FVS338 Reference Manual
Page 2
... FCC Rules. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to part 15 of their respective holders. EU Regulatory Compliance Statement ProSafe VPN Firewall 50 is connected. • Consult the dealer or an experienced radio/TV technician for a Class B digital device...
... FCC Rules. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to part 15 of their respective holders. EU Regulatory Compliance Statement ProSafe VPN Firewall 50 is connected. • Consult the dealer or an experienced radio/TV technician for a Class B digital device...
FVS338 Reference Manual
Page 7
... Uplink 1-3 Extensive Protocol Support 1-3 Easy Installation and Management 1-4 Maintenance and Support 1-5 Package Contents ...1-6 Router Hardware Components 1-6 Router Front Panel 1-6 Router Rear Panel 1-8 Factory Default Login ...1-9 Chapter 2 Connecting the FVS338 to the Internet Connecting the VPN Firewall to Your Network 2-1 Logging in to the VPN Firewall 2-1 Configuring your Internet Connection 2-2 Broadband ISP Settings 2-2 Dialup ISP Serial WAN port Settings...
... Uplink 1-3 Extensive Protocol Support 1-3 Easy Installation and Management 1-4 Maintenance and Support 1-5 Package Contents ...1-6 Router Hardware Components 1-6 Router Front Panel 1-6 Router Rear Panel 1-8 Factory Default Login ...1-9 Chapter 2 Connecting the FVS338 to the Internet Connecting the VPN Firewall to Your Network 2-1 Logging in to the VPN Firewall 2-1 Configuring your Internet Connection 2-2 Broadband ISP Settings 2-2 Dialup ISP Serial WAN port Settings...
FVS338 Reference Manual
Page 8
... the Traffic Meter 2-11 Configuring the WAN Mode 2-13 Configuring Dynamic DNS (If Needed 2-14 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Configuring Multi-Home LAN IPs 3-5 Managing Groups and Hosts 3-6 Creating the Network ... Setting Up Address Reservation 3-10 Configuring Static Routes 3-10 Static Route Example 3-11 RIP Configuration 3-12 Chapter 4 Firewall Protection and Content Filtering About Firewall Security 4-1 Using Rules to Block or Allow Specific Kinds of Traffic 4-2 Services-Based Rules 4-2 Order of Service (...
... the Traffic Meter 2-11 Configuring the WAN Mode 2-13 Configuring Dynamic DNS (If Needed 2-14 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Configuring Multi-Home LAN IPs 3-5 Managing Groups and Hosts 3-6 Creating the Network ... Setting Up Address Reservation 3-10 Configuring Static Routes 3-10 Static Route Example 3-11 RIP Configuration 3-12 Chapter 4 Firewall Protection and Content Filtering About Firewall Security 4-1 Using Rules to Block or Allow Specific Kinds of Traffic 4-2 Services-Based Rules 4-2 Order of Service (...
FVS338 Reference Manual
Page 10
... Certificates 5-32 Self Certificates ...5-33 Managing your Certificate Revocation List (CRL 5-36 Chapter 6 Router and Network Management Performance Management 6-1 VPN Firewall Features That Reduce Traffic 6-1 Service Blocking 6-1 Block Sites ...6-3 Source MAC Filtering 6-4 VPN Firewall Features That Increase Traffic 6-4 Port Forwarding 6-4 Port Triggering 6-6 VPN Tunnels ...6-6 Using QoS to Shift the Traffic Mix 6-6 Tools for Traffic Management 6-7 Administration...
... Certificates 5-32 Self Certificates ...5-33 Managing your Certificate Revocation List (CRL 5-36 Chapter 6 Router and Network Management Performance Management 6-1 VPN Firewall Features That Reduce Traffic 6-1 Service Blocking 6-1 Block Sites ...6-3 Source MAC Filtering 6-4 VPN Firewall Features That Increase Traffic 6-4 Port Forwarding 6-4 Port Triggering 6-6 VPN Tunnels ...6-6 Using QoS to Shift the Traffic Mix 6-6 Tools for Traffic Management 6-7 Administration...
FVS338 Reference Manual
Page 11
... Troubleshooting the ISP Connection 7-4 Troubleshooting a TCP/IP Network Using a Ping Utility 7-5 Testing the LAN Path to Your Firewall 7-5 Testing the Path from Your PC to a Remote Device 7-6 Restoring the Default Configuration and Password 7-7 Problems with Date... and Technical Specifications Appendix B System Logs and Error Messages System Log Messages B-1 System Startup ...B-1 Reboot ...B-2 NTP ...B-2 Login/Logout ...B-3 Firewall Restart ...B-3 IPSec Restart ...B-4 WAN Status ...B-4 Auto Rollover ...B-4 PPP Logs ...B-5 Web Filtering and Content Filtering Logs B-7 Traffic Metering Logs...
