NETGEAR FVS318 - ProSafe VPN Firewall Router Bedienungsanleitung

M-10146-01

June 2003

NETGEAR, Inc.

4500 Great America Parkway

Santa Clara, CA 95054 USA

Reference Manual for the

Model FVS318

Broadband ProSafe VPN

Firewall

M-10146-01

Trademarks

NETGEAR and Auto Uplink are trademarks or registered trademarks of Netgear, Inc.

Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.

Other brand and product names are registered trademarks or trademarks of their respective holders.

Statement of Conditions

In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to

make changes to the products described in this document without notice.

NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit

layout(s) described herein.

Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to

part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a

residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and

used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no

guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to

radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try

to correct the interference by one or more of the following measures:

• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and receiver.

• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

• Consult the dealer or an experienced radio/TV technician for help.

EN 55 022 Declaration of Conformance

This is to certify that the FVS318 Broadband ProSafe VPN Firewall is shielded against the generation of radio

interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by

the application of EN 55 022 Class B (CISPR 22).

M-10146-01

iii

Bestätigung des Herstellers/Importeurs

Es wird hiermit bestätigt, daß dasFVS318 Broadband ProSafe VPN Firewall gemäß der im BMPT-AmtsblVfg 243/1991

und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B.

Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der

Betriebsanleitung.

Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt

gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.

Certificate of the Manufacturer/Importer

It is hereby certified that the FVS318 Broadband ProSafe VPN Firewall has been suppressed in accordance with the

conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example,

test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the

notes in the operating instructions.

Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market

and has been granted the right to test the series for compliance with the regulations.

Voluntary Control Council for Interference (VCCI) Statement

This equipment is in the second category (information equipment to be used in a residential area or an adjacent area

thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing

Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas.

When used near a radio or TV receiver, it may become the cause of radio interference.

Read instructions for correct handling.

Technical Support

Refer to the Support Information Card that shipped with your FVS318 Broadband ProSafe VPN Firewall .

World Wide Web

NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL)

http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer

or Netscape are required.

M-10146-01

Contents v

M-10146-01

Contents

Chapter 1

About This Manual

Audience .........................................................................................................................1-1

Scope .............................................................................................................................1-1

Typographical Conventions ............................................................................................1-2

Special Message Formats ..............................................................................................1-2

How to Use the HTML Version of this Manual ................................................................1-3

How to Print this Manual .................................................................................................1-4

Chapter 2

Introduction

About the FVS318 ..........................................................................................................2-1

Key Features ..................................................................................................................2-1

Virtual Private Networking (VPN) .............................................................................2-1

A Powerful, True Firewall .........................................................................................2-2

Content Filtering .......................................................................................................2-2

Configurable Auto Uplink™ Ethernet Connection ....................................................2-2

Protocol Support ......................................................................................................2-3

Easy Installation and Management ..........................................................................2-4

What’s in the Box? ..........................................................................................................2-5

The Firewall’s Front Panel .......................................................................................2-5

The Firewall’s Rear Panel ........................................................................................2-6

Chapter 3

Connecting the Firewall to the Internet

What You Will Need Before You Begin ...........................................................................3-1

LAN Hardware Requirements ..................................................................................3-1

Computer Requirements ....................................................................................3-1

Cable or DSL Modem Requirement ..................................................................3-1

LAN Configuration Requirements ............................................................................3-2

Internet Configuration Requirements .......................................................................3-2

M-10146-01

vi Contents

Where Do I Get the Internet Configuration Parameters? ..................................3-2

Worksheet for Recording Your Internet Connection Information ..............................3-3

How to Connect the FVS318 VPN Firewall ....................................................................3-4

Wizard-Detected PPPoE Option ..............................................................................3-9

Wizard-Detected Dynamic IP Option .....................................................................3-10

Wizard-Detected Fixed IP (Static) Option .............................................................. 3-11

Testing Your Internet Connection ..................................................................................3-12

How to Manually Configure Your Internet Connection ..................................................3-13

Chapter 4

Protecting Your Network

Protecting Access to Your FVS318 VPN Firewall ...........................................................4-1

How to Change the Built-In Password .....................................................................4-1

How to Change the Administrator Login Timeout ....................................................4-2

