FVS318 Reference Manual
Page 2
...the products described in accordance with the instructions, may occur due to radio or television reception, which the receiver is declared by NETGEAR, Inc. These limits are trademarks or registered trademarks of EN 55 022 Class B (CISPR 22). This equipment generates, uses...and found to radio communications. Microsoft, Windows, and Windows NT are registered trademarks or trademarks of the product(s) or circuit layout(s) described herein. EN 55 022 Declaration of Conformance This is to certify that the FVS318 Broadband ProSafe VPN Firewall is no guarantee that may cause ...
...the products described in accordance with the instructions, may occur due to radio or television reception, which the receiver is declared by NETGEAR, Inc. These limits are trademarks or registered trademarks of EN 55 022 Class B (CISPR 22). This equipment generates, uses...and found to radio communications. Microsoft, Windows, and Windows NT are registered trademarks or trademarks of the product(s) or circuit layout(s) described herein. EN 55 022 Declaration of Conformance This is to certify that the FVS318 Broadband ProSafe VPN Firewall is no guarantee that may cause ...
FVS318 Reference Manual
Page 16
... printer--you man choose one of the following several options, according to your printer supports printing two pages on the upper right of the browser window. - Click the print icon in the upper left of the chapter you were viewing. - Click the print icon in the upper left of ... about specifying the correct range of the window. - " Sequence of Steps in the toolbar at the top right of the toolbar to print the currently displayed topic. Use the PDF button in the HTML View. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall How to Print this Manual To print ...
... printer--you man choose one of the following several options, according to your printer supports printing two pages on the upper right of the browser window. - Click the print icon in the upper left of the chapter you were viewing. - Click the print icon in the upper left of ... about specifying the correct range of the window. - " Sequence of Steps in the toolbar at the top right of the toolbar to print the currently displayed topic. Use the PDF button in the HTML View. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall How to Print this Manual To print ...
FVS318 Reference Manual
Page 20
... addresses, and you can choose a nonstandard port number. • Diagnostic functions The firewall incorporates built-in diagnostic functions such as Windows, Macintosh, or Linux. For security, you can limit remote management access to the network. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Easy Installation and Management You can install, configure, and operate the...
... addresses, and you can choose a nonstandard port number. • Diagnostic functions The firewall incorporates built-in diagnostic functions such as Windows, Macintosh, or Linux. For security, you can limit remote management access to the network. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Easy Installation and Management You can install, configure, and operate the...
FVS318 Reference Manual
Page 24
..., select the TCP/IP entry for the Ethernet adapter, and click Properties. • For Windows 2000/XP, open the Local Area Network Connection, select the TCP/IP entry for the Ethernet... page 3-3. 3-2 Connecting the Firewall to the Internet M-10146-01 Once you locate your Internet configuration parameters, you may also refer to the FVS318 Resource CD (SW-10021-01) for the NETGEAR Router ISP Guide which is set...the Internet. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall LAN Configuration Requirements For the initial connection to the Internet and configuration of your...
..., select the TCP/IP entry for the Ethernet adapter, and click Properties. • For Windows 2000/XP, open the Local Area Network Connection, select the TCP/IP entry for the Ethernet... page 3-3. 3-2 Connecting the Firewall to the Internet M-10146-01 Once you locate your Internet configuration parameters, you may also refer to the FVS318 Resource CD (SW-10021-01) for the NETGEAR Router ISP Guide which is set...the Internet. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall LAN Configuration Requirements For the initial connection to the Internet and configuration of your...
FVS318 Reference Manual
Page 29
...prompted, enter admin for the firewall User Name and password for the Model FVS318 Broadband ProSafe VPN Firewall A login window opens as any user name or password you may use to log in to the Internet Figure 3-6: Setup Wizard a. If you were unable to connect to the firewall, please refer to "Basic .... You are not the same as shown in Figure 3-5 below: Figure 3-5: Login window Note: If you do not see the menu above, click the Setup Wizard link on page 8-1. Connecting the Firewall to the firewall. Click the Yes button in lower case letters. Reference Manual for the...
...prompted, enter admin for the firewall User Name and password for the Model FVS318 Broadband ProSafe VPN Firewall A login window opens as any user name or password you may use to log in to the Internet Figure 3-6: Setup Wizard a. If you were unable to connect to the firewall, please refer to "Basic .... You are not the same as shown in Figure 3-5 below: Figure 3-5: Login window Note: If you do not see the menu above, click the Setup Wizard link on page 8-1. Connecting the Firewall to the firewall. Click the Yes button in lower case letters. Reference Manual for the...
