FVS124G Reference Manual
Page 1
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports FVS124G NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10085-01 March 2005 202-10085-01, March 2005
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports FVS124G NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10085-01 March 2005 202-10085-01, March 2005
FVS124G Reference Manual
Page 3
... the placing of this list of conditions and the following disclaimer. 2. Voluntary Control Council for Interference (VCCI) Statement This equipment is hereby certified that the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports has been suppressed in accordance with the conditions set by Data Processing Equipment and... of radio interference. Additional Copyrights AES Copyright (c) 2001, Dr Brian Gladman , Worcester, UK. Read instructions for the ProSafe VPN Firewall 25 with the regulations. Reference Manual for correct handling.
... the placing of this list of conditions and the following disclaimer. 2. Voluntary Control Council for Interference (VCCI) Statement This equipment is hereby certified that the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports has been suppressed in accordance with the conditions set by Data Processing Equipment and... of radio interference. Additional Copyrights AES Copyright (c) 2001, Dr Brian Gladman , Worcester, UK. Read instructions for the ProSafe VPN Firewall 25 with the regulations. Reference Manual for correct handling.
FVS124G Reference Manual
Page 6
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: FVS124G March 2005 Router FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Business English 202-10085-01 -6 202-10085-01, March 2005
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: FVS124G March 2005 Router FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Business English 202-10085-01 -6 202-10085-01, March 2005
FVS124G Reference Manual
Page 8
... Requirements 4-3 Internet Configuration Requirements 4-4 Where Do I Get the Internet Configuration Parameters 4-4 Record Your Internet Connection Information 4-5 Connecting the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 4-6 Step 1: Physically Connect the VPN Firewall to Your Network ...4-7 Step 2: Log in to the VPN Firewall (Required 4-7 Step 3: Configure the Internet Connections to Your ISPs (Required 4-8 Manually Configuring Your Internet Connection 4-12 Programming the Traffic Meter (if Desired 4-13 Step 4: Configure the WAN Mode (Required for Dual...
... Requirements 4-3 Internet Configuration Requirements 4-4 Where Do I Get the Internet Configuration Parameters 4-4 Record Your Internet Connection Information 4-5 Connecting the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 4-6 Step 1: Physically Connect the VPN Firewall to Your Network ...4-7 Step 2: Log in to the VPN Firewall (Required 4-7 Step 3: Configure the Internet Connections to Your ISPs (Required 4-8 Manually Configuring Your Internet Connection 4-12 Programming the Traffic Meter (if Desired 4-13 Step 4: Configure the WAN Mode (Required for Dual...
FVS124G Reference Manual
Page 10
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Creating a VPN Connection: Between FVX538 and FVS124G 7-5 Configuring the FVX538 7-5 Configuring the FVS124G 7-9 Testing the Connection 7-11 Creating a VPN Connection: Netgear VPN Client to FVS124G 7-11 Configuring the FVS124G 7-12 Configuring the VPN Client 7-12 Testing the Connection 7-20 Chapter 8 Router and...
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Creating a VPN Connection: Between FVX538 and FVS124G 7-5 Configuring the FVX538 7-5 Configuring the FVS124G 7-9 Testing the Connection 7-11 Creating a VPN Connection: Netgear VPN Client to FVS124G 7-11 Configuring the FVS124G 7-12 Configuring the VPN Client 7-12 Testing the Connection 7-20 Chapter 8 Router and...
FVS124G Reference Manual
Page 15
... conventions: Table 1-1. Web site at http://kbserver.netgear.com/products/FVS124G.asp. Audience, Scope, Conventions, and Formats This reference manual assumes that the reader has basic to highlight information of this manual. This manual is used to intermediate computer and Internet skills. However... network, Internet, firewall, and VPN technologies tutorial information is provided in the Appendices and on the NETGEAR, Inc. Manual Scope Product Version Manual Publication Date FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports March 2005 Note: Product updates...
... conventions: Table 1-1. Web site at http://kbserver.netgear.com/products/FVS124G.asp. Audience, Scope, Conventions, and Formats This reference manual assumes that the reader has basic to highlight information of this manual. This manual is used to intermediate computer and Internet skills. However... network, Internet, firewall, and VPN technologies tutorial information is provided in the Appendices and on the NETGEAR, Inc. Manual Scope Product Version Manual Publication Date FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports March 2005 Note: Product updates...
