NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Technisches Handbuch

October 2004

202-10066-01 (Beta Draft)

October 2004

NETGEAR, Inc.

4500 Great America Parkway

Santa Clara, CA 95054 USA

Network Planning Guide

for ProSafe VPN Firewall

Router FVX538

October 2004

Trademarks

NETGEAR and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc..

Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.

Other brand and product names are registered trademarks or trademarks of their respective holders.

October 2004

Statement of Conditions

In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to

make changes to the products described in this document without notice.

NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit

layout(s) described herein.

Export Restrictions

The NETGEAR VPN Client (the “software”) is subject to United States Export Controls. The software may not be

exported or transmitted 1) into (or to a national or resident of) Cuba, Iran, Iraq, Libya, North Korea, Syria, Sudan or any

other country to which the United States has embargoed goods; or 2) to anyone on the United States Treasury

Department's list of Specially Designated Nationals or the U.S. Commerce Department's Table of Deny Orders. By using

this software, you agree to abide by the laws, rules and regulations - including, but not limited to the Export

Administration Act and the Arms Export Control Act - applicable to such use and not to transfer, by electronic

transmission or otherwise, the software to either a foreign national or a foreign destination in violation of any such laws.

Contents iii

October 2004

Contents

Chapter 1

Introducing the FVX538

The Router’s Front Panel ...............................................................................................1-1

The Router’s Rear Panel ................................................................................................1-3

Rack Mounting the Router ..............................................................................................1-3

The Router’s IP Address, Login Name, and Password ..................................................1-4

Default Factory Settings .................................................................................................1-4

Chapter 2

Network Planning

Overview of the Planning Process ..................................................................................2-1

Single or Multiple Exposed Hosts ............................................................................2-1

Virtual Private Networks (VPNs) ..............................................................................2-2

The Fail-over Case for Routers With Dual WAN Ports .............................................2-2

The Load Balancing Case for Routers With Dual WAN Ports ..................................2-2

Single or Multiple Exposed Hosts ...................................................................................2-3

Single Exposed Host ................................................................................................2-3

Multiple Exposed Hosts ............................................................................................2-5

Virtual Private Networks (VPNs) .....................................................................................2-6

VPN Road Warrior (Client-to-Gateway) ...................................................................2-8

VPN Gateway-to-Gateway .....................................................................................2-10

VPN Telecommuter (Client-to-Gateway Through a NAT Router) ...........................2-13

October 2004

iv Contents

Network Planning Guide for ProSafe VPN Firewall Router FVX538

Introducing the FVX538 1-1

October 2004

Chapter 1

Introducing the FVX538

This chapter introduces the FVX538 ProSafe VPN Firewall Router.

The Router’s Front Panel

The FVX538 ProSafe VPN Firewall Router front panel shown below contains the port

connections, status LEDs, and the factory defaults reset button.

Figure 1-1: FVX538 Front Panel

You can use the LEDs to verify various conditions. Table 1-1 lists and describes each object on the

front panel of the router and its operation.

Table 1-1. Object Descriptions

Object Activity Description

Power LED On (Green)

Off Power is supplied to the router.

Power is not supplied to the router.

Test LED On (Amber)

Blinking (Amber)

Off

Test mode: The system is initializing or the initialization has failed.

Writing to Flash memory (during upgrading or resetting to defaults).

The system has booted successfully.

Tes t

Power

Factory

Defaults

WAN1 WAN2

Gigabit

ProSafe VPN Firewall

MODEL FVX538

LAN

DMZ

Link/Act

Link/Act Speed

100

Active Active

Link/Act 100Link/Act 100

CONSOLE

Power Test

LED LED WAN1 Port

and LEDs WAN2 Port

and LEDs

LAN Ports

and LEDs Console

Port

Factory

Defaults

Gigabit Port

and LEDs

DMZ Port

and LEDs Button

Network Planning Guide for ProSafe VPN Firewall Router FVX538

1-2 Introducing the FVX538

October 2004

WAN Ports

and LEDs Two RJ-45 WAN ports N-way automatic speed negotiation, Auto MDI/MDIX.

