FVS114 Reference Manual
Page 1
Reference Manual for the ProSafe VPN Firewall FVS114 NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10098-01 April 2005 202-10098-01, April 2005
Reference Manual for the ProSafe VPN Firewall FVS114 NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10098-01 April 2005 202-10098-01, April 2005
FVS114 Reference Manual
Page 2
... cause harmful interference to radio or television reception, which the receiver is hereby certified that the FVS114 ProSafe VPN Firewall has been suppressed in a particular installation. NETGEAR does not assume any liability that interference will not occur in accordance with the instructions, may ...registered trademarks or trademarks of their respective holders. EN 55 022 Declaration of Conformance This is to certify that the FVS114 ProSafe VPN Firewall is no guarantee that may cause harmful interference to the use or application of the product(s) or circuit layout(s) described...
... cause harmful interference to radio or television reception, which the receiver is hereby certified that the FVS114 ProSafe VPN Firewall has been suppressed in a particular installation. NETGEAR does not assume any liability that interference will not occur in accordance with the instructions, may ...registered trademarks or trademarks of their respective holders. EN 55 022 Declaration of Conformance This is to certify that the FVS114 ProSafe VPN Firewall is no guarantee that may cause harmful interference to the use or application of the product(s) or circuit layout(s) described...
FVS114 Reference Manual
Page 5
... and Support 2-4 Package Contents ...2-5 The FVS114 Front Panel 2-5 The FVS114 Rear Panel 2-6 NETGEAR-Related Products 2-7 NETGEAR Product Registration, Support, and Documentation 2-7 Chapter 3 Connecting the Firewall to the Internet Prepare to Install Your FVS114 ProSafe VPN Firewall 3-1 First, Connect the FVS114 3-1 Now, Configure the FVS114 for Internet Access 3-4 Troubleshooting Tips ...3-6 Overview of How to Access the FVS114 VPN Firewall 3-7 How to Log On to the...
... and Support 2-4 Package Contents ...2-5 The FVS114 Front Panel 2-5 The FVS114 Rear Panel 2-6 NETGEAR-Related Products 2-7 NETGEAR Product Registration, Support, and Documentation 2-7 Chapter 3 Connecting the Firewall to the Internet Prepare to Install Your FVS114 ProSafe VPN Firewall 3-1 First, Connect the FVS114 3-1 Now, Configure the FVS114 for Internet Access 3-4 Troubleshooting Tips ...3-6 Overview of How to Access the FVS114 VPN Firewall 3-7 How to Log On to the...
FVS114 Reference Manual
Page 6
... the Smart Setup Wizard 3-10 How to Manually Configure Your Internet Connection 3-11 Chapter 4 Firewall Protection and Content Filtering Firewall Protection and Content Filtering Overview 4-1 Block Sites ...4-2 Using Rules to Block or Allow Specific ... Overview of VPN Configuration 5-2 Client-to-Gateway VPN Tunnels 5-2 Gateway-to-Gateway VPN Tunnels 5-2 Planning a VPN ...5-3 VPN Tunnel Configuration 5-5 How to Set Up a Client-to-Gateway VPN Configuration 5-5 Step 1: Configuring the Client-to-Gateway VPN Tunnel on the FVS114 5-6 Step 2: Configuring the NETGEAR ProSafe VPN Client on the...
... the Smart Setup Wizard 3-10 How to Manually Configure Your Internet Connection 3-11 Chapter 4 Firewall Protection and Content Filtering Firewall Protection and Content Filtering Overview 4-1 Block Sites ...4-2 Using Rules to Block or Allow Specific ... Overview of VPN Configuration 5-2 Client-to-Gateway VPN Tunnels 5-2 Gateway-to-Gateway VPN Tunnels 5-2 Planning a VPN ...5-3 VPN Tunnel Configuration 5-5 How to Set Up a Client-to-Gateway VPN Configuration 5-5 Step 1: Configuring the Client-to-Gateway VPN Tunnel on the FVS114 5-6 Step 2: Configuring the NETGEAR ProSafe VPN Client on the...
FVS114 Reference Manual
Page 7
... of Configuration Scenarios on the FVS114 6-14 VPN Consortium Scenario 1: Gateway-to-Gateway with Preshared Secrets 6-15 FVS114 Scenario 1: FVS114 to Gateway B IKE and VPN Policies 6-16 How to Check VPN Connections 6-21 Testing the Gateway A FVS114 LAN and the Gateway B LAN 6-21 FVS114 Scenario 2: FVS114 to FVS114 with RSA Certificates 6-22 Chapter 7 Maintenance Viewing VPN Firewall Status Information 7-1 Viewing a List of...
