NETGEAR FVS318G - ProSafe Gigabit VPN Firewall Data Sheet... Manuel utilisateur

202-10521-01

v1.1

November, 2009

NETGEAR, Inc.

350 East Plumeria Drive

San Jose, CA 95134

ProSafe Gigabit 8 Port

VPN Firewall FVS318G

Reference Manual

1.1 November, 2009

Technical Support

Please refer to the support information card that shipped with your product. By registering your product at

http://www.netgear.com/register, we can provide you with faster expert technical support and timely notices of product

and software upgrades.

NETGEAR, INC. Support Information

Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see your Support information card.

E-mail: [email protected]

North American NETGEAR website: http://www.netgear.com

Trademarks

NETGEAR, the NETGEAR logo, ProSafe, Smart Wizard, and Auto Uplink are trademarks or registered trademarks of

NETGEAR, Inc. Microsoft, Windows, Windows NT and Vista are registered trademarks of Microsoft

Corporation.Other brand and product names are registered trademarks or trademarks of their respective holders.

Statement of Conditions

In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to

make changes to the products described in this document without notice.

NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit

layout(s) described herein.

Certificate of the Manufacturer/Importer

It is hereby certified that the ProSafe VPN Firewall has been suppressed in accordance with the conditions set out in the

BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in

accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating

instructions.

The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market

and has been granted the right to test the series for compliance with the regulations.

Bestätigung des Herstellers/Importeurs

Es wird hiermit bestätigt, daß dasProSafe VPN Firewall gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/1992

aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann jedoch

gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.

Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt

gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.

Voluntary Control Council for Interference (VCCI) Statement

This equipment is in the Class B category (information equipment to be used in a residential area or an adjacent area

thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing

Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used

near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.

1.1 November, 2009

iii

Model Number: FVS318G

Publication Date: November, 2009

Product Family: VPN Firewall Router

Product Name: ProSafe VPN Firewall

Home or Business Product: Business

Language: English

Publication Part Number: 202-10521-01

Publication Version Number: 1.1

1.1 November, 2009

Contents v

1.1November, 2009

Contents

About This Manual

Conventions, Formats, and Scope ................................................................................... xi

How to Print This Manual ................................................................................................ xii

Revision History ............................................................................................................... xii

Chapter 1

Introduction

Key Features of the VPN Firewall ..................................................................................1-1

Advanced VPN Support for Both IPsec and SSL .....................................................1-2

A Powerful, True Firewall with Content Filtering ......................................................1-2

Autosensing Ethernet Connections with Auto Uplink ...............................................1-3

Extensive Protocol Support ......................................................................................1-3

Easy Installation and Management ................................................................................1-4

Maintenance and Support ..............................................................................................1-4

Package Contents ..........................................................................................................1-5

Front Panel Features ......................................................................................................1-5

Rear Panel Features ......................................................................................................1-7

Default IP Address, Login Name, and Password Location .............................................1-8

Qualified Web Browsers .................................................................................................1-8

Chapter 2

Connecting the FVS318G to the Internet

Understanding the Connection Steps .............................................................................2-1

Logging into the VPN Firewall Router Router .................................................................2-2

Navigating the Menus .....................................................................................................2-3

Configuring the Internet Connections .............................................................................2-4

Automatically Detecting and Connecting .................................................................2-5

Manually Configuring the Internet Connection .........................................................2-7

Configuring the WAN Mode ..........................................................................................2-11

Network Address Translation .................................................................................2-11

vi Contents

1.1 November, 2009

Classical Routing ...................................................................................................2-12

Configuring Dynamic DNS (Optional) ...........................................................................2-13

Configuring the Advanced WAN Options (Optional) .....................................................2-15

Chapter 3

LAN Configuration

Choosing the Firewall DHCP Options ............................................................................3-1

Configuring the LAN Setup Options .........................................................................3-2

Managing Groups and Hosts (LAN Groups) ...................................................................3-5

Viewing the LAN Groups Database ..........................................................................3-6

Changing Group Names in the LAN Groups Database ...........................................3-9

Configuring DHCP Address Reservation ........................................................................3-9

Configuring Multi Home LAN IP Addresses ..................................................................3-10

Configuring Static Routes .............................................................................................3-11

Configuring Routing Information Protocol (RIP) ...........................................................3-13

Chapter 4

Firewall Protection and Content Filtering

About Firewall Protection and Content Filtering .............................................................4-1

Using Rules to Block or Allow Specific Kinds of Traffic...................................................4-2

About Services-Based Rules ...................................................................................4-3

Viewing the Rules ....................................................................................................4-8

Order of Precedence for Rules ................................................................................4-8

Setting the Default Outbound Policy ........................................................................4-9

Creating a LAN WAN Outbound Services Rule .......................................................4-9

