SRXN3205 Reference Manual
Page 7
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Contents About This Manual Conventions, Formats, and Scope xiii How to Use This Manual xiv How to Print this Manual xiv Revision History ...xv Chapter 1 Introduction Key Firewall Features ...1-1 A Powerful, True Firewall with Content Filtering 1-2 Autosensing Ethernet Connections with Auto Uplink 1-2 Extensive Protocol Support 1-3 Advanced VPN Support for Both IPsec and SSL 1-3 Wireless Networking Features...
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Contents About This Manual Conventions, Formats, and Scope xiii How to Use This Manual xiv How to Print this Manual xiv Revision History ...xv Chapter 1 Introduction Key Firewall Features ...1-1 A Powerful, True Firewall with Content Filtering 1-2 Autosensing Ethernet Connections with Auto Uplink 1-2 Extensive Protocol Support 1-3 Advanced VPN Support for Both IPsec and SSL 1-3 Wireless Networking Features...
SRXN3205 Reference Manual
Page 15
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Printing from PDF. Your computer must have the free Adobe Acrobat reader installed in the chapter you want to view and print .... Use the Complete PDF Manual link at the top left of any page in the upper left of your browser window. - Tip: If your printer supports printing two pages on the Adobe Web site at the top left of any page in order to print. The PDF version of the chapter...
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Printing from PDF. Your computer must have the free Adobe Acrobat reader installed in the chapter you want to view and print .... Use the Complete PDF Manual link at the top left of any page in the upper left of your browser window. - Tip: If your printer supports printing two pages on the Adobe Web site at the top left of any page in order to print. The PDF version of the chapter...
SRXN3205 Reference Manual
Page 17
... can be installed and configured within minutes. The SRXN3205 also supports wireless bridging. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 1 Introduction The SRXN3205 ProSafe Wireless-N VPN Firewall provides Internet connectivity to your networks along with a powerful and flexible firewall to safeguard your local Ethernet and wireless networks via a broadband cable or DSL modem. Moreover, the ProSafe Wireless-N VPN Firewall supports wireless connections over the wider range and more robust connections...
... can be installed and configured within minutes. The SRXN3205 also supports wireless bridging. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 1 Introduction The SRXN3205 ProSafe Wireless-N VPN Firewall provides Internet connectivity to your networks along with a powerful and flexible firewall to safeguard your local Ethernet and wireless networks via a broadband cable or DSL modem. Moreover, the ProSafe Wireless-N VPN Firewall supports wireless connections over the wider range and more robust connections...
SRXN3205 Reference Manual
Page 18
...cable to defend against hacker attacks. Autosensing Ethernet Connections with Content Filtering Unlike simple Internet sharing NAT routers, the SRXN3205 is a true firewall, using stateful packet inspection (SPI) to make the right connection. 1-2 Introduction v1.0, October ...8226; Permits scheduling of full-duplex or half-duplex operation. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Advanced IPsec and SSL VPN support • Advanced stateful packet inspection (SPI) firewall with multi-NAT support • Easy, web-based setup for installation and management ...
...cable to defend against hacker attacks. Autosensing Ethernet Connections with Content Filtering Unlike simple Internet sharing NAT routers, the SRXN3205 is a true firewall, using stateful packet inspection (SPI) to make the right connection. 1-2 Introduction v1.0, October ...8226; Permits scheduling of full-duplex or half-duplex operation. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Advanced IPsec and SSL VPN support • Advanced stateful packet inspection (SPI) firewall with multi-NAT support • Easy, web-based setup for installation and management ...
SRXN3205 Reference Manual
Page 19
...of the NETGEAR ProSafe VPN Client software (VPN01L) - This feature eliminates the need to 5 (max) IPsec VPN tunnels (alternately, 4 IPsec VPN tunnels concurrently with 4 SSL VPN sessions, or 5 IPsec VPN tunnels concurrently with 3 SSL VPN sessions). Bundled with broad protocol support for ...firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. • PPP over a DSL connection by your Internet service provider (ISP). ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Extensive Protocol Support The firewall supports...
...of the NETGEAR ProSafe VPN Client software (VPN01L) - This feature eliminates the need to 5 (max) IPsec VPN tunnels (alternately, 4 IPsec VPN tunnels concurrently with 4 SSL VPN sessions, or 5 IPsec VPN tunnels concurrently with 3 SSL VPN sessions). Bundled with broad protocol support for ...firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. • PPP over a DSL connection by your Internet service provider (ISP). ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Extensive Protocol Support The firewall supports...
