NETGEAR FR328S manuale d’uso

M-10207-01, Reference Manual v2 October 200 3 NETGEAR , Inc. 4500 Great America Parkway Santa Clara, CA 95 054 USA Phone 1-888-NETGEAR FR328S ProSafe Firewall with Dial Back-Up Reference Manual v2[...]

ii M-10207-01, Reference Manual v2 © 2003 by NETGEAR, Inc. Full Manual. All rights reserved. T rademarks NETGEAR and Auto Uplink are trademarks or regis ter ed trademarks of Netgear , Inc. Microsoft, W indows, and W indow s NT are registered trademar ks of Microsoft Corporation. Other brand and product names are registered tradem arks or trad emar[...]

M-10207-01, Reference Manual v2 iii Bestätigung des Hers tellers/Importeurs Es wird hiermit bestätigt, daß dasFR328S ProSafe Firewall with Dial Back-Up gemäß der im BMP T -Amtsb lVfg 243/ 1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betr eiben einiger Geräte (z.B. T estsender) kann jedoch gewissen Bes[...]

M-10207-01, Reference Manual v2 iv[...]

Contents v M-10207-01, Reference Manual v2 Content s Chapter 1 About This Manual Audience, V ersions, C onventions ................. ................ ............. ................ ................ ..... 1-1 How to Use this Manual .. ................. ................ ............. ................ ................ ............. ..... 1-2 How to Pr[...]

M-10207-01, Reference Manual v2 vi Contents How to Complete the Wizard-Detect ed Dyna mic IP Account Setup ... ................ ... 3-1 1 How to Complete Wizard-Detect ed Fixed IP Account Setup ........................... ... ... 3-12 Configuring a Serial Port as the Primary In ternet Connection ............ ................ .......... 3-13 How to [...]

Contents vii M-10207-01, Reference Manual v2 Considerations for Inbound Rules ... ............ ................. ............. ................ ...... 5-10 Outbound Rules (Service Blocking) .......... ......... ............. ................. ............ .......... 5-1 1 Outbound Rule Example: Blocking Instant Messenger ... ................ ......[...]

M-10207-01, Reference Manual v2 viii Contents MTU Size ........ ............. ................ ............. ............. ................ ............. ................ ..... 7-3 DHCP ........... ............ ............. ................. ............ ............. ................. ............ ............ 7-4 Use router as DHCP server ... ..[...]

Contents ix M-10207-01, Reference Manual v2 Private IP Addresses .......... ... .... ............. ... ... ... ... .... ............. ... ... ... .... ... ... ............. ... . B-7 Single IP Address Operation Using NA T ......... ................ ................ ................ .............. B-8 MAC Addresses and Address Re solution Protocol .[...]

M-10207-01, Reference Manual v2 x Contents Glossary Index[...]

About This Manual 1-1 M-10207-01, Reference Manual v2 Chapter 1 About This Manual Thank your for purcha sing the NETGEAR ™ FR328S ProSafe Firewall with Dial Back-Up. This chapter describes the target audience, versio ns, conventions, and features of this manual. Audience, V ersions, Conventions This reference manual assumes that the reader h as b[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 1-2 About This Manual M-10207-01, Reference Manual v2 How to Use this Manual The HTML versio n of this manual in cludes a variet y of navigation features as well as links to PDF versions of the full manual and individu al chapters. Figure Preface -2: HTML version of t his manual 1. Lef[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 About This Manual 1-3 M-10207-01, Reference Manual v2 How to Print this Manual T o print this manual you man choose one of th e following several optio ns, according to your needs. • Printing a “How T o” Sequence of S teps in the HTML V iew . Use the Print button on the upper righ[...]

[...]

Introduction 2-1 M-10207-01, Reference Manual v2 Chapter 2 Introduction This chapter describes the features of the N ETGEAR FR328S ProSafe Firewall with Dial Back-Up. The FR328S is a complete security solution th at protects your ne twork from att acks and intrusions. Unlike simple Internet sharing routers that rely on Network Address T ranslation [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 2-2 Introduction M-10207-01, Reference Manua l v2 • Remote Access Server (RAS) allows you to log in remotely through the serial port to access a server on your LAN, other LAN resources, or th e Internet based on a user name and password you define. • LAN-to-LAN access betwee n two [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Introduction 2-3 M-10207-01, Reference Manual v2 • Automatic Configuration of Attached PCs by DHCP The FR328S dynamically assigns network configuration information, in cluding IP , gateway , and domain name server (DNS) addresses, to attached PCs on the LAN using the Dynamic Host Conf[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 2-4 Introduction M-10207-01, Reference Manua l v2 • Browser-based management Browser-based configuration allows you to ea sily configure your firewall from almost any type of personal computer , such as W indows, Macintosh, or Linux. A user-friendly Setup W izard is provided and onli[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Introduction 2-5 M-10207-01, Reference Manual v2 The Firewall’ s Front Panel The front panel of the FR328S ( Figure 2-1 ) contain s status LEDs . Figure 2-1: FR328S Front Panel Y ou can use some of the LEDs to verify connections . T able 2-1 lists and describes each LED on the front p[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 2-6 Introduction M-10207-01, Reference Manua l v2 The Firewall’ s Rear Panel The rear panel of the FR3 28S ( Figure 2-2 ) con tains the co nnec tions identified below . Figure 2-2: FR328S Rear Panel V iewed from left to right, the rear panel contains the following elements: • DB-9 [...]

