FVS318 Reference Manual
Page 19
...allow remote users to find your network using a domain name when your IP address is not permanently assigned. Appendix B, "Networks, Routing, and Firewall Basics" provides further information on TCP/IP. • IP Address Sharing by NAT The FVS318 allows several networked PCs to share an Internet... the correct configuration. That port will accommodate either type of Attached PCs by your dynamic IP address. The firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. • PPP over Ethernet (PPPoE) PPP over Ethernet is...
...allow remote users to find your network using a domain name when your IP address is not permanently assigned. Appendix B, "Networks, Routing, and Firewall Basics" provides further information on TCP/IP. • IP Address Sharing by NAT The FVS318 allows several networked PCs to share an Internet... the correct configuration. That port will accommodate either type of Attached PCs by your dynamic IP address. The firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. • PPP over Ethernet (PPPoE) PPP over Ethernet is...
FVS318 Reference Manual
Page 20
...the Internet. You can install, configure, and operate the FVS318 within minutes after connecting it to a specified remote IP address or range of addresses, and you to login to the Web Management Interface from almost any type of ISP account. • Remote ...management The firewall allows you can choose a nonstandard port number. • Diagnostic functions The firewall incorporates built-in diagnostic functions such as Windows, Macintosh, or Linux. A user-friendly Setup...
...the Internet. You can install, configure, and operate the FVS318 within minutes after connecting it to a specified remote IP address or range of addresses, and you to login to the Web Management Interface from almost any type of ISP account. • Remote ...management The firewall allows you can choose a nonstandard port number. • Diagnostic functions The firewall incorporates built-in diagnostic functions such as Windows, Macintosh, or Linux. A user-friendly Setup...
FVS318 Reference Manual
Page 30
...your ISP to connect to Manually Configure Your Internet Connection" on page 3-13. • Connections which use dynamic IP address assignment. • Connections which use the Setup Wizard, you will report the type of connection follow below. 3-8 Connecting the Firewall to the Internet M-10146-01... in "Worksheet for the Model FVS318 Broadband ProSafe VPN Firewall b. d. Note: If you choose not to use fixed IP address assignment. Unless your ISP automatically assigns your firewall and the cable or DSL line. Reference Manual for Recording Your Internet Connection Information" ...
...your ISP to connect to Manually Configure Your Internet Connection" on page 3-13. • Connections which use dynamic IP address assignment. • Connections which use the Setup Wizard, you will report the type of connection follow below. 3-8 Connecting the Firewall to the Internet M-10146-01... in "Worksheet for the Model FVS318 Broadband ProSafe VPN Firewall b. d. Note: If you choose not to use fixed IP address assignment. Unless your ISP automatically assigns your firewall and the cable or DSL line. Reference Manual for Recording Your Internet Connection Information" ...
FVS318 Reference Manual
Page 31
...Internet. If this is available, enter it manually. 2. If a Secondary DNS Server address is not successful, you wish to change the login timeout, enter a new value in Figure 3-7: Figure 3-7: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall Wizard-Detected PPPoE Option If... the Setup Wizard determines that your ISP does not automatically transmit DNS addresses to the firewall during login, select "Use these DNS servers" and enter the IP address of your firewall will automatically log you will keep the...
...Internet. If this is available, enter it manually. 2. If a Secondary DNS Server address is not successful, you wish to change the login timeout, enter a new value in Figure 3-7: Figure 3-7: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall Wizard-Detected PPPoE Option If... the Setup Wizard determines that your ISP does not automatically transmit DNS addresses to the firewall during login, select "Use these DNS servers" and enter the IP address of your firewall will automatically log you will keep the...
FVS318 Reference Manual
Page 32
... to Chapter 8, Troubleshooting". Wizard-Detected Dynamic IP Option If the Setup Wizard determines that your ISP's Primary DNS Server. If you know that the settings take effect. 4. If the NETGEAR website does not appear within one minute, refer to save your Internet connection. Reference Manual for Dynamic IP address 1. Click on the Test button to...
