FVS318 Reference Manual
Page 6
...3-12 How to Manually Configure Your Internet Connection 3-13 Chapter 4 Protecting Your Network Protecting Access to Your FVS318 VPN Firewall 4-1 How to Change the Built-In Password 4-1 How to Change the Administrator Login Timeout 4-2 ... Configuration Configuring Advanced WAN Settings 5-1 Setting Up A Default DMZ Server 5-1 Enabling Access to Local Servers Through a FVS318 5-2 How to Configure Port Forwarding to Local Servers 5-2 Respond to Ping on Internet WAN Port 5-3 How to Support... 5-5 How to Enable UPnP 5-6 Understanding LAN TCP/IP Setup Parameters 5-7 vi Contents M-10146-01
...3-12 How to Manually Configure Your Internet Connection 3-13 Chapter 4 Protecting Your Network Protecting Access to Your FVS318 VPN Firewall 4-1 How to Change the Built-In Password 4-1 How to Change the Administrator Login Timeout 4-2 ... Configuration Configuring Advanced WAN Settings 5-1 Setting Up A Default DMZ Server 5-1 Enabling Access to Local Servers Through a FVS318 5-2 How to Configure Port Forwarding to Local Servers 5-2 Respond to Ping on Internet WAN Port 5-3 How to Support... 5-5 How to Enable UPnP 5-6 Understanding LAN TCP/IP Setup Parameters 5-7 vi Contents M-10146-01
FVS318 Reference Manual
Page 19
The firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. • PPP over Ethernet (PPPoE) PPP over a DSL connection by simulating a dial-up connection. This feature eliminates ... single-user ISP account. • Automatic Configuration of PCs on the LAN using a domain name when your Internet service provider (ISP). Protocol Support The FVS318 supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). That port will accommodate either type of cable to a switch or...
The firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. • PPP over Ethernet (PPPoE) PPP over a DSL connection by simulating a dial-up connection. This feature eliminates ... single-user ISP account. • Automatic Configuration of PCs on the LAN using a domain name when your Internet service provider (ISP). Protocol Support The FVS318 supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). That port will accommodate either type of cable to a switch or...
FVS318 Reference Manual
Page 20
...Installation and Management You can use these diagnostic functions directly from the FVS318 when your are connected on the LAN or when you are connected over the Internet via the Internet. A user-friendly Setup Wizard is provided and online help documentation is built into the ... functions The firewall incorporates built-in diagnostic functions such as Windows, Macintosh, or Linux. You can install, configure, and operate the FVS318 within minutes after connecting it to the Web Management Interface from almost any type of ISP account. • Remote management The firewall allows...
...Installation and Management You can use these diagnostic functions directly from the FVS318 when your are connected on the LAN or when you are connected over the Internet via the Internet. A user-friendly Setup Wizard is provided and online help documentation is built into the ... functions The firewall incorporates built-in diagnostic functions such as Windows, Macintosh, or Linux. You can install, configure, and operate the FVS318 within minutes after connecting it to the Web Management Interface from almost any type of ISP account. • Remote management The firewall allows...
FVS318 Reference Manual
Page 23
... to the Internet: 1. The Internet Service Provider (ISP) configuration information for your DSL or Cable modem account. LAN Hardware Requirements The FVS318 VPN Firewall connects to the Internet 3-1 M-10146-01 Connecting the Firewall to your LAN via twisted-pair Ethernet cables. A computer properly ... Firewall on your Local Area Network (LAN), connect to the Internet, perform basic configuration of your FVS318 Broadband ProSafe VPN Firewall using the Setup Wizard, or how to manually configure your Internet connection. Computer Requirements To use a Category 5 (CAT5) cable such as the...
... to the Internet: 1. The Internet Service Provider (ISP) configuration information for your DSL or Cable modem account. LAN Hardware Requirements The FVS318 VPN Firewall connects to the Internet 3-1 M-10146-01 Connecting the Firewall to your LAN via twisted-pair Ethernet cables. A computer properly ... Firewall on your Local Area Network (LAN), connect to the Internet, perform basic configuration of your FVS318 Broadband ProSafe VPN Firewall using the Setup Wizard, or how to manually configure your Internet connection. Computer Requirements To use a Category 5 (CAT5) cable such as the...