Connecting the Fire wa ll to the Internet 3-1 M-10207-01, Reference Manual v2 Chapter 3 Connecting the Firewall to the Internet This chapter describes how to set up the firewall on your Local Area Network (LAN), connect to the Internet, perform basic configuration of yo ur FR328S ProSafe Firewall with Dial Back-Up using the Setup W izard, or how to[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 3-2 Connecting the Firewall to the Intern et M-10207-01, Reference Manua l v2 Configuration Requirement s For the initial connection to the In ternet and configuration of yo ur firewall, you will need to connect a computer to th e firewall which is set to automatica lly get its TCP/IP [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to the Int ernet 3-3 M-10207-01, Reference Manual v2 Record Y o ur Internet Co nnection Information Print this page. Fill in the configuration parameters from your Internet Service Provider (ISP). ISP Login Name: The login name and password are case sensitive [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 3-4 Connecting the Firewall to the Intern et M-10207-01, Reference Manua l v2 Connecting the FR328S Fire wall to Y our LAN This section provides instructions for connecting the FR328S ProS afe Firewall with Dial Back-Up to your Local Area Network (LAN). Note: The Resource CD included w[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to the Int ernet 3-5 M-10207-01, Reference Manual v2 c. Connect the Ethernet cable ( A) from your Cable or DSL modem to the FR328S’ s Internet port. Figure 3-2: Connect the Cable or DSL Modem to the fir ewall d. Connect the Ethernet cable ( B) which came wit[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 3-6 Connecting the Firewall to the Intern et M-10207-01, Reference Manua l v2 e. T urn on the Cable or DSL modem and wait about 30 seconds for the lights to stop blinking. 2. Log in to the Fir ewall Note: T o connect to the firewall, your computer needs to be configured to obtain an IP[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to the Int ernet 3-7 M-10207-01, Reference Manual v2 A login window opens as shown in Figure 3-5 below: Figure 3-5: Login window d. For security reasons, the firewall has its own user name and password. When prompted, enter admin for the firewall User Name and[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 3-8 Connecting the Firewall to the Intern et M-10207-01, Reference Manua l v2 b. Select the NA T option and click Next to follow the steps in the Setup W izard to input the configuration parameters from your ISP to con n ect to the Internet. If you c hoose not to use NA T , each co mp [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to the Int ernet 3-9 M-10207-01, Reference Manual v2 When the W izard launches, select Y e s in the menu below to allow the firewall to automatically determine your connection. Figure 3-7: Se tup Wizard Note: If you do not see the Setup W izard, click th e Set[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 3-10 Connecting the Firewall to th e Internet M-10207-01, Reference Manua l v2 How to Complete the Wizard -Detected Login Account Setup If the Setup W izard determines that your Internet service account uses a login protocol such as PPP over Ethernet (PPPoE), you will be di rect ed to [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to th e Int er n et 3-11 M-10207-01, Reference Manual v2 4. Click Apply to save your settings. 5. Click T est to test your Internet connect ion. If th e NETGEAR website does not appear within one minute, refer to Chapter 8, T roubleshooting ”. How to Complet[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 3-12 Connecting the Firewall to th e Internet M-10207-01, Reference Manua l v2 3. The Router ’ s MAC Address is the Ethernet MAC address that will be used by the firewall on the Internet port. If your ISP allows access from only one specific computer ’ s Ethernet MAC addres s, sele[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to th e Int er n et 3-13 M-10207-01, Reference Manual v2 1. Enter your assigned IP Address, Subnet Mask , and the IP Address of your ISP’ s gateway router . This information should have been provided to you by your ISP . Y o u will need the configuration par[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 3-14 Connecting the Firewall to th e Internet M-10207-01, Reference Manua l v2 b. From the Setup Basic Settings menu, click S erial Port. Figure 3-1 1: Serial Internet Connection configurat ion menu c. Fill in the ISDN or analog ISP Internet configuration parameters as appropriate: •[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to th e Int er n et 3-15 M-10207-01, Reference Manual v2 Note: Y ou can validate modem string settings by first connectin g the modem directly to a PC, establishing a connection to your ISP , and then copying the modem string settings from the PC configuration[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 3-16 Connecting the Firewall to th e Internet M-10207-01, Reference Manua l v2 Manually Configuring Y our Internet Connection Y ou can manually configure your firewall using t he menu below , or you can allow the Setup W izard to determine your configuration as described in the previou[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to th e Int er n et 3-17 M-10207-01, Reference Manual v2 How to Manually Configure th e Primary Intern et Connection Use these steps to manually configure the primary Internet connection in th e Basic Settings menu. 1. Select your Internet connection type (bro[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 3-18 Connecting the Firewall to th e Internet M-10207-01, Reference Manua l v2[...]

