January 2005202-10059-02 Version 3January 2005NETGEAR, Inc.4500 Great America Parkway Santa Clara, CA 95054 USAReference Manual for the ProSafe VPN Fi
January 2005x ContentsVPNC IKE Phase II Parameters ... C-11Testing and Troubl
Reference Manual for the ProSafe VPN Firewall FVS318v36-12 Advanced Virtual Private NetworkingJanuary 2005Authentication Algorithm If you enable AH, t
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-13January 2005Using Digital Certificates for IKE Auto-Poli
Reference Manual for the ProSafe VPN Firewall FVS318v36-14 Advanced Virtual Private NetworkingJanuary 2005Each CA has its own certificate. The certifi
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-15January 2005The PC must have the NETGEAR ProSafe VPN Cli
Reference Manual for the ProSafe VPN Firewall FVS318v36-16 Advanced Virtual Private NetworkingJanuary 2005The IKE Phase 2 parameters used in Scenario
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-17January 2005Figure 6-7: FVS318v3 Internet IP Address men
Reference Manual for the ProSafe VPN Firewall FVS318v36-18 Advanced Virtual Private NetworkingJanuary 2005c.From the main menu Advanced section, click
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-19January 20053. Set up the IKE Policy illustrated below o
Reference Manual for the ProSafe VPN Firewall FVS318v36-20 Advanced Virtual Private NetworkingJanuary 20054. Set up the FVS318v3 VPN -Auto Policy illu
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-21January 2005How to Check VPN ConnectionsYou can test con
Contents xiJanuary 2005Configuring the VPN Tunnel ... E-6Viewing and
Reference Manual for the ProSafe VPN Firewall FVS318v36-22 Advanced Virtual Private NetworkingJanuary 2005FVS318v3 Scenario 2: FVS318v3 to FVS318v3 wi
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-23January 2005b.Click the Generate Request button to displ
Reference Manual for the ProSafe VPN Firewall FVS318v36-24 Advanced Virtual Private NetworkingJanuary 2005– Domain Name. If you have a domain name, yo
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-25January 2005c.When you have finished gathering the Self
Reference Manual for the ProSafe VPN Firewall FVS318v36-26 Advanced Virtual Private NetworkingJanuary 2005f.You will now see the “FVS318v3” entry in t
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-27January 2005b.Create a new VPN Auto Policy called scenar
Reference Manual for the ProSafe VPN Firewall FVS318v36-28 Advanced Virtual Private NetworkingJanuary 2005
Maintenance 7-1January 2005Chapter 7 MaintenanceThis chapter describes how to use the maintenance features of your FVS318v3 ProSafe VPN Firewall. Thes
Reference Manual for the ProSafe VPN Firewall FVS318v37-2 MaintenanceJanuary 2005This screen shows the following parameters:Table 7-1. FVS318v3 Status
Reference Manual for the ProSafe VPN Firewall FVS318v3Maintenance 7-3January 2005Click Show WAN Status to display the WAN connection status.Figure 7-2
January 2005xii Contents
Reference Manual for the ProSafe VPN Firewall FVS318v37-4 MaintenanceJanuary 2005Click Show Statistics to display firewall usage statistics.Figure 7-3
Reference Manual for the ProSafe VPN Firewall FVS318v3Maintenance 7-5January 2005WAN Status action buttons are described in the table below:Viewing a
Reference Manual for the ProSafe VPN Firewall FVS318v37-6 MaintenanceJanuary 2005The routing software of the FVS318v3 VPN Firewall is stored in FLASH
Reference Manual for the ProSafe VPN Firewall FVS318v3Maintenance 7-7January 2005Configuration File ManagementThe configuration settings of the FVS318
Reference Manual for the ProSafe VPN Firewall FVS318v37-8 MaintenanceJanuary 2005Erasing the ConfigurationIt is sometimes desirable to restore the fir
Advanced Configuration 8-1January 2005Chapter 8 Advanced ConfigurationThis chapter describes how to configure the advanced features of your FVS318v3 P
Reference Manual for the ProSafe VPN Firewall FVS318v38-2 Advanced ConfigurationJanuary 20057.Type the password (or key) for your dynamic DNS account.