Link/Act LED

On (Green)

Blinking (Green)

Off

The WAN port has detected a link with a connected Ethernet device.

Data is being transmitted or received by the WAN port.

The WAN port has no link.

100 LED

On (Green)

Off The WAN port is operating at 100 Mbps.

The WAN port is operating at 10 Mbps.

Active LED

On (Green)

On (Amber)

Off

The WAN port has a valid Internet connection.

The Internet connection is down.

The WAN port is either not enabled or has no link.

LAN Ports

and LEDs 8-port RJ-45 10/100

Mbps Fast Ethernet

Switch

N-way automatic speed negotiation, auto MDI/MDIX.

Link/Act LED

On (Green)

Blinking (Green)

Off

The LAN port has detected a link with a connected Ethernet device.

Data is being transmitted or received by the LAN port.

The LAN port has no link.

100 LED

On (Green)

Off The LAN port is operating at 100 Mbps.

The LAN port is operating at 10 Mbps.

DMZ (port 8)

On (Green)

Off Port 8 is operating as a dedicated hardware DMZ port.

Port 8 is operating as a normal LAN port.

Gigabit Port

and LEDs Gbit RJ-45 connector Port for connecting to a gigabit Ethernet device.

Link/Act LED

On (Green)

Blinking (Green)

Off

The LAN port has detected a link with a connected Ethernet device.

Data is being transmitted or received by the LAN port.

The LAN port has no link.

Speed LED

On (Green)

On (Amber)

Off

The LAN port is operating at 1,000 Mbps.

The LAN port is operating at 100 Mbps.

The LAN port is operating at 10 Mbps.

Console

Port DB9 male connector Port for connecting to an optional console terminal. Default baud rate

is 9,600; pinouts: (2) Tx, (3) Rx, (5) and (7) Gnd.

Factory

Defaults — Factory Defaults reset push button (see “Default Factory Settings” on

page 1-4 for the factory defaults).

Table 1-1. Object Descriptions (continued)

Object Activity Description

Network Planning Guide for ProSafe VPN Firewall Router FVX538

Introducing the FVX538 1-3

October 2004

The Router’s Rear Panel

The rear panel of the FVX538 ProSafe VPN Firewall Router (Figure 1-2) contains the On/Off

switch and AC power connection.

Figure 1-2: FVX538 Rear Panel

Viewed from left to right, the rear panel contains the following elements:

•ACpowerin

•On/Offswitch

Rack Mounting the Router

The FVX538 can be mounted either on a desktop (using included rubber feet) or in a 19-inch rack

(using the included rack mounting hardware illustrated in Figure 1-3).

Figure 1-3: Attaching Mounting Brackets

100-240 VAC, 50-60Hz, 0.7A max.

On/Off

Switch

AC Power

Connection

Network Planning Guide for ProSafe VPN Firewall Router FVX538

1-4 Introducing the FVX538

October 2004

The Router’s IP Address, Login Name, and Password

Check the label on the bottom of the FVX538’s enclosure if you forget the following factory

default information:

• IP Address: http://192.168.1.1 to reach the Web-based GUI from the LAN

•Username:admin

• Password: password

Figure 1-4: FVX538 Bottom Label

Default Factory Settings

When you first receive your FVX538, the default factory settings will be set as shown in Table 1-2

below. You can restore these defaults with the Factory Defaults restore switch on the front panel —

see “The Router’s Front Panel” on page 1-1.

• Pressing this switch for a prolonged period (>5 seconds) causes the router to restore all factory

default settings and reboot.

• A shorter press and release causes the router to merely reboot.

