SRXN3205 Reference Manual
Page 8
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Configuring the WAN Mode 2-10 Configuring Dynamic DNS 2-11 Configuring the Advanced WAN Options (Optional 2-12 Additional WAN Related Configuration 2-14 Chapter 3 LAN Configuration Configuring the LAN Setup Options 3-1 Using the VPN Firewall as a DHCP Server 3-3 Configuring DHCP Address Reservation 3-4 Managing Groups and Hosts (LAN Groups 3-4 Viewing the LAN Groups Database 3-5 Adding...
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Configuring the WAN Mode 2-10 Configuring Dynamic DNS 2-11 Configuring the Advanced WAN Options (Optional 2-12 Additional WAN Related Configuration 2-14 Chapter 3 LAN Configuration Configuring the LAN Setup Options 3-1 Using the VPN Firewall as a DHCP Server 3-3 Configuring DHCP Address Reservation 3-4 Managing Groups and Hosts (LAN Groups 3-4 Viewing the LAN Groups Database 3-5 Adding...
SRXN3205 Reference Manual
Page 18
...then configure itself to your PCs. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Advanced IPsec and SSL VPN support • Advanced stateful packet inspection (SPI) firewall with multi-NAT support • Easy, web-based setup for installation and management • ...attacks. Autosensing Ethernet Connections with Content Filtering Unlike simple Internet sharing NAT routers, the SRXN3205 is a true firewall, using stateful packet inspection (SPI) to a switch or hub. The SRXN3205 incorporates Auto UplinkTM technology. That port will accommodate either a 10 ...
...then configure itself to your PCs. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Advanced IPsec and SSL VPN support • Advanced stateful packet inspection (SPI) firewall with multi-NAT support • Easy, web-based setup for installation and management • ...attacks. Autosensing Ethernet Connections with Content Filtering Unlike simple Internet sharing NAT routers, the SRXN3205 is a true firewall, using stateful packet inspection (SPI) to a switch or hub. The SRXN3205 incorporates Auto UplinkTM technology. That port will accommodate either a 10 ...
SRXN3205 Reference Manual
Page 19
... 1-3 v1.0, October 2008 Remote access by DHCP. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Extensive Protocol Support The firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). This feature greatly simplifies configuration of (Wired & Wireless) PCs by telecommuters requires the installation of the NETGEAR ProSafe VPN Client software (VPN01L) - When DHCP is not to...
... 1-3 v1.0, October 2008 Remote access by DHCP. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Extensive Protocol Support The firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). This feature greatly simplifies configuration of (Wired & Wireless) PCs by telecommuters requires the installation of the NETGEAR ProSafe VPN Client software (VPN01L) - When DHCP is not to...
SRXN3205 Reference Manual
Page 21
...SRXN3205, ensure your system meets the following features simplify installation and management tasks: • Browser-Based Management. A user-friendly Setup Wizard is provided and online help documentation is built into the browser-based Web Management Interface. • Auto Detection of ISP. Browser-based configuration allows you can install, configure, and operate the ProSafe Wireless-N VPN Firewall... The firewall's front panel LEDs provide an easy way to monitor its status and activity. The firewall includes the NETGEAR VPN Wizard to easily configure IPsec VPN tunnels ...
...SRXN3205, ensure your system meets the following features simplify installation and management tasks: • Browser-Based Management. A user-friendly Setup Wizard is provided and online help documentation is built into the browser-based Web Management Interface. • Auto Detection of ISP. Browser-based configuration allows you can install, configure, and operate the ProSafe Wireless-N VPN Firewall... The firewall's front panel LEDs provide an easy way to monitor its status and activity. The firewall includes the NETGEAR VPN Wizard to easily configure IPsec VPN tunnels ...
SRXN3205 Reference Manual
Page 35
... options. If a successful connection is made, NETGEAR's Web site appears. Enter the mask provided by the ISP or your network administrator. • Gateway IP Address. The text fields will attempt to connect to additional setup and management tasks. When you in the fields. 12. The firewall will be inactivated. Enter the IP address... ISP will automatically assign an IP address to evaluate your ISP has not assigned any changes and revert to the Internet (WAN) 2-9 v1.0, October 2008 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Subnet Mask. Click Test to the...
