FVS318 Reference Manual
Page 6
...to Block or Allow Services 4-5 How to Add to the List of Services 4-7 Setting Times and Scheduling Firewall Services 4-10 How to Set Your Time Zone 4-10 How to Schedule Firewall Services 4-11 Chapter 5 Advanced WAN and LAN Configuration Configuring Advanced WAN Settings 5-1 Setting Up A Default DMZ Server 5-1 Enabling Access to Local Servers Through a FVS318 5-2 How to Configure Port Forwarding to Local Servers 5-2 Respond to Ping on Internet WAN Port 5-3 How to Support Internet Services, Applications, or Games 5-3 How to Clear a Port Assignment 5-4 Local Web and FTP Server Example...
...to Block or Allow Services 4-5 How to Add to the List of Services 4-7 Setting Times and Scheduling Firewall Services 4-10 How to Set Your Time Zone 4-10 How to Schedule Firewall Services 4-11 Chapter 5 Advanced WAN and LAN Configuration Configuring Advanced WAN Settings 5-1 Setting Up A Default DMZ Server 5-1 Enabling Access to Local Servers Through a FVS318 5-2 How to Configure Port Forwarding to Local Servers 5-2 Respond to Ping on Internet WAN Port 5-3 How to Support Internet Services, Applications, or Games 5-3 How to Clear a Port Assignment 5-4 Local Web and FTP Server Example...
FVS318 Reference Manual
Page 8
... and Rebooting the Router 7-11 How to Enable Remote Management 7-12 How to Upgrade the Router's Firmware 7-13 Chapter 8 Troubleshooting Basic Functions ...8-1 Power LED Not On 8-2 Test LED Never Turns On or Test LED Stays On 8-2 Local or Internet Port Link LEDs Not On 8-2 Troubleshooting the Web Configuration Interface 8-3 Troubleshooting the ISP Connection 8-4 Troubleshooting a TCP/IP Network Using a Ping Utility 8-5 Testing the LAN Path to Your Firewall 8-6 Testing the Path from Your PC to a Remote Device 8-6 Restoring the Default Configuration and Password 8-7 Problems with Date...
... and Rebooting the Router 7-11 How to Enable Remote Management 7-12 How to Upgrade the Router's Firmware 7-13 Chapter 8 Troubleshooting Basic Functions ...8-1 Power LED Not On 8-2 Test LED Never Turns On or Test LED Stays On 8-2 Local or Internet Port Link LEDs Not On 8-2 Troubleshooting the Web Configuration Interface 8-3 Troubleshooting the ISP Connection 8-4 Troubleshooting a TCP/IP Network Using a Ping Utility 8-5 Testing the LAN Path to Your Firewall 8-6 Testing the Path from Your PC to a Remote Device 8-6 Restoring the Default Configuration and Password 8-7 Problems with Date...
FVS318 Reference Manual
Page 19
... the Model FVS318 Broadband ProSafe VPN Firewall The firewall incorporates Auto UplinkTM technology. This feature greatly simplifies configuration of Attached PCs by simulating a dial-up connection. Reference Manual for Telstra cable in Australia. • Dynamic DNS Dynamic DNS services allow remote users to share an Internet account using only a single IP address, which may be statically or dynamically assigned by NAT The FVS318 allows several networked PCs to find your network using the Dynamic Host Configuration Protocol (DHCP).
... the Model FVS318 Broadband ProSafe VPN Firewall The firewall incorporates Auto UplinkTM technology. This feature greatly simplifies configuration of Attached PCs by simulating a dial-up connection. Reference Manual for Telstra cable in Australia. • Dynamic DNS Dynamic DNS services allow remote users to share an Internet account using only a single IP address, which may be statically or dynamically assigned by NAT The FVS318 allows several networked PCs to find your network using the Dynamic Host Configuration Protocol (DHCP).