FVS318 Reference Manual
Page 29
When prompted, enter admin for the firewall User Name and password for the Model FVS318 Broadband ProSafe VPN Firewall A login window opens as any user name or password you were unable to connect...its own user name and password. Note: The user name and password are now connected to the Internet Figure 3-6: Setup Wizard a. Click the Yes button in the Setup Wizard. d. You are not the same as shown in Figure 3-5 below: Figure 3-5: Login window Note: If ... the Firewall to the Internet 3-7 M-10146-01 If you do not see the menu above, click the Setup Wizard link on page 8-1.
When prompted, enter admin for the firewall User Name and password for the Model FVS318 Broadband ProSafe VPN Firewall A login window opens as any user name or password you were unable to connect...its own user name and password. Note: The user name and password are now connected to the Internet Figure 3-6: Setup Wizard a. Click the Yes button in the Setup Wizard. d. You are not the same as shown in Figure 3-5 below: Figure 3-5: Login window Note: If ... the Firewall to the Internet 3-7 M-10146-01 If you do not see the menu above, click the Setup Wizard link on page 8-1.
FVS318 Reference Manual
Page 30
... on page 3-3. Note: If you choose not to use fixed IP address assignment. The procedures for filling in the Setup Wizard for the Model FVS318 Broadband ProSafe VPN Firewall b. c. When the firewall successfully detects an active Ethernet connection with a broadband modem, the firewall...'s Internet LED goes on page 3-13. d. The Setup Wizard will be prompted to check the physical connection between your firewall ...
... on page 3-3. Note: If you choose not to use fixed IP address assignment. The procedures for filling in the Setup Wizard for the Model FVS318 Broadband ProSafe VPN Firewall b. c. When the firewall successfully detects an active Ethernet connection with a broadband modem, the firewall...'s Internet LED goes on page 3-13. d. The Setup Wizard will be prompted to check the physical connection between your firewall ...
FVS318 Reference Manual
Page 31
... ISP's login program on your PC in order to a menu like the PPPoE menu in Figure 3-7: Figure 3-7: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall Wizard-Detected PPPoE Option If the Setup Wizard determines that your ISP does not automatically transmit DNS addresses to the firewall during login, select "Use...
... ISP's login program on your PC in order to a menu like the PPPoE menu in Figure 3-7: Figure 3-7: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall Wizard-Detected PPPoE Option If the Setup Wizard determines that your ISP does not automatically transmit DNS addresses to the firewall during login, select "Use...
FVS318 Reference Manual
Page 32
...that your Internet service account uses Dynamic IP assignment, you will attempt to the menu shown in Figure 3-8 below: Figure 3-8: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall If you enter an address here, after you may need to test your Internet connection. If you know...the ISP. Click on the Test button to enter it also. 3-10 M-10146-01 Connecting the Firewall to Chapter 8, Troubleshooting". If the NETGEAR website does not appear within one minute, refer to the Internet These parameters may also be necessary to access your ISP's services such as ...
...that your Internet service account uses Dynamic IP assignment, you will attempt to the menu shown in Figure 3-8 below: Figure 3-8: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall If you enter an address here, after you may need to test your Internet connection. If you know...the ISP. Click on the Test button to enter it also. 3-10 M-10146-01 Connecting the Firewall to Chapter 8, Troubleshooting". If the NETGEAR website does not appear within one minute, refer to the Internet These parameters may also be necessary to access your ISP's services such as ...
FVS318 Reference Manual
Page 33
... that is a host on the Test button to test your settings. 5. Otherwise, you can type in Figure 3-9 below: Figure 3-9: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall A DNS server is allowed by the ISP. Click on the Internet that PC. You must obtain it from the... your account is the Ethernet MAC address that will register the Ethernet MAC address of the computer that your firewall to masquerade as www.netgear.com) to numeric IP addresses. Reference Manual for Fixed IP address Connecting the Firewall to the Internet M-10146-01 3-11 Note: Some...