... to Chapter 8, Troubleshooting". Wizard-Detected Dynamic IP Option If the Setup Wizard determines that your ISP's Primary DNS Server. If you know that the settings take effect. 4. If the NETGEAR website does not appear within one minute, refer to save your Internet connection. Reference Manual for Dynamic IP address 1. Click on the Test button to...
FVS318 Reference Manual
Page 33
... www.netgear.com) to test your Internet connection. The firewall will be used by the ISP. Note: Some ISPs will be directed to the menu shown in Figure 3-9 below: Figure 3-9: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall A DNS server is a host on the Test button to numeric IP addresses. Click...
... www.netgear.com) to test your Internet connection. The firewall will be used by the ISP. Note: Some ISPs will be directed to the menu shown in Figure 3-9 below: Figure 3-9: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall A DNS server is a host on the Test button to numeric IP addresses. Click...
FVS318 Reference Manual
Page 34
..." on the Test button to save the settings. 4. Your firewall is available, enter it also. To access the Internet from the Setup Basic Settings link, click on Apply to test your ISP and enter them manually here. Click on the Test button. Log in "... firewall, launch a browser such as www.netgear.com to connect, log in, or disconnect. For a fixed IP address configuration, you by the firewall as Dial-Up Networking or Enternet to a numeric IP address. These functions are required to Chapter 8, Troubleshooting. If the NETGEAR website does not appear within one minute,...
..." on the Test button to save the settings. 4. Your firewall is available, enter it also. To access the Internet from the Setup Basic Settings link, click on Apply to test your ISP and enter them manually here. Click on the Test button. Log in "... firewall, launch a browser such as www.netgear.com to connect, log in, or disconnect. For a fixed IP address configuration, you by the firewall as Dial-Up Networking or Enternet to a numeric IP address. These functions are required to Chapter 8, Troubleshooting. If the NETGEAR website does not appear within one minute,...
FVS318 Reference Manual
Page 36
...normally must be necessary to the instructions below . Or, select "Use this Computer's MAC address." Enter your ISP assigned. Note: After you a permanent, fixed (static) IP address for the Model FVS318 Broadband ProSafe VPN Firewall 2. Note: After completing the DNS configuration, ...Basic Settings link under the Setup section of your ISP does not automatically transmit DNS addresses to access the Internet. c. Gateway's MAC Address: This section determines the Ethernet MAC address that PC by the firewall on your settings. 4. Internet IP Address: If your ISP has...
...normally must be necessary to the instructions below . Or, select "Use this Computer's MAC address." Enter your ISP assigned. Note: After you a permanent, fixed (static) IP address for the Model FVS318 Broadband ProSafe VPN Firewall 2. Note: After completing the DNS configuration, ...Basic Settings link under the Setup section of your ISP does not automatically transmit DNS addresses to access the Internet. c. Gateway's MAC Address: This section determines the Ethernet MAC address that PC by the firewall on your settings. 4. Internet IP Address: If your ISP has...
FVS318 Reference Manual
Page 55
... NAT is used to allow multiple computers or devices on applications. With the FVS318 Broadband ProSafe VPN Firewall , you typed in the Server IP Address box. 6. NAT is a standard used in gateway devices such as multi-player games, real time communications, and other peer-to-peer ...can be 26902. 4. These features can interfere with LAN IP Settings The LAN IP Setup menu allows configuration of the new PC and home networking experiences, such as FVS318 VPN Firewall that people increasingly want to share a single IP address. For example, if you've already configured one computer to...
... NAT is used to allow multiple computers or devices on applications. With the FVS318 Broadband ProSafe VPN Firewall , you typed in the Server IP Address box. 6. NAT is a standard used in gateway devices such as multi-player games, real time communications, and other peer-to-peer ...can be 26902. 4. These features can interfere with LAN IP Settings The LAN IP Setup menu allows configuration of the new PC and home networking experiences, such as FVS318 VPN Firewall that people increasingly want to share a single IP address. For example, if you've already configured one computer to...