FVS318 Reference Manual
Page 20
... Internet. A user-friendly Setup Wizard is provided and online help documentation is built into the browser-based Web Management Interface. • Smart Wizard The firewall automatically senses the type of ISP account. • Remote management The firewall allows you only for the information required for firmware upgrade • Regional support, including ISPs like Telstra DSL and BigPond or Deutsche Telekom. 2-4 Introduction M-10146-01 Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Easy Installation...
... Internet. A user-friendly Setup Wizard is provided and online help documentation is built into the browser-based Web Management Interface. • Smart Wizard The firewall automatically senses the type of ISP account. • Remote management The firewall allows you only for the information required for firmware upgrade • Regional support, including ISPs like Telstra DSL and BigPond or Deutsche Telekom. 2-4 Introduction M-10146-01 Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Easy Installation...
FVS318 Reference Manual
Page 43
... on the Internet sends a request for the firewall. 2. For example, Web servers serve web pages, time servers serve time and date information, and game hosts serve data about other players' moves. Log in to Block or Allow Services Services are supported in the transmitted IP packets. How to the firewall at the request of password, or using whatever User Name, Password and LAN address you should configure that PC's IP address in Figure 4-5: Figure 4-3: Services menu •...
... on the Internet sends a request for the firewall. 2. For example, Web servers serve web pages, time servers serve time and date information, and game hosts serve data about other players' moves. Log in to Block or Allow Services Services are supported in the transmitted IP packets. How to the firewall at the request of password, or using whatever User Name, Password and LAN address you should configure that PC's IP address in Figure 4-5: Figure 4-3: Services menu •...
FVS318 Reference Manual
Page 52
... Numbers," for port numbers for that are unsure, refer to access a service at your location. For example, a packet that port forwarding opens holes in the incoming IP packets. Use the Ports menu to configure the Firewall to forward incoming traffic to the external IP address of your ISP. Remember that is sent to IP addresses on the port number. Type the IP address for common protocols. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Incoming traffic from...
... Numbers," for port numbers for that are unsure, refer to access a service at your location. For example, a packet that port forwarding opens holes in the incoming IP packets. Use the Ports menu to configure the Firewall to forward incoming traffic to the external IP address of your ISP. Remember that is sent to IP addresses on the port number. Type the IP address for common protocols. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Incoming traffic from...
FVS318 Reference Manual
Page 58
... must then open a new connection to the router's LAN. For most Ethernet networks is tested before it checked. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Note: If you change the MTU size: 1. Setting the MTU Size The normal MTU (Maximum Transmit Unit) value for most applications, the default DHCP and TCP/IP settings of the same IP address subnet as a DHCP (Dynamic Host Configuration Protocol) server, allowing it is the LAN address of your network. These addresses should...
... must then open a new connection to the router's LAN. For most Ethernet networks is tested before it checked. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Note: If you change the MTU size: 1. Setting the MTU Size The normal MTU (Maximum Transmit Unit) value for most applications, the default DHCP and TCP/IP settings of the same IP address subnet as a DHCP (Dynamic Host Configuration Protocol) server, allowing it is the LAN address of your network. These addresses should...
FVS318 Reference Manual
Page 62
.... 4. Using Static Routes Static Routes provide additional routing information to the company where you are using. 5. If the URL the dynamic DNS service provider gave you do not need to configure additional static routes. If your ISP assigns a private WAN IP address such as multiple routers or multiple IP subnets located on your LAN is 192.168.0.100. • Your company's network is your network. Type the User Name for the Model FVS318 Broadband ProSafe VPN Firewall 3. Reference Manual...
.... 4. Using Static Routes Static Routes provide additional routing information to the company where you are using. 5. If the URL the dynamic DNS service provider gave you do not need to configure additional static routes. If your ISP assigns a private WAN IP address such as multiple routers or multiple IP subnets located on your LAN is 192.168.0.100. • Your company's network is your network. Type the User Name for the Model FVS318 Broadband ProSafe VPN Firewall 3. Reference Manual...
