SRXN3205 Reference Manual
Page 2
... with the regulations. EU Regulatory Compliance Statement The ProSafe Wireless-N VPN Firewall is no guarantee that the ProSafe Wireless-N VPN Firewall has been suppressed in accordance with the instructions, ...NETGEAR and the NETGEAR logo are designed to the notes in a residential installation. These limits are registered trademarks and ProSafe is hereby certified that interference will not occur in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das ProSafe Wireless-N VPN Firewall...
... with the regulations. EU Regulatory Compliance Statement The ProSafe Wireless-N VPN Firewall is no guarantee that the ProSafe Wireless-N VPN Firewall has been suppressed in accordance with the instructions, ...NETGEAR and the NETGEAR logo are designed to the notes in a residential installation. These limits are registered trademarks and ProSafe is hereby certified that interference will not occur in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das ProSafe Wireless-N VPN Firewall...
SRXN3205 Reference Manual
Page 5
... format) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number SRXN3205 October 2008 VPN Firewall ProSafe Wireless-N VPN Firewall Business English 202-10416-01 1.0 v 1.0, October 2008 interface of the University may not be removed or altered from the use acknowledge that you wrote...
... format) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number SRXN3205 October 2008 VPN Firewall ProSafe Wireless-N VPN Firewall Business English 202-10416-01 1.0 v 1.0, October 2008 interface of the University may not be removed or altered from the use acknowledge that you wrote...
SRXN3205 Reference Manual
Page 7
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Contents About This Manual Conventions, Formats, and Scope xiii How to Use This Manual xiv How to Print this Manual xiv Revision History ...xv Chapter 1 Introduction Key Firewall Features ...1-1 A Powerful, True Firewall with Content Filtering 1-2 Autosensing Ethernet Connections with Auto Uplink 1-2 Extensive Protocol Support 1-3 Advanced VPN Support for Both IPsec and SSL...
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Contents About This Manual Conventions, Formats, and Scope xiii How to Use This Manual xiv How to Print this Manual xiv Revision History ...xv Chapter 1 Introduction Key Firewall Features ...1-1 A Powerful, True Firewall with Content Filtering 1-2 Autosensing Ethernet Connections with Auto Uplink 1-2 Extensive Protocol Support 1-3 Advanced VPN Support for Both IPsec and SSL...
SRXN3205 Reference Manual
Page 8
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Configuring the WAN Mode 2-10 Configuring Dynamic DNS 2-11 Configuring the Advanced WAN Options (Optional 2-12 Additional WAN Related Configuration 2-14 Chapter 3 LAN Configuration Configuring the LAN Setup Options 3-1 Using the VPN Firewall as a DHCP Server 3-3 Configuring DHCP Address Reservation 3-4 Managing Groups and Hosts (LAN Groups 3-4 Viewing the LAN Groups Database...
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Configuring the WAN Mode 2-10 Configuring Dynamic DNS 2-11 Configuring the Advanced WAN Options (Optional 2-12 Additional WAN Related Configuration 2-14 Chapter 3 LAN Configuration Configuring the LAN Setup Options 3-1 Using the VPN Firewall as a DHCP Server 3-3 Configuring DHCP Address Reservation 3-4 Managing Groups and Hosts (LAN Groups 3-4 Viewing the LAN Groups Database...
SRXN3205 Reference Manual
Page 9
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Restricting Wireless Access by MAC Address 4-18 Chapter 5 Firewall Security and Content Filtering About Firewall Security and Content Filtering 5-1 Using Rules & Services to Block or Allow Traffic 5-2 Services-Based Rules 5-2 Viewing the Firewall Rules 5-7 Order of Precedence for Rules 5-7 Setting the Outbound Policy 5-7 Creating a LAN WAN Outbound Services Rule 5-8 Creating a LAN WAN Inbound...
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Restricting Wireless Access by MAC Address 4-18 Chapter 5 Firewall Security and Content Filtering About Firewall Security and Content Filtering 5-1 Using Rules & Services to Block or Allow Traffic 5-2 Services-Based Rules 5-2 Viewing the Firewall Rules 5-7 Order of Precedence for Rules 5-7 Setting the Outbound Policy 5-7 Creating a LAN WAN Outbound Services Rule 5-8 Creating a LAN WAN Inbound...
SRXN3205 Reference Manual
Page 10
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Testing the Connection 6-11 Managing VPN Tunnel Policies 6-11 About IKE ...6-12 Managing IKE Policies 6-12 About the IKE Policy Table 6-13 VPN Policy ...6-15 VPN Tunnel Connection Status 6-16 Manually Assigning IP Addresses to Remote Users (ModeConfig 6-17 Mode Config Operation 6-17 Configuring the VPN Firewall 6-17 Configuring the ProSafe VPN... Client for ModeConfig 6-20 Extended Authentication (XAUTH) Configuration 6-22 Configuring XAUTH for VPN Clients 6-23 ...