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Configuration 8-3January 2005Configuring LAN TCP/IP Setup ParametersThe firewall is shi
Reference Manual for the ProSafe VPN Firewall FVS318v38-4 Advanced ConfigurationJanuary 2005Using the Firewall as a DHCP serverBy default, the firewal
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Configuration 8-5January 2005Using Address ReservationWhen you specify a reserved IP ad
About This Manual 1-1January 2005Chapter 1 About This ManualThis chapter describes the intended audience, scope, conventions, and formats of this manu
Reference Manual for the ProSafe VPN Firewall FVS318v38-6 Advanced ConfigurationJanuary 2005Figure 8-2: Static Routes tableTo add or edit a Static Ro
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Configuration 8-7January 20058.Type a number between 1 and 15 as the Metric value. Thi
Reference Manual for the ProSafe VPN Firewall FVS318v38-8 Advanced ConfigurationJanuary 2005To configure your firewall for Remote Management:1. Select
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Configuration 8-9January 2005Tip: If you are using a dynamic DNS service such as TZO, y
Reference Manual for the ProSafe VPN Firewall FVS318v38-10 Advanced ConfigurationJanuary 2005
Troubleshooting 9-1January 2005Chapter 9TroubleshootingThis chapter gives information about troubleshooting your FVS318v3 ProSafe VPN Firewall. After
Reference Manual for the ProSafe VPN Firewall FVS318v39-2 TroubleshootingJanuary 2005LEDs Never Turn Off When the firewall is turned on, the LEDs turn
Reference Manual for the ProSafe VPN Firewall FVS318v3Troubleshooting 9-3January 2005Troubleshooting the Web Configuration InterfaceIf you are unable
Reference Manual for the ProSafe VPN Firewall FVS318v39-4 TroubleshootingJanuary 2005Troubleshooting the ISP ConnectionIf your firewall is unable to a
Reference Manual for the ProSafe VPN Firewall FVS318v3Troubleshooting 9-5January 2005ORConfigure your firewall to spoof your PC’s MAC address. This ca
Reference Manual for the ProSafe VPN Firewall FVS318v31-2 About This ManualJanuary 2005How to Use This ManualThe HTML version of this manual includes
Reference Manual for the ProSafe VPN Firewall FVS318v39-6 TroubleshootingJanuary 2005If the path is working, you see this message:Reply from < IP a
Reference Manual for the ProSafe VPN Firewall FVS318v3Troubleshooting 9-7January 2005— If your ISP assigned a host name to your PC, enter that host na
Reference Manual for the ProSafe VPN Firewall FVS318v39-8 TroubleshootingJanuary 2005
Technical Specifications A-1January 2005Appendix ATechnical SpecificationsThis appendix provides technical specifications for the FVS318v3 ProSafe VPN
Reference Manual for the ProSafe VPN Firewall FVS318v3A-2 Technical SpecificationsJanuary 2005Electromagnetic EmissionsMeets requirements of: FCC Part
Network, Routing, and Firewall Basics B-1January 2005Appendix BNetwork, Routing, and Firewall BasicsThis chapter provides an overview of IP networks,
Reference Manual for the ProSafe VPN Firewall FVS318v3B-2 Network, Routing, and Firewall BasicsJanuary 2005What is a Router?A router is a device that
Reference Manual for the ProSafe VPN Firewall FVS318v3Network, Routing, and Firewall Basics B-3January 2005The latter version is easier to remember an
Reference Manual for the ProSafe VPN Firewall FVS318v3B-4 Network, Routing, and Firewall BasicsJanuary 2005• Class C Class C addresses can have 254 ho
Reference Manual for the ProSafe VPN Firewall FVS318v3Network, Routing, and Firewall Basics B-5January 2005As a shorter alternative to dotted-decimal
Reference Manual for the ProSafe VPN Firewall FVS318v3About This Manual 1-3January 2005How to Print this ManualTo print this manual you can choose one
Reference Manual for the ProSafe VPN Firewall FVS318v3B-6 Network, Routing, and Firewall BasicsJanuary 2005Although the preceding example uses the ent
Reference Manual for the ProSafe VPN Firewall FVS318v3Network, Routing, and Firewall Basics B-7January 2005Configure all hosts on a LAN segment to use
