NETGEAR FVS124G инструкция обслуживания

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238

Идти на страницу of

Хорошее руководство по эксплуатации

Законодательство обязывает продавца передать покупателю, вместе с товаром, руководство по эксплуатации NETGEAR FVS124G. Отсутствие инструкции либо неправильная информация, переданная потребителю, составляют основание для рекламации в связи с несоответствием устройства с договором. В законодательстве допускается предоставлении руководства в другой, чем бумажная форме, что, в последнее время, часто используется, предоставляя графическую или электронную форму инструкции NETGEAR FVS124G или обучающее видео для пользователей. Условием остается четкая и понятная форма.

Что такое руководство?

Слово происходит от латинского "instructio", тоесть привести в порядок. Следовательно в инструкции NETGEAR FVS124G можно найти описание этапов поведения. Цель инструкции заключается в облегчении запуска, использования оборудования либо выполнения определенной деятельности. Инструкция является набором информации о предмете/услуге, подсказкой.

К сожалению немного пользователей находит время для чтения инструкций NETGEAR FVS124G, и хорошая инструкция позволяет не только узнать ряд дополнительных функций приобретенного устройства, но и позволяет избежать возникновения большинства поломок.

Из чего должно состоять идеальное руководство по эксплуатации?

Прежде всего в инструкции NETGEAR FVS124G должна находится:
- информация относительно технических данных устройства NETGEAR FVS124G
- название производителя и год производства оборудования NETGEAR FVS124G
- правила обслуживания, настройки и ухода за оборудованием NETGEAR FVS124G
- знаки безопасности и сертификаты, подтверждающие соответствие стандартам

Почему мы не читаем инструкций?

Как правило из-за нехватки времени и уверенности в отдельных функциональностях приобретенных устройств. К сожалению само подсоединение и запуск NETGEAR FVS124G это слишком мало. Инструкция заключает ряд отдельных указаний, касающихся функциональности, принципов безопасности, способов ухода (даже то, какие средства стоит использовать), возможных поломок NETGEAR FVS124G и способов решения проблем, возникающих во время использования. И наконец то, в инструкции можно найти адресные данные сайта NETGEAR, в случае отсутствия эффективности предлагаемых решений. Сейчас очень большой популярностью пользуются инструкции в форме интересных анимаций или видео материалов, которое лучше, чем брошюра воспринимаются пользователем. Такой вид инструкции позволяет пользователю просмотреть весь фильм, не пропуская спецификацию и сложные технические описания NETGEAR FVS124G, как это часто бывает в случае бумажной версии.

Почему стоит читать инструкции?

Прежде всего здесь мы найдем ответы касательно конструкции, возможностей устройства NETGEAR FVS124G, использования отдельных аксессуаров и ряд информации, позволяющей вполне использовать все функции и упрощения.

После удачной покупки оборудования/устройства стоит посвятить несколько минут для ознакомления с каждой частью инструкции NETGEAR FVS124G. Сейчас их старательно готовят или переводят, чтобы они были не только понятными для пользователя, но и чтобы выполняли свою основную информационно-поддерживающую функцию.

Содержание руководства

  • Страница 1

    202-10085-01, Ma rch 2005 202-10085-01 March 2005 NETGEAR , Inc. 4500 Great America Parkway Santa Clara, CA 95 054 USA Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual W AN Port s FVS124G[...]

  • Страница 2

    2 202-10085-01, Ma rch 2005 © 2005 by NETGEAR, Inc. All rights reserved. T rademarks NETGEAR is a trademark of Netge ar , Inc. Microsoft, W indows, and W indow s NT are registered trademar ks of Microsoft Corporation. Other brand and product names are registered tradem arks or trad emarks of their respective holders. St atement of Conditions In th[...]

  • Страница 3

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts -3 202-10085-01, March 2005 Certificate of the Manufactu rer/Importer It is hereby certified that the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN a nd Dual W AN Ports has been suppressed in accordance with the conditions set out in the BMP T -Amtsb l[...]

  • Страница 4

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -4 202-10085-01, March 2005 Open SSL Copyright (c) 1998-2000 The OpenSSL Project. All rights reserved. Redistribution and use in source and binary forms, with or withou t modification, are permitted provided that the follo wing conditions * are met: 1. Redistri[...]

  • Страница 5

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts -5 202-10085-01, March 2005 MD5 Copyright (C) 1990, RSA Data Se curity , Inc. All rights reserved. License to copy and u se this software is granted provided that it is identified as the "RSA Data Security , Inc. MD5 Message-Digest Algori thm" in [...]

  • Страница 6

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -6 202-10085-01, March 2005 Product and Publication Det ails Model Number: FVS124G Publication Date: March 2005 Product Family: Router Product Name: FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Home or Business Prod uc t: Business Langu[...]

  • Страница 7

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts -1 202-10085-01, March 2005 Content s Chapter 1 About This Manual Audience, Scope, Conventions, and Formats . ......... ................. ................ ................ ..... 1-1 How to Use This Manual ................. ................ ................ [...]

  • Страница 8

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -2 202-10085-01, March 2005 Inbound T raffic .................... ................ ................ ................ ................ ................ ........... .3 - 3 Inbound T raf fic to Single WAN Port (Reference Case) ....... ................... .........[...]

  • Страница 9

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts -3 202-10085-01, March 2005 Load Balancing (and Protocol Binding) Setup . ................... ................... .......... 4-17 S tep 5: Configure Dynamic DNS (If Needed) .................. .... ... ... ... .... ... ... ... ... .... ... ... 4-20 S tep 6: [...]

  • Страница 10

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -4 202-10085-01, March 2005 Creating a VPN Connection: Between FVX538 and FVS124G ....... ................ ............... 7-5 Configuring the FVX538 ............ ................ ................ ................ ................ ............... 7-5 Configurin[...]

  • Страница 11

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts -5 202-10085-01, March 2005 W AN Port Connection S tatus ....... ................ ................. ................ ................ ... 8-18 Dynamic DNS S tatus ...... ................. ................ ................ ................ ................ 8[...]

  • Страница 12

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -6 202-10085-01, March 2005 Routing Information Protocol .................. ... ............. ................ ............. ................ .... B-2 IP Addresses and the Internet ............... ... .... ... ............. ................ ................ ...[...]

  • Страница 13

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts -7 202-10085-01, March 2005 MacOS X ...................... ... ... ... .... ............. ... ... ... ... .... ... ... ... .... ... ... ............. ... ... .... ... .. C-16 V erifying TCP/IP Properties for Macintos h Computers ....... ... ... ... .... ...[...]

  • Страница 14

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -8 202-10085-01, March 2005 C ............... ................ ............. ................ ................ ................ ................. ............ Glos sary -3 D ............... ................ ............. ................ ................ ......[...]

  • Страница 15

    About This Manual 1-1 202-10085-01, March 2005 Chapter 1 About This Manual This chapter describes the intended audience, sc ope, conventions, and formats of this manual. Audience, Scope, Conventions, and Format s This reference manual assumes that the reader h as basic to interme diate computer and Internet skills. However , basic comp uter network[...]

  • Страница 16

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 1-2 About This Manual 202-10085-01, March 2005 How to Use This Manual The HTML version of this ma nual includes the following: • Buttons, and , for browsing forwards or backwards through the manual one pag e at a time • A button that displays the table of c[...]

  • Страница 17

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts About This Manual 1-3 202-10085-01, March 2005 How to Print this Manual T o print this manual you can choose one of the fo llowing several options, a ccording to your needs. • Printing a Page in the HTML V iew . Each page in the HTML version of the manu a[...]

  • Страница 18

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 1-4 About This Manual 202-10085-01, March 2005[...]

  • Страница 19

    Introduction 2-1 202-10085-01, March 2005 Chapter 2 Introduction This chapter describes the features of the NETG EAR FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual W A N Ports. Key Features of the VPN Firewall The FVS124G ProSafe VPN Firewall 25 with 4 Gi gabit LAN and Dual W AN Ports with 4 port switch connects your local area network[...]

  • Страница 20

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 2-2 Introduction 202-10085-01, March 2005 • Front panel LEDs for easy monito ring of status and activ ity . • Flash memory for firmware upgrade. Dual W AN Port s for Increased Re liability or Outbound Load Balancing The FVS124G VPN Firewall has two br oa db[...]