FVS318 Reference Manual
Page 56
Log in Figure 5-3 Figure 5-2: Enabling UPnP via the LAN IP Setup Menu 3. Click Apply to the Firewall at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of the main menu to Enable UPnP 1. Click the Enable UPnP check ...box. 4. Reference Manual for the Firewall. 2. Click the LAN IP Setup link from the Advanced section of password, or using whatever User Name, Password and LAN address you have chosen for the Model FVS318 Broadband ProSafe VPN Firewall How to display the menu shown in...
Log in Figure 5-3 Figure 5-2: Enabling UPnP via the LAN IP Setup Menu 3. Click Apply to the Firewall at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of the main menu to Enable UPnP 1. Click the Enable UPnP check ...box. 4. Reference Manual for the Firewall. 2. Click the LAN IP Setup link from the Advanced section of password, or using whatever User Name, Password and LAN address you have chosen for the Model FVS318 Broadband ProSafe VPN Firewall How to display the menu shown in...
FVS318 Reference Manual
Page 57
...RIP packets that it , and which other routers. It recognizes both formats when receiving. The LAN TCP/IP Setup parameters are local to use private IP addresses on the LAN side, and to Both or Out Only, the Firewall will ignore any RIP packets received....periodically. - Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Understanding LAN TCP/IP Setup Parameters The Firewall is shipped preconfigured to use a different IP addressing scheme, you have an unusual network setup. - Advanced WAN and LAN Configuration 5-7 M-10146-01 RIP-1 is the default. ...
...RIP packets that it , and which other routers. It recognizes both formats when receiving. The LAN TCP/IP Setup parameters are local to use private IP addresses on the LAN side, and to Both or Out Only, the Firewall will ignore any RIP packets received....periodically. - Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Understanding LAN TCP/IP Setup Parameters The Firewall is shipped preconfigured to use a different IP addressing scheme, you have an unusual network setup. - Advanced WAN and LAN Configuration 5-7 M-10146-01 RIP-1 is the default. ...
FVS318 Reference Manual
Page 60
... the Firewall at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever User Name, Password and LAN address you have chosen for the Firewall. 2. Log in Figure 5-3 Figure 5-3: LAN IP Setup Menu 3. From the Main Menu,... under Advanced, click the LAN IP Setup link to save your changes. 5-10 M-10146-01 Advanced WAN and LAN...
... the Firewall at its default LAN address of http://192.168.0.1 with its default User Name of admin, default password of password, or using whatever User Name, Password and LAN address you have chosen for the Firewall. 2. Log in Figure 5-3 Figure 5-3: LAN IP Setup Menu 3. From the Main Menu,... under Advanced, click the LAN IP Setup link to save your changes. 5-10 M-10146-01 Advanced WAN and LAN...
FVS318 Reference Manual
Page 61
... service provider. In this case, you can use this feature, you will forward traffic directed at your Internet account uses a dynamically assigned IP address, you must select a service provider and obtain an account with its default User Name of admin, default password of the browser interface, ...Firewall at its default LAN address of http://192.168.0.1 with them. To use a commercial dynamic DNS service, who will allow you to register your domain to their IP address, and will not know in to your frequently-changing IP address. Figure 5-4: Dynamic DNS Setup Menu Advanced WAN and LAN ...
... service provider. In this case, you can use this feature, you will forward traffic directed at your Internet account uses a dynamically assigned IP address, you must select a service provider and obtain an account with its default User Name of admin, default password of the browser interface, ...Firewall at its default LAN address of http://192.168.0.1 with them. To use a commercial dynamic DNS service, who will allow you to register your domain to their IP address, and will not know in to your frequently-changing IP address. Figure 5-4: Dynamic DNS Setup Menu Advanced WAN and LAN ...