Serial Port Configuration 4-1 M-10207-01, Reference Manual v2 Chapter 4 Serial Port Configuration This chapter describes how to configure th e serial port options of y our FR328S ProSafe Firewall with Dial Back-Up . The FR328S serial port lets y ou share the broadb and connection of anoth er FR328S, share resources between two LANs, and take advant[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 4-2 S erial Port Configuration M-10207-01, Reference Manua l v2 Configuring a Serial Port Modem Y ou can configure a seria l port modem for any of the features described above. Be sure you have prepared the basic re quirements listed below , then follow the ‘how to’ procedure. Basi[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Serial Port Con figuration 4-3 M-10207-01, Reference Manual v2 — If your modem is not on the list, select “U ser Defined” and enter the Modem Properties. If you are using the “User Defi ned” selection and configuring your own modem stings, fill in the Modem Properties settings[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 4-4 S erial Port Configuration M-10207-01, Reference Manua l v2 Figure 4-2: Auto-Rollover config uration menu 3. Configure the Auto-Rollover settings. 4. Click Apply for the changes to take effect . Configuring Dial-in on the Serial Port Dial-in lets a single remote computer connect to[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Serial Port Con figuration 4-5 M-10207-01, Reference Manual v2 Basic Requirement s for Dial-in Dial-in requires these elements: 1. A broadband co nnection to the F R328S. 2. An analog phone line. 3. A serial modem properly configured and attached to the DB9 co nn ector on the serial por[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 4-6 S erial Port Configuration M-10207-01, Reference Manua l v2 Configuring LAN-to-LAN Settings LAN-to-LAN enables di rect commun icat ions between two FR328S firewalls. Figure 4-4: LAN-to-LAN ne twork configuration Basic Requirement s for LAN-to-LAN Connections Serial port LAN-to-LAN [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Serial Port Con figuration 4-7 M-10207-01, Reference Manual v2 Figure 4-5: LAN-to-LAN configur ation menu 3. Configure the LAN-to-LAN settings. Note: The LAN subnet address of each FR328S must be dif ferent. 4. Click Apply for the changes to take effect .[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 4-8 S erial Port Configuration M-10207-01, Reference Manua l v2[...]