  • Страница 21

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Introduction 2-3 202-10085-01, March 2005 • W ith its URL keyword filtering feature, the FVS124G prevents objectionable content from reaching your PCs. The firewall allows y ou to control access to Internet content by screening for keywords within W eb ad[...]

  • Страница 22

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 2-4 Introduction 202-10085-01, March 2005 Extensive Protocol Support The FVS124G VPN Firewall supports the Transmission Control Protocol/Internet Protocol (TCP/ IP) and Routing Information Protocol (RIP). For further informat ion about TCP/IP , refer to Appendi[...]

  • Страница 23

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Introduction 2-5 202-10085-01, March 2005 •V P N W i z a r d The FVS124G VPN Firewall includes the NETGEA R VPN W izard to easily configure VPN tunnels according to th e recomm endations of th e V irtual Private Network Consortium (VPNC) to ensure the VPN[...]

  • Страница 24

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 2-6 Introduction 202-10085-01, March 2005 • Resour ce CD for Pr oSafe VPN Fir ewall 25 with 4 Gigabit LAN a nd Dual W AN Ports , including: – This guide. – Application Notes and ot her helpful information. – ProSafe VPN Client Softwa re - single user li[...]

  • Страница 25

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Introduction 2-7 202-10085-01, March 2005 The Router’ s Rear Panel The rear panel of the FVS124G ProSafe VPN Fi rewall 25 with 4 Gigabit LAN and Dual W AN Ports ( Figure 2-2 ) contains the factory defaults reset bu tton, LAN and W AN ports, and DC power i[...]

  • Страница 26

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 2-8 Introduction 202-10085-01, March 2005 Figure 2-2: FVS124G Rear Panel V iewed from left to right, the rear panel contains the following elements: The Router’ s IP Address, Login Name, and Password Check the label on the bottom of the FVS124G’ s enclosure[...]

  • Страница 27

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Introduction 2-9 202-10085-01, March 2005 Figure 2-3: FVS124G Bottom Label Logging into the Router T o log into the FVS124 G once it is connected, 1. Open a W eb browse r . 2. Enter http://192.168.1 .1 as the URL. 3. Once you get the logi n screen ( Figure [...]

  • Страница 28

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 2-10 Introduction 202-10085-01, March 2005 Figure 2-4: Login screen on t he Web bro wse r Note: Read-only acces s is provided by logging in as username guest and default password password . Default Factory Settings When you first receive your FVS124G, the defau[...]

  • Страница 29

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Introduction 2-11 202-10085-01, March 2005 NETGEAR Related Product s NETGEAR products related to the FVS124G ProS afe VPN Firewall 25 with 4 Gigabit LAN and Dual W AN Ports are as follows: • F A31 1 10/100 PCI Adapter • F A51 1 10/100 32-bit CardBus Ada[...]

  • Страница 30

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 2-12 Introduction 202-10085-01, March 2005[...]

  • Страница 31

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network Planning 3-1 202-10085-01, March 2005 Chapter 3 Network Planning This chapter describes the factors to consider when planning a ne twork using a firewall that has dual W A N ports. Overview of the Planning Process The areas that require planning whe[...]

  • Страница 32

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 3-2 Network Planning 202-10085-01, March 2005 The Rollover Case for Firewa lls With Dual W AN Ports Rollover ( Figure 3-1 ) for the dual W AN port case is differ ent from the single gateway W A N port case when specifying the IP address. Only one W A N port is [...]

  • Страница 33

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network Planning 3-3 202-10085-01, March 2005 Inbound T raffic Incoming traf fic from the Internet is normally discarded by the firewall unless the traffic is a response to one of your local computers or a servi ce that you have configured in the Inbound Ru[...]

  • Страница 34

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 3-4 Network Planning 202-10085-01, March 2005 Inbound T raffic: Dual W AN Ports for Imp roved Reliability In the dual W AN port case with rollover ( Figure 3-4 ), the W AN’ s IP address will always change at rollover . A fully-qualified domain name must be u [...]

  • Страница 35

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network Planning 3-5 202-10085-01, March 2005 V irtual Private Networks (VPNs) When implementing virtual private network (VPN) tunnels, a mechanis m must be used for determining the IP addresses of the tunnel end po ints. The addressing of the firewall’ s[...]

  • Страница 36

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 3-6 Network Planning 202-10085-01, March 2005 Figure 3-6: Dual gateway W AN ports befor e and af ter rollover • Load Balancing Case for Dual Gateway W AN Ports Load balancing ( Fig ure 3-7 ) for the dual gateway W AN port case is the same as the single gatewa[...]

  • Страница 37

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network Planning 3-7 202-10085-01, March 2005 Figure 3-8: Single gateway W AN port case for VPN road warrior The IP address of the gateway W AN port can be either fixed or dynamic. If the IP address is dynamic, a fully-qualified domain name must b e used. I[...]

  • Страница 38

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 3-8 Network Planning 202-10085-01, March 2005 After a rollover of the gateway W AN port ( Figure 3-10 ), the previously inactive gateway W AN port becomes the active port (port W AN2 in th is example) and the remote PC client must re-establish the VPN tunnel. T[...]

  • Страница 39

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network Planning 3-9 202-10085-01, March 2005 The IP addresses of the gateway W AN ports can be either fixed or dynamic. If an IP address is dynamic, a fully-qualified domain name must b e used. If an IP address is fixed, a fully-qualified domain name is op[...]

  • Страница 40

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 3-10 Network Planning 202-10085-01, March 2005 VPN Gateway-to-Gateway: Dual Gateway W AN Ports for Imp roved Reliability In the case of the dual W AN ports on the ga teway VPN firewall ( Figure 3-13 ), either of the gateway W AN ports at one end can initiate th[...]

  • Страница 41

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network Planning 3-11 202-10085-01, March 2005 Figure 3-14: Dual gateway W AN ports, af ter rollover , for gateway-to-gateway VPN tunnels The purpose of the fully-qualified do main names is this case is to toggle the domain name of the failed-over gateway f[...]

  • Страница 42

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 3-12 Network Planning 202-10085-01, March 2005 The IP addresses of the gateway W AN ports can be either fixed or dynamic. If an IP address is dynamic, a fully-qualified domain name must b e used. If an IP address is fixed, a fully-qualified domain name is optio[...]

  • Страница 43

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network Planning 3-13 202-10085-01, March 2005 VPN T elecommuter: Dual Gateway W AN Ports for Impro ved Reliability In the case of the dual W AN ports on the ga teway VPN firewall ( Figure 3-17 ), the remote PC client initiates the VPN tunnel with the activ[...]

  • Страница 44

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 3-14 Network Planning 202-10085-01, March 2005 The purpose of the fully-qualified do main name is this case is to toggle the domain name of the gateway router between the IP addresses of the ac tive W AN port (i.e., W AN1 and W AN2) so that the remote PC client[...]

  • Страница 45

    Connecting the FV S124G to th e Internet 4-1 202-10085-01, March 2005 Chapter 4 Connecting the FVS124G to the Internet This chapter describes how to connect the W AN ports of the FVS124G VPN Firewall to the Internet. What Y ou Will Need to Do Before Y ou Begin The FVS124G ProSafe VPN Firewall 25 with 4 Gi gabit LAN and Dual W AN Ports is a powerful[...]

  • Страница 46

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-2 Connecting the FVS124G to the Intern et 202-10085-01, March 2005 – Y ou can also add your own service protocols to the list (see “Services-Based Rules” on page 6-4 for information on how to do this). 2. Set up your accounts a. Have active Internet ser[...]

  • Страница 47

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-3 202-10085-01, March 2005 Y ou make these selections during “S tep 2: Log in to the VPN Firewall (Required)” on page 4- 7 . • There are a variety of W AN options you can choose when the factory default settin[...]

  • Страница 48

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-4 Connecting the FVS124G to the Intern et 202-10085-01, March 2005 Internet Configuration Requirement s Depending on how your ISPs set up your Internet accounts, you will need one or more of these configuration parameters to connec t your firewall to the Inte[...]

  • Страница 49

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-5 202-10085-01, March 2005 Record Y our Internet Co nnection Information Print this page. Fill in the configuration parameters from your Internet Service Provider (ISP). ISP Login Name: The login name and password a[...]