FVS318 Reference Manual
Page 66
... SA key exchange modes: - Please see NETGEAR's web site for Windows. Using a dynamic DNS service for a FVS318 with a dynamically-assigned IP address can only initiate a request to open a VPN tunnel. NETGEAR provides support for connections between NETGEAR VPN Firewalls, and between an FVS318 VPN... IP address enables that FVS318 to both initiate and respond to requests to open a VPN tunnel because no other interconnection. There are described below. Understanding How FVS318 VPN Tunnels Are Configured You create VPN tunnels definitions via the VPN Settings link under the Setup ...
... SA key exchange modes: - Please see NETGEAR's web site for Windows. Using a dynamic DNS service for a FVS318 with a dynamically-assigned IP address can only initiate a request to open a VPN tunnel. NETGEAR provides support for connections between NETGEAR VPN Firewalls, and between an FVS318 VPN... IP address enables that FVS318 to both initiate and respond to requests to open a VPN tunnel because no other interconnection. There are described below. Understanding How FVS318 VPN Tunnels Are Configured You create VPN tunnels definitions via the VPN Settings link under the Setup ...
FVS318 Reference Manual
Page 74
... by encrypting the data three times using DES with a dynamic IP address must always be the initiator of the connection. • Will you use the typical automated Internet Key Exchange (IKE) setup, or a Manual Keying setup in which you must specify each phase of the connection? ...8226; For the WAN connection, what level of IP addresses), or a single PC? • At least one side has a dynamic IP address, the side with three different, unrelated keys...
... by encrypting the data three times using DES with a dynamic IP address must always be the initiator of the connection. • Will you use the typical automated Internet Key Exchange (IKE) setup, or a Manual Keying setup in which you must specify each phase of the connection? ...8226; For the WAN connection, what level of IP addresses), or a single PC? • At least one side has a dynamic IP address, the side with three different, unrelated keys...
FVS318 Reference Manual
Page 76
...IP address, you are using the NETGEAR default address range of 192.168.0.x. This procedure uses the settings in to have different IP address ranges. A blank worksheet you will fail if both are now disconnected. 6-12 M-10146-01 Virtual Private Networking LAN A LAN B Figure 6-7: Configuring the Local LAN (A) via the LAN IP Setup Menu b. Click the LAN IP Setup... Gateway IP (WAN IP Address) 24.0.0.1 10.0.0.1 Note: If port forwarding, trusted user, or static routes are set up, you can use to display the LAN TCP/IP Setup menu shown below. Note: The LAN IP address ranges ...
...IP address, you are using the NETGEAR default address range of 192.168.0.x. This procedure uses the settings in to have different IP address ranges. A blank worksheet you will fail if both are now disconnected. 6-12 M-10146-01 Virtual Private Networking LAN A LAN B Figure 6-7: Configuring the Local LAN (A) via the LAN IP Setup Menu b. Click the LAN IP Setup... Gateway IP (WAN IP Address) 24.0.0.1 10.0.0.1 Note: If port forwarding, trusted user, or static routes are set up, you can use to display the LAN TCP/IP Setup menu shown below. Note: The LAN IP address ranges ...
FVS318 Reference Manual
Page 81
...ProSafe VPN Firewall The worksheet below identifies the parameters used in seconds: 28800 (8 hours) Network Local IPSec ID LAN IP Address Subnet Mask FQDN or Gateway IP (WAN IP Address) Network: LAN A LANAPCIPSEC 192.168.3.1 255.255.255.0 24.0.0.1 Computer: PC PCIPSEC 192.168.100.2 255.255... in the procedure below : Virtual Private Networking M-10146-01 6-17 To configure the Firewall, follow these steps: a. From the Setup Menu, click the VPN Settings link, then click Add to Network IKE VPN Tunnel Settings Configuration Worksheet IKE Security Association Settings Connection Name...