Protecting Your Network 5-1 M-10207-01, Reference Manual v2 Chapter 5 Protecting Y our Network This chapter describes how to use the basic firewa ll features of the FR328S ProSafe Firewall with Dial Back-Up to protect yo ur network. Protecting Access to Y our FR328S Firewall For security reasons, the firewall has its own user name and password. Als[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 5-2 Protecting Yo ur Network M-10207-01, Reference Manua l v2 2. From the Main Menu of the browser interface, under the Maintenanc e hea ding, select Set Password to bring up the menu shown in Figure 5-1 . Figure 5-1: Set Pass word menu 3. T o change the password, first enter the old p[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5-3 M-10207-01, Reference Manual v2 Blocking Keywords, Sites, and Services The firewall provides a variety of options for blocking Internet based content and communications services. W ith its content filtering feature, the FR328S Firewall prevents objectionable [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 5-4 Protecting Yo ur Network M-10207-01, Reference Manua l v2 2. Click on the Block Sites link of the Security menu. Figure 5-2: Block Sites menu 3. T o enable keyword blocking, check “T urn keyw ord blocking on”, enter a keyword or domain in the Keyword box, click Add Keyword, the[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5-5 M-10207-01, Reference Manual v2 Services Services are functions performed by server computers at the request of client computers. For example, W eb servers serve web pages, time serve rs serve time and date information, and game hosts serve data about other p[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 5-6 Protecting Yo ur Network M-10207-01, Reference Manua l v2 3. Modify the menu show n below for defining or editing a service. Figure 5-4: Add Services menu 4. Click Apply to save your changes. Rules Firewall rules are used to block or allow specific traffic passing thro ugh from o n[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5-7 M-10207-01, Reference Manual v2 T o access the Rules configuration of the FR328S, c lick the Rules link on the main menu, then click Add for either an Outbound or In bound Service. Figure 5-5. Rules menu • T o edit an existing rule, select its button on the[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 5-8 Protecting Yo ur Network M-10207-01, Reference Manua l v2 Remember that allowing inbound services opens holes in your fi rewall. Only enab le those ports that are necessary for yo ur network. Following are two ap plication examples of in bound rules: Inbound Rule Example: A Local P[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5-9 M-10207-01, Reference Manual v2 The parameters are: •S e r v i c e From this list, select the application or serv ice to be allowed or blocked. The list already displays many common services, but you ar e not limited to these choices. Use the Add Services m[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 5-10 Protecting Yo ur Networ k M-10207-01, Reference Manua l v2 Inbound Rule Example: Allowing V ideoconference from Restricted Addresses If you want to allow incoming vi deoconferencing to be initiated from a restricted range of outside IP addresses, such as from a branch office, you [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5 -1 1 M-10207-01, Reference Manual v2 Outbound Rules (Service Blo cking) The FR328S allows you to block the use of certain Internet services by PCs on your network. This is called service blocking or port filtering. Y ou ca n define an outbound rule to block Int[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 5-12 Protecting Yo ur Networ k M-10207-01, Reference Manua l v2 The parameters are: •S e r v i c e From this list, select the application or serv ice to be allowed or blocked. The list already displays many common services, but you ar e not limited to these choices. Use the Add Servi[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5 -1 3 M-10207-01, Reference Manual v2 Order of Precedence for Rules As you define new rules, they are added to the tables in the Rules menu, as shown in Figure 5-9 : Figure 5-9. Rules t able with examples For any traffic attempting to pass through the fire wall,[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 5-14 Protecting Yo ur Networ k M-10207-01, Reference Manua l v2 How to Set Y our Time Zone In order to localize the time for your log entries, you must specify your T ime Zone: 1. Log in to the firewall at its default LAN addr ess of http://192.168.0.1 with its default User Name of adm[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5 -1 5 M-10207-01, Reference Manual v2 Note: If your region uses Dayligh t Savings T i me, you must manually check Adjust for Daylight Savings T ime on the first day of Daylig ht Savings T ime, and uncheck it at the end. Enabling Daylight Savings T ime will cause[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 5-16 Protecting Yo ur Networ k M-10207-01, Reference Manua l v2[...]

Managing Your Network 6-1 M-10207-01, Reference Manual v2 Chapter 6 Managing Y our Network This chapter describes how to perform network management tasks with your FR328S ProS afe Firewall with Dial Back-Up. Network Management Information The FR328S provides a variety of status and usage information which is discussed below . V iewing Router St atu[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 6-2 Manag ing Your Netw ork M-10207-01, Reference Manua l v2 This screen shows the following parameters: T able 6-1. Menu 3.2 - Router St atus Fields Field Description System Name This field displays the Host Na me assigned to the firewall in the Basic Settings menu . Firmware V ersion[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-3 M-10207-01, Reference Manual v2 Click the “Show Statistics” button to disp lay firewall usage statistics, as shown in Figure 6-2 below: Figure 6-2. Router St atistics screen This screen shows the following statistics: T able 6-2. Router St atistics Fields F[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 6-4 Manag ing Your Netw ork M-10207-01, Reference Manua l v2 V iewing Att ached Devices The Attached Devices menu conta i n s a tab l e of all IP devices that the firewall has discovered on the local network. From the Main Menu of the browser interface, under the Maintenance heading, s[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-5 M-10207-01, Reference Manual v2 V iewing, Selecting, and Sa ving Logged Information The firewall will log security-related events su ch as denied incoming service requests, hacker probes, and administrator logins. If you enabled content filtering in the Block S[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 6-6 Manag ing Your Netw ork M-10207-01, Reference Manua l v2 Log entries are described in T able 6-5 Log action buttons are described in Ta b l e 6 - 6 Selecting What Information to Log Besides the standard information listed above, you can choose to log additional info rmation. Those [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-7 M-10207-01, Reference Manual v2 • Router operation (start up, get time, etc.) • Known DoS attacks and Port Scans Saving Log Files on a Server Y ou can choose to write the logs to a PC running a s yslog program. T o activate this feature, chec k the Enable S[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 6-8 Manag ing Your Netw ork M-10207-01, Reference Manua l v2 Enabling Security Event E-mail Notification In order to receive logs and alerts by e-mail, you must provide your e- mail information in the E-Mail subheading : Figure 6-7: E-mail notification men u • T urn e-mail notificati[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-9 M-10207-01, Reference Manual v2 • Send to this e-mail address Enter the e-mail address to which logs and alerts are sent. This e-mail ad dress will also be used as the From address. If you leave this box blank, log and alert messages will not be sent via e-ma[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 6-10 Managing Your Networ k M-10207-01, Reference Manua l v2 2. From the Maintenance heading of the Main Menu, select the Settings Backup menu a s seen in Figure 6-8 . Figure 6-8: Settin gs Back up menu 3. Click Backup to save a copy of the current set tings. 4. Sto r e t h e .cfg file[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-11 M-10207-01, Reference Manual v2 2. The firewall will then reboot automatically . After an erase, the firewall password will be password , the LAN IP address will be 192.168.0.1, and the router's DHCP client will be enabled. Note: T o restore the factory d[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 6-12 Managing Your Networ k M-10207-01, Reference Manua l v2 Enabling Remote Management Using the Remote Manageme nt page , you can allow a user or users on the Internet to configure, upgrade and ch eck the status of your FR328 S ProSafe Firewall with Dial Back-Up. How to Configure Rem[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-13 M-10207-01, Reference Manual v2 When accessing your router from th e Internet, you will type your router's W AN IP address into your browser's Address (in IE) or Loc ation (in Netscape) box, follo wed by a colon (:) and the custom port number . For e[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 6-14 Managing Your Networ k M-10207-01, Reference Manua l v2 5. Click Upload . Note: When uploading software to the firewall, it is important not to interrupt the W eb browser by closing the window , clickin g a link, or loading a new page . If the browser is interrupted, it may corrup[...]

