Netgear Modem FVS318N User Manual

350 East Plumeria DriveSan Jose, CA 95134USAJuly, 2012202-10836-04v1.0ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NReference Manual

1011. IntroductionThis chapter provides an overview of the features and capabilities of the ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N a

LAN Configuration100ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To edit an IPv4 static route:1. On the Static Routing screen for IPv4 (s

LAN Configuration101 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 51. 3. Enter the settings as explained in the following table: Tab

LAN Configuration102ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 4. Click Apply to save your settings.RIP Version By default, the RIP versi

LAN Configuration103 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NIPv4 Static Route ExampleIn this example, we assume the following:• The wir

LAN Configuration104ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 52. 3. Click the Add table button under the Static Routes table. T

LAN Configuration105 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N5. Click Apply to save your settings. The new static route is added to the

10644. Wireless Configuration and SecurityThis chapter describes how to configure the wireless features of your ProSafe Wireless-N 8-Port Gigabit VP

Wireless Configuration and Security107 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N(NIC) through an antenna. Typically, an individual in-bui

Wireless Configuration and Security108ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Configure the Basic Radio SettingsThe radio settings appl

Wireless Configuration and Security109 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NMode Specify the wireless mode in the 2.4-GHz band by mak

Introduction11 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe wireless VPN firewall provides advanced IPSec and SSL VPN technologies with s

Wireless Configuration and Security110ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N WARNING:When you have changed the country settings, the w

Wireless Configuration and Security111 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NWireless Data Security OptionsIndoors, computers can conn

Wireless Configuration and Security112ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Cipher Block Chaining Message Authentication Code Protoco

Wireless Configuration and Security113 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NEach wireless profile provides the following features:• C

Wireless Configuration and Security114ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Before You Change the SSID, WEP, and WPA SettingsFor a ne

Wireless Configuration and Security115 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NConfigure and Enable Wireless Profiles To add a wireless

Wireless Configuration and Security116ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 57. 3. Specify the settings as explained in the

Wireless Configuration and Security117 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NSSID The wireless network name (SSID) for the wireless pr

Wireless Configuration and Security118ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N EncryptionNote: WPA, WPA2, and WPA+WPA2 only.The encrypt

Wireless Configuration and Security119 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Click Apply to save your settings. The new profile is

Introduction12ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N • Hidden mode. The SSID is not broadcast, assuring that only clients configured w

Wireless Configuration and Security120ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To edit a wireless profile:1. On the Wireless Profiles

Wireless Configuration and Security121 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N To allow or restrict access based on MAC addresses:1.

Wireless Configuration and Security122ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N WARNING:When you configure the wireless VPN firewall from

Wireless Configuration and Security123 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NConfigure Wi-Fi Protected SetupPush 'N' Connect

Wireless Configuration and Security124ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To enable WPS and initiate the WPS process on the wirel

Wireless Configuration and Security125 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N• Push button configuration (PBC) method: a. Click the P

Wireless Configuration and Security126ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 3. Specify the settings as explained in the following ta

Wireless Configuration and Security127 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NTest Basic Wireless ConnectivityAfter you have configured

12855. Firewall ProtectionThis chapter describes how to use the firewall features of the wireless VPN firewall to protect your network. The chapter

Firewall Protection129 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Nincoming packet is in response to an outgoing request, but true stateful

Introduction13 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NSecurity FeaturesThe wireless VPN firewall is equipped with several features desi

Firewall Protection130ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N A firewall has two default rules, one for inbound traffic and one for out

Firewall Protection131 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe following table describes the fields that define the rules for outbou

Firewall Protection132ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N WAN Users The settings that determine which Internet locations are covere

Firewall Protection133 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NInbound Rules (Port Forwarding)If you have enabled Network Address Transl

Firewall Protection134ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N LAN Groups screen to keep the computer’s IP address constant (see Set Up

Firewall Protection135 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NTable 34. Inbound rules overview Setting Description Inbound RulesServi

Firewall Protection136ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N LAN Users These settings apply to a LAN WAN inbound rule when the WAN mod

Firewall Protection137 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NNote: Some residential broadband ISP accounts do not allow you to run an

Firewall Protection138ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Configure LAN WAN Rules• Create LAN WAN Outbound Service Rules• Create LA

Firewall Protection139 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N• Edit. Allows you to make any changes to the definition of an existing r

Introduction14ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Dynamic Host Configuration Protocol (DHCP). This feature greatly simplifies confi

Firewall Protection140ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To enable, disable, or delete one or more IPv4 or IPv6 rules:1. Select

Firewall Protection141 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 65. 2. Enter the settings as explained in Table 33 on page 131.

Firewall Protection142ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N IPv6 LAN WAN Outbound Rules To create a new IPv6 LAN WAN outbound rule:

Firewall Protection143 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NCreate LAN WAN Inbound Service RulesThe Inbound Services table lists all

Firewall Protection144ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 67. IPv6 LAN WAN Inbound Rules To create a new IPv6 LAN WAN inbo

Firewall Protection145 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 68. 3. Enter the settings as explained in Table 34 on page 135.

