xi

v1.0, March 2007

Contents

About This Manual

Conventions, Format and Scope

....................................................................................

xvii

How to Use This Manual

...............................................................................................

xviii

How to Print this Manual

................................................................................................

xviii

Chapter 1

Introduction

Key Features of the NETGEAR ProSafe DGFV338

.......................................................

1-1

Full Routing on Both the ADSL and 10/100 WAN Port

............................................

1-2

A Powerful, True Firewall with Content Filtering

......................................................

1-2

Security

....................................................................................................................

1-3

Virtual Private Networking (VPN)

.............................................................................

1-3

Autosensing Ethernet Connections with Auto Uplink

...............................................

1-3

Extensive Protocol Support

......................................................................................

1-4

Easy Installation and Management

..........................................................................

1-4

Maintenance and Support

........................................................................................

1-5

System Requirements

....................................................................................................

1-5

Package Contents

..........................................................................................................

1-6

Hardware Description

.....................................................................................................

1-6

Router Front Panel

...................................................................................................

1-6

Router Rear Panel

...................................................................................................

1-8

Router Login Factory Defaults

........................................................................................

1-9

Placement of your NETGEAR ProSafe DGFV338

.......................................................

1-10

Chapter 2

Basic Installation and Configuration

Using ADSL Microfilters (optional)

..................................................................................

2-2

Logging in and Configuring your Internet Connection

....................................................

2-3

Configuring Your Internet Connection using Auto Detect

.........................................

2-4

Manually Configuring your ADSL Connection

..........................................................

2-6

Manually Configuring your Ethernet Connection

......................................................

2-8

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual

xii

v1.0, March 2007

Selecting Advanced Options for your Ethernet or ADSL Connection

....................

2-10

Configuring the WAN Mode

..........................................................................................

2-14

Configuring Dynamic DNS (If Needed)

..................................................................

2-17

Programming the Traffic Meter

...............................................................................

2-20

Chapter 3

Wireless Configuration

Implementing Wireless Security

.....................................................................................

3-1

Understanding Wireless Settings

...................................................................................

3-3

Wireless LANs

..........................................................................................................

3-4

Access Control List

..................................................................................................

3-6

Wireless Advanced Options

.....................................................................................

3-7

WEP and WPA/WPA2 Wireless Security Check List Form

.............................................

3-8

Configuring Your Wireless Settings

................................................................................

3-9

Configuring WEP

....................................................................................................

3-10

Configuring WPA-PSK

...........................................................................................

3-12

Configuring WPA2-PSK

.........................................................................................

3-13

Configuring WPA-PSK and WPA2-PSK

.................................................................

3-14

Configuring WPA with RADIUS

..............................................................................

3-15

Configuring WPA2 with RADIUS

............................................................................

3-16

Configuring WPA and WPA2 with RADIUS

............................................................

3-17

Restricting Wireless Access by MAC Address

.......................................................

3-18

Chapter 4

Security and Firewall Protection

Firewall Protection and Content Filtering Overview

........................................................

4-1

Using Rules to Block or Allow Specific Kinds of Traffic

..................................................

4-1

About Service Based Rules

.....................................................................................

4-2

Outbound Rules (Service Blocking)

.........................................................................

4-3

Inbound Rules (Port Forwarding)

.............................................................................

4-7

Order of Precedence for Rules

..............................................................................

4-17

Customized Services

.............................................................................................

4-17

Quality of Service (QoS) Priorities

.........................................................................

4-19

Attack Checks

........................................................................................................

4-20

Managing Groups and Hosts

........................................................................................

4-21

Blocking Internet Sites

...........................................................................................

4-24

Enabling Source MAC Filtering

..............................................................................

4-27

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual

xiii

v1.0, March 2007

Setting up Port Triggering

......................................................................................

4-28

Setting a Schedule to Block or Allow Specific Traffic

.............................................

4-31

Event Logs and Alerts

..................................................................................................

4-32

Security and Administrator Management

.....................................................................

4-35

Chapter 5

Virtual Private Networking

Dual WAN Port Systems

.................................................................................................

5-1

Setting up a VPN Connection using the VPN Wizard

.....................................................

5-2

VPN Tunnel Policies

.......................................................................................................

5-5

IKE Policy

.................................................................................................................

5-5

VPN Policy

...............................................................................................................

