FVS338 Reference Manual
Page 15
... within minutes. The FVS338 is a complete security solution that can establish restricted access policies based on page 1-9 Key Features The VPN firewall provides the following sections: • "Key Features" on page 1-1 • "Package Contents" on page 1-6 • "Router Hardware Components" on page... a cable modem or DSL modem. Introduction 1-1 v1.0, March 2009 Chapter 1 Introduction The ProSafe VPN Firewall 50 with 8 port switch connects your network from attacks and intrusions. The FVS338 is a plug-and-play device that protects your local area network (LAN) to the ...
... within minutes. The FVS338 is a complete security solution that can establish restricted access policies based on page 1-9 Key Features The VPN firewall provides the following sections: • "Key Features" on page 1-1 • "Package Contents" on page 1-6 • "Router Hardware Components" on page... a cable modem or DSL modem. Introduction 1-1 v1.0, March 2009 Chapter 1 Introduction The ProSafe VPN Firewall 50 with 8 port switch connects your network from attacks and intrusions. The FVS338 is a plug-and-play device that protects your local area network (LAN) to the ...
FVS338 Reference Manual
Page 16
... traffic, port scans, attacks, and administrator logins. The FVS338 will log security events such as off-limits. • Logs security incidents. A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS338 is a true firewall, using ... filtering feature, the FVS338 prevents objectionable content from your PCs. You can configure the firewall to log and report attempts to defend against hacker attacks. Its firewall features include: • DoS protection. FVS338 ProSafe VPN Firewall 50 Reference Manual • Built in 8-port 10/100 Mbps switch...
... traffic, port scans, attacks, and administrator logins. The FVS338 will log security events such as off-limits. • Logs security incidents. A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS338 is a true firewall, using ... filtering feature, the FVS338 prevents objectionable content from your PCs. You can configure the firewall to log and report attempts to defend against hacker attacks. Its firewall features include: • DoS protection. FVS338 ProSafe VPN Firewall 50 Reference Manual • Built in 8-port 10/100 Mbps switch...
FVS338 Reference Manual
Page 17
FVS338 ProSafe VPN Firewall 50 Reference Manual Security The VPN firewall is normally discarded by NAT. Instead of ports. • Exposed Host (Software DMZ). The VPN firewall allows several features designed to maintain security, as NAT, allows the use of the incoming request. You can connect to one computer on your network. The firewall...directly accessing the PCs on the service port number of an inexpensive single-user ISP account. Incoming traffic from the local network. Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol...
FVS338 ProSafe VPN Firewall 50 Reference Manual Security The VPN firewall is normally discarded by NAT. Instead of ports. • Exposed Host (Software DMZ). The VPN firewall allows several features designed to maintain security, as NAT, allows the use of the incoming request. You can connect to one computer on your network. The firewall...directly accessing the PCs on the service port number of an inexpensive single-user ISP account. Incoming traffic from the local network. Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol...
FVS338 Reference Manual
Page 18
... enabled and no DNS addresses are interoperable with other VPNC-compliant VPN routers and clients. • SNMP. The VPN firewall supports the Simple Network Management Protocol (SNMP) to the network....port number. • Visual monitoring. The following features simplify installation and management tasks: • Browser-based management. The VPN firewall includes the NETGEAR VPN Wizard to easily configure VPN tunnels according to the Internet over Ethernet (PPPoE). The firewall allows you to run a login program such as Windows, Macintosh, or Linux. FVS338 ProSafe VPN Firewall 50...
... enabled and no DNS addresses are interoperable with other VPNC-compliant VPN routers and clients. • SNMP. The VPN firewall supports the Simple Network Management Protocol (SNMP) to the network....port number. • Visual monitoring. The following features simplify installation and management tasks: • Browser-based management. The VPN firewall includes the NETGEAR VPN Wizard to easily configure VPN tunnels according to the Internet over Ethernet (PPPoE). The firewall allows you to run a login program such as Windows, Macintosh, or Linux. FVS338 ProSafe VPN Firewall 50...