Advanced Configuration 7-1 M-10207-01, Reference Manual v2 Chapter 7 Advanced Configuration This chapter describes how to configure the adva nced features of your FR328S ProSafe Firewall with Dial Back-Up. Configuring Advanced Security The FR328S ProSafe Firewall with Dial Back-Up pr ovides a variety of advanced features, such as: • Setting up a [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 7-2 Advanced Configuration M-10207-01, Reference Manua l v2 T o assign a computer or server to be a Default DMZ serve r: 1. Click Default DMZ Server . 2. T ype the IP address for that server . 3. Click Apply . Respond to Ping on Internet W AN Port If you want the firewall to respon d t[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Advanced Configur ation 7-3 M-10207-01, Reference Manual v2 • RIP Direction RIP (Router Information Protocol) allows a router to exchange routing information with other routers. The RIP Direction selection controls how the firewall sends and receives RIP packets. Both is the default. [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 7-4 Advanced Configuration M-10207-01, Reference Manua l v2 DHCP By default, the firewall will function as a DHCP (Dynamic Host Configur ation Protocol) server , allowing it to assign IP , DNS server , and defa ult gateway addresses to all computers connected to the router's LAN. [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Advanced Configur ation 7-5 M-10207-01, Reference Manual v2 Reserved IP addresses When you specify a reserved IP address for a PC on the LAN, that PC will always receive the same IP address each time it access the firewall’ s DHCP server . Res erved IP addresses should be assigned to [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 7-6 Advanced Configuration M-10207-01, Reference Manua l v2 2. From the Main Menu, un der Advanced , click the L AN IP Setup l ink to view the men u, shown in Figure 7-1 Figure 7-1: LAN IP Setup Menu 3. Enter the TCP/IP , MTU, or DHCP parameters. 4. Click Apply to save your changes. Co[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Advanced Configur ation 7-7 M-10207-01, Reference Manual v2 How to Configure Dynamic DNS 1. Log in to the firewall at its default LAN addr ess of http://192.168.0.1 with its default User Name of admin , default password of p assword , or using whatever password and LAN address you have [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 7-8 Advanced Configuration M-10207-01, Reference Manua l v2 Using S t atic Routes Stat ic Routes provide additional routing info rmation to your firewall. Under normal circumstances, the firewall has adequate routing info rmation after it has be en configured for Internet access, and y[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Advanced Configur ation 7-9 M-10207-01, Reference Manual v2 How to Configure St atic Routes 1. Log in to the firewall at its default LAN addr ess of http://192.168.0.1 with its default User Name of admin , default password of p assword , or using whatever P assword and LAN address you h[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 7-10 Advanced C onfiguration M-10207-01, Reference Manua l v2 h. T ype a number between 1 and 15 as th e Metric value. This represents the number o f routers between your ne twork and the destin ation. Usually , a setting of 2 or 3 works, but if this is a direct connect ion, set it to [...]

