VPN Firewall using the Setup W izard, or how to manually configure y our Internet co nnection. Fol ...

  • NETGEAR FVS318v3 - page 26

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 3-2 Connecting the Firewall to the Intern et January 2005 c. Locate the Ethernet cable (Cable 1 in the di agram) that connects your PC to the modem. Figure 3-1: Disconnect th e Ethernet cable from t he computer d. Disconnect the cable at the computer end only , point A in the diagram. e. Look ...

  • NETGEAR FVS318v3 - page 27

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Connecting th e Fir ew all to the Int ernet 3-3 January 2005 f. Securely insert the blue cable that came with your VPN firewall router (the blue NETGEAR cable in the diagra m below) into a LOCAL port on the firewall such as LOCAL port 8 (point C in the diagram), and the oth er end into the Ethe ...

  • NETGEAR FVS318v3 - page 28

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 3-4 Connecting the Firewall to the Intern et January 2005 Figure 3-4: S t atus light s d. Check the VPN firewall router stat us lights to verify the following: • PWR : The power light shou ld turn solid green. If it does not, see “T roubleshooting T ips” on page 3-6 . • TEST : The test ...

  • NETGEAR FVS318v3 - page 29

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Connecting th e Fir ew all to the Int ernet 3-5 January 2005 W ith the VPN firewall router in its factory de fault state, your browser will automatically display the NETGEAR Smart W izard Co nfiguration Assistant welcome page. Figure 3-5: NETGEAR Smart Wizard Config uration Assist ant welcome s ...

  • NETGEAR FVS318v3 - page 30

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 3-6 Connecting the Firewall to the Intern et January 2005 3. Click Done to finish. If you have trouble connecting to the Internet, see “T roubleshooting T ips” on page 3-6 to correct basic problems. Figure 3-6: NETGEAR Smart Wizard Config uration Assist ant success screen Note : The Smart ...

  • NETGEAR FVS318v3 - page 31

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Connecting th e Fir ew all to the Int ernet 3-7 January 2005 Make sure the Ethernet cables ar e se curely plugged in. • The Internet link light on the VPN firewall rout er will be lit if the Ethernet cable to the VPN firewall router from the modem is plugged in securely and the modem and VPN ...

  • NETGEAR FVS318v3 - page 32

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 3-8 Connecting the Firewall to the Intern et January 2005 Overview of How to A ccess the FVS318v3 VPN Firewall The table below describes how you access the VPN firewa ll router, depending on the state of the VPN firewall router. T able 3-1. W ays to access the firewall Firewall S t ate Access ...

  • NETGEAR FVS318v3 - page 33

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Connecting th e Fir ew all to the Int ernet 3-9 January 2005 How to Log On to the FVS318v3 Af ter Configuration Settings Have Been Applied 1. Connect to the VPN firewall router by typing http://www .routerlogin.net in the address field of your browser , then press Enter . Figure 3-7: Login URL ...

  • NETGEAR FVS318v3 - page 34

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 3-10 Connecting the Firewall to th e Internet January 2005 Figure 3-9: Login result: FVS318v3 home p age When the VPN firewall ro uter is connected to the Internet, click the Knowledge Base or the Documentation link under the W eb Supp ort menu to view support information or the documentation ...

  • NETGEAR FVS318v3 - page 35

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Connecting th e Fir ew all to th e Int er n et 3-11 January 2005 If you do not click Logout , the VPN firewall router waits five minutes after there is no activity before it automatically logs you out. Using the Smart Setup Wizard Y ou can use the Smart Setup Wizard to assist with ma nual confi ...

  • NETGEAR FVS318v3 - page 36

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 3-12 Connecting the Firewall to th e Internet January 2005 How to Manually Configure Y our Internet Connection Y ou can manually configure your firewall using the men u below , or you can allow the Setup W izard to determine your configuration as described in the previous se ction. Figure 3-10 ...

  • NETGEAR FVS318v3 - page 37

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Connecting th e Fir ew all to th e Int er n et 3-13 January 2005 Y ou can manually configure the firewall using the Basic Settings menu shown in Fi gure 3-10 using these steps: 1. Log in to the firewall at its default address of http://www .routerlogin.net usin g a browser like Internet Explore ...

  • NETGEAR FVS318v3 - page 38

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 3-14 Connecting the Firewall to th e Internet January 2005 4. If your Internet connection does require a login, f ill in the settings according to the instructions below . Select Y es if you normally must launch a login program such as Enternet or W inPOET in order to access the Internet. Note ...

  • NETGEAR FVS318v3 - page 39

    Firewall Protection and Conten t Filtering 4-1 January 2005 Chapter 4 Firewall Protection and Content Filtering This chapter describes how to u se the content filtering features of the FVS318v3 ProSafe VPN Firewall to protect yo ur network. These features ca n be found by c licking on the Security heading in the main menu of the browser interface. ...

  • NETGEAR FVS318v3 - page 40

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 4-2 Firewall Protection and Content Filtering January 2005 Block Sites The FVS318v3 allows you to restrict access b ased on W eb addresses and W eb address ke ywords. Up to 255 entries are supported in the Keyword list. The Block Sites menu is shown in Figure 4-1 : Figure 4-1: Block Sites menu ...

  • NETGEAR FVS318v3 - page 41

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Firewall Protection and Content Filtering 4-3 January 2005 T o specify a T rusted User , enter that PC’ s IP address in the T rusted User box and c lick Apply . Y ou may specify one T rusted User , which is a PC that will be exempt from blocking and logging. Since the T rusted User will be id ...

  • NETGEAR FVS318v3 - page 42

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 4-4 Firewall Protection and Content Filtering January 2005 Y ou may define additional rules that specify exceptions to the default ru les. By adding custom rules, you can block or allow access based on the ser vice or application, source or destination IP addresses, and time of day . Y ou can ...

  • NETGEAR FVS318v3 - page 43

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Firewall Protection and Content Filtering 4-5 January 2005 Inbound Rules (Port Forwarding) Because the FVS318v3 uses Networ k Address T ranslation (NA T), your network presents only one IP address to the Internet, and outside users cann ot directly address any of your local computers. However , ...

  • NETGEAR FVS318v3 - page 44

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 4-6 Firewall Protection and Content Filtering January 2005 Inbound Rule Example: Allowing a V ideoconference from Restricted Addresses If you want to allow incoming vi deoconferencing to be initiated from a restricted range of outside IP addresses, such as from a branch office, you can create ...

  • NETGEAR FVS318v3 - page 45

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Firewall Protection and Content Filtering 4-7 January 2005 Outbound Rules (Service Blo cking) The FVS318v3 allows you to b l oc k the use of certain Internet servi ce s by PCs on your network . This is called service blocking or port filtering. Y ou can define an outbound rule to block Internet ...

  • NETGEAR FVS318v3 - page 46

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 4-8 Firewall Protection and Content Filtering January 2005 Order of Precedence for Rules As you define new rules, they are added to the tables in the Rules table, as shown below: Figure 4-6: Rules t able with examples For any traffic attempting to pass through the fire wall, the packet informa ...

  • NETGEAR FVS318v3 - page 47

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Firewall Protection and Content Filtering 4-9 January 2005 The Default DMZ Server feature is helpful when usin g some online games and videoconferencing applications that are incompatible wi th NA T . Th e firewall is programmed to recognize some of these applications and to work properly with ...

  • NETGEAR FVS318v3 - page 48

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 4-10 Firewall Protection and Content Filtering January 2005 Services Services are functions performed by server computers at the request of client computers. For example, W eb servers serve W eb pages, time serve rs serve time and date information, and game hosts serve data about other players ...

  • NETGEAR FVS318v3 - page 49

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Firewall Protection and Content Filtering 4 -11 January 2005 T o add a service: 1. When you have the port number info rmation, go the Services menu and click o n the Add Custom Service button. The Add Services menu appears as shown in Figure 4-8 : Figure 4-8: Add Custom Service me nu 2. Enter a ...

  • NETGEAR FVS318v3 - page 50

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 4-12 Firewall Protection and Content Filtering January 2005 Using a Schedule to Block or Allow S pecific T raffic If you enabled content filtering in the Block Sites me nu, or if you d efined an outbound rule to use a schedule, you can set up a sched ule for when blocking occurs or when access ...

  • NETGEAR FVS318v3 - page 51

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Firewall Protection and Content Filtering 4 -13 January 2005 T o block ke ywords or Internet domains based on a schedule, select Ev ery Day or select one or more days. If you want to limit access completely fo r the selected days, select All Day . Otherwise, If you want to limit access during c ...

  • NETGEAR FVS318v3 - page 52

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 4-14 Firewall Protection and Content Filtering January 2005 Getting E-Mail Notifications of Event Logs and Alert s In order to receive log s and alerts by e-mail, you must provide your e-mail information in the Send alerts and logs by e-mail area: Figure 4-10: E-mail menu • T urn e-mail noti ...

  • NETGEAR FVS318v3 - page 53

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Firewall Protection and Content Filtering 4 -15 January 2005 – If a user on your LAN attempts to access a W eb site that you blocked using the Block Sites menu. • Send logs according to this schedule. Y ou can specify that logs are sent to you according to a schedule. Select whether you wou ...

