FVS318 Reference Manual
Page 7
...Router as a DHCP Server 5-8 How to Specify Reserved IP Addresses 5-9 How to Configure LAN TCP/IP Settings 5-10 How to Configure Dynamic DNS 5-11 Using Static Routes ...5-12 Static Route Example 5-12 How to Configure Static Routes 5-13 Chapter 6 Virtual Private Networking Overview of VPN Configuration 6-1 Understanding How FVS318 VPN Tunnels Are Configured 6-2 Configuring VPN...Delete a Security Association 6-30 Blank VPN Tunnel Configuration Worksheets 6-31 Chapter 7 Managing Your Network Network Management Information 7-1 Viewing Router Status and Usage Statistics 7-1 Viewing ...
...Router as a DHCP Server 5-8 How to Specify Reserved IP Addresses 5-9 How to Configure LAN TCP/IP Settings 5-10 How to Configure Dynamic DNS 5-11 Using Static Routes ...5-12 Static Route Example 5-12 How to Configure Static Routes 5-13 Chapter 6 Virtual Private Networking Overview of VPN Configuration 6-1 Understanding How FVS318 VPN Tunnels Are Configured 6-2 Configuring VPN...Delete a Security Association 6-30 Blank VPN Tunnel Configuration Worksheets 6-31 Chapter 7 Managing Your Network Network Management Information 7-1 Viewing Router Status and Usage Statistics 7-1 Viewing ...
FVS318 Reference Manual
Page 8
... Device 8-6 Restoring the Default Configuration and Password 8-7 Problems with Date and Time 8-8 Appendix A Technical Specifications Technical Specifications A-1 Appendix B Networks, Routing, and Firewall Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-1 Routing Information Protocol B-2 IP Addresses and the Internet B-2 Netmask ...B-4 Subnet Addressing B-4 Private IP Addresses B-7 Single IP Address Operation Using NAT B-8 MAC Addresses...
... Device 8-6 Restoring the Default Configuration and Password 8-7 Problems with Date and Time 8-8 Appendix A Technical Specifications Technical Specifications A-1 Appendix B Networks, Routing, and Firewall Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-1 Routing Information Protocol B-2 IP Addresses and the Internet B-2 Netmask ...B-4 Subnet Addressing B-4 Private IP Addresses B-7 Single IP Address Operation Using NAT B-8 MAC Addresses...
FVS318 Reference Manual
Page 17
... This chapter describes the features of Service (DoS) attack protection and intrusion detection. The 8-port FVS318 provides highly reliable Internet access for Denial of the NETGEAR FVS318 Broadband ProSafe VPN Firewall . Key Features The FVS318 offers the following VPN features: Introduction 2-1 M-10146-01 Virtual Private Networking (VPN) The FVS318 VPN Firewall provides a secure encrypted connection between your network from attacks and intrusions.
... This chapter describes the features of Service (DoS) attack protection and intrusion detection. The 8-port FVS318 provides highly reliable Internet access for Denial of the NETGEAR FVS318 Broadband ProSafe VPN Firewall . Key Features The FVS318 offers the following VPN features: Introduction 2-1 M-10146-01 Virtual Private Networking (VPN) The FVS318 VPN Firewall provides a secure encrypted connection between your network from attacks and intrusions.
FVS318 Reference Manual
Page 18
... within Web addresses. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the FVS318 is compatible with many other VPN products. • Supports up to defend against hacker attacks. You can configure the firewall to email the log to you to ... Fast Ethernet network. You can connect to Internet content by screening for the Model FVS318 Broadband ProSafe VPN Firewall • Supports 8 VPN connections. • Supports industry standard VPN protocols The FVS318 VPN Firewall supports standard Manual or IKE keying methods, standard MD5 and SHA-1 authentication methods, ...
... within Web addresses. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the FVS318 is compatible with many other VPN products. • Supports up to defend against hacker attacks. You can configure the firewall to email the log to you to ... Fast Ethernet network. You can connect to Internet content by screening for the Model FVS318 Broadband ProSafe VPN Firewall • Supports 8 VPN connections. • Supports industry standard VPN protocols The FVS318 VPN Firewall supports standard Manual or IKE keying methods, standard MD5 and SHA-1 authentication methods, ...
FVS318 Reference Manual
Page 24
... M-10146-01 Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall LAN Configuration Requirements For the initial connection to the Internet and configuration of your firewall, you will need to connect a computer to the firewall which is set to the FVS318 Resource CD (SW-10021-01) for the NETGEAR Router ISP Guide which provides Internet connection information for...
