Contents

vii

May 2004, 202-10030-02

Policy Administration LOG

.............................................................................................

D-7

Appendix E

Virtual Private Networking

What is a VPN?

.............................................................................................................

E-1

What is IPSec and How Does It Work?

.........................................................................

E-2

IPSec Security Features

.........................................................................................

E-2

IPSec Components

.................................................................................................

E-2

Encapsulating Security Payload (ESP)

...................................................................

E-3

Authentication Header (AH)

....................................................................................

E-4

IKE Security Association

.........................................................................................

E-4

Mode

.................................................................................................................

E-5

Key Management

....................................................................................................

E-6

Understand the Process Before You Begin

...................................................................

E-6

VPN Process Overview

.................................................................................................

E-7

Network Interfaces and Addresses

.........................................................................

E-7

Interface Addressing

.........................................................................................

E-7

Firewalls

...........................................................................................................

E-8

Setting Up a VPN Tunnel Between Gateways

........................................................

E-8

VPNC IKE Security Parameters

..................................................................................

E-10

VPNC IKE Phase I Parameters

.............................................................................

E-10

VPNC IKE Phase II Parameters

.............................................................................

E-11

Testing and Troubleshooting

.........................................................................................

E-11

Additional Reading

.......................................................................................................

E-11

Appendix F

NETGEAR VPN Configuration

FVS318 or FVM318 to FVL328

Configuration Template

...................................................................................................

F-1

Step-By-Step Configuration of FVS318 or FVM318 Gateway A

.....................................

F-2

Step-By-Step Configuration of FVL328 Gateway B

........................................................

F-5

Test the VPN Connection

.............................................................................................

F-10

Appendix G

NETGEAR VPN Client

to NETGEAR FVL328 or FWAG114 VPN Router

Configuration Profile

......................................................................................................

G-1

Step-By-Step Configuration of FVL328 or FWAG114 Gateway

.....................................

G-2

Step-By-Step Configuration of the FVL328 Firewall B

...................................................

G-7

May 2004, 202-10030-02

viii

Contents

Testing the VPN Connection

........................................................................................

G-14

From the Client PC to the FVL328

........................................................................

G-14

From the FVL328 to the Client PC

........................................................................

G-15

Monitoring the PC VPN Connection

............................................................................

G-15

Viewing the FVL328 VPN Status and Log Information

................................................

G-17

Appendix H

NETGEAR VPN Configuration

FVS318 or FVM318 with FQDN to FVL328

Configuration Template

..................................................................................................

H-1

Using DDNS and Fully Qualified Domain Names (FQDN)

.....................................

H-2

Step-By-Step Configuration of FVS318 or FVM318 Gateway A

....................................

H-3

Step-By-Step Configuration of FVL328 Gateway B

.......................................................

H-7

Test the VPN Connection

............................................................................................

H-12

Glossary

Index

About This Manual

1

May 2004, 202-10030-02

Chapter 1

About This Manual

This chapter introduces the Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual

Revision 2.

Audience

This reference manual assumes that the reader has basic to intermediate computer and Internet

skills. However, basic computer network, Internet, firewall, and VPN technology tutorial

information is provided in the Appendices and on the NETGEAR Web site.

Scope

This manual is written for the FVL328 Firewall according to these specifications:

Table 1-1.

Manual Specifications

Product

FVL328 Prosafe High Speed VPN Firewall

Firmware Version Number

Version 2.0 Release 05

Manual Part Number

202-10030-02

Manual Publication Date

May 24, 2004

Note:

Product updates are available on the NETGEAR Web site at

.

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

2

About This Manual

May 2004, 202-10030-02

Typographical Conventions

This guide uses the following typographical conventions:

Special Message Formats

This guide uses the following formats to highlight special messages:

Table 1-2.

Typographical conventions

italics

Emphasis.

bold

User input.

[Enter]

Named keys in text are shown enclosed in square brackets. The notation [Enter]

is used for the Enter key and the Return key.

S

MALL

C

APS

DOS file and directory names.

Note:

This format is used to highlight information of importance or special interest.

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

About This Manual

3

May 2004, 202-10030-02

How to Use this Manual

This manual is published in both HTML and .PDF file formats. The HTML version of this manual

provides links to the .PDF versions of the manual and includes these features. To view the HTML

version of the manual, you must have a browser with JavaScript enabled.

Figure Preface

1-1:

HTML version of this manual

1.

Left pane

. Use the left pane to view the Contents, Index, and Search tabs.

2.

Toolbar buttons

. Use the toolbar buttons across the top to navigate, print pages, and more.

–

The

Show in Contents

button locates the current topic in the Contents tab.

–

Previous/Next

buttons display the previous or next topic.

–

The

PDF

button links to a PDF version of the full manual.

–

The

Print

button prints the current topic. Use this button when a

step-by-step procedure is displayed to send the entire procedure to your

printer. You do not have to worry about specifying the range of pages.

3.

Right pane

. Use the right pane to view the contents of the manual. Also, each page of the

manual includes a

link at the top right which links to a PDF file

containing just the currently selected chapter of the manual.

1

2

3