Reference Manual for the ProSafe VPN Firewall FVS318v3B-8 Network, Routing, and Firewall BasicsJanuary 2005Single IP Address Operation Using NATIn the
Reference Manual for the ProSafe VPN Firewall FVS318v3Network, Routing, and Firewall Basics B-9January 2005MAC Addresses and Address Resolution Protoc
Reference Manual for the ProSafe VPN Firewall FVS318v3B-10 Network, Routing, and Firewall BasicsJanuary 2005When a PC accesses a resource by its descr
Reference Manual for the ProSafe VPN Firewall FVS318v3Network, Routing, and Firewall Basics B-11January 2005What is a Firewall?A firewall is a device
Reference Manual for the ProSafe VPN Firewall FVS318v3B-12 Network, Routing, and Firewall BasicsJanuary 2005Category 5 Cable QualityCategory 5 distrib
Reference Manual for the ProSafe VPN Firewall FVS318v3Network, Routing, and Firewall Basics B-13January 2005Inside Twisted Pair CablesFor two devices
Reference Manual for the ProSafe VPN Firewall FVS318v3B-14 Network, Routing, and Firewall BasicsJanuary 2005Figure B-6: Category 5 UTP cable with mal
Reference Manual for the ProSafe VPN Firewall FVS318v3Network, Routing, and Firewall Basics B-15January 2005The FVS318v3 VPN Firewall incorporates Aut
Reference Manual for the ProSafe VPN Firewall FVS318v31-4 About This ManualJanuary 2005
Reference Manual for the ProSafe VPN Firewall FVS318v3B-16 Network, Routing, and Firewall BasicsJanuary 2005
Virtual Private Networking C-1January 2005Appendix CVirtual Private NetworkingThere have been many improvements in the Internet including Quality of S
Reference Manual for the ProSafe VPN Firewall FVS318v3C-2 Virtual Private NetworkingJanuary 2005• Remote Access: Remote access enables telecommuters a
Reference Manual for the ProSafe VPN Firewall FVS318v3Virtual Private Networking C-3January 2005• Encapsulating Security Payload (ESP): Provides confi
Reference Manual for the ProSafe VPN Firewall FVS318v3C-4 Virtual Private NetworkingJanuary 2005The ESP header is inserted into the packet between the
Reference Manual for the ProSafe VPN Firewall FVS318v3Virtual Private Networking C-5January 2005ModeSAs operate using modes. A mode is the method in w
Reference Manual for the ProSafe VPN Firewall FVS318v3C-6 Virtual Private NetworkingJanuary 2005Key ManagementIPSec uses the Internet Key Exchange (IK
Reference Manual for the ProSafe VPN Firewall FVS318v3Virtual Private Networking C-7January 2005VPN Process OverviewEven though IPSec is standards-bas
Reference Manual for the ProSafe VPN Firewall FVS318v3C-8 Virtual Private NetworkingJanuary 2005You need to know the subnet mask of both gateway LAN C
Reference Manual for the ProSafe VPN Firewall FVS318v3Virtual Private Networking C-9January 2005Figure C-5: VPN tunnel Security Associaton (SA)The SA
Introduction 2-1January 2005Chapter 2 IntroductionThis chapter describes the features of the NETGEAR FVS318v3 ProSafe VPN Firewall.Key Features of the
Reference Manual for the ProSafe VPN Firewall FVS318v3C-10 Virtual Private NetworkingJanuary 20052. IKE Phase I. a. The two parties negotiate the encr
Reference Manual for the ProSafe VPN Firewall FVS318v3Virtual Private Networking C-11January 2005VPNC IKE Phase II ParametersThe IKE Phase 2 parameter
Reference Manual for the ProSafe VPN Firewall FVS318v3C-12 Virtual Private NetworkingJanuary 2005Relevant RFCs listed numerically:• [RFC 791] Internet
Preparing Your Network D-1January 2005Appendix DPreparing Your NetworkThis appendix describes how to prepare your network to connect to the Internet t
Reference Manual for the ProSafe VPN Firewall FVS318v3D-2 Preparing Your NetworkJanuary 2005In your IP network, each PC and the firewall must be assig
Reference Manual for the ProSafe VPN Firewall FVS318v3Preparing Your Network D-3January 2005You must have an Ethernet adapter, the TCP/IP protocol, an
Reference Manual for the ProSafe VPN Firewall FVS318v3D-4 Preparing Your NetworkJanuary 2005If you need Client for Microsoft Networks:a. Click the Add
Reference Manual for the ProSafe VPN Firewall FVS318v3Preparing Your Network D-5January 2005Verify the following settings as shown: • Client for Micro