SRXN3205 Reference Manual
Page 20
... and Economical Operation. Browser based, platform-independent, remote access through a number of user repositories. - Supports up to 5 IPse VPN sessions and up to selected corporate resources without requiring a pre-installed VPN client on their computers. - ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • SSL VPN provides remote access for each radio mode are easily identified. 1-4 Introduction v1.0, October 2008...
... and Economical Operation. Browser based, platform-independent, remote access through a number of user repositories. - Supports up to 5 IPse VPN sessions and up to selected corporate resources without requiring a pre-installed VPN client on their computers. - ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • SSL VPN provides remote access for each radio mode are easily identified. 1-4 Introduction v1.0, October 2008...
SRXN3205 Reference Manual
Page 21
... as Windows, Macintosh, or Linux. The firewall includes the NETGEAR VPN Wizard to easily configure IPsec VPN tunnels according to the recommendations of ISP. ...1-5 v1.0, October 2008 The firewall supports the Simple Network Management Protocol (SNMP) to let you can install, configure, and operate the ProSafe Wireless-N VPN Firewall within minutes after connecting it to... other VPNC-compliant VPN firewalls and clients. • SNMP. The firewall's front panel LEDs provide an easy way to monitor its status and activity. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Easy ...
... as Windows, Macintosh, or Linux. The firewall includes the NETGEAR VPN Wizard to easily configure IPsec VPN tunnels according to the recommendations of ISP. ...1-5 v1.0, October 2008 The firewall supports the Simple Network Management Protocol (SNMP) to let you can install, configure, and operate the ProSafe Wireless-N VPN Firewall within minutes after connecting it to... other VPNC-compliant VPN firewalls and clients. • SNMP. The firewall's front panel LEDs provide an easy way to monitor its status and activity. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Easy ...
SRXN3205 Reference Manual
Page 22
... If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. ProSafe VPN Client Software - ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Package Contents The product package should contain the following items: • ProSafe Wireless-N VPN Firewall • Rubber feet (4) with adhesive backing • One AC-DC power...square) • One Straight through Category 5 (Cat5) Ethernet cable. • Installation Guide, SRXN3205 ProSafe Wireless-N VPN Firewall . • Resource CD, including: - one user license. • Warranty and Support Information Card.
... If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. ProSafe VPN Client Software - ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Package Contents The product package should contain the following items: • ProSafe Wireless-N VPN Firewall • Rubber feet (4) with adhesive backing • One AC-DC power...square) • One Straight through Category 5 (Cat5) Ethernet cable. • Installation Guide, SRXN3205 ProSafe Wireless-N VPN Firewall . • Resource CD, including: - one user license. • Warranty and Support Information Card.
SRXN3205 Reference Manual
Page 25
... Java is only required for configuring the firewall, SSL VPN users should choose a browser that supports JavaScript, Java, cookies, SSL, and ActiveX to take advantage of the full suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Wireless-N VPN Firewall, an administrator must use with JavaScript...
... Java is only required for configuring the firewall, SSL VPN users should choose a browser that supports JavaScript, Java, cookies, SSL, and ActiveX to take advantage of the full suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Wireless-N VPN Firewall, an administrator must use with JavaScript...
SRXN3205 Reference Manual
Page 30
The WAN tabs appear on screen with the WAN ISP Settings tab in view. a. Auto Detect will display the results:. Figure 2-4 2-4 v1.0, October 2008 Connecting to support. Figure 2-3 2. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 1. Click Auto Detect at the top of the menu will probe the WAN port for a range of the menu. If Auto Detect is successful, a status bar at the bottom of connection methods and suggest one that your ISP appears to the Internet (WAN) Select Network Configuration > WAN Settings from the menu/submenu.
The WAN tabs appear on screen with the WAN ISP Settings tab in view. a. Auto Detect will display the results:. Figure 2-4 2-4 v1.0, October 2008 Connecting to support. Figure 2-3 2. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 1. Click Auto Detect at the top of the menu will probe the WAN port for a range of the menu. If Auto Detect is successful, a status bar at the bottom of connection methods and suggest one that your ISP appears to the Internet (WAN) Select Network Configuration > WAN Settings from the menu/submenu.
