FWAG114 Reference Manual
Page 7
...or Attempted Web Access 5-16 Syslog ...5-17 Chapter 6 Maintenance Viewing VPN Firewall Status Information 5-1 Viewing a List of Attached Devices 5-5 Upgrading the Router Software 5-5 Configuration File Management 5-6 Restoring and Backing Up the Configuration ...FWAG114 Scenario 1: FWAG114 to Gateway B IKE and VPN Policies 6-17 How to Check VPN Connections 6-20 FWAG114 Scenario 2: FWAG114 to FWAG114 with RSA Certificates 6-22 Chapter 8 Advanced Configuration How to Configure Dynamic DNS 6-1 Using the LAN IP Setup Options 6-3 Configuring LAN TCP/IP Setup Parameters 6-3 Using the Router...
...or Attempted Web Access 5-16 Syslog ...5-17 Chapter 6 Maintenance Viewing VPN Firewall Status Information 5-1 Viewing a List of Attached Devices 5-5 Upgrading the Router Software 5-5 Configuration File Management 5-6 Restoring and Backing Up the Configuration ...FWAG114 Scenario 1: FWAG114 to Gateway B IKE and VPN Policies 6-17 How to Check VPN Connections 6-20 FWAG114 Scenario 2: FWAG114 to FWAG114 with RSA Certificates 6-22 Chapter 8 Advanced Configuration How to Configure Dynamic DNS 6-1 Using the LAN IP Setup Options 6-3 Configuring LAN TCP/IP Setup Parameters 6-3 Using the Router...
FWAG114 Reference Manual
Page 13
... NETGEAR ProSafe Dual Band Wireless VPN Firewall FWAG114. Parents and network administrators can install and use the router within minutes. Chapter 2 Introduction This chapter describes the features of Service attack (DoS) attack protection and intrusion detection. Unlike simple Internet sharing routers that protects your local area network (LAN) to a WAN device, such as a cable modem or DSL modem. With minimum setup...
... NETGEAR ProSafe Dual Band Wireless VPN Firewall FWAG114. Parents and network administrators can install and use the router within minutes. Chapter 2 Introduction This chapter describes the features of Service attack (DoS) attack protection and intrusion detection. Unlike simple Internet sharing routers that protects your local area network (LAN) to a WAN device, such as a cable modem or DSL modem. With minimum setup...
FWAG114 Reference Manual
Page 16
... operate the ProSafe Dual Band Wireless VPN Firewall FWAG114 within minutes after connecting it to the Internet over a DSL connection by simulating a dial-up connection. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 • IP Address Sharing by NAT The FWAG114 wireless firewall allows several networked PCs to share an Internet account using the Dynamic Host Configuration Protocol (DHCP). A user-friendly Setup Wizard is provided...
... operate the ProSafe Dual Band Wireless VPN Firewall FWAG114 within minutes after connecting it to the Internet over a DSL connection by simulating a dial-up connection. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 • IP Address Sharing by NAT The FWAG114 wireless firewall allows several networked PCs to share an Internet account using the Dynamic Host Configuration Protocol (DHCP). A user-friendly Setup Wizard is provided...
FWAG114 Reference Manual
Page 21
... area network (LAN) and connect to the Internet. Connecting the FWAG114 to configure your ProSafe Dual Band Wireless VPN Firewall FWAG114 for Windows, Macintosh, or UNIX/Linux. Cabling and Computer Hardware Requirements To use the FWAG114 wireless firewall on your router. For the initial connection to the Internet and configuration of your router, you will connect to your network at 100 Mbps, you...
... area network (LAN) and connect to the Internet. Connecting the FWAG114 to configure your ProSafe Dual Band Wireless VPN Firewall FWAG114 for Windows, Macintosh, or UNIX/Linux. Cabling and Computer Hardware Requirements To use the FWAG114 wireless firewall on your router. For the initial connection to the Internet and configuration of your router, you will connect to your network at 100 Mbps, you...
FWAG114 Reference Manual
Page 27
... previously in the Setup Wizard for the ProSafe Dual Band Wireless VPN Firewall FWAG114 A login window shown below opens: Figure 3-5: Login window 3. Unless your ISP automatically assigns your configuration automatically via DHCP, you will need the configuration parameters from your ISP to connect to the Internet. Note: If you choose not to the router. Connecting the FWAG114 to the Internet...
... previously in the Setup Wizard for the ProSafe Dual Band Wireless VPN Firewall FWAG114 A login window shown below opens: Figure 3-5: Login window 3. Unless your ISP automatically assigns your configuration automatically via DHCP, you will need the configuration parameters from your ISP to connect to the Internet. Note: If you choose not to the router. Connecting the FWAG114 to the Internet...
FWAG114 Reference Manual
Page 28
... connection follow below. When the router successfully detects an active Internet service, the router's Internet LED goes on. The Setup Wizard will be prompted to the Internet PPPoE Wizard-Detected Option If the Setup Wizard discovers that your router and the cable or DSL line...PPPoE, DHCP, or Static IP broadband connections. • Connections which use fixed IP address assignment. The Setup Wizard reports which use dynamic IP address assignment. • Connections which connection type it finds. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 c.