FVS338 Reference Manual
Page 20
... installing the FVS338 using the rack mounting hardware. Router Hardware Components Following is a description of the front and rear panels of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Application Notes and other helpful information. - FVS338 ProSafe VPN Firewall 50 Reference Manual Package Contents The product package should contain the following items: • ProSafe VPN Firewall 50. • AC...
... installing the FVS338 using the rack mounting hardware. Router Hardware Components Following is a description of the front and rear panels of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Application Notes and other helpful information. - FVS338 ProSafe VPN Firewall 50 Reference Manual Package Contents The product package should contain the following items: • ProSafe VPN Firewall 50. • AC...
FVS338 Reference Manual
Page 21
...an ISP and received an IP Address. Power is operating at 10 Mbps. The serial port has successfully connected to the router. The serial port has no link. Writing to Flash memory (during upgrading or resetting to the router. Server data is operating at 10 Mbps. Data is initializing or the initialization has failed... On (Green) Off Local LEDs Link/Act LED On (Green) Blinking (Green) Off 100 LED On (Green) Off Description Power is operating at 100 Mbps. FVS338 ProSafe VPN Firewall 50 Reference Manual The table below describes each item on the front panel and its operation.
...an ISP and received an IP Address. Power is operating at 10 Mbps. The serial port has successfully connected to the router. The serial port has no link. Writing to Flash memory (during upgrading or resetting to the router. Server data is operating at 10 Mbps. Data is initializing or the initialization has failed... On (Green) Off Local LEDs Link/Act LED On (Green) Blinking (Green) Off 100 LED On (Green) Off Description Power is operating at 100 Mbps. FVS338 ProSafe VPN Firewall 50 Reference Manual The table below describes each item on the front panel and its operation.
FVS338 Reference Manual
Page 22
...the rear panel contains the following elements: • Modem port - serves as the WAN2 Internet port through the public switched telephone network (PSTN). • Factory Defaults reset button. • Local ports - 8-port RJ-45 10/100 Mbps Fast Ethernet Switch, N-way ...port - serves as the WAN1 Internet port. One RJ-45 WAN port, N-way automatic speed negotiation, Auto MDI/MDIX. • On/Off switch • DC power in (12 VDC, 1.2A) 1-8 Introduction v1.0, March 2009 FVS338 ProSafe VPN Firewall 50 Reference Manual Router Rear Panel The rear panel of the ProSafe VPN Firewall 50...
...the rear panel contains the following elements: • Modem port - serves as the WAN2 Internet port through the public switched telephone network (PSTN). • Factory Defaults reset button. • Local ports - 8-port RJ-45 10/100 Mbps Fast Ethernet Switch, N-way ...port - serves as the WAN1 Internet port. One RJ-45 WAN port, N-way automatic speed negotiation, Auto MDI/MDIX. • On/Off switch • DC power in (12 VDC, 1.2A) 1-8 Introduction v1.0, March 2009 FVS338 ProSafe VPN Firewall 50 Reference Manual Router Rear Panel The rear panel of the ProSafe VPN Firewall 50...
FVS338 Reference Manual
Page 28
...for ISP1 if desired. Set up the router to access the Internet connection using a dialup modem. Note: At this point in the configuration process, you can continue with the configuration of your ISP. Dialup ISP Serial WAN port Settings Step 1.Select Network Configuration from ... the account name or the user name provided by your ISP settings information before you in to display the Dialup settings screen. FVS338 ProSafe VPN Firewall 50 Reference Manual 4. The Dialup Settings screen will need all of the dialup ISP serial WAN interface. See "Programming the Traffic Meter...
...for ISP1 if desired. Set up the router to access the Internet connection using a dialup modem. Note: At this point in the configuration process, you can continue with the configuration of your ISP. Dialup ISP Serial WAN port Settings Step 1.Select Network Configuration from ... the account name or the user name provided by your ISP settings information before you in to display the Dialup settings screen. FVS338 ProSafe VPN Firewall 50 Reference Manual 4. The Dialup Settings screen will need all of the dialup ISP serial WAN interface. See "Programming the Traffic Meter...
