FVS114 Reference Manual
Page 7
...-to-Gateway with Preshared Secrets 6-15 FVS114 Scenario 1: FVS114 to Gateway B IKE and VPN Policies 6-16 How to Check VPN Connections 6-21 Testing the Gateway A FVS114 LAN and the Gateway B LAN 6-21 FVS114 Scenario 2: FVS114 to FVS114 with RSA Certificates 6-22 Chapter 7 Maintenance Viewing VPN Firewall Status Information 7-1 Viewing a List of Attached Devices 7-5 Upgrading the Firewall Software 7-5 Configuration File Management 7-6 Backing Up...
...-to-Gateway with Preshared Secrets 6-15 FVS114 Scenario 1: FVS114 to Gateway B IKE and VPN Policies 6-16 How to Check VPN Connections 6-21 Testing the Gateway A FVS114 LAN and the Gateway B LAN 6-21 FVS114 Scenario 2: FVS114 to FVS114 with RSA Certificates 6-22 Chapter 7 Maintenance Viewing VPN Firewall Status Information 7-1 Viewing a List of Attached Devices 7-5 Upgrading the Firewall Software 7-5 Configuration File Management 7-6 Backing Up...
FVS114 Reference Manual
Page 23
... 30 m lengths VPN01L and VPN05L ProSafe VPN Client Software NETGEAR Product Registration, Support, and Documentation Register your product at http://www.NETGEAR.com/register. Registration is required before you can use our telephone support service. Product updates and Web support are listed in the following table: Table 2-2. Reference Manual for the ProSafe VPN Firewall FVS114 • DC power input...
... 30 m lengths VPN01L and VPN05L ProSafe VPN Client Software NETGEAR Product Registration, Support, and Documentation Register your product at http://www.NETGEAR.com/register. Registration is required before you can use our telephone support service. Product updates and Web support are listed in the following table: Table 2-2. Reference Manual for the ProSafe VPN Firewall FVS114 • DC power input...
FVS114 Reference Manual
Page 27
... with your VPN firewall router (the blue NETGEAR cable in the diagram below) into a LOCAL port on the firewall such as LOCAL port 4 (point C in the diagram), and the other end into the Ethernet port of your computer (point D in the power cord to the Internet 3-3 202-10098-01, April 2005 b. Reference Manual for the ProSafe VPN Firewall FVS114 f.
... with your VPN firewall router (the blue NETGEAR cable in the diagram below) into a LOCAL port on the firewall such as LOCAL port 4 (point C in the diagram), and the other end into the Ethernet port of your computer (point D in the power cord to the Internet 3-3 202-10098-01, April 2005 b. Reference Manual for the ProSafe VPN Firewall FVS114 f.
FVS114 Reference Manual
Page 58
... VPN Configuration Two common scenarios for the ProSafe VPN Firewall FVS114 Overview of VPN configurations. Client-to-Gateway VPN Tunnels Client-to an office network (see Figure 5-2). 5-2 Basic Virtual Private Networking 202-10098-01, April 2005 In this configuration. Reference Manual for configuring VPN ...Gateway VPN Configuration" on your network from a remote PC, such as a branch or home office and a main office (see Figure 5-1). See "How to Set Up a Client-to your network is one tunnel endpoint, running the VPN client software. The FVS114 VPN Firewall supports...
... VPN Configuration Two common scenarios for the ProSafe VPN Firewall FVS114 Overview of VPN configurations. Client-to-Gateway VPN Tunnels Client-to an office network (see Figure 5-2). 5-2 Basic Virtual Private Networking 202-10098-01, April 2005 In this configuration. Reference Manual for configuring VPN ...Gateway VPN Configuration" on your network from a remote PC, such as a branch or home office and a main office (see Figure 5-1). See "How to Set Up a Client-to your network is one tunnel endpoint, running the VPN client software. The FVS114 VPN Firewall supports...
FVS114 Reference Manual
Page 60
...for the ProSafe VPN Firewall FVS114 FQDNs supplied by encrypting the data three times using VPNC defaults (see Chapter 6, "Advanced Virtual Private Networking") Table 5-1. SHA-1 - 160 bits, slower but less secure. - Otherwise, the side using a 56 bit key. The VPN Wizard using...achieves a higher level of security by Dynamic DNS providers can allow a VPN endpoint with various gateway and client software products. 5-4 Basic Virtual Private Networking 202-10098-01, April 2005 Note: NETGEAR publishes additional interoperability scenarios with a dynamic IP address to initiate or respond...
