FVX538 Reference Manual
Page 2
... In the interest of NETGEAR, Inc. However, there is compliant with the conditions set out in accordance with the following EU Council Directives: 89/336/EEC and LVD 73/23/EEC. EU Regulatory Compliance Statement ProSafe VPN Firewall 200 is no guarantee that the ProSafe VPN Firewall 200 has been suppressed in ... wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen. Microsoft, Windows, and Windows NT are registered trademarks or trademarks of the FCC Rules. © 2009 by turning the equipment off and on a circuit different...
... In the interest of NETGEAR, Inc. However, there is compliant with the conditions set out in accordance with the following EU Council Directives: 89/336/EEC and LVD 73/23/EEC. EU Regulatory Compliance Statement ProSafe VPN Firewall 200 is no guarantee that the ProSafe VPN Firewall 200 has been suppressed in ... wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen. Microsoft, Windows, and Windows NT are registered trademarks or trademarks of the FCC Rules. © 2009 by turning the equipment off and on a circuit different...
FVX538 Reference Manual
Page 20
... with other VPNC-compliant VPN routers and clients. •...ProSafe VPN Firewall 200 FVX538 Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). The VPN firewall includes the NETGEAR VPN Wizard to easily configure VPN...firewall from the LAN. • PPP over a DSL connection by NAT. The VPN firewall automatically senses the type of the Virtual Private Network Consortium (VPNC) to ensure the VPN tunnels are specified, the firewall provides its own address as Windows...
... with other VPNC-compliant VPN routers and clients. •...ProSafe VPN Firewall 200 FVX538 Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). The VPN firewall includes the NETGEAR VPN Wizard to easily configure VPN...firewall from the LAN. • PPP over a DSL connection by NAT. The VPN firewall automatically senses the type of the Virtual Private Network Consortium (VPNC) to ensure the VPN tunnels are specified, the firewall provides its own address as Windows...
FVX538 Reference Manual
Page 34
... and day of the Internet Traffic. All other is sent over the primary link. You must configure the E-mail screen in a sub-window.Traffic counters are not available. When limit is reached Select the desired option: • Block all traffic is the rollover link. Traffic ... select the Send E-mail alert option. The volume of the Specific Time month. In this function to the Internet v1.0, March 2009 ProSafe VPN Firewall 200 FVX538 Reference Manual Table 2-2. Configuring the WAN Mode (Required for this mode, the selected WAN interface is made primary and the other traffic ...
... and day of the Internet Traffic. All other is sent over the primary link. You must configure the E-mail screen in a sub-window.Traffic counters are not available. When limit is reached Select the desired option: • Block all traffic is the rollover link. Traffic ... select the Send E-mail alert option. The volume of the Specific Time month. In this function to the Internet v1.0, March 2009 ProSafe VPN Firewall 200 FVX538 Reference Manual Table 2-2. Configuring the WAN Mode (Required for this mode, the selected WAN interface is made primary and the other traffic ...
FVX538 Reference Manual
Page 48
...check the Enable LDAP Information checkbox and fill in again. i. This box can specify the Windows NetBios Server IP if one is specified, the VPN firewall will be disconnected. h. ProSafe VPN Firewall 200 FVX538 Reference Manual b. Any new DHCP client joining the LAN will provide this address and the... Ending IP Address. c. For example, if you change the LAN IP address of the router (the IP Address ...
...check the Enable LDAP Information checkbox and fill in again. i. This box can specify the Windows NetBios Server IP if one is specified, the VPN firewall will be disconnected. h. ProSafe VPN Firewall 200 FVX538 Reference Manual b. Any new DHCP client joining the LAN will provide this address and the... Ending IP Address. c. For example, if you change the LAN IP address of the router (the IP Address ...
FVX538 Reference Manual
Page 55
...provide TCP/IP configuration for address resolution. 5. b. e. If enabled, the VPN firewall will not use the FVX538 as a DHCP server but rather as a DNS for all computers connected to the router's DMZ network. Lease Time - LAN Configuration v1.0, March 2009 3-11 Note:... revert to the DHCP Clients. Starting IP Address - This box specifies the Windows Internet Naming Service Server IP. Enable DNS Proxy - Then configure the following items: a. d. ProSafe VPN Firewall 200 FVX538 Reference Manual Figure 3-4 4. This box specifies the first of the contiguous addresses...
