ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

2-12

Connecting the Firewall to the Internet

v1.0, September 2007

•

Select the

Use Custom NTP Servers

if you prefer to use a particular NTP server.

–

Enter the name or IP address of an NTP Server in the

Server 1 Name/IP Address

field.

–

If required, you can also enter the address of another NTP server in the

Server 2

Name/IP Address

field.

If you select this option and leave either the Server 1 or Server 2 fields empty, then they

will be set to the default NETGEAR NTP servers (time-a.netgear.com, time-

b.netgear.com, etc.).

5.

Click

Apply

to save your settings.

Troubleshooting Tips

Here are some tips for correcting simple problems you may have.

Be sure to restart your network in the correct sequence.

Always follow this sequence: 1) Unplug and turn off the modem, FVG318, and computer; 2) plug

in and turn on the modem, wait two minutes; 3) plug in the FVG318 and wait 30 seconds; 4) turn

on the computer.

Make sure the Ethernet cables are securely plugged in.

•

For each powered on computer connected to the VPN firewall router with a securely plugged

in Ethernet cable, the corresponding VPN firewall router LAN port status light will be lit. The

label on the bottom of the VPN firewall router identifies the number of each LAN port.

•

The Internet port status light on the VPN firewall router will be lit if the Ethernet cable from

the FVG318 to the modem is plugged in securely and the modem and VPN firewall router are

turned on.

Make sure the computer & router wireless settings match exactly.

The Wireless Network Name (SSID) and security settings (WEP/WPA, MAC access control list)

of the FVG318 and wireless computer must match exactly.

Make sure the network settings of the computer are correct.

•

LAN and wirelessly connected computers

must

be configured to obtain an IP address

automatically via DHCP.

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

Connecting the Firewall to the Internet

2-13

v1.0, September 2007

•

Some cable modem ISPs require you to use the MAC address of the computer registered on

the account. If so, in the Router MAC Address section of the Basic Settings menu, select, “Use

this Computer’s MAC Address.” The router will then capture and use the MAC address of the

computer that you are now using. You must be using the computer that is registered with the

ISP. Click

Apply

to save your settings. Restart the network in the correct sequence.

Check the router status lights to verify correct router operation.

•

If the Power light does not turn solid green within 2 minutes after turning the router on, reset

the router according to the instructions in the

Reference Manual

on the CD.

•

If the Wireless light does not come on, verify that the wireless feature is turned on according to

the instructions in the

Reference Manual

on the CD.

Tips for Accessing the VPN firewall

The table below describes how you access the VPN firewall router, depending on the state of the

VPN firewall router.

Table 2-2.

Accessing the firewall router

Firewall State

Access Options

Description

Factory Default

Note

: The VPN

firewall router is

supplied in the

factory default state.

Also, the factory

default state is

restored when you

use the factory reset

button. See

“To

backup and restore

your configuration:”

on page 7-5

for

more information on

this feature.

Automatic Access via

the Smart Wizard

Configuration

Assistant

Any time a browser is opened on any computer connected to

the VPN firewall router, the VPN firewall router will

automatically connect to that browser and display the

Configuration Assistant welcome page.

There is no need to enter the VPN firewall router URL in the

browser, or provide the login user name and password.

Manually enter a URL

to bypass the Smart

Wizard Configuration

Assistant

You can bypass the Smart Wizard Configuration Assistant

feature by typing

http://192.168.0.1/basicsetting.htm

in the browser address bar and pressing

Enter

. You will not

be prompted for a user name or password.

This will enable you to manually configure the VPN firewall

router even when it is in the factory default state. When

manually configuring the firewall, you must complete the

configuration by clicking

Apply

when you finish entering your

settings. If you do not do so, a browser on any PC connected

to the firewall will automatically display the firewall

Configuration Assistant welcome page rather than the

browser’s home page.

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

2-14

Connecting the Firewall to the Internet

v1.0, September 2007

Configuration

Settings Have Been

Applied

Enter the standard

URL to access the

VPN firewall router

Connect to the VPN firewall router by typing the default router

IP address in the address field of your browser, then press

Enter

:

The VPN firewall router will prompt you to enter the user

name of

admin

and the

password

. The default password is

password.

Enter the IP address

of the VPN firewall

router

Connect to the VPN firewall router by typing the IP address of

the VPN firewall router in the address field of your browser,

then press

Enter

. 192.168.0.1 is the default IP address of the

VPN firewall router. The VPN firewall router will prompt you

to enter the user name of

admin

and the

password

. The

default password is password.

Table 2-2.

Accessing the firewall router (continued)

Firewall State

Access Options

Description

Configuring Wireless Connectivity

3-1

v1.0, September 2007

Chapter 3

Configuring Wireless Connectivity

This chapter describes how to configure the wireless features of your FVG318 VPN firewall.

Observing Performance, Placement, and Range Guidelines

In planning your wireless network, you should consider the level of security required. You should

also select the physical placement of your FVG318 in order to maximize the network speed. For

further information on wireless networking, refer to in

“Wireless Communications”

in Appendix

B

.

The operating distance or range of your wireless connection can vary significantly based on the

physical placement of the VPN firewall. The latency, data throughput performance, and notebook

power consumption also vary depending on your configuration choices. For best results, place

your VPN firewall router:

•

Near the center of the area in which your PCs will operate.

•

In an elevated location, such as a high shelf where the wirelessly connected PCs have line-of-

sight access (even if through walls). The best location is elevated, such as wall mounted or on

the top of a cubicle, and at the center of your wireless coverage area for all the mobile devices.

•

Away from sources of interference, such as PCs, microwaves, and 2.4 GHz cordless phones.

•

Away from large metal surfaces.

Be aware that the time it takes to establish a wireless connection can vary depending on both your

security settings and placement. WEP connections can take slightly longer to establish. Also, WEP

encryption can consume more battery power on a notebook computer.

Note:

Failure to follow these guidelines can result in significant performance degradation

or inability to wirelessly connect to the VPN firewall router. For complete range

and performance specifications, please see

“Default Settings and Technical

Specifications”

in Appendix A

.”

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

3-2

Configuring Wireless Connectivity

v1.0, September 2007

Implementing Appropriate Wireless Security

Unlike wired network data, your wireless data transmissions can extend beyond your walls and

can be received by anyone with a compatible adapter. For this reason, use the security features of

your wireless equipment. The VPN firewall provides highly effective security features which are

covered in detail in this chapter.

There are several ways you can enhance the security of your wireless network:

•

Restrict Access Based on MAC Address.

You can allow only trusted PCs to connect so that

unknown PCs cannot wirelessly connect to the FVG318. Restricting access by MAC address

adds an obstacle against unwanted access to your network, but the data broadcast over the

wireless link is fully exposed.

•

Turn Off the Broadcast of the Wireless Network Name SSID.

If you disable broadcast of

the SSID, only devices that have the correct SSID can connect. This nullifies wireless network

“discovery” feature of some products, such as Windows XP, but the data is still exposed.

•

WEP.

Wired Equivalent Privacy (WEP) data encryption provides data security. WEP Shared

Key authentication and WEP data encryption will block all but the most determined

eavesdropper.

Figure 3-1

Note:

Indoors, computers can connect to wireless networks at ranges of 300 feet or more.

Such distances allow others outside of your area to access your network.

FVG318