  • Страница 50

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-6 Connecting the FVS124G to the Intern et 202-10085-01, March 2005 Connecting the FVS124G ProSaf e VPN Firewall 25 with 4 Gigabit LAN and Dual W AN Port s This section provides instructio ns for connecting the FVS124G VPN Firewall. Also, the Resour ce CD for [...]

  • Страница 51

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-7 202-10085-01, March 2005 S tep 1: Physically Connect the VPN Firewall to Y our Network (Required) 1. T urn off your computer and Cable or DSL Modem. 2. Disconnect the Ethernet cable from your comput er which conne[...]

  • Страница 52

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-8 Connecting the FVS124G to the Intern et 202-10085-01, March 2005 Figure 4-2: Login screen on t he Web bro wse r 2. For security reasons, the firewall has its own us er name and passw ord. When prompted, enter admin for the firewall user name and pas sw o r [...]

  • Страница 53

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-9 202-10085-01, March 2005 Figure 4-3: W AN1 and W AN2 Basic Settings and Setup Wizard Screens W AN1 screens WA N 2 s c r e e n s[...]

  • Страница 54

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-10 Connecting the FVS124 G to the Internet 202-10085-01, March 2005 b. Click Setup W izard on the W AN1 ISP Settings screen to get the Setup W izard (W AN1) screen. c. Click Next and follow the steps in the W AN1 Setup W izard for inputting the configuration [...]

  • Страница 55

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-11 202-10085-01, March 2005 2. The steps to configure W AN port 2 are a s follows: a. Repeat the above steps to set up the paramete rs for ISP2. Start by clicking the W AN2 ISP link directly under W AN Setup on the [...]

  • Страница 56

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-12 Connecting the FVS124 G to the Internet 202-10085-01, March 2005 Manually Configuring Y our Internet Connection Y ou can manually configure your firewall using th e menu below if you do not want to allow t he Setup W izard to determine yo ur configuration [...]

  • Страница 57

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-13 202-10085-01, March 2005 Programming the T raffic Meter (if Desired) From the Main Menu of the browser interface, un der W AN Setup, click Traf fic Meter . Y ou will get the screens shown in Figure 4-5 . Fill out[...]

  • Страница 58

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-14 Connecting the FVS124 G to the Internet 202-10085-01, March 2005 T able 4-1. T raffic meter Parameter Description Enable T raffic Meter Check this if you wish to record the volume of Internet traffic passing through the Router's WAN1 or W AN2 port.W A[...]

  • Страница 59

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-15 202-10085-01, March 2005 S tep 4: Configure the W AN Mode (Required for Dual W AN) The dual W AN ports of the FVS124G ProSafe VP N Firewall 25 with 4 Gigabit LAN and Dual W AN Ports can be configured on a mutuall[...]

  • Страница 60

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-16 Connecting the FVS124 G to the Internet 202-10085-01, March 2005 Rollover Setup Perform the following steps to config ure the dual W AN ports for rollover: 1. Click the W AN Mode link directly under Setup on the upper left of the main menu to invoke the W [...]

  • Страница 61

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-17 202-10085-01, March 2005 • T est Period—DNS query is sent periodically after every test period. The minimum test period is 30 seconds. • Maximum Failures—The W AN interface is consid ered down after the c[...]

  • Страница 62

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-18 Connecting the FVS124 G to the Internet 202-10085-01, March 2005 Figure 4-7: W AN Mode screen for load balancing and protocol binding Fill out the screen using the fol lowing parameter definitions: • Detection of W AN failure—W AN failure is detected u[...]

  • Страница 63

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-19 202-10085-01, March 2005 • T est Period—DNS query is sent periodically after every test period. The minimum test period is 30 seconds. • Maximum Failures—The W AN interface is consid ered down after the c[...]

  • Страница 64

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-20 Connecting the FVS124 G to the Internet 202-10085-01, March 2005 S tep 5: Configure Dynamic DNS (If Needed) If your network has a pe rman ently assigned IP addr ess, you ca n register a domain name and have that name linked with y our IP address by public [...]

  • Страница 65

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-21 202-10085-01, March 2005 Figure 4-8: Dynamic DNS screens Dynamic DNS scr een for r ollover mode Dynamic D NS screens for load bal ancing mode[...]

  • Страница 66

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-22 Connecting the FVS124 G to the Internet 202-10085-01, March 2005 Each DNS service provider requires its own paramete rs ( Figure 4-9 ). Figure 4-9: Dynamic DNS service pro vider sc reens 3. Access the website of one of the dynamic DNS service providers who[...]

  • Страница 67

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Connecting the FVS124G to the In ternet 4-23 202-10085-01, March 2005 S tep 6: Configure the W AN Options (If Needed) Perform the following steps to configure the W AN options: 1. If you haven’t already , log in to the firewall at its default LAN address [...]

  • Страница 68

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 4-24 Connecting the FVS124 G to the Internet 202-10085-01, March 2005 • Port Speed—In most cases , your router can automatically determin e the connection speed of the Internet (W AN) port. If you cannot esta blish an Internet conn ection and the Internet L[...]

  • Страница 69

    LAN Configuration 5-1 202-10085-01, March 2005 Chapter 5 LAN Configuration This chapter describes how to configure the ad vanced features of your FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual W AN Po rts. These features can be found under the Advanced heading in the Main Menu of the browser interface. • LAN Setup •S t a t i c R o [...]

  • Страница 70

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 5-2 LAN Configuration 202-10085-01, March 2005 Figure 5-1: LAN IP Setup menu Configuring LAN TCP/IP Setup Parameters LAN TCP/IP Setup—The default values are suitabl e for most users and situations. These are advanced settings that you may configure if you ar [...]

  • Страница 71

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts LAN Configuration 5-3 202-10085-01, March 2005 • IP Subnet Mask: The subnet mask specifies the ne twork number portion of an IP address. Y our router will automatically calcul ate the subnet mask based on the IP address that you assign. Unless you are imp[...]

  • Страница 72

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 5-4 LAN Configuration 202-10085-01, March 2005 • Ending IP Address - This box specifies the last of the contiguous addresses in the IP address pool. 192.168.1 .254 is the default ending ad dress. • WINS Server - This box can specify the W indows NetBios Ser[...]

  • Страница 73

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts LAN Configuration 5-5 202-10085-01, March 2005 • Primary DNS Server (if you entered a Prim ary DNS address in the Basic Settings menu; otherwise, the firewall’ s LAN IP address) • Secondary DNS Server (if you entered a Second ary DNS address in the Ba[...]

  • Страница 74

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 5-6 LAN Configuration 202-10085-01, March 2005 Multi Home LAN IP s Click Multi Home LAN IPs Setup on the LAN IP Setup screen (see Figure 5-1 ) to invoke the Secondary LAN IP Setup screens. This allows the firewall to act as a gateway to additional logical subne[...]

  • Страница 75

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts LAN Configuration 5-7 202-10085-01, March 2005 From the Main Menu of the browser interface, un der Advanced, click on Static Routes to view the St atic Route menu, sho wn below . Figure 5-4. St atic Routes Summary T able and Add screens T o add or edit a St[...]

  • Страница 76

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 5-8 LAN Configuration 202-10085-01, March 2005 8. T ype a number between 1 and 15 as the M etric value. This represents the number of firewalls between your network and the destination. Usually , a setting of 2 or 3 works, but if this is a direct connection, se[...]

  • Страница 77

    Firewall Protection and Conten t Filtering 6-1 202-10085-01, March 2005 Chapter 6 Firewall Protection and Content Filtering This chapter describes how to u se the content filtering features of the FVS124 G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual W AN Ports to protect your ne twork. These features can be found by clicking on the Content [...]

  • Страница 78

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-2 Firewall Protection and Content Filtering 202-10085-01, March 2005 A firewall has two default rules, one for inbound traf fic and one for outbound. The default rules of the FVS124G are: • Inbound: Block all access from outside except responses to requests[...]

  • Страница 79

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6-3 202-10085-01, March 2005 Note: This feature is for Advanced Administrators only! Incorrect configur ation will cause serious problems. Outbound Services—This lists all existing rules fo r outbound traffic. If [...]

  • Страница 80

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-4 Firewall Protection and Content Filtering 202-10085-01, March 2005 b. Click the button for the desired actions: – Edit - to make any changes to the rule definit ion. The Inbound Service screen will be displayed (see “Inbound Rules (Port Forwarding)” o[...]