Troubleshooting 8-1 M-10207-01, Reference Manual v2 Chapter 8 T roubleshooting This chapter gives information about troubleshootin g your FR328S ProSafe Fi rewall with Dial Back-Up. For the common problems listed, go to the section indicated. • Is the firewall on? • Have I connected the firewall correctly? Go to “Basic Func tions“ on page 8[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 8-2 Troubleshooting M-10207-01, Reference Manua l v2 If a port’ s Link LED is lit, a link has been esta blished to the connected device. If a port is connected to a 100 Mbps device, veri fy that the port’ s 100 LED is lit. If any of these conditions does not occur , refer to the ap[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Troubleshooting 8-3 M-10207-01, Reference Manual v2 • Be sure you are using the correct cable: — When connecting the firewall’ s In ternet port to a cable or DSL m odem, use the cable that was supplied with the cable or DSL modem. This cable could be a standard straight-through Et[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 8-4 Troubleshooting M-10207-01, Reference Manua l v2 • Click the Refresh or Reload button in the W e b browser . The changes may have occu rred, but the W eb browser may be caching the old configuration. T roubleshooting the ISP Connection If your firewall is unable to a ccess the In[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Troubleshooting 8-5 M-10207-01, Reference Manual v2 • Y our ISP only allows one Ethernet MAC address to connect to Internet, and may check for your PC’ s MAC address. In this case: Inform your ISP that you ha ve bought a new ne twork device, and ask them to use the firewall’ s MAC[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 8-6 Troubleshooting M-10207-01, Reference Manua l v2 2. In the field provided, type Ping followed by the IP address of th e firewall, as in this example: ping 192.168.0.1 3. Click on OK. Y ou should see a message like this one: Pinging <IP address> with 32 bytes o f data If the p[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Troubleshooting 8-7 M-10207-01, Reference Manual v2 — Check that your PC has the IP address of y our firewall listed as the default gateway . If the IP configuration of your PC is assigned by DHCP , this information will not be visible in your PC’ s Network Control Panel. V erify th[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 8-8 Troubleshooting M-10207-01, Reference Manua l v2 1. Press and hold the Default Reset button until the T est LED turns on (about 10 seconds). Figure 8-1. Reset Button 2. Release the Default Reset button an d wait for the firewall to reboot. Problems with Date and Time The E-Mail men[...]

Technical Specifications A-1 M-10207-01, Reference Manual v2 Appendix A T echnical S pecifications This appendix provides techni cal specifications for the FR3 28S ProSafe Firewall with Dial Back-Up. Network Protocol and St andards Compatibility Data and Routing Protocols: TCP/IP , RIP-1, RIP-2, DHCP PPP over Ethernet (PPPoE) Power Adapter North Am[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 A-2 T echnical Specifications M-10207-01, Reference Manua l v2 Meets requirements of: FCC Part 15 Class B VCCI Class B EN 55 022 (CISPR 22 ), Class B Interface S p ecifications Local: 10BASE-T or 100BASE-Tx, RJ-45 Internet: 10BASE-T or 100BASE-Tx, RJ-45[...]