... options. If a successful connection is made, NETGEAR's Web site appears. Enter the mask provided by the ISP or your network administrator. • Gateway IP Address. The text fields will attempt to connect to additional setup and management tasks. When you in the fields. 12. The firewall will be inactivated. Enter the IP address... ISP will automatically assign an IP address to evaluate your ISP has not assigned any changes and revert to the Internet (WAN) 2-9 v1.0, October 2008 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Subnet Mask. Click Test to the...
SRXN3205 Reference Manual
Page 37
... to its domain, and restores DNS requests for a commercial DDNS service, which allows you must setup an account with a DDNS provider such. The firewall firmware includes software that notifies dynamic DNS servers of changes in advance what your IP address will ...configuration screen. Links to the Internet (WAN) v1.0, October 2008 2-11 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Configuring Dynamic DNS Note: Dynamic DNS enables you to employ some VPN configurations that allows routers with varying public IP addresses to be located using an FQDN instead of whether...
... to its domain, and restores DNS requests for a commercial DDNS service, which allows you must setup an account with a DDNS provider such. The firewall firmware includes software that notifies dynamic DNS servers of changes in advance what your IP address will ...configuration screen. Links to the Internet (WAN) v1.0, October 2008 2-11 ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Configuring Dynamic DNS Note: Dynamic DNS enables you to employ some VPN configurations that allows routers with varying public IP addresses to be located using an FQDN instead of whether...
SRXN3205 Reference Manual
Page 41
... tab. To modify your ProSafe Wireless-N VPN Firewall. LAN Configuration 3-1 v1.0, October 2008 The default values are suitable for most users and situations. Select Network Configuration > LAN Settings from the main/sub-menu. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 3 LAN Configuration This chapter describes how to configure a secondary or "multi-home" LAN IP setup on page 3-11 Configuring...
... tab. To modify your ProSafe Wireless-N VPN Firewall. LAN Configuration 3-1 v1.0, October 2008 The default values are suitable for most users and situations. Select Network Configuration > LAN Settings from the main/sub-menu. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 3 LAN Configuration This chapter describes how to configure a secondary or "multi-home" LAN IP setup on page 3-11 Configuring...
SRXN3205 Reference Manual
Page 42
... all devices, click Disable DHCP Server. Your firewall will manually configure all the computers connected to the Web Configuration Manager. • IP Subnet Mask. The LAN address of an IP address. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual . You must now enter https...://10.0.0.1 in again. In the DHCP section, leave the DNCP enabled, or select Disable DHCP Server. • The firewall will be disconnected. Figure 3-1 2. In the LAN TCP/IP Setup section, ...
... all devices, click Disable DHCP Server. Your firewall will manually configure all the computers connected to the Web Configuration Manager. • IP Subnet Mask. The LAN address of an IP address. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual . You must now enter https...://10.0.0.1 in again. In the DHCP section, leave the DNCP enabled, or select Disable DHCP Server. • The firewall will be disconnected. Figure 3-1 2. In the LAN TCP/IP Setup section, ...
SRXN3205 Reference Manual
Page 43
...be leased to save your network. • Lease Time. Specifies the last of the firewall. Using the VPN Firewall as a DHCP Server By default, the firewall will provide the ISP's DNS server IP addresses. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Starting IP Address. When DNS proxy is unchecked, the DHCP ... in the LAN TCP/IP Setup section). • Primary DNS Server. (Optional) If an IP address is the LAN address of the contiguous addresses in the IP address pool. If no address is specified, the firewall will provide the SRXN3205 LAN IP address as the ...
...be leased to save your network. • Lease Time. Specifies the last of the firewall. Using the VPN Firewall as a DHCP Server By default, the firewall will provide the ISP's DNS server IP addresses. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Starting IP Address. When DNS proxy is unchecked, the DHCP ... in the LAN TCP/IP Setup section). • Primary DNS Server. (Optional) If an IP address is the LAN address of the contiguous addresses in the IP address pool. If no address is specified, the firewall will provide the SRXN3205 LAN IP address as the ...
SRXN3205 Reference Manual
Page 44
...enter the device in this , leaving the DHCP server feature (LAN Setup tab) enabled is enabled, and will accept and respond to the attached PCs from PCs and other means. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual addresses will be assigned until the next time the PC ...contacts the firewall's DHCP server. Note: The reserved address will manually configure the network settings of ...
...enter the device in this , leaving the DHCP server feature (LAN Setup tab) enabled is enabled, and will accept and respond to the attached PCs from PCs and other means. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual addresses will be assigned until the next time the PC ...contacts the firewall's DHCP server. Note: The reserved address will manually configure the network settings of ...