...provide TCP/IP configuration for address resolution. 5. b. e. If enabled, the VPN firewall will not use the FVX538 as a DHCP server but rather as a DNS for all computers connected to the router's DMZ network. Lease Time - LAN Configuration v1.0, March 2009 3-11 Note:... revert to the DHCP Clients. Starting IP Address - This box specifies the Windows Internet Naming Service Server IP. Enable DNS Proxy - Then configure the following items: a. d. ProSafe VPN Firewall 200 FVX538 Reference Manual Figure 3-4 4. This box specifies the first of the contiguous addresses...
FVX538 Reference Manual
Page 112
... the NETGEAR Prosafe VPN Client installed, configure a VPN client policy to connect to save your settings: the VPN Policies page shows the policy is enabled. Right-click on the VPN client icon in your VPN client. 1. ProSafe VPN Firewall 200 FVX538 Reference Manual 6. Click Apply to the FVX538. Figure 5-10 5-8 Virtual Private Networking v1.0, March 2009 Follow these steps to configure your Windows toolbar...
... the NETGEAR Prosafe VPN Client installed, configure a VPN client policy to connect to save your settings: the VPN Policies page shows the policy is enabled. Right-click on the VPN client icon in your VPN client. 1. ProSafe VPN Firewall 200 FVX538 Reference Manual 6. Click Apply to the FVX538. Figure 5-10 5-8 Virtual Private Networking v1.0, March 2009 Follow these steps to configure your Windows toolbar...
FVX538 Reference Manual
Page 113
... open a New Connection. Figure 5-11 Fill in this example, we are using 21.208.216.81. Enter the FQDN address which the FVX538 VPN Wizard provided; in this example, we are using gw1_local.com. • From the second ID Type pull-down menu, choose IP Subnet.... Networking 5-9 v1.0, March 2009 Give the New Connection a name; in this example, we are using gw1. ProSafe VPN Firewall 200 FVX538 Reference Manual 2. In the upper left of the Policy Editor window, click the New Document icon (the first on the left) to the instructions below. • Under Connection Security...
... open a New Connection. Figure 5-11 Fill in this example, we are using 21.208.216.81. Enter the FQDN address which the FVX538 VPN Wizard provided; in this example, we are using gw1_local.com. • From the second ID Type pull-down menu, choose IP Subnet.... Networking 5-9 v1.0, March 2009 Give the New Connection a name; in this example, we are using gw1. ProSafe VPN Firewall 200 FVX538 Reference Manual 2. In the upper left of the Policy Editor window, click the New Document icon (the first on the left) to the instructions below. • Under Connection Security...
FVX538 Reference Manual
Page 115
In the upper left of the window, click the disk icon to view the settings: no changes are needed. • On the left, expand Authentication (Phase 1) and click Proposal 1: no changes are needed. ProSafe VPN Firewall 200 FVX538 Reference Manual 4. Figure 5-13 • On the left , expand Key Exchange (Phase 2) and click Proposal 1. Verify the Security Policy settings; No changes are needed . 5. Virtual Private Networking v1.0, March 2009 5-11 no changes are needed . • On the left , click Security Policy to save the policy.
In the upper left of the window, click the disk icon to view the settings: no changes are needed. • On the left, expand Authentication (Phase 1) and click Proposal 1: no changes are needed. ProSafe VPN Firewall 200 FVX538 Reference Manual 4. Figure 5-13 • On the left , expand Key Exchange (Phase 2) and click Proposal 1. Verify the Security Policy settings; No changes are needed . 5. Virtual Private Networking v1.0, March 2009 5-11 no changes are needed . • On the left , click Security Policy to save the policy.