  • Страница 81

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6-5 202-10085-01, March 2005 • Quality of service (QoS) priorities—Each servic e at its own native priority that impacts its quality of performance and tolerance for jitter or delays. Y ou can change this QoS pr[...]

  • Страница 82

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-6 Firewall Protection and Content Filtering 202-10085-01, March 2005 T able 6-1. Inbound Services Item Desc ription Services Select the desired Servi ce or applicati on to be covered by this rule. If the desire d service or application does not appear in the [...]

  • Страница 83

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6-7 202-10085-01, March 2005 Remember that allowing inboun d services opens holes in your FVS124G VPN Firewall. Only enable those ports that are necessary fo r your network. Inbound Rule Example: A Local Public W eb[...]

  • Страница 84

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-8 Firewall Protection and Content Filtering 202-10085-01, March 2005 Inbound Rule Example: Allowing V ideoconference from Restricted Addresses If you want to allow incoming vi deoconferencing to be initiated from a restricted range of outside IP addresses, su[...]

  • Страница 85

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6-9 202-10085-01, March 2005 – LAN IP address subnet is 192 .168.1.1 255 .255.255.0 • W eb server PC on the firewall's LAN – LAN IP address is 192.168.1.2 – Access to W eb serve r is (simulated ) public[...]

  • Страница 86

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-10 Firewall Protection and Content Filtering 202-10085-01, March 2005 5. Select Action "ALLOW always". 6. For Send to LAN Server , enter the loca l IP address of your web server PC. 7. For Public Destination IP Address, ch oose "Other Public IP[...]

  • Страница 87

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -11 202-10085-01, March 2005 T o test the connection from a PC on the Internet, type http:// <IP_address> , where <IP_address> is the public IP address you have mapped to your web server . Y ou should [...]

  • Страница 88

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-12 Firewall Protection and Content Filtering 202-10085-01, March 2005 Considerations for Inbound Rules • If your external IP address is assigned dynamically by your ISP , the IP address may change periodically as the DHCP lease expires. Cons ider using the [...]

  • Страница 89

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -13 202-10085-01, March 2005 Note: See “Source MAC Filtering” on page 6-27 for yet another way to block outbound traffic from selected PCs that would otherwise be allowed by the firewall. T able 6-1. Outbound [...]

  • Страница 90

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-14 Firewall Protection and Content Filtering 202-10085-01, March 2005 QoS Priority This setting determines the priori ty of a service, which in turn, determines the quality of that service for the traffic passing thro ugh the firewall. By defaul t, the priori[...]

  • Страница 91

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -15 202-10085-01, March 2005 Outbound Rule Example: Blocking Instant Messenger If you want to block Instant Messenger usage by employees during working hours, you c an create an outbound rul e to block that applic[...]

  • Страница 92

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-16 Firewall Protection and Content Filtering 202-10085-01, March 2005 Order of Precedence for Rules As you define new rules, they are added to the tables in the Rules menu, as shown in Figure 6-10 : Figure 6-10: Rules t able with examples For any traffic atte[...]

  • Страница 93

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -17 202-10085-01, March 2005 Although the FVS124G already holds a list of many service port numbers, you ar e not limited to these choices. Use the Services menu to add additional services and applications to the [...]

  • Страница 94

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-18 Firewall Protection and Content Filtering 202-10085-01, March 2005 5. Click Apply . The new service will now appear in the Services menu, and in the Servic e name selection box in the Rules menu. Quality of Service (QoS) Priorities This setting determines [...]

  • Страница 95

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -19 202-10085-01, March 2005 The QoS priority definition for a se rvice determines the qu eue that is used for its traffic passing through the FVS124G VPN Firewall as follows: Example 1 (priority unchanged) : If t[...]

  • Страница 96

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-20 Firewall Protection and Content Filtering 202-10085-01, March 2005 Managing Group s and Hosts The Network Database is an auto matically-maintai ned list of all known PCs and network devices. PCs and devices become known by the following methods: • DHCP C[...]

  • Страница 97

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -21 202-10085-01, March 2005 Figure 6-13: Group s and Hosts screens[...]

  • Страница 98

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-22 Firewall Protection and Content Filtering 202-10085-01, March 2005 Using a Schedule to Block or Allow S pecific T raffic If you enabled content filtering in the Block Sites me nu, or if you d efined an outbound rule to use a schedule, you can set up a sche[...]

  • Страница 99

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -23 202-10085-01, March 2005 Figure 6-14: Schedule menu T o inv oke rules and block keywords or Intern et domains based on a schedule, select Eve ry Day or select one or more days. If you want to limit acce ss com[...]

  • Страница 100

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-24 Firewall Protection and Content Filtering 202-10085-01, March 2005 T ime Zone The FVS124G VPN Firewall uses the Network T ime Protocol (NTP) to obta in the current time and date from one of severa l Network T im e Server s on the Internet. In order to loca[...]

  • Страница 101

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -25 202-10085-01, March 2005 The Block Sites menu is shown in Figure 6-15 : Figure 6-15: Block Sites menu[...]

  • Страница 102

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-26 Firewall Protection and Content Filtering 202-10085-01, March 2005 Keyword application examples: • If the keyword "XXX" is specified, the URL <h ttp://www .badstuff.com/xx x.html> is blocked, as is the newsgroup alt.pictures.XXX. • If t[...]

  • Страница 103

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -27 202-10085-01, March 2005 Source MAC Filtering Source MAC Filter will drop the Internet-bound tr af fic received from the PCs with the specified MAC address. • By default, the source MAC address filter is dis[...]

  • Страница 104

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-28 Firewall Protection and Content Filtering 202-10085-01, March 2005 Port T riggering Port triggering allows some app lications to function correctly th at wou ld otherwise be partially blocked by the firewall. Using this feature requir es that you know the [...]

  • Страница 105

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -29 202-10085-01, March 2005 • After a PC has finished using a Port T riggering application, there is a T ime-out period before the application can be used by anothe r PC. This is required because this Router ca[...]

  • Страница 106

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-30 Firewall Protection and Content Filtering 202-10085-01, March 2005 Getting E-Mail Notifications of Event Logs and Alert s Y our router will log security-related events such as denied incoming service requests, hacker probes, and administrator logins, accor[...]

  • Страница 107

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -31 202-10085-01, March 2005 Figure 6-18: Logs and E-mail screens Click on V iew Log button to view variou s log messages generated by the Router . • In view log window T o delete a ll log entries: Click Clear L[...]

  • Страница 108

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-32 Firewall Protection and Content Filtering 202-10085-01, March 2005 Items to include in the log: • Use these checkboxes to determine which events are included in the log. Selecting all events will increase the size of the log, so it is good pr actice to d[...]

  • Страница 109

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -33 202-10085-01, March 2005 • In the Log Threshold T ime box, set the logs Threshold time. • In the Alert Queue Length box, set the alerts queue length. Click Apply to have your ch anges take effect. Syslog Y[...]

  • Страница 110

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-34 Firewall Protection and Content Filtering 202-10085-01, March 2005 Figure 6-19: Firewall Logs menu T able 6-7. Log entry descripti ons Field Description Date and T ime The date and time the log entry was recorded. Description or Action The type of event an[...]

  • Страница 111

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Firewall Protection and Content Filtering 6 -35 202-10085-01, March 2005 Administrator Information Consider the following operational items: 1. As an option, you can enable remote management if you have to manage distant sites from a central location (see ?[...]

  • Страница 112

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 6-36 Firewall Protection and Content Filtering 202-10085-01, March 2005[...]

  • Страница 113

    Virtual Private Networking 7-1 202-10085-01, March 2005 Chapter 7 V irtual Private Networking This chapter describes how to use the virtual private networking (VPN) features of the FVS124G VPN Firewall. VPN tunnels provide secure, en crypted communications between your local network and a remote network or computer . Tip : When using dual W AN port[...]

  • Страница 114

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-2 Virtual Private Networking 202-10085-01, March 2005 Figure 7-1 shows the setup screens for the selec te d W AN mode. This setup is accomplished in “Step 4: Configure the W AN Mode (Required for Dual W AN)” on page 4-15 . Figure 7-1: W AN Mode Setup scre[...]

  • Страница 115

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Networking 7-3 202-10085-01, March 2005 See “Step 5: Configure Dynamic DNS (If Needed)” on page 4-20 for ho w to select and configure the Dynamic DN S se rv ice. Figure 7-2: Functional opera tion of FVS124G W AN ports for rollover mode R[...]

