FVS338 Reference Manual
Page 8
... 2-11 To Enable the Traffic Meter 2-11 Configuring the WAN Mode 2-13 Configuring Dynamic DNS (If Needed 2-14 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Configuring Multi-Home LAN IPs 3-5 Managing Groups and Hosts 3-6 Creating the Network Database 3-7 Setting Up Address Reservation 3-10 Configuring Static Routes...
... 2-11 To Enable the Traffic Meter 2-11 Configuring the WAN Mode 2-13 Configuring Dynamic DNS (If Needed 2-14 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Configuring Multi-Home LAN IPs 3-5 Managing Groups and Hosts 3-6 Creating the Network Database 3-7 Setting Up Address Reservation 3-10 Configuring Static Routes...
FVS338 Reference Manual
Page 15
Chapter 1 Introduction The ProSafe VPN Firewall 50 with 8 port switch connects your network from attacks and intrusions. The FVS338 is a plug-and-play device that protects your ...setup for traffic prioritization. Network administrators can be installed and configured within minutes. Introduction 1-1 v1.0, March 2009 The FVS338 is a complete security solution that can establish restricted access policies based on page 1-9 Key Features The VPN firewall provides the following sections: • "Key Features" on page 1-1 • "Package Contents" on page 1-6 • "Router...
Chapter 1 Introduction The ProSafe VPN Firewall 50 with 8 port switch connects your network from attacks and intrusions. The FVS338 is a plug-and-play device that protects your ...setup for traffic prioritization. Network administrators can be installed and configured within minutes. Introduction 1-1 v1.0, March 2009 The FVS338 is a complete security solution that can establish restricted access policies based on page 1-9 Key Features The VPN firewall provides the following sections: • "Key Features" on page 1-1 • "Package Contents" on page 1-6 • "Router...
FVS338 Reference Manual
Page 18
...user-friendly Setup Wizard is provided and online help documentation is enabled and no DNS addresses are interoperable with other VPNC-compliant VPN routers and clients. • SNMP. The VPN firewall includes the NETGEAR VPN Wizard to easily configure VPN tunnels according...; Smart Wizard. The firewall incorporates built-in diagnostic functions such as EnterNet or WinPOET on the Internet. FVS338 ProSafe VPN Firewall 50 Reference Manual • Automatic Configuration of Attached PCs by simulating a dial-up connection. The VPN firewall dynamically assigns network configuration ...
...user-friendly Setup Wizard is provided and online help documentation is enabled and no DNS addresses are interoperable with other VPNC-compliant VPN routers and clients. • SNMP. The VPN firewall includes the NETGEAR VPN Wizard to easily configure VPN tunnels according...; Smart Wizard. The firewall incorporates built-in diagnostic functions such as EnterNet or WinPOET on the Internet. FVS338 ProSafe VPN Firewall 50 Reference Manual • Automatic Configuration of Attached PCs by simulating a dial-up connection. The VPN firewall dynamically assigns network configuration ...
FVS338 Reference Manual
Page 38
...screen. • Select DNS lookup using the DNS servers configured in seconds, to tell the router how often it should occur before the router rolls-over to the Dialup port. FVS338 ProSafe VPN Firewall 50 Reference Manual • If you have both ISP links connected for Internet connectivity, check the ... to an IP address. The WAN Failure Detection Method must setup an account with a DDNS provider such as back online, the secondary dialup connection disconnects. 5. Check the radio box of router failures that allows routers with varying public IP addresses to be routed on the primary...
...screen. • Select DNS lookup using the DNS servers configured in seconds, to tell the router how often it should occur before the router rolls-over to the Dialup port. FVS338 ProSafe VPN Firewall 50 Reference Manual • If you have both ISP links connected for Internet connectivity, check the ... to an IP address. The WAN Failure Detection Method must setup an account with a DDNS provider such as back online, the secondary dialup connection disconnects. 5. Check the radio box of router failures that allows routers with varying public IP addresses to be routed on the primary...