...for the ProSafe VPN Firewall FVS114 FQDNs supplied by encrypting the data three times using VPNC defaults (see Chapter 6, "Advanced Virtual Private Networking") Table 5-1. SHA-1 - 160 bits, slower but less secure. - Otherwise, the side using a 56 bit key. The VPN Wizard using...achieves a higher level of security by Dynamic DNS providers can allow a VPN endpoint with various gateway and client software products. 5-4 Basic Virtual Private Networking 202-10098-01, April 2005 Note: NETGEAR publishes additional interoperability scenarios with a dynamic IP address to initiate or respond...
FVS114 Reference Manual
Page 65
... off any virus protection or firewall software you may have a modem or dial-up adapter installed in this message. The system should show the ProSafe icon ( ) in the Product Quick Find drop-down menu for the ProSafe VPN Firewall FVS114 Step 2: Configuring the NETGEAR ProSafe VPN Client on the remote PC and reboot. Run the NETGEAR ProSafe Security Policy Editor program and...
... off any virus protection or firewall software you may have a modem or dial-up adapter installed in this message. The system should show the ProSafe icon ( ) in the Product Quick Find drop-down menu for the ProSafe VPN Firewall FVS114 Step 2: Configuring the NETGEAR ProSafe VPN Client on the remote PC and reboot. Run the NETGEAR ProSafe Security Policy Editor program and...
FVS114 Reference Manual
Page 67
... the Subnet field as the LAN Subnet Mask of the FVS114. a. My Identity and Security Policy subheadings appear below the ID Type menu. Select the Main Mode in the NETGEAR ProSafe VPN Client software. Click on the "+" symbol. In this example, 22....23.24.25 would be used. Select All in the field directly below the connection name. Enter the public WAN IP Address of the FVS114. Figure 5-11: Security Policy Editor Security Policy c. Reference Manual for the ProSafe VPN Firewall FVS114...
... the Subnet field as the LAN Subnet Mask of the FVS114. a. My Identity and Security Policy subheadings appear below the ID Type menu. Select the Main Mode in the NETGEAR ProSafe VPN Client software. Click on the "+" symbol. In this example, 22....23.24.25 would be used. Select All in the field directly below the connection name. Enter the public WAN IP Address of the FVS114. Figure 5-11: Security Policy Editor Security Policy c. Reference Manual for the ProSafe VPN Firewall FVS114...
FVS114 Reference Manual
Page 103
... for the ProSafe VPN Firewall FVS114 The PC must have the NETGEAR ProSafe VPN Client program installed that uses a preshared secret for information on your PC. The IKE Phase 1 parameters used for testing IPsec but is a typical gateway-to the Internet. Note: Before installing the NETGEAR ProSafe VPN Client software, be sure to turn off any virus protection or firewall software you may...
... for the ProSafe VPN Firewall FVS114 The PC must have the NETGEAR ProSafe VPN Client program installed that uses a preshared secret for information on your PC. The IKE Phase 1 parameters used for testing IPsec but is a typical gateway-to the Internet. Note: Before installing the NETGEAR ProSafe VPN Client software, be sure to turn off any virus protection or firewall software you may...
FVS114 Reference Manual
Page 121
...available), and Ethernet MAC address. NETGEAR recommends using your browser. From the main menu of the browser interface, under the Maintenance heading, select the Router Upgrade heading to look for the ProSafe VPN Firewall FVS114 Viewing a List of Attached ...Devices The Attached Devices menu contains a table of the FVS114 VPN Firewall is stored in FLASH memory, and can be downloaded from NETGEAR's Web site. The upgrade file can be upgraded as new software is lost until the firewall...
...available), and Ethernet MAC address. NETGEAR recommends using your browser. From the main menu of the browser interface, under the Maintenance heading, select the Router Upgrade heading to look for the ProSafe VPN Firewall FVS114 Viewing a List of Attached ...Devices The Attached Devices menu contains a table of the FVS114 VPN Firewall is stored in FLASH memory, and can be downloaded from NETGEAR's Web site. The upgrade file can be upgraded as new software is lost until the firewall...
FVS114 Reference Manual
Page 122
...NETGEAR. 2. This file can be saved (backed up the menu shown below. 7-6 Maintenance 202-10098-01, April 2005 Download and unzip the new software file from the user's PC, or cleared to the location of the FVS114 VPN Firewall are stored within the firewall in a configuration file. Click Upload. In the Router... the Settings Backup heading to reconfigure the firewall after upgrading. Reference Manual for the ProSafe VPN Firewall FVS114 Figure 7-5: Router Upgrade menu To upload new firmware: 1. Note: When uploading software to the FVS114 VPN Firewall, it may need to bring up )...
