Installation GuideTable of ContentsNETWORK SETUP3Physical setup3Logical setup3Configuration of VPN policies on the Firewall/Routers4FVX538 VPN Config (Policy name: BoxtoBox)4FVS338 VPN Config (Policy name: BoxtoBox)4FVX538 VPN Config (Policy name: LAN1toVPN)5FVX538 VPN Config (Policy name: LAN2Client)6FVS338 VPN Config (Policy name: LAN2Client)6VPN client configuration7Testing the connection8Size: 415 KBPages: 8Language: EnglishOpen manual
Reference ManualTable of ContentsContents5About This Manual11Conventions, Formats and Scope11How to Print this Manual12Revision History13Chapter 1 Introduction15Key Features of the VPN Firewall15A Powerful, True Firewall with Content Filtering16Security16Autosensing Ethernet Connections with Auto Uplink16Extensive Protocol Support17Easy Installation and Management17Maintenance and Support18Package Contents18The FVS318v3 Front Panel19The FVS318v3 Rear Panel20NETGEAR-Related Products21NETGEAR Product Registration, Support, and Documentation21Chapter 2 Connecting the Firewall to the Internet23Prepare to Install Your ProSafe VPN Firewall23First, Connect the FVS318v323Now, Configure the FVS318v3 for Internet Access26Troubleshooting Tips28Accessing the VPN Firewall Overview29Logging On to the FVS318v3 After Configuration Settings Have Been Applied31Bypassing the Configuration Assistant32Using the Smart Setup Wizard33Manually Configuring Your Internet Connection33Chapter 3 Firewall Protection and Content Filtering37Firewall Protection and Content Filtering Overview37Block Sites38Using Rules to Block or Allow Specific Kinds of Traffic39Inbound Rules (Port Forwarding)41Outbound Rules (Service Blocking)43Order of Precedence for Rules45Default DMZ Server45Respond to Ping on Internet WAN Port46Services46Using a Schedule to Block or Allow Specific Traffic49Getting E-Mail Notifications of Event Logs and Alerts51Viewing Logs of Web Access or Attempted Web Access53Chapter 4 Basic Virtual Private Networking55Overview of VPN Configuration56Client-to-Gateway VPN Tunnels56Gateway-to-Gateway VPN Tunnels56Planning a VPN57VPN Tunnel Configuration59Setting Up a Client-to-Gateway VPN Configuration59Step 1: Configuring the Client-to-Gateway VPN Tunnel on the FVS318v360Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC63Monitoring the Progress and Status of the VPN Client Connection71Transferring a Security Policy to Another Client72Setting Up a Gateway-to-Gateway VPN Configuration75Activating the VPN Tunnel81Verifying the Status of a VPN Tunnel84Deactivating a VPN Tunnel85Deleting a VPN Tunnel87Chapter 5 Advanced Virtual Private Networking89Overview of FVS318v3 Policy-Based VPN Configuration89Using Policies to Manage VPN Tunnel Traffic89IKE Policy Automatic Key and Authentication Management90VPN Policy Configuration for Auto Key Negotiation93VPN Policy Configuration for Manual Key Exchange97Using Digital Certificates for IKE Auto-Policy Authentication101Trusted Certificates101Certificate Revocation List (CRL)102VPN Configuration Scenarios for the FVS318v3102FVS318v3 Scenario 1: Gateway-to-Gateway with Preshared Secrets103FVS318v3 Scenario 2: FVS318v3 to FVS318v3 with RSA Certificates109Checking VPN Connections114Chapter 6 Maintenance117Viewing VPN Firewall Status Information117Viewing a List of Attached Devices121Upgrading the Firewall Software121Configuration File Management122Backing Up the Configuration123Restoring the Configuration123Erasing the Configuration123Changing the Administrator Password124Chapter 7 Advanced Configuration125How to Configure Dynamic DNS125Using the LAN IP Setup Options126Configuring LAN TCP/IP Setup Parameters126Using the Firewall as a DHCP server128Using Address Reservation128Configuring Static Routes129Enabling Remote Management Access131Chapter 8 Troubleshooting133Basic Functioning133Power LED Not On133LEDs Never Turn Off133LAN or Internet Port LEDs Not On134Troubleshooting the Web Configuration Interface134Troubleshooting the ISP Connection135Troubleshooting a TCP/IP Network Using a Ping Utility137Testing the LAN Path to Your Firewall137Testing the Path from Your PC to a Remote Device138Restoring the Default Configuration and Password138Problems with Date and Time139Appendix A Technical Specifications and Factory Default Settings141Appendix B Related Documents145Appendix C Sample VPN Configurations with FVS318v3147Case Study Overview147Gathering the Network Information147Configuring the Gateways148Activating the VPN Tunnel151The FVS318v3-to-FVS318v3 Case151Configuring the VPN Tunnel152Viewing and Editing the VPN Parameters154Initiating and Checking the VPN Connections157The FVS318v3-to-FVS318v2 Case158Configuring the VPN Tunnel159Viewing and Editing the VPN Parameters161Initiating and Checking the VPN Connections163The FVS318v3-to-FVL328 Case164Configuring the VPN Tunnel165Viewing and Editing the VPN Parameters167Initiating and Checking the VPN Connections170The FVS318v3-to-VPN Client Case171Client-to-Gateway VPN Tunnel Overview172Configuring the VPN Tunnel172Initiating and Checking the VPN Connections179Index183Size: 10.8 MBPages: 184Language: EnglishOpen manual