Firewall Protection146ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Note: Inbound rules on the LAN WAN Rules screen take precedence over inb

Firewall Protection147 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N To access the DMZ WAN Rules screen for IPv6 or to change existing IPv6

Firewall Protection148ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N • Disable. Disables the rule or rules. The ! status icon changes from a g

Firewall Protection149 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Enter the settings as explained in Table 33 on page 131. In addition

Introduction15 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NMaintenance and SupportNETGEAR offers the following features to help you maximize

Firewall Protection150ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 3. Enter the settings as explained in Table 33 on page 131. In addition

Firewall Protection151 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 73. 2. Enter the settings as explained in Table 34 on page 135.

Firewall Protection152ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N IPv6 DMZ WAN Inbound Service Rules To create a new IPv6 DMZ WAN inbound

Firewall Protection153 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NConfigure LAN DMZ Rules• Create LAN DMZ Outbound Service Rules• Create LA

Firewall Protection154ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N • Edit. Allows you to make any changes to the definition of an existing r

Firewall Protection155 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Click one of the following table buttons:• Enable. Enables the rule o

Firewall Protection156ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 2. Enter the settings as explained in Table 33 on page 131. In addition

Firewall Protection157 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NUnless your selection from the Action drop-down list is BLOCK always, you

Firewall Protection158ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Unless your selection from the Action drop-down list is BLOCK always, you

Firewall Protection159 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NExamples of Firewall Rules• Examples of Inbound Firewall Rules• Examples

Introduction16ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N The front panel also contains three groups of status indicator light-emitting dio

Firewall Protection160ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N IPv4 LAN WAN Inbound Rule: Allow a Videoconference from Restricted Addres

Firewall Protection161 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NIPv4 LAN WAN or IPv4 DMZ WAN Inbound Rule: Set Up One-to-One NAT MappingI

Firewall Protection162ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 83. 4. From the Service drop-down list, select HTTP for a web se

Firewall Protection163 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NIPv4 LAN WAN or IPv4 DMZ WAN Inbound Rule: Specifying an Exposed HostSpec

Firewall Protection164ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N IPv6 LAN WAN Inbound Rule: Restrict RTelnet from a Single WAN User to a S

Firewall Protection165 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 86. IPv6 DMZ WAN Outbound Rule: Allow a Group of DMZ User to Acces

Firewall Protection166ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 87. Configure Other Firewall Features• Attack Checks• Set Limits f

Firewall Protection167 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NIPv4 Attack Checks To enable IPv4 attack checks for your network environ

Firewall Protection168ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N LAN Security ChecksBlock UDP flood Select the Block UDP flood check box

Firewall Protection169 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Click Apply to save your settings.IPv6 Attack Checks To enable IPv6

Introduction17 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NLAN PortsLeft LED Off The LAN port has no link.On (green) The LAN port has detect

Firewall Protection170ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Set Limits for IPv4 SessionsThe session limits feature allows you to spec

Firewall Protection171 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Click Apply to save your settings.Manage the Application Level Gatewa

Firewall Protection172ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Services, Bandwidth Profiles, and QoS Profiles• Add Customized Services•

Firewall Protection173 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NTo define a new service, you need to determine first which port number or

Firewall Protection174ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 3. Click Apply to save your settings. The new custom service is added to

Firewall Protection175 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NCreate Bandwidth ProfilesBandwidth profiles determine the way in which da

Firewall Protection176ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 2. Under the List of Bandwidth Profiles table, click the Add table butto

Firewall Protection177 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Click Apply to save your settings. The new bandwidth profile is added

Firewall Protection178ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N These are the default QoS profiles that are preconfigured and that cannot

Firewall Protection179 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N- ActiveX. Similar to Java applets, ActiveX controls are installed on a W

Introduction18ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Rear PanelThe rear panel of the wireless VPN firewall includes the antennas, a ca

Firewall Protection180ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 96. 2. In the Content Filtering section of the screen, select th

Firewall Protection181 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. In the Web Components section of the screen, select the components th

Firewall Protection182ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Set a Schedule to Block or Allow Specific TrafficSchedules define the tim

Firewall Protection183 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NEnable Source MAC FilteringThe Source MAC Filter screen enables you to pe

Firewall Protection184ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 3. In the same section, from the Policy for MAC Addresses listed below d

Firewall Protection185 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NNote: You can bind IP addresses to MAC addresses for DHCP assignment on

Firewall Protection186ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 99. 2. In the Email IP/MAC Violations section of the screen, spe

Firewall Protection187 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N To edit an IP/MAC binding:1. In the IP/MAC Bindings table, click the E

Firewall Protection188ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 101. 3. In the Email IP/MAC Violations section of the screen, sp

Firewall Protection189 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N To edit an IP/MAC binding:1. In the IP/MAC Bindings table, click the E

Introduction19 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NBottom Panel with Product LabelThe product label on the bottom of the wireless VP

Firewall Protection190ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Configure Port TriggeringPort triggering allows some applications running

Firewall Protection191 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 103. 2. In the Add Port Triggering Rule section, enter the setti

Firewall Protection192ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To remove one or more port triggering rules from the table:1. Select t

Firewall Protection193 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe UPnP Portmap Table in the lower part of the screen shows the IP addre

19466. Virtual Private Networking Using IPSec and L2TP ConnectionsThis chapter describes how to use the IP security (IPSec) virtual private networki