  • Страница 116

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-4 Virtual Private Networking 202-10085-01, March 2005 Figure 7-3: Functional opera tion of FVS124G W AN port s for load balancing mode Rest of FVS124G Functions FVS124G WA N P o r t Functions Load Balancing Control FVS124G Firewa ll WA N 1 P o r t WA N 2 P o [...]

  • Страница 117

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Networking 7-5 202-10085-01, March 2005 Creating a VPN Connection: Between FVX538 and FVS124G This section describes how to configure a VPN connection between a NETGEAR FVX538 VPN Firewall and a NETGEAR FVS124G VPN Firewall. Using each firew[...]

  • Страница 118

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-6 Virtual Private Networking 202-10085-01, March 2005 5. Click Next. 6. Enter the W AN IP address of the remote FVS124G . 7. Click W AN1 to bind this connection to the W AN1 port. Figure 7-5: W AN IP address of remote FVS124G 8. Click Next. 9. Enter the LAN I[...]

  • Страница 119

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Networking 7-7 202-10085-01, March 2005 11 . Click Done to crea te the 'to_fvs' IKE and VPN policies. In the IKE Policies menu, the 'to_fvs' IKE policy will appear in the table. Figure 7-7: IKE Policies 12. Y ou can view [...]

  • Страница 120

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-8 Virtual Private Networking 202-10085-01, March 2005 13. In the VPN Policies menu, the 'to_fvs' VPN policy will appear in the table. Figure 7-9: FVX538 VPN Policies screen[...]

  • Страница 121

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Networking 7-9 202-10085-01, March 2005 14. Y ou can view the VPN parameters by selecting 't o_fvs' and clicking Edit. It should not be necessary to make any changes. Figure 7-10: FVX538 -to-FVS124G VPN screen Configuring the FVS12[...]

  • Страница 122

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-10 Virtual Private Ne tworking 202-10085-01, March 2005 4. Select 'a remo te VPN gate way'. Figure 7-1 1: VPN Wizard sta rt p age 5. Click Next. 6. Enter the W AN IP address of the remote FVX538. Figure 7-12: W AN IP address of remote FVX538 7. Clic[...]

  • Страница 123

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Ne tworking 7-11 202-10085-01, March 2005 8. Enter the LAN IP address and subn et mask of the re mote FVX538. Figure 7-13: LAN IP address and subnet mask of remote FVX538 9. Click Next. 10. Click Done to crea te the 'to_fvx' IKE an[...]

  • Страница 124

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-12 Virtual Private Ne tworking 202-10085-01, March 2005 This procedure was dev eloped and tested using : • Netgear FVS124G ProSafe VPN Firewall 25 w ith 4 Gigabit LAN and Dual W A N Ports with version 1.0 firmware • Netgear VPN Client version 10. 3.5 (Bui[...]

  • Страница 125

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Ne tworking 7-13 202-10085-01, March 2005 2. In the upper left of the Polic y Editor window , clic k the New Document icon to open a New Connection. Figure 7-15: New Client Connec tion screen[...]

  • Страница 126

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-14 Virtual Private Ne tworking 202-10085-01, March 2005 3. Give the New Connection a name, such as to_FVS . Figure 7-16: New connection name d 4. In the Remote Party Identity section, select ID T ype of IP Subnet. 5. Enter the LAN IP Subnet Address and Subnet[...]

  • Страница 127

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Ne tworking 7-15 202-10085-01, March 2005 8. For Domain Name, enter 'fvs_local.com' and enter the W AN IP Address of the FVS124G. Figure 7-17: Remote client info 9. In the left frame, click on My Identity . 10. Select Certificate =[...]

  • Страница 128

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-16 Virtual Private Ne tworking 202-10085-01, March 2005 12. Leave V irtua l Adapter disabled, and select your computer's Network Adapter . Y our current IP address will appear . Figure 7-18: My Identity sc reen 13. Before leaving the My Identity menu , c[...]

  • Страница 129

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Ne tworking 7-17 202-10085-01, March 2005 14. Click Enter Key , type your preshared key , and click OK. This key will be shared by all users of the FVS124G policy "home". Figure 7-19: Pre-shared ke y 15. In the left frame, click on[...]

  • Страница 130

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-18 Virtual Private Ne tworking 202-10085-01, March 2005 16. Select Phase 1 Negotiation Mode = Aggressive Mode. PFS should be disabled, and Rep l ay Detection should be enabled. Figure 7-20: Client Security Policy screen[...]

  • Страница 131

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Ne tworking 7-19 202-10085-01, March 2005 17. In the left frame, expand Authen tication and select Proposal 1. Compare with the figure below . No changes should be neces sary . Figure 7-21: Client Authorization scr een[...]

  • Страница 132

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-20 Virtual Private Ne tworking 202-10085-01, March 2005 18. In the left frame, expand Key Exchange and select Proposal 1. Compare with the figure below . No changes should be neces sary . Figure 7-22: Client Key Exchange screen 19. In the upper left of the wi[...]

  • Страница 133

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Ne tworking 7-21 202-10085-01, March 2005 21. For additional status and troubleshooting information, right-c lick on the VPN client icon in your W indows toolbar and select "Connection Monito r" or "Log V iewer", or view [...]

  • Страница 134

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 7-22 Virtual Private Ne tworking 202-10085-01, March 2005[...]

  • Страница 135

    Router and Network Mana gement 8-1 202-10085-01, March 2005 Chapter 8 Router and Network Management This chapter describes how to u se the network management features of your FVS1 24G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual W AN Ports. These features can be found by clicking on the appropria t e he ading in the Main Menu of the browser [...]

  • Страница 136

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-2 Router and Network Man a ge m en t 202-10085-01, March 2005 VPN Firewall Features That Reduce T raffic Features of the VPN firewall that can be called up on to decrease W AN-side loading are as follows: • Service blocking • Block sites • Source MAC fi[...]

  • Страница 137

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Mana gement 8-3 202-10085-01, March 2005 – Address range: The rule is applied to a range of Internet IP addresses. • Services—Y ou can specify the desired Services or applications to be covered by this rule. If the desired service o[...]

  • Страница 138

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-4 Router and Network Man a ge m en t 202-10085-01, March 2005 See “Using a Schedule to Block or Allo w Specific T raf fic” on page 6-22 for the procedure on how to use this feature. Block Sites If you want to reduce traffic by preventing access to certain[...]

  • Страница 139

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Mana gement 8-5 202-10085-01, March 2005 •V P N t u n n e l s Port Forwarding The firewall always blocks DoS (Den ial of Service) attacks. A DoS at tack does not attempt to steal data or damage your PCs, but overloads your In ternet con[...]

  • Страница 140

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-6 Router and Network Man a ge m en t 202-10085-01, March 2005 • W AN Users—These settings determ ine which Internet locations ar e covered by th e rule, based on their IP address. – Any: The rule applies to all Internet IP address. – Single address: T[...]

  • Страница 141

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Mana gement 8-7 202-10085-01, March 2005 – After a PC has finished using a Port T rigge ring application, there is a time-out period before the application can be used by anot her PC. This is required because the firewall cannot be sure[...]

  • Страница 142

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-8 Router and Network Man a ge m en t 202-10085-01, March 2005 Administrator and Guest Access Authorization Y ou can change the administrator and guest pass words, administrator lo gin timeout, and enable remote management. Administrator access is read/write a[...]

  • Страница 143

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Mana gement 8-9 202-10085-01, March 2005 Enabling Remote Management Access Using the Remote Manage ment page, you can allow an administrator on the In ternet to configure, upgrade, and ch eck the status of your FVS12 4G VPN Firewall. Y ou[...]

  • Страница 144

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-10 Router and Networ k Management 202-10085-01, March 2005 a. T o allow access from any IP address on the Interne t, select Everyone. b. T o allow access from a range of IP addresses on the Internet, select IP address range. Enter a beginning and end ing IP a[...]

  • Страница 145

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-11 202-10085-01, March 2005 Y ou can access the command line interface (CLI) either by using telnet or by connecting a terminal to the console port on the front of the unit. T o access the CLI from a co mmunications terminal[...]

