v1.0, September 2007

vi

Product and Publication Details

Model Number:

FVG318

Publication Date:

September 2007

Product Family:

Wireless Router

Product Name:

ProSafe 802.11g Wireless VPN Firewall

Home or Business Product:

Business

Language:

English

Publication Part Number:

202-10318-01

Publication Version Number:

1.0

vii

v1.0, September 2007

Contents

About This Manual

Conventions, Formats, and Scope

..................................................................................

xiii

How to Use This Manual

.................................................................................................

xiv

How to Print this Manual

..................................................................................................

xiv

Revision History

...............................................................................................................

xv

Chapter 1

Introduction

Key Features of the VPN Firewall Router

.......................................................................

1-1

802.11g and 802.11b Wireless Networking

..............................................................

1-2

Wireless Multimedia (WMM) Support

.......................................................................

1-2

A Powerful, True Firewall with Content Filtering

......................................................

1-2

Security

....................................................................................................................

1-3

Autosensing Ethernet Connections with Auto Uplink

...............................................

1-3

Extensive Protocol Support

......................................................................................

1-3

Easy Installation and Management

..........................................................................

1-4

Maintenance and Support

........................................................................................

1-5

Package Contents

..........................................................................................................

1-5

The FVG318 Front Panel

.........................................................................................

1-5

The FVG318 Rear Panel

..........................................................................................

1-6

Chapter 2

Connecting the Firewall to the Internet

Installing Your FVG318

...................................................................................................

2-1

Configuring the FVG318 for Internet Access with Auto Detect

.......................................

2-4

Manually Configuring your Internet Connection

.............................................................

2-7

Configuring Dynamic DNS (If Needed)

...........................................................................

2-9

Configuring Your Time Zone

.........................................................................................

2-11

Troubleshooting Tips

....................................................................................................

2-12

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

viii

Contents

v1.0, September 2007

Chapter 3

Configuring Wireless Connectivity

Observing Performance, Placement, and Range Guidelines

.........................................

3-1

Implementing Appropriate Wireless Security

..................................................................

3-2

Understanding Wireless Settings

...................................................................................

3-3

Security Check List for SSID and WEP Settings

......................................................

3-7

Setting Up and Testing Basic Wireless Connectivity

................................................

3-8

Restricting Wireless Access by MAC Address

.........................................................

3-9

Configuring WEP Security Settings

........................................................................

3-10

Configuring WPA with RADIUS

..............................................................................

3-12

Configuring WPA2 with RADIUS

............................................................................

3-14

Configuring WPA and WPA2 with RADIUS

............................................................

3-15

Configuring WPA-PSK

...........................................................................................

3-17

Configuring WPA2-PSK

.........................................................................................

3-18

Configuring WPA-PSK and WPA2-PSK

.................................................................

3-20

Chapter 4

Firewall Protection and Content Filtering

Firewall Protection and Content Filtering Overview

........................................................

4-1

Block Sites

......................................................................................................................

4-1

Using Rules to Block or Allow Specific Kinds of Traffic

..................................................

4-4

Inbound Rules (Port Forwarding)

.............................................................................

4-6

Outbound Rules (Service Blocking)

.........................................................................

4-8

Order of Precedence for Rules

................................................................................

4-9

Default DMZ Server

...............................................................................................

4-10

Attack Checks

........................................................................................................

4-11

Services

........................................................................................................................

4-12

Using a Schedule to Block or Allow Specific Traffic

......................................................

4-13

Getting E-Mail Notifications of Firewall Logs

................................................................

4-14

Chapter 5

Basic Virtual Private Networking

Overview of VPN Configuration

......................................................................................

5-2

Client-to-Gateway VPN Tunnels

..............................................................................

5-2

Gateway-to-Gateway VPN Tunnels

.........................................................................

5-2

Planning a VPN

..............................................................................................................

5-3

VPN Tunnel Configuration

..............................................................................................

5-4

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

Contents

ix

v1.0, September 2007

Setting Up a Client-to-Gateway VPN Configuration

.......................................................