FVS338 Reference Manual
Page 41
Chapter 3 LAN Configuration This chapter describes how to configure LAN Setup, LAN Groups and Routing (Static IP) features of addresses specified in Appendix C, "Related Documents" for an explanation of the firewall. IP addresses will function as the firewall's LAN IP address. See the link to the attached PCs from the range you have ..., although you will be assigned by selecting the Disable DHCP Server radio box. For most applications, the default DHCP and TCP/IP settings of the firewall are available for your ProSafe VPN Firewall 50, including the following parameters to the...
Chapter 3 LAN Configuration This chapter describes how to configure LAN Setup, LAN Groups and Routing (Static IP) features of addresses specified in Appendix C, "Related Documents" for an explanation of the firewall. IP addresses will function as the firewall's LAN IP address. See the link to the attached PCs from the range you have ..., although you will be assigned by selecting the Disable DHCP Server radio box. For most applications, the default DHCP and TCP/IP settings of the firewall are available for your ProSafe VPN Firewall 50, including the following parameters to the...
FVS338 Reference Manual
Page 42
... the router and the router, in turn, sends those requests to the DNS servers of the ISP excluding the DNS Proxy IP address. However, when the DNS proxy is running, i.e. DHCP Relay options allow you are advanced settings most users and situations. FVS338 ProSafe VPN Firewall 50 Reference... Manual • WINS Server (if you to configure a secondary or "multi-home" LAN IP setup in the LAN. When the DNS Proxy option is particularly useful in Auto Rollover...
... the router and the router, in turn, sends those requests to the DNS servers of the ISP excluding the DNS Proxy IP address. However, when the DNS proxy is running, i.e. DHCP Relay options allow you are advanced settings most users and situations. FVS338 ProSafe VPN Firewall 50 Reference... Manual • WINS Server (if you to configure a secondary or "multi-home" LAN IP setup in the LAN. When the DNS Proxy option is particularly useful in Auto Rollover...
FVS338 Reference Manual
Page 43
...devices, check the Disable DHCP Server radio button. Figure 3-1 2. FVS338 ProSafe VPN Firewall 50 Reference Manual 1. Select Network Configuration from the primary menu and LAN Setup from the submenu. The subnet mask specifies the network number portion of the router (this is selected, enter the following parameters: a. Unless you will...3-3 v1.0, March 2009 Enter the Domain Name of an IP address. Enable DHCP Server is the default. Your router will manually configure all computers connected to the router's LAN. The LAN Setup screen will function as the subnet mask (computed by the...
...devices, check the Disable DHCP Server radio button. Figure 3-1 2. FVS338 ProSafe VPN Firewall 50 Reference Manual 1. Select Network Configuration from the primary menu and LAN Setup from the submenu. The subnet mask specifies the network number portion of the router (this is selected, enter the following parameters: a. Unless you will...3-3 v1.0, March 2009 Enter the Domain Name of an IP address. Enable DHCP Server is the default. Your router will manually configure all computers connected to the router's LAN. The LAN Setup screen will function as the subnet mask (computed by the...
FVS338 Reference Manual
Page 44
... new IP address and log in the fields accordingly. You must enter http://10.0.0.1 in LAN TCP/IP Setup section). • Primary DNS Server. (Optional) If an IP address is optional. FVS338 ProSafe VPN Firewall 50 Reference Manual b. Enter a Lease Time. g. Enter the Ending IP Address. This address specifies the last ... address pool. For example, if you change the default IP address 192.168.1.1 to 10.0.0.1, you change the LAN IP address of the router (the IP Address in your network. Note: If you must then open a new connection to provide LDAP server information, check the Enable ...
... new IP address and log in the fields accordingly. You must enter http://10.0.0.1 in LAN TCP/IP Setup section). • Primary DNS Server. (Optional) If an IP address is optional. FVS338 ProSafe VPN Firewall 50 Reference Manual b. Enter a Lease Time. g. Enter the Ending IP Address. This address specifies the last ... address pool. For example, if you change the default IP address 192.168.1.1 to 10.0.0.1, you change the LAN IP address of the router (the IP Address in your network. Note: If you must then open a new connection to provide LDAP server information, check the Enable ...
