FVS328 Reference Manual
Page 6
Worksheet for Recording Your Internet Connection Information 3-3 Connecting the FVS328 to Your LAN 3-4 How to Connect the FVS328 to Your LAN 3-4 Configuring a Wizard-Detected Login Account 3-8 Configuring a Wizard-Detected Dynamic IP Account 3-9 Configuring a Wizard-Detected ... LAN-to-LAN Connections 4-6 How to Configure LAN-to-LAN Connections 4-6 Chapter 5 WAN and LAN Configuration Configuring LAN IP Settings 5-1 Using the Router as a DHCP Server 5-2 How to Configure LAN TCP/IP Setup Settings 5-3 How to Configure Reserved IP Addresses 5-4 Configuring WAN Settings 5-4 Connecting ...
Worksheet for Recording Your Internet Connection Information 3-3 Connecting the FVS328 to Your LAN 3-4 How to Connect the FVS328 to Your LAN 3-4 Configuring a Wizard-Detected Login Account 3-8 Configuring a Wizard-Detected Dynamic IP Account 3-9 Configuring a Wizard-Detected ... LAN-to-LAN Connections 4-6 How to Configure LAN-to-LAN Connections 4-6 Chapter 5 WAN and LAN Configuration Configuring LAN IP Settings 5-1 Using the Router as a DHCP Server 5-2 How to Configure LAN TCP/IP Setup Settings 5-3 How to Configure Reserved IP Addresses 5-4 Configuring WAN Settings 5-4 Connecting ...
FVS328 Reference Manual
Page 8
... VPNC Scenario 1: Gateway-to-Gateway with Preshared Secrets 7-18 FVS328 Scenario 1: How to Configure the IKE and VPN Policies 7-20 How to Check VPN Connections 7-24 FVS328 Scenario 2: Authenticating with RSA Certificates 7-25 Chapter 8 Managing Your Network Network Management ...8-1 How to Configure Remote Management 8-1 Viewing Router Status and Usage Statistics 8-3 Viewing Attached Devices 8-6 Viewing, Selecting...
... VPNC Scenario 1: Gateway-to-Gateway with Preshared Secrets 7-18 FVS328 Scenario 1: How to Configure the IKE and VPN Policies 7-20 How to Check VPN Connections 7-24 FVS328 Scenario 2: Authenticating with RSA Certificates 7-25 Chapter 8 Managing Your Network Network Management ...8-1 How to Configure Remote Management 8-1 Viewing Router Status and Usage Statistics 8-3 Viewing Attached Devices 8-6 Viewing, Selecting...
FVS328 Reference Manual
Page 9
... Attack/Scan ...B-4 Access Block Site ...B-6 All Web Sites and News Groups Visited B-6 System Admin Sessions B-6 Policy Administration LOG B-7 Appendix C Networks, Routing, and Firewall Basics Related Publications ...C-1 Basic Router Concepts C-1 What is a Router C-1 Routing Information Protocol C-2 IP Addresses and the Internet C-2 Netmask ...C-4 Subnet Addressing C-4 Private IP Addresses C-7 Single IP Address Operation Using NAT C-7 MAC...
... Attack/Scan ...B-4 Access Block Site ...B-6 All Web Sites and News Groups Visited B-6 System Admin Sessions B-6 Policy Administration LOG B-7 Appendix C Networks, Routing, and Firewall Basics Related Publications ...C-1 Basic Router Concepts C-1 What is a Router C-1 Routing Information Protocol C-2 IP Addresses and the Internet C-2 Netmask ...C-4 Subnet Addressing C-4 Private IP Addresses C-7 Single IP Address Operation Using NAT C-7 MAC...
FVS328 Reference Manual
Page 17
.... About the FVS328 The FVS328 is a complete security solution that rely on the firewall. Unlike simple Internet sharing routers that protects your network from attacks and intrusions and enables secure communications using Virtual Private Networks (VPN). The 8-port FVS328 provides highly reliable... port on Network Address Translation (NAT) for security, the FVS328 uses Stateful Packet Inspection for Denial of the NETGEAR FVS328 ProSafe VPN Firewall with Dial Back-up to 253 users. Key Features The FVS328 features are highlighted below. Full Routing on Both the Broadband ...
.... About the FVS328 The FVS328 is a complete security solution that rely on the firewall. Unlike simple Internet sharing routers that protects your network from attacks and intrusions and enables secure communications using Virtual Private Networks (VPN). The 8-port FVS328 provides highly reliable... port on Network Address Translation (NAT) for security, the FVS328 uses Stateful Packet Inspection for Denial of the NETGEAR FVS328 ProSafe VPN Firewall with Dial Back-up to 253 users. Key Features The FVS328 features are highlighted below. Full Routing on Both the Broadband ...