... that is a host on the Test button to test your settings. 5. Otherwise, you can type in Figure 3-9 below: Figure 3-9: Setup Wizard menu for the Model FVS318 Broadband ProSafe VPN Firewall A DNS server is allowed by the ISP. Click on the Internet that PC. You must obtain it from the... your account is the Ethernet MAC address that will register the Ethernet MAC address of the computer that your firewall to masquerade as www.netgear.com) to numeric IP addresses. Reference Manual for Fixed IP address Connecting the Firewall to the Internet M-10146-01 3-11 Note: Some...
FVS318 Reference Manual
Page 34
...Networking or Enternet to connect, log in to the firewall, then, from the Setup Basic Settings link, click on the Test button. You should have been provided to Chapter 8, Troubleshooting. If the NETGEAR website does not appear within one minute, refer to save the settings. 4. Your... firewall automatically connects to the Internet when one minute, refer to you recorded in "Worksheet for the Model FVS318 Broadband ProSafe VPN Firewall 1. To access the...
...Networking or Enternet to connect, log in to the firewall, then, from the Setup Basic Settings link, click on the Test button. You should have been provided to Chapter 8, Troubleshooting. If the NETGEAR website does not appear within one minute, refer to save the settings. 4. Your... firewall automatically connects to the Internet when one minute, refer to you recorded in "Worksheet for the Model FVS318 Broadband ProSafe VPN Firewall 1. To access the...
FVS318 Reference Manual
Page 35
... http://192.168.0.1 using a browser like Internet Explorer or Netscape® Navigator. Log in to the Internet M-10146-01 3-13 Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall How to Manually Configure Your Internet Connection You can manually configure your firewall using the menu below, or you can manually... in the previous section. ISP Does Not Require Login ISP Does Require Login Figure 3-10: Browser-based configuration Basic Settings menu You can allow the Setup Wizard to determine your configuration as described in Figure 3-10 using these steps: 1.
... http://192.168.0.1 using a browser like Internet Explorer or Netscape® Navigator. Log in to the Internet M-10146-01 3-13 Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall How to Manually Configure Your Internet Connection You can manually configure your firewall using the menu below, or you can manually... in the previous section. ISP Does Not Require Login ISP Does Require Login Figure 3-10: Browser-based configuration Basic Settings menu You can allow the Setup Wizard to determine your configuration as described in Figure 3-10 using these steps: 1.
FVS318 Reference Manual
Page 36
... you finish setting up your firewall, you normally must be called Host Name) and Domain Name. Click the Basic Settings link under the Setup section of the Basic Settings menu and fill in your PC when your account is the ISP's router to the Internet Some ISPs will ... a Secondary DNS Server address is allowed by the firewall on your network so that you a permanent, fixed (static) IP address for the Model FVS318 Broadband ProSafe VPN Firewall 2. Note: After completing the DNS configuration, restart the computers on the Internet port. You must launch a login program such as...
... you finish setting up your firewall, you normally must be called Host Name) and Domain Name. Click the Basic Settings link under the Setup section of the Basic Settings menu and fill in your PC when your account is the ISP's router to the Internet Some ISPs will ... a Secondary DNS Server address is allowed by the firewall on your network so that you a permanent, fixed (static) IP address for the Model FVS318 Broadband ProSafe VPN Firewall 2. Note: After completing the DNS configuration, restart the computers on the Internet port. You must launch a login program such as...
FVS318 Reference Manual
Page 55
... box. 5. These features can automatically solve many of the same port number. With the FVS318 Broadband ProSafe VPN Firewall , you can interfere with LAN IP Settings The LAN IP Setup menu allows configuration of the problems that people increasingly want to play Hexen II (using private...of LAN IP services such as 10.0.x.x, 192.168.x.x, 172.x.x.x to keep individual sessions intact. NAT can enable Microsoft UPnP for the Model FVS318 Broadband ProSafe VPN Firewall 3. NAT is a standard used in gateway devices such as multi-player games, real time communications, and other ...
