FVS318G Installation Guide
Page 1
Prepare to Install Your VPN firewall • For Cable Modem Service. You may need information such as the DSL login name/e-mail address and password in the browser address bar and click Enter. c. Securely insert the yellow cable that the computer is still on ... configure the FVS318G. 1. The Test light goes on when the router is securely attached to the FVS318G Internet port and the modem. Disconnect the cable at http://kbserver.netgear.com. Each local LAN port has two LEDs. Now, plug in the diagram. )NSTALLATION'UIDE ProSafe Gigabit 8 Port VPN Firewall FVS318G Start Here ...
Prepare to Install Your VPN firewall • For Cable Modem Service. You may need information such as the DSL login name/e-mail address and password in the browser address bar and click Enter. c. Securely insert the yellow cable that the computer is still on ... configure the FVS318G. 1. The Test light goes on when the router is securely attached to the FVS318G Internet port and the modem. Disconnect the cable at http://kbserver.netgear.com. Each local LAN port has two LEDs. Now, plug in the diagram. )NSTALLATION'UIDE ProSafe Gigabit 8 Port VPN Firewall FVS318G Start Here ...
FVS318G Installation Guide
Page 2
... , reset the firewall as the user name and password for your network in securely and the modem and FVS318G are registered trademarks of their respective holders. Make sure the Ethernet cables are trademarks or registered trademarks of NETGEAR, Inc. The FVS318G will be treated and...Ethernet cable, the corresponding FVS318G LAN port LED will automatically detect your jurisdiction implementing the WEEE Directive. © 2009 by selecting Network Configuration > LAN Settings > LAN Groups and editing the address. in the Reference Manual. The Router Status window will be ...
... , reset the firewall as the user name and password for your network in securely and the modem and FVS318G are registered trademarks of their respective holders. Make sure the Ethernet cables are trademarks or registered trademarks of NETGEAR, Inc. The FVS318G will be treated and...Ethernet cable, the corresponding FVS318G LAN port LED will automatically detect your jurisdiction implementing the WEEE Directive. © 2009 by selecting Network Configuration > LAN Settings > LAN Groups and editing the address. in the Reference Manual. The Router Status window will be ...
FVS318G User Manual
Page 5
... and Support 1-4 Package Contents ...1-5 Front Panel Features ...1-5 Rear Panel Features ...1-7 Default IP Address, Login Name, and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS318G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring...
... and Support 1-4 Package Contents ...1-5 Front Panel Features ...1-5 Rear Panel Features ...1-7 Default IP Address, Login Name, and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS318G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring...
FVS318G User Manual
Page 7
... FVS318G VPN Connection Status and Logs 5-13 Managing VPN Policies 5-14 Managing IKE Policies 5-14 Managing VPN Policies 5-16 Configuring Extended Authentication (XAUTH 5-17 Configuring XAUTH for VPN Clients 5-18 User Database Configuration 5-19 RADIUS Client Configuration 5-19 Assigning IP Addresses to Remote Users (ModeConfig 5-21 Mode Config Operation 5-22 Configuring the VPN Firewall Router 5-22 Configuring the ProSafe VPN...
... FVS318G VPN Connection Status and Logs 5-13 Managing VPN Policies 5-14 Managing IKE Policies 5-14 Managing VPN Policies 5-16 Configuring Extended Authentication (XAUTH 5-17 Configuring XAUTH for VPN Clients 5-18 User Database Configuration 5-19 RADIUS Client Configuration 5-19 Assigning IP Addresses to Remote Users (ModeConfig 5-21 Mode Config Operation 5-22 Configuring the VPN Firewall Router 5-22 Configuring the ProSafe VPN...
