Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall

Basic Configuration

4-7

A DNS server is a host on the Internet that translates Internet names (such as www

addresses) to numeric IP addresses. Typically your ISP transfers the IP addresses of one or

two DNS servers to your firewall during login. If the ISP does not transfer an address, you

must obtain it from the ISP and enter it manually here. If you enter an address here, you

should reboot your PCs after configuring the firewall.

3.

Click on Apply, then proceed to

“Completing the Configuration“ on page 4-9

.

Configuring for an Account with Login

If the Setup Wizard determines that your Internet service account uses a login protocol such as

PPP over Ethernet (PPPoE), you will be directed to a menu like the PPPoE menu shown in

Figure 4-5

below:

Figure 4-5.

Setup Wizard menu for PPPoE login accounts

1.

Enter your Account Name (may also be called Host Name) and Domain Name. These

parameters may be necessary to access your ISP’s services such as mail or news servers. If you

leave the Domain Name field blank, the firewall will attempt to learn the domain

automatically from the ISP. If this is not successful, you may need to enter it manually.

2.

Enter the PPPoE login user name and password provided by your ISP. These fields are case

sensitive. If you wish to change the login timeout, enter a new value in minutes.

Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall

4-8

Basic Configuration

Note:

You will no longer need to launch the ISP’s login program on your PC in order to access

the Internet. When you start an Internet application, your firewall will automatically log you

in.

3.

Domain Name Server (DNS) Address: If you know that your ISP does not automatically

transmit DNS addresses to the firewall during login, select “Use these DNS servers” and enter

the IP address of your ISP’s Primary DNS Server. If a Secondary DNS Server address is

available, enter it also.

A DNS server is a host on the Internet that translates Internet names (such as www

addresses) to numeric IP addresses. Typically your ISP transfers the IP addresses of one or

two DNS servers to your firewall during login. If the ISP does not transfer an address, you

must obtain it from the ISP and enter it manually here. If you enter an address here, you

should reboot your PCs after configuring the firewall.

4.

Click on Apply, then proceed to

“Completing the Configuration“ on page 4-9

.

Manual Configuration

You can manually configure the firewall in the Basic Settings menu shown in

Figure 4-2

using

these steps:

1.

Select whether your Internet connection requires a login.

Select ‘Yes’ if you normally must launch a login program such as EnterNet or WinPOET in

order to access the Internet.

2.

Enter your Account Name (may also be called Host Name) and Domain Name. These

parameters may be necessary to access your ISP’s services such as mail or news servers.

3.

(If displayed) Enter the PPPoE login user name and password provided by your ISP. These

fields are case sensitive. If you wish to change the login timeout, enter a new value in minutes.

Note:

You will no longer need to launch the ISP’s login program on your PC in order to access

the Internet. When you start an Internet application, your firewall will automatically log you

in.

4.

Internet IP Address: If your ISP has assigned you a permanent, fixed (static) IP address for

your PC, select “Use static IP address”. Enter the IP address that your ISP assigned. Also enter

the netmask and the Gateway IP address. The Gateway is the ISP’s router to which your

firewall will connect.

Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall

Basic Configuration

4-9

5.

Domain Name Server (DNS) Address: If you know that your ISP does not automatically

transmit DNS addresses to the firewall during login, select “Use these DNS servers” and enter

the IP address of your ISP’s Primary DNS Server. If a Secondary DNS Server address is

available, enter it also.

A DNS server is a host on the Internet that translates Internet names (such as www

addresses) to numeric IP addresses. Typically your ISP transfers the IP addresses of one or

two DNS servers to your firewall during login. If the ISP does not transfer an address, you

must obtain it from the ISP and enter it manually here. If you enter an address here, you

should reboot your PCs after configuring the firewall.

6.

Router’s MAC Address: This section determines the Ethernet MAC address that will be used

by the firewall on the Internet port. Some ISPs will register the Ethernet MAC address of the

network interface card in your PC when your account is first opened. They will then only

accept traffic from the MAC address of that PC. This feature allows your firewall to

masquerade as that PC by “cloning” its MAC address.

To change the MAC address, select "Use this Computer’s MAC address". The firewall will

then capture and use the MAC address of the PC that you are now using. You must be using

the one PC that is allowed by the ISP.

7.

Click Apply, then proceed to

Completing the Configuration

.

Completing the Configuration

Click on the Test button to test your Internet connection. If the NETGEAR website does not

appear within one minute, refer to

Chapter 10, “Troubleshooting

”.

Your firewall is now configured to provide Internet access for your network. When your firewall

and PCs are configured correctly, your firewall automatically accesses the Internet when one of

your LAN devices requires access.

To access the Internet from any PC connected to your firewall, launch a browser such as Microsoft

Internet Explorer or Netscape Navigator. You should see the firewall’s Internet LED blink,

indicating communication to the ISP. The browser should begin to display a Web page.

Note:

After your firewall has been configured, it will not be necessary to run a dialer or

login application such as Dial-Up Networking, EnterNet, or WinPOET to connect, log

in, or disconnect. These functions will be performed by the firewall as needed. Any such

login software installed on your PC can be disabled or uninstalled.

Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall

4-10

Basic Configuration

The following chapters describe how to configure the Advanced features of your firewall, and how

to troubleshoot problems that may occur.

Security

5-1

Chapter 5

Security

This chapter describes how to use the security features of your FR114P, FR114W or FM114P

Cable/DSL ProSafe Firewall. The firewall provides you with selective blocking of inbound and

outbound services, Web content filtering by keyword, and with security incident logging. You can

configure the firewall to e-mail its log to you at specified intervals. You can also configure the

firewall to send immediate alert messages to your e-mail address or e-mail pager whenever a

significant security event occurs.

To configure these features of your firewall, click on the subheadings under the Security heading

in the Main Menu of the browser interface.

What is a Firewall

A firewall is a special category of router that protects one network (the “trusted” network, such as

your LAN) from another (the “untrusted” network, such as the Internet), while allowing

communication between the two. A firewall incorporates the functions of a NAT (Network

Address Translation) router, while adding features for dealing with a hacker intrusion or attack,

and for controlling the types of traffic that can flow between the two networks. Unlike simple

Internet sharing NAT routers, a firewall uses a process called stateful packet inspection to protect

your network from attacks and intrusions. NAT performs a very limited stateful inspection in that

it considers whether the incoming packet is in response to an outgoing request, but true Stateful

Packet Inspection goes far beyond NAT.