FWAG114 Reference Manual
Page 8
... Your PC to a Remote Device 7-6 Restoring the Default Configuration and Password 7-7 Problems with Date and Time 7-7 Appendix A Technical Specifications Appendix B Network, Routing, Firewall, and Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-2 Routing Information Protocol B-2 IP Addresses and the Internet B-2 Netmask ...B-4 Subnet Addressing B-5 Private IP Addresses B-7 Single IP Address Operation Using NAT B-8 MAC Addresses and Address Resolution Protocol B-9 Related Documents B-9 Domain Name...
... Your PC to a Remote Device 7-6 Restoring the Default Configuration and Password 7-7 Problems with Date and Time 7-7 Appendix A Technical Specifications Appendix B Network, Routing, Firewall, and Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-2 Routing Information Protocol B-2 IP Addresses and the Internet B-2 Netmask ...B-4 Subnet Addressing B-5 Private IP Addresses B-7 Single IP Address Operation Using NAT B-8 MAC Addresses and Address Resolution Protocol B-9 Related Documents B-9 Domain Name...
FWAG114 Reference Manual
Page 44
... the default LAN address of http://192.168.0.1 with another nearby wireless router or access point. If they have a wireless link and are able to have basic wireless connectivity to "Wireless Channels" on MAC addresses, follow these steps: 1. You must match the SSID configured in the main menu of password. 2. Click the Wireless 11a or 11b link in the ProSafe Dual Band Wireless VPN Firewall FWAG114...
... the default LAN address of http://192.168.0.1 with another nearby wireless router or access point. If they have a wireless link and are able to have basic wireless connectivity to "Wireless Channels" on MAC addresses, follow these steps: 1. You must match the SSID configured in the main menu of password. 2. Click the Wireless 11a or 11b link in the ProSafe Dual Band Wireless VPN Firewall FWAG114...
FWAG114 Reference Manual
Page 49
... outsiders to private resources, selectively allowing only specific outside users to access specific resources. A firewall has two default rules, one for inbound traffic and one for the ProSafe Dual Band Wireless VPN Firewall FWAG114 You may specify one side to LAN) restrict access by an IP address, you should configure that will be exempt from blocking and logging. Using Rules to...
... outsiders to private resources, selectively allowing only specific outside users to access specific resources. A firewall has two default rules, one for inbound traffic and one for the ProSafe Dual Band Wireless VPN Firewall FWAG114 You may specify one side to LAN) restrict access by an IP address, you should configure that will be exempt from blocking and logging. Using Rules to...
FWAG114 Reference Manual
Page 50
...the ProSafe Dual Band Wireless VPN Firewall FWAG114 You may define additional rules that do not already appear. • Action. Choose how you can choose to block or allow according to the schedule you select a single address, enter it in the start box. • Destination Address.The Destination Address ...default rules. By adding custom rules, you select a range of the table and click Edit. If you can also choose to log traffic that matches or does not match the rule you are not limited to add any additional services or applications that will be restricted by source IP address...
...the ProSafe Dual Band Wireless VPN Firewall FWAG114 You may define additional rules that do not already appear. • Action. Choose how you can choose to block or allow according to the schedule you select a single address, enter it in the start box. • Destination Address.The Destination Address ...default rules. By adding custom rules, you select a range of the table and click Edit. If you can also choose to log traffic that matches or does not match the rule you are not limited to add any additional services or applications that will be restricted by source IP address...
FWAG114 Reference Manual
Page 55
... unless you want the router to respond to be provided with NAT. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 The Default DMZ Server feature is helpful when using the Default DMZ Server feature. Don't check this application, the use of the firewall, and is Exposed Host... the computer can run the application properly if that PC's IP address is programmed to Ping on Internet WAN Port' check box. Click Apply. In traditional firewalls, a DMZ is a misnomer. Note: For security, NETGEAR strongly recommends that server. 3. A better term for connecting...