FVS318 Reference Manual
Page 59
...server, enter the server's IP address here. A WINS server records and reports a list of names and IP address of Windows PCs on its MAC address from the router's LAN subnet, such as 192.168.0.X. 3. How to Specify Reserved IP Addresses When you specify a reserved IP address for...time it here. 4. Advanced WAN and LAN Configuration 5-9 M-10146-01 To reserve an IP address: 1. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall The Firewall will deliver the following parameters to any LAN device that requests DHCP: • An IP Address from the range you have defined ...
...server, enter the server's IP address here. A WINS server records and reports a list of names and IP address of Windows PCs on its MAC address from the router's LAN subnet, such as 192.168.0.X. 3. How to Specify Reserved IP Addresses When you specify a reserved IP address for...time it here. 4. Advanced WAN and LAN Configuration 5-9 M-10146-01 To reserve an IP address: 1. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall The Firewall will deliver the following parameters to any LAN device that requests DHCP: • An IP Address from the range you have defined ...
FVS318 Reference Manual
Page 66
...NETGEAR's web site for Windows. Understanding How FVS318 VPN Tunnels Are Configured You create VPN tunnels definitions via the VPN Settings link under the Setup section of the main menu on the Internet. Identifies the VPN endpoints by IPSec ID, IP address, or a fully qualified domain name (FQDN). There are described below. The FVS318 VPN Firewall router... the FVS318. In this case, the remote PC is the complete URL of the router. However, due to your network is the other interconnection. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall VPN client ...
...NETGEAR's web site for Windows. Understanding How FVS318 VPN Tunnels Are Configured You create VPN tunnels definitions via the VPN Settings link under the Setup section of the main menu on the Internet. Identifies the VPN endpoints by IPSec ID, IP address, or a fully qualified domain name (FQDN). There are described below. The FVS318 VPN Firewall router... the FVS318. In this case, the remote PC is the complete URL of the router. However, due to your network is the other interconnection. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall VPN client ...
FVS318 Reference Manual
Page 77
... 6-13 From the main menu, click the VPN Settings link, click the radio button of the tunnel you will update, and click Edit to FVS318 A at the new address of http://192.168.3.1. Configure the VPN settings on network A and log back in to view the VPN Settings - Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall d.
... 6-13 From the main menu, click the VPN Settings link, click the radio button of the tunnel you will update, and click Edit to FVS318 A at the new address of http://192.168.3.1. Configure the VPN settings on network A and log back in to view the VPN Settings - Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall d.
FVS318 Reference Manual
Page 79
... but users will be between 8 and 80 characters, and the letters are case sensitive. Click Apply to the other FVS318. Using our example, from Windows Virtual Private Networking M-10146-01 6-15 Type ping -t 192.168.0.1 , and then click OK. To configure the ... Entering a combination of the other . With IKE, a pre-shared key that FVS318's network. Default is 3600 seconds (1 hour) • IKE Life Time - e. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall The IKE settings for mutual identification. If one network to save the Security Association...
... but users will be between 8 and 80 characters, and the letters are case sensitive. Click Apply to the other FVS318. Using our example, from Windows Virtual Private Networking M-10146-01 6-15 Type ping -t 192.168.0.1 , and then click OK. To configure the ... Entering a combination of the other . With IKE, a pre-shared key that FVS318's network. Default is 3600 seconds (1 hour) • IKE Life Time - e. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall The IKE settings for mutual identification. If one network to save the Security Association...
FVS318 Reference Manual
Page 80
...be sent to "reply." The PC must have a VPN client program that your remote PC is connected through dialup, cable or DSL modem, or other means, and we will connect to NETGEAR's web site for Windows. This will automatically establish the connection. Now that supports ... the Firewalls will cause a continuous ping to be purchased from "timed out" to the first FVS318. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall c. The SafeNet VPN Client can be connected to the Internet through a simple cable/DSL router, or if you wish to use different VPN client software...
...be sent to "reply." The PC must have a VPN client program that your remote PC is connected through dialup, cable or DSL modem, or other means, and we will connect to NETGEAR's web site for Windows. This will automatically establish the connection. Now that supports ... the Firewalls will cause a continuous ping to be purchased from "timed out" to the first FVS318. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall c. The SafeNet VPN Client can be connected to the Internet through a simple cable/DSL router, or if you wish to use different VPN client software...