... M-10146-01 Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall LAN Configuration Requirements For the initial connection to the Internet and configuration of your firewall, you will need to connect a computer to the firewall which is set to the FVS318 Resource CD (SW-10021-01) for the NETGEAR Router ISP Guide which provides Internet connection information for...
FVS318 Reference Manual
Page 27
...cable (B) which came with the firewall from your computer. B Cable or DSL modem Figure 3-3: Connect the computers on the router to your Cable or DSL modem to the firewall Note: The FVS318 VPN Firewall incorporates Auto UplinkTM technology. connecting to the firewall d. connecting to the Internet 3-5...of cable to the correct configuration. Connecting the Firewall to a PC) or an 'uplink' connection (e.g. That port will then configure itself to make the right connection. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall c. Connect the Ethernet cable (A) from a...
...cable (B) which came with the firewall from your computer. B Cable or DSL modem Figure 3-3: Connect the computers on the router to your Cable or DSL modem to the firewall Note: The FVS318 VPN Firewall incorporates Auto UplinkTM technology. connecting to the firewall d. connecting to the Internet 3-5...of cable to the correct configuration. Connecting the Firewall to a PC) or an 'uplink' connection (e.g. That port will then configure itself to make the right connection. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall c. Connect the Ethernet cable (A) from a...
FVS318 Reference Manual
Page 31
...firewall will keep the router connected to a menu like the PPPoE menu in . 3. Domain Name Server (DNS) Address: If you know that your Internet service account uses a login protocol such as PPP over Ethernet (PPPoE), you in Figure 3-7: Figure 3-7: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall... When you may also be called Host Name) and Domain Name. If this is available, enter it manually. 2. Connecting the Firewall to the firewall during login, select "Use these DNS servers" and enter the IP address of your PC in minutes. If you leave the ...
...firewall will keep the router connected to a menu like the PPPoE menu in . 3. Domain Name Server (DNS) Address: If you know that your Internet service account uses a login protocol such as PPP over Ethernet (PPPoE), you in Figure 3-7: Figure 3-7: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall... When you may also be called Host Name) and Domain Name. If this is available, enter it manually. 2. Connecting the Firewall to the firewall during login, select "Use these DNS servers" and enter the IP address of your PC in minutes. If you leave the ...
FVS318 Reference Manual
Page 33
...FVS318 Broadband ProSafe VPN Firewall A DNS server is the Ethernet MAC address that will be used by the firewall on the Internet that translates Internet names (such as that PC. Note: Some ISPs will then capture and use the MAC address of one minute, refer to Chapter 8, Troubleshooting". If the NETGEAR...obtain it from the ISP and enter it manually here. Typically your ISP transfers the IP address of the computer that your firewall during login. The Router's MAC Address is a host on the Internet port. Otherwise, you are now using its MAC address. 4. Reference Manual ...
...FVS318 Broadband ProSafe VPN Firewall A DNS server is the Ethernet MAC address that will be used by the firewall on the Internet that translates Internet names (such as that PC. Note: Some ISPs will then capture and use the MAC address of one minute, refer to Chapter 8, Troubleshooting". If the NETGEAR...obtain it from the ISP and enter it manually here. Typically your ISP transfers the IP address of the computer that your firewall during login. The Router's MAC Address is a host on the Internet port. Otherwise, you are now using its MAC address. 4. Reference Manual ...
FVS318 Reference Manual
Page 34
... addresses from any computer connected to your firewall, launch a browser such as www.netgear.com to run a dialer or login application such as needed. These functions are required to provide Internet access for the Model FVS318 Broadband ProSafe VPN Firewall 1. You should have been provided to ...may occur. 3-12 M-10146-01 Connecting the Firewall to the Internet when one minute, refer to Chapter 8, Troubleshooting. If a Secondary DNS Server address is now configured to perform the function of your ISP's gateway router. Your firewall is available, enter it also. A DNS...
... addresses from any computer connected to your firewall, launch a browser such as www.netgear.com to run a dialer or login application such as needed. These functions are required to provide Internet access for the Model FVS318 Broadband ProSafe VPN Firewall 1. You should have been provided to ...may occur. 3-12 M-10146-01 Connecting the Firewall to the Internet when one minute, refer to Chapter 8, Troubleshooting. If a Secondary DNS Server address is now configured to perform the function of your ISP's gateway router. Your firewall is available, enter it also. A DNS...
FVS318 Reference Manual
Page 36
... the instructions below . Select Yes if you a permanent, fixed (static) IP address for the Model FVS318 Broadband ProSafe VPN Firewall 2. Enter the IP address that PC. Note: After you finish setting up your firewall, you in the settings according to save your settings. 4. Click the Basic Settings link under the Setup...then only accept traffic from the MAC address of the network interface card in your PC when your account is the ISP's router to which your firewall will no longer need to launch the ISP's login program on your PC in the settings according to the Internet Or, ...