  • NETGEAR FVS318v3 - page 54

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 4-16 Firewall Protection and Content Filtering January 2005 V iewing Logs of W eb Access or Attempted W eb Access The firewall logs security-related events such as denied incoming and outgoing service requests, hacker probes, and administrator logins. If you en able content filtering i n the B ...

  • NETGEAR FVS318v3 - page 55

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Firewall Protection and Content Filtering 4 -17 January 2005 Log entries are described in T able 4-1 Log action buttons are described in Ta b l e 4 - 2 Syslog Y ou can configure the fire wall to send system logs to an external PC th at is running a syslog logging program. Enter the IP addres s ...

  • NETGEAR FVS318v3 - page 56

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 4-18 Firewall Protection and Content Filtering January 2005 ...

  • NETGEAR FVS318v3 - page 57

    Basic Virtual Private Ne tworking 5-1 January 2005 Chapter 5 Basic V irtual Private Networking This chapter describes how to use the virtual pr ivate networking (VPN) features of the FVS318v3 VPN Firewall. VPN communications paths are ca lled tunnels. VPN tunnels provide secure, encrypted communications between your local network and a remote netwo ...

  • NETGEAR FVS318v3 - page 58

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-2 Basic Virtual Private Networking January 2005 Overview of VPN Configuration T wo common scenarios for config uring VPN tunnels are between a remote personal computer an d a network gateway and between two or more netw ork gateways. The FVS318v3 supports both of these types of VPN configura ...

  • NETGEAR FVS318v3 - page 59

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networ king 5- 3 January 2005 Figure 5-2: Gateway -t o-gateway VPN tunnel A VPN between two or more NETGEAR VPN-enabled firewalls is a good way to connect branch or home offices and business partners over the In ternet. VPN tunnels also enable ac cess to network resources ...

  • NETGEAR FVS318v3 - page 60

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-4 Basic Virtual Private Networking January 2005 FQDNs supplied by Dynamic DNS providers ca n allow a VPN endpoint with a dynamic IP address to initiate or respond to a tunnel request. Otherwise, the side using a dynamic IP address must always be the initiator . • What method will you use t ...

  • NETGEAR FVS318v3 - page 61

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networ king 5- 5 January 2005 VPN T unnel Configuration There are two tunnel configurations and three ways to configure them: • Use the VPN W izard to configure a VPN tunnel (recommended fo r most situations): — See “How to Set Up a Client-to-Gatewa y VPN Configurati ...

  • NETGEAR FVS318v3 - page 62

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-6 Basic Virtual Private Networking January 2005 S tep 1: Configuring the Clien t-to-Gateway VPN T unnel on the FVS318v3 Follow this procedure to configure a client-t o-gateway VPN tunnel using the VPN W izard. 1. Log in to the FVS318v3 at its LAN a ddress of http://192.168.0.1 with its defau ...

  • NETGEAR FVS318v3 - page 63

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networ king 5- 7 January 2005 Figure 5-5: Connection Na me and Remote IP T ype The Summary screen below displays. Figure 5-6: VPN Wizard Summary Enter the new Connection Name: ( RoadW arrior in this example) Enter the pre-shared key: ( 12345678 in this example) Select the ...

  • NETGEAR FVS318v3 - page 64

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-8 Basic Virtual Private Networking January 2005 T o view the VPNC recommended authenticatio n and encryption setting s used by the VPN W izard, click the here link (see Figure 5-6 ). Click Back to return to the Summary screen. Figure 5-7: VPNC Recommende d Settings 3. Click Done on the Summa ...

  • NETGEAR FVS318v3 - page 65

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networ king 5- 9 January 2005 S tep 2: Configuring the NETGE AR ProSafe VPN C lient on the Remote PC This procedure describes how to configure the NETGEAR ProSafe VPN Client. This example assumes the PC running the client ha s a dynamically ass igned IP addre ss. The PC mu ...

  • NETGEAR FVS318v3 - page 66

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-10 Basic Virtual Priva te Networking January 2005 b. From the Edit menu of the Se curity Policy Editor , click Add , then Connection . A “New Connection” listing appears in the list of polici es. Rename the “New Co nnection” so that it matches the Connection Name you entered in the V ...

  • NETGEAR FVS318v3 - page 67

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-11 January 2005 Figure 5-10: Security Policy Editor conne ction settings c. Select Secure in the Conn ection Security check box. d. Select IP Subnet in the ID T ype menu. In this example, typ e 192 .168.3.1 in the Subnet field as the network address of the FVS ...

  • NETGEAR FVS318v3 - page 68

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-12 Basic Virtual Priva te Networking January 2005 Figure 5-1 1: Security Poli cy Editor Security Policy c. Select the Main Mode in the Select Phase 1 Negotiation Mode check box. 4. Configure the VPN Client Identity . In this step, you will provide information about the remote VPN client PC. ...

  • NETGEAR FVS318v3 - page 69

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-13 January 2005 Figure 5-12: Security Po licy Editor My Identity b. Choose None in the Select Certificate box. c. Select IP Address in the ID T ype box. If you are using a virtual fixed IP a ddress, enter this address in the Internal Network IP Addres s box. O ...

  • NETGEAR FVS318v3 - page 70

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-14 Basic Virtual Priva te Networking January 2005 5. Configure the VPN Client Authentication Proposal. In this step, you will provide the ty pe of encryption (DES o r 3DES) to be used for this connection. This selection mu st match your selection in the FVS318v3 configuration. a. In the Netw ...

  • NETGEAR FVS318v3 - page 71

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-15 January 2005 Figure 5-15: Security Po licy Editor Key Exchange b. In the SA Life menu, select Unspecified. c. In the Compression menu, select None. d. Check the Encapsulation Protocol (ESP) check box. e. In the Encrypt Alg menu, sel ect the type of encrypti ...

  • NETGEAR FVS318v3 - page 72

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-16 Basic Virtual Priva te Networking January 2005 a. Establish an Internet connection from the PC. b. On the W indows taskbar , click the St a r t button, and then click Run . c. Ty p e ping -t 192.168.3.1 , and then click OK . Figure 5-16: Running a Ping tes t to the LAN from the PC This wi ...

  • NETGEAR FVS318v3 - page 73

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-17 January 2005 The Log V ie wer screen for a similar successful connection is shown below: Figure 5-18: Log V i ewer screen 2. The Connection Monitor sc reen for a similar connection is shown below: Figure 5-19: Connection Monit or screen In this example you ...

  • NETGEAR FVS318v3 - page 74

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-18 Basic Virtual Priva te Networking January 2005 While the connection is being esta blished, the Connection Name fiel d in this menu will say “SA” before the name of the connection. When the conn ection is successful, the “SA” will change to the yellow key symbol shown in the illust ...

  • NETGEAR FVS318v3 - page 75

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-19 January 2005 Importing a Security Policy The following procedure ( Figure 5-21 ) enables you to import an existing security policy . Figure 5-21: Importing a secur it y policy St e p 1 : Invoke the NETGEAR ProSafe VPN Client and select Import Security Polic ...

  • NETGEAR FVS318v3 - page 76

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-20 Basic Virtual Priva te Networking January 2005 How to Set Up a Gateway-to -Gateway VPN Configuration Figure 5-22: Gateway-to -Gateway VPN T unnel Follow the procedure below to set the LAN IPs on each FVS318v3 to different subnets and configure each properly for the Internet. The LAN IP ad ...

  • NETGEAR FVS318v3 - page 77

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-21 January 2005 Procedure to Configure a Gateway-to-Gatew ay VPN T unnel Follow this procedure to configure a gateway- to-gateway VPN tunnel using the VPN W izard. 1. Log in to the FVS318v3 on LAN A at its default LAN address of http://192.168.0.1 with its def ...

  • NETGEAR FVS318v3 - page 78

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-22 Basic Virtual Priva te Networking January 2005 3. Fill in the IP Address or F QDN for the ta rget VPN endpoint W AN connectio n and click Next . Figure 5-25: Remote IP 4. Identify the IP addresses at the target endp oint that can use this tunnel, and click Ne xt . Figure 5-26: Secure Conn ...

  • NETGEAR FVS318v3 - page 79

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-23 January 2005 The Summary screen below displays. Figure 5-27: VPN Wizard Summary ...

  • NETGEAR FVS318v3 - page 80

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-24 Basic Virtual Priva te Networking January 2005 T o view the VPNC recommended authenticatio n and encryption setting s used by the VPN W izard, click the here link (see Figure 5-27 ). Click Back to return to the Summary screen. Figure 5-28: VPN Recommended Sett ings 5. Click Done on the Su ...

  • NETGEAR FVS318v3 - page 81

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-25 January 2005 6. Repeat for the FVS318v3 on LAN B. Pay special attention and u se the following n etwork settings as appropriate. • W AN IP of the remote VPN gateway (e.g., 14.15.16.17 ) • LAN IP settings of the remote VPN gateway: — IP Address (e.g, 1 ...