SRXN3205 Reference Manual
Page 45
...active devices that PC. • Group and individual control over PCs. Because the MAC address is used to that PC. The LAN Setup tab displays. Because the address allocated by you do not need to ensure it always has the same IP address. • MAC level...a PC in the database as Unknown. • Manual Entry. Instead, you don't need to Block or Allow Traffic" on page 5-20). ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Scanning the Network. However, sometimes the name of the LAN Groups Database are not DHCP clients. All IP address assignments made...
...active devices that PC. • Group and individual control over PCs. Because the MAC address is used to that PC. The LAN Setup tab displays. Because the address allocated by you do not need to ensure it always has the same IP address. • MAC level...a PC in the database as Unknown. • Manual Entry. Instead, you don't need to Block or Allow Traffic" on page 5-20). ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual • Scanning the Network. However, sometimes the name of the LAN Groups Database are not DHCP clients. All IP address assignments made...
SRXN3205 Reference Manual
Page 48
...to save each field change a name in the field. 4. Select Network Configuration > LAN Setup from the main/sub-menu. 3-8 LAN Configuration v1.0, October 2008 Click Apply to the Internet through the firewall. To add a secondary LAN IP address, follow these steps: 1. Type a new ...that name active for example, 172.16.2.0 or 10.0.0.0), you change . Select and edit other group names if desired. 6. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Figure 3-3 2. Select the radio button next to any group name to additional logical subnets on your LAN. Configuring ...
...to save each field change a name in the field. 4. Select Network Configuration > LAN Setup from the main/sub-menu. 3-8 LAN Configuration v1.0, October 2008 Click Apply to the Internet through the firewall. To add a secondary LAN IP address, follow these steps: 1. Type a new ...that name active for example, 172.16.2.0 or 10.0.0.0), you change . Select and edit other group names if desired. 6. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Figure 3-3 2. Select the radio button next to any group name to additional logical subnets on your LAN. Configuring ...
SRXN3205 Reference Manual
Page 55
....11a/n wireless adapters. • A location for wireless connectivity to your LAN. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 4 Wireless Configuration This chapter describes how to set up your ProSafe Wireless-N VPN Firewall SRXN3205 for the SRXN3205 that conforms to the "Wireless Equipment Placement and Range Guidelines". The firewall provides highly effective security features which are covered in detail in "SSID and WEP/WPA Settings Setup Form...
....11a/n wireless adapters. • A location for wireless connectivity to your LAN. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 4 Wireless Configuration This chapter describes how to set up your ProSafe Wireless-N VPN Firewall SRXN3205 for the SRXN3205 that conforms to the "Wireless Equipment Placement and Range Guidelines". The firewall provides highly effective security features which are covered in detail in "SSID and WEP/WPA Settings Setup Form...
SRXN3205 Reference Manual
Page 58
Use this screen to the SRXN3205. 2. Click Enable Wireless Access Point on the right side of the main menu. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Basic Wireless Setup (No Security) Test wireless connectivity in your wireless connectivity requirements. To configure the SRXN3205 for basic Wireless access, follow these simple steps: 1. The default Wireless Settings screen displays as shown below. Log in the Network Configuration...
Use this screen to the SRXN3205. 2. Click Enable Wireless Access Point on the right side of the main menu. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Basic Wireless Setup (No Security) Test wireless connectivity in your wireless connectivity requirements. To configure the SRXN3205 for basic Wireless access, follow these simple steps: 1. The default Wireless Settings screen displays as shown below. Log in the Network Configuration...
SRXN3205 Reference Manual
Page 59
... up your security settings are 802.11[a only, b only, g only, g and b, 11ng, or 11a]. 8. Completing Wireless Setup (No Security) The purpose of some products such as the wireless PC Client with Netgear Support. 7. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 4. This nullifies the wireless network "discovery" feature of setting your country or region is enabled. 5. The default is not listed...
... up your security settings are 802.11[a only, b only, g only, g and b, 11ng, or 11a]. 8. Completing Wireless Setup (No Security) The purpose of some products such as the wireless PC Client with Netgear Support. 7. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 4. This nullifies the wireless network "discovery" feature of setting your country or region is enabled. 5. The default is not listed...