Using Basic Firewall Services ........................................................................................4-2

How to Block Keywords and Sites ...........................................................................4-3

How to Block or Allow Services ................................................................................4-5

How to Add to the List of Services ...........................................................................4-7

Setting Times and Scheduling Firewall Services ..........................................................4-10

How to Set Your Time Zone ...................................................................................4-10

How to Schedule Firewall Services ........................................................................ 4-11

Chapter 5

Advanced WAN and LAN Configuration

Configuring Advanced WAN Settings .............................................................................5-1

Setting Up A Default DMZ Server ............................................................................5-1

Enabling Access to Local Servers Through a FVS318 ............................................5-2

How to Configure Port Forwarding to Local Servers ................................................5-2

Respond to Ping on Internet WAN Port .............................................................5-3

How to Support Internet Services, Applications, or Games .....................................5-3

How to Clear a Port Assignment ..............................................................................5-4

Local Web and FTP Server Example .......................................................................5-4

How to Set Up Computers for Half Life, KALI or Quake III ......................................5-4

Working with LAN IP Settings .........................................................................................5-5

What Does UPnP Support Do for Me? .....................................................................5-5

How to Enable UPnP ...............................................................................................5-6

Understanding LAN TCP/IP Setup Parameters .......................................................5-7

Contents vii

M-10146-01

Setting the MTU Size ...............................................................................................5-8

Using the Router as a DHCP Server ........................................................................5-8

How to Specify Reserved IP Addresses ...................................................................5-9

How to Configure LAN TCP/IP Settings .................................................................5-10

How to Configure Dynamic DNS .................................................................................. 5-11

Using Static Routes ......................................................................................................5-12

Static Route Example .............................................................................................5-12

How to Configure Static Routes .............................................................................5-13

Chapter 6

Virtual Private Networking

Overview of VPN Configuration ......................................................................................6-1

Understanding How FVS318 VPN Tunnels Are Configured ...........................................6-2

Configuring VPN Network Connection Parameters .................................................6-3

Configuring a SA Using IKE Main Mode ..................................................................6-5

Configuring a SA Using IKE Aggressive Mode ........................................................6-6

Configuring a SA Using Manual Key Management ..................................................6-7

Planning a VPN ..............................................................................................................6-9

How to Configure a Network to Network VPN Tunnel .................................................. 6-11

How to Configure a Remote PC to Network VPN .........................................................6-16

Monitoring the PC VPN Connection Using SafeNet Tools ............................................6-26

How to Configure Manual Keys as an Alternative to IKE .............................................6-28

How to Delete a Security Association ....................................................................6-30

Blank VPN Tunnel Configuration Worksheets ..............................................................6-31

Chapter 7

Managing Your Network

Network Management Information .................................................................................7-1

Viewing Router Status and Usage Statistics ............................................................7-1

Viewing Attached Devices ........................................................................................7-4

Viewing, Selecting, and Saving Logged Information ................................................7-5

Selecting What Information to Log ....................................................................7-6

Saving Log Files on a Server ............................................................................7-7

Examples of log messages ......................................................................................7-7

Activation and Administration ............................................................................7-7

Dropped Packets ...............................................................................................7-7

Enabling Security Event E-mail Notification ...................................................................7-8

M-10146-01

viii Contents

Backing Up, Restoring, or Erasing Your Settings ...........................................................7-9

How to Back Up the Configuration to a File .............................................................7-9

How to Restore a Configuration from a File ...........................................................7-10

How to Erase the Configuration ............................................................................. 7-11

Running Diagnostic Utilities and Rebooting the Router ................................................ 7-11

How to Enable Remote Management ...........................................................................7-12

How to Upgrade the Router’s Firmware .......................................................................7-13

Chapter 8

Troubleshooting

Basic Functions ..............................................................................................................8-1

Power LED Not On ...................................................................................................8-2

Test LED Never Turns On or Test LED Stays On .....................................................8-2

Local or Internet Port Link LEDs Not On ..................................................................8-2

Troubleshooting the Web Configuration Interface ..........................................................8-3

Troubleshooting the ISP Connection ..............................................................................8-4

Troubleshooting a TCP/IP Network Using a Ping Utility .................................................8-5

Testing the LAN Path to Your Firewall ......................................................................8-6

