NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Montage- und Bedienungsanleitung

Application Note

Generating a Self Certificate Request Using OpenSSL

for an FVX538 or FVS338 ProSafe® VPN Firewall

Summary

This application note describes how to configure a self certificate request (CSR) on one

WAN interface of a NETGEAR FVX538 or FVS338 ProSafe VPN Firewall using

OpenSSL to create the certificate authority. The procedure is the same for both models.

This application note is an updated version using the version 2.x router firmware. The

older version of this application note describes the procedure using version 1.x firmware.

Procedure

This procedure was developed and tested using:

•NETGEAR FVX538 ProSafe VPN Firewall with version 2.x firmware

oIP address subnet: 192.168.1.1; 255.255.255.0

The procedure includes how to generate a self certificate request, and then how to use

OpenSSL commands to create the certificate authority.

Generating a Self Certificate Request

You can create a CSR from the Generate Self Certificate Request section of the VPN

> Certificates page (certificates.htm) by specifying the values in this procedure.

1. In the Name field, type a name for the certificate (for example, cert1).

2. In the Subject field, type an appropriate subject (for example, FVX538).

3. From the Hash Algorithm drop-down menu select the appropriate algorithm (for

example, MD5).

4. From the Signature Algorithm drop-down menu, select the RSA algorithm.

5. From the Signature Key Length drop-down menu, select the appropriate key length

(for example, 512).

6. In the IP Address field (optional), you can type an IP address or leave it blank.

7. In the Domain Name field (optional), you can type a domain name or leave it blank.

8. In the E-Mail Address field (optional), you can type an email address or leave it

blank.

9. Click the Generate button to generate the certificate request.

10. In the NETGEAR Certificates screen, make sure the certificate you just generated is

added to the Self Certificate Requests table.

11. Click the View button corresponding to the request to view the data created..

12. Select the content in the Data to supply to CA field, copy the selected content into a

.CSR file, and save it.

Creating the Certificate Authority (CA) Using OpenSSL Commands

This section describes how to create the CA that is used for signing the certificate

request.

1. Create an RSA key pair, for example ca.key, by typing the following command where

OpenSSL is installed:

$ openssl genrsa –des3 –out ca.key 1024

2. Create a self-signed root CA certificate, for example ca.crt, by typing the following

command:

$ openssl req –new –x509 –days 365 –key ca.key –out ca.crt

3. Create an Active Self Certificate by signing the CSR with the Trusted Certificate

created in Step 2 by typing the following command:

$ openssl x509 –req –days 182 –in host.csr –CA ca.crt –CAkey ca.key –

\ Cacreateserial –out host.crt

4. To upload the Trusted Certificate created in Step 2, click the Browse button to locate

the .crt file, and then click the Upload button.

5. To upload the Active Self Certificate created in Step 3, click the Browse button to

locate the .crt file, and then click the Upload button

Conclusion

You have now created a self certificate request and certificate authority. This lets you

create VPN tunnels using certificate authentication.

November 27, 2006

Copyright © 2006 NETGEAR®

Andere Handbücher für FVX538v2 - ProSafe VPN Firewall Dual WAN

2

Dieses Handbuch passt für folgende Modelle

3

Inhaltsverzeichnis

Andere NETGEAR Firewall Handbücher

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Bedienungsanleitung

NETGEAR

NETGEAR FWG114Pv1 - Wireless Firewall With USB Print... Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVS318N Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVS114 Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVS114 Bedienungsanleitung

NETGEAR

NETGEAR FVL328 - Cable/DSL ProSafe VPN Firewall... Installationsanleitung

NETGEAR

NETGEAR ProSafe FWAG114 Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FM114P Bedienungsanleitung

NETGEAR

NETGEAR ProSAFE SRX5308 Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FR114P Bedienungsanleitung

NETGEAR

NETGEAR FVS328 - ProSafe VPN Firewall Bedienungsanleitung

NETGEAR

NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN... Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVM318 Bedienungsanleitung

NETGEAR

NETGEAR FVS338 - ProSafe VPN Firewall 50 Router Bedienungsanleitung

NETGEAR

NETGEAR FVS124G - ProSafe VPN Firewall 25 Bedienungsanleitung

NETGEAR

NETGEAR FVL328 - Cable/DSL ProSafe VPN Firewall... Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FR328S Bedienungsanleitung

NETGEAR

NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVM318 Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVX538 Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVX538 Bedienungsanleitung

NETGEAR

NETGEAR FVS336Gv1 - ProSafe Dual WAN Gigabit... Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVS318v3 Bedienungsanleitung

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Bedienungsanleitung

Beliebte Firewall Handbücher anderer Marken

Cisco

Cisco S190 Bedienungsanleitung

Fortinet

Fortinet FortiGate Voice Series Bedienungsanleitung

ADTRAN

ADTRAN NetVanta 2300 Bedienungsanleitung

SecureLogix

SecureLogix ETM System Bedienungsanleitung

Lanner

Lanner FW-8877 Bedienungsanleitung

Huawei

Huawei USG6000 Series Installations- und Betriebshandbuch

H3C

H3C SecPath F5000-AI-15 Bedienungsanleitung

Nexcom

Nexcom DNA 1150 Bedienungsanleitung

Fortinet

Fortinet FortiGate-60 series Bedienungsanleitung

Cisco

Cisco 3110 Handbuch

Draytek

Draytek Vigor2860 Series Bedienungsanleitung

Lanner electronics

Lanner electronics FW-7650 Series Bedienungsanleitung

Swisscom

Swisscom Internet Backup Bedienungsanleitung

SonicWALL

SonicWALL NSa 5700 Bedienungsanleitung

DPtech

DPtech FW1000 SERIES Bedienungsanleitung

FEITIAN

FEITIAN MultiPass FIDO Bedienungsanleitung

EBLOCKER

EBLOCKER PRO Bedienungsanleitung

GTA

GTA GB-200 Bedienungsanleitung