  • NETGEAR FVS318v3 - page 82

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-26 Basic Virtual Priva te Networking January 2005 Figure 5-31: Current VPN T unnels (SAs) Screen c. Look at the VPN Status/Log screen ( Figure 5-30 ) to verify that the tunnel is conn ec te d. VPN T unnel Control Activating a VPN T unnel There are three ways to activate a VPN tunnel: • S t ...

  • NETGEAR FVS318v3 - page 83

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-27 January 2005 Figure 5-32: VPN St atus/Log screen 3. Click VPN S tatus ( Figure 5-32 ) to get the Current VPN T unnels (SAs) screen ( Figure 5-33 ). Click Connect for the VPN tunnel you want to activate. Figure 5-33: Current VPN T unnels (SAs) sc reen Activa ...

  • NETGEAR FVS318v3 - page 84

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-28 Basic Virtual Priva te Networking January 2005 a. Establish an Internet connection from the PC. b. On the W indows taskbar , click the St a r t button, and then click Run . c. Ty p e ping -t 192.168.3.1 and then click OK . Figure 5-34: Running a Ping tes t to the LAN from the PC This will ...

  • NETGEAR FVS318v3 - page 85

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-29 January 2005 Figure 5-36: Pinging test result s Note: The pings may fail the first time. If so, then try the pings a second time. V erifying the St atus of a VPN T unnel T o use the VPN Status page to determine the stat us of a VPN tunnel, perfo rm the foll ...

  • NETGEAR FVS318v3 - page 86

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-30 Basic Virtual Priva te Networking January 2005 • Click Clea r Lo g to delete all log entries. 3. Click VPN S tatus ( Figure 5-37 ) to get the Current VPN T unnels (SAs) screen ( Figure 5-38 ). Figure 5-38: Current VPN T unnels (SAs) sc reen This page lists the following da ta for each a ...

  • NETGEAR FVS318v3 - page 87

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Basic Virtual Private Networking 5-31 January 2005 Figure 5-39: VPN Policies 3. Clear the Enable check box for the VPN tunnel you want to d eac tivate and click Apply . (T o reactivate the tunnel, chec k the Enable box and click Apply .) Using the VPN St atus Page to Deactivate a VPN T unnel T ...

  • NETGEAR FVS318v3 - page 88

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 5-32 Basic Virtual Priva te Networking January 2005 3. Click VPN S tatus ( Figure 5-40 ) to get the Current VPN T unnels (SAs) screen ( Figure 5-41 ). Click Dr op for the VPN t unnel you want to deactiv ate. Figure 5-41: Current VPN T unnels (SAs) sc reen Deleting a VPN T unnel T o delete a VP ...

  • NETGEAR FVS318v3 - page 89

    Advanced Virtual Private Networking 6-1 January 2005 Chapter 6 Advanced V irtual Private Networking This chapter describes how to use the advanced virtual private networking (VPN) features of the FVS318v3 VPN Firewall. See Chapter 5, “Basic V irtual Private Networking ” for a description on how to use the basic VPN features. Overview of FVS318v ...

  • NETGEAR FVS318v3 - page 90

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-2 Advanced Virtual Private Networking January 2005 Using Policies to Manage VPN T raffic Y ou create policy definitions to manage VPN tr aff ic on the FVS318v3. There are two kinds of policies: • IKE Policies : Define the authenticatio n scheme and automatically generate the encryption key ...

  • NETGEAR FVS318v3 - page 91

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-3 January 2005 IKE Policies’ Automatic Key and Authentication Management Click the IKE Policies link from the VPN section of the main menu, and then click the Add button of the IKE Policies screen to display th e IKE Policy Configuration menu shown in Fig ...

  • NETGEAR FVS318v3 - page 92

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-4 Advanced Virtual Private Networking January 2005 The IKE Policy Configuration fields are defined in the following tabl e. T able 6-1. IKE Policy Configuration fields Field Descripti on General These setti ngs identify this polic y an d determine its major characteristics. Policy Name The d ...

  • NETGEAR FVS318v3 - page 93

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-5 January 2005 VPN Policy Configuration for Auto Key Negotiation An already defined IKE policy is required for VP N - Auto Policy config uration. From the VPN Policies section of the main menu, you can navigate to the VPN - Auto Policy configuration menu. R ...

  • NETGEAR FVS318v3 - page 94

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-6 Advanced Virtual Private Networking January 2005 Figure 6-3: VPN - Auto Policy menu ...

  • NETGEAR FVS318v3 - page 95

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-7 January 2005 The VPN – Auto Policy field s are defined in the following table. T able 6-1. VPN – Auto Policy Configuration Fie lds Field Description General These setting s identify this policy and determine its major characte risti cs. Policy Name Th ...

  • NETGEAR FVS318v3 - page 96

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-8 Advanced Virtual Private Networking January 2005 T raffic Selector These settings dete rmine if and when a VPN tunnel will be established. If network traffic meets all criteria, then a VPN tunnel will be crea ted. Local IP The drop-down menu allows yo u to configure the source IP address o ...

  • NETGEAR FVS318v3 - page 97

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-9 January 2005 VPN Policy Configuration for Manual Key Exchange W ith Manual Key Management, you w ill not use an IKE poli cy . Y ou mu st manually type in all the required key information. Click the VPN Policies link from the VPN section of the main menu t ...

  • NETGEAR FVS318v3 - page 98

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-10 Advanced Virtual Private Networking January 2005 Figure 6-4: VPN - Manual Policy menu ...

  • NETGEAR FVS318v3 - page 99

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-11 January 2005 The VPN Manual Policy fields are defined in t he following table. T able 6-1. VPN Manual Poli cy Configuration Fields Field Description General These setting s identify this policy and determine its major characte risti cs. Policy Name The n ...

  • NETGEAR FVS318v3 - page 100

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-12 Advanced Virtual Private Networking January 2005 Authentication Algorith m If you enable AH, then select the auth entication algorithm: • MD5 — the default • SHA1 — more secure Enter the keys in the fields provided. For MD5, the keys should be 16 characters. For SHA-1, the keys sh ...

  • NETGEAR FVS318v3 - page 101

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-13 January 2005 Using Digit al Certificates for IKE Auto-Policy Authentication Digital certificates are strings gene rated using encryption and authenticatio n sche mes that cannot be duplicated by anyone without access to the diff erent values used in the ...

  • NETGEAR FVS318v3 - page 102

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-14 Advanced Virtual Private Networking January 2005 Each CA has its own certificate. The certificates of a CA are added to the FVS318v3 and then can be used to form IKE policies for the user . Once a CA certificat e is added to the FVS318v3 and a certificate is created for a user, the corres ...

  • NETGEAR FVS318v3 - page 103

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-15 January 2005 The PC must have the NETGEAR ProSafe VPN Client program installed that supports IPSec. Go to the NETGEAR W eb site ( http://www .netgear .com ) and select VPN01L_VPN05L in the Product Quick Find drop down men u for information on how to purc ...

  • NETGEAR FVS318v3 - page 104

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-16 Advanced Virtual Private Networking January 2005 The IKE Phase 2 parameters used in Scenario 1 are: • T ripleDES • SHA-1 • ESP tunnel mode • MODP group 2 (1024 b its) • Perfect forward secrecy for rekeying • SA lifetime of 36 00 seconds (one hour) wit h no kilobytes rekeying ? ...

  • NETGEAR FVS318v3 - page 105

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-17 January 2005 Figure 6-7: FVS318v3 Interne t IP Address menu b. Configure the W AN Internet Address acco rding to the settings above and click Apply to save your settings. For more in formation on configuring the W A N IP settings in the Basic Settings to ...

  • NETGEAR FVS318v3 - page 106

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-18 Advanced Virtual Private Networking January 2005 c. From the main menu Advanced section, click the LAN IP Setup link. The following menu appears Figure 6-8: LAN IP Setup menu d. Configure the LAN IP address according to the settings above and click Apply to save your settings. For more in ...

  • NETGEAR FVS318v3 - page 107

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-19 January 2005 3. Set up the IKE Policy illustrated below on th e FVS318v3. a. From the main menu VP N section, click on the IKE Policies link, and then click the Add button to display the screen below . Figure 6-9: Sc enario 1 IKE Policy b. Configure the ...

  • NETGEAR FVS318v3 - page 108

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-20 Advanced Virtual Private Networking January 2005 4. Set up the FVS318v3 VPN -A u to Policy illustrated below . a. From the main menu VP N section, click on the VPN Policies link, and then click on the Add Auto Policy button. Figure 6-10: Scenario 1 VPN - Auto Policy b. Configure the IKE P ...

  • NETGEAR FVS318v3 - page 109

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-21 January 2005 How to Check VPN Connections Y ou can test connectivity and vie w VPN status information on the FVS318v3 (see also “VPN T unn el Control” on page 5-26 ). T esting the Gateway A FVS318v3 LAN and the Gateway B L AN 1. Using our example, fr ...

  • NETGEAR FVS318v3 - page 110

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-22 Advanced Virtual Private Networking January 2005 FVS318v3 Scenario 2: FVS318 v3 to FVS318v3 with RSA Certificates The following is a typical gate way-to-gateway VPN that uses Public Key Infrastructure x.509 (PKIX) certificates for authentication. The netw ork setup is identical to the one ...