Virtual Private Networking Using IPSec and L2TP Connections195 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NConfiguring a VPN tunnel connecti

Virtual Private Networking Using IPSec and L2TP Connections196ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 107. To view the wizard d

Virtual Private Networking Using IPSec and L2TP Connections197 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 108. 2. Complete the set

Virtual Private Networking Using IPSec and L2TP Connections198ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Tip: To ensure that tunnels stay

Virtual Private Networking Using IPSec and L2TP Connections199 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 110. b. Locate the polic

2ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N © 2011–2012 NETGEAR, Inc. All rights reserved.No part of this publication may be reproduced,

Introduction20ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Log In to the Wireless VPN FirewallNote: To connect the wireless VPN firewall ph

Virtual Private Networking Using IPSec and L2TP Connections200ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 112. To view the wizard d

Virtual Private Networking Using IPSec and L2TP Connections201 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 113. 3. Complete the set

Virtual Private Networking Using IPSec and L2TP Connections202ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Tip: To ensure that tunnels stay

Virtual Private Networking Using IPSec and L2TP Connections203 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 115. b. Locate the polic

Virtual Private Networking Using IPSec and L2TP Connections204ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Use the VPN Wizard to Configure t

Virtual Private Networking Using IPSec and L2TP Connections205 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Complete the settings as expl

Virtual Private Networking Using IPSec and L2TP Connections206ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 118. Note: When you are

Virtual Private Networking Using IPSec and L2TP Connections207 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NNote: Perform these tasks from a

Virtual Private Networking Using IPSec and L2TP Connections208ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 120. 3. Select the A rou

Virtual Private Networking Using IPSec and L2TP Connections209 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N5. Click Next. The Configuration

Introduction21 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 4. 3. In the User Name field, type admin. Use lowercase letters.4. In t

Virtual Private Networking Using IPSec and L2TP Connections210ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N c. Specify the settings that are

Virtual Private Networking Using IPSec and L2TP Connections211 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 124. b. Specify the defa

Virtual Private Networking Using IPSec and L2TP Connections212ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Configure the Authentication Sett

Virtual Private Networking Using IPSec and L2TP Connections213 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NNote: This is the name for the a

Virtual Private Networking Using IPSec and L2TP Connections214ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 5. Click Apply to use the new se

Virtual Private Networking Using IPSec and L2TP Connections215 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N8. Click Apply to use the new se

Virtual Private Networking Using IPSec and L2TP Connections216ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 129. 3. Specify the sett

Virtual Private Networking Using IPSec and L2TP Connections217 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Click Apply to use the new se

Virtual Private Networking Using IPSec and L2TP Connections218ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Test the Connection and View Conn

Virtual Private Networking Using IPSec and L2TP Connections219 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N• Use the Connection Panel screen

Introduction22ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 5. Web Management Interface Menu LayoutThe following figure shows the menu

Virtual Private Networking Using IPSec and L2TP Connections220ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N NETGEAR VPN Client Status and Log

Virtual Private Networking Using IPSec and L2TP Connections221 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe Active IPSec SA(s) table list

Virtual Private Networking Using IPSec and L2TP Connections222ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Manage IPSec VPN Policies• Manage

Virtual Private Networking Using IPSec and L2TP Connections223 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NIKE Policies Screen To access th

Virtual Private Networking Using IPSec and L2TP Connections224ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To delete one or more IKE polic

Virtual Private Networking Using IPSec and L2TP Connections225 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 140.

Virtual Private Networking Using IPSec and L2TP Connections226ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 4. Complete the settings as expl

Virtual Private Networking Using IPSec and L2TP Connections227 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NLocalIdentifier From the drop-dow

Virtual Private Networking Using IPSec and L2TP Connections228ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Authentication Method Select one

Virtual Private Networking Using IPSec and L2TP Connections229 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N5. Click Apply to save your sett

Introduction23 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N• 2nd level: Configuration menu links. The configuration menu links in the gray b

Virtual Private Networking Using IPSec and L2TP Connections230ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 4. Modify the settings that you

Virtual Private Networking Using IPSec and L2TP Connections231 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 141. Each policy contains

Virtual Private Networking Using IPSec and L2TP Connections232ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To delete one or more VPN polic

Virtual Private Networking Using IPSec and L2TP Connections233 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 142. Add New VPN Policy s

Virtual Private Networking Using IPSec and L2TP Connections234ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 143. Add New VPN Policy s

Virtual Private Networking Using IPSec and L2TP Connections235 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Complete the settings as expl

Virtual Private Networking Using IPSec and L2TP Connections236ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Traffic SelectionLocal IP From th

Virtual Private Networking Using IPSec and L2TP Connections237 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NKey-Out The encryption key for th

Virtual Private Networking Using IPSec and L2TP Connections238ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 5. Click Apply to save your sett

Virtual Private Networking Using IPSec and L2TP Connections239 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Nauthenticate users from a stored

Introduction24ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Any of the following table buttons might display onscreen:• Select All. Select al

Virtual Private Networking Using IPSec and L2TP Connections240ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 4. In the Extended Authenticatio

Virtual Private Networking Using IPSec and L2TP Connections241 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Ninformation such as a user name a