FVS318 Reference Manual
Page 81
...Forward Secrecy: Enabled Encryption Protocol -- Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall The worksheet below identifies the parameters used in seconds: 28800 ...VPN Tunnel Settings Configuration Worksheet IKE Security Association Settings Connection Name: VPNLANPC Pre-Shared Key: r>T(h4&3@#kB Secure Association -- The VPN Settings - IKE window opens as shown below: Virtual Private Networking M-10146-01 6-17 Table 6-2: PC to configure a new VPN tunnel. To configure the Firewall, follow these steps: a. Configure the VPN Tunnel on the FVS318...
...Forward Secrecy: Enabled Encryption Protocol -- Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall The worksheet below identifies the parameters used in seconds: 28800 ...VPN Tunnel Settings Configuration Worksheet IKE Security Association Settings Connection Name: VPNLANPC Pre-Shared Key: r>T(h4&3@#kB Secure Association -- The VPN Settings - IKE window opens as shown below: Virtual Private Networking M-10146-01 6-17 Table 6-2: PC to configure a new VPN tunnel. To configure the Firewall, follow these steps: a. Configure the VPN Tunnel on the FVS318...
FVS318 Reference Manual
Page 83
...functions such as Network Neighborhood, click the NETBIOS Enable check box to install either or both of the VPN Adapter or the IPSec Component. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall • Remote WAN IP Address: 0.0.0.0 since the remote PC has a dynamically assigned IP address.... IKE Life Time - Alternatively, you do not have the option to allow NETBIOS traffic over the VPN tunnel. Default is 28800 seconds (8 hours). If you need to insert your Windows CD to save the Security Association tunnel settings into the table. 2. Click Apply to complete the ...
...functions such as Network Neighborhood, click the NETBIOS Enable check box to install either or both of the VPN Adapter or the IPSec Component. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall • Remote WAN IP Address: 0.0.0.0 since the remote PC has a dynamically assigned IP address.... IKE Life Time - Alternatively, you do not have the option to allow NETBIOS traffic over the VPN tunnel. Default is 28800 seconds (8 hours). If you need to insert your Windows CD to save the Security Association tunnel settings into the table. 2. Click Apply to complete the ...
FVS318 Reference Manual
Page 86
...The Pre-Shared Key that you will need to Specify Internal Network Address checkbox and click OK. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall d. Configure the Global Policy Settings. Figure 6-16: Security Policy Editor Global Policy Options • From the Options menu ...at the top of the Security Policy Editor window, click on the left side of the Security Policy Editor window, select Global Policy Settings. •...
...The Pre-Shared Key that you will need to Specify Internal Network Address checkbox and click OK. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall d. Configure the Global Policy Settings. Figure 6-16: Security Policy Editor Global Policy Options • From the Options menu ...at the top of the Security Policy Editor window, click on the left side of the Security Policy Editor window, select Global Policy Settings. •...
FVS318 Reference Manual
Page 87
... the Model FVS318 Broadband ProSafe VPN Firewall Figure 6-17: Security Policy Editor My Identity • Choose None in the Select Certificate menu. • Select IP Address in the Internal Network IP Address box. Use 192.168.100.2 for this connection. Select PPP Adapter in the FVS318 configuration. ... provide the type of the Security Policy Editor window, expand the Security Policy heading by double clicking its name or clicking on the left side of encryption (DES or 3DES) to access the Internet. Configure the VPN Client Authentication Proposal. Otherwise, leave this example....
... the Model FVS318 Broadband ProSafe VPN Firewall Figure 6-17: Security Policy Editor My Identity • Choose None in the Select Certificate menu. • Select IP Address in the Internal Network IP Address box. Use 192.168.100.2 for this connection. Select PPP Adapter in the FVS318 configuration. ... provide the type of the Security Policy Editor window, expand the Security Policy heading by double clicking its name or clicking on the left side of encryption (DES or 3DES) to access the Internet. Configure the VPN Client Authentication Proposal. Otherwise, leave this example....
FVS318 Reference Manual
Page 88
... Group 1. h. After you have configured and saved the VPN client information, your selection in the range of the Security Policy Editor window, select Save Changes. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall • Expand the Authentication subheading by double clicking its ...name or clicking on the "+" symbol. From the File menu at the top of the remote VPN router's LAN. ...
... Group 1. h. After you have configured and saved the VPN client information, your selection in the range of the Security Policy Editor window, select Save Changes. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall • Expand the Authentication subheading by double clicking its ...name or clicking on the "+" symbol. From the File menu at the top of the remote VPN router's LAN. ...