  • NETGEAR FVS318v3 - page 111

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-23 January 2005 b. Click the Generate Request button to display the screen illustrated in Figure 6-1 1 below . . Figure 6-1 1: Generate Self Certificate Re quest menu c. Fill in the fields on the Add Self Certificate screen. •R e q u i r e d – Name. Ent ...

  • NETGEAR FVS318v3 - page 112

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-24 Advanced Virtual Private Networking January 2005 – Domain Name. If you have a domain name, you can enter it here. Otherwise, you should leave this blank. – E-mail Address. Y ou can enter you e-mail address here. d. Click the Next button to contin ue. The FVS318v3 ge ne rates a Self Ce ...

  • NETGEAR FVS318v3 - page 113

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-25 January 2005 c. When you have fini shed gathering the Se lf Certificate Request data, click the Done button. Y ou will return to the Certificates screen where your pend ing “FVS318v3” Self Certificate Request will be li sted, as illustrated in Figure ...

  • NETGEAR FVS318v3 - page 114

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-26 Advanced Virtual Private Networking January 2005 f. Y ou will now see the “FVS318v3” entry in the Active Self Cert ificates table and the pending “FVS318v3” Self Certificate Request is go ne, as illustrated be low . Figure 6-14: Self Certificat es t able 7. Associate the new certi ...

  • NETGEAR FVS318v3 - page 115

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Virtual Private Networking 6-27 January 2005 b. Create a new VPN Auto Polic y calle d scenario2a with all the same properties as scenario1a except that it uses the IKE policy called Scenario_2. Now , the traffic from devices within the rang e of the LAN subnet addresses on FVS318v3 A a ...

  • NETGEAR FVS318v3 - page 116

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6-28 Advanced Virtual Private Networking January 2005 ...

  • NETGEAR FVS318v3 - page 117

    Maintenance 7-1 January 2005 Chapter 7 Maintenance This chapter describes how to use the mainte nance features of your FVS318v3 ProSafe VPN Firewall. These features can be found by clicking on the Maintenance heading in the main menu of the browser interface. V iewing VPN Firewall S t atus Information The Router S tatus menu provides status and us ...

  • NETGEAR FVS318v3 - page 118

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 7-2 Maintenance January 2005 This screen shows the following parameters: T able 7-1. FVS318v3 St atus fields Field Descripti on System Name The System Name assigned to the firewall. Firmware V ersion The fi rewall firmware version. W AN Port These parameters apply to the Internet (W AN) port o ...

  • NETGEAR FVS318v3 - page 119

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Maintenanc e 7-3 January 2005 Click Show W AN S tatus to display the W AN connection status. Figure 7-2: W AN Connection St atus screen This screen shows the following statistics:. Log action buttons are described in Ta b l e 7 - 2 T able 7-1. Connection St atus fields Field Description Connect ...

  • NETGEAR FVS318v3 - page 120

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 7-4 Maintenance January 2005 Click Show S tatistics to display firewall usage statistics. Figure 7-3: Router S t atistics screen This screen shows the following statistics: T able 7-1. Router St atistics fields Field Description Interface The statistics for the WA N (Internet), LAN (local), 80 ...

  • NETGEAR FVS318v3 - page 121

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Maintenanc e 7-5 January 2005 W AN Status action buttons are described in the table below: V iewing a List of Att ached Devices The Attach ed Dev ic es me nu co nta i n s a tab l e of a ll IP devices that the firewall has discovered on the local network. From the main menu of the browser interf ...

  • NETGEAR FVS318v3 - page 122

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 7-6 Maintenance January 2005 The routing software of the FVS318v3 VPN Fire wall is stored in FLASH memory , and can be upgraded as new software is released by NETG EAR. Upgrade files ca n be download ed from NETGEAR's W eb site. If the upgrade file is comp ressed (.ZIP file), you must fir ...

  • NETGEAR FVS318v3 - page 123

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Maintenanc e 7-7 January 2005 Configuration File Management The configuration settings of th e FVS318v3 VPN Firewall are stor ed within the firewall in a configuration file. This file can be saved (backed up) to a user ’ s PC, retrieved (restored) from the user ’ s PC, or cleared to factory ...

  • NETGEAR FVS318v3 - page 124

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 7-8 Maintenance January 2005 Erasing the Configuration It is sometimes desirable to restore the firewall to a known blank condition. T o do this, see the Erase function, which will restore all factory settin gs. After an erase, the firewall's password will be password , the LAN IP address ...

  • NETGEAR FVS318v3 - page 125

    Advanced Configuration 8-1 January 2005 Chapter 8 Advanced Configuration This chapter describes how to configure the adva nced features of your FVS318 v3 ProSafe VPN Firewall. These features can be found under the Advanced heading in th e main menu of the browser interface. How to Configure Dynamic DNS If your network has a pe rman ently assigned I ...

  • NETGEAR FVS318v3 - page 126

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 8-2 Advanced Configuration January 2005 7. T ype the password (or key) for your dynamic DNS accoun t. 8. If your dynamic DNS provider allows the use of wildcards in resolving your URL, you may select the Use wildcards check box to activate this feature. For example, the wildcard feature will c ...

  • NETGEAR FVS318v3 - page 127

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Configur ation 8-3 January 2005 Configuring LAN TCP/IP Setup Parameters The firewall is shipped preconfigured to use private IP addres ses on the LAN side , and to act as a DHCP server . The firewall’ s default LAN IP configuration is: • LAN IP addresses—192.168.0. 1 • Subnet m ...

  • NETGEAR FVS318v3 - page 128

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 8-4 Advanced Configuration January 2005 Using the Firewall as a DHCP server By default, the firewall functions as a DHCP (Dynamic Host Config uration Protocol) server , allowing it to assign IP , DNS server , and de fa ult gateway addresses to all computers connected to the firewall's LAN ...

  • NETGEAR FVS318v3 - page 129

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Configur ation 8-5 January 2005 Using Address Reservation When you specify a reserved IP address for a PC on the LAN, that PC will always receive the same IP address each time it accesses the firewall’ s DHCP server . Reserved IP addre sses should be assigned to servers that require ...

  • NETGEAR FVS318v3 - page 130

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 8-6 Advanced Configuration January 2005 Figure 8-2: S t atic Routes t able T o add or edit a Static Route: 1. Click the Add button to open the Add/Edi t menu, shown below . Figure 8-3: S t atic Route Entry and Edit menu 2. T ype a route name for this static route in the Route Name box. (This i ...

  • NETGEAR FVS318v3 - page 131

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Configur ation 8-7 January 2005 8. T ype a number between 1 and 15 as the M etric value. This represents the number of firewalls between your network and the destination. Usually , a setting of 2 or 3 works, but if this is a direct connection, set it to 1. 9. Click Apply to have the st ...

  • NETGEAR FVS318v3 - page 132

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 8-8 Advanced Configuration January 2005 T o configure your firewall for Remote Management: 1. Select the T urn Remote Management On check box. 2. Specify what external addresses will be allowed to access the firewall’ s remote management. Note: For enhanced security , restrict access to as f ...

  • NETGEAR FVS318v3 - page 133

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Advanced Configur ation 8-9 January 2005 Tip : If you are using a dynamic DNS service such as TZO, you can always identify the IP address of your FVS31 8v3 by running TR ACERT from the W indows St art menu Run option. For example, type tracert yourFVS318v 3.mynetgear .net and you will see the I ...

  • NETGEAR FVS318v3 - page 134

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 8-10 Advanced C onfiguration January 2005 ...

  • NETGEAR FVS318v3 - page 135

    Troubleshooting 9-1 January 2005 Chapter 9 T roubleshooting This chapter gives information about troubleshooting your FVS318v3 ProSafe VPN Firewall. After each problem description, instructions ar e provided to help yo u diagnose and sol ve the problem. Basic Functioning After you turn on power to th e firewall, the following seque nce of events sh ...

  • NETGEAR FVS318v3 - page 136

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 9-2 Troubleshooting January 2005 LEDs Never T urn Off When the firewall is turned on, the LEDs turn on brief ly and th en turn of f. If all the LEDs stay on, there is a fault within the firewall. If all LEDs are still on one minute after power up: • Cycle the power to see if the firewall rec ...

  • NETGEAR FVS318v3 - page 137

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Troubleshooting 9-3 January 2005 T roubleshooting the Web Configuration Interface If you are unable to access the firewall’ s W eb Conf iguration interface from a PC on your local network, check the following : • Check the Ethernet connection betwe en the PC and the firewall as described in ...

  • NETGEAR FVS318v3 - page 138

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 9-4 Troubleshooting January 2005 T roubleshooting the ISP Connection If your firewall is unable to a ccess the Internet, you should first determine whether the firewall is able to obtain a W AN IP address from the ISP . Un less you have been assigned a static IP address, your firewall must req ...

  • NETGEAR FVS318v3 - page 139

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Troubleshooting 9-5 January 2005 OR Configure your firewall to sp oof your PC’ s MAC address. This ca n be done in the Bas i c Settings menu. Refer to “How to Manually Configure Y our Internet Connectio n” on page 3- 12 . If your firewall can obtain an IP addre ss, but your PC is unable t ...