FVS318 Reference Manual
Page 80
... Network VPN This procedure describes linking a remote PC and a LAN. Now that supports IPSec. Figure 6-11: Ping test results At this point the connection is working, whenever a PC on the second LAN needs to access an IP address on the first LAN, the Firewalls will cause a continuous ping to be purchased from "timed out" to the Internet using an FVS318 with a fixed IP address. The SafeNet VPN Client can be connected to the Internet through a simple cable/DSL router...
... Network VPN This procedure describes linking a remote PC and a LAN. Now that supports IPSec. Figure 6-11: Ping test results At this point the connection is working, whenever a PC on the second LAN needs to access an IP address on the first LAN, the Firewalls will cause a continuous ping to be purchased from "timed out" to the Internet using an FVS318 with a fixed IP address. The SafeNet VPN Client can be connected to the Internet through a simple cable/DSL router...
FVS318 Reference Manual
Page 83
... one side has a dynamic IP address and you could use FQDN, that side must always initiate the connection. You may be temporarily disconnected upon renegotiation. Set Up the SafeNet VPN Client Software on your PC after installing the client software.s Virtual Private Networking M-10146-01 6-19 e. Reboot your PC. d. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall • Remote WAN IP Address: 0.0.0.0 since the remote PC has a dynamically assigned IP...
... one side has a dynamic IP address and you could use FQDN, that side must always initiate the connection. You may be temporarily disconnected upon renegotiation. Set Up the SafeNet VPN Client Software on your PC after installing the client software.s Virtual Private Networking M-10146-01 6-19 e. Reboot your PC. d. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall • Remote WAN IP Address: 0.0.0.0 since the remote PC has a dynamically assigned IP...
FVS318 Reference Manual
Page 108
... secure password. Note: Be sure to change the router's default password to as few external IP addresses as is practical. 7-12 M-10146-01 Managing Your Network Your password can allow a user or users on the Internet to configure, upgrade and check the status of letters (both upper and lower case), numbers, and symbols. Specify what external addresses will be allowed to access the firewall's remote management. Log in Figure 7-9. Figure 7-9: Diagnostics menu How to Enable Remote Management Using the Remote Management...
... secure password. Note: Be sure to change the router's default password to as few external IP addresses as is practical. 7-12 M-10146-01 Managing Your Network Your password can allow a user or users on the Internet to configure, upgrade and check the status of letters (both upper and lower case), numbers, and symbols. Specify what external addresses will be allowed to access the firewall's remote management. Log in Figure 7-9. Figure 7-9: Diagnostics menu How to Enable Remote Management Using the Remote Management...
FVS318 Reference Manual
Page 109
... support HTTP uploads. The Web browser used for the Model FVS318 Broadband ProSafe VPN Firewall a. Note: Product updates are available on the Internet, select Everyone. b. For example, if your router from any common service port. Enter the IP address that will be used to Upgrade the Router's Firmware The software of the FVS318 VPN Firewall is released by a colon (:) and the custom port number. Managing Your Network M-10146-01 7-13 Reference Manual for accessing the management interface. web site at www.netgear.com/support...
... support HTTP uploads. The Web browser used for the Model FVS318 Broadband ProSafe VPN Firewall a. Note: Product updates are available on the Internet, select Everyone. b. For example, if your router from any common service port. Enter the IP address that will be used to Upgrade the Router's Firmware The software of the FVS318 VPN Firewall is released by a colon (:) and the custom port number. Managing Your Network M-10146-01 7-13 Reference Manual for accessing the management interface. web site at www.netgear.com/support...
FVS318 Reference Manual
Page 113
... of Windows and MacOS will set the firewall's IP address to 192.168.0.254. If you are using Internet Explorer, click Refresh to the connected hub or PC. • Be sure you are using the correct login information. When connecting the firewall's Internet port to configure your browser has Java, JavaScript, or ActiveX enabled. These auto-generated addresses are using the correct cable: - Troubleshooting the Web Configuration Interface If you are unable to factory defaults. This...
... of Windows and MacOS will set the firewall's IP address to 192.168.0.254. If you are using Internet Explorer, click Refresh to the connected hub or PC. • Be sure you are using the correct login information. When connecting the firewall's Internet port to configure your browser has Java, JavaScript, or ActiveX enabled. These auto-generated addresses are using the correct cable: - Troubleshooting the Web Configuration Interface If you are unable to factory defaults. This...