ProSafe VPN Firewall FVX538

MAC

(internet)

http://192.168.1.1

user name: admin

password: password

DEFAULT ACCESS

MAC

(internet)

272-10134-01

SERIALMAC

(local)

N10947

E-E011-02-4749 (B)

IP Address

User Name

Password

Network Planning Guide for ProSafe VPN Firewall Router FVX538

Introducing the FVX538 1-5

October 2004

Table 1-2. Factory Default Settings

Feature Default

User Name (case sensitive) admin

Password (case sensitive) password

Built-in DHCP server DHCP server is enabled, issues addresses in the

default subnet

IP Configuration IP Address: 192.168.1.1

Subnet Mask: 255.255.255.0

Gateway: 0.0.0.0

Time Zone GMT

Time Zone Adjust for Daylight Saving TIme Disabled

SNMP Disabled

Network Planning Guide for ProSafe VPN Firewall Router FVX538

1-6 Introducing the FVX538

October 2004

Andere Handbücher für FVX538v1 - ProSafe VPN Firewall Dual WAN

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere NETGEAR Netzwerk-Router Handbücher

NETGEAR

NETGEAR XEB1004 - 85 Mbps Powerline EN Switch Bedienungsanleitung

NETGEAR

NETGEAR Nighthawk X4S AC2600 Bedienungsanleitung

NETGEAR

NETGEAR XS512EM Bedienungsanleitung

NETGEAR

NETGEAR Nighthawk X6S Bedienungsanleitung

NETGEAR

NETGEAR RP614 v4 Referenzhandbuch

NETGEAR

NETGEAR DG834Gv3 - 54 Mbps Wireless ADSL Firewall... Bedienungsanleitung

NETGEAR

NETGEAR GC110 Bedienungsanleitung

NETGEAR

NETGEAR WNR3500L - RangeMax Wireless-N Gigabit... Bedienungsanleitung

NETGEAR

NETGEAR Nighthawk R7000P Bedienungsanleitung

NETGEAR

NETGEAR DG632 - ADSL Modem Router Bedienungsanleitung

NETGEAR

NETGEAR RT210 Bedienungsanleitung

NETGEAR

NETGEAR R6300 Bedienungsanleitung

NETGEAR

NETGEAR WNDR3800 - N600 WIRELESS DUAL BAND GIGABIT ROUTER-Premium... Bedienungsanleitung

NETGEAR

NETGEAR ProSAFE GS724Tv4 Bedienungsanleitung

NETGEAR

NETGEAR M5300 Series Bedienungsanleitung

NETGEAR

NETGEAR Wireless ADSL Modem Router Benutzerhandbuch

NETGEAR

NETGEAR ETHERNET SWITCH SW108 Bedienungsanleitung

NETGEAR

NETGEAR DG834 - ADSL Firewall Router Bedienungsanleitung

NETGEAR

NETGEAR N600 WNDR3400v2 Bedienungsanleitung

NETGEAR

NETGEAR N750 Bedienungsanleitung

NETGEAR

NETGEAR Nighthawk R7100LG Bedienungsanleitung

NETGEAR

NETGEAR DGN2200 - Wireless-N 300 Router Bedienungsanleitung

NETGEAR

NETGEAR DGFV338 - ProSafe Wireless ADSL Modem VPN Firewall... Betriebsanleitung

NETGEAR

NETGEAR RP614 v2 Bedienungsanleitung

Beliebte Netzwerk-Router Handbücher anderer Marken

Allnet

Allnet ALL0333AU Bedienungsanleitung

HomeSeer

HomeSeer HT-SEL Bedienungsanleitung

Sercomm

Sercomm Genesis OC3505D Bedienungsanleitung

Billion

Billion BIPAC 5102 Series Bedienungsanleitung

TP-Link

TP-Link TD-8817 Bedienungsanleitung

Motorola

Motorola MR1900 Bedienungsanleitung

Digi

Digi IX14 Bedienungsanleitung

Cisco

Cisco NCS 540 Handbuch

XAVi

XAVi X8821e Bedienungsanleitung

BEC

BEC 6200WZL Bedienungsanleitung

MikroTik

MikroTik hAP ac3 Series Bedienungsanleitung

Korenix

Korenix JetNet 5428G Series Bedienungsanleitung

Automated Logic

Automated Logic ZN551 Betriebsanleitung

Cisco

Cisco ASR 1000 Series Bedienerhandbuch

EnGenius

EnGenius ESR-9710 Bedienungsanleitung

Cisco

Cisco 805 Series Bedienungs- und Sicherheitshinweise

LevelOne

LevelOne FBR-1416 Bedienungsanleitung

Dynacord

Dynacord Promatrix 6000 Bedienungsanleitung