FVS124G Reference Manual
Page 20
...; Blocks access from your email address or email pager whenever a significant event occurs. 2-2 Introduction 202-10085-01, March 2005 The FVS124G will log security events such as off-limits. • Logs security incidents. The firewall balances users between the two lines for Increased...easy monitoring of status and activity. • Flash memory for the outgoing traffic. Reference Manual for the ProSafe VPN Firewall 25 with Content Filtering Unlike simple Internet sharing NAT routers, the FVS124G is a true firewall, using stateful packet inspection to : • Provide backup and...
...; Blocks access from your email address or email pager whenever a significant event occurs. 2-2 Introduction 202-10085-01, March 2005 The FVS124G will log security events such as off-limits. • Logs security incidents. The firewall balances users between the two lines for Increased...easy monitoring of status and activity. • Flash memory for the outgoing traffic. Reference Manual for the ProSafe VPN Firewall 25 with Content Filtering Unlike simple Internet sharing NAT routers, the FVS124G is a true firewall, using stateful packet inspection to : • Provide backup and...
FVS124G Reference Manual
Page 21
... Firewall is equipped with Auto Uplink With its URL keyword filtering feature, the FVS124G prevents objectionable content from reaching your own rules regarding permitted users, services, protocols, schedules, and destinations. Autosensing Ethernet Connections with several features designed... in this section. • PCs Hidden by NAT NAT opens a temporary path to the Internet for requests originating from the local network. Reference Manual for the ProSafe VPN Firewall 25 with NAT Although NAT prevents Internet locations from directly accessing the PCs on the LAN, the firewall allows you...
... Firewall is equipped with Auto Uplink With its URL keyword filtering feature, the FVS124G prevents objectionable content from reaching your own rules regarding permitted users, services, protocols, schedules, and destinations. Autosensing Ethernet Connections with several features designed... in this section. • PCs Hidden by NAT NAT opens a temporary path to the Internet for requests originating from the local network. Reference Manual for the ProSafe VPN Firewall 25 with NAT Although NAT prevents Internet locations from directly accessing the PCs on the LAN, the firewall allows you...
FVS124G Reference Manual
Page 22
...actual DNS addresses from the ISP during connection setup and forwards DNS requests from almost any type of Attached PCs by DHCP The FVS124G VPN Firewall dynamically assigns network configuration information, including IP, gateway, and domain name server (DNS) addresses, to the network. The ... on the LAN using only a single IP address, which may be statically or dynamically assigned by simulating a dial-up connection. Reference Manual for connecting remote hosts to the Internet over a DSL connection by your Internet service provider (ISP). This feature eliminates the need to ...
...actual DNS addresses from the ISP during connection setup and forwards DNS requests from almost any type of Attached PCs by DHCP The FVS124G VPN Firewall dynamically assigns network configuration information, including IP, gateway, and domain name server (DNS) addresses, to the network. The ... on the LAN using only a single IP address, which may be statically or dynamically assigned by simulating a dial-up connection. Reference Manual for connecting remote hosts to the Internet over a DSL connection by your Internet service provider (ISP). This feature eliminates the need to ...
FVS124G Reference Manual
Page 23
...easy way to monitor its status and activity. Introduction 2-5 202-10085-01, March 2005 Maintenance and Support NETGEAR offers the following features to help you maximize your use of the FVS124G VPN Firewall: • Flash memory for firmware upgrade • Free technical support seven days a week,... manage log resources from a remote location on the Internet. Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports • VPN Wizard The FVS124G VPN Firewall includes the NETGEAR VPN Wizard to easily configure VPN tunnels according to the recommendations of...
...easy way to monitor its status and activity. Introduction 2-5 202-10085-01, March 2005 Maintenance and Support NETGEAR offers the following features to help you maximize your use of the FVS124G VPN Firewall: • Flash memory for firmware upgrade • Free technical support seven days a week,... manage log resources from a remote location on the Internet. Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports • VPN Wizard The FVS124G VPN Firewall includes the NETGEAR VPN Wizard to easily configure VPN tunnels according to the recommendations of...
FVS124G Reference Manual
Page 24
...panel of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to verify various conditions. The Router's Front Panel The FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports..., including: - Application Notes and other helpful information. - ProSafe VPN Client Software - Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN ...
...panel of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to verify various conditions. The Router's Front Panel The FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports..., including: - Application Notes and other helpful information. - ProSafe VPN Client Software - Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN ...
