Introduction

1-1

v1.0, April 2007

Chapter 1

Introduction

This chapter describes the features of the ProSafe™ Wireless ADSL Modem VPN Firewall

Router. It also includes the minimum prerequisites for installation (

“System Requirements” on

page 1-5

.), what’s in the box (

“Package Contents” on page 1-6

) and a description of the front and

back panels of the DGFV338 (

“Hardware Description” on page 1-6

). The location of the default

settings to log in to the router is presented in

“Router Login Factory Defaults” on page 1-9

and

suggestions on placement of your router to achieve maximum wireless range are in

“Placement of

your NETGEAR ProSafe DGFV338” on page 1-10

.

Key Features of the NETGEAR ProSafe DGFV338

The NETGEAR ProSafe DGFV338 with eight-port switch connects your local area network

(LAN) to the Internet through an internal ADSL modem or through the Ethernet port via an

external modem. It provides wireless LAN connectivity operating at 2.4GHz (802.11b/g).

The NETGEAR ProSafe DGFV338 has a built-in Stateful Packet Inspection Firewall (SPI)

preventing Denial of Service attacks and provides Internet access for up to 253 users. The

NETGEAR ProSafe DGFV338 provides you with multiple Web content filtering options, plus

browsing activity reporting and instant alerts—both, via e-mail. Network administrators can

establish restricted access policies based on time-of-day, Website addresses and address keywords,

and share high-speed cable/DSL Internet access for a local network.

With minimum setup, you can install and use the firewall within minutes.

The NETGEAR ProSafe DGFV338 provides the following features:

•

An internal ADSL modem supporting Annex A or Annex B (depending upon region).

•

One 10/100 Mbps Ethernet WAN port.

•

802.11g, 802.11b, 802.11g/b, or Auto 108Mbps.

•

Support for up to 50 IPSec VPN tunnels.

•

Easy, web-based setup for installation and management.

•

URL keyword Content Filtering and Site Blocking Security.

•

Quality of Service (QoS) support for traffic prioritization.

•

Built in 8-port 10/100 Mbps switch.

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual

1-2

Introduction

v1.0, April 2007

•

Extensive Protocol Support.

•

SNMP for manageability.

•

Front panel LEDs for easy monitoring of status and activity.

•

Flash memory for firmware upgrade.

•

Auto Sensing and Auto Uplink™

Full Routing on Both the ADSL and 10/100 WAN Port

You can install, configure, and operate the DGFV338 to take full advantage of a variety of routing

options on both the DSL and broadband WAN ports, including:

•

Internet access via either the internal ADSL modem or through the Ethernet port connected to

an external modem.

•

Auto Rollover Mode between the internal ADSL modem and the external 10/100 ethernet

WAN port. If the primary connection fails, the DGFV338 can automatically establish a backup

connection via the secondary connection.

A Powerful, True Firewall with Content Filtering

DGFV338 is a true firewall, using stateful packet inspection to defend against attacks. Its firewall

features include:

•

DoS protection. Automatically detects and thwarts DoS attacks such as Ping of Death, SYN

Flood, LAND Attack, and IP Spoofing.

•

Blocks unwanted traffic from the Internet to your LAN.

•

Blocks access from your LAN to Internet locations or services that you specify as off-limits.

•

Logs security incidents. The DGFV338 will log security events such as blocked incoming

traffic, attacks, and administrator logins. You can configure the firewall to email the log to you

at specified intervals. You can also configure the firewall to send immediate alert messages to

your email address or email pager whenever a significant event occurs.

•

With its URL keyword filtering feature, the DGFV338 prevents objectionable content from

reaching your PCs. The firewall allows you to control access to Internet content by screening

for keywords within Web addresses. You can configure the firewall to log and report attempts

to access objectionable Internet sites.

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual

Introduction

1-3

v1.0, April 2007

Security

The NETGEAR ProSafe DGFV338 is equipped with several features designed to maintain

security, as described in this section.

•

PCs Hidden by NAT

. NAT opens a temporary path to the Internet for requests originating

from the local network. Requests originating from outside the LAN are discarded, preventing

users outside the LAN from finding and directly accessing the PCs on the LAN.

•

Port Forwarding with NAT

. Although NAT prevents Internet locations from directly

accessing the PCs on the LAN, the firewall allows you to direct incoming traffic to specific

PCs based on the service port number of the incoming request. You can specify forwarding of

single ports or ranges of ports.

•

Exposed Host (Software DMZ)

. Incoming traffic from the Internet is normally discarded by

the firewall unless the traffic is a response to one of your local computers or a service for

which you have configured an inbound rule. Instead of discarding this traffic, you can have it

forwarded to one computer on your network.

Virtual Private Networking (VPN)

The NETGEAR ProSafe DGFV338 provides a secure encrypted connection between your local

area network (LAN) and remote networks or clients. It includes the following VPN features:

•

Supports 50 IPSec VPN tunnels.