Reference Manual for the ProSafe VPN Firewall FVS318v3D-6 Preparing Your NetworkJanuary 2005Selecting Windows’ Internet Access Method1. On the Windows
Reference Manual for the ProSafe VPN Firewall FVS318v3Preparing Your Network D-7January 20051. On the Windows taskbar, click the Start button, and the
Reference Manual for the ProSafe VPN Firewall FVS318v32-2 IntroductionJanuary 2005A Powerful, True Firewall with Content FilteringUnlike simple Intern
Reference Manual for the ProSafe VPN Firewall FVS318v3D-8 Preparing Your NetworkJanuary 20058. Then, restart your PC.Enabling DHCP to Automatically Co
Reference Manual for the ProSafe VPN Firewall FVS318v3Preparing Your Network D-9January 2005• Now you should be at the Local Area Network Connection S
Reference Manual for the ProSafe VPN Firewall FVS318v3D-10 Preparing Your NetworkJanuary 2005DHCP Configuration of TCP/IP in Windows 2000 Once again,
Reference Manual for the ProSafe VPN Firewall FVS318v3Preparing Your Network D-11January 2005• Click on the My Network Places icon on the Windows desk
Reference Manual for the ProSafe VPN Firewall FVS318v3D-12 Preparing Your NetworkJanuary 2005• With Internet Protocol (TCP/IP) selected, click on Prop
Reference Manual for the ProSafe VPN Firewall FVS318v3Preparing Your Network D-13January 2005DHCP Configuration of TCP/IP in Windows NT4Once you have
Reference Manual for the ProSafe VPN Firewall FVS318v3D-14 Preparing Your NetworkJanuary 2005• Highlight the TCP/IP Protocol in the Network Protocols
Reference Manual for the ProSafe VPN Firewall FVS318v3Preparing Your Network D-15January 2005Verifying TCP/IP Properties for Windows XP, 2000, and NT4
Reference Manual for the ProSafe VPN Firewall FVS318v3D-16 Preparing Your NetworkJanuary 2005• The default gateway is 192.168.0.14. Type exit Configur
Reference Manual for the ProSafe VPN Firewall FVS318v3Preparing Your Network D-17January 20052. If not already selected, select Built-in Ethernet in t
Reference Manual for the ProSafe VPN Firewall FVS318v3Introduction 2-3January 2005Autosensing Ethernet Connections with Auto UplinkWith its internal e
Reference Manual for the ProSafe VPN Firewall FVS318v3D-18 Preparing Your NetworkJanuary 2005Verifying the Readiness of Your Internet AccountFor broad
Reference Manual for the ProSafe VPN Firewall FVS318v3Preparing Your Network D-19January 2005• An IP address and subnet mask• A gateway IP address, wh
Reference Manual for the ProSafe VPN Firewall FVS318v3D-20 Preparing Your NetworkJanuary 2005If an IP address appears under Installed Gateways, write
Reference Manual for the ProSafe VPN Firewall FVS318v3Preparing Your Network D-21January 2005Restarting the NetworkOnce you’ve set up your computers t
Reference Manual for the ProSafe VPN Firewall FVS318v3D-22 Preparing Your NetworkJanuary 2005
VPN Configuration of NETGEAR FVS318v3 E-1January 2005Appendix EVPN Configuration of NETGEAR FVS318v3This is a case study on how to configure a secure
Reference Manual for the ProSafe VPN Firewall FVS318v3E-2 VPN Configuration of NETGEAR FVS318v3January 2005Figure E-1: Addressing and subnets used fo
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-3January 2005Figure E-2: NETGEAR’s VPN Wizard for the r
Reference Manual for the ProSafe VPN Firewall FVS318v3E-4 VPN Configuration of NETGEAR FVS318v3January 2005Figure E-3: NETGEAR’s VPN Wizard for the r
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-5January 2005Activating the VPN TunnelYou can activate t
iiJanuary 2005© 2005 by NETGEAR, Inc. All rights reserved.TrademarksNETGEAR is a trademark of Netgear, Inc. Microsoft, Windows, and Windows NT are reg
Reference Manual for the ProSafe VPN Firewall FVS318v32-4 IntroductionJanuary 2005Easy Installation and ManagementYou can install, configure, and oper
Reference Manual for the ProSafe VPN Firewall FVS318v3E-6 VPN Configuration of NETGEAR FVS318v3January 2005The FVS318v3-to-FVS318v3 Case Configuring t
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-7January 20052. Use the VPN Wizard to configure the FVS3
Reference Manual for the ProSafe VPN Firewall FVS318v3E-8 VPN Configuration of NETGEAR FVS318v3January 2005• Remote LAN IP Subnet– IP Address: 10.5.6.