... Troubleshooting the ISP Connection 7-4 Troubleshooting a TCP/IP Network Using a Ping Utility 7-5 Testing the LAN Path to Your Firewall 7-5 Testing the Path from Your PC to a Remote Device 7-6 Restoring the Default Configuration and Password 7-7 Problems with Date... and Technical Specifications Appendix B System Logs and Error Messages System Log Messages B-1 System Startup ...B-1 Reboot ...B-2 NTP ...B-2 Login/Logout ...B-3 Firewall Restart ...B-3 IPSec Restart ...B-4 WAN Status ...B-4 Auto Rollover ...B-4 PPP Logs ...B-5 Web Filtering and Content Filtering Logs B-7 Traffic Metering Logs...
FVS338 Reference Manual
Page 13
... skills. This manual uses the following formats to highlight special messages: Note: This format is used to install, configure and troubleshoot the ProSafe VPN Firewall 50. About This Manual The NETGEAR® ProSafe™ VPN Firewall 50 FVS338 Reference Manual describes how to highlight a procedure that will save time or resources. Warning: Ignoring this type of this manual is used...
... skills. This manual uses the following formats to highlight special messages: Note: This format is used to install, configure and troubleshoot the ProSafe VPN Firewall 50. About This Manual The NETGEAR® ProSafe™ VPN Firewall 50 FVS338 Reference Manual describes how to highlight a procedure that will save time or resources. Warning: Ignoring this type of this manual is used...
FVS338 Reference Manual
Page 14
website at http://kbserver.netgear.com/products/FVS338.asp. Bandwidth Limits; FVS338 ProSafe VPN Firewall 50 Reference Manual Danger: This is a safety warning. Failure to this notice may result in Appendix C, "Related Documents". Note: Updates to take heed of this product are available on the NETGEAR, Inc. Revision History Part Number Version Number Description 202-10046-02 1.0 202-10046...
website at http://kbserver.netgear.com/products/FVS338.asp. Bandwidth Limits; FVS338 ProSafe VPN Firewall 50 Reference Manual Danger: This is a safety warning. Failure to this notice may result in Appendix C, "Related Documents". Note: Updates to take heed of this product are available on the NETGEAR, Inc. Revision History Part Number Version Number Description 202-10046-02 1.0 202-10046...
FVS338 Reference Manual
Page 15
... as a cable modem or DSL modem. Network administrators can be installed and configured within minutes. For example, the FVS338 provides support for Stateful Packet Inspection, Denial of -day, Website addresses and address keywords, and share high-speed cable...; "Router Hardware Components" on page 1-6 • "Factory Default Login" on time-of Service (DoS) attack protection and multi-NAT support.The VPN firewall supports multiple Web content filtering options, plus browsing activity reporting and instant alerts-both, via e-mail. Chapter 1 Introduction The ProSafe VPN Firewall 50 with...
... as a cable modem or DSL modem. Network administrators can be installed and configured within minutes. For example, the FVS338 provides support for Stateful Packet Inspection, Denial of -day, Website addresses and address keywords, and share high-speed cable...; "Router Hardware Components" on page 1-6 • "Factory Default Login" on time-of Service (DoS) attack protection and multi-NAT support.The VPN firewall supports multiple Web content filtering options, plus browsing activity reporting and instant alerts-both, via e-mail. Chapter 1 Introduction The ProSafe VPN Firewall 50 with...
FVS338 Reference Manual
Page 16
... immediate alert messages to Internet locations or services that you at specified intervals. A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS338 is a true firewall, using stateful packet inspection to defend against hacker attacks. FVS338 ProSafe VPN Firewall 50 Reference Manual • Built in 8-port 10/100 Mbps switch. • Extensive Protocol Support. •...
... immediate alert messages to Internet locations or services that you at specified intervals. A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS338 is a true firewall, using stateful packet inspection to defend against hacker attacks. FVS338 ProSafe VPN Firewall 50 Reference Manual • Built in 8-port 10/100 Mbps switch. • Extensive Protocol Support. •...
FVS338 Reference Manual
Page 17
....0, March 2009 NAT opens a temporary path to the Internet for which may be statically or dynamically assigned by NAT. FVS338 ProSafe VPN Firewall 50 Reference Manual Security The VPN firewall is a response to one computer on your network. Autosensing Ethernet Connections with Auto Uplink With its internal 8-port 10/...100 switch, the FVS338 can specify forwarding of single ports or ranges of full-duplex or half-duplex operation. The VPN firewall allows several features designed to maintain security, as NAT, allows the use ...