Virtual Private Networking Using IPSec and L2TP Connections242ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 3. Click Apply to save your sett

Virtual Private Networking Using IPSec and L2TP Connections243 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NAssign IPv4 Addresses to Remote U

Virtual Private Networking Using IPSec and L2TP Connections244ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Configure Mode Config Operation o

Virtual Private Networking Using IPSec and L2TP Connections245 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 146. 3. Complete the set

Virtual Private Networking Using IPSec and L2TP Connections246ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N WINS Server If there is a WINS se

Virtual Private Networking Using IPSec and L2TP Connections247 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Click Apply to save your sett

Virtual Private Networking Using IPSec and L2TP Connections248ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 147. 8. On the Add IKE P

Virtual Private Networking Using IPSec and L2TP Connections249 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NNote: The IKE policy settings th

2522. IPv4 and IPv6 Internet and Broadband SettingsThis chapter explains how to configure the Internet and WAN settings. The chapter contains the fo

Virtual Private Networking Using IPSec and L2TP Connections250ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N IKE SA ParametersNote: Generally

Virtual Private Networking Using IPSec and L2TP Connections251 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N9. Click Apply to save your sett

Virtual Private Networking Using IPSec and L2TP Connections252ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Note: Perform these tasks from a

Virtual Private Networking Using IPSec and L2TP Connections253 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 149. 3. Change the name

Virtual Private Networking Using IPSec and L2TP Connections254ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 4. Specify the settings that are

Virtual Private Networking Using IPSec and L2TP Connections255 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N7. Specify the settings that are

Virtual Private Networking Using IPSec and L2TP Connections256ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Note: This is the name for the I

Virtual Private Networking Using IPSec and L2TP Connections257 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Click Apply to use the new se

Virtual Private Networking Using IPSec and L2TP Connections258ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 2. Specify the following default

Virtual Private Networking Using IPSec and L2TP Connections259 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Verify that the wireless VPN

IPv4 and IPv6 Internet and Broadband Settings26ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 3. (Optional) Configure Dynamic DNS on the WAN

Virtual Private Networking Using IPSec and L2TP Connections260ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N establishment time. If you requir

Virtual Private Networking Using IPSec and L2TP Connections261 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Enter the settings as explain

Virtual Private Networking Using IPSec and L2TP Connections262ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 158. 4. In the IKE SA Pa

Virtual Private Networking Using IPSec and L2TP Connections263 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N To enable NetBIOS bridging on a

Virtual Private Networking Using IPSec and L2TP Connections264ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N is established, the L2TP user can

Virtual Private Networking Using IPSec and L2TP Connections265 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NView the Active L2TP UsersTo view

26677. Virtual Private Networking Using SSL ConnectionsThe wireless VPN firewall provides a hardware-based SSL VPN solution designed specifically to

Virtual Private Networking Using SSL Connections267 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe SSL VPN client provides a point-to-point

Virtual Private Networking Using SSL Connections268ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Because you need to assign a group when crea

Virtual Private Networking Using SSL Connections269 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NYou can define individual layouts for the SS

IPv4 and IPv6 Internet and Broadband Settings27 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NConfigure the IPv4 WAN ModeBy default, IPv4 is s

Virtual Private Networking Using SSL Connections270ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N The List of Layouts table displays the follo

Virtual Private Networking Using SSL Connections271 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Complete the settings as explained in th

Virtual Private Networking Using SSL Connections272ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 5. Click Apply to save your settings. The n

Virtual Private Networking Using SSL Connections273 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Naccess policies. When you create a group, yo

Virtual Private Networking Using SSL Connections274ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 2. In the Add New Application for Port Forw

Virtual Private Networking Using SSL Connections275 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N To add servers and host names for client n

Virtual Private Networking Using SSL Connections276ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N - A split tunnel sends only traffic that is

Virtual Private Networking Using SSL Connections277 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N• IPv6. Select the IPv6 radio button. The SS

Virtual Private Networking Using SSL Connections278ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 4. Click Apply to save your settings. VPN t

Virtual Private Networking Using SSL Connections279 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. In the Add Routes for VPN Tunnel Clients

IPv4 and IPv6 Internet and Broadband Settings28ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 9. 2. Select the NAT radio button or th

Virtual Private Networking Using SSL Connections280ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 168. 2. In the Add New Resource sec

Virtual Private Networking Using SSL Connections281 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Specify the IP version for which you wan

Virtual Private Networking Using SSL Connections282ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 5. Click Apply to save your settings. The n

Virtual Private Networking Using SSL Connections283 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFor example, a policy that is configured for

Virtual Private Networking Using SSL Connections284ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 170. 2. Make your selection from th

Virtual Private Networking Using SSL Connections285 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N.Figure 171. Add SSL VPN Policy screen for

Virtual Private Networking Using SSL Connections286ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 4. Complete the settings as explained in th

Virtual Private Networking Using SSL Connections287 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N5. Click Apply to save your settings. The p

Virtual Private Networking Using SSL Connections288ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Note: If you have configured SSL VPN user p

Virtual Private Networking Using SSL Connections289 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Specify the IP version for which you wan

IPv4 and IPv6 Internet and Broadband Settings29 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 10. 2. Click the Auto Detect button at

Virtual Private Networking Using SSL Connections290ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 175. 4. Enter a user name and passw

Virtual Private Networking Using SSL Connections291 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 176. Figure 177. The User Portal sc

Virtual Private Networking Using SSL Connections292ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N • Change Password. Allows the user to change

Virtual Private Networking Using SSL Connections293 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 179.