  • NETGEAR FVS318v3 - page 140

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 9-6 Troubleshooting January 2005 If the path is working, you see this message: Reply from < IP address >: bytes=32 time=NN ms TTL=xxx If the path is not working, you see this message: Request timed out If the path is not functioning correctly , you could ha ve one of the following proble ...

  • NETGEAR FVS318v3 - page 141

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Troubleshooting 9-7 January 2005 — If your ISP assigned a host name to your P C, enter that host name as the Account Name in the Basic Settings menu. — Y ou r ISP could be rejecting the Ethernet MAC addresses of all but one of your PCs. Many broadband ISPs restrict access by only allo wing ...

  • NETGEAR FVS318v3 - page 142

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 9-8 Troubleshooting January 2005 ...

  • NETGEAR FVS318v3 - page 143

    Technical Specifications A-1 January 2005 Appendix A T echnical S pecifications This appendix provides tech nical specifications for the FVS318v3 ProSafe VPN Firewall. Network Protocol and St andards Compatibility Data and Routing Protocols: TCP/IP , RIP-1, RIP-2, DHCP PPP over Ethernet (PPPoE) Power Adapter North America: 120V , 60 Hz, input Unite ...

  • NETGEAR FVS318v3 - page 144

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 A-2 Technical Specifications January 2005 Electromagnetic Emissions Meets requirements of: FCC Part 15 Class B VCCI Class B EN 55 022 (CISPR 22 ), Class B Interface S p ecifications LAN: 10BASE-T or 100BASE-Tx, RJ-45 W AN: 10BASE-T or 100BASE-Tx, RJ-45 ...

  • NETGEAR FVS318v3 - page 145

    Network, Routing, and Firewall Basics B-1 January 2005 Appendix B Network, Routing, and Firewall Basics This chapter provides an overview of IP networks, routing, and n etworking. Related Publications As you read this document, you may be dire cted to various RF C documents for further information. An RFC is a Request For Comment (RFC) published by ...

  • NETGEAR FVS318v3 - page 146

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 B-2 Network, Routing, and Firewall Basics January 2005 What is a Router? A router is a device that forwards traffic between networks based on network layer information in the data and on routing tables main tained by the router . In these rou ting tables, a router builds up a logical picture o ...

  • NETGEAR FVS318v3 - page 147

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Network, Routing, and Firewall Basics B-3 January 2005 The latter version is easier to remember and easier to enter into your computer . In addition, the 32 bits of the ad dress are subdivided into two part s. The firs t part of the address identifies the network, and the seco nd part identifie ...

  • NETGEAR FVS318v3 - page 148

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 B-4 Network, Routing, and Firewall Basics January 2005 • Class C Class C addresses can have 254 hosts on a netw ork. Class C addre sses use 24 bits for the network address and eight bits for the node. They are in this range: 192.0.1.x to 223.255.254.x. • Class D Class D addresses are used ...

  • NETGEAR FVS318v3 - page 149

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Network, Routing, and Firewall Basics B-5 January 2005 As a shorter alternative to dotted-decimal notation, the netmask may also be expressed in terms of the number of ones from the left. This number is ap pended to the IP address, following a backward slash (/), as “/n.” In the example, th ...

  • NETGEAR FVS318v3 - page 150

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 B-6 Network, Routing, and Firewall Basics January 2005 Although the preceding example uses the entire third octet for a subnet address, note that you are not restricted to octet boundaries in subnetting. T o create more network numbers, you need only shift some bits from the host a ddress to t ...

  • NETGEAR FVS318v3 - page 151

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Network, Routing, and Firewall Basics B-7 January 2005 Configure all hosts on a LAN segment to use the same netmask for the following reasons: • So that hosts recognize local IP broadcast packets When a device broadcasts to its segment neighb ors, it uses a destination address of the local ne ...

  • NETGEAR FVS318v3 - page 152

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 B-8 Network, Routing, and Firewall Basics January 2005 Single IP Address Operation Using NA T In the past, if multiple PCs on a LAN needed to access the Internet simultaneously , you had to obtain a range of IP addresses from the ISP . This type of Internet account is more cos tly than a singl ...

  • NETGEAR FVS318v3 - page 153

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Network, Routing, and Firewall Basics B-9 January 2005 MAC Addresses an d Address Re solution Protocol An IP address alone cannot be used to deliver da ta from one LAN device to another . T o send data between LAN devices, you must convert the IP ad dress of the destination device to its media ...

  • NETGEAR FVS318v3 - page 154

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 B-10 Network, Routing, and Firewall Ba sics January 2005 When a PC accesses a resource by its descriptive name, it first contacts a DN S server to obtain the IP address of the resource. The PC sends the d esired message using the IP address. Ma ny large organizations, such as ISPs, mai ntain t ...

  • NETGEAR FVS318v3 - page 155

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Network, Routing, a nd Firewall Basics B-11 January 2005 What is a Firewall? A firewall is a device that protects one netw ork from another , while allowing communication between the two. A firewall incorporates the functi ons of the NA T router , while adding features for dealing with a hacker ...

  • NETGEAR FVS318v3 - page 156

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 B-12 Network, Routing, and Firewall Ba sics January 2005 Category 5 Cable Quality Category 5 distributed cable that me ets ANSI/EIA/ TIA-568-A building wiring stan dards can be a maximum of 328 feet (ft.) or 10 0 meters (m) in length, div ided as follows: 20 ft. (6 m) between the hu b and the ...

  • NETGEAR FVS318v3 - page 157

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Network, Routing, a nd Firewall Basics B-13 January 2005 Inside T wisted Pair Cables For two devices to communicate, th e transmitter of each device must be connected to the receiver of the other device. The cro sso ver function is usually implemented inte rnally as part of the circuitry in the ...

  • NETGEAR FVS318v3 - page 158

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 B-14 Network, Routing, and Firewall Ba sics January 2005 Figure B-6: Category 5 UTP cable with male RJ-45 plug at eac h end Note : Flat “silver satin” tele phone cable may have the same RJ-45 pl ug. However , using tele phone cable results in excessive collisio ns, causing the attached por ...

  • NETGEAR FVS318v3 - page 159

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Network, Routing, a nd Firewall Basics B-15 January 2005 The FVS318v3 VPN Firewall incorporates Auto Uplink TM technology (also called MDI/MDIX). Each LOCAL Ethernet port will automatically sens e whether the Ethernet cable plugged into the port should have a normal con nection (e.g. connecting ...

  • NETGEAR FVS318v3 - page 160

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 B-16 Network, Routing, and Firewall Ba sics January 2005 ...

  • NETGEAR FVS318v3 - page 161

    Virtual Private Networking C-1 January 2005 Appendix C V irtual Private Networking There have been many improvem ents in the Internet including Quality of Service, network performance, and inexpensive technologies, such as DSL. But one of the most important advances has been in V irtual Private Networking (VPN) Inte rnet Protocol security (IPSec). ...

  • NETGEAR FVS318v3 - page 162

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 C-2 Virtual Private Networking January 2005 • Remote Access: Remote access enables telecommuters and mobile workers to access e-ma il and business applications. A dia l-up connection to an organization’ s modem pool is one method of access for remote workers, but is expensive because the o ...

  • NETGEAR FVS318v3 - page 163

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Virtual Private Networking C-3 January 2005 • Encapsulating Security Payload (ESP) : Provides confidentiality , authentication, and integrity . • Authentication Header (AH) : Provides authentication and integrity . • Internet Key Exchange (IKE) : Provides key management and Security Assoc ...

  • NETGEAR FVS318v3 - page 164

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 C-4 Virtual Private Networking January 2005 The ESP header is inserted into the packet betw een the IP header and any subsequent packet contents. However , because ESP encrypts the data, the payload is changed. ESP does not encrypt the ESP header , nor does it encrypt the ESP authentication. A ...

  • NETGEAR FVS318v3 - page 165

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Virtual Private Networking C-5 January 2005 Mode SAs operate using modes. A mode is the method in which the IPSec protocol is applied to the packet. IPSec can be used in tunne l mode or tran sport mode. T ypi cally , the tunnel mode is used for gateway-to-gateway IPSec tunnel protection, while ...

  • NETGEAR FVS318v3 - page 166

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 C-6 Virtual Private Networking January 2005 Key Management IPSec uses the Internet Key Exchange (IKE) protoc ol to facilitate and automate the SA setup and the exchange of keys between parties transferring data. Using keys ensures that only the sender and receiver of a message can access it. I ...

  • NETGEAR FVS318v3 - page 167

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Virtual Private Networking C-7 January 2005 VPN Process Overview Even though IPSec is standards-based, e ach vendo r has its own set of terms and procedures for implementing the standard. Because of these differences, it may be a good idea to review some of the terms and the generic processes f ...

  • NETGEAR FVS318v3 - page 168

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 C-8 Virtual Private Networking January 2005 Y ou need to know the subn et mask of both gateway LAN Conn ectio ns. Refer to Appendix A, “T echnical Specifications ” to gather the necessary address and subnet mask information to aid in the configuration and troubleshooting process. Firewalls ...