....0, March 2009 NAT opens a temporary path to the Internet for which may be statically or dynamically assigned by NAT. FVS338 ProSafe VPN Firewall 50 Reference Manual Security The VPN firewall is a response to one computer on your network. Autosensing Ethernet Connections with Auto Uplink With its internal 8-port 10/...100 switch, the FVS338 can specify forwarding of single ports or ranges of full-duplex or half-duplex operation. The VPN firewall allows several features designed to maintain security, as NAT, allows the use ...
FVS338 Reference Manual
Page 18
... for your firewall from a remote location on the LAN using the Dynamic Host Configuration Protocol (DHCP). The VPN firewall includes the NETGEAR VPN Wizard to easily configure VPN tunnels according .... • Diagnostic functions. FVS338 ProSafe VPN Firewall 50 Reference Manual • Automatic Configuration of Attached PCs by simulating a dial-up connection. The firewall obtains actual DNS addresses from ...no DNS addresses are interoperable with other VPNC-compliant VPN routers and clients. • SNMP. The firewall allows you monitor and manage log resources from the LAN. ...
... for your firewall from a remote location on the LAN using the Dynamic Host Configuration Protocol (DHCP). The VPN firewall includes the NETGEAR VPN Wizard to easily configure VPN tunnels according .... • Diagnostic functions. FVS338 ProSafe VPN Firewall 50 Reference Manual • Automatic Configuration of Attached PCs by simulating a dial-up connection. The firewall obtains actual DNS addresses from ...no DNS addresses are interoperable with other VPNC-compliant VPN routers and clients. • SNMP. The firewall allows you monitor and manage log resources from the LAN. ...
FVS338 Reference Manual
Page 19
FVS338 ProSafe VPN Firewall 50 Reference Manual Maintenance and Support NETGEAR offers the following features to help you maximize your use of the VPN firewall: • Flash memory for firmware upgrade • Free technical support seven days a week, twenty-four hours a day Introduction 1-5 v1.0, March 2009
FVS338 ProSafe VPN Firewall 50 Reference Manual Maintenance and Support NETGEAR offers the following features to help you maximize your use of the VPN firewall: • Flash memory for firmware upgrade • Free technical support seven days a week, twenty-four hours a day Introduction 1-5 v1.0, March 2009
FVS338 Reference Manual
Page 20
..., in case you need to return the firewall for installing the FVS338 using the rack mounting hardware. FVS338 ProSafe VPN Firewall 50 Reference Manual Package Contents The product package should contain the following items: • ProSafe VPN Firewall 50. • AC power adapter. • Category 5 Ethernet cable. • Resource CD, including: - Router Front Panel The ProSafe VPN Firewall 50 front panel shown below contains the port...
..., in case you need to return the firewall for installing the FVS338 using the rack mounting hardware. FVS338 ProSafe VPN Firewall 50 Reference Manual Package Contents The product package should contain the following items: • ProSafe VPN Firewall 50. • AC power adapter. • Category 5 Ethernet cable. • Resource CD, including: - Router Front Panel The ProSafe VPN Firewall 50 front panel shown below contains the port...
FVS338 Reference Manual
Page 21
FVS338 ProSafe VPN Firewall 50 Reference Manual The table below describes each item on the front panel and its operation. Writing...has booted successfully. The serial port has no link. The WAN port has no link. The WAN port is supplied to the router. Object Descriptions Object Activity Power LED Test LED MDM LED On (Green) Off On (Amber) Blinking (Amber) Off On (Green...LAN port has detected a link with a connected Ethernet device. The WAN port is not supplied to the router. The LAN port is being transmitted or received by the serial port. Data is operating at 100 Mbps.
FVS338 ProSafe VPN Firewall 50 Reference Manual The table below describes each item on the front panel and its operation. Writing...has booted successfully. The serial port has no link. The WAN port has no link. The WAN port is supplied to the router. Object Descriptions Object Activity Power LED Test LED MDM LED On (Green) Off On (Amber) Blinking (Amber) Off On (Green...LAN port has detected a link with a connected Ethernet device. The WAN port is not supplied to the router. The LAN port is being transmitted or received by the serial port. Data is operating at 100 Mbps.
FVS338 Reference Manual
Page 22
...) 1-8 Introduction v1.0, March 2009 Figure 1-2 Viewed from left to right, the rear panel contains the following elements: • Modem port - FVS338 ProSafe VPN Firewall 50 Reference Manual Router Rear Panel The rear panel of the ProSafe VPN Firewall 50 (Figure 1-2) contains the On/Off switch and AC power connection. serves as the WAN1 Internet port. serves as the WAN2 Internet...