... of Configuration Scenarios on the FVS114 6-14 VPN Consortium Scenario 1: Gateway-to-Gateway with Preshared Secrets 6-15 FVS114 Scenario 1: FVS114 to Gateway B IKE and VPN Policies 6-16 How to Check VPN Connections 6-21 Testing the Gateway A FVS114 LAN and the Gateway B LAN 6-21 FVS114 Scenario 2: FVS114 to FVS114 with RSA Certificates 6-22 Chapter 7 Maintenance Viewing VPN Firewall Status Information 7-1 Viewing a List of...
FVS114 Reference Manual
Page 9
... C Virtual Private Networking What is a VPN? ...C-1 What Is IPSec and How Does It Work C-2 IPSec Security Features C-2 IPSec Components C-2 Encapsulating Security Payload (ESP C-3 Authentication Header (AH C-4 IKE Security Association C-4 Mode ...C-5 Key Management ...C-6 Understand the Process Before You Begin C-6 VPN Process Overview C-7 Network Interfaces and Addresses C-7 Interface Addressing C-7 Firewalls ...C-8 Contents ix 202-10098-01...
... C Virtual Private Networking What is a VPN? ...C-1 What Is IPSec and How Does It Work C-2 IPSec Security Features C-2 IPSec Components C-2 Encapsulating Security Payload (ESP C-3 Authentication Header (AH C-4 IKE Security Association C-4 Mode ...C-5 Key Management ...C-6 Understand the Process Before You Begin C-6 VPN Process Overview C-7 Network Interfaces and Addresses C-7 Interface Addressing C-7 Firewalls ...C-8 Contents ix 202-10098-01...
FVS114 Reference Manual
Page 10
VPN Tunnel Between Gateways C-8 VPNC IKE Security Parameters C-10 VPNC IKE Phase I Parameters C-10 VPNC IKE Phase II Parameters C-11 Testing and Troubleshooting C-11 Additional Reading ...C-...
VPN Tunnel Between Gateways C-8 VPNC IKE Security Parameters C-10 VPNC IKE Phase I Parameters C-10 VPNC IKE Phase II Parameters C-11 Testing and Troubleshooting C-11 Additional Reading ...C-...
FVS114 Reference Manual
Page 13
... the Appendices and on the NETGEAR, Inc. Web site at http://kbserver.netgear.com/products/FVS114.asp. Manual Scope Product Version Manual Publication Date FVS114 ProSafe VPN Firewall April 2005 Note: Product updates are available on the NETGEAR Web site. However, basic computer network, Internet, firewall, and VPN technologies tutorial information is written for the FVS114 VPN Firewall according to intermediate computer and...
... the Appendices and on the NETGEAR, Inc. Web site at http://kbserver.netgear.com/products/FVS114.asp. Manual Scope Product Version Manual Publication Date FVS114 ProSafe VPN Firewall April 2005 Note: Product updates are available on the NETGEAR Web site. However, basic computer network, Internet, firewall, and VPN technologies tutorial information is written for the FVS114 VPN Firewall according to intermediate computer and...
FVS114 Reference Manual
Page 14
... manual. •A button to PDF versions of the full manual and individual chapters. 1-2 About This Manual 202-10098-01, April 2005 Reference Manual for the ProSafe VPN Firewall FVS114 How to Use This Manual The HTML version of this manual includes the following: • Buttons, and , for the product model. • Links to access...
... manual. •A button to PDF versions of the full manual and individual chapters. 1-2 About This Manual 202-10098-01, April 2005 Reference Manual for the ProSafe VPN Firewall FVS114 How to Use This Manual The HTML version of this manual includes the following: • Buttons, and , for the product model. • Links to access...
FVS114 Reference Manual
Page 15
... top right of the window. Click the print icon in the HTML View. About This Manual 1-3 202-10098-01, April 2005 Reference Manual for the ProSafe VPN Firewall FVS114 How to Print this Manual To print this manual you can save paper and printer ink by selecting this feature.