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Testing the Connection 6-11 Managing VPN Tunnel Policies 6-11 About IKE ...6-12 Managing IKE Policies 6-12 About the IKE Policy Table 6-13 VPN Policy ...6-15 VPN Tunnel Connection Status 6-16 Manually Assigning IP Addresses to Remote Users (ModeConfig 6-17 Mode Config Operation 6-17 Configuring the VPN Firewall 6-17 Configuring the ProSafe VPN... Client for ModeConfig 6-20 Extended Authentication (XAUTH) Configuration 6-22 Configuring XAUTH for VPN Clients 6-23 ...
SRXN3205 Reference Manual
Page 11
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 8 Managing Users, Authentication, and Certificates Adding Authentication Domains, Groups, and Users 8-1 Creating a Domain 8-1 Creating a Group ...8-3 Creating a New User Account 8-4 ... Time Zone Settings 9-15 Chapter 11 Monitoring System Performance Enabling the Traffic Meter 11-1 Activating Notification of Events and Alerts 11-3 Viewing Firewall Logs 11-6 Viewing Router Configuration and System Status 11-7 Monitoring the WAN Port Status 11-8 Monitoring Attached Devices 11-9 Reviewing the DHCP Log 11-10 Monitoring...
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 8 Managing Users, Authentication, and Certificates Adding Authentication Domains, Groups, and Users 8-1 Creating a Domain 8-1 Creating a Group ...8-3 Creating a New User Account 8-4 ... Time Zone Settings 9-15 Chapter 11 Monitoring System Performance Enabling the Traffic Meter 11-1 Activating Notification of Events and Alerts 11-3 Viewing Firewall Logs 11-6 Viewing Router Configuration and System Status 11-7 Monitoring the WAN Port Status 11-8 Monitoring Attached Devices 11-9 Reviewing the DHCP Log 11-10 Monitoring...
SRXN3205 Reference Manual
Page 12
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Viewing Port Triggering Status 11-12 Monitoring VPN Tunnel Connection Status 11-13 Reviewing the VPN Logs 11-14 Chapter 12 Troubleshooting Basic Functions ...12-1 Power LED Not On 12-2 LEDs Never Turn Off 12-2 LAN ...Web Configuration Interface 12-2 Troubleshooting the ISP Connection 12-4 Troubleshooting a TCP/IP Network Using a Ping Utility 12-5 Testing the LAN Path to Your VPN Firewall 12-5 Testing the Path from Your PC to a Remote Device 12-6 Restoring the Default Configuration and Password 12-7 Problems with Date and Time ...
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Viewing Port Triggering Status 11-12 Monitoring VPN Tunnel Connection Status 11-13 Reviewing the VPN Logs 11-14 Chapter 12 Troubleshooting Basic Functions ...12-1 Power LED Not On 12-2 LEDs Never Turn Off 12-2 LAN ...Web Configuration Interface 12-2 Troubleshooting the ISP Connection 12-4 Troubleshooting a TCP/IP Network Using a Ping Utility 12-5 Testing the LAN Path to Your VPN Firewall 12-5 Testing the Path from Your PC to a Remote Device 12-6 Restoring the Default Configuration and Password 12-7 Problems with Date and Time ...
SRXN3205 Reference Manual
Page 13
...is intended for readers with intermediate computer and networking skills. The information in a malfunction or damage to configure and troubleshoot a ProSafe Wireless-N VPN Firewall. Conventions, Formats, and Scope The conventions, formats, and scope of note may result in this manual are described in the... User input, IP addresses, GUI screen text Command prompt, CLI text, code URL links • Formats. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual About This Manual The NETGEAR® ProSafe™ Wireless-N VPN FirewallReference Manual describes how to the equipment.
...is intended for readers with intermediate computer and networking skills. The information in a malfunction or damage to configure and troubleshoot a ProSafe Wireless-N VPN Firewall. Conventions, Formats, and Scope The conventions, formats, and scope of note may result in this manual are described in the... User input, IP addresses, GUI screen text Command prompt, CLI text, code URL links • Formats. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual About This Manual The NETGEAR® ProSafe™ Wireless-N VPN FirewallReference Manual describes how to the equipment.