FVS338 Reference Manual
Page 29
Alternative Telephone: An alternative number which the serial port of Get Dynamically from a computer on the LAN. If your ISP has assigned a static IP address, select the Use Static IP Address radio...2009 b. Connecting the FVS338 to tune the router for your modem. Check the Connect and disconnect manually radio box to use for different modems: a. Robotics 56K FAX EXT PnP selection should work , select User Defined Modem and type in the Primary DNS Server and Secondary DNS Server (optional) fields. 6. b. FVS338 ProSafe VPN Firewall 50 Reference Manual c.
Alternative Telephone: An alternative number which the serial port of Get Dynamically from a computer on the LAN. If your ISP has assigned a static IP address, select the Use Static IP Address radio...2009 b. Connecting the FVS338 to tune the router for your modem. Check the Connect and disconnect manually radio box to use for different modems: a. Robotics 56K FAX EXT PnP selection should work , select User Defined Modem and type in the Primary DNS Server and Secondary DNS Server (optional) fields. 6. b. FVS338 ProSafe VPN Firewall 50 Reference Manual c.
FVS338 Reference Manual
Page 30
FVS338 ProSafe VPN Firewall 50 Reference Manual c. Setting the Router's MAC Address (Advanced Options) Each computer or router on this is also referred to as Auto-Answer, etc. (consult your settings or Cancel to revert to the previous settings You ... network has a unique 48-bit local Ethernet address. Note: The response time of your serial port Internet connection will be done unless required by your ISP, then you experience connectivity problems with your ISP. 2-6 Connecting the FVS338 to 9 (inclusive) or an alphabetical letter between A and F (inclusive). 2. The default is a...
FVS338 ProSafe VPN Firewall 50 Reference Manual c. Setting the Router's MAC Address (Advanced Options) Each computer or router on this is also referred to as Auto-Answer, etc. (consult your settings or Cancel to revert to the previous settings You ... network has a unique 48-bit local Ethernet address. Note: The response time of your serial port Internet connection will be done unless required by your ISP, then you experience connectivity problems with your ISP. 2-6 Connecting the FVS338 to 9 (inclusive) or an alphabetical letter between A and F (inclusive). 2. The default is a...
FVS338 Reference Manual
Page 31
otherwise, select 10BaseT. Click Apply to save your router can also change the standard MTU (Maximum Transmit Unit) value for Your Dialup Modem: Step 1.Select Network Configuration from the main menu, WAN ...modem supports 100BaseT, select 100BaseT; This could occur on the Dialup ISP Settings screen. 2. Connecting the FVS338 to manually select the port speed. Select the Custom radio button and enter the MTU value, in bytes. 3. FVS338 ProSafe VPN Firewall 50 Reference Manual • Port Speed. Figure 2-5 You can automatically determine the connection speed of the Internet (WAN...
otherwise, select 10BaseT. Click Apply to save your router can also change the standard MTU (Maximum Transmit Unit) value for Your Dialup Modem: Step 1.Select Network Configuration from the main menu, WAN ...modem supports 100BaseT, select 100BaseT; This could occur on the Dialup ISP Settings screen. 2. Connecting the FVS338 to manually select the port speed. Select the Custom radio button and enter the MTU value, in bytes. 3. FVS338 ProSafe VPN Firewall 50 Reference Manual • Port Speed. Figure 2-5 You can automatically determine the connection speed of the Internet (WAN...
FVS338 Reference Manual
Page 35
... 3 to the Internet v1.0, March 2009 2-11 Figure 2-8 Connecting the FVS338 to set the Traffic Meter the the Dialup port (if required). Click Apply to apply the settings or click Cancel to return to look at traffic types over a period of time. FVS338 ProSafe VPN Firewall 50 Reference Manual Programming the Traffic Meter (if Desired) The traffic...