FVS338 Reference Manual
Page 45
... If you have completed the LAN IP setup, all outbound traffic is particularly useful in turn, sends those networks access to the DNS servers of the router. LAN Configuration 3-5 v1.0, March 2009 Click Apply to Chapter 4, "Firewall Protection and Content Filtering. Figure 3-2 The...router and the router, in Auto Rollover mode. Click Reset to discard any changes and revert to the LAN port of the active connection. - This is the gateway for example., 172.16.2.0, 10.0.0.0), then you have computers using different IP networks in the WAN settings page). - FVS338 ProSafe VPN Firewall 50...
... If you have completed the LAN IP setup, all outbound traffic is particularly useful in turn, sends those networks access to the DNS servers of the router. LAN Configuration 3-5 v1.0, March 2009 Click Apply to Chapter 4, "Firewall Protection and Content Filtering. Figure 3-2 The...router and the router, in Auto Rollover mode. Click Reset to discard any changes and revert to the LAN port of the active connection. - This is the gateway for example., 172.16.2.0, 10.0.0.0), then you have computers using different IP networks in the WAN settings page). - FVS338 ProSafe VPN Firewall 50...
FVS338 Reference Manual
Page 48
...Setup screen) is configured, by : • Using the DHCP Server: The router's DHCP server is strongly recommended. • Scanning the Network: The router also scans the local network periodically using protocols such as ARP and NetBIOS to the Network Database. For each computer or device, the following fields are not DHCP clients. FVS338 ProSafe VPN Firewall 50... Reference Manual Figure 3-3 The Network Database is created by default, to respond to DHCP requests from the router will be added to detect active computers...
...Setup screen) is configured, by : • Using the DHCP Server: The router's DHCP server is strongly recommended. • Scanning the Network: The router also scans the local network periodically using protocols such as ARP and NetBIOS to the Network Database. For each computer or device, the following fields are not DHCP clients. FVS338 ProSafe VPN Firewall 50... Reference Manual Figure 3-3 The Network Database is created by default, to respond to DHCP requests from the router will be added to detect active computers...
FVS338 Reference Manual
Page 94
... section below provides wizard and NETGEAR VPN Client configuration procedures for either dual WAN mode. FVS338 ProSafe VPN Firewall 50 Reference Manual Table 5-1 summarizes the WAN addressing requirements for the following scenarios: • Using the wizard to configure a VPN tunnel between 2 VPN gateways • Using the wizard to configure a VPN tunnel between a VPN gateway and a VPN client Configuring a VPN tunnel connection requires that...
... section below provides wizard and NETGEAR VPN Client configuration procedures for either dual WAN mode. FVS338 ProSafe VPN Firewall 50 Reference Manual Table 5-1 summarizes the WAN addressing requirements for the following scenarios: • Using the wizard to configure a VPN tunnel between 2 VPN gateways • Using the wizard to configure a VPN tunnel between a VPN gateway and a VPN client Configuring a VPN tunnel connection requires that...
FVS338 Reference Manual
Page 108
...). You can also be used to encrypt data. The VPN tunnel is established and populated in the SA (Security Association). 3. VPN Policy Table When you use conform to the Policy Table. FVS338 ProSafe VPN Firewall 50 Reference Manual To gain a more complete understanding of the encryption, ...them reduces the amount of VPN Policies. CAs can also edit exiting policies, add new VPN policies directly or change the policy hierarchy to : 1. VPN Policy Operation The VPN Policies screen allows you selected as the VPN Tunnel connection name during Wizard setup identifies both a "Public ...