FVX538 Reference Manual
Page 116
...Private Networking To test the client connection, from your Windows toolbar and choose Connect..., then My Connections\gw1. Figure 5-15 The VPN client icon in your PC, right-click on the VPN client icon in the system tray should receive the ... status of a connection and troubleshooting problems with a connection. ProSafe VPN Firewall 200 FVX538 Reference Manual Testing the Connections and Viewing Status Information Both the NETGEAR VPN Client and the FVX538 provide VPN connection and status information. NETGEAR VPN Client Status and Log Information To test a client connection and...
...Private Networking To test the client connection, from your Windows toolbar and choose Connect..., then My Connections\gw1. Figure 5-15 The VPN client icon in your PC, right-click on the VPN client icon in the system tray should receive the ... status of a connection and troubleshooting problems with a connection. ProSafe VPN Firewall 200 FVX538 Reference Manual Testing the Connections and Viewing Status Information Both the NETGEAR VPN Client and the FVX538 provide VPN connection and status information. NETGEAR VPN Client Status and Log Information To test a client connection and...
FVX538 Reference Manual
Page 123
...ProSafe VPN Firewall 200 FVX538 Reference Manual Digital Self Certificates are used to authenticate the identity of each CA and contains the following data: Virtual Private Networking v1.0, March 2009 5-19 The FVX538...purpose defined is ONLY for VPN then the certificate is only uploaded to the HTTPS certificate repository and as well in -house Windows server, or by the ...VPN & HTTPS then the certificate is accepted. Digital Certificates can be either self signed or can be used by this router during the Internet Key Exchange (IKE) authentication phase to authenticate connecting VPN...
...ProSafe VPN Firewall 200 FVX538 Reference Manual Digital Self Certificates are used to authenticate the identity of each CA and contains the following data: Virtual Private Networking v1.0, March 2009 5-19 The FVX538...purpose defined is ONLY for VPN then the certificate is only uploaded to the HTTPS certificate repository and as well in -house Windows server, or by the ...VPN & HTTPS then the certificate is accepted. Digital Certificates can be either self signed or can be used by this router during the Internet Key Exchange (IKE) authentication phase to authenticate connecting VPN...
FVX538 Reference Manual
Page 137
ProSafe VPN Firewall 200 FVX538 Reference Manual 10. Right-click the VPN client icon in the IKE Policies Table (a sample policy is shown below) Figure 5-26 Configuring the ProSafe VPN Client for ModeConfig From a client PC running NETGEAR ProSafe VPN Client software, configure the remote VPN client ...connection. Virtual Private Networking v1.0, March 2009 5-33 To configure the client PC: 1. a. Click Apply. In the upper left of the Policy Editor window...
ProSafe VPN Firewall 200 FVX538 Reference Manual 10. Right-click the VPN client icon in the IKE Policies Table (a sample policy is shown below) Figure 5-26 Configuring the ProSafe VPN Client for ModeConfig From a client PC running NETGEAR ProSafe VPN Client software, configure the remote VPN client ...connection. Virtual Private Networking v1.0, March 2009 5-33 To configure the client PC: 1. a. Click Apply. In the upper left of the Policy Editor window...
FVX538 Reference Manual
Page 141
ProSafe VPN Firewall 200 FVX538 Reference Manual To test the connection: 1. in the toolbar will read "On". 3. Within 30 seconds the message "Successfully connected to MyConnections/modecfg_test will appear; Click on the VPN firewall LAN. From the client PC, ping a computer on the connection. The connection policy you configured will display and the VPN client icon in this case "My Connections\modecfg_test". 2. Virtual Private Networking v1.0, March 2009 5-37 Right-click on the VPN client icon in the Windows toolbar and select Connect.
ProSafe VPN Firewall 200 FVX538 Reference Manual To test the connection: 1. in the toolbar will read "On". 3. Within 30 seconds the message "Successfully connected to MyConnections/modecfg_test will appear; Click on the VPN firewall LAN. From the client PC, ping a computer on the connection. The connection policy you configured will display and the VPN client icon in this case "My Connections\modecfg_test". 2. Virtual Private Networking v1.0, March 2009 5-37 Right-click on the VPN client icon in the Windows toolbar and select Connect.