Networks, Routing, and Firewall Basics B-1 M-10207-01, Reference Manual v2 Appendix B Networks, Routing, and Firewall Basics This chapter provides an overview of IP networks, routing, and n etworking. Related Publications As you read this document, you may be dire cted to various RF C documents for further information. An RFC is a Request For Comme[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 B-2 Networks, Routing, and Firewall Basics M-10207-01, Reference Manua l v2 Routing Information Protocol One of the protocol s used b y a rout er to b uild an d maintain a picture of the network is the Routing Information Protocol (RIP). Us ing RIP , routers periodically update one ano[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-3 M-10207-01, Reference Manual v2 There are five standard classes of IP addresses. The se address classes have different ways of determining the network and host sections of the address, allowing for different numbers of hosts on a network. Each [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 B-4 Networks, Routing, and Firewall Basics M-10207-01, Reference Manua l v2 • Class D Class D addresses are used for multicasts (message s sent to many hosts). Class D addresses are in this range: 224.0.0.0 to 239.255.255.255. • Class E Class E addresses are for experimental use. T[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-5 M-10207-01, Reference Manual v2 Subnet Addressing By looking at the addressing structures, you can se e that even with a Class C address, there are a large number of hosts per network. Such a structure is an inef ficient use of addresses if eac[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 B-6 Networks, Routing, and Firewall Basics M-10207-01, Reference Manua l v2 The following table lists the additional subnet mask bits in dotted-decimal notation. T o use the table, write down the original class netmask and replace the 0 value octets with the dotted-decimal value of the[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-7 M-10207-01, Reference Manual v2 Configure all hosts on a LAN segment to use the same netmask for the following reasons: • So that hosts recognize local IP broadcast packets When a device broadcasts to its segment neighb ors, it uses a destina[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 B-8 Networks, Routing, and Firewall Basics M-10207-01, Reference Manua l v2 Single IP Address Operation Using NA T In the past, if multiple PCs on a LAN needed to access the Internet simultaneously , you had to obtain a range of IP addresses from the ISP . This type of Internet account[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-9 M-10207-01, Reference Manual v2 This scheme offers t he additional benefit of firewall -like protection because the internal LAN addresses are not available to the Internet thro ugh the translated connection. All incoming inquiries are filtered[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 B-10 Networks, Routing, and Firewall Ba sics M-10207-01, Reference Manua l v2 Domain Name Server Many of the resources on the In ternet can be addressed by si mple descriptive names such as www .NETGEAR.com . This addressing is very helpful at th e application level , but the descripti[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-11 M-10207-01, Reference Manual v2 What is a Firewall? A firewall is a device that protects one netw ork from another , while allowing communication between the two. A firewall incorporates the functi ons of the NA T router , while adding feature[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 B-12 Networks, Routing, and Firewall Ba sics M-10207-01, Reference Manua l v2 . Category 5 Cable Quality Category 5 distributed cable that me ets ANSI/EIA/ TIA-568-A building wiring stan dards can be a maximum of 328 feet (ft.) or 10 0 meters (m) in length, div ided as follows: 20 ft. [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-13 M-10207-01, Reference Manual v2 Inside T wisted Pair Cables For two devices to communicate, th e transmitter of each device must be connected to the receiver of the other device. The cro sso ver function is usually implemented inte rnally as p[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 B-14 Networks, Routing, and Firewall Ba sics M-10207-01, Reference Manua l v2 Figure 8-7: Category 5 UTP Cable with Male RJ-45 Plug at Each End Note: Flat “silver satin” telephone cable may ha ve the same RJ-45 plug. However , using telephone cable results in excessive collisions, [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-15 M-10207-01, Reference Manual v2 The FR328S Firewall incorporates Auto Uplink TM technology (also ca lled MDI/MDIX). Each LOCAL Ethernet port will automati cally sense whether the Ethernet cable pl ugged into the port should have a no rmal co n[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 B-16 Networks, Routing, and Firewall Ba sics M-10207-01, Reference Manua l v2[...]

Preparing Your Netwo rk C-1 M-10207-01, Reference Manual v2 Appendix C Prep aring Y our Network This appendix describes how to prepare your ne twork to connect to the Int ernet through the FR328S ProSafe Firewall with Dial Back-Up an d how to verify the readiness of broadband Internet service from an Inte rnet service provider (ISP). Prep aring Y o[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 C-2 Preparing Yo ur Networ k M-10207-01, Reference Manua l v2 In your IP network, each PC and the firewall must be assigned a unique IP addresses. Each PC must also have certain other IP configuration information such as a subn et mask (netmask), a domain name s erver (DNS) address, an[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Preparing Your Netwo rk C-3 M-10207-01, Reference Manual v2 Y ou must have an Ethernet adapter , the TCP/IP protocol, and Client for Microsoft Networks. If you need to install a ne w adapter , follow these steps: a. Click the Add button. b. Select Adapter , and then click Add. c. Select[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 C-4 Preparing Yo ur Networ k M-10207-01, Reference Manua l v2 If you need Client for Micro soft Networks: a. Click the Add button. b. Select Client, and then click Ad d. c. Select Microsoft. d. Select Client for Microsoft Networks, and then click OK. 3. Restart your PC for the changes [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Preparing Your Netwo rk C-5 M-10207-01, Reference Manual v2 5. Uncheck all boxes in the LAN Internet Configuration screen and click Next. 6. Proceed to the end of th e W izard. V e rifying TCP/IP Properties After your PC is configured and has rebooted, you can check the TCP/IP co nfigur[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 C-6 Preparing Yo ur Networ k M-10207-01, Reference Manua l v2 5. V erify that ‘Client for Microsoft Networks’ and ‘Internet Protocol (TCP/IP)’ are present. If not, select Install and add them. 6. Select ‘Internet Protocol (TCP/IP)’, click Prop erties, and verify that “Obt[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Preparing Your Netwo rk C-7 M-10207-01, Reference Manual v2 The TCP/IP Control Panel opens: 2. From the “Connect via” box, select your Macintosh’ s Ethernet interface. 3. From the “Configure” box, select Using DHCP Server . Y ou can leave the DH CP Client ID box empty . 4. Clo[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 C-8 Preparing Yo ur Networ k M-10207-01, Reference Manua l v2 V e rifying TCP/IP Properties for Macintosh Computers After your Macintosh is configured and has rebo oted, you can check the TC P/IP configuration by returning to the TCP/IP Control Panel. From th e Apple menu, select Contr[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Preparing Your Netwo rk C-9 M-10207-01, Reference Manual v2 V erifying the Readiness of Y our Internet Account For broadband access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using a cable modem or DSL mode m. [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 C-10 Preparin g Your Network M-10207-01, Reference Manua l v2 • An IP address and subnet mask • A gateway IP address, which is the address of the ISP’ s router • One or more domain name server (DNS) IP addresses • Host name and domain suf fix For example, your account’ s fu[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Preparing Your Netwo rk C-11 M-10207-01, Reference Manual v2 If an IP address appears under Installed Gatewa ys, write down the address. This is the ISP’ s gateway address. Select the address and then click Remove to remove the gateway address. 6. Select the DNS Configuration tab. If [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 C-12 Preparin g Your Network M-10207-01, Reference Manua l v2 Rest arting the Network Once you’ve set up yo ur computers to work with the fi rewall, you must reset the network for the devices to be able to communicat e correctly . Restart a ny computer that is connected to the firewa[...]