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-9January 2005Viewing and Editing the VPN ParametersThe V
Reference Manual for the ProSafe VPN Firewall FVS318v3E-10 VPN Configuration of NETGEAR FVS318v3January 2005Figure E-8: IKE parameters at Gateway A (
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-11January 2005Initiating and Checking the VPN Connection
Reference Manual for the ProSafe VPN Firewall FVS318v3E-12 VPN Configuration of NETGEAR FVS318v3January 2005Figure E-9: VPN Status for the FVS318v3 r
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-13January 2005The FVS318v3-to-FVS318v2 Case Configuring
Reference Manual for the ProSafe VPN Firewall FVS318v3E-14 VPN Configuration of NETGEAR FVS318v3January 20052. Use the VPN Wizard to configure the FVS
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-15January 2005• Remote LAN IP Subnet– IP Address: 10.5.6
Reference Manual for the ProSafe VPN Firewall FVS318v3Introduction 2-5January 2005Package ContentsThe product package should contain the following ite
Reference Manual for the ProSafe VPN Firewall FVS318v3E-16 VPN Configuration of NETGEAR FVS318v3January 2005Viewing and Editing the VPN ParametersThe
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-17January 2005Figure E-12: VPN Parameters at Gateway A
Reference Manual for the ProSafe VPN Firewall FVS318v3E-18 VPN Configuration of NETGEAR FVS318v3January 2005Initiating and Checking the VPN Connection
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-19January 20053. Test 3: View VPN Tunnel Status: To view
Reference Manual for the ProSafe VPN Firewall FVS318v3E-20 VPN Configuration of NETGEAR FVS318v3January 2005The FVS318v3-to-FVL328 Case Configuring th
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-21January 20052. Use the VPN Wizard to configure the FVS
Reference Manual for the ProSafe VPN Firewall FVS318v3E-22 VPN Configuration of NETGEAR FVS318v3January 2005• Remote LAN IP Subnet– IP Address: 10.5.6
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-23January 2005Viewing and Editing the VPN ParametersThe
Reference Manual for the ProSafe VPN Firewall FVS318v3E-24 VPN Configuration of NETGEAR FVS318v3January 2005Figure E-17: IKE parameters at Gateway A
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-25January 2005Initiating and Checking the VPN Connection
Reference Manual for the ProSafe VPN Firewall FVS318v32-6 IntroductionJanuary 2005The FVS318v3 Rear PanelThe rear panel of the FVS318v3 VPN Firewall c
Reference Manual for the ProSafe VPN Firewall FVS318v3E-26 VPN Configuration of NETGEAR FVS318v3January 2005Figure E-18: VPN Status for the routers a
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-27January 2005The FVS318v3-to-VPN Client Case Client-to-
Reference Manual for the ProSafe VPN Firewall FVS318v3E-28 VPN Configuration of NETGEAR FVS318v3January 2005Configuring the VPN TunnelNote: This scena
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-29January 2005Figure E-20: VPN Wizard at Gateway A (FVS
Reference Manual for the ProSafe VPN Firewall FVS318v3E-30 VPN Configuration of NETGEAR FVS318v3January 2005Figure E-21: VPN parameters at Gateway A
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-31January 20053. Set up the VPN Client at Gateway B as i
Reference Manual for the ProSafe VPN Firewall FVS318v3E-32 VPN Configuration of NETGEAR FVS318v3January 2005c. Program the Scenario_1 connection scree
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-33January 2005d. Select Security Policy on the left hier
Reference Manual for the ProSafe VPN Firewall FVS318v3E-34 VPN Configuration of NETGEAR FVS318v3January 2005e. Select My Identity on the left hierarch
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-35January 2005f. Verify the Authentication (Phase 1) and
Reference Manual for the ProSafe VPN Firewall FVS318v3Introduction 2-7January 2005• DC power input• ON/OFF switchNETGEAR-Related ProductsNETGEAR produ
Reference Manual for the ProSafe VPN Firewall FVS318v3E-36 VPN Configuration of NETGEAR FVS318v3January 2005Initiating and Checking the VPN Connection
Reference Manual for the ProSafe VPN Firewall FVS318v3VPN Configuration of NETGEAR FVS318v3 E-37January 20052. Test 2: Ping Remote WAN IP Address (if
Reference Manual for the ProSafe VPN Firewall FVS318v3E-38 VPN Configuration of NETGEAR FVS318v3January 2005Figure E-28: VPN Status for Gateway A (FV
January 2005Glossary1GlossaryList of Glossary TermsUse the list below to find definitions for technical terms used in this manual.Numeric10BASE-T IEEE
