Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

3-12

Connecting the FVL328 to the Internet

May 2004, 202-10030-02

–

If you want to disable NAT, select the Disable radio button. Before disabling NAT, back up

your current configuration settings.

–

Internet IP Address (also commonly called the WAN IP address):

If your ISP has assigned you a permanent, fixed (static) IP address for your computer,

select “Use static IP address.” Enter the IP address that your ISP assigned. Also enter the

netmask and the Gateway IP address. The Gateway is the ISP’s router to which your

firewall will connect.

–

Domain Name Server (DNS) Address:

If you know that your ISP does not automatically transmit DNS addresses to the firewall

during login, select “Use these DNS servers” and enter the IP address of your ISP’s

Primary DNS Server. If a Secondary DNS Server address is available, enter it also.

A DNS server is a host on the Internet that translates Internet names (such as

www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP address of

one or two DNS servers to your firewall during login. If the ISP does not transfer an

address, you must obtain it from the ISP and enter it manually here. If you enter an address

here, you should reboot your computers after configuring the firewall.

–

Router’s MAC Address:

This section determines the Ethernet MAC address that will be used by the firewall on the

Internet port. Some ISPs will register the Ethernet MAC address of the network interface

card in your computer when your account is first opened. They will then only accept

traffic from the MAC address of that computer. This feature allows your firewall to

masquerade as that computer by “cloning” its MAC address.

To change the MAC address, select “Use this Computer’s MAC address.” The firewall

will then capture and use the MAC address of the computer that you are now using. You

should use the one computer that is allowed by the ISP. Or, select “Use this MAC address”

and enter it.

4.

Click Apply to save your settings.

5.

Click the Test button to test your Internet connection.

If the NETGEAR Web site does not appear within one minute, refer to

Chapter 8,

Troubleshooting

.

Note:

Disabling NAT will reboot the router and reset all the FVL328 configuration

settings to the factory default. Disable NAT only if you plan to install the FVL328 in a

setting where you will be manually administering the IP address space on the LAN side

of the router.

WAN and LAN Configuration

4-1

May 2004, 202-10030-02

Chapter 4

WAN and LAN Configuration

This chapter describes how to configure the WAN and LAN settings of your FVL328 Prosafe High

Speed VPN Firewall.

Configuring LAN IP Settings

The LAN IP Setup menu allows configuration of LAN IP services such as DHCP and RIP. These

features can be found under the Advanced heading in the Main Menu of the browser interface.

The firewall is shipped preconfigured to use private IP addresses on the LAN side, and to act as a

DHCP server. The firewall’s default LAN IP configuration is:

•

LAN IP addresses—192.168.0.1

•

Subnet mask—255.255.255.0

These addresses are part of the IETF-designated private address range for use in private networks,

and should be suitable in most applications. If your network has a requirement to use a different IP

addressing scheme, you can make those changes.

The LAN TCP/IP Setup parameters are:

•

IP Address

This is the LAN IP address of the firewall.

•

IP Subnet Mask

This is the LAN Subnet Mask of the firewall. Combined with the IP address, the IP Subnet

Mask allows a device to know which other addresses are local to it, and which must be reached

through a gateway or router.

Note:

If you change the LAN IP address of the firewall while connected through the

browser, you will be disconnected. You must then open a new connection to the new IP

address and log in again.

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

4-2

WAN and LAN Configuration

May 2004, 202-10030-02

•

RIP Direction

RIP (Router Information Protocol) allows a router to exchange routing information with other

routers. The RIP Direction selection controls how the firewall sends and receives RIP packets.

Both is the default.

—

When set to Both or Out Only, the firewall will broadcast its routing table periodically.

—

When set to Both or In Only, it will incorporate the RIP information that it receives.

—

When set to None, it will not send any RIP packets and will ignore any RIP packets

received.

•

RIP Version

This controls the format and the broadcasting method of the RIP packets that the router sends.

It recognizes both formats when receiving. By default, this is set for RIP-1.

—

RIP-1 is universally supported. RIP-1 is probably adequate for most networks, unless you

have an unusual network setup.

—

RIP-2 carries more information. Both RIP-2B and RIP-2M send the routing data in RIP-2

format.

—

RIP-2B uses subnet broadcasting.

—

RIP-2M uses multicasting.

Using the Router as a DHCP Server

By default, the firewall will function as a DHCP (Dynamic Host Configuration Protocol) server,

allowing it to assign IP, DNS server, and default gateway addresses to all computers connected to

the router's LAN. The assigned default gateway address is the LAN address of the firewall. IP

addresses will be assigned to the attached PCs from a pool of addresses specified in this menu.

Each pool address is tested before it is assigned to avoid duplicate addresses on the LAN.

For most applications, the default DHCP and TCP/IP settings of the firewall are satisfactory. See

“IP Configuration by DHCP” on page B-9

for an explanation of DHCP and information about how

to assign IP addresses for your network.

Note:

Multicasting can reduce the load on non-router machines because they do not

listen to the RIP multicast address and will not receive the RIP packets. However, if one

router uses multicasting, then all routers on your network must use multicasting.

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

WAN and LAN Configuration

4-3

May 2004, 202-10030-02

If another device on your network will be the DHCP server, or if you will manually configure the

network settings of all of your computers, clear the ‘Use router as DHCP server’ check box.

Otherwise, leave it checked.

Specify the pool of IP addresses to be assigned by setting the Starting IP Address and Ending IP

Address. These addresses should be part of the same IP address subnet as the firewall’s LAN IP

address. Using the default addressing scheme, you should define a range between 192.168.0.2 and

192.168.0.253, although you may wish to save part of the range for devices with fixed addresses.

The firewall will deliver the following parameters to any LAN device that requests DHCP:

•

An IP Address from the range you have defined

•

Subnet Mask

•

Gateway IP Address is the firewall’s LAN IP address

•

Primary DNS Server, if you entered a Primary DNS address in the Basic Settings menu;

otherwise, the firewall’s LAN IP address

•

Secondary DNS Server, if you entered a Secondary DNS address in the Basic Settings menu

How to Configure LAN TCP/IP Settings and View the DHCP Log

1.

Log in to the firewall at its default LAN address of

with its default user

name of

admin

, default password of

password

, or using whatever password and LAN address

you have chosen for the firewall.

2.

From the Main Menu, under Advanced, click the LAN IP Setup link to view the menu, shown

below. To view the DHCP Log, click DHCP Log.

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2

4-4

WAN and LAN Configuration

May 2004, 202-10030-02

Figure 4-1:

LAN IP Setup Menu

3.

Enter the LAN TCP/IP and DHCP parameters.

4.

Click Apply to save your changes.

How to Configure Reserved IP Addresses

When you specify a reserved IP address for a PC on the LAN, that PC will always receive the

same IP address each time it accesses the firewall’s DHCP server. Reserved IP addresses should be

assigned to servers that require permanent IP settings.

To reserve an IP address:

1.

Click the Add button.

2.

In the IP Address box, type the IP address to assign to the PC or server.

Choose an IP address from the router’s LAN subnet, such as 192.168.0.X.