5-7

VPN Tunnel Connection Status

................................................................................

5-8

Creating a VPN Connection: Between FVX538 and DGFV338

.....................................

5-9

Configuring the ProSafe DGFV338

..........................................................................

5-9

Configuring the FVX538

.........................................................................................

5-14

Testing the Connection

...........................................................................................

5-15

Creating a VPN Client Connection: VPN Client to DGFV338

.......................................

5-15

Configuring the DGFV338

......................................................................................

5-15

Configuring the VPN Client

....................................................................................

5-17

Testing the Connection

...........................................................................................

5-21

Certificate Authorities

...................................................................................................

5-22

Generating a Self Certificate Request

....................................................................

5-23

Uploading a Trusted Certificate

..............................................................................

5-25

Managing your Certificate Revocation List (CRL)

..................................................

5-25

Extended Authentication (XAUTH) Configuration

.........................................................

5-26

Configuring XAUTH for VPN Clients

......................................................................

5-27

User Database Configuration

.................................................................................

5-29

RADIUS Client Configuration

.................................................................................

5-30

Manually Assigning IP Addresses to Remote Users (ModeConfig)

.............................

5-32

Mode Config Operation

..........................................................................................

5-32

Configuring the ProSafe DGFV338

........................................................................

5-33

Configuring the ProSafe VPN Client for ModeConfig

.............................................

5-36

Chapter 6

Router and Network Management

Performance Management

.............................................................................................

6-1

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual

xiv

v1.0, March 2007

Wireless Firewall Features That Reduce Traffic

......................................................

6-1

Wireless Firewall Features That Increase Traffic

.....................................................

6-4

Using QoS to Shift the Traffic Mix

............................................................................

6-6

Tools for Traffic Management

...................................................................................

6-7

Administrator and Guest Access Authorization

..............................................................

6-7

Changing the Passwords and Login Time-out

.........................................................

6-7

Enabling Remote Management Access

...................................................................

6-8

Command Line Interface

........................................................................................

6-10

Event Alerts

..................................................................................................................

6-11

Traffic Limits Reached

............................................................................................

6-11

Monitoring

.....................................................................................................................

6-12

Router Status

.........................................................................................................

6-12

WAN Ports

..............................................................................................................

6-14

Internet Traffic

........................................................................................................

6-15

LAN Ports and Attached Devices

...........................................................................

6-17

Firewall Security

.....................................................................................................

6-19

VPN Tunnels

..........................................................................................................

6-21

Using a SNMP Manager

........................................................................................

6-22

Diagnostics

.............................................................................................................

6-24

Configuration File Management

...................................................................................

6-26

Settings Backup and Firmware Upgrade

...............................................................

6-26

Setting the Time Zone

............................................................................................

6-29

Chapter 7

LAN Configuration

Using the Firewall as a DHCP server

.............................................................................

7-1

Configuring the LAN Setup Options

.........................................................................

7-2

Using Address Reservation

......................................................................................

7-3

Configuring Multi Home LAN IPs

.............................................................................

7-4

Configuring Static Routes

...............................................................................................

7-7

Adding or Editing a Static Route

..............................................................................

7-7

Routing Information Protocol (RIP)

..........................................................................

7-8

Static Route Example

.............................................................................................

7-10

Enabling Universal Plug and Play (UPnP)

....................................................................

7-10

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual

xv

v1.0, March 2007

Chapter 8

Troubleshooting

Basic Functions

..............................................................................................................

8-1

Power LED Not On

...................................................................................................

8-1

LEDs Never Turn Off

................................................................................................

8-2

LAN or Internet Port LEDs Not On

...........................................................................

8-2

Troubleshooting the Web Configuration Interface

..........................................................

8-2

Troubleshooting the ISP Connection

..............................................................................

8-3

Troubleshooting a TCP/IP Network Using a Ping Utility

.................................................

8-5

Testing the LAN Path to Your Firewall

......................................................................

8-5

Testing the Path from Your PC to a Remote Device

................................................

8-6

Restoring the Default Configuration and Password

........................................................

8-7

Problems with Date and Time

.........................................................................................

8-7

Appendix A

Default Settings and Technical Specifications

Default Factory Settings

................................................................................................

A-1

Technical Specifications

.................................................................................................

A-3

Appendix B

Related Documents

Index