Reference Manual for the ProSafe VPN Firewall FVS318v32 GlossaryJanuary 2005ARPAddress Resolution Protocol, a TCP/IP protocol used to convert an IP ad
Reference Manual for the ProSafe VPN Firewall FVS318v3Glossary3January 2005printed on the cable jacket. Cat 5 cable contains eight conductors, arrange
Reference Manual for the ProSafe VPN Firewall FVS318v34 GlossaryJanuary 2005to 9 Mbps when receiving data (known as the downstream rate) and from 16 t
Reference Manual for the ProSafe VPN Firewall FVS318v3Glossary5January 2005IEEE Institute of Electrical and Electronics Engineers. This American organ
Reference Manual for the ProSafe VPN Firewall FVS318v36 GlossaryJanuary 2005IP AddressA four-byte number uniquely defining each host on the Internet,
Reference Manual for the ProSafe VPN Firewall FVS318v3Glossary7January 2005MbpsMegabits per second.MDI/MDIXIn cable wiring, the concept of transmit an
Reference Manual for the ProSafe VPN Firewall FVS318v32-8 IntroductionJanuary 2005When the VPN firewall router is connected to the Internet, click the
Reference Manual for the ProSafe VPN Firewall FVS318v38 GlossaryJanuary 2005PPTPPoint-to-Point Tunneling Protocol. A method for establishing a virtual
Reference Manual for the ProSafe VPN Firewall FVS318v3Glossary9January 2005SSegment A section of a LAN that is connected to the rest of the network us
Reference Manual for the ProSafe VPN Firewall FVS318v310 GlossaryJanuary 2005A Web proxy server is a specialized HTTP server that allows clients acces
Connecting the Firewall to the Internet 3-1January 2005Chapter 3 Connecting the Firewall to the InternetThis chapter describes how to set up the firew
Reference Manual for the ProSafe VPN Firewall FVS318v33-2 Connecting the Firewall to the InternetJanuary 2005c.Locate the Ethernet cable (Cable 1 in t
Reference Manual for the ProSafe VPN Firewall FVS318v3Connecting the Firewall to the Internet 3-3January 2005f.Securely insert the blue cable that cam
Reference Manual for the ProSafe VPN Firewall FVS318v33-4 Connecting the Firewall to the InternetJanuary 2005Figure 3-4: Status lightsd.Check the VPN
Reference Manual for the ProSafe VPN Firewall FVS318v3Connecting the Firewall to the Internet 3-5January 2005With the VPN firewall router in its facto
January 2005iiiBestätigung des Herstellers/ImporteursEs wird hiermit bestätigt, daß das FVS318v3 ProSafe VPN Firewall gemäß der im BMPT-AmtsblVfg 243/
Reference Manual for the ProSafe VPN Firewall FVS318v33-6 Connecting the Firewall to the InternetJanuary 20053.Click Done to finish. If you have troub
Reference Manual for the ProSafe VPN Firewall FVS318v3Connecting the Firewall to the Internet 3-7January 2005Make sure the Ethernet cables are securel
Reference Manual for the ProSafe VPN Firewall FVS318v33-8 Connecting the Firewall to the InternetJanuary 2005Overview of How to Access the FVS318v3 VP
Reference Manual for the ProSafe VPN Firewall FVS318v3Connecting the Firewall to the Internet 3-9January 2005How to Log On to the FVS318v3 After Conf
Reference Manual for the ProSafe VPN Firewall FVS318v33-10 Connecting the Firewall to the InternetJanuary 2005Figure 3-9: Login result: FVS318v3 home
Reference Manual for the ProSafe VPN Firewall FVS318v3Connecting the Firewall to the Internet 3-11January 2005If you do not click Logout, the VPN fire
Reference Manual for the ProSafe VPN Firewall FVS318v33-12 Connecting the Firewall to the InternetJanuary 2005How to Manually Configure Your Internet
Reference Manual for the ProSafe VPN Firewall FVS318v3Connecting the Firewall to the Internet 3-13January 2005You can manually configure the firewall
Reference Manual for the ProSafe VPN Firewall FVS318v33-14 Connecting the Firewall to the InternetJanuary 20054.If your Internet connection does requi
Firewall Protection and Content Filtering 4-1January 2005Chapter 4 Firewall Protection and Content FilteringThis chapter describes how to use the cont
January 2005ivProduct and Publication DetailsModel Number: FVS318v3Publication Date: January 2005Product Family: RouterProduct Name: FVS318v3 ProSafe
Reference Manual for the ProSafe VPN Firewall FVS318v34-2 Firewall Protection and Content FilteringJanuary 2005Block SitesThe FVS318v3 allows you to r
Reference Manual for the ProSafe VPN Firewall FVS318v3Firewall Protection and Content Filtering 4-3January 2005To specify a Trusted User, enter that P
Reference Manual for the ProSafe VPN Firewall FVS318v34-4 Firewall Protection and Content FilteringJanuary 2005You may define additional rules that sp