FVS124G Reference Manual
Page 25
...2-2) contains the factory defaults reset button, LAN and WAN ports, and DC power input connection. The Router's Rear Panel The rear panel of the FVS124G ProSafe VPN Firewall 25 with a connected Ethernet device. The LAN port is operating at 1,000 Mbps. The WAN port has detected a link with...at 10 Mbps. The WAN port is down or not being transmitted or received by the LAN port. Reference Manual for the ProSafe VPN Firewall 25 with a connected Ethernet device. FVS124G front panel Object Activity PWR LED On (Green) Off TEST LED On (Amber) Blinking (Amber) Off WAN...
...2-2) contains the factory defaults reset button, LAN and WAN ports, and DC power input connection. The Router's Rear Panel The rear panel of the FVS124G ProSafe VPN Firewall 25 with a connected Ethernet device. The LAN port is operating at 1,000 Mbps. The WAN port has detected a link with...at 10 Mbps. The WAN port is down or not being transmitted or received by the LAN port. Reference Manual for the ProSafe VPN Firewall 25 with a connected Ethernet device. FVS124G front panel Object Activity PWR LED On (Green) Off TEST LED On (Amber) Blinking (Amber) Off WAN...
FVS124G Reference Manual
Page 26
... Defaults Factory Defaults reset push button (see "Default Factory Settings" on the bottom of the FVS124G's enclosure if you forget the following factory default information: • IP Address: http://192.168... and Dual WAN Ports Factory Defaults LAN 4 3 2 1 WAN2 WAN1 12VDC 1.2A Factory Defaults Button LAN Ports Figure 2-2: FVS124G Rear Panel WAN2 Port WAN1 Port AC Power Adapter Connection Viewed from the LAN • User name: admin • Password:... Fast Ethernet Switch, N-way automatic speed negotiation, auto MDI/MDIX. Reference Manual for the Button factory defaults).
... Defaults Factory Defaults reset push button (see "Default Factory Settings" on the bottom of the FVS124G's enclosure if you forget the following factory default information: • IP Address: http://192.168... and Dual WAN Ports Factory Defaults LAN 4 3 2 1 WAN2 WAN1 12VDC 1.2A Factory Defaults Button LAN Ports Figure 2-2: FVS124G Rear Panel WAN2 Port WAN1 Port AC Power Adapter Connection Viewed from the LAN • User name: admin • Password:... Fast Ethernet Switch, N-way automatic speed negotiation, auto MDI/MDIX. Reference Manual for the Button factory defaults).
FVS124G Reference Manual
Page 27
Enter http://192.168.1.1 as the URL. 3. Once you get the login screen (Figure 2-4), enter the following information: • admin for User Name • password for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports LAN IP Address User Name Password Figure 2-3: FVS124G Bottom Label Logging into the Router To log into the FVS124G once it is connected, 1. Open a Web browser. 2. Reference Manual for Password Introduction 2-9 202-10085-01, March 2005
Enter http://192.168.1.1 as the URL. 3. Once you get the login screen (Figure 2-4), enter the following information: • admin for User Name • password for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports LAN IP Address User Name Password Figure 2-3: FVS124G Bottom Label Logging into the Router To log into the FVS124G once it is connected, 1. Open a Web browser. 2. Reference Manual for Password Introduction 2-9 202-10085-01, March 2005
FVS124G Reference Manual
Page 28
Default Factory Settings When you first receive your FVS124G, the default factory settings will be set as shown in as username guest and default password password. see "The Router's Front Panel" on page 2-6. • ... 4 Gigabit LAN and Dual WAN Ports Figure 2-4: Login screen on the Web browser Note: Read-only access is provided by logging in Table 2-1 below. Reference Manual for the ProSafe VPN Firewall 25 with the Factory Defaults restore switch on the front panel -
Default Factory Settings When you first receive your FVS124G, the default factory settings will be set as shown in as username guest and default password password. see "The Router's Front Panel" on page 2-6. • ... 4 Gigabit LAN and Dual WAN Ports Figure 2-4: Login screen on the Web browser Note: Read-only access is provided by logging in Table 2-1 below. Reference Manual for the ProSafe VPN Firewall 25 with the Factory Defaults restore switch on the front panel -
FVS124G Reference Manual
Page 29
Reference Manual for Daylight Saving TIme SNMP Default admin password DHCP server is enabled, issues addresses in DHCP server IP Configuration Time Zone Time Zone Adjust for ... sensitive) Password (case sensitive) Built-in the default subnet IP Address: 192.168.1.1 Subnet Mask: 255.255.255.0 Gateway: 0.0.0.0 GMT Enabled Disabled NETGEAR Related Products NETGEAR products related to the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports are as follows: • FA311 10/100 PCI Adapter • FA511...