... unless you want the router to respond to be provided with NAT. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 The Default DMZ Server feature is helpful when using the Default DMZ Server feature. Don't check this application, the use of the firewall, and is Exposed Host... the computer can run the application properly if that PC's IP address is programmed to Ping on Internet WAN Port' check box. Click Apply. In traditional firewalls, a DMZ is a misnomer. Note: For security, NETGEAR strongly recommends that server. 3. A better term for connecting...
FWAG114 Reference Manual
Page 66
... LAN attached devices. The default is using. This field displays the IP address being used by the wireless port of the router. Identifies the current WEP configuration of the router. These parameters apply to obtain an IP address dynamically from the ISP. For example, if set to Client, the router is active for the ProSafe Dual Band Wireless VPN Firewall FWAG114 This screen shows the following...
... LAN attached devices. The default is using. This field displays the IP address being used by the wireless port of the router. Identifies the current WEP configuration of the router. These parameters apply to obtain an IP address dynamically from the ISP. For example, if set to Client, the router is active for the ProSafe Dual Band Wireless VPN Firewall FWAG114 This screen shows the following...
FWAG114 Reference Manual
Page 67
... connected to obtain an IP address from your Internet service provider's network. Log action buttons are described in Table 6-2 Table 6-2. Default Gateway The WAN (Internet) default gateway the router communicates with. Field Renew Connection Status action buttons Description Click the Renew button to display the WAN connection status. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Click "Show WAN...
... connected to obtain an IP address from your Internet service provider's network. Log action buttons are described in Table 6-2 Table 6-2. Default Gateway The WAN (Internet) default gateway the router communicates with. Field Renew Connection Status action buttons Description Click the Renew button to display the WAN connection status. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Click "Show WAN...
FWAG114 Reference Manual
Page 72
... and Password" on the rear panel of the router. To restore the factory default configuration settings without knowing the login password or IP address, you change this menu. Click Apply. Changing the Administrator Password The default password for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Erasing the Configuration It is password. From the main menu of minutes and click Apply. 6-8 Maintenance...
... and Password" on the rear panel of the router. To restore the factory default configuration settings without knowing the login password or IP address, you change this menu. Click Apply. Changing the Administrator Password The default password for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Erasing the Configuration It is password. From the main menu of minutes and click Apply. 6-8 Maintenance...
FWAG114 Reference Manual
Page 77
Reference Manual for this field to select from the drop-down list: • By its Internet (WAN) port IP address. • By its Fully Qualified Domain Name (FQDN) -- You can choose one of time in the key exchange. Remote Identity...the ProSafe Dual Band Wireless VPN Firewall FWAG114 Table 7-1. Pre-Shared Key Specify the key according to the target remote FWAG114, VPN gateway, or VPN client. over an hour (3600) is more secure Authentication Method You may select Pre-Shared Key or RSA Signature. Remote Identity Type Use this IKE policy: • DES is the default ...
Reference Manual for this field to select from the drop-down list: • By its Internet (WAN) port IP address. • By its Fully Qualified Domain Name (FQDN) -- You can choose one of time in the key exchange. Remote Identity...the ProSafe Dual Band Wireless VPN Firewall FWAG114 Table 7-1. Pre-Shared Key Specify the key according to the target remote FWAG114, VPN gateway, or VPN client. over an hour (3600) is more secure Authentication Method You may select Pre-Shared Key or RSA Signature. Remote Identity Type Use this IKE policy: • DES is the default ...
FWAG114 Reference Manual
Page 80
... for all valid IP addresses in the Internet address space • Single IP Address • Range of IP Addresses • Subnet Address Authenticating Header (AH) AH specifies the authentication protocol for the VPN header. the default • 3DES - Reference Manual for this VPN policy. Enable Authentication Use this address will want to enable or disable AH for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Table 7-1. the default • SHA1...