29488. Manage Users, Authentication, and VPN CertificatesThis chapter describes how to manage users, authentication, and security certificates for I

Manage Users, Authentication, and VPN Certificates295 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NExcept in the case of IPSec VPN users, whe

Manage Users, Authentication, and VPN Certificates296ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Configure Authentication Domains, Groups,

Manage Users, Authentication, and VPN Certificates297 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe List of Domains table displays the dom

Manage Users, Authentication, and VPN Certificates298ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Authentication Type (continued)Note: If y

Manage Users, Authentication, and VPN Certificates299 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Click Apply to save your settings. The

3ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N (continued)• IPv6 firewall rules (see Configure LAN WAN Rules, Configure DMZ WAN Rules, Config

IPv4 and IPv6 Internet and Broadband Settings30ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N • If the autodetect process does not find a conn

Manage Users, Authentication, and VPN Certificates300ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Edit Domains To edit a domain:1. Select

Manage Users, Authentication, and VPN Certificates301 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NCreate Groups To create a VPN group:1. S

Manage Users, Authentication, and VPN Certificates302ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 183. 3. Complete the settings as

Manage Users, Authentication, and VPN Certificates303 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NEdit GroupsFor groups that were automatica

Manage Users, Authentication, and VPN Certificates304ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N • IPSec VPN user. A user who can make an I

Manage Users, Authentication, and VPN Certificates305 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 185. 3. Enter the settings as exp

Manage Users, Authentication, and VPN Certificates306ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To delete one or more user accounts:1.

Manage Users, Authentication, and VPN Certificates307 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Make the following optional selections

Manage Users, Authentication, and VPN Certificates308ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 4. In the Defined Addresses Status sectio

Manage Users, Authentication, and VPN Certificates309 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 188. 5. In the Defined Addresses

IPv4 and IPv6 Internet and Broadband Settings31 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe Connection Status screen should show a valid

Manage Users, Authentication, and VPN Certificates310ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 9. Repeat Step 7 and Step 8 for any other

Manage Users, Authentication, and VPN Certificates311 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N5. Click Apply to save your settings.6.

Manage Users, Authentication, and VPN Certificates312ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To modify user settings, including passw

Manage Users, Authentication, and VPN Certificates313 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Click Apply to save your settings.Mana

Manage Users, Authentication, and VPN Certificates314ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N certificate repository. However, if the de

Manage Users, Authentication, and VPN Certificates315 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N• Self Certificate Requests table. Contain

Manage Users, Authentication, and VPN Certificates316ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 3. Click the Upload table button. If the

Manage Users, Authentication, and VPN Certificates317 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NGenerate a CSR and Obtain a Self-Signed Ce

Manage Users, Authentication, and VPN Certificates318ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 2. In the Generate Self Certificate Reque

Manage Users, Authentication, and VPN Certificates319 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 194. 5. Copy the contents of the

IPv4 and IPv6 Internet and Broadband Settings32ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 13. 5. If your connection is PPTP or PP

Manage Users, Authentication, and VPN Certificates320ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To delete one or more SCRs:1. In the Se

Manage Users, Authentication, and VPN Certificates321 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 195. Certificates, screen 3 of 3Th

32299. Network and System ManagementThis chapter describes the tools for managing the network traffic to optimize its performance and the system man

Network and System Management323 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFeatures That Reduce TrafficYou can adjust the following featur

Network and System Management324ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N - Single address. The rule applies to the address of a particul

Network and System Management325 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NSource MAC FilteringIf you want to reduce outgoing traffic by p

Network and System Management326ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N rules, see Configure LAN WAN Rules on page 138 and Configure DM

Network and System Management327 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NPort TriggeringPort triggering allows some applications running

Network and System Management328ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Use QoS and Bandwidth Assignment to Shift the Traffic MixBy set

Network and System Management329 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NSystem Management• Change Passwords and Administrator and Guest

IPv4 and IPv6 Internet and Broadband Settings33 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N6. In the Internet (IP) Address section of the

Network and System Management330ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 2. In the Action column of the List of Users table, click the

Network and System Management331 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NYou can also change the administrator login policies:• Disable

Network and System Management332ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To configure the wireless VPN firewall for remote management:

Network and System Management333 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 199. Remote Management screen for IPv63. Enter the set

Network and System Management334ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N WARNING:If you are remotely connected to the wireless VPN firew

Network and System Management335 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N• To maintain security, the wireless VPN firewall rejects a log

Network and System Management336ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N SNMP lets you monitor and manage your wireless VPN firewall fro

Network and System Management337 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. To specify a new SNMP configuration, in the Create New SNMP

Network and System Management338ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To delete one or more SNMP configurations:1. On the SNMP scr

Network and System Management339 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Click Apply to save your changes. To configure the SNMP sy

IPv4 and IPv6 Internet and Broadband Settings34ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 7. In the Domain Name Server (DNS) Servers sect