...). You can also be used to encrypt data. The VPN tunnel is established and populated in the SA (Security Association). 3. VPN Policy Table When you use conform to the Policy Table. FVS338 ProSafe VPN Firewall 50 Reference Manual To gain a more complete understanding of the encryption, ...them reduces the amount of VPN Policies. CAs can also edit exiting policies, add new VPN policies directly or change the policy hierarchy to : 1. VPN Policy Operation The VPN Policies screen allows you selected as the VPN Tunnel connection name during Wizard setup identifies both a "Public ...
FVS338 Reference Manual
Page 151
... you entered in the LAN IP Setup page. Figure 6-11 Table 6-3. DHCP can be either Server or None. Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you upgrade your router. FVS338 ProSafe VPN Firewall 50 Reference Manual Viewing Router Configuration and System Status The Router Status menu provides status and usage...
... you entered in the LAN IP Setup page. Figure 6-11 Table 6-3. DHCP can be either Server or None. Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you upgrade your router. FVS338 ProSafe VPN Firewall 50 Reference Manual Viewing Router Configuration and System Status The Router Status menu provides status and usage...
FVS338 Reference Manual
Page 154
...to delete all the log entries. . When the LAN Setup screen displays, click the DHCP Log link. 6-26 v1.0, March 2009 Router and Network Management Select Monitoring from the main menu and VPN Logs from the LAN Setup screen. You can view the DHCP log from the ...connection) if required. The current status of data transmitted over this SA. Use this button to view the VPN Logs. Select Network Configuration from the main menu and Lan Setup from the submenu. VPN Logs The VPN Logs screen gives log details for recent VPN activity. FVS338 ProSafe VPN Firewall 50 Reference Manual Table 6-4.
...to delete all the log entries. . When the LAN Setup screen displays, click the DHCP Log link. 6-26 v1.0, March 2009 Router and Network Management Select Monitoring from the main menu and VPN Logs from the LAN Setup screen. You can view the DHCP log from the ...connection) if required. The current status of data transmitted over this SA. Use this button to view the VPN Logs. Select Network Configuration from the main menu and Lan Setup from the submenu. VPN Logs The VPN Logs screen gives log details for recent VPN activity. FVS338 ProSafe VPN Firewall 50 Reference Manual Table 6-4.
FVS338 Reference Manual
Page 196
... Passwords restoring 7-7 passwords and login timeout changing 6-7 performance management 6-1 Index-4 v1.0, March 2009 FVS338 ProSafe VPN Firewall 50 Reference Manual L L2TP VPN Tunnel 4-11 LAN configuration 3-1 ports and attached devices 6-26 using LAN IP setup options 3-2 LAN Security Checks UDP flood 4-10 LAN Setup screen 3-3 LAN Users Service Blocking 6-2 LAN WAN Inbound Rules configuring 4-9 LAN WAN Outbound Rules...
... Passwords restoring 7-7 passwords and login timeout changing 6-7 performance management 6-1 Index-4 v1.0, March 2009 FVS338 ProSafe VPN Firewall 50 Reference Manual L L2TP VPN Tunnel 4-11 LAN configuration 3-1 ports and attached devices 6-26 using LAN IP setup options 3-2 LAN Security Checks UDP flood 4-10 LAN Setup screen 3-3 LAN Users Service Blocking 6-2 LAN WAN Inbound Rules configuring 4-9 LAN WAN Outbound Rules...
FVS338 Reference Manual
Page 17
Introduction 1-1 v1.0, March 2008 Chapter 1 Introduction The ProSafe VPN Firewall 50 with 8 port switch connects your network from attacks and intrusions. The FVS338 is a complete security solution that can establish restricted access policies based on time-of-day, Website addresses ...• One 10/100 Mbps port for an Ethernet connection to 400 internal LAN users (and 50K connections). • Easy, web-based setup for installation and management. • URL keyword Content Filtering and Site Blocking Security. • Quality of Service (QoS) support for traffic prioritization...