FVS318 Reference Manual
Page 89
...several seconds and two minutes, the ping response should see the login screen of the FVS318. To check the VPN Connection, you should change from the remote PC to "reply." Virtual Private Networking M-10146-01 6-25 On the Windows taskbar, click the Start button, and then click Run. Type ping -t 192.168... open the browser of the remote PC and enter the LAN IP Address of the attempt to the LAN IP address of the Firewall. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall 3. Check the VPN Connection. Figure 6-18: Running a Ping test to the first...
...several seconds and two minutes, the ping response should see the login screen of the FVS318. To check the VPN Connection, you should change from the remote PC to "reply." Virtual Private Networking M-10146-01 6-25 On the Windows taskbar, click the Start button, and then click Run. Type ping -t 192.168... open the browser of the remote PC and enter the LAN IP Address of the attempt to the LAN IP address of the Firewall. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall 3. Check the VPN Connection. Figure 6-18: Running a Ping test to the first...
FVS318 Reference Manual
Page 90
... Virtual Private Networking Reference Manual for this connection is shown below : Figure 6-20: Log Viewer screen The Connection Monitor screen for the Model FVS318 Broadband ProSafe VPN Firewall Monitoring the PC VPN Connection Using SafeNet Tools Information on the Windows Start button, then select Programs, then SafeNet SoftRemote, then either the Connection Monitor or Log Viewer.
... Virtual Private Networking Reference Manual for this connection is shown below : Figure 6-20: Log Viewer screen The Connection Monitor screen for the Model FVS318 Broadband ProSafe VPN Firewall Monitoring the PC VPN Connection Using SafeNet Tools Information on the Windows Start button, then select Programs, then SafeNet SoftRemote, then either the Connection Monitor or Log Viewer.
FVS318 Reference Manual
Page 99
Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Click on the "Show Statistics" button to freeze the ... since this port. Specifies the intervals at which the statistics are updated in Figure 7-2 below: Figure 7-2. Router Statistics Fields Field WAN, LAN, or Serial Port Status TxPkts RxPkts Collisions Tx B/s Tx B/s Up Time ...Managing Your Network 7-3 M-10146-01 Table 7-2. The time elapsed since reset or manual clear. Click on this window. The average line utilization -average CLU for the WAN (Internet), LAN (local), and Serial ports. The time...
Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Click on the "Show Statistics" button to freeze the ... since this port. Specifies the intervals at which the statistics are updated in Figure 7-2 below: Figure 7-2. Router Statistics Fields Field WAN, LAN, or Serial Port Status TxPkts RxPkts Collisions Tx B/s Tx B/s Up Time ...Managing Your Network 7-3 M-10146-01 Table 7-2. The time elapsed since reset or manual clear. Click on this window. The average line utilization -average CLU for the WAN (Internet), LAN (local), and Serial ports. The time...
FVS318 Reference Manual
Page 110
... typically take about one minute. In some cases, you have chosen for the Model FVS318 Broadband ProSafe VPN Firewall 2. Reference Manual for the firewall. 3. In the Router Upgrade menu, click the Browse to interrupt the Web browser by closing the window, clicking a link, or loading a new page. From the Main Menu of the browser interface, under the...
... typically take about one minute. In some cases, you have chosen for the Model FVS318 Broadband ProSafe VPN Firewall 2. Reference Manual for the firewall. 3. In the Router Upgrade menu, click the Browse to interrupt the Web browser by closing the window, clicking a link, or loading a new page. From the Main Menu of the browser interface, under the...
FVS318 Reference Manual
Page 113
... it again. • Make sure you are using the correct cable: - Make sure that power is in the range of Windows and MacOS will set the firewall's IP address to a cable or DSL modem, use the cable that was supplied with the cable or DSL modem. If you...straight-through Ethernet cable or an Ethernet crossover cable. Refer to "Verifying TCP/IP Properties" on page C-6 or "Configuring the Macintosh for the Model FVS318 Broadband ProSafe VPN Firewall • Make sure that CAPS LOCK is password. Reference Manual for TCP/IP Networking" on page C-15 to find your PC's IP address....
... it again. • Make sure you are using the correct cable: - Make sure that power is in the range of Windows and MacOS will set the firewall's IP address to a cable or DSL modem, use the cable that was supplied with the cable or DSL modem. If you...straight-through Ethernet cable or an Ethernet crossover cable. Refer to "Verifying TCP/IP Properties" on page C-6 or "Configuring the Macintosh for the Model FVS318 Broadband ProSafe VPN Firewall • Make sure that CAPS LOCK is password. Reference Manual for TCP/IP Networking" on page C-15 to find your PC's IP address....