Reference Manual for the ProSafe VPN Firewall FVS318v3Firewall Protection and Content Filtering 4-5January 2005Inbound Rules (Port Forwarding)Because
Reference Manual for the ProSafe VPN Firewall FVS318v34-6 Firewall Protection and Content FilteringJanuary 2005Inbound Rule Example: Allowing a Videoc
Reference Manual for the ProSafe VPN Firewall FVS318v3Firewall Protection and Content Filtering 4-7January 2005Outbound Rules (Service Blocking)The FV
Reference Manual for the ProSafe VPN Firewall FVS318v34-8 Firewall Protection and Content FilteringJanuary 2005Order of Precedence for RulesAs you def
Reference Manual for the ProSafe VPN Firewall FVS318v3Firewall Protection and Content Filtering 4-9January 2005The Default DMZ Server feature is helpf
Reference Manual for the ProSafe VPN Firewall FVS318v34-10 Firewall Protection and Content FilteringJanuary 2005ServicesServices are functions perform
Reference Manual for the ProSafe VPN Firewall FVS318v3Firewall Protection and Content Filtering 4-11January 2005To add a service:1. When you have the
Contents vJanuary 2005ContentsChapter 1 About This ManualAudience, Scope, Conventions, and Formats ...
Reference Manual for the ProSafe VPN Firewall FVS318v34-12 Firewall Protection and Content FilteringJanuary 2005Using a Schedule to Block or Allow Spe
Reference Manual for the ProSafe VPN Firewall FVS318v3Firewall Protection and Content Filtering 4-13January 2005To block keywords or Internet domains
Reference Manual for the ProSafe VPN Firewall FVS318v34-14 Firewall Protection and Content FilteringJanuary 2005Getting E-Mail Notifications of Event
Reference Manual for the ProSafe VPN Firewall FVS318v3Firewall Protection and Content Filtering 4-15January 2005– If a user on your LAN attempts to ac
Reference Manual for the ProSafe VPN Firewall FVS318v34-16 Firewall Protection and Content FilteringJanuary 2005Viewing Logs of Web Access or Attempte
Reference Manual for the ProSafe VPN Firewall FVS318v3Firewall Protection and Content Filtering 4-17January 2005Log entries are described in Table 4-1
Reference Manual for the ProSafe VPN Firewall FVS318v34-18 Firewall Protection and Content FilteringJanuary 2005
Basic Virtual Private Networking 5-1January 2005Chapter 5 Basic Virtual Private NetworkingThis chapter describes how to use the virtual private networ
Reference Manual for the ProSafe VPN Firewall FVS318v35-2 Basic Virtual Private NetworkingJanuary 2005Overview of VPN ConfigurationTwo common scenario
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-3January 2005Figure 5-2: Gateway-to-gateway VPN tunnelA VPN
January 2005vi ContentsUsing the Smart Setup Wizard ...3-11How to M
Reference Manual for the ProSafe VPN Firewall FVS318v35-4 Basic Virtual Private NetworkingJanuary 2005FQDNs supplied by Dynamic DNS providers can allo
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-5January 2005VPN Tunnel ConfigurationThere are two tunnel con
Reference Manual for the ProSafe VPN Firewall FVS318v35-6 Basic Virtual Private NetworkingJanuary 2005Step 1: Configuring the Client-to-Gateway VPN Tu
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-7January 2005Figure 5-5: Connection Name and Remote IP TypeT
Reference Manual for the ProSafe VPN Firewall FVS318v35-8 Basic Virtual Private NetworkingJanuary 2005To view the VPNC recommended authentication and
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-9January 2005Step 2: Configuring the NETGEAR ProSafe VPN Clie
Reference Manual for the ProSafe VPN Firewall FVS318v35-10 Basic Virtual Private NetworkingJanuary 2005b.From the Edit menu of the Security Policy Edi
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-11January 2005Figure 5-10: Security Policy Editor connection
Reference Manual for the ProSafe VPN Firewall FVS318v35-12 Basic Virtual Private NetworkingJanuary 2005Figure 5-11: Security Policy Editor Security P
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-13January 2005Figure 5-12: Security Policy Editor My Identit
Contents viiJanuary 2005Importing a Security Policy ...5-19How to Set Up a
Reference Manual for the ProSafe VPN Firewall FVS318v35-14 Basic Virtual Private NetworkingJanuary 20055.Configure the VPN Client Authentication Propo
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-15January 2005Figure 5-15: Security Policy Editor Key Exchan
Reference Manual for the ProSafe VPN Firewall FVS318v35-16 Basic Virtual Private NetworkingJanuary 2005a.Establish an Internet connection from the PC.