...NETGEAR. 2. This file can be saved (backed up the menu shown below. 7-6 Maintenance 202-10098-01, April 2005 Download and unzip the new software file from the user's PC, or cleared to the location of the FVS114 VPN Firewall are stored within the firewall in a configuration file. Click Upload. In the Router... the Settings Backup heading to reconfigure the firewall after upgrading. Reference Manual for the ProSafe VPN Firewall FVS114 Figure 7-5: Router Upgrade menu To upload new firmware: 1. Note: When uploading software to the FVS114 VPN Firewall, it may need to bring up )...
FVS114 Reference Manual
Page 146
...LAN port LED is not functioning correctly, you could have one of the following problems: • Wrong physical connections - Reference Manual for the ProSafe VPN Firewall FVS114 If the path is working, you see this message: Reply from < IP address >: bytes=32 time=NN ms TTL=xxx If the ... has the IP address of your PC or workstation. - Testing the Path from Your PC to your workstation and firewall. • Wrong network configuration - Verify that the Ethernet card driver software and TCP/IP software are both installed and configured on your firewall listed as your ISP's DNS server.
...LAN port LED is not functioning correctly, you could have one of the following problems: • Wrong physical connections - Reference Manual for the ProSafe VPN Firewall FVS114 If the path is working, you see this message: Reply from < IP address >: bytes=32 time=NN ms TTL=xxx If the ... has the IP address of your PC or workstation. - Testing the Path from Your PC to your workstation and firewall. • Wrong network configuration - Verify that the Ethernet card driver software and TCP/IP software are both installed and configured on your firewall listed as your ISP's DNS server.
FVS114 Reference Manual
Page 153
... have different ways of determining the network and host sections of the address, allowing for the ProSafe VPN Firewall FVS114 The latter version is used by the TCP/IP software to 65,354 hosts on a network. A Class B address uses a 16-bit network number and a 16-bit node number. These address classes have up to identify...
... have different ways of determining the network and host sections of the address, allowing for the ProSafe VPN Firewall FVS114 The latter version is used by the TCP/IP software to 65,354 hosts on a network. A Class B address uses a 16-bit network number and a 16-bit node number. These address classes have up to identify...
FVS114 Reference Manual
Page 175
... IPSec software on both gateways. 1. Virtual Private Networking C-9 202-10098-01, April 2005 Each gateway must negotiate its SA with Host B. VPN Gateway IPSec Security Association IKE VPN Tunnel Negotiation Steps 1) Communication request sent to VPN Gateway 2) IKE Phase I authentication VPN Gateway...computers then begin the Internet Key Exchange (IKE) process. Reference Manual for the ProSafe VPN Firewall FVS114 VPN Gateway A VPN Tunnel VPN Gateway B PCs PCs Figure C-5: VPN tunnel Security Associaton (SA) The SA contains all the information necessary for gateway A to as ...
... IPSec software on both gateways. 1. Virtual Private Networking C-9 202-10098-01, April 2005 Each gateway must negotiate its SA with Host B. VPN Gateway IPSec Security Association IKE VPN Tunnel Negotiation Steps 1) Communication request sent to VPN Gateway 2) IKE Phase I authentication VPN Gateway...computers then begin the Internet Key Exchange (IKE) process. Reference Manual for the ProSafe VPN Firewall FVS114 VPN Gateway A VPN Tunnel VPN Gateway B PCs PCs Figure C-5: VPN tunnel Security Associaton (SA) The SA contains all the information necessary for gateway A to as ...
FVS114 Reference Manual
Page 179
... access the Internet using instructions provided by your ISP, you need for networking with your operating system or networking software to verify the readiness of your firewall. Preparing Your Computers for establishing a TCP/IP network. • All versions of a broadband modem, or ... • Windows® 95 or later includes the software components for further information. Appendix D Preparing Your Network This appendix describes how to prepare your network to connect to the Internet through the FVS114 ProSafe VPN Firewall and how to install TCP/IP on your computer. ...
... access the Internet using instructions provided by your ISP, you need for networking with your operating system or networking software to verify the readiness of your firewall. Preparing Your Computers for establishing a TCP/IP network. • All versions of a broadband modem, or ... • Windows® 95 or later includes the software components for further information. Appendix D Preparing Your Network This appendix describes how to prepare your network to connect to the Internet through the FVS114 ProSafe VPN Firewall and how to install TCP/IP on your computer. ...