  • NETGEAR FVS318v3 - page 169

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Virtual Private Networking C-9 January 2005 Figure C-5: VPN tunnel Security Associat on (SA) The SA contains all the information necessary for gateway A to negotiate a secure and encrypted communication stream with gateway B. This comm unication is often referred to as a “tunnel.” The gatew ...

  • NETGEAR FVS318v3 - page 170

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 C-10 Virtual Private Networking January 2005 2. IKE Phase I. a. The two parties negotiate the en cryption and au thentication algorithms to use in the IKE SAs. b. The two parties authenticate each other us ing a predetermined mechanism, such as preshared keys or digital certificates. c. A shar ...

  • NETGEAR FVS318v3 - page 171

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Virtual Private Networking C-11 January 2005 VPNC IKE Phase II Parameters The IKE Phase 2 parameters used in Scenario 1 are: •T r i p l e D E S • SHA-1 • ESP tunnel mode • MODP group 1 • Perfect forward secrecy for rekeying • SA lifetime of 28 800 seconds (one hour) T esting and T r ...

  • NETGEAR FVS318v3 - page 172

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 C-12 Virtual Private Networking January 2005 Relevant RFCs listed numerical ly: • [RFC 791] Internet Pr otocol DARP A Internet Pr ogram Pr otocol Specification , Information Sciences Institute, US C, September 1981. • [RFC 1058] Routing Information Pr otocol , C Hedrick, Rutgers University ...

  • NETGEAR FVS318v3 - page 173

    Preparing Your Netwo rk D-1 January 2005 Appendix D Prep aring Y our Network This appendix describes how to prepare your ne twork to connect to the Internet through the FVS318v3 ProSafe VPN Firewall an d how to verify the readiness of broadband Internet service from an Internet service provider (ISP). Prep aring Y our Computers for TCP/IP Networkin ...

  • NETGEAR FVS318v3 - page 174

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-2 Preparing Yo ur Network January 2005 In your IP network, each PC and the firewall must be assigned a unique IP addresses. Each PC must also have certain other IP configuration information such as a subn et mask (netmask), a domain name s erver (DNS) address, and a defau lt ga te way addres ...

  • NETGEAR FVS318v3 - page 175

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Preparing Your Netwo rk D-3 January 2005 Y ou must have an Ethernet adapter , the TCP/IP protocol, and Client for Microsoft Networks. If you need to install a ne w adapter , follow these steps: a. Click the Add button. b. Select Adapter , and then click Add . c. Select the manufacturer and mode ...

  • NETGEAR FVS318v3 - page 176

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-4 Preparing Yo ur Network January 2005 If you need Client for Micro soft Networks: a. Click the Add button. b. Select Client , and then click Add . c. Select Microsoft . d. Select Client for Microsoft Networks , and then click OK . 3. Restart your PC for the changes to take ef fect. Enabling ...

  • NETGEAR FVS318v3 - page 177

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Preparing Your Netwo rk D-5 January 2005 V erify the following settings as shown: • Client for Microsoft Network exists • Ethernet adapter is present • TCP/IP is present • Primary Network Logon is set to W indows logon Click on the Properties button. The following TCP/IP Properties wind ...

  • NETGEAR FVS318v3 - page 178

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-6 Preparing Yo ur Network January 2005 Selecting Windows’ In ternet Access Method 1. On the W indows taskbar , click the St a r t button, point to Settings , and then click Contr ol Panel . 2. Double-click the Internet Options icon. 3. Select I want to set up my Internet connection manuall ...

  • NETGEAR FVS318v3 - page 179

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Preparing Your Netwo rk D-7 January 2005 1. On the W indows taskbar , click the St a r t button, and then click Run . 2. Ty p e winipcfg , and then click OK . The IP Configuration window opens, which lists (a mong other things), your IP address, subnet mask, and default gateway . 3. From the dr ...

  • NETGEAR FVS318v3 - page 180

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-8 Preparing Yo ur Network January 2005 8. Then, restart your PC. Enabling DHCP to Automatically Configure TCP/IP Settings Y ou will find there are many similarities in th e procedures for different W i ndows systems whe n using DHCP to configure TCP/IP . The following steps will walk you thr ...

  • NETGEAR FVS318v3 - page 181

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Preparing Your Netwo rk D-9 January 2005 • Now you should be at the Local Area Network Connection S tatus window . This box displays the conn ection status, duration, speed, and activity statistics. • Administrator logon access rights are needed to use this window . • Click the Properties ...

  • NETGEAR FVS318v3 - page 182

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-10 Preparing Your Network January 2005 DHCP Configuration of TC P/IP in Windows 2000 Once again, after you have installed the network card, TCP/IP for W indows 2000 is con figured. TCP/IP should be added by de fault and set to DHCP without your having to configure it. However , if there are ...

  • NETGEAR FVS318v3 - page 183

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Preparing Your Netwo rk D-11 January 2005 • Click on the My Network Places icon on the W indows desktop. This will bring up a window called Network and Dial-up Connectio ns. • Right click on Local Ar ea Connection a nd select Properties . •T h e Local Area Connection Pr operties dialog bo ...

  • NETGEAR FVS318v3 - page 184

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-12 Preparing Your Network January 2005 • W ith Internet Protocol (TCP/IP) selected, click on Properties to open the Internet Protocol (TCP/IP) Propert ies dialogue box. • V erify that • Obtain an IP address automatically is selected. • Obtain DNS server address automatically is selec ...

  • NETGEAR FVS318v3 - page 185

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Preparing Your Netwo rk D-13 January 2005 DHCP Configuration of TCP/IP in Windows NT4 Once you have installed the network card, you need to configure the TCP/IP env ironment for W indows NT 4.0. Follow this procedure to configure TCP/IP with DHCP in W indows NT 4.0 . • Choose Settings from th ...

  • NETGEAR FVS318v3 - page 186

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-14 Preparing Your Network January 2005 • Highlight the TCP/IP Pr otocol in the Network Protocols box, and click on the Properties button. ...

  • NETGEAR FVS318v3 - page 187

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Preparing Your Netwo rk D-15 January 2005 V erifying TCP/IP Properties fo r Windows XP , 2000, and NT4 T o check your PC’ s TCP/IP configuration: 1. On the W indows taskbar , click the St a r t button, and then click Run . The Run window opens. 2. Ty p e cmd and then click OK . A command wind ...

  • NETGEAR FVS318v3 - page 188

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-16 Preparing Your Network January 2005 • The default gateway i s 192.168.0.1 4. Ty p e exit Configuring the Macintos h for TCP/IP Networking Beginning with Macintosh Operating System 7 , TCP/ IP is already installed on the Macint osh. On each networked Macintosh, you will need to configure ...

  • NETGEAR FVS318v3 - page 189

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Preparing Your Netwo rk D-17 January 2005 2. If not already selected, select Built- in Ethernet in the Configure list. 3. If not already selected, Select Using DHCP in the TCP/IP tab. 4. Click Save . V erifying TCP/IP Properties for Macintosh Computers After your Macintosh is configured and has ...

  • NETGEAR FVS318v3 - page 190

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-18 Preparing Your Network January 2005 V erifying the Readiness of Y our Internet Account For broadband access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using a cable modem or DSL mode m. This modem must be a separ ...

  • NETGEAR FVS318v3 - page 191

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Preparing Your Netwo rk D-19 January 2005 • An IP address and subnet mask • A gateway IP address, which is the address of the ISP’ s router • One or more domain name server (DNS) IP addresses • Host name and domain suf fix For example, your account’ s full server names may look like ...

  • NETGEAR FVS318v3 - page 192

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-20 Preparing Your Network January 2005 If an IP address appears under Installed Gatewa ys, write down the address. This is the ISP’ s gateway address. Select the address and then click Remove to remove the gateway address. 6. Select the DNS Configuration tab. If any DNS server addresses ar ...

  • NETGEAR FVS318v3 - page 193

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Preparing Your Netwo rk D-21 January 2005 Rest arting the Network Once you’ve set up yo ur computers to work with the fi rewall, you must reset the network for the devices to be able to communicate correctly . R estart any computer that is connected to the FVS318v3 VPN Firewall. After configu ...

  • NETGEAR FVS318v3 - page 194

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 D-22 Preparing Your Network January 2005 ...

  • NETGEAR FVS318v3 - page 195

    VPN Configuration of NETGEAR FVS318v3 E-1 January 2005 Appendix E VPN Configuration of NETGEAR FVS318v3 This is a case study on how to configure a s ecure IPSec VPN tunnel on a NETGEAR FVS318v3 . This case study follows the VP N Consortium interoperability profile guidelines (found at http://www .vpnc.or g/Inter opPr ofiles/Interop-01.html ). This ...

  • NETGEAR FVS318v3 - page 196

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-2 VPN Configuration of NETGEAR FVS318v3 January 2005 Figure E-1: Addressing and subnet s used for this case study Configuring the Gateways Configure each gateway as summarized in Fi gure E-2 and Figure E-3 : 1. Configure Gate A. a. Log in to the r outer at Gateway A. b. Use the VPN Wizard to ...