... connection follow below. When the router successfully detects an active Internet service, the router's Internet LED goes on. The Setup Wizard will be prompted to the Internet PPPoE Wizard-Detected Option If the Setup Wizard discovers that your router and the cable or DSL line...PPPoE, DHCP, or Static IP broadband connections. • Connections which use fixed IP address assignment. The Setup Wizard reports which use dynamic IP address assignment. • Connections which connection type it finds. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 c.
FWAG114 Reference Manual
Page 30
...ProSafe Dual Band Wireless VPN Firewall FWAG114 Dynamic IP Wizard-Detected Option If the Setup Wizard discovers that your ISP uses Dynamic IP assignment, you will see this menu: Figure 3-8: Setup Wizard menu for the connection, you may need to enter it also. If you leave the Domain Name field blank, the router... to access your ISP's services such as mail or news servers. If the NETGEAR website does not appear within one minute, refer to Chapter 9, "Troubleshooting." 3-10 Connecting the FWAG114 to the router during login, select Use these settings take effect. • If your ISP ...
...ProSafe Dual Band Wireless VPN Firewall FWAG114 Dynamic IP Wizard-Detected Option If the Setup Wizard discovers that your ISP uses Dynamic IP assignment, you will see this menu: Figure 3-8: Setup Wizard menu for the connection, you may need to enter it also. If you leave the Domain Name field blank, the router... to access your ISP's services such as mail or news servers. If the NETGEAR website does not appear within one minute, refer to Chapter 9, "Troubleshooting." 3-10 Connecting the FWAG114 to the router during login, select Use these settings take effect. • If your ISP ...
FWAG114 Reference Manual
Page 31
Note: Restart the computers on page 3-3. • Enter the IP address of your ISP's gateway router. Usually, it is also called Static IP. This information should have been provided to you may need the configuration parameters from ...of your ISP's Primary and Secondary DNS Server addresses. If the NETGEAR website does not appear within one minute, refer to test your Internet connection. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Fixed IP Account Wizard-Detected Option If the Setup Wizard discovers that your ISP uses Fixed IP assignment, you recorded ...
Note: Restart the computers on page 3-3. • Enter the IP address of your ISP's gateway router. Usually, it is also called Static IP. This information should have been provided to you may need the configuration parameters from ...of your ISP's Primary and Secondary DNS Server addresses. If the NETGEAR website does not appear within one minute, refer to test your Internet connection. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Fixed IP Account Wizard-Detected Option If the Setup Wizard discovers that your ISP uses Fixed IP assignment, you recorded ...
FWAG114 Reference Manual
Page 32
Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Manually Configuring Your Internet Connection You can manually configure your router using the menu below, or you can allow the Setup Wizard to the Internet ISP Does Not Require Login ISP Does Require Login Figure 3-10: Browser-based configuration Basic Settings menus 3-12 Connecting the FWAG114 to determine your configuration as described in the previous section.
Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Manually Configuring Your Internet Connection You can manually configure your router using the menu below, or you can allow the Setup Wizard to the Internet ISP Does Not Require Login ISP Does Require Login Figure 3-10: Browser-based configuration Basic Settings menus 3-12 Connecting the FWAG114 to determine your configuration as described in the previous section.
FWAG114 Reference Manual
Page 33
... be used by the router on the Setup menu. 2. c. If a Secondary DNS Server address is first opened. Some ISPs will connect. You must be necessary to access your ISP's services such as that is the ISP's router to which your router will register the Ethernet ...(DNS) Address: If you know that you a permanent, fixed (static) IP address for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Procedure: Configuring the Internet Connection Manually You can manually configure the router using the Basic Settings menu shown in your PC when your account is available, enter it . The...
... be used by the router on the Setup menu. 2. c. If a Secondary DNS Server address is first opened. Some ISPs will connect. You must be necessary to access your ISP's services such as that is the ISP's router to which your router will register the Ethernet ...(DNS) Address: If you know that you a permanent, fixed (static) IP address for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Procedure: Configuring the Internet Connection Manually You can manually configure the router using the Basic Settings menu shown in your PC when your account is available, enter it . The...
FWAG114 Reference Manual
Page 38
The wireless settings menu will appear, as shown below. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Understanding Wireless Settings To configure the wireless settings of your FWAG114, click the Wireless 11a or Wireless 11b/g link in the Setup section of the main menu. Figure 4-2: Wireless 11a and 11b/g Settings menus 4-4 Wireless Configuration
The wireless settings menu will appear, as shown below. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Understanding Wireless Settings To configure the wireless settings of your FWAG114, click the Wireless 11a or Wireless 11b/g link in the Setup section of the main menu. Figure 4-2: Wireless 11a and 11b/g Settings menus 4-4 Wireless Configuration
FWAG114 Reference Manual
Page 89
Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 FWAG114 Scenario 1: FWAG114 to build your configuration. 1. WAN IP addresses ISP provides these addresses Figure 7-7: FWAG114 Internet IP Address menu Virtual Private Networking 7-17 Configure the WAN (Internet) and LAN IP addresses of password, or using whatever password and LAN address you have chosen. 2. a. From the main menu Setup section, click...
Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 FWAG114 Scenario 1: FWAG114 to build your configuration. 1. WAN IP addresses ISP provides these addresses Figure 7-7: FWAG114 Internet IP Address menu Virtual Private Networking 7-17 Configure the WAN (Internet) and LAN IP addresses of password, or using whatever password and LAN address you have chosen. 2. a. From the main menu Setup section, click...
FWAG114 Reference Manual
Page 90
...to Configure LAN TCP/IP Setup Settings" on the LAN IP Setup link. Note: After you use to connect to the built-in the Basic Setup topics, please see "How to log on page 2-14. You will be disconnected from the FWAG114. c. From the main ...configuration menu d. For more information on configuring the WAN IP settings in web-based configuration manager of the FWAG114. 7-18 Virtual Private Networking Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 b. Configure the LAN IP address according to the settings above and click Apply to save your settings....
...to Configure LAN TCP/IP Setup Settings" on the LAN IP Setup link. Note: After you use to connect to the built-in the Basic Setup topics, please see "How to log on page 2-14. You will be disconnected from the FWAG114. c. From the main ...configuration menu d. For more information on configuring the WAN IP settings in web-based configuration manager of the FWAG114. 7-18 Virtual Private Networking Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 b. Configure the LAN IP address according to the settings above and click Apply to save your settings....
FWAG114 Reference Manual
Page 94
.... Click Browse to add a CA. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 FWAG114 Scenario 2: FWAG114 to FWAG114 with RSA Certificates The following is done with the exception that the identification is a typical gateway-to-gateway VPN that uses Public Key Infrastructure x.509 (PKIX) certificates for authentication. The network setup is set on page 3-14. 1. Click Add to locate...
.... Click Browse to add a CA. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 FWAG114 Scenario 2: FWAG114 to FWAG114 with RSA Certificates The following is done with the exception that the identification is a typical gateway-to-gateway VPN that uses Public Key Infrastructure x.509 (PKIX) certificates for authentication. The network setup is set on page 3-14. 1. Click Add to locate...
FWAG114 Reference Manual
Page 103
The router's default LAN IP configuration is: • LAN IP addresses-192.168.0.1 • Subnet mask-255.255.255.0 These addresses are part of the IETF-designated private address range for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Using the LAN IP Setup Options The second feature category under...is shipped preconfigured to use private IP addresses on LAN IP Setup to view the LAN IP Setup menu, shown below. Figure 8-1: LAN IP Setup Menu Configuring LAN TCP/IP Setup Parameters The router is LAN IP Setup. Advanced Configuration 8-3 If your network has a requirement to...
The router's default LAN IP configuration is: • LAN IP addresses-192.168.0.1 • Subnet mask-255.255.255.0 These addresses are part of the IETF-designated private address range for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Using the LAN IP Setup Options The second feature category under...is shipped preconfigured to use private IP addresses on LAN IP Setup to view the LAN IP Setup menu, shown below. Figure 8-1: LAN IP Setup Menu Configuring LAN TCP/IP Setup Parameters The router is LAN IP Setup. Advanced Configuration 8-3 If your network has a requirement to...
FWAG114 Reference Manual
Page 104
... RIP Version This controls the format and the broadcasting method of addresses specified in again. Note: If you have an unusual network setup. - IP addresses will broadcast its routing table periodically. - RIP-1 is assigned to avoid duplicate addresses on the LAN. 8-4 ...to Both or Out Only, the router will be disconnected. The assigned default gateway address is the LAN address of the router. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 The LAN IP parameters are local to it, and which other routers. Both is probably adequate for most...
... RIP Version This controls the format and the broadcasting method of addresses specified in again. Note: If you have an unusual network setup. - IP addresses will broadcast its routing table periodically. - RIP-1 is assigned to avoid duplicate addresses on the LAN. 8-4 ...to Both or Out Only, the router will be disconnected. The assigned default gateway address is the LAN address of the router. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 The LAN IP parameters are local to it, and which other routers. Both is probably adequate for most...
FWAG114 Reference Manual
Page 172
... Exchange (IKE) protocol to facilitate and automate the SA setup and the exchange of refreshing keys; Tunnel mode ESP prevents an attacker from analyzing the data and deciphering it, as well as knowing who the packet is going. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 • Tunnel Mode: The tunnel mode IPSec implementation encapsulates...
... Exchange (IKE) protocol to facilitate and automate the SA setup and the exchange of refreshing keys; Tunnel mode ESP prevents an attacker from analyzing the data and deciphering it, as well as knowing who the packet is going. Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 • Tunnel Mode: The tunnel mode IPSec implementation encapsulates...