FVS328 Reference Manual
Page 18
...or services that you specify as off-limits. • Logs security incidents The FVS328 will log security events such as blocked incoming traffic, port scans, attacks, and administrator logins. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual • Remote Access Server (RAS) allows ...attacks such as Ping of the supported service providers. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the FVS328 is enabled with many other LAN resources, or the Internet based on your LAN, other VPN products. • Support for up to your e-mail address or e-...
...or services that you specify as off-limits. • Logs security incidents The FVS328 will log security events such as blocked incoming traffic, port scans, attacks, and administrator logins. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual • Remote Access Server (RAS) allows ...attacks such as Ping of the supported service providers. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the FVS328 is enabled with many other LAN resources, or the Internet based on your LAN, other VPN products. • Support for up to your e-mail address or e-...
FVS328 Reference Manual
Page 26
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual Internet Configuration Requirements Depending on page 3-3. 3-2 Connecting the FVS328 to the Internet May 2004, 202-10031-01 If you cannot locate this information, you can ask your firewall to the Internet: • Host and Domain Names •...the options below. • If you have provided you with all the information needed to connect to the FVS328 Resource CD for the NETGEAR Router ISP Guide which provides Internet connection information for many ISPs. Once you locate your Internet configuration parameters, you ...
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual Internet Configuration Requirements Depending on page 3-3. 3-2 Connecting the FVS328 to the Internet May 2004, 202-10031-01 If you cannot locate this information, you can ask your firewall to the Internet: • Host and Domain Names •...the options below. • If you have provided you with all the information needed to connect to the FVS328 Resource CD for the NETGEAR Router ISP Guide which provides Internet connection information for many ISPs. Once you locate your Internet configuration parameters, you ...
FVS328 Reference Manual
Page 28
... of the FVS328 to the broadband modem. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual Connecting the FVS328 to Your LAN This section provides instructions for connecting the FVS328 ProSafe VPN Firewall with Dial Back-up to your computer (D). 2. Connect the Cat 5 Ethernet cable which came with your firewall into a Local port on the router. Note: The FVS328 Firewall incorporates Auto...
... of the FVS328 to the broadband modem. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual Connecting the FVS328 to Your LAN This section provides instructions for connecting the FVS328 ProSafe VPN Firewall with Dial Back-up to your computer (D). 2. Connect the Cat 5 Ethernet cable which came with your firewall into a Local port on the router. Note: The FVS328 Firewall incorporates Auto...
FVS328 Reference Manual
Page 29
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual Warning: Failure to restart your network in the correct sequence could prevent you in to the Internet, do not run that the Ethernet cable connecting the powered on the router is securely attached at both ends. "ROADBAND 0RO3AFE60.&IREWALLWITH$IAL"ACKUP 072 ... light is not lit, make sure the Ethernet cable is securely attached to the firewall Internet port and the powered on modem. • Local: A Local light on computer to the router is lit. Now, turn on your computer. Note: If software usually logs you...
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual Warning: Failure to restart your network in the correct sequence could prevent you in to the Internet, do not run that the Ethernet cable connecting the powered on the router is securely attached at both ends. "ROADBAND 0RO3AFE60.&IREWALLWITH$IAL"ACKUP 072 ... light is not lit, make sure the Ethernet cable is securely attached to the firewall Internet port and the powered on modem. • Local: A Local light on computer to the router is lit. Now, turn on your computer. Note: If software usually logs you...
FVS328 Reference Manual
Page 30
...and password. After logging in to the router, you may use to log in lower case letters. A login window like the one shown below opens: Figure 3-2: Login window d. From your PC, launch your Internet connection. b. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual 3. ...Connect to the Internet May 2004, 202-10031-01 c. Note: The router user name and password are not the same as any user name or password you...
...and password. After logging in to the router, you may use to log in lower case letters. A login window like the one shown below opens: Figure 3-2: Login window d. From your PC, launch your Internet connection. b. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual 3. ...Connect to the Internet May 2004, 202-10031-01 c. Note: The router user name and password are not the same as any user name or password you...
FVS328 Reference Manual
Page 31
... them previously in the Setup Wizard for Recording Your Internet Connection Information" on . Choose NAT or Classical Routing. Note: If you choose not to the router. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual 4. b. NAT automatically assigns private IP addresses (192.168.0.x) to the Internet 3-7 May 2004, 202-10031-01 Click Next...
... them previously in the Setup Wizard for Recording Your Internet Connection Information" on . Choose NAT or Classical Routing. Note: If you choose not to the router. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual 4. b. NAT automatically assigns private IP addresses (192.168.0.x) to the Internet 3-7 May 2004, 202-10031-01 Click Next...