... the instructions below . Select Yes if you a permanent, fixed (static) IP address for the Model FVS318 Broadband ProSafe VPN Firewall 2. Enter the IP address that PC. Note: After you finish setting up your firewall, you in the settings according to save your settings. 4. Click the Basic Settings link under the Setup...then only accept traffic from the MAC address of the network interface card in your PC when your account is the ISP's router to which your firewall will no longer need to launch the ISP's login program on your PC in the settings according to the Internet Or, ...
FVS318 Reference Manual
Page 57
...private networks, and should be reached through a gateway or router. • RIP Direction RIP (Router Information Protocol) allows a router to Both or Out Only, the Firewall will incorporate the RIP information that the router sends. RIP-2 carries more information. RIP-2B uses subnet ... set to it will broadcast its routing table periodically. - Combined with other routers. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Understanding LAN TCP/IP Setup Parameters The Firewall is shipped preconfigured to use private IP addresses on the LAN side, and to...
...private networks, and should be reached through a gateway or router. • RIP Direction RIP (Router Information Protocol) allows a router to Both or Out Only, the Firewall will incorporate the RIP information that the router sends. RIP-2 carries more information. RIP-2B uses subnet ... set to it will broadcast its routing table periodically. - Combined with other routers. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Understanding LAN TCP/IP Setup Parameters The Firewall is shipped preconfigured to use private IP addresses on the LAN side, and to...
FVS318 Reference Manual
Page 58
... Otherwise, leave it to assign IP, DNS server, and default gateway addresses to all of DHCP and information about how to the router's LAN. Using the default addressing scheme, you should be done unless you are sure it is assigned to avoid duplicate addresses on the...Ending IP Address. If the resulting setting is the LAN address of the Firewall while connected through the Firewall that are satisfactory. To change the LAN IP address of the Firewall. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Note: If you change the MTU size: 1. You must then open a...
... Otherwise, leave it to assign IP, DNS server, and default gateway addresses to all of DHCP and information about how to the router's LAN. Using the default addressing scheme, you should be done unless you are sure it is assigned to avoid duplicate addresses on the...Ending IP Address. If the resulting setting is the LAN address of the Firewall while connected through the Firewall that are satisfactory. To change the LAN IP address of the Firewall. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Note: If you change the MTU size: 1. You must then open a...
FVS318 Reference Manual
Page 59
... WAN and LAN Configuration 5-9 M-10146-01 Reserved IP addresses should be assigned until the next time the PC contacts the router's DHCP server. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall The Firewall will deliver the following parameters to any LAN device that requests DHCP: • An IP Address from the range you have...
... WAN and LAN Configuration 5-9 M-10146-01 Reserved IP addresses should be assigned until the next time the PC contacts the router's DHCP server. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall The Firewall will deliver the following parameters to any LAN device that requests DHCP: • An IP Address from the range you have...
FVS318 Reference Manual
Page 62
...for unusual cases such as 192.168.x.x or 10.x.x.x, the dynamic DNS service will not work because private addresses will not be secure. If your Firewall. You must configure static routes only for an account. If the URL the dynamic DNS service provider gave you do not need to www.oray...is needed, consider the following case: • Your primary Internet access is your network. Type the User Name for your home network for the Model FVS318 Broadband ProSafe VPN Firewall 3. Note: The router supports only basic DDNS and the login and password may not be routed on the Internet.
...for unusual cases such as 192.168.x.x or 10.x.x.x, the dynamic DNS service will not work because private addresses will not be secure. If your Firewall. You must configure static routes only for an account. If the URL the dynamic DNS service provider gave you do not need to www.oray...is needed, consider the following case: • Your primary Internet access is your network. Type the User Name for your home network for the Model FVS318 Broadband ProSafe VPN Firewall 3. Note: The router supports only basic DDNS and the login and password may not be routed on the Internet.
FVS318 Reference Manual
Page 63
... to the ISP. In this static route applies to all traffic for these addresses should be accessed through the ISDN router at 192.168.0.100. • A Metric value of password, or using whatever User Name, Password and LAN address you have ...addresses. • The Gateway IP Address fields specifies that 134.177.0.0 should be denied by the company's firewall. Figure 5-5: Static Routes Table 3. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall When you first configured your ISP as a precautionary security measure in case RIP is activated. A default route...
... to the ISP. In this static route applies to all traffic for these addresses should be accessed through the ISDN router at 192.168.0.100. • A Metric value of password, or using whatever User Name, Password and LAN address you have ...addresses. • The Gateway IP Address fields specifies that 134.177.0.0 should be denied by the company's firewall. Figure 5-5: Static Routes Table 3. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall When you first configured your ISP as a precautionary security measure in case RIP is activated. A default route...