Network and System Management340ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 3. Click Apply to save your changes. Manage the Configuration

Network and System Management341 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NBack Up SettingsThe backup feature saves all wireless VPN firew

Network and System Management342ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N WARNING:Once you start restoring settings, do not interrupt the

Network and System Management343 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NUpdate the FirmwareYou can install a different version of the w

Network and System Management344ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Configure Date and Time ServiceConfigure date, time, and NTP se

Network and System Management345 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Click Apply to save your settings.Note: If you select the

3461010. Monitor System Access and PerformanceThis chapter describes the system-monitoring features of the wireless VPN firewall. You can be alerted

Monitor System Access and Performance347 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 206. 2. Enter the settings as explained in the

Monitor System Access and Performance348ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Table 84. Broadband Traffic Meter screen settings Sett

Monitor System Access and Performance349 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Click Apply to save your settings.To display a repo

IPv4 and IPv6 Internet and Broadband Settings35 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N8. Click Apply to save your changes.9. Click T

Monitor System Access and Performance350ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 208.

Monitor System Access and Performance351 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Enter the settings as explained in the following ta

Monitor System Access and Performance352ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Enable E-mail LogsDo you want logs to be emailed to you

Monitor System Access and Performance353 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Click Apply to save your settings.Note: Enabling r

Monitor System Access and Performance354ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N The following sections describe steps 2 through 4, usin

Monitor System Access and Performance355 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NConfigure Gateway 2 at Site 2 To create a gateway-to-g

Monitor System Access and Performance356ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N View Status Screens• View the System Status• View the V

Monitor System Access and Performance357 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 209. The following table explains the fields of

Monitor System Access and Performance358ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Router Statistics Screen To view the Router Statistics

Monitor System Access and Performance359 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 210. The following table explains the fields of

IPv4 and IPv6 Internet and Broadband Settings36ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N After you have configured your account informati

Monitor System Access and Performance360ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 211.

Monitor System Access and Performance361 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe following table explains the fields of the Detailed

Monitor System Access and Performance362ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N NAT (IPv4 only) The NAT state can be either Enabled or

Monitor System Access and Performance363 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NTunnel Status ScreenThe IPv6 Tunnel Status screen displ

Monitor System Access and Performance364ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N View the VPN Connection Status and L2TP UsersThe Connec

Monitor System Access and Performance365 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NTo disconnect an active user, click the Disconnect tabl

Monitor System Access and Performance366ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To display the SSL VPN log:Select Monitoring > VPN

Monitor System Access and Performance367 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Click the Status option arrow in the upper right of

Monitor System Access and Performance368ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 220. The type of connection determines the info

Monitor System Access and Performance369 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NIPv6 WAN Port Status To view the IPv6 status of the WA

IPv4 and IPv6 Internet and Broadband Settings37 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Access the website of the DDNS service provi

Monitor System Access and Performance370ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N View the Attached Devices and the DHCP LogThe LAN Group

Monitor System Access and Performance371 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Nassigned a static IP address, you need to update this e

Monitor System Access and Performance372ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N View the Status of a Wireless Profile To view the stat

Monitor System Access and Performance373 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NDiagnostics Utilities• Send a Ping Packet• Trace a Rout

Monitor System Access and Performance374ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 225. • IPv6. Select the IPv6 radio button. The

Monitor System Access and Performance375 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NSend a Ping PacketUse the ping utility to send a ping p

Monitor System Access and Performance376ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Display the Routing TablesDisplaying the internal routi

Monitor System Access and Performance377 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NReboot the Wireless VPN Firewall RemotelyYou can perfor

3781111. TroubleshootingThis chapter provides troubleshooting tips and information for the wireless VPN firewall. After each problem description, in

Troubleshooting379 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NNote: The wireless VPN firewall’s diagnostic tools are explained in Diagnost

IPv4 and IPv6 Internet and Broadband Settings38ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N • Isolated IPv6 network. If your network is an i

Troubleshooting380ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  If all LEDs are still on more than several minutes minute after power-up, d

Troubleshooting381 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N• Make sure that you are using the SSL https://address login rather than the

Troubleshooting382ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Troubleshoot the ISP ConnectionIf your wireless VPN firewall is unable to acc

Troubleshooting383 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Nsystem name, or account name that was assigned to you by your ISP. You might

Troubleshooting384ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Check the computer:• Make sure that the operating system supports IPv6. Norma

Troubleshooting385 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Nc. Make sure that Internet Protocol Version 6 (TCP/IPv6) displays, as is sho

Troubleshooting386ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 230. f. Make sure that an IPv6 address shows. The previous figure do

Troubleshooting387 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Click OK. A message similar to the following should display:Pinging <I

Troubleshooting388ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N information. For more information, see Manually Configure an IPv4 Internet Co

Troubleshooting389 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe reboot process takes about 165 seconds. (If you can see the unit: The reb

IPv4 and IPv6 Internet and Broadband Settings39 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 18. 2. Select the IPv4 / IPv6 mode radi

390AA. Default Settings and Technical SpecificationsThis appendix provides the default settings and the physical and technical specifications of the

Default Settings and Technical Specifications391ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NStateless IP/ICMP Translation (SIIT) DisabledWAN

