Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

Connecting the FVL328 to the Internet

3-7

May 2004, 202-10030-02

1.

Enter your Account Name (may also be called Host Name) and Domain Name. These

parameters may be necessary to access your ISP’s services such as mail or news servers. If you

leave the Domain Name field blank, the firewall will attempt to learn the domain

automatically from the ISP. If this is not successful, you may need to enter it manually.

2.

Enter the PPPoE login user name and password provided by your ISP. These fields are case

sensitive. If you want to change the login timeout, enter a new value in minutes.

Note:

You will no longer need to launch the ISP’s login program on your computer in order to

access the Internet. When you start an Internet application, the firewall will automatically log

you in.

3.

Enable or disable NAT (Network Address Translation). NAT allows all LAN computers to

gain Internet access via this Router, by sharing this Router's WAN IP address. In most

situations, NAT is essential for Internet access via this Router. You should only disable NAT if

you are sure you do not require it. When NAT is disabled, only standard routing is performed

by this Router.

4.

Perform a DNS Lookup. A DNS (Domain Name Server) converts the Internet name (e.g.

www.netgear.com) to an IP address. If you need the IP address of a Web, FTP, Mail or other

Server on the Internet, you can do a DNS lookup to find the IP address.

Domain Name Server (DNS) Address: If you know that your ISP does not automatically

transmit DNS addresses to the firewall during login, select “Use these DNS servers” and enter

the IP address of your ISP’s Primary DNS Server. If a Secondary DNS Server address is

available, enter it also.

If you enter an address here, after you finish configuring the firewall, reboot your computers

so that the settings take effect.

5.

Enter the Router's MAC Address. Each computer or router on your network has a unique

32-bit local Ethernet address. This is also referred to as the computer's MAC (Media Access

Control) address. Usually, select Use default address.

If your ISP requires MAC authentication, then select either Use this Computer's MAC address

to have the router use the MAC address of the computer you are now using, or Use This MAC

Address to manually type in the MAC address that your ISP expects.

6.

Click Apply to save your settings.

7.

Click the Test button to test your Internet connection. If the NETGEAR Web site does not

appear within one minute, refer to

Chapter 8, Troubleshooting

.

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

3-8

Connecting the FVL328 to the Internet

May 2004, 202-10030-02

Configuring for a Wizard-Detected Dynamic IP Account

If the Setup Wizard determines that your Internet service account uses Dynamic IP assignment,

you will be directed to the Dynamic IP menu.

1.

Enter your Account Name (may also be called Host Name) and Domain Name. These

parameters may be necessary to access your ISP’s services such as mail or news servers. If you

leave the Domain Name field blank, the firewall will attempt to learn the domain

automatically from the ISP. If this is not successful, you may need to enter it manually.

2.

If you know that your ISP does not automatically transmit DNS addresses to the firewall

during login, select “Use these DNS servers” and enter the IP address of your ISP’s Primary

DNS Server. If a Secondary DNS Server address is available, enter it also.

A DNS server is a host on the Internet that translates Internet names (such as

www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP address of one

or two DNS servers to your firewall during login. If the ISP does not transfer an address, you

must obtain it from the ISP and enter it manually here. If you enter an address here, you should

reboot your computers after configuring the firewall.

3.

The Router’s MAC Address is the Ethernet MAC address that will be used by the firewall on

the Internet port.

If your ISP allows access from only one specific computer’s Ethernet MAC address, select

“Use this MAC address.” The firewall will then capture and use the MAC address of the

computer that you are now using. You must be using the one computer that is allowed by the

ISP. Otherwise, you can type in a MAC address.

Note:

Some ISPs will register the Ethernet MAC address of the network interface card in your

computer when your account is first opened. They will then only accept traffic from the MAC

address of that computer. This feature allows your firewall to masquerade as that computer by

using its MAC address.

4.

Click Apply to save your settings.

5.

Click the Test button to test your Internet connection. If the NETGEAR Web site does not

appear within one minute, refer to

Chapter 8, Troubleshooting

.

Configuring for a Wizard-Detected Fixed IP (Static) Account

If the Setup Wizard determines that your Internet service account uses Fixed IP assignment, you

will be directed to the Fixed IP menu.