  • NETGEAR FVS318v3 - page 197

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-3 January 2005 Figure E-2: NETGEAR’ s VPN Wizard for the router at each gateway (p art 1 of 2) Step 1: Click VPN Wiz ard on the Side Menu Bar Ste p 2: Enter the follow in g: o Connection name o Pre-Shared Key (must be the same for each end) o Select ? ...

  • NETGEAR FVS318v3 - page 198

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-4 VPN Configuration of NETGEAR FVS318v3 January 2005 Figure E-3: NETGEAR’ s VPN Wizard for the router at a gateway A (p art 2 of 2) Note: The default log in address for the FVS 318 v3 ro uter is http://192.168.0.1 with the default user name of admin and default password of password . The l ...

  • NETGEAR FVS318v3 - page 199

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-5 January 2005 Activating the VPN T unnel Y ou can activate the VPN tunnel by testing co nnectivity and viewing the VPN tunnel status information as described in the following flowchart: Figure E-4: T esting Flowchart All traffic from the range of LAN IP ...

  • NETGEAR FVS318v3 - page 200

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-6 VPN Configuration of NETGEAR FVS318v3 January 2005 The FVS318v3-to-FVS318v3 Case Configuring the VPN T unnel Note : This scenario assumes all port s are open on the FVS318v3. Figure E-5: LAN to LAN VPN access from an FVS318v3 to an FVS318v3 Use this scenario illustration and configuration ...

  • NETGEAR FVS318v3 - page 201

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-7 January 2005 2. Use the VPN Wizard to configur e the FVS318v3 at Gateway A. Follow the steps listed in Figure E-2 and Figure E-3 using the following parameters as illustrated in Figure E-6 : • Connection Name: Scenario_1 (in this example) • Pre-Sha ...

  • NETGEAR FVS318v3 - page 202

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-8 VPN Configuration of NETGEAR FVS318v3 January 2005 • Remote LAN IP Subnet – IP Address: 10.5.6.1 (in this example), must be unique at each VPN tunnel endpoint – Subnet Mask: 255.255.255.0 (in this example) All traffic from the range of LAN IP addresses specified on FVS318v3 A and FVS ...

  • NETGEAR FVS318v3 - page 203

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-9 January 2005 V iewing and Editing the VPN Parameters The VPN W izard sets up a VPN tunnel using th e default parameters from the VPN Consortium (VPNC). The policy definitions to manage VPN traffic on th e FVS318v3 are presented in Figure E-7 and Figure ...

  • NETGEAR FVS318v3 - page 204

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-10 VPN Configuration of NETGEAR FVS318v3 January 2005 Figure E-8: IKE p arameters at Gateway A (FVS318v3) an d Gateway B (FVS318v3) Note: The Pre-Shared Key must be the same at both VPN tunn el endpoints. The remote W AN and LAN IP addresses for on e VPN tunnel endpoint will be the local W A ...

  • NETGEAR FVS318v3 - page 205

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-11 January 2005 Initiating and Checki ng the VPN Connections Y ou can test connectivity and vie w VPN status information on the FVS3 18v3 acco rding to the testing flowchart shown in Figure E-4 . T o test the VPN tunnel from the Gateway A LAN, do the fol ...

  • NETGEAR FVS318v3 - page 206

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-12 VPN Configuration of NETGEAR FVS318v3 January 2005 Figure E-9: VPN St atus for the FVS318v3 routers at Gateway A and Gateway B 22.23.24.25 22.23.24.25 S tatus of VPN tunnel from Gateway B S tatus of VPN tunnel to Gateway B VPN S tatus at Gateway A (FVS318v3) VPN S tatus at Gate way B (FVS ...

  • NETGEAR FVS318v3 - page 207

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-13 January 2005 The FVS318v3-to-FVS318v2 Case Configuring the VPN T unnel Note : This scenario assumes all ports are open on the FVS318 v3 and FVS318v2. Figure E-10: LAN to LAN VPN access from an FVS318v3 to an FVS318v2 Use this scenario illustration and ...

  • NETGEAR FVS318v3 - page 208

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-14 VPN Configuration of NETGEAR FVS318v3 January 2005 2. Use the VPN Wizard to configur e the FVS318v3 at Gateway A. Follow the steps listed in Figure E-2 and Figure E-3 using the following parameters as illustrated in Figure E-1 1 : • Connection Name: Scenario_1 (in this example) • Pre- ...

  • NETGEAR FVS318v3 - page 209

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-15 January 2005 • Remote LAN IP Subnet – IP Address: 10.5.6.1 (in this example), must be unique at each VPN tunnel endpoint – Subnet Mask: 255.255.255.0 (in this example) All traffic from the range of LAN IP addresses specified on FVS318v3 A and FV ...

  • NETGEAR FVS318v3 - page 210

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-16 VPN Configuration of NETGEAR FVS318v3 January 2005 V iewing and Editing the VPN Parameters The VPN W izard sets up a VPN tunnel using th e default parameters from the VPN Consortium (VPNC). The policy definitions to ma nage VP N traf fic are presented in Figure E-12 . ...

  • NETGEAR FVS318v3 - page 211

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-17 January 2005 Figure E-12: VPN Parameters at Gateway A (FVS318v3) and Gateway B (FVS318v2 ) Gateway A VPN Parameters (FVS318v3) Gateway B VPN Parameters (FVS318v2) ...

  • NETGEAR FVS318v3 - page 212

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-18 VPN Configuration of NETGEAR FVS318v3 January 2005 Initiating and Checki ng the VPN Connections Y ou can test connectivity and vie w VPN status information on the FVS3 18v3 acco rding to the testing flowchart shown in Figure E-4 . T o test the VPN tunnel from the Gateway A LAN, do the fol ...

  • NETGEAR FVS318v3 - page 213

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-19 January 2005 3. T est 3: V iew VPN T unnel S tatus : T o view the FVS318 v3 and FVS318v2 event log an d status of Security Associations, go to the FVS318v3 main menu VPN section and click the VP N St a t u s link. For the FVS318v2, click Show VPN S ta ...

  • NETGEAR FVS318v3 - page 214

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-20 VPN Configuration of NETGEAR FVS318v3 January 2005 The FVS318v3-to-FVL328 Case Configuring the VPN T unnel Note : This scenario assumes all ports are open on the FVS318 v3 and FVL328. Figure E-14: LAN to LAN VPN access from an FVS318v3 to an FVL328 Use this scenario illustration and confi ...

  • NETGEAR FVS318v3 - page 215

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-21 January 2005 2. Use the VPN Wizard to configur e the FVS318v3 at Gateway A. Follow the steps listed in Figure E-2 and Figure E-3 using the following parameters as illustrated in Figure E-15 : • Connection Name: Scenario_1 (in this example) • Pre-S ...

  • NETGEAR FVS318v3 - page 216

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-22 VPN Configuration of NETGEAR FVS318v3 January 2005 • Remote LAN IP Subnet – IP Address: 10.5.6.1 (in this example), must be unique at each VPN tunnel endpoint – Subnet Mask: 255.255.255.0 (in this example) All traffic from the range of LAN IP addresses specified on FV S318v3 A and F ...

  • NETGEAR FVS318v3 - page 217

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-23 January 2005 V iewing and Editing the VPN Parameters The VPN W izard sets up a VPN tunnel using th e default parameters from the VPN Consortium (VPNC). The policy definitions to manage VPN traffic on the F VS318v3 and FVL328 are presented in Figure E- ...

  • NETGEAR FVS318v3 - page 218

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-24 VPN Configuration of NETGEAR FVS318v3 January 2005 Figure E-17: IKE p arameters at Gateway A (FVS318v 3) and Gateway B (FVL32 8) Note: The Pre-Shared Key must be the same at both VPN tunn el endpoints. The remote W AN and LAN IP addresses for on e VPN tunnel endpoint will be the local W A ...

  • NETGEAR FVS318v3 - page 219

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-25 January 2005 Initiating and Checki ng the VPN Connections Y ou can test connectivity and vie w VPN stat us information on the FVS318v3 and FVL328 according to the testing flowchart shown in Figure E-4 . T o test the VPN tunnel from the Gateway A LAN, ...

  • NETGEAR FVS318v3 - page 220

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-26 VPN Configuration of NETGEAR FVS318v3 January 2005 Figure E-18: VPN S t atus for the routers at Gateway A (FVS318 v3) and Gateway B (FVL328) 22.23.24.25 22.23.24.25 S tatus of VPN tunnel from Gateway B S tatus of VPN tunnel to Gateway B VPN S tatus at Gateway A (FVS318v3) IPSec Connection ...

  • NETGEAR FVS318v3 - page 221

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-27 January 2005 The FVS318v3-to-VPN Client Case Client-to-Gateway VPN T unnel Overview The operational differences between gateway-to-g atew ay and client-to-gateway VPN tunnels are summarized as follows: T able E-4. Policy Summary VPN Consortium Scenari ...

  • NETGEAR FVS318v3 - page 222

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-28 VPN Configuration of NETGEAR FVS318v3 January 2005 Configuring the VPN T unnel Note : This scenario assumes all port s are open on the FVS318v3. Figure E-19: LAN to PC VPN access from an FVS318v 3 to a VPN Client Use this scenario illustration and configuration scr een s as a model to bui ...