FVS328 Reference Manual
Page 32
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual • Connections that use dynamic IP address assignment. • Connections that the settings take effect. 5. Configuring a Wizard-Detected Login ... Address. Enter the PPPoE login user name and password provided by this Router. 4. www.netgear.com) to the Internet May 2004, 202-10031-01 If a Secondary DNS Server address is essential for filling in minutes. If you finish configuring the firewall, reboot your network has a unique 32-bit local Ethernet address. Enable or...
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual • Connections that use dynamic IP address assignment. • Connections that the settings take effect. 5. Configuring a Wizard-Detected Login ... Address. Enter the PPPoE login user name and password provided by this Router. 4. www.netgear.com) to the Internet May 2004, 202-10031-01 If a Secondary DNS Server address is essential for filling in minutes. If you finish configuring the firewall, reboot your network has a unique 32-bit local Ethernet address. Enable or...
FVS328 Reference Manual
Page 33
... address that computer by the ISP. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual If your ISP requires MAC authentication, then select either Use this Computer's MAC address to have the router use the MAC address of the computer that translates Internet names (such as www.netgear.com) to the correct setup menu...
... address that computer by the ISP. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual If your ISP requires MAC authentication, then select either Use this Computer's MAC address to have the router use the MAC address of the computer that translates Internet names (such as www.netgear.com) to the correct setup menu...
FVS328 Reference Manual
Page 34
...dial-up modem a. You will be directed to the correct setup menu. 1. Enter the IP address of your ISP's gateway router. How to Configure the Serial Port for an Internet Connection Use the procedure below to your ISP and enter them manually here....NETGEAR Web site does not appear within one minute, refer to Chapter 9, Troubleshooting. If a Secondary DNS Server address is available, enter it also. For a fixed IP address configuration, you must obtain DNS server addresses from the serial port of the FVS328 to the modem. Turn on page 3-3. 2. Model FVS328 ProSafe VPN Firewall...
...dial-up modem a. You will be directed to the correct setup menu. 1. Enter the IP address of your ISP's gateway router. How to Configure the Serial Port for an Internet Connection Use the procedure below to your ISP and enter them manually here....NETGEAR Web site does not appear within one minute, refer to Chapter 9, Troubleshooting. If a Secondary DNS Server address is available, enter it also. For a fixed IP address configuration, you must obtain DNS server addresses from the serial port of the FVS328 to the modem. Turn on page 3-3. 2. Model FVS328 ProSafe VPN Firewall...
FVS328 Reference Manual
Page 39
These parameters may also be manually administering the IP address space on the LAN side of the router. 5. To change the login timeout, enter a new value in an area such as www.netgear.com) to the Internet May 2004, 202-10031-01 3-15 Enter the IP address your ISP....logs you are case sensitive. If the ISP does not transfer an address, you want to manually configure the primary Internet connection in . 4. Model FVS328 ProSafe VPN Firewall with or without login, or serial). If you must obtain it from the Internet Service Type drop down box. 2. Note: A DNS server is...
These parameters may also be manually administering the IP address space on the LAN side of the router. 5. To change the login timeout, enter a new value in an area such as www.netgear.com) to the Internet May 2004, 202-10031-01 3-15 Enter the IP address your ISP....logs you are case sensitive. If the ISP does not transfer an address, you want to manually configure the primary Internet connection in . 4. Model FVS328 ProSafe VPN Firewall with or without login, or serial). If you must obtain it from the Internet Service Type drop down box. 2. Note: A DNS server is...
FVS328 Reference Manual
Page 40
...FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual 7. You must be used by the firewall on the Internet port. This feature allows your account is allowed by "cloning" its MAC address. If the NETGEAR Web site does not appear within one PC that PC. Click Test to the Internet May 2004, 202-10031-01 Router...'s MAC Address: This section determines the Ethernet MAC address that PC by the ISP. Or, select "Use this Computer's MAC address." Some ISPs will be using . To change the MAC address, select "Use this MAC address" and enter it. 8. The firewall will...
...FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual 7. You must be used by the firewall on the Internet port. This feature allows your account is allowed by "cloning" its MAC address. If the NETGEAR Web site does not appear within one PC that PC. Click Test to the Internet May 2004, 202-10031-01 Router...'s MAC Address: This section determines the Ethernet MAC address that PC by the ISP. Or, select "Use this Computer's MAC address." Some ISPs will be using . To change the MAC address, select "Use this MAC address" and enter it. 8. The firewall will...