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-17January 2005The Log Viewer screen for a similar successful
Reference Manual for the ProSafe VPN Firewall FVS318v35-18 Basic Virtual Private NetworkingJanuary 2005While the connection is being established, the
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-19January 2005Importing a Security PolicyThe following proced
Reference Manual for the ProSafe VPN Firewall FVS318v35-20 Basic Virtual Private NetworkingJanuary 2005How to Set Up a Gateway-to-Gateway VPN Configur
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-21January 2005Procedure to Configure a Gateway-to-Gateway VPN
Reference Manual for the ProSafe VPN Firewall FVS318v35-22 Basic Virtual Private NetworkingJanuary 20053. Fill in the IP Address or FQDN for the targe
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-23January 2005The Summary screen below displays. Figure 5-27:
January 2005viii ContentsBacking Up the Configuration ...7-7Restoring
Reference Manual for the ProSafe VPN Firewall FVS318v35-24 Basic Virtual Private NetworkingJanuary 2005To view the VPNC recommended authentication and
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-25January 20056.Repeat for the FVS318v3 on LAN B. Pay special
Reference Manual for the ProSafe VPN Firewall FVS318v35-26 Basic Virtual Private NetworkingJanuary 2005Figure 5-31: Current VPN Tunnels (SAs) Screenc
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-27January 2005Figure 5-32: VPN Status/Log screen3.Click VPN
Reference Manual for the ProSafe VPN Firewall FVS318v35-28 Basic Virtual Private NetworkingJanuary 2005a.Establish an Internet connection from the PC.
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-29January 2005Figure 5-36: Pinging test resultsNote: The pin
Reference Manual for the ProSafe VPN Firewall FVS318v35-30 Basic Virtual Private NetworkingJanuary 2005• Click Clear Log to delete all log entries. 3.
Reference Manual for the ProSafe VPN Firewall FVS318v3Basic Virtual Private Networking 5-31January 2005Figure 5-39: VPN Policies 3.Clear the Enable c
Reference Manual for the ProSafe VPN Firewall FVS318v35-32 Basic Virtual Private NetworkingJanuary 20053.Click VPN Status (Figure 5-40) to get the Cur
Advanced Virtual Private Networking 6-1January 2005Chapter 6 Advanced Virtual Private NetworkingThis chapter describes how to use the advanced virtual
Contents ixJanuary 2005Netmask ... B-4S
Reference Manual for the ProSafe VPN Firewall FVS318v36-2 Advanced Virtual Private NetworkingJanuary 2005Using Policies to Manage VPN TrafficYou creat
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-3January 2005IKE Policies’ Automatic Key and Authenticatio
Reference Manual for the ProSafe VPN Firewall FVS318v36-4 Advanced Virtual Private NetworkingJanuary 2005The IKE Policy Configuration fields are defin
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-5January 2005VPN Policy Configuration for Auto Key Negotia
Reference Manual for the ProSafe VPN Firewall FVS318v36-6 Advanced Virtual Private NetworkingJanuary 2005Figure 6-3: VPN - Auto Policy menu
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-7January 2005The VPN – Auto Policy fields are defined in t
Reference Manual for the ProSafe VPN Firewall FVS318v36-8 Advanced Virtual Private NetworkingJanuary 2005Traffic Selector These settings determine if
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-9January 2005VPN Policy Configuration for Manual Key Excha
Reference Manual for the ProSafe VPN Firewall FVS318v36-10 Advanced Virtual Private NetworkingJanuary 2005Figure 6-4: VPN - Manual Policy menu
Reference Manual for the ProSafe VPN Firewall FVS318v3Advanced Virtual Private Networking 6-11January 2005The VPN Manual Policy fields are defined in
Comments to this Manuals