... for all valid IP addresses in the Internet address space • Single IP Address • Range of IP Addresses • Subnet Address Authenticating Header (AH) AH specifies the authentication protocol for the VPN header. the default • 3DES - Reference Manual for this VPN policy. Enable Authentication Use this address will want to enable or disable AH for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Table 7-1. the default • SHA1...
FWAG114 Reference Manual
Page 89
... VPN Policies Note: This scenario assumes all ports are open on the Basic Setup link. From the main menu Setup section, click on the FWAG114. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 FWAG114 Scenario 1: FWAG114 to build your configuration. 1. Log in at the default address of http://192.168.0.1 with the default user name of admin and default password of the FWAG114...
... VPN Policies Note: This scenario assumes all ports are open on the Basic Setup link. From the main menu Setup section, click on the FWAG114. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 FWAG114 Scenario 1: FWAG114 to build your configuration. 1. Log in at the default address of http://192.168.0.1 with the default user name of admin and default password of the FWAG114...
FWAG114 Reference Manual
Page 102
...service provider may select the Use wildcards check box to the router at its default LAN address of http://192.168.0.1 with its default user name of admin, default password of password, or using whatever password and LAN address you . If your dynamic DNS provider allows the use of... 9. Type the user name for the ProSafe Dual Band Wireless VPN Firewall FWAG114 1. For example, the wildcard feature will not be aliased to be routed on Dynamic DNS. 3. Select the "Use a dynamic DNS service" check box. 5. Note: If your ISP assigns a private WAN IP address such as 192.168.x.x or 10.x.x.x, ...
...service provider may select the Use wildcards check box to the router at its default LAN address of http://192.168.0.1 with its default user name of admin, default password of password, or using whatever password and LAN address you . If your dynamic DNS provider allows the use of... 9. Type the user name for the ProSafe Dual Band Wireless VPN Firewall FWAG114 1. For example, the wildcard feature will not be aliased to be routed on Dynamic DNS. 3. Select the "Use a dynamic DNS service" check box. 5. Note: If your ISP assigns a private WAN IP address such as 192.168.x.x or 10.x.x.x, ...
FWAG114 Reference Manual
Page 103
... in private networks, and should be suitable in this menu. The router's default LAN IP configuration is: • LAN IP addresses-192.168.0.1 • Subnet mask-255.255.255.0 These addresses are part of the IETF-designated private address range for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Using the LAN IP Setup Options The second feature category under Advanced, click on the LAN...
... in private networks, and should be suitable in this menu. The router's default LAN IP configuration is: • LAN IP addresses-192.168.0.1 • Subnet mask-255.255.255.0 These addresses are part of the IETF-designated private address range for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Using the LAN IP Setup Options The second feature category under Advanced, click on the LAN...
FWAG114 Reference Manual
Page 104
... open a new connection to avoid duplicate addresses on the LAN. 8-4 Advanced Configuration Combined with other addresses are : • IP Address This is the LAN IP address of the router. • IP Subnet Mask This is probably adequate for the ProSafe Dual Band Wireless VPN Firewall FWAG114 The LAN IP parameters are local to it to assign IP, DNS server, and default gateway addresses to all computers connected to the...
... open a new connection to avoid duplicate addresses on the LAN. 8-4 Advanced Configuration Combined with other addresses are : • IP Address This is the LAN IP address of the router. • IP Subnet Mask This is probably adequate for the ProSafe Dual Band Wireless VPN Firewall FWAG114 The LAN IP parameters are local to it to assign IP, DNS server, and default gateway addresses to all computers connected to the...
FWAG114 Reference Manual
Page 105
... the PC or server. (choose an IP address from the router's LAN subnet, such as 192.168.0.X) 3. The router will manually configure the network settings of all of the same IP address subnet as DHCP server' check box. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 For most applications, the default DHCP and TCP/IP settings of the range for devices with...