FVX538 Reference Manual
Page 155
...134.177.0.123 and you use the number of your FVX538 by running tracert from the Windows Run menu option. If you are using a Windows computer with a browser via SSL, you remotely connect the FVX538 with Internet Explorer 5.5 or higher, simply click Yes...login URL is https://IP_address:port_number or https://FullyQualifiedDomainName:port_number. Click Apply to have your firewall for HTTP. 5. Router and Network Management v1.0, March 2009 6-13 ProSafe VPN Firewall 200 FVX538 Reference Manual Web browser access normally uses the standard HTTP service port 80. Tip: If...
...134.177.0.123 and you use the number of your FVX538 by running tracert from the Windows Run menu option. If you are using a Windows computer with a browser via SSL, you remotely connect the FVX538 with Internet Explorer 5.5 or higher, simply click Yes...login URL is https://IP_address:port_number or https://FullyQualifiedDomainName:port_number. Click Apply to have your firewall for HTTP. 5. Router and Network Management v1.0, March 2009 6-13 ProSafe VPN Firewall 200 FVX538 Reference Manual Web browser access normally uses the standard HTTP service port 80. Tip: If...
FVX538 Reference Manual
Page 163
... Traffic Statistics Figure 6-7 Router and Network Management v1.0, March 2009 6-21 Click this button to display Internet Traffic details. WAN port shuts down once traffic limit reached. Each WAN port is at least 1 MB. If you have not enabled the Traffic Meter, these statistics are updated in a sub-window. ProSafe VPN Firewall 200 FVX538 Reference Manual •...
... Traffic Statistics Figure 6-7 Router and Network Management v1.0, March 2009 6-21 Click this button to display Internet Traffic details. WAN port shuts down once traffic limit reached. Each WAN port is at least 1 MB. If you have not enabled the Traffic Meter, these statistics are updated in a sub-window. ProSafe VPN Firewall 200 FVX538 Reference Manual •...
FVX538 Reference Manual
Page 172
Lists all Routers between the source (this device) and the destination IP address. www.netgear.com) to test a connection. However, some network devices can do a DNS lookup to the Diagnostics screen. A DNS (Domain Name Server) converts the ...that the destination is unreachable. ProSafe VPN Firewall 200 FVX538 Reference Manual Figure 6-16 Table 6-5. The Trace Route results will be configured not to respond to the Diagnostics screen. click "Back" on the Windows menu bar to return to find the IP address. 6-30 v1.0, March 2009 Router and Network Management If you can...
Lists all Routers between the source (this device) and the destination IP address. www.netgear.com) to test a connection. However, some network devices can do a DNS lookup to the Diagnostics screen. A DNS (Domain Name Server) converts the ...that the destination is unreachable. ProSafe VPN Firewall 200 FVX538 Reference Manual Figure 6-16 Table 6-5. The Trace Route results will be configured not to respond to the Diagnostics screen. click "Back" on the Windows menu bar to return to find the IP address. 6-30 v1.0, March 2009 Router and Network Management If you can...
FVX538 Reference Manual
Page 177
ProSafe VPN Firewall 200 FVX538 Reference Manual • Make sure your PC's IP address is on page 7-7. These auto-generated addresses are lost. • Click the Refresh or Reload button in the Web browser. If you are using Internet Explorer, click Refresh to another menu or tab, or your firewall's IP ...an IP address if the computer cannot reach a DHCP server. The changes may be in the range of Windows and MacOS will set the firewall's IP address to locate the router's LAN interface address. • Make sure your PC's address should be caching the old configuration. If ...
ProSafe VPN Firewall 200 FVX538 Reference Manual • Make sure your PC's IP address is on page 7-7. These auto-generated addresses are lost. • Click the Refresh or Reload button in the Web browser. If you are using Internet Explorer, click Refresh to another menu or tab, or your firewall's IP ...an IP address if the computer cannot reach a DHCP server. The changes may be in the range of Windows and MacOS will set the firewall's IP address to locate the router's LAN interface address. • Make sure your PC's address should be caching the old configuration. If ...