... box. 5. These features can automatically solve many of the same port number. With the FVS318 Broadband ProSafe VPN Firewall , you can interfere with LAN IP Settings The LAN IP Setup menu allows configuration of the problems that people increasingly want to play Hexen II (using private...of LAN IP services such as 10.0.x.x, 192.168.x.x, 172.x.x.x to keep individual sessions intact. NAT can enable Microsoft UPnP for the Model FVS318 Broadband ProSafe VPN Firewall 3. NAT is a standard used in gateway devices such as multi-player games, real time communications, and other ...
FVS318 Reference Manual
Page 56
Click the LAN IP Setup link from the Advanced section of password, or using whatever User Name, Password and LAN address you have chosen for the Model FVS318 Broadband ProSafe VPN Firewall How to the Firewall at its default LAN address of http://192.168.0.1 with its default User Name of admin, default... Apply to display the menu shown in to Enable UPnP 1. Reference Manual for the Firewall. 2. Log in Figure 5-3 Figure 5-2: Enabling UPnP via the LAN IP Setup Menu 3. Click the Enable UPnP check box. 4.
Click the LAN IP Setup link from the Advanced section of password, or using whatever User Name, Password and LAN address you have chosen for the Model FVS318 Broadband ProSafe VPN Firewall How to the Firewall at its default LAN address of http://192.168.0.1 with its default User Name of admin, default... Apply to display the menu shown in to Enable UPnP 1. Reference Manual for the Firewall. 2. Log in Figure 5-3 Figure 5-2: Enabling UPnP via the LAN IP Setup Menu 3. Click the Enable UPnP check box. 4.
FVS318 Reference Manual
Page 57
...format. RIP-1 is the default. - Advanced WAN and LAN Configuration 5-7 M-10146-01 RIP-2B uses subnet broadcasting. The LAN TCP/IP Setup parameters are part of the Firewall. By default, this menu. The Firewall's default LAN IP configuration is: • LAN IP addresses-...other addresses are local to it will broadcast its routing table periodically. - Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Understanding LAN TCP/IP Setup Parameters The Firewall is shipped preconfigured to use a different IP addressing scheme, you have an unusual network...
...format. RIP-1 is the default. - Advanced WAN and LAN Configuration 5-7 M-10146-01 RIP-2B uses subnet broadcasting. The LAN TCP/IP Setup parameters are part of the Firewall. By default, this menu. The Firewall's default LAN IP configuration is: • LAN IP addresses-...other addresses are local to it will broadcast its routing table periodically. - Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall Understanding LAN TCP/IP Setup Parameters The Firewall is shipped preconfigured to use a different IP addressing scheme, you have an unusual network...
FVS318 Reference Manual
Page 60
... 3. Enter the TCP/IP, MTU, or DHCP parameters. 4. From the Main Menu, under Advanced, click the LAN IP Setup link to view the menu, shown in to the Firewall at its default LAN address of http://192.168.0.1 with its default User Name of ...admin, default password of password, or using whatever User Name, Password and LAN address you have chosen for the Model FVS318 Broadband ProSafe VPN Firewall How to save your changes. 5-10 M-10146-01 Advanced WAN and LAN Configuration Reference Manual for the Firewall. 2.
... 3. Enter the TCP/IP, MTU, or DHCP parameters. 4. From the Main Menu, under Advanced, click the LAN IP Setup link to view the menu, shown in to the Firewall at its default LAN address of http://192.168.0.1 with its default User Name of ...admin, default password of password, or using whatever User Name, Password and LAN address you have chosen for the Model FVS318 Broadband ProSafe VPN Firewall How to save your changes. 5-10 M-10146-01 Advanced WAN and LAN Configuration Reference Manual for the Firewall. 2.
FVS318 Reference Manual
Page 61
... In this case, you can use this feature, you must select a service provider and obtain an account with them. Figure 5-4: Dynamic DNS Setup Menu Advanced WAN and LAN Configuration M-10146-01 5-11 To use a commercial dynamic DNS service, who will allow you have configured your account ...address. However, if your Internet account uses a dynamically assigned IP address, you can register a domain name and have chosen for the Model FVS318 Broadband ProSafe VPN Firewall How to Configure Dynamic DNS If your network has a permanently assigned IP address, you will not know in to a...