  • Страница 146

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-12 Router and Networ k Management 202-10085-01, March 2005 Figure 8-3: T raffic Limit Reached alert Login Failures and Att acks Figure 8-3 shows the Log screen that is invoked by clicking Logs and Email under Security on the Main Menu bar . W AN port shut s d[...]

  • Страница 147

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-13 202-10085-01, March 2005 Figure 8-4: Logs and email sc reen Select the types of a lerts to email. Enable email alerts. Accumulate 64 messages be for e sending a log email. Accumulate 8 messages before sending an ale rt em[...]

  • Страница 148

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-14 Router and Networ k Management 202-10085-01, March 2005 Monitoring Y ou can view status information about the firewa ll, W AN ports, LAN port s, and VPN tunnels and program SNMP conn ections. V iewing VPN Firewall St at us and T i me Information Firewall S[...]

  • Страница 149

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-15 202-10085-01, March 2005 Figure 8-5: Router S t atus screen FVS124G[...]

  • Страница 150

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-16 Router and Networ k Management 202-10085-01, March 2005 Note: The Router Status page displays current settings and statistics for your router . As this information is read-onl y , any changes must be made on othe r pages. Time Info rmation T im e info rmat[...]

  • Страница 151

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-17 202-10085-01, March 2005 Figure 8-6: T ime information on the Schedule screen If supported for your region, y ou can check Automatically adjust for Daylig ht Savings T ime. Current date a nd time Automatic adju stme n t e[...]

  • Страница 152

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-18 Router and Networ k Management 202-10085-01, March 2005 WA N P o r t s Y ou can monitor the status of the W AN c onnectio ns, Dynamic DNS services, and Internet traf fic information. W AN Port Connection St atus Invoke the Connection Status scr een from W [...]

  • Страница 153

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-19 202-10085-01, March 2005 Dynamic DNS St atus Invoke the Dynamic DNS Status screen from Dynami c DNS screen by c licking Show Status to see the current DDNS Status in a sub-window . Figure 8-8: Dynamic DNS S t atus screen [...]

  • Страница 154

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-20 Router and Networ k Management 202-10085-01, March 2005 Figure 8-9: Intern et T raffic inf ormation LAN Port s and Att a ched Devices Known PCs and Devices The Attached Devices menu conta i n s a tab l e of all IP devices that the firewall has discovered o[...]

  • Страница 155

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-21 202-10085-01, March 2005 Figure 8-10: Network Dat abase screen The Network Database is an auto matically-maintai ned list of all known PCs and network devices. PCs and devices become known by the following methods: • DH[...]

  • Страница 156

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-22 Router and Networ k Management 202-10085-01, March 2005 Note: If the firewall is rebooted, the table data is lo st until the firewall redi scovers the devices. T o force the firewall to look for attach ed devices, click the Refresh button. DHCP Log Y ou ca[...]

  • Страница 157

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-23 202-10085-01, March 2005 Firewall Y ou can view the log of the firewall activities. Figure 8-3 shows the Log screen that is invoked by clicking Logs and Email under Security on the Main Menu bar . T able 8-1. Port T rigge[...]

  • Страница 158

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-24 Router and Networ k Management 202-10085-01, March 2005 Figure 8-13: Logs and email screen Select the types of logs to email. Enable emailing of logs. Enable system logs. Accumulate 64 messages be for e sending a log email. Accumulate 8 messages before sen[...]

  • Страница 159

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-25 202-10085-01, March 2005 Invoke the Firewall Log screen from Logs and Email screen. Figure 8-14: Firewall Log sc reen (invoked from Logs and Email screen)[...]

  • Страница 160

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-26 Router and Networ k Management 202-10085-01, March 2005 VPN T unnels Y ou can view the status of the VPN tunnels. Figure 8-15: VPN St atus/Log and IPSec Connection S t atus screens T able 8-1. VPN St atus dat a Item Desc ription Policy Name The name of the[...]

  • Страница 161

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-27 202-10085-01, March 2005 SNMP SNMP lets you monitor and manage log resour ces from an SNMP-compliant system manager . SNMP system configuration lets you ch ange the s ystem variabl es for MIB2. Figure 8-16: SNMP Configura[...]

  • Страница 162

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-28 Router and Networ k Management 202-10085-01, March 2005 Figure 8-17: Diagnostics sc reen T able 8-1. Diagnostics Item Desc ription Ping or T race an IP address Ping—Use this to send a ping packet request to the specified IP address. This is often used to[...]

  • Страница 163

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-29 202-10085-01, March 2005 Configuration File Management The configuration settings of th e FVS124G VP N Firewall are stor ed within the firewall in a configuration file. This file can be saved (backed up) to a user ’ s P[...]

  • Страница 164

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-30 Router and Networ k Management 202-10085-01, March 2005 Restoring and Backing Up the Configuration IMPOR T ANT ! Once you start restoring settings or erasin g the router , do NOT try to go online, turn off the router , shutdown th e computer or do anything[...]

  • Страница 165

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Router and Network Ma nagement 8-31 202-10085-01, March 2005 Figure 8-19: Router Upgrade me nu T o upload new firmware: 1. Download and unzip the new so ftware file from NETGEAR. 2. In the Router Upgrade menu, click the Brow se bu tton and browse to the loc[...]

  • Страница 166

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 8-32 Router and Networ k Management 202-10085-01, March 2005 • T o restore the factory default configuration sett ings without knowing the login password or IP address, you must use the Default Reset bu tton on the front panel of the firewall (see “The Rout[...]

  • Страница 167

    Troubleshooting 9-1 202-10085-01, March 2005 Chapter 9 T roubleshooting This chapter gives information about troubleshooting your FVS124G ProSafe VPN Firewal l 25 with 4 Gigabit LAN and Dual W AN Ports. Afte r each problem description, instructions are provided to help y ou diag nose and solve the problem. Basic Functioning After you turn on power [...]

  • Страница 168

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 9-2 Troubleshooting 202-10085-01, March 2005 LEDs Never T urn Off When the firewall is turned on, the LEDs turns on for about 10 sec onds and then turn off. If all the LEDs stay on, there is a fault within the firewall. If all LEDs are still on one minute after[...]

  • Страница 169

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Troubleshooting 9-3 202-10085-01, March 2005 T roubleshooting the Web Configuration Interface If you are unable to access the firewall’ s W eb Conf iguration interface from a PC on your local network, check the following : • Check the Ethernet connectio[...]

  • Страница 170

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 9-4 Troubleshooting 202-10085-01, March 2005 T roubleshooting the ISP Connection If your firewall is unable to a ccess the Internet, you should first determine whether the firewall is able to obtain a W AN IP address from the ISP . Un less you have been assigne[...]

  • Страница 171

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Troubleshooting 9-5 202-10085-01, March 2005 OR Configure your firewall to sp oof your PC’ s MAC address. This ca n be done in the Basic Settings menu. Refer to “Manually Configuring Y our Internet Connection” on pag e 4-1 2 . If your firewall can obt[...]

  • Страница 172

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 9-6 Troubleshooting 202-10085-01, March 2005 If the path is not working, you see this message: Request timed out If the path is not functioning correctly , you could have one of the following problems: • W rong ph ysical connections — Make sure the LAN port[...]

  • Страница 173

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Troubleshooting 9-7 202-10085-01, March 2005 — Y our ISP coul d be rejecting the Ethe rnet MAC addresses of all but one of your PCs. Many broadband ISPs restrict access by only allo wing traffic from the MAC address of your broadband modem, but some IS Ps[...]

  • Страница 174

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports 9-8 Troubleshooting 202-10085-01, March 2005 • T ime is off by one hour . Cau se: The firewa ll does not automatically sense Daylight Savings T ime. In the E-Mail menu, check or unch eck the box marked “Adjust fo r Daylight Savings T ime”.[...]

  • Страница 175

    Technical Specifications A-1 202-10085-01, March 2005 Appendix A T echnical Specifications This appendix provides technical specifications for the FVS124G Pr oSafe VPN Firewall 25 with 4 Gigabit LAN and Dual W A N Ports. Network Protocol and St andards Compatibility Data and Routing Protocols: TCP/IP , RIP-1, RIP-2, DHCP PPP over Ethernet (PPPoE) P[...]

  • Страница 176

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports A-2 Technical Specifications 202-10085-01, March 2005 Interface S p ecifications LAN: 10BASE-T or 100BASE-Tx, RJ-45 W AN: 10BASE-T or 100BASE-Tx[...]