Testing the Path from Your PC to a Remote Device ................................................8-6

Restoring the Default Configuration and Password ........................................................8-7

Problems with Date and Time .........................................................................................8-8

Appendix A

Technical Specifications

Technical Specifications ................................................................................................. A-1

Appendix B

Networks, Routing, and Firewall Basics

Related Publications ...................................................................................................... B-1

Basic Router Concepts .................................................................................................. B-1

What is a Router? ................................................................................................... B-1

Routing Information Protocol ................................................................................... B-2

IP Addresses and the Internet ................................................................................. B-2

Netmask .................................................................................................................. B-4

Subnet Addressing .................................................................................................. B-4

Private IP Addresses ............................................................................................... B-7

Single IP Address Operation Using NAT ................................................................. B-8

MAC Addresses and Address Resolution Protocol ................................................. B-9

Contents ix

M-10146-01

Related Documents ................................................................................................. B-9

Domain Name Server .............................................................................................. B-9

IP Configuration by DHCP .................................................................................... B-10

Internet Security and Firewalls .................................................................................... B-10

What is a Firewall? .................................................................................................B-11

Stateful Packet Inspection ......................................................................................B-11

Denial of Service Attack .........................................................................................B-11

Ethernet Cabling ...........................................................................................................B-11

Category 5 Cable Quality ...................................................................................... B-12

Inside Twisted Pair Cables .................................................................................... B-13

Uplink Switches, Crossover Cables, and MDI/MDIX Switching ............................ B-14

Appendix C

Preparing Your Network

Preparing Your Computers for TCP/IP Networking ....................................................... C-1

Configuring Windows 95, 98, and Me for TCP/IP Networking ....................................... C-2

Install or Verify Windows Networking Components ................................................. C-2

Enabling DHCP to Automatically Configure TCP/IP Settings ................................. C-4

Selecting Windows’ Internet Access Method .......................................................... C-6

Verifying TCP/IP Properties .................................................................................... C-6

Configuring Windows NT4, 2000 or XP for IP Networking ............................................ C-7

Install or Verify Windows Networking Components ................................................. C-7

DHCP Configuration of TCP/IP in Windows XP, 2000, or NT4 ............................... C-8

DHCP Configuration of TCP/IP in Windows XP ..................................................... C-8

DHCP Configuration of TCP/IP in Windows 2000 ................................................ C-10

DHCP Configuration of TCP/IP in Windows NT4 .................................................. C-13

Verifying TCP/IP Properties for Windows XP, 2000, and NT4 .............................. C-14

Configuring the Macintosh for TCP/IP Networking ...................................................... C-15

MacOS 8.6 or 9.x .................................................................................................. C-15

MacOS X ............................................................................................................... C-16

Verifying TCP/IP Properties for Macintosh Computers ......................................... C-17

Verifying the Readiness of Your Internet Account ....................................................... C-18

Are Login Protocols Used? ................................................................................... C-18

What Is Your Configuration Information? .............................................................. C-18

Obtaining ISP Configuration Information for Windows Computers ....................... C-19

Obtaining ISP Configuration Information for Macintosh Computers ..................... C-20

M-10146-01

xContents

Restarting the Network ................................................................................................ C-21

Appendix D

Virtual Private Networking

What is a VPN? ............................................................................................................. D-1

What Is IPSec and How Does It Work? ......................................................................... D-2

IPSec Security Features ......................................................................................... D-2

IPSec Components ................................................................................................. D-2

Encapsulating Security Payload (ESP) ................................................................... D-3

Authentication Header (AH) .................................................................................... D-4

IKE Security Association ......................................................................................... D-4

Mode ................................................................................................................. D-5

Key Management .................................................................................................... D-6

Understand the Process Before You Begin ................................................................... D-6

VPN Process Overview ................................................................................................. D-7

Network Interfaces and Addresses ......................................................................... D-7

Interface Addressing ......................................................................................... D-7

Firewalls ........................................................................................................... D-8

Setting Up a VPN Tunnel Between Gateways ........................................................ D-8

VPNC IKE Security Parameters .................................................................................. D-10

VPNC IKE Phase I Parameters ............................................................................. D-10

VPNC IKE Phase II Parameters ............................................................................ D-11