•

Supports industry-standard VPN protocols – The DGFV338 supports standard Manual or IKE

keying methods, standard MD5 and SHA-1 authentication methods, and standard DES, 3DES

and AES encryption methods.

•

Supports 256-bit AES encryption for maximum security.

•

The VPN Wizard configuration is based on the Virtual Private Network Consortium (VPNC)

recommended settings.

Autosensing Ethernet Connections with Auto Uplink

With its internal 8-port 10/100 switch, the DGFV338 can connect to either a 10 Mbps standard

Ethernet network or a 100 Mbps Fast Ethernet network. Both the LAN and WAN interfaces are

autosensing and capable of full-duplex or half-duplex operation.

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual

1-4

Introduction

v1.0, April 2007

The firewall incorporates Auto Uplink

technology. Each Ethernet port will automatically sense

whether the Ethernet cable plugged into the port should have a “normal” connection such as to a

PC or an “uplink” connection such as to a switch or hub. That port will then configure itself to the

correct configuration. This feature also eliminates the need to worry about crossover cables, as

Auto Uplink will accommodate either type of cable to make the right connection.

Extensive Protocol Support

The NETGEAR ProSafe DGFV338 supports the Transmission Control Protocol/Internet Protocol

(TCP/IP) and Routing Information Protocol

(RIP).

•

IP Address Sharing by NAT

. The DGFV338 allows several networked PCs to share an

Internet account using only a single IP address, which may be statically or dynamically

assigned by your Internet service provider (ISP). This technique, known as NAT, allows the

use of an inexpensive single-user ISP account.

•

Automatic Configuration of Attached PCs by DHCP

. The DGFV338 dynamically assigns

network configuration information, including IP, gateway, and domain name server (DNS)

addresses, to attached PCs on the LAN using the Dynamic Host Configuration Protocol

(DHCP). This feature greatly simplifies configuration of PCs on your local network.

•

DNS Proxy

. When DHCP is enabled and no DNS addresses are specified, the firewall

provides its own address as a DNS server to the attached PCs. The firewall obtains actual DNS

addresses from the ISP during connection setup and forwards DNS requests from the LAN.

•

PPP over Ethernet (PPPoE)

. PPPoE is a protocol for connecting remote hosts to the Internet

over a DSL connection by simulating a dial-up connection. This feature eliminates the need to

run a login program such as EnterNet or WinPOET on your PC.

•

PPP over ATM (PPPoA)

. PPPoA is an asynchronous point-to-point protocol for connecting

to the Internet over ADSL.

Easy Installation and Management

You can install, configure, and operate the ProSafe Wireless ADSL Modem VPN Firewall Router

within minutes after connecting it to the network. The following features simplify installation and

management tasks:

•

Browser-based management

. Browser-based configuration allows you to easily configure

your firewall from almost any type of personal computer, such as Windows, Macintosh, or

Linux. A user-friendly Setup Wizard is provided and online help documentation is built into

the browser-based Web Management Interface.

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual

Introduction

1-5

v1.0, April 2007

•

Smart Wizard.

The NETGEAR ProSafe DGFV338 automatically senses the type of Internet

connection, asking you only for the information required for your type of ISP account.

•

VPN Wizard

. The NETGEAR ProSafe DGFV338 includes the NETGEAR VPN Wizard to

easily configure VPN tunnels according to the recommendations of the Virtual Private

Network Consortium (VPNC) to ensure the VPN tunnels are interoperable with other VPNC-

compliant VPN routers and clients.

•

SNMP

. The NETGEAR ProSafe DGFV338 supports the Simple Network Management

Protocol (SNMP) to let you monitor and manage resources from an SNMP-compliant system

manager. The SNMP system configuration lets you change the system variables for MIB2.

•

Diagnostic functions

. The firewall incorporates built-in diagnostic functions such as Ping,

Packet Capture, DNS lookup, and remote reboot.

•

Remote management

. The firewall allows you to securely log in to the Web Management

Interface from a remote location on the Internet. For additional security, you can limit remote

management access to a specified remote IP address or range of addresses, and you can choose

a nonstandard port number.

•

Visual monitoring

. The front panel LEDs of the NETGEAR ProSafe DGFV338 provide an

easy way to monitor its status and activity.

Maintenance and Support

NETGEAR offers the following features to help you maximize your use of the NETGEAR

ProSafe DGFV338:

•

Flash memory for firmware upgrade

•

On-line technical support and telephone support for registered products.

System Requirements

Before installing the DGFV338, make sure your system meets these requirements:

•

The Category 5 UTP straight through Ethernet cable with RJ-45 connector included in the

package, or one like it

•

A 100-240 V, 50-60 HZ AC power source.

•

Cable, DSL, Satellite or Wireless Broadband modem (for Ethernet connection).

•

Internet service.

•

ADSL service (for ADSL connectivity).