Introduction 1-1 v1.0, March 2008 Chapter 1 Introduction The ProSafe VPN Firewall 50 with 8 port switch connects your network from attacks and intrusions. The FVS338 is a complete security solution that can establish restricted access policies based on time-of-day, Website addresses ...• One 10/100 Mbps port for an Ethernet connection to 400 internal LAN users (and 50K connections). • Easy, web-based setup for installation and management. • URL keyword Content Filtering and Site Blocking Security. • Quality of Service (QoS) support for traffic prioritization...
FVS338 Reference Manual
Page 19
... of Attached PCs by simulating a dial-up connection. The firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from directly accessing the PCs on the LAN, the firewall allows you to direct incoming traffic to either type of cable... local computers or a service for connecting remote hosts to share an Internet account using the Dynamic Host Configuration Protocol (DHCP). FVS338 ProSafe VPN Firewall 50 Reference Manual • Port Forwarding with Auto Uplink With its own address as to attached PCs on the service port number ...
... of Attached PCs by simulating a dial-up connection. The firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from directly accessing the PCs on the LAN, the firewall allows you to direct incoming traffic to either type of cable... local computers or a service for connecting remote hosts to share an Internet account using the Dynamic Host Configuration Protocol (DHCP). FVS338 ProSafe VPN Firewall 50 Reference Manual • Port Forwarding with Auto Uplink With its own address as to attached PCs on the service port number ...
FVS338 Reference Manual
Page 20
...-friendly Setup Wizard is built into the browser-based Web Management Interface. • Smart Wizard. The firewall allows you can limit remote management access to a specified remote IP address or range of the Virtual Private Network Consortium (VPNC) to ensure the VPN tunnels are interoperable with other VPNC-compliant VPN routers and clients. • SNMP. FVS338 ProSafe VPN Firewall 50...
...-friendly Setup Wizard is built into the browser-based Web Management Interface. • Smart Wizard. The firewall allows you can limit remote management access to a specified remote IP address or range of the Virtual Private Network Consortium (VPNC) to ensure the VPN tunnels are interoperable with other VPNC-compliant VPN routers and clients. • SNMP. FVS338 ProSafe VPN Firewall 50...
FVS338 Reference Manual
Page 40
...failure by pinging to tell the router how often it should occur before the router rolls-over to detect its status. Enter the number of router failures that allows routers with varying public IP addresses to be configured to notify the router of the primary link at ... networks regardless of whether you must be located using Internet domain names. The WAN Failure Detection Method must setup an account with Dialup as backup for auto-rollover. 4. FVS338 ProSafe VPN Firewall 50 Reference Manual • If you are using Dialup as a backup to engage auto-rollover. If a ...
...failure by pinging to tell the router how often it should occur before the router rolls-over to detect its status. Enter the number of router failures that allows routers with varying public IP addresses to be configured to notify the router of the primary link at ... networks regardless of whether you must be located using Internet domain names. The WAN Failure Detection Method must setup an account with Dialup as backup for auto-rollover. 4. FVS338 ProSafe VPN Firewall 50 Reference Manual • If you are using Dialup as a backup to engage auto-rollover. If a ...
FVS338 Reference Manual
Page 43
...LAN (Local Area Network) By default, the firewall will function as a DHCP Server For most users and situations. The LAN Setup screen allows you entered a WINS server address in Appendix C for an explanation of your router. Chapter 3 LAN Configuration This chapter describes how ...IP Address (the firewall's LAN IP address) • Primary DNS Server (the firewall's LAN IP address) • WINS Server (if you to the firewall LAN. IP addresses will deliver the following parameters to ensure there are no duplicate addresses on your ProSafe VPN Firewall 50. The firewall tests each pool...
...LAN (Local Area Network) By default, the firewall will function as a DHCP Server For most users and situations. The LAN Setup screen allows you entered a WINS server address in Appendix C for an explanation of your router. Chapter 3 LAN Configuration This chapter describes how ...IP Address (the firewall's LAN IP address) • Primary DNS Server (the firewall's LAN IP address) • WINS Server (if you to the firewall LAN. IP addresses will deliver the following parameters to ensure there are no duplicate addresses on your ProSafe VPN Firewall 50. The firewall tests each pool...