M-10207-01, Reference Manual v2 Glossary 1 Glossary Use the list below to find definitions for technical terms used in this manual. 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. 100BASE-Tx IEEE 802.3 specification for 100 Mbps Ethernet over twisted pair wiring. Access Control Lis t (ACL) An ACL is a database that [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 2 Glossary M-10207-01, Reference Manual v2 Broadcast A packet sent to all devices on a network. Class of Service A term to describe treating different types of traffic with dif ferent level s of service priority . Hig her priority traffic gets faster treatment during times of switch co[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Glossary 3 M-10207-01, Reference Manual v2 (known as the upstream rate). ADSL requires a special ADSL modem. ADSL is growing in popu larity as more areas around the world gain access. DSLAM DSL Access Multiplexor . The piece of equipment at th e telephone company centra l of fice that p[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 4 Glossary M-10207-01, Reference Manual v2 recognizes the packet as belonging to a computer within its immediate neighborho od or domain. That gateway then forwards the packet directly to the computer whose address is specified. Because a message is divided into a number of packets, ea[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Glossary 5 M-10207-01, Reference Manual v2 MAC address The Media Access Control address is a unique 48-bit hardware address assigned to every network interface card. Usually written in the form 01:23:45 :67: 89:ab. Maximum Receive Unit The size in bytes of the largest pack et that can b[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 6 Glossary M-10207-01, Reference Manual v2 PPP over Ethernet PPPoE. PPP over Ether net is a prot ocol for connecting rem ote hosts to the Internet over an always-on connection by simulati ng a dial-up conn ectio n. PPTP Point-t o-Point T unnelin g Protocol. A met hod for esta blishing [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Glossary 7 M-10207-01, Reference Manual v2 WA N See “W ide Area Network” Web Also known as W orld-Wide W eb (WWW) or W3. An Intern et client-server system to distribute information, based upon the hypertext transfer proto col (H TTP). WEB Proxy Server A W eb proxy server is a specia[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v 2 8 Glossary M-10207-01, Reference Manual v2[...]

Index 1 M-10207-01, Reference Manual v2 A Account Name 3-10, 3-1 1, 3-17 Address Resolution Protocol B-9 Austria 3-17 Auto MDI/MDI-X B-15, G-1 Auto Uplink 2-3, B-15, G-1 B backup configuration 6-9 BigPond 3-17 C Cabling B-1 1 Cat5 cable 3-1, B-12, G-2 configuration automatic by DHCP 2-3 backup 6-9 erasing 6-10 router , initial 3-1 crossover cable 2[...]

2 Index M-10207-01, Reference Manual v2 I IANA contacting B-2 IETF B-1 W eb site address B-7 inbound rules 5-7 installation 2-3 Internet account address information C-9 establishing C-9 IP addresses C-10, C-11 and NA T B- 8 and the Internet B-2 assigning B-2, B-9 auto-generated 8-3 private B-7 translating B-9 IP configuration by DHCP B-10 IP networ[...]

Index 3 M-10207-01, Reference Manual v2 publications, related B-1 R rear panel 2-6 reserved IP addresses 7-5 reset button, clearing config 8-7 restore factory settings 6-10 RFC 1466 B-7, B-9 1597 B-7, B-9 1631 B-8, B-9 finding B-7 RIP (Router Information Protocol) 7-3 router concepts B-1 Routing Information Protocol 2-2, B-2 R TS Threshold 4-3, 4-5[...]