... the PC or server. (choose an IP address from the router's LAN subnet, such as 192.168.0.X) 3. The router will manually configure the network settings of all of the same IP address subnet as DHCP server' check box. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 For most applications, the default DHCP and TCP/IP settings of the range for devices with...
FWAG114 Reference Manual
Page 108
... would look like Figure 8-3. A default route was created to access the router's remote management. Specify what external addresses will work since the ISDN router is on the 134.177.0.0 network, your router for the ProSafe Dual Band Wireless VPN Firewall FWAG114 • Your company's network is activated. Note: For enhanced security, restrict access to as few external IP addresses as the gateway, and a second...
... would look like Figure 8-3. A default route was created to access the router's remote management. Specify what external addresses will work since the ISDN router is on the 134.177.0.0 network, your router for the ProSafe Dual Band Wireless VPN Firewall FWAG114 • Your company's network is activated. Note: For enhanced security, restrict access to as few external IP addresses as the gateway, and a second...
FWAG114 Reference Manual
Page 109
... To allow access from a range of any IP address on the Internet, select Only this PC. The default is 8080, which is 134.177.0.123 and you use the number of IP addresses on the Internet, select IP address range. To allow access from the Internet, you...provided. Specify the Port Number that will type your router's WAN IP address into your browser's Address (in IE) or Location (in Netscape) box, followed by entering that number in your external address is a common alternate for the ProSafe Dual Band Wireless VPN Firewall FWAG114 a. For greater security, you will be used for...
... To allow access from a range of any IP address on the Internet, select Only this PC. The default is 8080, which is 134.177.0.123 and you use the number of IP addresses on the Internet, select IP address range. To allow access from the Internet, you...provided. Specify the Port Number that will type your router's WAN IP address into your browser's Address (in IE) or Location (in Netscape) box, followed by entering that number in your external address is a common alternate for the ProSafe Dual Band Wireless VPN Firewall FWAG114 a. For greater security, you will be used for...
FWAG114 Reference Manual
Page 112
...could be a standard straight-through Ethernet cable or an Ethernet crossover cable. 9-2 Troubleshooting Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 LEDs Never Turn Off When the router is turned on, the LEDs turns on page 7-7. LAN or Internet Port LEDs Not On If either the ...after power up: • Cycle the power to see if the router recovers. • Clear the router's configuration to 192.168.0.1. This procedure is a fault within the router. This will set the router's IP address to factory defaults. If the error persists, you are still on , there is...
...could be a standard straight-through Ethernet cable or an Ethernet crossover cable. 9-2 Troubleshooting Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 LEDs Never Turn Off When the router is turned on, the LEDs turns on page 7-7. LAN or Internet Port LEDs Not On If either the ...after power up: • Cycle the power to see if the router recovers. • Clear the router's configuration to 192.168.0.1. This procedure is a fault within the router. This will set the router's IP address to factory defaults. If the error persists, you are still on , there is...
FWAG114 Reference Manual
Page 113
... sure your PC's IP address. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Troubleshooting the Web Configuration Interface If you are unable to access the router's Web Configuration interface from the PC to the router and reboot your PC. • If your router's IP address has been changed and you don't know the current IP address, clear the router's configuration to factory defaults. Refer to...
... sure your PC's IP address. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Troubleshooting the Web Configuration Interface If you are unable to access the router's Web Configuration interface from the PC to the router and reboot your PC. • If your router's IP address has been changed and you don't know the current IP address, clear the router's configuration to factory defaults. Refer to...
FWAG114 Reference Manual
Page 116
... to a Remote Device After verifying that your router listed as the default gateway. If you see this message: Reply from the network address of the remote device. - Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 If the path is working , you see that the IP address of the router is listed as the default gateway as described in the previous section...
... to a Remote Device After verifying that your router listed as the default gateway. If you see this message: Reply from the network address of the remote device. - Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 If the path is working , you see that the IP address of the router is listed as the default gateway as described in the previous section...