SRXN3205 Reference Manual
Page 14
... button that displays the table of this manual, you can choose one page at http://kbserver.netgear.com/products/SRXN3205.asp. Each page in the HTML version of contents or index to navigate directly to where ... NETGEAR, Inc. Double-click on the NETGEAR, Inc. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Danger: This is written for the firewall according to these specifications: Product Manual Publication Date ProSafe Wireless-N VPN Firewall October 2008 For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR ...
... button that displays the table of this manual, you can choose one page at http://kbserver.netgear.com/products/SRXN3205.asp. Each page in the HTML version of contents or index to navigate directly to where ... NETGEAR, Inc. Double-click on the NETGEAR, Inc. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Danger: This is written for the firewall according to these specifications: Product Manual Publication Date ProSafe Wireless-N VPN Firewall October 2008 For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR ...
SRXN3205 Reference Manual
Page 15
.... Revision History Manual Part Number Manual Version Number Publication Date 202-10416-01 1.0 October 2008 Description First publication xv v1.0, October 2008 Printing a PDF Chapter. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Printing from PDF. The Acrobat reader is available on the Adobe Web site at the top left of your printer supports printing...
.... Revision History Manual Part Number Manual Version Number Publication Date 202-10416-01 1.0 October 2008 Description First publication xv v1.0, October 2008 Printing a PDF Chapter. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Printing from PDF. The Acrobat reader is available on the Adobe Web site at the top left of your printer supports printing...
SRXN3205 Reference Manual
Page 16
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual xvi v1.0, October 2008
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual xvi v1.0, October 2008
SRXN3205 Reference Manual
Page 17
... 2008 Moreover, the ProSafe Wireless-N VPN Firewall supports wireless connections over the wider range and more robust connections afforded by 802.11N and 802.11a wireless networks. The SRXN3205 is a complete security solution with advanced IPsec and SSL VPN technologies for secure wired and wireless connections. The SRXN3205 also supports wireless bridging. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 1 Introduction The SRXN3205 ProSafe Wireless-N VPN Firewall provides Internet connectivity to...
... 2008 Moreover, the ProSafe Wireless-N VPN Firewall supports wireless connections over the wider range and more robust connections afforded by 802.11N and 802.11a wireless networks. The SRXN3205 is a complete security solution with advanced IPsec and SSL VPN technologies for secure wired and wireless connections. The SRXN3205 also supports wireless bridging. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 1 Introduction The SRXN3205 ProSafe Wireless-N VPN Firewall provides Internet connectivity to...
SRXN3205 Reference Manual
Page 18
... scheduling of firewall policies by screening for low current draw A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the SRXN3205 is a true firewall, using stateful packet inspection (SPI) to the correct configuration. The SRXN3205 incorporates Auto... your email address or email pager whenever a significant event occurs. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Advanced IPsec and SSL VPN support • Advanced stateful packet inspection (SPI) firewall with multi-NAT support • Easy, web-based setup for ...
... scheduling of firewall policies by screening for low current draw A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the SRXN3205 is a true firewall, using stateful packet inspection (SPI) to the correct configuration. The SRXN3205 incorporates Auto... your email address or email pager whenever a significant event occurs. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Advanced IPsec and SSL VPN support • Advanced stateful packet inspection (SPI) firewall with multi-NAT support • Easy, web-based setup for ...
SRXN3205 Reference Manual
Page 19
... NETGEAR ProSafe VPN Client software (VPN01L) - When DHCP is a protocol for traffic prioritization. PPPoE is enabled and no DNS addresses are specified, the firewall provides its own address as a DNS server to other IPsec gateways and clients. - Advanced VPN Support for secure connection to the attached PCs. Introduction 1-3 v1.0, October 2008 Bundled with 3 SSL VPN sessions). ProSafe Wireless-N VPN Firewall SRXN3205...
... NETGEAR ProSafe VPN Client software (VPN01L) - When DHCP is a protocol for traffic prioritization. PPPoE is enabled and no DNS addresses are specified, the firewall provides its own address as a DNS server to other IPsec gateways and clients. - Advanced VPN Support for secure connection to the attached PCs. Introduction 1-3 v1.0, October 2008 Bundled with 3 SSL VPN sessions). ProSafe Wireless-N VPN Firewall SRXN3205...
SRXN3205 Reference Manual
Page 20
... on their computers. - Power, test, LAN speed, LAN activity, and wireless activity for a wide variety of popular browsers, such as Microsoft Internet Explorer or Apple Safari. - ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • SSL VPN provides remote access for mobile users to configure the 802.11 wireless options for the 2.4 GHz band or the 5 GHz bands. •...
... on their computers. - Power, test, LAN speed, LAN activity, and wireless activity for a wide variety of popular browsers, such as Microsoft Internet Explorer or Apple Safari. - ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • SSL VPN provides remote access for mobile users to configure the 802.11 wireless options for the 2.4 GHz band or the 5 GHz bands. •...