FVS318G User Manual
Page 8
...Features That Reduce Traffic 7-2 Features That Increase Traffic 7-5 Using QoS to Shift the Traffic Mix 7-7 Tools for Traffic Management 7-8 Changing Passwords and Administrator Settings 7-8 Enabling Remote Management Access 7-10 Using the Command Line Interface 7-13 Using an SNMP Manager 7-13 Configuration File...the ISP Connection 8-4 Troubleshooting a TCP/IP Network Using a Ping Utility 8-5 Testing the LAN Path to Your VPN Firewall Router 8-5 Testing the Path from Your PC to a Remote Device 8-6 Restoring the Default Configuration and Password 8-7 viii Contents 1.1 November, 2009
...Features That Reduce Traffic 7-2 Features That Increase Traffic 7-5 Using QoS to Shift the Traffic Mix 7-7 Tools for Traffic Management 7-8 Changing Passwords and Administrator Settings 7-8 Enabling Remote Management Access 7-10 Using the Command Line Interface 7-13 Using an SNMP Manager 7-13 Configuration File...the ISP Connection 8-4 Troubleshooting a TCP/IP Network Using a Ping Utility 8-5 Testing the LAN Path to Your VPN Firewall Router 8-5 Testing the Path from Your PC to a Remote Device 8-6 Restoring the Default Configuration and Password 8-7 viii Contents 1.1 November, 2009
FVS318G User Manual
Page 15
...the VPN Firewall Router The VPN firewall provides the following features: • Easy, Web-based setup for up to 253 users. The FVS318G is a complete security solution that rely on page 1-8 Key Features of Gigabit Ethernet LAN and WAN ports ensures extremely high data transfer ...speeds. In addition to the Internet through an external access device such as a cable modem or DSL modem. Chapter 1 Introduction The ProSafe VPN Firewall connects your network from hackers. Unlike simple Internet sharing firewalls...
...the VPN Firewall Router The VPN firewall provides the following features: • Easy, Web-based setup for up to 253 users. The FVS318G is a complete security solution that rely on page 1-8 Key Features of Gigabit Ethernet LAN and WAN ports ensures extremely high data transfer ...speeds. In addition to the Internet through an external access device such as a cable modem or DSL modem. Chapter 1 Introduction The ProSafe VPN Firewall connects your network from hackers. Unlike simple Internet sharing firewalls...
FVS318G User Manual
Page 21
... the front panel TEST light flashes to reset the VPN firewall to factory default settings. All configuration settings will be lost and the default password will be restored. • DC power receptacle: 12V @ 1.5A. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual Rear Panel Features The rear panel of the ProSafe VPN Firewall includes a cable lock receptacle, and reset factory defaults...
... the front panel TEST light flashes to reset the VPN firewall to factory default settings. All configuration settings will be lost and the default password will be restored. • DC power receptacle: 12V @ 1.5A. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual Rear Panel Features The rear panel of the ProSafe VPN Firewall includes a cable lock receptacle, and reset factory defaults...
FVS318G User Manual
Page 22
ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS318G's enclosure if you need a reminder of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe VPN Firewall, an administrator must use Internet Explorer 5.1 or higher, Apple Safari 1.2 or higher, or Mozilla Firefox l.x Web browser with JavaScript, and cookies enabled. 1-8 Introduction 1.1 November, 2009
ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS318G's enclosure if you need a reminder of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe VPN Firewall, an administrator must use Internet Explorer 5.1 or higher, Apple Safari 1.2 or higher, or Mozilla Firefox l.x Web browser with JavaScript, and cookies enabled. 1-8 Introduction 1.1 November, 2009
FVS318G User Manual
Page 23
Chapter 2 Connecting the FVS318G to the Internet The ... Configure your network. See the installation guide for complete steps. A PDF of the ProSafe VPN Firewall is on the NETGEAR website at: http:// kbserver.netgear.com. 2. See "Logging into the VPN Firewall Router Router" on page 2-2 • "Navigating the Menus" on page 2-3 • "...the Internet connections to set up and configure your password and enable remote management at this chapter. Configure the WAN mode. After logging in to the VPN Firewall Router. Configure dynamic DNS on page 2-15 Understanding the ...
Chapter 2 Connecting the FVS318G to the Internet The ... Configure your network. See the installation guide for complete steps. A PDF of the ProSafe VPN Firewall is on the NETGEAR website at: http:// kbserver.netgear.com. 2. See "Logging into the VPN Firewall Router Router" on page 2-2 • "Navigating the Menus" on page 2-3 • "...the Internet connections to set up and configure your password and enable remote management at this chapter. Configure the WAN mode. After logging in to the VPN Firewall Router. Configure dynamic DNS on page 2-15 Understanding the ...
FVS318G User Manual
Page 24
...FVS318G to obtain an IP address automatically from the VPN firewall by DHCP. Logging into the VPN Firewall Router Router To connect to the VPN firewall, your computer for DHCP, refer to the VPN firewall follow these tasks is detailed separately in "Qualified Web Browsers" on page 1-8. 2. Enter http://192.168.1.1 in the browser. Each of these steps: 1. In the Password... default MTU size and port speed. The Manager login features appear in the address field. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual 6. Configure the WAN options (optional). Figure 2-1 3.