Testing and Troubleshooting ........................................................................................ D-11

Additional Reading ...................................................................................................... D-11

Appendix E

NETGEAR VPN Configuration

of FVS318 or FVM318 to FVL328

Configuration Profile ...................................................................................................... E-1

Step-By-Step Configuration of FVS318 or FVM318 Gateway A .................................... E-2

Step-By-Step Configuration of FVL328 Gateway B ....................................................... E-5

Test the VPN Connection .............................................................................................. E-9

Appendix F

NETGEAR VPN Configuration

FVS318 or FVM318 to Cisco IOS

Configuration Profile .......................................................................................................F-1

Step-By-Step Configuration of FVS318 or FVM318 Gateway A .....................................F-2

Step-By-Step Configuration of Cisco IOS Gateway B ....................................................F-5

Andere Handbücher für FVS318 - ProSafe VPN Firewall Router

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere NETGEAR Firewall Handbücher

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Bedienungsanleitung

NETGEAR

NETGEAR ProSafe VPN Firewall 200 FVX538 Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVM318 Bedienungsanleitung

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Technisches Datenblatt

NETGEAR

NETGEAR FVL328 - Cable/DSL ProSafe VPN Firewall... Bedienungsanleitung

NETGEAR

NETGEAR FVS124G - ProSafe VPN Firewall 25 Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVS318N Bedienungsanleitung

NETGEAR

NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FR328S Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FWAG114 Bedienungsanleitung

NETGEAR

NETGEAR ProSafe VPN Firewall 200 FVX538 Bedienungsanleitung

NETGEAR

NETGEAR FVS336Gv2 - ProSafe Dual WAN Gigabit... Bedienungsanleitung

NETGEAR

NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Montage- und Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FR328S Bedienungsanleitung

NETGEAR

NETGEAR FVL328 - Cable/DSL ProSafe VPN Firewall... Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVS318v3 Bedienungsanleitung

NETGEAR

NETGEAR FVS318G - ProSafe Gigabit VPN Firewall Data Sheet... Bedienungsanleitung

NETGEAR

NETGEAR FVS336Gv1 - ProSafe Dual WAN Gigabit... Bedienungsanleitung

NETGEAR

NETGEAR ProSAFE FVS336G v3 Bedienungsanleitung

NETGEAR

NETGEAR FVS318 - ProSafe VPN Firewall Router Bedienungsanleitung

NETGEAR

NETGEAR FVS338 - ProSafe VPN Firewall 50 Router Montage- und Bedienungsanleitung

NETGEAR

NETGEAR FVS338 - ProSafe VPN Firewall 50 Router Bedienungsanleitung

NETGEAR

NETGEAR FVS318G - ProSafe Gigabit VPN Firewall Data Sheet... Bedienungsanleitung

NETGEAR

NETGEAR FVS336G - ProSafe Dual WAN Gigabit Firewall Bedienungsanleitung

Beliebte Firewall Handbücher anderer Marken

Cisco

Cisco S190 Bedienungsanleitung

Fortinet

Fortinet FortiGate Voice Series Bedienungsanleitung

ADTRAN

ADTRAN NetVanta 2300 Bedienungsanleitung

SecureLogix

SecureLogix ETM System Bedienungsanleitung

Lanner

Lanner FW-8877 Bedienungsanleitung

Huawei

Huawei USG6000 Series Installations- und Betriebshandbuch

H3C

H3C SecPath F5000-AI-15 Bedienungsanleitung

Nexcom

Nexcom DNA 1150 Bedienungsanleitung

Fortinet

Fortinet FortiGate-60 series Bedienungsanleitung

Cisco

Cisco 3110 Handbuch

Draytek

Draytek Vigor2860 Series Bedienungsanleitung

Lanner electronics

Lanner electronics FW-7650 Series Bedienungsanleitung

Swisscom

Swisscom Internet Backup Bedienungsanleitung

SonicWALL

SonicWALL NSa 5700 Bedienungsanleitung

DPtech

DPtech FW1000 SERIES Bedienungsanleitung

FEITIAN

FEITIAN MultiPass FIDO Bedienungsanleitung

EBLOCKER

EBLOCKER PRO Bedienungsanleitung

GTA

GTA GB-200 Bedienungsanleitung