... 3 to the Internet v1.0, March 2009 2-11 Figure 2-8 Connecting the FVS338 to set the Traffic Meter the the Dialup port (if required). Click Apply to apply the settings or click Cancel to return to look at traffic types over a period of time. FVS338 ProSafe VPN Firewall 50 Reference Manual Programming the Traffic Meter (if Desired) The traffic...
FVS338 Reference Manual
Page 36
...volume of Event Logs and Alerts" on Internet Traffic via the WAN port. If this if your ISP charges for this radio button to restart the Traffic Counter at least 1MB. 2-12 Connecting the FVS338 to work . If this link if you wish to continue accessing ... Increase this month's limit Use this if you want to work (see "E-Mail counter Notifications of Internet traffic passing through the Router's Broadband or Dialup port. FVS338 ProSafe VPN Firewall 50 Reference Manual Table 2-2. Broadband or Dialup can be blocked. • If using this function to know more details of the ...
...volume of Event Logs and Alerts" on Internet Traffic via the WAN port. If this if your ISP charges for this radio button to restart the Traffic Counter at least 1MB. 2-12 Connecting the FVS338 to work . If this link if you wish to continue accessing ... Increase this month's limit Use this if you want to work (see "E-Mail counter Notifications of Internet traffic passing through the Router's Broadband or Dialup port. FVS338 ProSafe VPN Firewall 50 Reference Manual Table 2-2. Broadband or Dialup can be blocked. • If using this function to know more details of the ...
FVS338 Reference Manual
Page 37
... through this Router. The WAN Mode screen will not allow you to configure your WAN port or dialup modem connections. • NAT. NAT is the default. 3. Connecting the FVS338 to receive any "private" IP address range, and these addresses to each PC on the VPN firewall is connected to share a single Internet IP address. FVS338 ProSafe VPN Firewall 50 Reference...
... through this Router. The WAN Mode screen will not allow you to configure your WAN port or dialup modem connections. • NAT. NAT is the default. 3. Connecting the FVS338 to receive any "private" IP address range, and these addresses to each PC on the VPN firewall is connected to share a single Internet IP address. FVS338 ProSafe VPN Firewall 50 Reference...
FVS338 Reference Manual
Page 38
... of the primary link at regular intervals to tell the router how often it should occur before the router rolls-over to the Internet v1.0, March 2009 FVS338 ProSafe VPN Firewall 50 Reference Manual • If you must be routed on the... primary broadband connection, the secondary dialup connection connects to notify the router of router failures that this destination host is 30 seconds. 6. To use DDNS, you have a fixed or dynamic IP address.) 2-14 Connecting the FVS338 to the Dialup port...
... of the primary link at regular intervals to tell the router how often it should occur before the router rolls-over to the Internet v1.0, March 2009 FVS338 ProSafe VPN Firewall 50 Reference Manual • If you must be routed on the... primary broadband connection, the secondary dialup connection connects to notify the router of router failures that this destination host is 30 seconds. 6. To use DDNS, you have a fixed or dynamic IP address.) 2-14 Connecting the FVS338 to the Dialup port...
FVS338 Reference Manual
Page 39
... your dynamic DNS service provider, log in to the selection you have configured Single Port, select the tab for a DNS service provider, then fill out the DDNS section for each supported DNS service provider. FVS338 ProSafe VPN Firewall 50 Reference Manual This router firmware includes software that notifies dynamic DNS servers of changes in the WAN IP...
... your dynamic DNS service provider, log in to the selection you have configured Single Port, select the tab for a DNS service provider, then fill out the DDNS section for each supported DNS service provider. FVS338 ProSafe VPN Firewall 50 Reference Manual This router firmware includes software that notifies dynamic DNS servers of changes in the WAN IP...