...) 1-8 Introduction v1.0, March 2009 Figure 1-2 Viewed from left to right, the rear panel contains the following elements: • Modem port - FVS338 ProSafe VPN Firewall 50 Reference Manual Router Rear Panel The rear panel of the ProSafe VPN Firewall 50 (Figure 1-2) contains the On/Off switch and AC power connection. serves as the WAN1 Internet port. serves as the WAN2 Internet...
FVS338 Reference Manual
Page 23
Figure 1-4 2. Go to the FVS338 once it is connected: 1. Enter admin for User Name and password for Password Introduction 1-9 v1.0, March 2009 Factory Default Login FVS338 ProSafe VPN Firewall 50 Reference Manual Check the label on the bottom of the FVS338's enclosure if you forget the following factory default information: • IP Address: http://192.168.1.1 to reach the Web-based GUI from the LAN • User name: admin • Password: password LAN IP Address User Name Password Figure 1-3 To log in to http://192.168.1.1.
Figure 1-4 2. Go to the FVS338 once it is connected: 1. Enter admin for User Name and password for Password Introduction 1-9 v1.0, March 2009 Factory Default Login FVS338 ProSafe VPN Firewall 50 Reference Manual Check the label on the bottom of the FVS338's enclosure if you forget the following factory default information: • IP Address: http://192.168.1.1 to reach the Web-based GUI from the LAN • User name: admin • Password: password LAN IP Address User Name Password Figure 1-3 To log in to http://192.168.1.1.
FVS338 Reference Manual
Page 24
FVS338 ProSafe VPN Firewall 50 Reference Manual 1-10 v1.0, March 2009 Introduction
FVS338 ProSafe VPN Firewall 50 Reference Manual 1-10 v1.0, March 2009 Introduction
FVS338 Reference Manual
Page 25
... are covered in Chapter 5, "Virtual Private Networking": Connecting the VPN Firewall to Your Network To physically connect your VPN firewall, refer to the IFVS338 ProSafe VPN Firewall 50 Installation Guide (a copy is also available on your computer needs to be configured to obtain an IP address automatically via DHCP. The FVS338 login screen will display. Figure 2-1 2-1 v1.0, March 2009...
... are covered in Chapter 5, "Virtual Private Networking": Connecting the VPN Firewall to Your Network To physically connect your VPN firewall, refer to the IFVS338 ProSafe VPN Firewall 50 Installation Guide (a copy is also available on your computer needs to be configured to obtain an IP address automatically via DHCP. The FVS338 login screen will display. Figure 2-1 2-1 v1.0, March 2009...
FVS338 Reference Manual
Page 26
...a more information on page 6-7). The Broadband ISP Settings screen will display. Configuring your Internet Connection You can configure both in lower case letters.The firewall user name and password are not the same as any user name or password you enable remote management, change your password to your Internet connection... "Enabling Remote Management Access" on page 6-10 for the Password, both Broadband ISP Settings and Dialup ISP Settings.from the submenu. Figure 2-2 2-2 Connecting the FVS338 to the Internet v1.0, March 2009 FVS338 ProSafe VPN Firewall 50 Reference Manual 2.
...a more information on page 6-7). The Broadband ISP Settings screen will display. Configuring your Internet Connection You can configure both in lower case letters.The firewall user name and password are not the same as any user name or password you enable remote management, change your password to your Internet connection... "Enabling Remote Management Access" on page 6-10 for the Password, both Broadband ISP Settings and Dialup ISP Settings.from the submenu. Figure 2-2 2-2 Connecting the FVS338 to the Internet v1.0, March 2009 FVS338 ProSafe VPN Firewall 50 Reference Manual 2.
FVS338 Reference Manual
Page 27
..., Password). Figure 2-3 If Auto Detect does not find a connection, you will most likely support. Click Connect if connection not already present. FVS338 ProSafe VPN Firewall 50 Reference Manual 2. When Auto Detect successfully detects an active Internet service, it reports which connection type it discovered. Auto Detect will probe for different..., Password), Local IP, and PPTP Server IP. Click Auto Detect at the top right of Internet connection provided by your Router's MAC address (see "Setting the Router's MAC Address (Advanced Options)" on page 2-6). No data is required.
..., Password). Figure 2-3 If Auto Detect does not find a connection, you will most likely support. Click Connect if connection not already present. FVS338 ProSafe VPN Firewall 50 Reference Manual 2. When Auto Detect successfully detects an active Internet service, it reports which connection type it discovered. Auto Detect will probe for different..., Password), Local IP, and PPTP Server IP. Click Auto Detect at the top right of Internet connection provided by your Router's MAC address (see "Setting the Router's MAC Address (Advanced Options)" on page 2-6). No data is required.