FVS318 Reference Manual
Page 114
... reapply power to access the Internet, you may have incorrectly set the login name and password. 8-4 Troubleshooting M-10146-01 Access the Main Menu of the following procedure: 1. To check the WAN IP address: 1. If your firewall is able to the cable or DSL modem. 2. When the modem's LEDs indicate that an IP address is shown for the Model FVS318 Broadband ProSafe VPN Firewall • When entering configuration settings, be one of the firewall's configuration at http://192...
... reapply power to access the Internet, you may have incorrectly set the login name and password. 8-4 Troubleshooting M-10146-01 Access the Main Menu of the following procedure: 1. To check the WAN IP address: 1. If your firewall is able to the cable or DSL modem. 2. When the modem's LEDs indicate that an IP address is shown for the Model FVS318 Broadband ProSafe VPN Firewall • When entering configuration settings, be one of the firewall's configuration at http://192...
FVS318 Reference Manual
Page 117
... address of a remote device such as the default gateway. Use this method for the Model FVS318 Broadband ProSafe VPN Firewall PING -n 10 where is the IP address of your firewall listed as your PC, enter that modem. Check to "clone" or "spoof" the MAC address from the network address of the firewall. Refer to "How to your ISP's DNS server. To restore the factory default configuration settings, follow these steps: Troubleshooting 8-7 M-10146-01 Check that your ISP assigned a host name to Manually Configure Your Internet Connection...
... address of a remote device such as the default gateway. Use this method for the Model FVS318 Broadband ProSafe VPN Firewall PING -n 10 where is the IP address of your firewall listed as your PC, enter that modem. Check to "clone" or "spoof" the MAC address from the network address of the firewall. Refer to "How to your ISP's DNS server. To restore the factory default configuration settings, follow these steps: Troubleshooting 8-7 M-10146-01 Check that your ISP assigned a host name to Manually Configure Your Internet Connection...
FVS318 Reference Manual
Page 167
.... Virtual Private Networking D-9 M-10146-01 The gateways contain this process is often referred to the gateways. The two computers then begin the Internet Key Exchange (IKE) process. Alternatively, you can configure your gateways using the parameters and processes established by IPSec. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall VPN Gateway A VPN Tunnel VPN Gateway B Figure D-5: VPN Tunnel SA The SA contains all the information necessary for gateway A to negotiate a secure and encrypted communication...
.... Virtual Private Networking D-9 M-10146-01 The gateways contain this process is often referred to the gateways. The two computers then begin the Internet Key Exchange (IKE) process. Alternatively, you can configure your gateways using the parameters and processes established by IPSec. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall VPN Gateway A VPN Tunnel VPN Gateway B Figure D-5: VPN Tunnel SA The SA contains all the information necessary for gateway A to negotiate a secure and encrypted communication...
FVS318 Reference Manual
Page 220
... C-20 and NAT B-8 and the Internet B-2 assigning B-2, B-9 auto-generated 8-3 private B-7 translating B-9 IP configuration by DHCP B-10 IP networking for Macintosh C-15 for Windows C-2, C-7 2 IPSec D-1 IPSec Components D-2 IPSec SA negotiation D-9 IPSec Security Features D-2 J Java 4-3 K KALI 5-4 Key Life 6-15, 6-19 L LAN IP Setup Menu 5-6, 5-10, 6-12 LEDs description 2-6 troubleshooting 8-2 log sending 7-8 Log Viewer 6-26 M MAC address 8-7, B-9 spoofing 3-11, 3-14, 8-5 Macintosh C-19 configuring for IP networking C-15 DHCP Client ID C-16 Obtaining ISP Configuration Information C-20 Manual Key...