SRXN3205 Reference Manual
Page 21
... other VPNC-compliant VPN firewalls and clients. • SNMP. The firewall includes the NETGEAR VPN Wizard to easily configure IPsec VPN tunnels according to the recommendations of ISP. For security, you only for the information required for your firewall and Wireless access from almost... functions such as , Microsoft Internet Explorer 5.0 or above, or Mozilla 3.0 or above Introduction 1-5 v1.0, October 2008 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Easy Installation and Management You can limit remote management access to a specified remote IP address or range of ...
... other VPNC-compliant VPN firewalls and clients. • SNMP. The firewall includes the NETGEAR VPN Wizard to easily configure IPsec VPN tunnels according to the recommendations of ISP. For security, you only for the information required for your firewall and Wireless access from almost... functions such as , Microsoft Internet Explorer 5.0 or above, or Mozilla 3.0 or above Introduction 1-5 v1.0, October 2008 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Easy Installation and Management You can limit remote management access to a specified remote IP address or range of ...
SRXN3205 Reference Manual
Page 22
..., contact your NETGEAR dealer. one user license. • Warranty and Support Information Card. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Package Contents The product package should contain the following items: • ProSafe Wireless-N VPN Firewall • Rubber...• One Straight through Category 5 (Cat5) Ethernet cable. • Installation Guide, SRXN3205 ProSafe Wireless-N VPN Firewall . • Resource CD, including: - Front Panel Features The ProSafe Wireless-N VPN Firewall front panel is shown below: 1 2 3 4 Figure 1-1 1-6 Introduction v1.0, October...
..., contact your NETGEAR dealer. one user license. • Warranty and Support Information Card. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Package Contents The product package should contain the following items: • ProSafe Wireless-N VPN Firewall • Rubber...• One Straight through Category 5 (Cat5) Ethernet cable. • Installation Guide, SRXN3205 ProSafe Wireless-N VPN Firewall . • Resource CD, including: - Front Panel Features The ProSafe Wireless-N VPN Firewall front panel is shown below: 1 2 3 4 Figure 1-1 1-6 Introduction v1.0, October...
SRXN3205 Reference Manual
Page 23
Power is supplied to the firewall. The system has booted successfully. Amber = 100M; Blink = ACT Right LED (speed): Off = 10M; Description of Front Panel Items Item Activity Description PWR (Power) On ... 1-7 v1.0, October 2008 n/g 2.4 GHz Off Blink (Green) WLAN 802.11b/g/n (2.4 GHz) mode is disabled. Left LED (status): On = Link; ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Table 1-1. Wireless data traffic in for 15 seconds (until the TEST light flashes). Green = 1000M 4 WAN Port WAN connection One Auto MDI/MDIX, Gigabit Ethernet port. This ...
Power is supplied to the firewall. The system has booted successfully. Amber = 100M; Blink = ACT Right LED (speed): Off = 10M; Description of Front Panel Items Item Activity Description PWR (Power) On ... 1-7 v1.0, October 2008 n/g 2.4 GHz Off Blink (Green) WLAN 802.11b/g/n (2.4 GHz) mode is disabled. Left LED (status): On = Link; ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Table 1-1. Wireless data traffic in for 15 seconds (until the TEST light flashes). Green = 1000M 4 WAN Port WAN connection One Auto MDI/MDIX, Gigabit Ethernet port. This ...
SRXN3205 Reference Manual
Page 24
For the best performance, attach the patch antenna to the middle connector and attach the dipole antennas to the SRXN3205 12V 1.5A AC-DC power adapter. 1-8 Introduction v1.0, October 2008 The three antennas can be positioned horizontally...and one patch). Detachable (SMA) Antennas: The SRXN3205 provides three SMA connectors for the best coverage. 2. DC Power Jack: This jack connects to the two connectors on both corners. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Rear Panel Features The rear panel of the ProSafe Wireless-N VPN Firewall is shown below. 1 2 Figure 1-2 New ...
For the best performance, attach the patch antenna to the middle connector and attach the dipole antennas to the SRXN3205 12V 1.5A AC-DC power adapter. 1-8 Introduction v1.0, October 2008 The three antennas can be positioned horizontally...and one patch). Detachable (SMA) Antennas: The SRXN3205 provides three SMA connectors for the best coverage. 2. DC Power Jack: This jack connects to the two connectors on both corners. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Rear Panel Features The rear panel of the ProSafe Wireless-N VPN Firewall is shown below. 1 2 Figure 1-2 New ...