FVX538 Reference Manual
Page 179
... addresses. To ping the firewall from your firewall is not functioning correctly, you could have the firewall configured as www addresses) to the designated device. Refer to Your Firewall You can ping the firewall from a PC running Windows 95 or later: 1. From the Windows toolbar, click Start and select.... You may not have one or two DNS servers for example: ping 192.168.1.1 3. Configure your firewall to the following problems: Troubleshooting 7-5 v1.0, March 2009 A message, similar to spoof your PC or workstation. ProSafe VPN Firewall 200 FVX538 Reference Manual -
... addresses. To ping the firewall from your firewall is not functioning correctly, you could have the firewall configured as www addresses) to the designated device. Refer to Your Firewall You can ping the firewall from a PC running Windows 95 or later: 1. From the Windows toolbar, click Start and select.... You may not have one or two DNS servers for example: ping 192.168.1.1 3. Configure your firewall to the following problems: Troubleshooting 7-5 v1.0, March 2009 A message, similar to spoof your PC or workstation. ProSafe VPN Firewall 200 FVX538 Reference Manual -
FVX538 Reference Manual
Page 180
...Path from Your PC to "Manually Configuring Your Internet Connection" on for your network interface card and for your firewall and your cable or DSL modem is different from your broadband modem, but one of the remote device. ...the default gateway. Check to see that the corresponding Link LEDs are connected to a remote device. From the Windows run menu, type: PING -n 10 where is off, follow the instructions in the previous section are both ... (the portion of your PC to your ISP's DNS server. ProSafe VPN Firewall 200 FVX538 Reference Manual • Wrong physical connections -
...Path from Your PC to "Manually Configuring Your Internet Connection" on for your network interface card and for your firewall and your cable or DSL modem is different from your broadband modem, but one of the remote device. ...the default gateway. Check to see that the corresponding Link LEDs are connected to a remote device. From the Windows run menu, type: PING -n 10 where is off, follow the instructions in the previous section are both ... (the portion of your PC to your ISP's DNS server. ProSafe VPN Firewall 200 FVX538 Reference Manual • Wrong physical connections -
FVX538 Reference Manual
Page 189
...interface. NETGEAR recommends using Internet Explorer or Netscape Navigator 4.0 or above. For the initial connection to the Internet and configuration of the options below. ProSafe VPN Firewall 200 FVX538 Reference Manual Cabling and Computer Hardware Requirements To use the VPN firewall on your... must use a Category 5 (CAT5) cable such as the one provided with DHCP configuration, please refer to automatically get its TCP/IP configuration from the firewall via DHCP. There are readily available for Dual WAN Ports B-3 v1.0, March 2009 Network Planning for Windows...
...interface. NETGEAR recommends using Internet Explorer or Netscape Navigator 4.0 or above. For the initial connection to the Internet and configuration of the options below. ProSafe VPN Firewall 200 FVX538 Reference Manual Cabling and Computer Hardware Requirements To use the VPN firewall on your... must use a Category 5 (CAT5) cable such as the one provided with DHCP configuration, please refer to automatically get its TCP/IP configuration from the firewall via DHCP. There are readily available for Dual WAN Ports B-3 v1.0, March 2009 Network Planning for Windows...
FVX538 Reference Manual
Page 190
ProSafe VPN Firewall 200 FVX538 Reference Manual • If you have a computer already connected using the active Internet access account, you may also refer to record them on the page .... Record all the settings for each section. • You may want to the FVX538 Resource CD for the NETGEAR Router ISP Guide which provides Internet connection information for many ISPs. Record all the settings for each tab page. - For Windows 2000/XP, open the TCP/IP or Network control panel. Once you locate your...
ProSafe VPN Firewall 200 FVX538 Reference Manual • If you have a computer already connected using the active Internet access account, you may also refer to record them on the page .... Record all the settings for each section. • You may want to the FVX538 Resource CD for the NETGEAR Router ISP Guide which provides Internet connection information for many ISPs. Record all the settings for each tab page. - For Windows 2000/XP, open the TCP/IP or Network control panel. Once you locate your...