Page 36 / 234 Scroll up to view Page 31 - 35
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2
3-12
Connecting the FVL328 to the Internet
May 2004, 202-10030-02
If you want to disable NAT, select the Disable radio button. Before disabling NAT, back up
your current configuration settings.
Internet IP Address (also commonly called the WAN IP address):
If your ISP has assigned you a permanent, fixed (static) IP address for your computer,
select “Use static IP address.” Enter the IP address that your ISP assigned. Also enter the
netmask and the Gateway IP address. The Gateway is the ISP’s router to which your
firewall will connect.
Domain Name Server (DNS) Address:
If you know that your ISP does not automatically transmit DNS addresses to the firewall
during login, select “Use these DNS servers” and enter the IP address of your ISP’s
Primary DNS Server. If a Secondary DNS Server address is available, enter it also.
A DNS server is a host on the Internet that translates Internet names (such as
www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP address of
one or two DNS servers to your firewall during login. If the ISP does not transfer an
address, you must obtain it from the ISP and enter it manually here. If you enter an address
here, you should reboot your computers after configuring the firewall.
Router’s MAC Address:
This section determines the Ethernet MAC address that will be used by the firewall on the
Internet port. Some ISPs will register the Ethernet MAC address of the network interface
card in your computer when your account is first opened. They will then only accept
traffic from the MAC address of that computer. This feature allows your firewall to
masquerade as that computer by “cloning” its MAC address.
To change the MAC address, select “Use this Computer’s MAC address.” The firewall
will then capture and use the MAC address of the computer that you are now using. You
should use the one computer that is allowed by the ISP. Or, select “Use this MAC address”
and enter it.
4.
Click Apply to save your settings.
5.
Click the Test button to test your Internet connection.
If the NETGEAR Web site does not appear within one minute, refer to
Chapter 8,
Troubleshooting
.
Note:
Disabling NAT will reboot the router and reset all the FVL328 configuration
settings to the factory default. Disable NAT only if you plan to install the FVL328 in a
setting where you will be manually administering the IP address space on the LAN side
of the router.
Page 37 / 234
WAN and LAN Configuration
4-1
May 2004, 202-10030-02
Chapter 4
WAN and LAN Configuration
This chapter describes how to configure the WAN and LAN settings of your FVL328 Prosafe High
Speed VPN Firewall.
Configuring LAN IP Settings
The LAN IP Setup menu allows configuration of LAN IP services such as DHCP and RIP. These
features can be found under the Advanced heading in the Main Menu of the browser interface.
The firewall is shipped preconfigured to use private IP addresses on the LAN side, and to act as a
DHCP server. The firewall’s default LAN IP configuration is:
LAN IP addresses—192.168.0.1
Subnet mask—255.255.255.0
These addresses are part of the IETF-designated private address range for use in private networks,
and should be suitable in most applications. If your network has a requirement to use a different IP
addressing scheme, you can make those changes.
The LAN TCP/IP Setup parameters are:
IP Address
This is the LAN IP address of the firewall.
IP Subnet Mask
This is the LAN Subnet Mask of the firewall. Combined with the IP address, the IP Subnet
Mask allows a device to know which other addresses are local to it, and which must be reached
through a gateway or router.
Note:
If you change the LAN IP address of the firewall while connected through the
browser, you will be disconnected. You must then open a new connection to the new IP
address and log in again.
Page 38 / 234
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2
4-2
WAN and LAN Configuration
May 2004, 202-10030-02
RIP Direction
RIP (Router Information Protocol) allows a router to exchange routing information with other
routers. The RIP Direction selection controls how the firewall sends and receives RIP packets.
Both is the default.
When set to Both or Out Only, the firewall will broadcast its routing table periodically.
When set to Both or In Only, it will incorporate the RIP information that it receives.
When set to None, it will not send any RIP packets and will ignore any RIP packets
received.
RIP Version
This controls the format and the broadcasting method of the RIP packets that the router sends.
It recognizes both formats when receiving. By default, this is set for RIP-1.
RIP-1 is universally supported. RIP-1 is probably adequate for most networks, unless you
have an unusual network setup.
RIP-2 carries more information. Both RIP-2B and RIP-2M send the routing data in RIP-2
format.
RIP-2B uses subnet broadcasting.
RIP-2M uses multicasting.
Using the Router as a DHCP Server
By default, the firewall will function as a DHCP (Dynamic Host Configuration Protocol) server,
allowing it to assign IP, DNS server, and default gateway addresses to all computers connected to
the router's LAN. The assigned default gateway address is the LAN address of the firewall. IP
addresses will be assigned to the attached PCs from a pool of addresses specified in this menu.
Each pool address is tested before it is assigned to avoid duplicate addresses on the LAN.
For most applications, the default DHCP and TCP/IP settings of the firewall are satisfactory. See
“IP Configuration by DHCP” on page B-9
for an explanation of DHCP and information about how
to assign IP addresses for your network.
Note:
Multicasting can reduce the load on non-router machines because they do not
listen to the RIP multicast address and will not receive the RIP packets. However, if one
router uses multicasting, then all routers on your network must use multicasting.
Page 39 / 234
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2
WAN and LAN Configuration
4-3
May 2004, 202-10030-02
If another device on your network will be the DHCP server, or if you will manually configure the
network settings of all of your computers, clear the ‘Use router as DHCP server’ check box.
Otherwise, leave it checked.
Specify the pool of IP addresses to be assigned by setting the Starting IP Address and Ending IP
Address. These addresses should be part of the same IP address subnet as the firewall’s LAN IP
address. Using the default addressing scheme, you should define a range between 192.168.0.2 and
192.168.0.253, although you may wish to save part of the range for devices with fixed addresses.
The firewall will deliver the following parameters to any LAN device that requests DHCP:
An IP Address from the range you have defined
Subnet Mask
Gateway IP Address is the firewall’s LAN IP address
Primary DNS Server, if you entered a Primary DNS address in the Basic Settings menu;
otherwise, the firewall’s LAN IP address
Secondary DNS Server, if you entered a Secondary DNS address in the Basic Settings menu
How to Configure LAN TCP/IP Settings and View the DHCP Log
1.
Log in to the firewall at its default LAN address of
with its default user
name of
admin
, default password of
password
, or using whatever password and LAN address
you have chosen for the firewall.
2.
From the Main Menu, under Advanced, click the LAN IP Setup link to view the menu, shown
below. To view the DHCP Log, click DHCP Log.
Page 40 / 234
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2
4-4
WAN and LAN Configuration
May 2004, 202-10030-02
Figure 4-1:
LAN IP Setup Menu
3.
Enter the LAN TCP/IP and DHCP parameters.
4.
Click Apply to save your changes.
How to Configure Reserved IP Addresses
When you specify a reserved IP address for a PC on the LAN, that PC will always receive the
same IP address each time it accesses the firewall’s DHCP server. Reserved IP addresses should be
assigned to servers that require permanent IP settings.
To reserve an IP address:
1.
Click the Add button.
2.
In the IP Address box, type the IP address to assign to the PC or server.
Choose an IP address from the router’s LAN subnet, such as 192.168.0.X.

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top