  • Страница 177

    Network, Routing, Firewall, and Basics B-1 202-10085-01, March 2005 Appendix B Network, Routing, Firewall, and Basics This chapter provides an overview of IP networks, routing, and n etworking. Related Publications As you read this document, you may be dire cted to various RF C documents for further information. An RFC is a Request For Comment (RFC[...]

  • Страница 178

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports B-2 Network, Routing, Firewall, and Basics 202-10085-01, March 2005 What is a Router? A router is a device that forwards traffic between networks based on network layer information in the data and on routing tables main tained by the router . In these rou ting [...]

  • Страница 179

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network, Routing, Firewall, and Basics B-3 202-10085-01, March 2005 195.34.12.7 The latter version is easier to remember and easier to enter into your computer . In addition, the 32 bits of the ad dress are subdivided into two part s. The firs t part of the[...]

  • Страница 180

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports B-4 Network, Routing, Firewall, and Basics 202-10085-01, March 2005 128.1.x.x to 191.254.x.x. • Class C Class C addresses can have 254 hosts on a netw ork. Class C addre sses use 24 bits for the network address and eight bits for the node. They are in this ra[...]

  • Страница 181

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network, Routing, Firewall, and Basics B-5 202-10085-01, March 2005 As a shorter alternative to dotted-decimal notation, the netmask may also be expressed in terms of the number of ones from the left. This number is ap pended to the IP address, following a [...]

  • Страница 182

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports B-6 Network, Routing, Firewall, and Basics 202-10085-01, March 2005 Although the preceding example uses the entire third octet for a subnet address, note that you are not restricted to octet boundaries in subnetting. T o create more network numbers, you need on[...]

  • Страница 183

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network, Routing, Firewall, and Basics B-7 202-10085-01, March 2005 Configure all hosts on a LAN segment to use the same netmask for the following reasons: • So that hosts recognize local IP broadcast packets When a device broadcasts to its segment neighb[...]

  • Страница 184

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports B-8 Network, Routing, Firewall, and Basics 202-10085-01, March 2005 Single IP Address Operation Using NA T In the past, if multiple PCs on a LAN needed to access the Internet simultaneously , you had to obtain a range of IP addresses from the ISP . This type of[...]

  • Страница 185

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network, Routing, Firewall, and Basics B-9 202-10085-01, March 2005 This scheme offers t he additional benefit of firewall -like protection because the internal LAN addresses are not available to the Internet thro ugh the translated connection. All incoming[...]

  • Страница 186

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports B-10 Network, Routing, Firewall, and Basics 202-10085-01, March 2005 Domain Name Server Many of the resources on the In ternet can be addressed by si mple descriptive names such as www .NETGEAR.com . This addressing is very helpful at th e application level, bu[...]

  • Страница 187

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network, Routing, Fi rewall, and Basics B-11 202-10085-01, March 2005 What is a Firewall? A firewall is a device that protects one netw ork from another , while allowing communication between the two. A firewall incorporates the functi ons of the NA T route[...]

  • Страница 188

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports B-12 Network, Routing, Firewall, and Basics 202-10085-01, March 2005 . Category 5 Cable Quality Category 5 distributed cable that me ets ANSI/EIA/ TIA-568-A building wiring stan da rds can be a maximum of 328 feet (ft.) or 10 0 meters (m) in length, div ided as[...]

  • Страница 189

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network, Routing, Fi rewall, and Basics B-13 202-10085-01, March 2005 Inside T wisted Pair Cables For two devices to communicate, th e transmitter of each device must be connected to the receiver of the other device. The cro sso ver function is usually impl[...]

  • Страница 190

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports B-14 Network, Routing, Firewall, and Basics 202-10085-01, March 2005 Figure B-3: Category 5 UTP Cable with Male RJ -4 5 Plug at Each End Note : Flat “silver satin” tele phone cable may have the same RJ-45 plug . However , using teleph one cable results in e[...]

  • Страница 191

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Network, Routing, Fi rewall, and Basics B-15 202-10085-01, March 2005 The FVS124G VPN Firewall in corpo rates Aut o Uplink TM technology (also called MDI/MDIX). Each LOCAL Ethernet port will automatically sens e whether the Ethernet cable plugged into the p[...]

  • Страница 192

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports B-16 Network, Routing, Firewall, and Basics 202-10085-01, March 2005[...]

  • Страница 193

    Preparing Your Netwo rk C-1 202-10085-01, March 2005 Appendix C Prep aring Y our Network This appendix describes how to prepare your ne twork to connect to the Internet through the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual W AN Ports and how to verify the readiness of broadband Internet servi ce from an Internet service provider ([...]

  • Страница 194

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-2 Preparing Yo ur Network 202-10085-01, March 2005 In your IP network, each PC and the firewall must be assigned a unique IP addresses. Each PC must also have certain other IP configuration information such as a subn et mask (netmask), a domain name s erver ([...]

  • Страница 195

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Preparing Your Netwo rk C-3 202-10085-01, March 2005 Y ou must have an Ethernet adapter , the TCP/IP protocol, and Client for Micros oft Networks. If you need to install a ne w adapter , follow these steps: a. Click the Add button. b. Select Adapter , and t[...]

  • Страница 196

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-4 Preparing Yo ur Network 202-10085-01, March 2005 If you need Client for Micro soft Networks: a. Click the Add button. b. Select Client, and then click Ad d. c. Select Microsoft. d. Select Client for Microsoft Networks, and then click OK. 3. Restart your PC [...]

  • Страница 197

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Preparing Your Netwo rk C-5 202-10085-01, March 2005 V erify the following settings as shown: • Client for Microsoft Network exists • Ethernet adapter is present • TCP/IP is present • Primary Network Logon is set to W indows logon Click on the Prope[...]

  • Страница 198

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-6 Preparing Yo ur Network 202-10085-01, March 2005 Selecting Windows’ In ternet Access Method 1. On the W indows taskbar , click the Start button, point to Settings, and th en click Control Panel. 2. Double-click the Internet Options icon. 3. Select “I wa[...]

  • Страница 199

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Preparing Your Netwo rk C-7 202-10085-01, March 2005 2. Ty p e winipcfg , and then click OK. The IP Configuration window opens, which lists (a mong other things), your IP address, subnet mask, and default gateway . 3. From the drop-down box, select your Eth[...]

  • Страница 200

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-8 Preparing Yo ur Network 202-10085-01, March 2005 Enabling DHCP to Automatically Configure TCP/IP Settings Y ou will find there are many similarities in th e procedures for dif f erent Windows systems when using DHCP to configure TCP/IP . The following steps[...]

  • Страница 201

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Preparing Your Netwo rk C-9 202-10085-01, March 2005 • Now you should be at the Local Area Network Connection S tatus window . This box displays the conn ection status, duration, speed, and activity statistics. • Administrator logon access rights are ne[...]

  • Страница 202

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-10 Preparing Your Network 202-10085-01, March 2005 DHCP Configuration of TC P/IP in Windows 2000 Once again, after you have installed the network card, TCP/IP for W indows 2000 is con figured. TCP/IP should be added by de fault and set to DHCP without your ha[...]

  • Страница 203

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Preparing Your Netwo rk C-11 202-10085-01, March 2005 • Click on the My Network Places icon on the W indows desktop. This will bring up a window called Network and Dial-up Connectio ns. • Right click on Local Ar ea Connection and select Properties . •[...]

  • Страница 204

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-12 Preparing Your Network 202-10085-01, March 2005 • W ith Internet Protocol (TCP/IP) selected, click on Properties to open the Internet Protocol (TCP/IP) Propert ies dialogue box. • V erify that • Obtain an IP address automatically is selected. • Obt[...]

  • Страница 205

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Preparing Your Netwo rk C-13 202-10085-01, March 2005 DHCP Configuration of TCP/IP in Windows NT4 Once you have installed the network card, you need to configure the TCP/IP env ironment for W indows NT 4.0. Follow this procedure to configure TCP/IP with DHC[...]

  • Страница 206

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-14 Preparing Your Network 202-10085-01, March 2005 • Highlight the TCP/IP Pr otocol in the Network Protocols box, and click on the Properties button.[...]