  • NETGEAR FVS318v3 - page 223

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-29 January 2005 Figure E-20: VPN Wizard at G ateway A (FV S318v3) Pre-Shar ed Key must be the same at both ends of the VPN tunnel Select “A Remote VPN Client” ...

  • NETGEAR FVS318v3 - page 224

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-30 VPN Configuration of NETGEAR FVS318v3 January 2005 Figure E-21: VPN paramete rs at Gateway A (FVS318v3) ...

  • NETGEAR FVS318v3 - page 225

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-31 January 2005 3. Set up the VPN Client at Gateway B as in the illustration ( Figur e E-19 ). a. Right-mouse-click the ProSafe icon ( ) in th e system tray and select the Security Policy Editor . If you need to install the NETGEAR Pr oSafe VPN Client on ...

  • NETGEAR FVS318v3 - page 226

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-32 VPN Configuration of NETGEAR FVS318v3 January 2005 c. Program the Scenario_1 connection screen as follows (see Figure E-23 ): • Connection Security: Secure • Remote Party Identity and Addressing: Select IP Subnet from the ID T ype menu and then enter 10.5.6.1 for Subnet , 255. 255.255 ...

  • NETGEAR FVS318v3 - page 227

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-33 January 2005 d. Select Security Pol icy on the left hierarchy menu and then select Aggressive Mode under Select Phase 1 Negotiation Mode (see Figure E-24 ). (The Select Phase 1 Negotiation Mode choice must match the Exchange Mode setting for the Gener ...

  • NETGEAR FVS318v3 - page 228

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-34 VPN Configuration of NETGEAR FVS318v3 January 2005 e. Select My Identity on the left hierarchy menu and program the screen as follows (see Figure E-25 ): •U n d e r My Identity , select None for Select Certificate (since we are using a Pre-Shared Key in this scenario). Then enter 1234 5 ...

  • NETGEAR FVS318v3 - page 229

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-35 January 2005 f. V erify the Authentication (Phase 1) and Key Exchange (Phase 1) Pr oposal 1 screen parameters (see Figure E-26 ) match the IKE SA Parameters of the IKE Policy Configuration screen shown in Figure E-21 for the gateway router . Figure E- ...

  • NETGEAR FVS318v3 - page 230

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-36 VPN Configuration of NETGEAR FVS318v3 January 2005 Initiating and Checki ng the VPN Connections Y ou can test connectivity and vie w VPN status information on the FVS318v3 and VPN Client according to the testing flowchart shown in Figure E-4 . T o test the VPN tunnel from the Gateway A LA ...

  • NETGEAR FVS318v3 - page 231

    Reference Manual for the ProSafe VPN Firewall FVS318v3 VPN Configuration of NETGEAR FVS318 v3 E-37 January 2005 2. T est 2: Ping Remote W AN IP Address (if T est 1 fails) : T o test connectivity between the Gateway A and Gateway B W AN ports, follow these steps : a. From a W indows Client PC, click the St a r t button on the taskbar and then click ...

  • NETGEAR FVS318v3 - page 232

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 E-38 VPN Configuration of NETGEAR FVS318v3 January 2005 Figure E-28: VPN S t atus for Gateway A (FVS318v3) and Gateway B (VPN Client) 22.23.24.25 22.23.24.25 S tatus of VPN tunnel from Gateway B S tatus of VPN tunnel to Gateway B VPN S tatus at Gateway A (FVS318v3) Connection Monitor at Gatewa ...

  • NETGEAR FVS318v3 - page 233

    January 2005 Glossary 1 Glossary List of Glossary T erms Use the list below to find definitions for technical terms used in this manual. Numeric 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. 100BASE-Tx IEEE 802.3 specification for 100 Mbps Ethernet over twis ted pair wiring. 802.1x 802.1x defines port-based , netw ...

  • NETGEAR FVS318v3 - page 234

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 2 Glossary January 2005 ARP Address Resolution Protocol, a TCP/IP protocol used to convert an IP address into a physical address (called a DLC address), such as an Ethernet address. A host wishing to obtain a physical address broad casts an ARP request onto the TCP/IP network. The host on the ...

  • NETGEAR FVS318v3 - page 235

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Glossary 3 January 2005 printed on the cable jacket. Cat 5 cable contains eight conductors, arr anged in four twisted pairs, and terminated with an RJ45 type connector . In addition, th ere are restrictions on ma ximum cable length for both 10 and 100 Mbits/second networks. Certificate Authorit ...

  • NETGEAR FVS318v3 - page 236

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 4 Glossary January 2005 to 9 Mbps when receiving data (kn own as the downstream rate) and fr om 16 to 640 Kbps when sending data (known as the upstream rate). ADSL requires a special ADSL modem. ADSL is growing in popularity as more ar eas around the world gain access. DSLAM DSL Access Multipl ...

  • NETGEAR FVS318v3 - page 237

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Glossary 5 January 2005 IEEE Institute of Electrical and Electroni cs Engineers. This American organization was founded in 196 3 and sets standards for computer s and communications. IETF Internet Engineering T ask Force. An organization responsible fo r pro viding engineering soluti ons for TC ...

  • NETGEAR FVS318v3 - page 238

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 6 Glossary January 2005 IP Address A four-byte number uniquely defining each host on the Internet, usually written in dotted-decimal notation with periods separating th e bytes (for example, 134. 177.244.57). Ranges of addresses are assi gned by Internic, an organization formed for th is purpo ...

  • NETGEAR FVS318v3 - page 239

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Glossary 7 January 2005 Mbp s Megabits per second. MDI/MDIX In cable wiring, the concept of transm it and receive are from the perspec tive of the PC, which is wired as a Media Dependant Interface (MDI). In MDI wiring, a PC transmits on pins 1 and 2. At the hub, switch, router , or access point ...

  • NETGEAR FVS318v3 - page 240

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 8 Glossary January 2005 PPTP Point-t o-Point T unneling Protocol. A method for esta blishing a virtual private network (VPN) by embeddin g Microsoft’ s network proto c ol in to Internet packets. Protocol A set of ru les for communication b etween devices on a network. PSTN Public Switched T ...

  • NETGEAR FVS318v3 - page 241

    Reference Manual for the ProSafe VPN Firewall FVS318v3 Glossary 9 January 2005 S Segment A section of a LAN that is c onnect ed to the rest of the network using a switch, bridge, or repeater . Subnet Mask Combined with the IP address, the IP Subnet Mask allows a device to k now which other addresses are local to it, and which must be reached throug ...

  • NETGEAR FVS318v3 - page 242

    Reference Manual for the ProSafe VPN Fire wall FVS318v3 10 Glossary January 2005 A W eb proxy server is a specialized HTTP server that allows clients access to th e Internet from behind a firewall. The proxy serv er listens for requests from clients wi thin the firewall and f orwards these requests to remote Internet servers outside the firewall. T ...

Manufacturer NETGEAR Category Network Router

Documents that we receive from a manufacturer of a NETGEAR FVS318v3 can be divided into several groups. They are, among others:
- NETGEAR technical drawings
- FVS318v3 manuals
- NETGEAR product data sheets
- information booklets
- or energy labels NETGEAR FVS318v3
All of them are important, but the most important information from the point of view of use of the device are in the user manual NETGEAR FVS318v3.

A group of documents referred to as user manuals is also divided into more specific types, such as: Installation manuals NETGEAR FVS318v3, service manual, brief instructions and user manuals NETGEAR FVS318v3. Depending on your needs, you should look for the document you need. In our website you can view the most popular manual of the product NETGEAR FVS318v3.

Similar manuals

A complete manual for the device NETGEAR FVS318v3, how should it look like?
A manual, also referred to as a user manual, or simply "instructions" is a technical document designed to assist in the use NETGEAR FVS318v3 by users. Manuals are usually written by a technical writer, but in a language understandable to all users of NETGEAR FVS318v3.

A complete NETGEAR manual, should contain several basic components. Some of them are less important, such as: cover / title page or copyright page. However, the remaining part should provide us with information that is important from the point of view of the user.

1. Preface and tips on how to use the manual NETGEAR FVS318v3 - At the beginning of each manual we should find clues about how to use the guidelines. It should include information about the location of the Contents of the NETGEAR FVS318v3, FAQ or common problems, i.e. places that are most often searched by users in each manual
2. Contents - index of all tips concerning the NETGEAR FVS318v3, that we can find in the current document
3. Tips how to use the basic functions of the device NETGEAR FVS318v3 - which should help us in our first steps of using NETGEAR FVS318v3
4. Troubleshooting - systematic sequence of activities that will help us diagnose and subsequently solve the most important problems with NETGEAR FVS318v3
5. FAQ - Frequently Asked Questions
6. Contact detailsInformation about where to look for contact to the manufacturer/service of NETGEAR FVS318v3 in a specific country, if it was not possible to solve the problem on our own.

Do you have a question concerning NETGEAR FVS318v3?

Use the form below

If you did not solve your problem by using a manual NETGEAR FVS318v3, ask a question using the form below. If a user had a similar problem with NETGEAR FVS318v3 it is likely that he will want to share the way to solve it.

Copy the text from the picture

Captcha
New picture

Comments (0)