SRXN3205 Reference Manual
Page 39
... MAC address of the computer you may need to change. Connecting to as the computer's MAC (Media Access Control) address. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 2. b. Router's MAC Address. The WAN Advanced Options tab is the default. The normal MTU (Maximum Transmit Unit) value for most cases,.... If you are sure your ISP connection. c. Click the Advanced link to manually type in the MAC address that your broadband modem supports, select it is also referred to the Internet (WAN) v1.0, October 2008 2-13 This is Use default address. In most Ethernet...
... MAC address of the computer you may need to change. Connecting to as the computer's MAC (Media Access Control) address. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 2. b. Router's MAC Address. The WAN Advanced Options tab is the default. The normal MTU (Maximum Transmit Unit) value for most cases,.... If you are sure your ISP connection. c. Click the Advanced link to manually type in the MAC address that your broadband modem supports, select it is also referred to the Internet (WAN) v1.0, October 2008 2-13 This is Use default address. In most Ethernet...
SRXN3205 Reference Manual
Page 46
Click the LAN Groups tab and the LAN Groups tab displays. For computers that do not support the NetBIOS protocol, this will be listed as "Unknown" (you will need to update this IP address will be assigned to a single group. The MAC ... table lists the entries in the LAN Groups Database. For DHCP clients of the computer. Enter the name of the PC's network interface. • Group. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 2. Each PC or device can edit the entry manually to the LAN Groups Database, follow these steps: 1. Allows modification of the PC or...
Click the LAN Groups tab and the LAN Groups tab displays. For computers that do not support the NetBIOS protocol, this will be listed as "Unknown" (you will need to update this IP address will be assigned to a single group. The MAC ... table lists the entries in the LAN Groups Database. For DHCP clients of the computer. Enter the name of the PC's network interface. • Group. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 2. Each PC or device can edit the entry manually to the LAN Groups Database, follow these steps: 1. Allows modification of the PC or...
SRXN3205 Reference Manual
Page 52
...packets from other routers. 4. The default section disables RIP versions. • RIP-1. The firewall accepts RIP information from other routers. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual The RIP Configuration menu displays. Figure 3-7 3. The firewall broadcasts its ...routers, but does not accept RIP information from the following options: • Disabled. A class-based routing that does not include subnet information. The choices are: • None. The firewall neither broadcasts its routing table. • Out Only. This is the most commonly supported...
...packets from other routers. 4. The default section disables RIP versions. • RIP-1. The firewall accepts RIP information from other routers. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual The RIP Configuration menu displays. Figure 3-7 3. The firewall broadcasts its ...routers, but does not accept RIP information from the following options: • Disabled. A class-based routing that does not include subnet information. The choices are: • None. The firewall neither broadcasts its routing table. • Out Only. This is the most commonly supported...
SRXN3205 Reference Manual
Page 53
... v1.0, October 2008 3-13 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • RIP-2. If you selected RIP-2B or RIP-2M, check the Yes feature, and input the First Key Parameters and Second Key Parameters, MD-5 keys to save your settings. This includes all the functionality of RIPv1 plus it supports subnet information. Though the data...
... v1.0, October 2008 3-13 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • RIP-2. If you selected RIP-2B or RIP-2M, check the Yes feature, and input the First Key Parameters and Second Key Parameters, MD-5 keys to save your settings. This includes all the functionality of RIPv1 plus it supports subnet information. Though the data...
SRXN3205 Reference Manual
Page 59
...and b, 11ng, or 11a]. 8. Completing Wireless Setup (No Security) The purpose of some products such as the wireless PC Client with Netgear Support. 7. This nullifies the wireless network "discovery" feature of setting your wireless settings in stages, without the security settings,...default (11ng) setting. Configuring 802.11b/g/n Wireless Settings To configure the 802.11 b/g/n wireless settings of the screen, Operation succeeded. 10. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 4. Note: If your VPN firewall: Wireless Configuration 4-5 v1.0, October 2008 If you ...
...and b, 11ng, or 11a]. 8. Completing Wireless Setup (No Security) The purpose of some products such as the wireless PC Client with Netgear Support. 7. This nullifies the wireless network "discovery" feature of setting your wireless settings in stages, without the security settings,...default (11ng) setting. Configuring 802.11b/g/n Wireless Settings To configure the 802.11 b/g/n wireless settings of the screen, Operation succeeded. 10. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 4. Note: If your VPN firewall: Wireless Configuration 4-5 v1.0, October 2008 If you ...