  • Страница 207

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Preparing Your Netwo rk C-15 202-10085-01, March 2005 V erifying TCP/IP Properties fo r Windows XP , 2000, and NT4 T o check your PC’ s TCP/IP configuration: 1. On the W indows taskbar , click the Start button, and then click Run. The Run window opens. 2.[...]

  • Страница 208

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-16 Preparing Your Network 202-10085-01, March 2005 • The default gateway i s 192.168.1.1 4. Ty p e exit Configuring the Macintos h for TCP/IP Networking Beginning with Macintosh Operating System 7 , TCP/ IP is already installed on the Macint osh. On each ne[...]

  • Страница 209

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Preparing Your Netwo rk C-17 202-10085-01, March 2005 2. If not already selected, select Built- in Ethernet in the Configure list. 3. If not already selected, Select Using DHCP in the TCP/IP tab. 4. Click Save. V erifying TCP/IP Properties for Macintosh Com[...]

  • Страница 210

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-18 Preparing Your Network 202-10085-01, March 2005 V erifying the Readiness of Y our Internet Account For broadband access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using a cable mo[...]

  • Страница 211

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Preparing Your Netwo rk C-19 202-10085-01, March 2005 • An IP address and subnet mask • A gateway IP address, which is the address of the ISP’ s router • One or more domain name server (DNS) IP addresses • Host name and domain suf fix For example,[...]

  • Страница 212

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-20 Preparing Your Network 202-10085-01, March 2005 If an IP address appears under Installed Gatewa ys, write down the address. This is the ISP’ s gateway address. Select the address and then click Remove to remove the gateway address. 6. Select the DNS Conf[...]

  • Страница 213

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Preparing Your Netwo rk C-21 202-10085-01, March 2005 Rest arting the Network Once you’ve set up yo ur computers to work with the fi rewall, you must reset the network for the devices to be able to communicate correctly . R estart any computer that is con[...]

  • Страница 214

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports C-22 Preparing Your Network 202-10085-01, March 2005[...]

  • Страница 215

    Virtual Private Networking D-1 202-10085-01, March 2005 Appendix D V irtual Private Networking There have been many improvem ents in the Internet including Quality of Service, network performance, and inexpensive technologies, such as DSL. But one of the most important advances has been in V irtual Private Networking (VPN) Inte rnet Protocol securi[...]

  • Страница 216

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports D-2 Virtual Private Networking 202-10085-01, March 2005 • Remote Access: Remote access enables telecommuters and mobile workers to access e-ma il and business applications. A dia l-up connection to an organization’ s modem po ol is one method of access for [...]

  • Страница 217

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Networking D-3 202-10085-01, March 2005 • Encapsulating Security Payload (ESP) : Provides confidentiality , authentication, and integrity . • Authentication Header (AH) : Provides authentication and integrity . • Internet Key Exchange [...]

  • Страница 218

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports D-4 Virtual Private Networking 202-10085-01, March 2005 The ESP header is inserted into the packet betw een the IP header and any subsequent packet contents. However , because ESP encrypts the data, the payload is changed. ESP does not encrypt the ESP header , [...]

  • Страница 219

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Networking D-5 202-10085-01, March 2005 Mode SAs operate using modes. A mode is the method in which the IPSec protocol is applied to the packet. IPSec can be used in tunne l mode or tran sport mode. T ypically , the tunnel mode is used for g[...]

  • Страница 220

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports D-6 Virtual Private Networking 202-10085-01, March 2005 Key Management IPSec uses the Internet Key Exchange (IKE) protoc ol to facilitate and automate the SA setup and the exchange of keys between parties transferring data. Using keys ensures that only the send[...]

  • Страница 221

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Networking D-7 202-10085-01, March 2005 VPN Process Overview Even though IPSec is standards-based, e ach vendo r has its own set of terms and procedures for implementing the standard. Because of these differences, it may be a good idea to re[...]

  • Страница 222

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports D-8 Virtual Private Networking 202-10085-01, March 2005 It is also important to make sure the addresses do not overlap or conflict. That is, each set of addresses should be separate and distinct. It will also be importan t to kn ow the subnet mask of both gatew[...]

  • Страница 223

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Networking D-9 202-10085-01, March 2005 Figure 9-8: VPN T unnel SA The SA contains all the information necessary for gateway A to negotiate a secure and encrypted communication stream with gateway B. This comm unication is often referred to [...]

  • Страница 224

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports D-10 Virtual Private Networking 202-10085-01, March 2005 2. IKE Phase I. a. The two parties negotiate the en cryption and au thentication algorithms to use in the IKE SAs. b. The two parties authenticate each other us ing a predetermined mechanism, such as pres[...]

  • Страница 225

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Virtual Private Networking D-11 202-10085-01, March 2005 VPNC IKE Phase II Parameters The IKE Phase 2 parameters used in Scenario 1 are: •T r i p l e D E S • SHA-1 • ESP tunnel mode • MODP group 1 • Perfect forward secrecy for rekeying • SA life[...]

  • Страница 226

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports D-12 Virtual Private Networking 202-10085-01, March 2005 • [RFC 791] Internet Pr otocol DARP A Internet Pr ogram Pr otocol Specifi cation , Information Sciences Institute, US C, September 1981. • [RFC 1058] Routing Information Pr otocol , C Hedrick, Rutgers[...]

  • Страница 227

    Glossary -1 202-10085-01, March 2005 Glossary List of Glossary T erms Use the list below to find definitions for technical terms used in this manual. Numeric 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. 100BASE-Tx IEEE 802.3 specification for 100 Mbps Ethernet over twis ted pair wiring. 802.1x 802.1x defines port[...]

  • Страница 228

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -2 Glossary 202-10085-01, March 2005 A Access Control Lis t (ACL) An ACL is a database that an Operating System uses to track each user ’ s access rights to system objects (such as file directories and/or files). Ad-hoc Mode An 802.1 1 networking framework in[...]

  • Страница 229

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Glossary -3 202-10085-01, March 2005 Broadcast A packet sent to all devices on a network. C Class of Service A term to describe treating different types of traffic with dif fer en t levels of service priority . Higher priority traffic gets faster treatment [...]

  • Страница 230

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -4 Glossary 202-10085-01, March 2005 based on IP addresses. Every time you use a domain na me, therefore, a DNS servi ce must translate the name into the corresponding IP address. For example, the domain name www .example.com might translate to 198.105.232.4. T[...]

  • Страница 231

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Glossary -5 202-10085-01, March 2005 Ethernet A LAN specification develo ped jointly by Xerox, Inte l and Digital Equipment Corporatio n. Ethernet networks transmit packets at a rate of 10 Mbps. G Gateway A local device, usually a router , t hat con nec ts [...]

  • Страница 232

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -6 Glossary 202-10085-01, March 2005 Internet Protocol The method or protocol by which data is sent from one computer to another on the Internet. Each computer (known as a host) on the Internet has at least one IP address that uniquely iden tifies it among all [...]

  • Страница 233

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Glossary -7 202-10085-01, March 2005 Local Area Network A communicat ions networ k serving us ers within a limited area, such as one floor of a building. A LAN typically connects multiple personal co mputers and shared network devices such as storage and pr[...]

  • Страница 234

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -8 Glossary 202-10085-01, March 2005 P p acket A block of information sent over a network. A packet ty pically contains a source and destination netwo rk address, some protocol and length in for mation, a block of data, and a checksum. Point-to-Point Protocol P[...]

  • Страница 235

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Glossary -9 202-10085-01, March 2005 Q QoS See “Quality of Service” Quality of Ser vice QoS is a networking term that specifies a guaranteed level of through put. Throughput is the amount of data transferred from one device to another or processed in a [...]

  • Страница 236

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -10 Glossary 202-10085-01, March 2005 Subnet Mask Combined with the IP address, the IP Subnet Mask allows a device to k now which other addresses are local to it, and which must be reached through a gateway or router . T TCP/IP The main internetwor king protoco[...]

  • Страница 237

    Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts Glossary -11 202-10085-01, March 2005 Wide Area Network A W AN is a computer network that spans a relatively large ge ographical area. T ypically , a W AN consists of two or more local-area networks (L ANs). Wi-F i A trade name for the 802.11b wireless netw[...]

  • Страница 238

    Reference Manual for the ProSafe VPN Fire wall 25 with 4 Giga bit LAN and Dual WAN Ports -12 Glossary 202-10085-01, March 2005[...]