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

Connecting the FVL328 to the Internet

3-9

May 2004, 202-10030-02

1.

Enter your assigned IP Address, Subnet Mask, and the IP Address of your ISP’s gateway

router. This information should have been provided to you by your ISP. You will need the

configuration parameters from your ISP you recorded in

“Worksheet for Recording Your

Internet Connection Information” on page C-3

.

2.

Enter the IP address of your ISP’s Primary DNS Server. If a Secondary DNS Server address is

available, enter it also.

DNS servers are required to perform the function of translating an Internet name such as

www.netgear.com to a numeric IP address. For a fixed IP address configuration, you must

obtain DNS server addresses from your ISP and enter them manually here. You should reboot

your computers after configuring the firewall for these settings to take effect.

3.

Click Apply to save the settings.

4.

Click the Test button to test your Internet connection. If the NETGEAR Web site does not

appear within one minute, refer to

Chapter 8, Troubleshooting

.

Testing Your Internet Connection

After completing the Internet connection configuration, your can test your Internet connection.

Log in to the firewall, then, from the Setup Basic Settings link, click the Test button. If the

NETGEAR Web site does not appear within one minute, refer to

Chapter 8, Troubleshooting

.

Your firewall is now configured to provide Internet access for your network. Your firewall

automatically connects to the Internet when one of your computers requires access. It is not

necessary to run a dialer or login application such as Dial-Up Networking or Enternet to connect,

log in, or disconnect. These functions are performed by the firewall as needed.

To access the Internet from any computer connected to your firewall, launch a browser such as

Microsoft Internet Explorer or Netscape Navigator. You should see the firewall’s Internet LED

blink, indicating communication to the ISP. The browser should begin to display a Web page.

The following chapters describe how to configure the advanced features of your firewall, and how

to troubleshoot problems that may occur.

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

3-10

Connecting the FVL328 to the Internet

May 2004, 202-10030-02

Manually Configuring Your Internet Connection

You can manually configure your firewall using the menu below, or you can allow the Setup

Wizard to determine your configuration as described in the previous section.

Figure 3-7:

Browser-based configuration Basic Settings menu

ISP

Does

Require Login

ISP

Does Not

Require Login

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

Connecting the FVL328 to the Internet

3-11

May 2004, 202-10030-02

How to Complete a Manual Configuration

Manually configure the firewall in the Basic Settings menu using these steps:

1.

Answer the question, “Does Your Internet Connection Require a Login?”

•

Select Yes if you normally must launch a login program such as Enternet or WinPOET in

order to access the Internet. You must also log in to establish a PPPoE connection that uses

a Static IP address.

Note:

If you are a Telstra BigPond cable modem customer, or if you are in an area such as

Austria that uses PPTP, login is required. Select Yes, then select BigPond or PPTP from

the Internet Service Type drop-down box.

•

Select No if you do not log in to establish your Internet connection.

2.

If you selected Yes, follow the instructions below.

If your Internet connection does not require a login, skip to step 3.

–

Enter your Account Name (may also be called Host Name) and Domain Name.

These parameters may be necessary to access your ISP’s services such as mail or news

servers. These fields are case sensitive.

–

If you want to change the login timeout, enter a new value in minutes. This determines

how long the firewall keeps the Internet connection active after there is no Internet activity

from the LAN. Entering an Idle Timeout value of zero means never log out.

–

If you want to disable NAT, select the Disable radio button. Before disabling NAT, back up

your current configuration settings.

–

Domain Name Server (DNS) Address:

If you know that your ISP does not automatically transmit DNS addresses to the firewall

during login, select “Use these DNS servers” and enter the IP address of your ISP’s

Primary DNS Server. If a Secondary DNS Server address is available, enter it also

3.

If you selected No, follow the instructions below.

–

If required, enter your Account Name (may also be called Host Name) and Domain Name.

These parameters may be necessary to access your ISP’s services such as mail or news

servers. The Account Name and Domain Name are not always required.

Note:

Disabling NAT will reboot the router and reset all the FVL328 configuration

settings to the factory default. Disable NAT only if you plan to install the FVL328 in a

setting where you will be manually administering the IP address space on the LAN side

of the router.