Default Settings and Technical Specifications392ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NDMZ port for IPv6 DisabledDMZ IPv6 address (Port

Default Settings and Technical Specifications393ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NUPnP DisabledBandwidth profiles NoneQoS profiles

Default Settings and Technical Specifications394ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NEncryption NoneAuthentication NoneTransmission r

Default Settings and Technical Specifications395ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NKey group DH-Group 2 (1024 bit)NetBIOS EnabledVP

Default Settings and Technical Specifications396ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NPhysical and Technical SpecificationsThe followi

Default Settings and Technical Specifications397ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NPower plug (localized to the country of sale)Nor

Default Settings and Technical Specifications398ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe following table shows the IPSec VPN specific

Default Settings and Technical Specifications399ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe following table shows the wireless specifica

4ContentsChapter 1 IntroductionWhat Is the ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N?. 10Key Features and Capabilities . . . . . . . . .

IPv4 and IPv6 Internet and Broadband Settings40ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N • Stateful address autoconfiguration. The wirele

400BB. Two-Factor AuthenticationThis appendix provides an overview of two-factor authentication, and an example of how to implement the WiKID soluti

Two-Factor Authentication401ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NWhat Is Two-Factor Authentication?Two-factor authentication is a sec

Two-Factor Authentication402ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 232. 2. A one-time passcode (something the user has) is gen

Two-Factor Authentication403ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 234.

404CC. Notification of Compliance (Wired)NETGEAR Wired ProductsRegulatory Compliance InformationThis section includes user requirements for operatin

Notification of Compliance (Wired)405ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFCC Radio Frequency Interference Warnings & Instruction

Notification of Compliance (Wired)406ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NAdditional CopyrightsAES Copyright (c) 2001, Dr. Brian Glad

Notification of Compliance (Wired)407ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NMD5 Copyright (C) 1990, RSA Data Security, Inc. All rights

408DD. Notification of Compliance (Wireless)NETGEAR Wireless Routers, Gateways, APsRegulatory Compliance InformationNote: This section includes user

Notification of Compliance (Wireless)409ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NEspañol [Spanish] Por medio de la presente NETGEAR Inc.

IPv4 and IPv6 Internet and Broadband Settings41 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N5. As an optional step: If you have selected th

Notification of Compliance (Wireless)410ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThis device is a 2.4 GHz wideband transmission system (t

Notification of Compliance (Wireless)411ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N• For product available in the USA market, only channel

412IndexNumerics10BASE-T, 100BASE-T, and 1000BASE-T speeds 522.4-GHz wireless mode 10920- and 40-MHz channel spacing 1093322.org 35–3764-bit and 128-b

413ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NAuto Uplink, autosensing Ethernet connections 13autodetecting IPv4 Internet settings 29autoin

414ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Ncrossover cable 13, 380CSMA (Carrier Sense Multiple Access) 126CSR (certificate signing reque

415ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Ndipole antenna 18direction, bandwidth profiles 176DMZ (demilitarized zone)configuring 85–98in

416ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NGg mode, wireless 109gateway, ISPIPv4 address 34IPv6 address 42generating keys, WEP 119global

417ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NISATAP tunnel address 48LAN, secondary 65–67MAC bindings 185port forwarding, SSL VPN 274requi

418ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Nkey generation, WEP 119keyword blocking 179knowledge base 389LL2TP (Layer 2 Tunneling Protoco

419ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Nmonitoring default settings 396MTU (maximum transmission unit)default 51IPv6 DMZ packets 96IP

IPv4 and IPv6 Internet and Broadband Settings42ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 21. 3. In the Internet Address section

420ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NPFS (Perfect Forward Secrecy) 238, 246physical specifications 396PIN method, WPS 124pingingch

421ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NVLANs 56–63wireless security 112, 115–119protection from common attacks 166–169protocolscompa

422ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Nsecurity lock receptacle 18Security Parameters Index (SPI) 236security profiles, wirelesscrea

423ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Nstatus, viewing 356–363updating firmware 343Ttable buttons (web management interface) 23tabs,

424ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NVvendor class identifier (VCI) 34version, SNMP 337videoconferencingDMZ port 86from restricted

425ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Ntesting 127wireless equipment, placement and range 107wireless mode 109wireless network name

IPv4 and IPv6 Internet and Broadband Settings43 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N5. Click Apply to save your changes.6. To veri

IPv4 and IPv6 Internet and Broadband Settings44ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 23. 3. In the Internet Address section

IPv4 and IPv6 Internet and Broadband Settings45 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N5. Click Apply to save your changes.6. To veri

IPv4 and IPv6 Internet and Broadband Settings46ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Configure 6to4 Automatic TunnelingIf your networ

IPv4 and IPv6 Internet and Broadband Settings47 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Select the Enable Automatic Tunneling check

IPv4 and IPv6 Internet and Broadband Settings48ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 25. 2. Click the Add table button under

IPv4 and IPv6 Internet and Broadband Settings49 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Modify the settings as explained in the prev

5ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NConfigure Stateless IP/ICMP Translation . . . . . . . . . . . . . . . . . . . . . . . .49Config

IPv4 and IPv6 Internet and Broadband Settings50ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N For SIIT to function, the routing mode needs to