5-5

Step 1: Configuring the Client-to-Gateway VPN Tunnel on the FVG318

.................

5-5

Step 2: Configuring the NETGEAR ProSafe VPN Client on the Remote PC

...........

5-7

Monitoring the Progress and Status of the VPN Client Connection

.......................

5-15

Transferring a Security Policy to Another Client

....................................................

5-17

Setting Up a Gateway-to-Gateway VPN Configuration

................................................

5-19

Activating a VPN Tunnel

...............................................................................................

5-23

Verifying the Status of a VPN Tunnel

.....................................................................

5-25

Deactivating a VPN Tunnel

....................................................................................

5-26

Deleting a VPN Tunnel

...........................................................................................

5-27

Chapter 6

Advanced Virtual Private Networking

Using IKE and VPN Policies to Manage VPN Traffic

......................................................

6-1

Using Automatic Key Management

..........................................................................

6-2

IKE Policy Automatic Key and Authentication Management

....................................

6-2

VPN Policy Configuration for Auto Key and Manual Negotiation

.............................

6-3

Using Digital Certificates for IKE Auto-Policy Authentication

.........................................

6-7

Certificate Revocation List (CRL)

.............................................................................

6-7

VPN Configuration Scenarios on the FVG318

...............................................................

6-8

VPN Consortium Scenario 1:

Gateway-to-Gateway with Preshared Secrets

.........................................................

6-9

VPN Consortium Scenario 2: FVG318 Gateway to Gateway with Digital Certificates 6-15

Chapter 7

Maintenance

Viewing VPN Firewall Router Status Information

............................................................

7-1

Upgrading the Firewall Software

....................................................................................

7-4

Backing Up and Restoring Settings

................................................................................

7-5

Changing the Administrator Password

...........................................................................

7-6

Chapter 8

Advanced Configuration

Configuring Dynamic DNS

..............................................................................................

8-1

Using the LAN IP Setup Options

....................................................................................

8-2

Configuring LAN TCP/IP Setup Parameters

............................................................

8-2

Using the Firewall as a DHCP server

.......................................................................

8-3

Using Address Reservation

......................................................................................

8-4

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

x

Contents

v1.0, September 2007

Configuring Static Routes

...............................................................................................

8-5

Configuring RIP

........................................................................................................

8-6

Static Route Example

...............................................................................................

8-7

Enabling Remote Management Access

.........................................................................

8-8

SNMP Administration

...................................................................................................

8-10

Enabling Universal Plug and Play (UPnP)

....................................................................

8-12

Chapter 9

Troubleshooting

Basic Functioning

...........................................................................................................

9-1

Power LED Not On

...................................................................................................

9-1

LEDs Never Turn Off

................................................................................................

9-2

LAN or Internet Port LEDs Not On

...........................................................................

9-2

Troubleshooting the Web Configuration Interface

..........................................................

9-2

Troubleshooting the ISP Connection

..............................................................................

9-3

Troubleshooting a TCP/IP Network Using a Ping Utility

.................................................

9-5

Testing the LAN Path to Your Firewall

......................................................................

9-5

Testing the Path from Your PC to a Remote Device

................................................

9-6

Restoring the Default Configuration and Password

........................................................

9-6

Problems with Date and Time

.........................................................................................

9-7

Appendix A

Default Settings and Technical Specifications

Default Settings

.............................................................................................................

A-1

Technical Specifications

.................................................................................................

A-3

Appendix B

Related Documents

Appendix C

VPN Configuration of NETGEAR FVG318

Case Study Overview

....................................................................................................

C-1

Gathering the Network Information

.........................................................................

C-1

Configuring the Gateways

.......................................................................................

C-2

Activating the VPN Tunnel

......................................................................................

C-3

The FVG318-to-FVG318 Case

......................................................................................

C-3

Configuring the VPN Tunnel

...................................................................................

C-4

Viewing and Editing the VPN Parameters

...............................................................

C-5

Initiating and Checking the VPN Connections

........................................................

C-6