... C-20 and NAT B-8 and the Internet B-2 assigning B-2, B-9 auto-generated 8-3 private B-7 translating B-9 IP configuration by DHCP B-10 IP networking for Macintosh C-15 for Windows C-2, C-7 2 IPSec D-1 IPSec Components D-2 IPSec SA negotiation D-9 IPSec Security Features D-2 J Java 4-3 K KALI 5-4 Key Life 6-15, 6-19 L LAN IP Setup Menu 5-6, 5-10, 6-12 LEDs description 2-6 troubleshooting 8-2 log sending 7-8 Log Viewer 6-26 M MAC address 8-7, B-9 spoofing 3-11, 3-14, 8-5 Macintosh C-19 configuring for IP networking C-15 DHCP Client ID C-16 Obtaining ISP Configuration Information C-20 Manual Key...
FVS318 Reference Manual
Page 221
... Network Time Protocol 4-10, 8-8 NTP 4-10, 8-8 P package contents 2-5 password restoring 8-7 PC, using to configure C-21 Perfect Forward Secrecy 6-15, 6-19 ping 5-3 Port Forwarding 5-2 port forwarding behind NAT B-8 Port Forwarding Menu 5-3 port numbers 4-5 PPP over Ethernet 2-3, C-18 PPPoE 2-3, 3-9, C-18 PPTP 3-8, 3-15 PreShared Key 6-11, 6-15, 6-17, 6-19, 6-31, 6-32 Primary DNS Server 3-9, 3-10, 3-12, 3-14 protocols Address Resolution B-9 DHCP 2-3, B-10 Routing Information 2-3, B-2 support 2-3 TCP/IP 2-3 publications, related B-1 Q Quake 5-4 R rear panel 2-6 Index requirements access device...
... Network Time Protocol 4-10, 8-8 NTP 4-10, 8-8 P package contents 2-5 password restoring 8-7 PC, using to configure C-21 Perfect Forward Secrecy 6-15, 6-19 ping 5-3 Port Forwarding 5-2 port forwarding behind NAT B-8 Port Forwarding Menu 5-3 port numbers 4-5 PPP over Ethernet 2-3, C-18 PPPoE 2-3, 3-9, C-18 PPTP 3-8, 3-15 PreShared Key 6-11, 6-15, 6-17, 6-19, 6-31, 6-32 Primary DNS Server 3-9, 3-10, 3-12, 3-14 protocols Address Resolution B-9 DHCP 2-3, B-10 Routing Information 2-3, B-2 support 2-3 TCP/IP 2-3 publications, related B-1 Q Quake 5-4 R rear panel 2-6 Index requirements access device...
FVS318N Install Guide
Page 1
... the Ethernet port of the next diagram. Last, turn solid green, check the power adapter. WAN. i. Configure the FVS318N for 10 Mbps. d. A f. c. Note: For DSL customers, if ISP-provided software logs you can also consult the documentation links on the upper left indicates network activity. g. Each local LAN port has two LEDs. When you perform the VPN firewall setup steps be on . You may need information such as Internet Explorer. The Power light should...
... the Ethernet port of the next diagram. Last, turn solid green, check the power adapter. WAN. i. Configure the FVS318N for 10 Mbps. d. A f. c. Note: For DSL customers, if ISP-provided software logs you can also consult the documentation links on the upper left indicates network activity. g. Each local LAN port has two LEDs. When you perform the VPN firewall setup steps be on . You may need information such as Internet Explorer. The Power light should...
FVS318N Install Guide
Page 2
... to check the connection status. Make sure the network settings of the computer are registered trademarks of the Configuration display to restart your VPN firewall, see the Reference Manual. • Some cable modem ISPs require you are trademarks or registered trademarks of the computer registered on . You can click Broadband Status in Ethernet cable, the corresponding FVS318N LAN port LED will be on the account. Registration via DHCP whenever...
... to check the connection status. Make sure the network settings of the computer are registered trademarks of the Configuration display to restart your VPN firewall, see the Reference Manual. • Some cable modem ISPs require you are trademarks or registered trademarks of the computer registered on . You can click Broadband Status in Ethernet cable, the corresponding FVS318N LAN port LED will be on the account. Registration via DHCP whenever...