IPv4 and IPv6 Internet and Broadband Settings51 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 29. 3. Enter the settings as explained

IPv4 and IPv6 Internet and Broadband Settings52ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 4. Click Apply to save your changes.SpeedIn mos

IPv4 and IPv6 Internet and Broadband Settings53 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NAdditional WAN-Related Configuration TasksIf you

5433. LAN ConfigurationThis chapter describes how to configure the LAN features of your wireless VPN firewall. The chapter contains the following se

LAN Configuration55 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318Nsame segment. The resources of other departments can be invisible to the mar

LAN Configuration56ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N When you create a VLAN profile, assign LAN ports to the VLAN, and enable the

LAN Configuration57 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 30. For each VLAN profile, the following fields display in the VLAN

LAN Configuration58ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N DHCP ServerThe default VLAN (VLAN 1) has the DHCP server option enabled by d

LAN Configuration59 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NLDAP ServerA Lightweight Directory Access Protocol (LDAP) server allows a us

6ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NConfigure Advanced Radio Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125T

LAN Configuration60ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 2. Click the Add table button under the VLAN Profiles table. The Add VLAN P

LAN Configuration61 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Enter the settings as explained in the following table: Table 11. Add V

LAN Configuration62ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Enable DHCP Server Select the Enable DHCP Server radio button to enable the

LAN Configuration63 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Click Apply to save your settings.Note: Once you have completed the LAN

LAN Configuration64ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To edit a VLAN profile:1. On the LAN Setup screen for IPv4 (see Figure 31

LAN Configuration65 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 33. 3. From the MAC Address for VLANs drop-down list, select Unique

LAN Configuration66ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To add a secondary LAN IPv4 address:1. Select Network Configuration >

LAN Configuration67 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N To delete one or more secondary LAN IP addresses:1. On the LAN Multi-homi

LAN Configuration68ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N • There is no need to use a fixed IP address on a computer. Because the IP a

LAN Configuration69 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe Known PCs and Devices table lists the entries in the network database. F

7ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NView the Wireless VPN Firewall IPSec VPN Log . . . . . . . . . . . . . . . . .221Manage IPSec V

LAN Configuration70ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 2. Click the Add table button to add the computer or device to the Known PC

LAN Configuration71 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 36. 2. Modify the settings as explained in Table 12 on page 69.3.

LAN Configuration72ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 2. Click the Edit Group Names option arrow to the right of the LAN submenu

LAN Configuration73 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NNote: The saved binding is also displayed on the IP/MAC Binding screen (see

LAN Configuration74ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N DHCPv6 server. For stateless DHCPv6, you need to configure the RADVD and adv

LAN Configuration75 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NConfigure the IPv6 LAN To configure the IPv6 LAN settings:1. Select Networ

LAN Configuration76ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 3. Enter the settings as explained in the following table. The IPv6 address

LAN Configuration77 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N4. Click Apply to save your changes.IPv6 LAN Address PoolsIf you configure

LAN Configuration78ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Figure 39. 2. Enter the settings as explained in the following table:3. C

LAN Configuration79 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NIPv6 LAN Prefixes for Prefix DelegationIf you configure a stateless DHCPv6 s

8ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NConfigure User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

LAN Configuration80ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Configure the IPv6 Router Advertisement Daemon and Advertisement Prefixes fo

LAN Configuration81 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N To configure the Router Advertisement Daemon for the LAN:1. Select Networ

LAN Configuration82ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 5. Click Apply to save your changes.Advertisement Prefixes for the LANYou n

LAN Configuration83 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 42. 2. Enter the settings as explained in the following table:3. C

LAN Configuration84ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To delete one or more advertisement prefixes:1. On the RADVD screen for t

LAN Configuration85 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NThe Available Secondary LAN IPs table displays the secondary LAN IP addresse

LAN Configuration86ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N firewall can be dedicated as a hardware DMZ port to safely provide services

LAN Configuration87 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 44. 2. Enter the settings as explained in the following table: Tabl

LAN Configuration88ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Do you want to enable DMZ Port? (continued)Subnet Mask Enter the IP subnet m

LAN Configuration89 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Click Apply to save your settings.DMZ Port for IPv6 TrafficThe DMZ Setup

9ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NPower LED Not On . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

LAN Configuration90ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N For the DMZ, there are two DHCPv6 server options:• Stateless DHCPv6 server.

LAN Configuration91 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N3. Enter the settings as explained in the following table: Table 19. DMZ S

LAN Configuration92ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 4. Click Apply to save your settings.IPv6 DMZ Address PoolsIf you configure

LAN Configuration93 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Enter the settings as explained in the following table:3. Click Apply t

LAN Configuration94ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Hosts and routers in the LAN use NDP to determine the link-layer addresses a

LAN Configuration95 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 47. 4. Enter the settings as explained in the following table:Table

LAN Configuration96ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 5. Click Apply to save your changes.Advertisement Prefixes for the DMZYou n

LAN Configuration97 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318NFigure 48. 2. Enter the settings as explained in the following table:3. C

LAN Configuration98ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N  To delete one or more advertisement prefixes:1. On the RADVD screen for t

LAN Configuration99 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N2. Click the Add table button under the Static Routes table. The Add Static