Reference ManualTable of ContentsContents5About This Manual11Conventions, Formats and Scope11How to Print this Manual12Revision History13Chapter 1 Introduction15Key Features of the VPN Firewall15A Powerful, True Firewall with Content Filtering16Security16Autosensing Ethernet Connections with Auto Uplink16Extensive Protocol Support17Easy Installation and Management17Maintenance and Support18Package Contents18The FVS318v3 Front Panel19The FVS318v3 Rear Panel20NETGEAR-Related Products21NETGEAR Product Registration, Support, and Documentation21Chapter 2 Connecting the Firewall to the Internet23Prepare to Install Your ProSafe VPN Firewall23First, Connect the FVS318v323Now, Configure the FVS318v3 for Internet Access26Troubleshooting Tips28Accessing the VPN Firewall Overview29Logging On to the FVS318v3 After Configuration Settings Have Been Applied31Bypassing the Configuration Assistant32Using the Smart Setup Wizard33Manually Configuring Your Internet Connection33Chapter 3 Firewall Protection and Content Filtering37Firewall Protection and Content Filtering Overview37Block Sites38Using Rules to Block or Allow Specific Kinds of Traffic39Inbound Rules (Port Forwarding)41Outbound Rules (Service Blocking)43Order of Precedence for Rules45Default DMZ Server45Respond to Ping on Internet WAN Port46Services46Using a Schedule to Block or Allow Specific Traffic49Getting E-Mail Notifications of Event Logs and Alerts51Viewing Logs of Web Access or Attempted Web Access53Chapter 4 Basic Virtual Private Networking55Overview of VPN Configuration56Client-to-Gateway VPN Tunnels56Gateway-to-Gateway VPN Tunnels56Planning a VPN57VPN Tunnel Configuration59Setting Up a Client-to-Gateway VPN Configuration59Step 1: Configuring the Client-to-Gateway VPN Tunnel on the FVS318v360Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC63Monitoring the Progress and Status of the VPN Client Connection71Transferring a Security Policy to Another Client72Setting Up a Gateway-to-Gateway VPN Configuration75Activating the VPN Tunnel81Verifying the Status of a VPN Tunnel84Deactivating a VPN Tunnel85Deleting a VPN Tunnel87Chapter 5 Advanced Virtual Private Networking89Overview of FVS318v3 Policy-Based VPN Configuration89Using Policies to Manage VPN Tunnel Traffic89IKE Policy Automatic Key and Authentication Management90VPN Policy Configuration for Auto Key Negotiation93VPN Policy Configuration for Manual Key Exchange97Using Digital Certificates for IKE Auto-Policy Authentication101Trusted Certificates101Certificate Revocation List (CRL)102VPN Configuration Scenarios for the FVS318v3102FVS318v3 Scenario 1: Gateway-to-Gateway with Preshared Secrets103FVS318v3 Scenario 2: FVS318v3 to FVS318v3 with RSA Certificates109Checking VPN Connections114Chapter 6 Maintenance117Viewing VPN Firewall Status Information117Viewing a List of Attached Devices121Upgrading the Firewall Software121Configuration File Management122Backing Up the Configuration123Restoring the Configuration123Erasing the Configuration123Changing the Administrator Password124Chapter 7 Advanced Configuration125How to Configure Dynamic DNS125Using the LAN IP Setup Options126Configuring LAN TCP/IP Setup Parameters126Using the Firewall as a DHCP server128Using Address Reservation128Configuring Static Routes129Enabling Remote Management Access131Chapter 8 Troubleshooting133Basic Functioning133Power LED Not On133LEDs Never Turn Off133LAN or Internet Port LEDs Not On134Troubleshooting the Web Configuration Interface134Troubleshooting the ISP Connection135Troubleshooting a TCP/IP Network Using a Ping Utility137Testing the LAN Path to Your Firewall137Testing the Path from Your PC to a Remote Device138Restoring the Default Configuration and Password138Problems with Date and Time139Appendix A Technical Specifications and Factory Default Settings141Appendix B Related Documents145Appendix C Sample VPN Configurations with FVS318v3147Case Study Overview147Gathering the Network Information147Configuring the Gateways148Activating the VPN Tunnel151The FVS318v3-to-FVS318v3 Case151Configuring the VPN Tunnel152Viewing and Editing the VPN Parameters154Initiating and Checking the VPN Connections157The FVS318v3-to-FVS318v2 Case158Configuring the VPN Tunnel159Viewing and Editing the VPN Parameters161Initiating and Checking the VPN Connections163The FVS318v3-to-FVL328 Case164Configuring the VPN Tunnel165Viewing and Editing the VPN Parameters167Initiating and Checking the VPN Connections170The FVS318v3-to-VPN Client Case171Client-to-Gateway VPN Tunnel Overview172Configuring the VPN Tunnel172Initiating and Checking the VPN Connections179Index183Size: 10.8 MBPages: 184Language: EnglishOpen manual