FVS338 Reference Manual
Page 43
... connected to the router's LAN. Enable DHCP Server is selected, enter the following parameters: a. If Enabled is the default. LAN Configuration 3-3 v1.0, March 2009 If another device on the IP address that the LAN Port IP address and DMZ port IP address are implementing... The subnet mask specifies the network number portion of the router (this is optional). Check the Enable DHCP Server radio button. Enter the IP Subnet Mask. Enter the Domain Name of an IP address. FVS338 ProSafe VPN Firewall 50 Reference Manual 1. Select Network Configuration from the primary menu ...
... connected to the router's LAN. Enable DHCP Server is selected, enter the following parameters: a. If Enabled is the default. LAN Configuration 3-3 v1.0, March 2009 If another device on the IP address that the LAN Port IP address and DMZ port IP address are implementing... The subnet mask specifies the network number portion of the router (this is optional). Check the Enable DHCP Server radio button. Enter the IP Subnet Mask. Enter the Domain Name of an IP address. FVS338 ProSafe VPN Firewall 50 Reference Manual 1. Select Network Configuration from the primary menu ...
FVS338 Reference Manual
Page 45
... in Auto Rollover mode. FVS338 ProSafe VPN Firewall 50 Reference Manual The feature is the gateway for computers that need to access the Internet. Click Apply to the previous configuration. Configuring Multi-Home LAN IPs If you can make requests to the router and the router, in the WAN settings page...). - LAN Configuration 3-5 v1.0, March 2009 When disabled, all DHCP clients will act as a proxy for all inbound traffic is enabled, then clients can add aliases to the LAN port and give computers on those requests to Chapter 4, "Firewall...
... in Auto Rollover mode. FVS338 ProSafe VPN Firewall 50 Reference Manual The feature is the gateway for computers that need to access the Internet. Click Apply to the previous configuration. Configuring Multi-Home LAN IPs If you can make requests to the router and the router, in the WAN settings page...). - LAN Configuration 3-5 v1.0, March 2009 When disabled, all DHCP clients will act as a proxy for all inbound traffic is enabled, then clients can add aliases to the LAN port and give computers on those requests to Chapter 4, "Firewall...
FVS338 Reference Manual
Page 55
... and Content Filtering The ProSafe VPN Firewall 50 provides you with a hacker intrusion or attack,... network from another (the untrusted network, such as Block Sites and Keyword Blocking. Unlike simple Internet sharing NAT routers, a firewall uses a process called stateful packet inspection to Block or Allow Specific Traffic" on page 4-20 • "...Block Sites (Content Filtering)" on page 4-20 • "Enabling Source MAC Filtering" on page 4-23 • "Setting Up Port Triggering" on page 4-26 • "Bandwidth Limiting" on page 4-28 • "E-Mail Notifications of Event Logs and Alerts"...
... and Content Filtering The ProSafe VPN Firewall 50 provides you with a hacker intrusion or attack,... network from another (the untrusted network, such as Block Sites and Keyword Blocking. Unlike simple Internet sharing NAT routers, a firewall uses a process called stateful packet inspection to Block or Allow Specific Traffic" on page 4-20 • "...Block Sites (Content Filtering)" on page 4-20 • "Enabling Source MAC Filtering" on page 4-23 • "Setting Up Port Triggering" on page 4-26 • "Bandwidth Limiting" on page 4-28 • "E-Mail Notifications of Event Logs and Alerts"...
FVS338 Reference Manual
Page 56
... have access to. Outbound traffic is normally allowed unless the firewall is called service blocking or port filtering. The FVS338 allows you to block the use of certain Internet services by the firewall unless the traffic is normally blocked by PCs on the FVS338. FVS338 ProSafe VPN Firewall 50 Reference Manual Using Rules to Block or Allow Specific Kinds of...
... have access to. Outbound traffic is normally allowed unless the firewall is called service blocking or port filtering. The FVS338 allows you to block the use of certain Internet services by the firewall unless the traffic is normally blocked by PCs on the FVS338. FVS338 ProSafe VPN Firewall 50 Reference Manual Using Rules to Block or Allow Specific Kinds of...