...ProSafe VPN Firewall The worksheet below identifies the parameters used in seconds: 28800 (8 hours) Network Local IPSec ID LAN IP Address Subnet Mask FQDN or Gateway IP (WAN IP Address) Network: LAN A LANAPCIPSEC 192.168.3.1 255.255.255.0 24.0.0.1 Computer: PC PCIPSEC 192.168.100.2 255.255... in the procedure below : Virtual Private Networking M-10146-01 6-17 To configure the Firewall, follow these steps: a. From the Setup Menu, click the VPN Settings link, then click Add to Network IKE VPN Tunnel Settings Configuration Worksheet IKE Security Association Settings Connection Name...
FVS318 Reference Manual
Page 194
.... Reference Manual for your ISP assigns a private WAN IP address such as the service provider. - Type the Password (or key) for the Model FVS318 Broadband ProSafe VPN Firewall Figure G-2: Dynamic DNS Setup Menu 4. The dynamic DNS service provider may not be routed on the Internet. G-4 NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to...
.... Reference Manual for your ISP assigns a private WAN IP address such as the service provider. - Type the Password (or key) for the Model FVS318 Broadband ProSafe VPN Firewall Figure G-2: Dynamic DNS Setup Menu 4. The dynamic DNS service provider may not be routed on the Internet. G-4 NETGEAR VPN Configuration FVS318 or FVM318 with FQDN to...
FVS318 Reference Manual
Page 220
... Exchange (IKE) D-3 Internet Protocol security D-1 Intranets D-1 IP addresses C-19, C-20 and NAT B-8 and the Internet B-2 assigning B-2, B-9 auto-generated 8-3 private B-7 translating B-9 IP configuration by DHCP B-10 IP networking for Macintosh C-15 for Windows C-2, C-7 2 IPSec D-1 IPSec Components D-2 IPSec SA negotiation D-9 IPSec Security Features D-2 J Java 4-3 K KALI 5-4 Key Life 6-15, 6-19 L LAN IP Setup Menu 5-6, 5-10, 6-12 LEDs description 2-6 troubleshooting...
... Exchange (IKE) D-3 Internet Protocol security D-1 Intranets D-1 IP addresses C-19, C-20 and NAT B-8 and the Internet B-2 assigning B-2, B-9 auto-generated 8-3 private B-7 translating B-9 IP configuration by DHCP B-10 IP networking for Macintosh C-15 for Windows C-2, C-7 2 IPSec D-1 IPSec Components D-2 IPSec SA negotiation D-9 IPSec Security Features D-2 J Java 4-3 K KALI 5-4 Key Life 6-15, 6-19 L LAN IP Setup Menu 5-6, 5-10, 6-12 LEDs description 2-6 troubleshooting...
FVS318 Reference Manual
Page 221
... 2-6 Index requirements access device 3-1 hardware 3-1 Reserved IP Addresses 5-9 restore factory settings 7-11 RFC 1466 B-7, B-9 1597 B-7, B-9 1631 B-8, B-9 finding B-7 RIP (Router Information Protocol) 5-7 router concepts B-1 Routing Information Protocol 2-3, B-2 S SA 6-9, D-4 SafeNet Secure VPN Client 6-16 Scope of Document 1-1 Secondary DNS Server 3-9, 3-10, 3-12, 3-14 security association 6-9 service numbers 4-7 Services/Games 5-3 Setup Wizard 3-1 SHA-1 authentication 6-29 SMTP...
... 2-6 Index requirements access device 3-1 hardware 3-1 Reserved IP Addresses 5-9 restore factory settings 7-11 RFC 1466 B-7, B-9 1597 B-7, B-9 1631 B-8, B-9 finding B-7 RIP (Router Information Protocol) 5-7 router concepts B-1 Routing Information Protocol 2-3, B-2 S SA 6-9, D-4 SafeNet Secure VPN Client 6-16 Scope of Document 1-1 Secondary DNS Server 3-9, 3-10, 3-12, 3-14 security association 6-9 service numbers 4-7 Services/Games 5-3 Setup Wizard 3-1 SHA-1 authentication 6-29 SMTP...