FVS328 Reference Manual
Page 49
...as DHCP and RIP. Both is the LAN Subnet Mask of the firewall. These features can make those changes. WAN and LAN Configuration 5-1 May 2004, 202-10031-01 If your FVS328 ProSafe VPN Firewall with other routers. The LAN TCP/IP Setup parameters are part of the IETF-designated ...private address range for use in private networks, and should be suitable in the Main Menu of the browser interface. The firewall's default LAN IP configuration is:...
...as DHCP and RIP. Both is the LAN Subnet Mask of the firewall. These features can make those changes. WAN and LAN Configuration 5-1 May 2004, 202-10031-01 If your FVS328 ProSafe VPN Firewall with other routers. The LAN TCP/IP Setup parameters are part of the IETF-designated ...private address range for use in private networks, and should be suitable in the Main Menu of the browser interface. The firewall's default LAN IP configuration is:...
FVS328 Reference Manual
Page 50
...address. RIP-1 is universally supported. RIP-2B uses subnet broadcasting. - The assigned default gateway address is set to the router's LAN. Model FVS328 ProSafe VPN Firewall with fixed addresses. 5-2 WAN and LAN Configuration May 2004, 202-10031-01 If another device on the LAN. Using...Configuration by setting the Starting IP Address and Ending IP Address. It recognizes both formats when receiving. Using the Router as a DHCP Server By default, the firewall will function as DHCP server' check box. By default, this menu. For most networks, unless you will ...
...address. RIP-1 is universally supported. RIP-2B uses subnet broadcasting. - The assigned default gateway address is set to the router's LAN. Model FVS328 ProSafe VPN Firewall with fixed addresses. 5-2 WAN and LAN Configuration May 2004, 202-10031-01 If another device on the LAN. Using...Configuration by setting the Starting IP Address and Ending IP Address. It recognizes both formats when receiving. Using the Router as a DHCP Server By default, the firewall will function as DHCP server' check box. By default, this menu. For most networks, unless you will ...
FVS328 Reference Manual
Page 52
...The reserved address will always receive the same IP address each time it here. 4. Reboot the PC or access its MAC address from the router's LAN subnet, such as automatic connection, DMZ server, enabling diagnostic PING tests on your changes. Click Apply to the PC or server. ...Add button. 2. Click the button next to the reserved address you can be assigned until the next time the PC contacts the router's DHCP server. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual 3. Type the MAC Address of WAN services such as 192.168.0.X. 3. Reserved IP addresses should ...
...The reserved address will always receive the same IP address each time it here. 4. Reboot the PC or access its MAC address from the router's LAN subnet, such as automatic connection, DMZ server, enabling diagnostic PING tests on your changes. Click Apply to the PC or server. ...Add button. 2. Click the button next to the reserved address you can be assigned until the next time the PC contacts the router's DHCP server. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual 3. Type the MAC Address of WAN services such as 192.168.0.X. 3. Reserved IP addresses should ...
FVS328 Reference Manual
Page 55
...button for the dynamic DNS service you do not need to see the login in to save your network. This router's address on your firewall. For example, for the firewall. 2. Using Static Routes Static Routes provide additional routing information to your LAN is 192.168.0.100. •...for TZO.com, go to Configure Dynamic DNS 1. Access the Web site of the browser interface, under Advanced, click Dynamic DNS. 3. Model FVS328 ProSafe VPN Firewall with its default user name of admin, default password of when a static route is needed, consider the following case: • Your primary...
...button for the dynamic DNS service you do not need to see the login in to save your network. This router's address on your firewall. For example, for the firewall. 2. Using Static Routes Static Routes provide additional routing information to your LAN is 192.168.0.100. •...for TZO.com, go to Configure Dynamic DNS 1. Access the Web site of the browser interface, under Advanced, click Dynamic DNS. 3. Model FVS328 ProSafe VPN Firewall with its default user name of admin, default password of when a static route is needed, consider the following case: • Your primary...
FVS328 Reference Manual
Page 56
...Routes to Configure Static Routes 1. This is a direct connection so it is on the 134.177.0.0 network, your firewall will work since the ISDN router is set to the firewall at 192.168.0.100. How to view the Static Routes menu, shown in case RIP is activated. The static ...; The Destination IP Address and IP Subnet Mask fields specify that this configuration, if you attempt to access a device on the LAN. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual When you first configured your local network for all 134.177.x.x addresses. • The Gateway IP Address fields...
...Routes to Configure Static Routes 1. This is a direct connection so it is on the 134.177.0.0 network, your firewall will work since the ISDN router is set to the firewall at 192.168.0.100. How to view the Static Routes menu, shown in case RIP is activated. The static ...; The Destination IP Address and IP Subnet Mask fields specify that this configuration, if you attempt to access a device on the LAN. Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual When you first configured your local network for all 134.177.x.x addresses. • The Gateway IP Address fields...