NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Instructions d'installation et d'utilisation

Application Note

Generating a Self Certificate Request Using OpenSSL

for an FVX538 or FVS338 ProSafe® VPN Firewall

Summary

This application note describes how to configure a self certificate request (CSR) on one

WAN interface of a NETGEAR FVX538 or FVS338 ProSafe VPN Firewall using

OpenSSL to create the certificate authority. The procedure is the same for both models.

This application note is an updated version using the version 2.x router firmware. The

older version of this application note describes the procedure using version 1.x firmware.

Procedure

This procedure was developed and tested using:

•NETGEAR FVX538 ProSafe VPN Firewall with version 2.x firmware

oIP address subnet: 192.168.1.1; 255.255.255.0

The procedure includes how to generate a self certificate request, and then how to use

OpenSSL commands to create the certificate authority.

Generating a Self Certificate Request

You can create a CSR from the Generate Self Certificate Request section of the VPN

> Certificates page (certificates.htm) by specifying the values in this procedure.

1. In the Name field, type a name for the certificate (for example, cert1).

2. In the Subject field, type an appropriate subject (for example, FVX538).

3. From the Hash Algorithm drop-down menu select the appropriate algorithm (for

example, MD5).

4. From the Signature Algorithm drop-down menu, select the RSA algorithm.

5. From the Signature Key Length drop-down menu, select the appropriate key length

(for example, 512).

6. In the IP Address field (optional), you can type an IP address or leave it blank.

7. In the Domain Name field (optional), you can type a domain name or leave it blank.

8. In the E-Mail Address field (optional), you can type an email address or leave it

blank.

9. Click the Generate button to generate the certificate request.

10. In the NETGEAR Certificates screen, make sure the certificate you just generated is

added to the Self Certificate Requests table.

11. Click the View button corresponding to the request to view the data created..

12. Select the content in the Data to supply to CA field, copy the selected content into a

.CSR file, and save it.

Creating the Certificate Authority (CA) Using OpenSSL Commands

This section describes how to create the CA that is used for signing the certificate

request.

1. Create an RSA key pair, for example ca.key, by typing the following command where

OpenSSL is installed:

$ openssl genrsa –des3 –out ca.key 1024

2. Create a self-signed root CA certificate, for example ca.crt, by typing the following

command:

$ openssl req –new –x509 –days 365 –key ca.key –out ca.crt

3. Create an Active Self Certificate by signing the CSR with the Trusted Certificate

created in Step 2 by typing the following command:

$ openssl x509 –req –days 182 –in host.csr –CA ca.crt –CAkey ca.key –

\ Cacreateserial –out host.crt

4. To upload the Trusted Certificate created in Step 2, click the Browse button to locate

the .crt file, and then click the Upload button.

5. To upload the Active Self Certificate created in Step 3, click the Browse button to

locate the .crt file, and then click the Upload button

Conclusion

You have now created a self certificate request and certificate authority. This lets you

create VPN tunnels using certificate authentication.

November 27, 2006

Copyright © 2006 NETGEAR®

Autres manuels pour FVX538v2 - ProSafe VPN Firewall Dual WAN

2

Ce manuel convient aux modèles suivants

3

Table des matières

Autres manuels NETGEAR Pare-feu

NETGEAR

NETGEAR FVS336G - ProSafe Dual WAN Gigabit Firewall Manuel utilisateur

NETGEAR

NETGEAR FVS338 - ProSafe VPN Firewall 50 Router Manuel utilisateur

NETGEAR

NETGEAR ProSAFE SRX5308 Manuel utilisateur

NETGEAR

NETGEAR ProSafe FR328S Manuel utilisateur

NETGEAR

NETGEAR FVG318v2 - ProSafe 802.11g Wireless VPN Firewall... Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVS114 Manuel utilisateur

NETGEAR

NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVS318N Manuel utilisateur

NETGEAR

NETGEAR ProSafe FR114P Manuel utilisateur

NETGEAR

NETGEAR FVS318G-100NAS Manuel utilisateur

NETGEAR

NETGEAR ProSafe Quad WAN FR538G Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVS318N Manuel utilisateur

NETGEAR

NETGEAR ProSAFE SRX5308 Manuel utilisateur

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Manuel utilisateur

NETGEAR

NETGEAR ProSafe FR328S Manuel utilisateur

NETGEAR

NETGEAR FVS318G - ProSafe Gigabit VPN Firewall Data Sheet... Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVS318N Manuel utilisateur

NETGEAR

NETGEAR FVS328 - ProSafe VPN Firewall Manuel utilisateur

NETGEAR

NETGEAR ProSAFE SRX5308 Manuel utilisateur

NETGEAR

NETGEAR SRXN3205 - ProSafe Wireless-N VPN Firewall Wireless... Manuel utilisateur

NETGEAR

NETGEAR FVS318 - ProSafe VPN Firewall Router Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVM318 Manuel utilisateur

NETGEAR

NETGEAR ProSafe FWAG114 Manuel utilisateur

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Manuel utilisateur

Manuels Pare-feu populaires d'autres marques

Cisco

Cisco S190 Manuel utilisateur

Fortinet

Fortinet FortiGate Voice Series Manuel utilisateur

ADTRAN

ADTRAN NetVanta 2300 Manuel utilisateur

SecureLogix

SecureLogix ETM System Manuel utilisateur

Lanner

Lanner FW-8877 Manuel utilisateur

Huawei

Huawei USG6000 Series Manuel d'installation et d'exploitation

H3C

H3C SecPath F5000-AI-15 Manuel utilisateur

Nexcom

Nexcom DNA 1150 Manuel utilisateur

Fortinet

Fortinet FortiGate-60 series Manuel utilisateur

Cisco

Cisco 3110 Manuel

Draytek

Draytek Vigor2860 Series Manuel utilisateur

Lanner electronics

Lanner electronics FW-7650 Series Manuel utilisateur

Swisscom

Swisscom Internet Backup Manuel utilisateur

SonicWALL

SonicWALL NSa 5700 Manuel utilisateur

DPtech

DPtech FW1000 SERIES Manuel utilisateur

FEITIAN

FEITIAN MultiPass FIDO Manuel utilisateur

EBLOCKER

EBLOCKER PRO Manuel utilisateur

GTA

GTA GB-200 Manuel utilisateur