FVS318 Reference Manual
Page 64
This is for the Model FVS318 Broadband ProSafe VPN Firewall a. d. f. Type the Gateway IP Address, which must be reported in Figure ...Active to make this is a single host, type 255.255.255.255. The static route will not be a router on the same LAN segment as the Metric value. Type a number between your network and the destination. Select ... of the final destination. h. Click Apply to the LAN only. Type the Destination IP Address of routers between 1 and 15 as the Firewall. If the destination is a direct connection, set it to open the Edit Menu, shown in RIP...
This is for the Model FVS318 Broadband ProSafe VPN Firewall a. d. f. Type the Gateway IP Address, which must be reported in Figure ...Active to make this is a single host, type 255.255.255.255. The static route will not be a router on the same LAN segment as the Metric value. Type a number between your network and the destination. Select ... of the final destination. h. Click Apply to the LAN only. Type the Destination IP Address of routers between 1 and 15 as the Firewall. If the destination is a direct connection, set it to open the Edit Menu, shown in RIP...
FVS318 Reference Manual
Page 65
Overview of the FVS318 VPN Firewall. VPN communications paths are between a remote computer and a network. A VPN between two or more networks, and between two or more NETGEAR VPN-enabled routers is enabled and remote computers have been assigned private IP addresses. • Secure access from a remote PC, such as a branch or home office and a main ...
Overview of the FVS318 VPN Firewall. VPN communications paths are between a remote computer and a network. A VPN between two or more networks, and between two or more NETGEAR VPN-enabled routers is enabled and remote computers have been assigned private IP addresses. • Secure access from a remote PC, such as a branch or home office and a main ...
FVS318 Reference Manual
Page 66
... software. In this case, the remote PC is not possible for NETGEAR to provide specific technical support for every other tunnel endpoint • The FVS318 VPN Firewall supports up to eight concurrent tunnels. There are described below. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall VPN client access allows a remote PC to connect to your network is...
... software. In this case, the remote PC is not possible for NETGEAR to provide specific technical support for every other tunnel endpoint • The FVS318 VPN Firewall supports up to eight concurrent tunnels. There are described below. Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall VPN client access allows a remote PC to connect to your network is...
FVS318 Reference Manual
Page 68
...WAN IP address or FQDN. Local IPSec identifier Enter a Local IPSec Identifier name for the Model FVS318 Broadband ProSafe VPN Firewall The FVS318 VPN tunnel network connection fields are defined in the other VPN endpoint as members of a department. Any local address. For a discussion of calculating IP addresses based...LAN start and finish Local IP addresses. 3. This selection will enable any device on the remote LAN communications through a NAT router, select "A subnet of remote addresses, such as the Local IPSec Identifier. Enter the start IP Address field, along with the...
...WAN IP address or FQDN. Local IPSec identifier Enter a Local IPSec Identifier name for the Model FVS318 Broadband ProSafe VPN Firewall The FVS318 VPN tunnel network connection fields are defined in the other VPN endpoint as members of a department. Any local address. For a discussion of calculating IP addresses based...LAN start and finish Local IP addresses. 3. This selection will enable any device on the remote LAN communications through a NAT router, select "A subnet of remote addresses, such as the Local IPSec Identifier. Enter the start IP Address field, along with the...
FVS318 Reference Manual
Page 78
Reference Manual for the FVS318 on LAN B by viewing its Maintenance menu Router Status link. When the FVS318 on LAN B is connected to the Internet, log in, go to just those devices. Alternatively, you could use FQDN, that device. • Remote LAN IP Address in the FVS318 on LAN B: 192... always initiate the connection. • Remote WAN IP Address in the FVS318 on LAN A: 10.0.0.1 This is the WAN IP Address for the Model FVS318 Broadband ProSafe VPN Firewall b. You can look up the WAN IP Address of the FVS318 on LAN A as illustrated above. • The Connection Names can ...
Reference Manual for the FVS318 on LAN B by viewing its Maintenance menu Router Status link. When the FVS318 on LAN B is connected to the Internet, log in, go to just those devices. Alternatively, you could use FQDN, that device. • Remote LAN IP Address in the FVS318 on LAN B: 192... always initiate the connection. • Remote WAN IP Address in the FVS318 on LAN A: 10.0.0.1 This is the WAN IP Address for the Model FVS318 Broadband ProSafe VPN Firewall b. You can look up the WAN IP Address of the FVS318 on LAN A as illustrated above. • The Connection Names can ...