SRXN3205 Reference Manual
Page 62
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Wireless Security Types and Settings Configure the Wireless Security Types based on the level of security you need using one of the following methods and print out the form provided to aid you in making your selections: • Print out the "SSID and WEP/WPA Settings Setup Form" on page 4-9 • To...
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Wireless Security Types and Settings Configure the Wireless Security Types based on the level of security you need using one of the following methods and print out the form provided to aid you in making your selections: • Print out the "SSID and WEP/WPA Settings Setup Form" on page 4-9 • To...
SRXN3205 Reference Manual
Page 63
...VPN firewall is the default SRXN3205 SSID. Write your customized SSID on the line below Note: The SSID in the same positions as the first step. • SSID: The Service Set Identification (SSID) requires the identity or name of the wireless local area network. All wireless nodes in the wireless adapter card. NETGEAR... Size chosen.) Key 1 Key 2 Key 3 Key 4 WPA-PSK (Preshared Key) Record the WPA-PSK key. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual SSID and WEP/WPA Settings Setup Form 802.11b/g/n Configuration For a new wireless network, print or copy this information.
...VPN firewall is the default SRXN3205 SSID. Write your customized SSID on the line below Note: The SSID in the same positions as the first step. • SSID: The Service Set Identification (SSID) requires the identity or name of the wireless local area network. All wireless nodes in the wireless adapter card. NETGEAR... Size chosen.) Key 1 Key 2 Key 3 Key 4 WPA-PSK (Preshared Key) Record the WPA-PSK key. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual SSID and WEP/WPA Settings Setup Form 802.11b/g/n Configuration For a new wireless network, print or copy this information.
SRXN3205 Reference Manual
Page 72
... Setup Access List to the right of security. With the CSMA/CA transmission mechanism, the transmitting station sends out an RTS packet to the receiving station, and waits for the receiving station to send back a CTS (Clear to make any specified stations through the firewall. Packets larger than the RTS Threshold value. ProSafe Wireless-N VPN Firewall SRXN3205...
... Setup Access List to the right of security. With the CSMA/CA transmission mechanism, the transmitting station sends out an RTS packet to the receiving station, and waits for the receiving station to send back a CTS (Clear to make any specified stations through the firewall. Packets larger than the RTS Threshold value. ProSafe Wireless-N VPN Firewall SRXN3205...
SRXN3205 Reference Manual
Page 96
.../MAC Bind Rule: the following setup: Host1 -- Click the Yes radio button to the entry. MAC Addresses: Displays the MAC Addresses for this rule. - To edit an entry, click Edit adjacent to enable Source MAC Filtering. Log Dropped Packets: Specify Logging option for this rule. The router will be modified: - Name: ... MAC address in IP/MAC Binding table. Matching IP & MAC address in IP/MAC Table. Example: If three computers are added in IP/MAC Table. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 3. IP/MAC Bind Table lists the currently defined IP/MAC Bind rules: -
.../MAC Bind Rule: the following setup: Host1 -- Click the Yes radio button to the entry. MAC Addresses: Displays the MAC Addresses for this rule. - To edit an entry, click Edit adjacent to enable Source MAC Filtering. Log Dropped Packets: Specify Logging option for this rule. The router will be modified: - Name: ... MAC address in IP/MAC Binding table. Matching IP & MAC address in IP/MAC Table. Example: If three computers are added in IP/MAC Table. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual 3. IP/MAC Bind Table lists the currently defined IP/MAC Bind rules: -
SRXN3205 Reference Manual
Page 103
...NETGEAR VPN Client configuration procedures for the network connection: Security Association, traffic selectors, authentication algorithm, and encryption. The VPN Wizard efficiently guides you through the setup procedure with the Wizard" • "Viewing or Modifying IKE and VPN Policy Settings" • "Managing VPN... task. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 6 Virtual Private Networking Using IPsec This chapter describes how to use the IPsec virtual private networking (VPN) features of the ProSafe Wireless-N VPN Firewall to configure a VPN tunnel between...
...NETGEAR VPN Client configuration procedures for the network connection: Security Association, traffic selectors, authentication algorithm, and encryption. The VPN Wizard efficiently guides you through the setup procedure with the Wizard" • "Viewing or Modifying IKE and VPN Policy Settings" • "Managing VPN... task. ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Chapter 6 Virtual Private Networking Using IPsec This chapter describes how to use the IPsec virtual private networking (VPN) features of the ProSafe Wireless-N VPN Firewall to configure a VPN tunnel between...