Creating a LAN WAN Inbound Services Rule ........................................................4-10

Inbound Rules Examples .......................................................................................4-13

Outbound Rules Example ......................................................................................4-16

Adding Customized Services .................................................................................4-16

Setting Quality of Service (QoS) Priorities .............................................................4-18

Attack Checks ...............................................................................................................4-19

Blocking Internet Sites (Content Filtering).....................................................................4-21

Configuring Source MAC Filtering ................................................................................4-24

Configuring IP/MAC Address Binding Alerts ................................................................4-26

Configuring Port Triggering ..........................................................................................4-27

Setting a Schedule to Block or Allow Specific Traffic ...................................................4-29

Contents vii

1.1November, 2009

Configuring a Bandwidth Profile ...................................................................................4-30

Configuring Session Limits ...........................................................................................4-31

E-Mail Notifications of Event Logs and Alerts ...............................................................4-33

Administrator Tips .........................................................................................................4-33

Chapter 5

Virtual Private Networking Using IPsec

Using the VPN Wizard for Client and Gateway Configurations ......................................5-1

Creating Gateway to Gateway VPN Tunnels with the Wizard .................................5-2

Creating a Client to Gateway VPN Tunnel ...............................................................5-5

Testing the Connections and Viewing Status Information ............................................5-11

NETGEAR VPN Client Status and Log Information ...............................................5-11

FVS318G VPN Connection Status and Logs .........................................................5-13

Managing VPN Policies ................................................................................................5-14

Managing IKE Policies ...........................................................................................5-14

Managing VPN Policies ..........................................................................................5-16

Configuring Extended Authentication (XAUTH) ............................................................5-17

Configuring XAUTH for VPN Clients ......................................................................5-18

User Database Configuration .................................................................................5-19

RADIUS Client Configuration .................................................................................5-19

Assigning IP Addresses to Remote Users (ModeConfig) .............................................5-21

Mode Config Operation ..........................................................................................5-22

Configuring the VPN Firewall Router .....................................................................5-22

Configuring the ProSafe VPN Client for ModeConfig .............................................5-25

Configuring Keepalives and Dead Peer Detection .......................................................5-27

Configuring Keepalive ............................................................................................5-27

Configuring NetBIOS Bridging with VPN ......................................................................5-29

Chapter 6

Managing Users, Authentication, and Certificates

Managing Users ............................................................................................................. 6-1

Changing the Administrator Login ........................................................................... 6-2

Changing the Guest Login ...................................................................................... 6-3

Setting administrator timeout and domain display name ........................................ 6-4

Changing Passwords and Settings ......................................................................... 6-6

viii Contents

1.1 November, 2009

RADIUS Server External Authentication ................................................................. 6-7

Managing Certificates .................................................................................................... 6-8

Viewing and Loading CA Certificates .................................................................... 6-10

Viewing Active Self Certificates ............................................................................. 6-11

Obtaining a Self Certificate from a Certificate Authority ........................................ 6-11

Managing your Certificate Revocation List (CRL) ................................................. 6-14

Chapter 7

Router and Network Management

Performance Management .............................................................................................7-1

Bandwidth Capacity .................................................................................................7-1

Features That Reduce Traffic ..................................................................................7-2

Features That Increase Traffic .................................................................................7-5

Using QoS to Shift the Traffic Mix ............................................................................7-7

Tools for Traffic Management ..................................................................................7-8

Changing Passwords and Administrator Settings ..........................................................7-8

Enabling Remote Management Access .......................................................................7-10

Using the Command Line Interface ..............................................................................7-13

Using an SNMP Manager .............................................................................................7-13

Configuration File Management ...................................................................................7-15

Upgrading the Firmware ...............................................................................................7-17

Configuring Date and Time Service ..............................................................................7-18

Chapter 8

Troubleshooting

Basic Functions ..............................................................................................................8-1

Power LED Not On ...................................................................................................8-2

LEDs Never Turn Off ................................................................................................8-2

LAN or WAN Port LEDs Not On ...............................................................................8-2

Troubleshooting the Web Configuration Interface ..........................................................8-3

Troubleshooting the ISP Connection ..............................................................................8-4

Troubleshooting a TCP/IP Network Using a Ping Utility .................................................8-5

Testing the LAN Path to Your VPN Firewall Router..................................................8-5

Testing the Path from Your PC to a Remote Device ................................................8-6

Restoring the Default Configuration and Password ........................................................8-7

Contents ix

1.1November, 2009

Problems with Date and Time ........................................................................................8-8

Using the Diagnostics Utilities ........................................................................................8-9

Appendix A

Technical Specifications and Factory Default Settings

Appendix B

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité

LevelOne

LevelOne FBR-1416 Manuel utilisateur