SRXN3205 Reference Manual
Page 60
... all devices in use on the NETGEAR website. Testing Wireless Connectivity (No Security) Follow the instructions below to 40 MHz. • 40 MHz - Once you have established wireless connectivity, you can support. Note: The Enable Wireless Access Point checkbox must be between ...Configure the Wireless LAN settings based on this mode also supports legacy 802.11b and 802.11g clients. This is 11ng. If this article and other articles of interest can connect to test wireless connectivity. The default is the static, legacy mode. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual...
... all devices in use on the NETGEAR website. Testing Wireless Connectivity (No Security) Follow the instructions below to 40 MHz. • 40 MHz - Once you have established wireless connectivity, you can support. Note: The Enable Wireless Access Point checkbox must be between ...Configure the Wireless LAN settings based on this mode also supports legacy 802.11b and 802.11g clients. This is 11ng. If this article and other articles of interest can connect to test wireless connectivity. The default is the static, legacy mode. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual...
SRXN3205 Reference Manual
Page 66
.... Consult the product document for WPA are made active on the right. 4. Click Apply to save your wireless adapter and WPA2 client software for your settings. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Configuring WPA-PSK Not all wireless adapters support WPA2. In the PSK Settings section, enter text in the Passphrase text box (Network Key) with 8-63...
.... Consult the product document for WPA are made active on the right. 4. Click Apply to save your wireless adapter and WPA2 client software for your settings. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Configuring WPA-PSK Not all wireless adapters support WPA2. In the PSK Settings section, enter text in the Passphrase text box (Network Key) with 8-63...
SRXN3205 Reference Manual
Page 67
... Apply to enable WPA data encryption. Nevertheless, the wireless adapter hardware and driver must also support WPA. • Service Pack 3 does not include the client software that supports WPA. Wireless Configuration v1.0, October 2008 4-13 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Configuring WPA-PSK and WPA2-PSK Not all wireless adapters support WPA. Click on the TKIP + AES radio button...
... Apply to enable WPA data encryption. Nevertheless, the wireless adapter hardware and driver must also support WPA. • Service Pack 3 does not include the client software that supports WPA. Wireless Configuration v1.0, October 2008 4-13 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Configuring WPA-PSK and WPA2-PSK Not all wireless adapters support WPA. Click on the TKIP + AES radio button...
SRXN3205 Reference Manual
Page 68
... with drop-down menu on the right. The - Furthermore, client software is shared between the VPN firewall and the RADIUS Server while authenticating the supplicant (wireless client). 5. IP Address. RADIUS Port. This is required on the client. Click the WPA2 ...all wireless adapters support WPA2. Enter the RADIUS Server Settings: 4-14 v1.0, October 2008 Wireless Configuration PSK is the default WPA and the RADIUS Server Settings are made active on screen, while the other options and features remain grayed out. 2. ProSafe Wireless-N VPN Firewall SRXN3205 ...
... with drop-down menu on the right. The - Furthermore, client software is shared between the VPN firewall and the RADIUS Server while authenticating the supplicant (wireless client). 5. IP Address. RADIUS Port. This is required on the client. Click the WPA2 ...all wireless adapters support WPA2. Enter the RADIUS Server Settings: 4-14 v1.0, October 2008 Wireless Configuration PSK is the default WPA and the RADIUS Server Settings are made active on screen, while the other options and features remain grayed out. 2. ProSafe Wireless-N VPN Firewall SRXN3205 ...
SRXN3205 Reference Manual
Page 69
.... Select RADIUS from the WPA with RADIUS Not all wireless adapters support WPA and WPA2. The default is shared between the VPN firewall and the RADIUS Server while authenticating the supplicant (wireless client). 5. TKIP+AES is 1812. - The Wireless Configuration v1.0, October 2008 4-15 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • The Server Name, IP Address, RADIUS Port (number), and...
.... Select RADIUS from the WPA with RADIUS Not all wireless adapters support WPA and WPA2. The default is shared between the VPN firewall and the RADIUS Server while authenticating the supplicant (wireless client). 5. TKIP+AES is 1812. - The Wireless Configuration v1.0, October 2008 4-15 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • The Server Name, IP Address, RADIUS Port (number), and...