...FVS318G to obtain an IP address automatically from the VPN firewall by DHCP. Logging into the VPN Firewall Router Router To connect to the VPN firewall, your computer for DHCP, refer to the VPN firewall follow these tasks is detailed separately in "Qualified Web Browsers" on page 1-8. 2. Enter http://192.168.1.1 in the browser. Each of these steps: 1. In the Password... default MTU size and port speed. The Manager login features appear in the address field. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual 6. Configure the WAN options (optional). Figure 2-1 3.
FVS318G User Manual
Page 28
...Data Required No data is successful, a status bar at the bottom of connection methods and suggest one that requires input from you for a range of the menu. If Auto Detect does not find a connection, you will prompt you , it will be prompted to (1) check the physical connection between your VPN firewall... and the cable or DSL line, or to (2) check your ISP appears to the Internet 1.1 November, 2009 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual 2. Auto Detect will probe the WAN port for the information. b. Login (Username, Password);
...Data Required No data is successful, a status bar at the bottom of connection methods and suggest one that requires input from you for a range of the menu. If Auto Detect does not find a connection, you will prompt you , it will be prompted to (1) check the physical connection between your VPN firewall... and the cable or DSL line, or to (2) check your ISP appears to the Internet 1.1 November, 2009 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual 2. Auto Detect will probe the WAN port for the information. b. Login (Username, Password);
FVS318G User Manual
Page 30
...required, click No and ignore the Login and Password fields. 3. In the ISP Login options, choose one of ISP connection you clicked Yes, enter the ISP-provided Login and Password information. 4. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual To manually configure your ISP will... require an initial login.) 2-8 Connecting the FVS318G to establish an Internet connection, click Yes (this is the ...
...required, click No and ignore the Login and Password fields. 3. In the ISP Login options, choose one of ISP connection you clicked Yes, enter the ISP-provided Login and Password information. 4. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual To manually configure your ISP will... require an initial login.) 2-8 Connecting the FVS318G to establish an Internet connection, click Yes (this is the ...
FVS318G User Manual
Page 37
... screen will cause *.yourhost.dyndns.org to be aliased to enable a periodic update. 6. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual a. If your account from the main menu. Connecting the FVS318G to save your URL, you want to change often, you can select the Update every ...30 days check box to the same IP address as yourhost.dyndns.org c. The Broadband Options tab is displayed. Enter the account information for the service you have chosen (for example, user name, password...
... screen will cause *.yourhost.dyndns.org to be aliased to enable a periodic update. 6. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual a. If your account from the main menu. Connecting the FVS318G to save your URL, you want to change often, you can select the Update every ...30 days check box to the same IP address as yourhost.dyndns.org c. The Broadband Options tab is displayed. Enter the account information for the service you have chosen (for example, user name, password...
FVS318G User Manual
Page 59
...the desired action: • Always - Using a bandwidth profile, bandwidth consumed by this rule, whether it matches or not. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual Table 4-2. See "Configuring a Bandwidth Profile" on page 4-30. Remember that are unsure, refer to run any ...as a Web or FTP server) from your VPN firewall. Your ISP may periodically check for your ISP. We also recommend enabling the server's application security and configuring user password or privilege levels, if provided. Firewall Protection and Content Filtering 4-7 1.1 November, 2009...
...the desired action: • Always - Using a bandwidth profile, bandwidth consumed by this rule, whether it matches or not. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual Table 4-2. See "Configuring a Bandwidth Profile" on page 4-30. Remember that are unsure, refer to run any ...as a Web or FTP server) from your VPN firewall. Your ISP may periodically check for your ISP. We also recommend enabling the server's application security and configuring user password or privilege levels, if provided. Firewall Protection and Content Filtering 4-7 1.1 November, 2009...
FVS318G User Manual
Page 104
... ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual • IPsec Host. Note: You cannot modify an existing IKE policy to add XAUTH while the IKE policy is displayed. Select VPN > IPsec VPN from the pulldown menu which will be associated with this gateway. Figure 5-18 3. Configuring XAUTH for VPN ...by the remote gateway, enter a User Name and Password to a RADIUS server. Note: If a RADIUS-PAP server is not present, the VPN firewall will first check the local User Database for authenticating this IKE policy. The VPN policy must enable a RADIUS-CHAP or RADIUS-PAP...
... ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual • IPsec Host. Note: You cannot modify an existing IKE policy to add XAUTH while the IKE policy is displayed. Select VPN > IPsec VPN from the pulldown menu which will be associated with this gateway. Figure 5-18 3. Configuring XAUTH for VPN ...by the remote gateway, enter a User Name and Password to a RADIUS server. Note: If a RADIUS-PAP server is not present, the VPN firewall will first check the local User Database for authenticating this IKE policy. The VPN policy must enable a RADIUS-CHAP or RADIUS-PAP...
FVS318G User Manual
Page 105
... username/password or some users to verify against a local User Database (if RADIUS-PAP is selected, the VPN firewall will first check in the network when a user requests access to network resources. Select VPN > VPN Client from the main menu. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference ...Client Configuration" on page 5-19). • IPsec Host if you use this information first against the VPN firewall's user database. In the adjacent Username and Password fields, type in a network. RADIUS Client Configuration RADIUS (Remote Authentication Dial In User Service, RFC 2865...
... username/password or some users to verify against a local User Database (if RADIUS-PAP is selected, the VPN firewall will first check in the network when a user requests access to network resources. Select VPN > VPN Client from the main menu. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference ...Client Configuration" on page 5-19). • IPsec Host if you use this information first against the VPN firewall's user database. In the adjacent Username and Password fields, type in a network. RADIUS Client Configuration RADIUS (Remote Authentication Dial In User Service, RFC 2865...
FVS318G User Manual
Page 111
..., see "Configuring XAUTH for ModeConfig From a client PC running NETGEAR ProSafe VPN Client software, configure the remote VPN client connection. From the ID Type pull-down menu which will only be associated with the IKE policy. Enter a Username and Password to be used to be authenticated by default. Click Apply....server. 10. Check the Connect using radio button and choose Secure Gateway Tunnel from the pull down menu, choose IP Subnet. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual 7. When this gateway (by the remote gateway). Note: If RADIUS-PAP is selected, the...
..., see "Configuring XAUTH for ModeConfig From a client PC running NETGEAR ProSafe VPN Client software, configure the remote VPN client connection. From the ID Type pull-down menu which will only be associated with the IKE policy. Enter a Username and Password to be used to be authenticated by default. Click Apply....server. 10. Check the Connect using radio button and choose Secure Gateway Tunnel from the pull down menu, choose IP Subnet. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual 7. When this gateway (by the remote gateway). Note: If RADIUS-PAP is selected, the...
FVS318G User Manual
Page 117
The default name and password for the guest is admin and password. Users connecting to the VPN firewall must be authenticated before being allowed to the user requires a User Name and a Password. The default name and password for the administrator is guest and password.VPN firewall. IPsec VPN clients are only needed if you have enabled Extended Authentication (XAUTH) in formation...
The default name and password for the guest is admin and password. Users connecting to the VPN firewall must be authenticated before being allowed to the user requires a User Name and a Password. The default name and password for the administrator is guest and password.VPN firewall. IPsec VPN clients are only needed if you have enabled Extended Authentication (XAUTH) in formation...
FVS318G User Manual
Page 118
The Users screen will display. 2. If you want to change the administrator name or password: 1. Select Users. Figure 6-1 3. Click Apply. 6-2 Managing Users, Authentication, and Certificates 1.1 November, 2009 Select Edit Admin Settings in the User Selection window. If you are changing the administrator name, enter the new name and the old administrator password (default is password). 4. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual Changing the Administrator Login To change the password, enter and reenter the new pasword. 5.
The Users screen will display. 2. If you want to change the administrator name or password: 1. Select Users. Figure 6-1 3. Click Apply. 6-2 Managing Users, Authentication, and Certificates 1.1 November, 2009 Select Edit Admin Settings in the User Selection window. If you are changing the administrator name, enter the new name and the old administrator password (default is password). 4. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual Changing the Administrator Login To change the password, enter and reenter the new pasword. 5.
FVS318G User Manual
Page 119
... Users, Authentication, and Certificates 6-3 1.1 November, 2009 Password/Confirm Password. Idle Timeout. The password can contain alphanumeric characters, dash, and underscore. Select Users. If you want to change the guest login name or password:: 1. Figure 6-2 3. Click Apply. Select Edit Guest Settings in the User Selection window. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual Changing the Guest Login To change...
... Users, Authentication, and Certificates 6-3 1.1 November, 2009 Password/Confirm Password. Idle Timeout. The password can contain alphanumeric characters, dash, and underscore. Select Users. If you want to change the guest login name or password:: 1. Figure 6-2 3. Click Apply. Select Edit Guest Settings in the User Selection window. ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual Changing the Guest Login To change...