Reference Manual for Daylight Saving TIme SNMP Default admin password DHCP server is enabled, issues addresses in DHCP server IP Configuration Time Zone Time Zone Adjust for ... sensitive) Password (case sensitive) Built-in the default subnet IP Address: 192.168.1.1 Subnet Mask: 255.255.255.0 Gateway: 0.0.0.0 GMT Enabled Disabled NETGEAR Related Products NETGEAR products related to the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports are as follows: • FA311 10/100 PCI Adapter • FA511...
FVS124G Reference Manual
Page 46
... up your traffic (see "Services-Based Rules" on page 6-4 for "Step 3: Configure the Internet Connections to the FVS124G VPN Firewall through the same ISP. Reference Manual for "Step 5: Configure Dynamic DNS (If Needed)" on page 4-20. 3. Have active Internet services such as shown... domain names for the ProSafe VPN Firewall 25 with two ISPs connected to Your ISPs (Required)" on page 4-8. customer premises WAN port 1 FVS124G firewall WAN port 2 route diversity physical facility 1 physical facility 2 ISP 1 ISP 2 Internet Figure 4-1: Postulated WAN provisioning used in Figure...
... up your traffic (see "Services-Based Rules" on page 6-4 for "Step 3: Configure the Internet Connections to the FVS124G VPN Firewall through the same ISP. Reference Manual for "Step 5: Configure Dynamic DNS (If Needed)" on page 4-20. 3. Have active Internet services such as shown... domain names for the ProSafe VPN Firewall 25 with two ISPs connected to Your ISPs (Required)" on page 4-8. customer premises WAN port 1 FVS124G firewall WAN port 2 route diversity physical facility 1 physical facility 2 ISP 1 ISP 2 Internet Figure 4-1: Postulated WAN provisioning used in Figure...
FVS124G Reference Manual
Page 47
...computer must have an installed Ethernet Network Interface Card (NIC) and an Ethernet cable. Connecting the FVS124G to a ping and setting MTU size, port speed, and upload bandwidth. Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports You make these... Configuration Requirements The FVS124G includes a built-in "Step 6: Configure the WAN Options (If Needed)" on page 4-7. • There are a variety of your network at 100 Mbps, you must provide a standard 10 Mbps (10BASE-T) or 100 Mbps (100BASE-Tx) Ethernet interface. NETGEAR recommends using Internet ...
...computer must have an installed Ethernet Network Interface Card (NIC) and an Ethernet cable. Connecting the FVS124G to a ping and setting MTU size, port speed, and upload bandwidth. Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports You make these... Configuration Requirements The FVS124G includes a built-in "Step 6: Configure the WAN Options (If Needed)" on page 4-7. • There are a variety of your network at 100 Mbps, you must provide a standard 10 Mbps (10BASE-T) or 100 Mbps (100BASE-Tx) Ethernet interface. NETGEAR recommends using Internet ...
FVS124G Reference Manual
Page 48
... to record them on how your ISPs set up your ISPs to the Internet. Once you locate your firewall to the FVS124G Resource CD for the NETGEAR Router ISP Guide which is also known as Static IP Address Where Do I Get the Internet Configuration Parameters? If you... the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Internet Configuration Requirements Depending on the page below. 4-4 Connecting the FVS124G to connect your Internet configuration parameters, you can gather the required Internet connection information. • Your ISPs provide all the settings for each...
... to record them on how your ISPs set up your ISPs to the Internet. Once you locate your firewall to the FVS124G Resource CD for the NETGEAR Router ISP Guide which is also known as Static IP Address Where Do I Get the Internet Configuration Parameters? If you... the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Internet Configuration Requirements Depending on the page below. 4-4 Connecting the FVS124G to connect your Internet configuration parameters, you can gather the required Internet connection information. • Your ISPs provide all the settings for each...
FVS124G Reference Manual
Page 49
..., host, computer, or system name. • If your Internet Service Provider (ISP). The Service Name is mail.xxx.yyy.com, then use your ISP. Reference Manual for their primary screen name. Fill in the following examples as given by all ISPs. Your ISP might call this page. Dynamic DSN Service Provider...
..., host, computer, or system name. • If your Internet Service Provider (ISP). The Service Name is mail.xxx.yyy.com, then use your ISP. Reference Manual for their primary screen name. Fill in the following examples as given by all ISPs. Your ISP might call this page. Dynamic DSN Service Provider...