... top right of the window. Click the print icon in the HTML View. About This Manual 1-3 202-10098-01, April 2005 Reference Manual for the ProSafe VPN Firewall FVS114 How to Print this Manual To print this manual you can save paper and printer ink by selecting this feature.
FVS114 Reference Manual
Page 16
Reference Manual for the ProSafe VPN Firewall FVS114 1-4 About This Manual 202-10098-01, April 2005
Reference Manual for the ProSafe VPN Firewall FVS114 1-4 About This Manual 202-10098-01, April 2005
FVS114 Reference Manual
Page 17
...packet inspection for up to 253 users. Parents and network administrators can install and use the firewall within minutes. The FVS114 VPN Firewall provides the following features: • Easy, Web-based setup for up to 253 personal ...you from attacks and intrusions. The FVS114 VPN Firewall provides you with four-port switch connects your network from hackers. Key Features of the NETGEAR FVS114 ProSafe VPN Firewall. Chapter 2 Introduction This chapter describes the features of the VPN Firewall The FVS114 ProSafe VPN Firewall with multiple Web content filtering options...
...packet inspection for up to 253 users. Parents and network administrators can install and use the firewall within minutes. The FVS114 VPN Firewall provides the following features: • Easy, Web-based setup for up to 253 personal ...you from attacks and intrusions. The FVS114 VPN Firewall provides you with four-port switch connects your network from hackers. Key Features of the NETGEAR FVS114 ProSafe VPN Firewall. Chapter 2 Introduction This chapter describes the features of the VPN Firewall The FVS114 ProSafe VPN Firewall with multiple Web content filtering options...
FVS114 Reference Manual
Page 18
... whenever a significant event occurs. • With its content filtering feature, the FVS114 prevents objectionable content from reaching your LAN to one designated "DNS" host computer. Reference Manual for the ProSafe VPN Firewall FVS114 A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT firewalls, the FVS114 is equipped with NAT Although NAT prevents Internet locations from directly...
... whenever a significant event occurs. • With its content filtering feature, the FVS114 prevents objectionable content from reaching your LAN to one designated "DNS" host computer. Reference Manual for the ProSafe VPN Firewall FVS114 A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT firewalls, the FVS114 is equipped with NAT Although NAT prevents Internet locations from directly...
FVS114 Reference Manual
Page 19
...to-Point Protocol over Ethernet (PPPoE) PPPoE is enabled and no DNS addresses are autosensing and capable of Attached PCs by DHCP The FVS114 VPN Firewall dynamically assigns network configuration information, including IP, gateway, and Domain Name Server (DNS) addresses, to attached PCs on the LAN using...an uplink connection such as Entersys or WinPOET on your local network. • DNS Proxy When DHCP is a protocol for the ProSafe VPN Firewall FVS114 Autosensing Ethernet Connections with Auto Uplink With its own address as a DNS server to the attached PCs. This feature also eliminates ...
...to-Point Protocol over Ethernet (PPPoE) PPPoE is enabled and no DNS addresses are autosensing and capable of Attached PCs by DHCP The FVS114 VPN Firewall dynamically assigns network configuration information, including IP, gateway, and Domain Name Server (DNS) addresses, to attached PCs on the LAN using...an uplink connection such as Entersys or WinPOET on your local network. • DNS Proxy When DHCP is a protocol for the ProSafe VPN Firewall FVS114 Autosensing Ethernet Connections with Auto Uplink With its own address as a DNS server to the attached PCs. This feature also eliminates ...
FVS114 Reference Manual
Page 20
... provided and online help you can install, configure, and operate the FVS114 ProSafe VPN Firewall within minutes after connecting it to easily configure your use of ISP account. • Diagnostic functions The firewall incorporates built-in diagnostic functions such as Windows, Macintosh, or Linux....The FVS114 VPN Firewall's front panel LEDs provide an easy way to monitor its status and activity. Reference Manual for firmware upgrade. • Free technical support seven days a week, 24 hours a day. 2-4 Introduction 202-10098-01, April 2005 Maintenance and Support NETGEAR offers ...
... provided and online help you can install, configure, and operate the FVS114 ProSafe VPN Firewall within minutes after connecting it to easily configure your use of ISP account. • Diagnostic functions The firewall incorporates built-in diagnostic functions such as Windows, Macintosh, or Linux....The FVS114 VPN Firewall's front panel LEDs provide an easy way to monitor its status and activity. Reference Manual for firmware upgrade. • Free technical support seven days a week, 24 hours a day. 2-4 Introduction 202-10098-01, April 2005 Maintenance and Support NETGEAR offers ...