... In this case, you can use this feature, you must select a service provider and obtain an account with them. Figure 5-4: Dynamic DNS Setup Menu Advanced WAN and LAN Configuration M-10146-01 5-11 To use a commercial dynamic DNS service, who will allow you have configured your account ...address. However, if your Internet account uses a dynamically assigned IP address, you can register a domain name and have chosen for the Model FVS318 Broadband ProSafe VPN Firewall How to Configure Dynamic DNS If your network has a permanently assigned IP address, you will not know in to a...
FVS318 Reference Manual
Page 66
... NETGEAR provides support for connections between NETGEAR VPN Firewalls, and between an FVS318 VPN Firewall and the SafeNet SoftRemote VPN Client for additional VPN information. Understanding How FVS318 VPN Tunnels Are Configured You create VPN tunnels definitions via the VPN Settings link under the Setup section... keys. In this case, the remote PC is not possible for NETGEAR to provide specific technical support for every other initiators can interoperate with a dynamically-assigned IP address enables that FVS318 to both initiate and respond to requests to open a VPN tunnel because...
... NETGEAR provides support for connections between NETGEAR VPN Firewalls, and between an FVS318 VPN Firewall and the SafeNet SoftRemote VPN Client for additional VPN information. Understanding How FVS318 VPN Tunnels Are Configured You create VPN tunnels definitions via the VPN Settings link under the Setup section... keys. In this case, the remote PC is not possible for NETGEAR to provide specific technical support for every other initiators can interoperate with a dynamically-assigned IP address enables that FVS318 to both initiate and respond to requests to open a VPN tunnel because...
FVS318 Reference Manual
Page 67
...Click the VPN Settings link of the Setup section of the main menu, click the radio button of network connection information you provide are more complex and there are the same for the Model FVS318 Broadband ProSafe VPN Firewall - Figure 6-2: FVS318 VPN tunnel network connection configuration menu Virtual ... tunnels on the VPN Settings menu, and then click the Edit button to access them. The kinds of a VPN tunnel on the FVS318 VPN Firewall require configuring the same network parameters. Reference Manual for the Main Mode, Aggressive Mode, and Manual Keys options. Manual Keys:...
...Click the VPN Settings link of the Setup section of the main menu, click the radio button of network connection information you provide are more complex and there are the same for the Model FVS318 Broadband ProSafe VPN Firewall - Figure 6-2: FVS318 VPN tunnel network connection configuration menu Virtual ... tunnels on the VPN Settings menu, and then click the Edit button to access them. The kinds of a VPN tunnel on the FVS318 VPN Firewall require configuring the same network parameters. Reference Manual for the Main Mode, Aggressive Mode, and Manual Keys options. Manual Keys:...
FVS318 Reference Manual
Page 69
...192, or - 256. Security Association Main Mode Configuration Fields Field Description Secure Association Choose Main Mode key exchange mode for the Model FVS318 Broadband ProSafe VPN Firewall Configuring a SA Using IKE Main Mode The most common configuration scenarios will use IKE to automatically generate required parameters....manage the authentication and encryption keys. The IKE Main Mode settings are more complex. Click the VPN Settings link of the Setup section of the main menu, click the radio button of a shared secret value. Perfect Forward Secrecy Perfect Forward Secrecy ...
...192, or - 256. Security Association Main Mode Configuration Fields Field Description Secure Association Choose Main Mode key exchange mode for the Model FVS318 Broadband ProSafe VPN Firewall Configuring a SA Using IKE Main Mode The most common configuration scenarios will use IKE to automatically generate required parameters....manage the authentication and encryption keys. The IKE Main Mode settings are more complex. Click the VPN Settings link of the Setup section of the main menu, click the radio button of a shared secret value. Perfect Forward Secrecy Perfect Forward Secrecy ...