FVS114 Reference Manual
Page 21
..., or damaged, contact your NETGEAR dealer. Viewed from left to return the firewall for ProSafe VPN Firewall, including: - The FVS114 Front Panel The front panel of the firewall. Application Notes and other helpful information. • Registration and Warranty Card. Package Contents Reference Manual for the ProSafe VPN Firewall FVS114 The product package should contain the following items: • FVS114 ProSafe VPN Firewall. • AC power...
..., or damaged, contact your NETGEAR dealer. Viewed from left to return the firewall for ProSafe VPN Firewall, including: - The FVS114 Front Panel The front panel of the firewall. Application Notes and other helpful information. • Registration and Warranty Card. Package Contents Reference Manual for the ProSafe VPN Firewall FVS114 The product package should contain the following items: • FVS114 ProSafe VPN Firewall. • AC power...
FVS114 Reference Manual
Page 22
...is operating at 100 Mbps. The Local port is being transmitted or received by the Local port. The FVS114 Rear Panel The rear panel of the FVS114 VPN Firewall contains the port connections listed below. The system is being transmitted or received by the Internet port. Data ... contains the following features: • Factory default reset push button • Eight Ethernet LAN ports • Internet Ethernet WAN port for the ProSafe VPN Firewall FVS114 Table 2-1. LED Descriptions LED Label PWR TEST INTERNET 100 (100 Mbps) LINK/ACT (Link/Activity) LOCAL 100 (100 Mbps) LINK/ACT (...
...is operating at 100 Mbps. The Local port is being transmitted or received by the Local port. The FVS114 Rear Panel The rear panel of the FVS114 VPN Firewall contains the port connections listed below. The system is being transmitted or received by the Internet port. Data ... contains the following features: • Factory default reset push button • Eight Ethernet LAN ports • Internet Ethernet WAN port for the ProSafe VPN Firewall FVS114 Table 2-1. LED Descriptions LED Label PWR TEST INTERNET 100 (100 Mbps) LINK/ACT (Link/Activity) LOCAL 100 (100 Mbps) LINK/ACT (...
FVS114 Reference Manual
Page 23
... and Web support are listed in the following table: Table 2-2. Reference Manual for the ProSafe VPN Firewall FVS114 • DC power input • ON/OFF switch NETGEAR-Related Products NETGEAR products related to the FVS114 are always available by going to: http://kbserver.netgear.com. Registration is required before you can use our telephone support service. Introduction 2-7 202...
... and Web support are listed in the following table: Table 2-2. Reference Manual for the ProSafe VPN Firewall FVS114 • DC power input • ON/OFF switch NETGEAR-Related Products NETGEAR products related to the FVS114 are always available by going to: http://kbserver.netgear.com. Registration is required before you can use our telephone support service. Introduction 2-7 202...
FVS114 Reference Manual
Page 24
When the VPN firewall router is available on the Resource CD and at http://kbserver.netgear.com. Reference Manual for the ProSafe VPN Firewall FVS114 Documentation is connected to the Internet, click the Knowledge Base or the Documentation link under the Web Support menu to view support information or the documentation for the VPN firewall router. 2-8 Introduction 202-10098-01, April 2005
When the VPN firewall router is available on the Resource CD and at http://kbserver.netgear.com. Reference Manual for the ProSafe VPN Firewall FVS114 Documentation is connected to the Internet, click the Knowledge Base or the Documentation link under the Web Support menu to view support information or the documentation for the VPN firewall router. 2-8 Introduction 202-10098-01, April 2005
FVS114 Reference Manual
Page 25
... name/e-mail address and password in order to complete the VPN firewall router setup. Prepare to Install Your FVS114 ProSafe VPN Firewall • For Cable Modem Service: When you perform the VPN firewall router setup steps be sure to use the computer you first registered with the contents of your FVS114 ProSafe VPN Firewall using the Setup Wizard, or how to manually configure your...
... name/e-mail address and password in order to complete the VPN firewall router setup. Prepare to Install Your FVS114 ProSafe VPN Firewall • For Cable Modem Service: When you perform the VPN firewall router setup steps be sure to use the computer you first registered with the contents of your FVS114 ProSafe VPN Firewall using the Setup Wizard, or how to manually configure your...