Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

4-2

Connecting the FVS124G to the Internet

202-10085-01, March 2005

–

You can also add your own service protocols to the list (see

“Services-Based

Rules” on page 6-4

for information on how to do this).

2.

Set up your accounts

a.

Have active Internet services such as that provided by cable or DSL broadband accounts

and locate the Internet Service Provider (ISP) configuration information.

•

In this document, the WAN side of the network is presumed to be provisioned as

shown in

Figure 4-1

with two ISPs connected to the FVS124G VPN Firewall through

separate physical facilities.

Each FVS124G WAN port must be configured separately, however, whether you are

using a separate ISP for each WAN port or are having the traffic of both WAN ports

routed through the same ISP. You will need your ISP information for

“Step 3:

Configure the Internet Connections to Your ISPs (Required)” on page 4-8

.

Figure 4-1:

Postulated WAN provisioning used in this document

•

If your ISPs charge by the amount of bandwidth you use each month, you may want to

consider setting up a traffic meter to keep track of your traffic (see

“Programming the

Traffic Meter (if Desired)” on page 4-13

if you want to do this).

b.

Contact a Dynamic DNS Service and set up your fully qualified domain names if you need

or want them. You will need your fully qualified domain names for

“Step 5: Configure

Dynamic DNS (If Needed)” on page 4-20

.

3.

Plan your network management approach

•

The FVS124G VPN Firewall is capable of being managed remotely, but this feature must

be enabled locally after each factory default reset.

You are strongly advised to change the default

password

password to something that is

more secure at the time you enable remote management.

FVS124G

ISP 1

ISP 2

Internet

WAN port 1

WAN port 2

customer premises

physical facility 1

physical facility 2

route diversity

firewall

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

Connecting the FVS124G to the Internet

4-3

202-10085-01, March 2005

You make these selections during

“Step 2: Log in to the VPN Firewall (Required)” on

page 4-7

.

•

There are a variety of WAN options you can choose when the factory default settings are

not applicable to your installation. These include enabling a WAN port to respond to a

ping and setting MTU size, port speed, and upload bandwidth. You will make these

choices in

“Step 6: Configure the WAN Options (If Needed)” on page 4-23

.

4.

Prepare to physically connect the firewall to cable or DSL modems and a computer. You will

do this in

“Step 1: Physically Connect the VPN Firewall to Your Network (Required)” on

page 4-7

.

Cabling and Computer Hardware Requirements

To use the FVS124G VPN Firewall on your network, each computer must have an installed

Ethernet Network Interface Card (NIC) and an Ethernet cable. If the computer will connect to your

network at 100 Mbps, you must use a Category 5 (CAT5) cable such as the one provided with your

firewall.

Computer Network Configuration Requirements

The FVS124G includes a built-in Web Configuration Manager. To access the configuration menus

on the FVS124G, your must use a Java-enabled web browser program that supports HTTP uploads

such as Microsoft Internet Explorer or Netscape Navigator. NETGEAR recommends using

Internet Explorer or Netscape Navigator 4.0 or above. Free browser programs are readily available

for Windows, Macintosh, or UNIX/Linux.

For the initial connection to the Internet and configuration of your firewall, you will need to

connect a computer to the firewall that is set to automatically get its TCP/IP configuration from the

firewall via DHCP.

Note:

For help with DHCP configuration, please refer to

Appendix C, “Preparing Your Network

.

The cable or DSL modem broadband access device must provide a standard 10 Mbps (10BASE-T)

or 100 Mbps (100BASE-Tx) Ethernet interface.

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

4-4

Connecting the FVS124G to the Internet

202-10085-01, March 2005

Internet Configuration Requirements

Depending on how your ISPs set up your Internet accounts, you will need one or more of these

configuration parameters to connect your firewall to the Internet:

•

Host and Domain Names

•

ISP Login Name and Password

•

ISP Domain Name Server (DNS) Addresses

•

Fixed IP Address which is also known as Static IP Address

Where Do I Get the Internet Configuration Parameters?

There are several ways you can gather the required Internet connection information.

•

Your ISPs provide all the information needed to connect to the Internet. If you cannot locate

this information, you can ask your ISPs to provide it or you can try one of the options below.

•

If you have a computer already connected using the active Internet access account, you can

gather the configuration information from that computer.

—

For Windows 95/98/ME, open the Network control panel, select the TCP/IP entry for the

Ethernet adapter, and click Properties. Record all the settings for each tab page.

—

For Windows 2000/XP, open the Local Area Network Connection, select the TCP/IP entry

for the Ethernet adapter, and click Properties. Record all the settings for each tab page.

—

For Macintosh computers, open the TCP/IP or Network control panel. Record all the

settings for each section.

•

You may also refer to the

FVS124G

Resource CD

for the NETGEAR Router ISP Guide which

provides Internet connection information for many ISPs.

Once you locate your Internet configuration parameters, you may want to record them on the page

below.

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

Connecting the FVS124G to the Internet

4-5

202-10085-01, March 2005

Record Your Internet Connection Information

Print this page. Fill in the configuration parameters from your Internet Service Provider (ISP).

ISP Login Name:

The login name and password are case sensitive and must be entered exactly as

given by your ISP. For AOL customers, the login name is their primary screen name. Some ISPs

use your full e-mail address as the login name. The Service Name is not required by all ISPs. If

you connect using a login name and password, then fill in the following:

Login Name: ______________________________

Password: ____________________________

Service Name: _____________________________

Fixed or Static IP Address:

If you have a static IP address, record the following information. For

example, 169.254.141.148 could be a valid IP address.

Fixed or Static Internet IP Address: ______

.______

.______

.______

Gateway IP Address: ______

.______

.______

.______

Subnet Mask: ______

.______

.______

.______

ISP DNS Server Addresses:

If you were given DNS server addresses, fill in the following:

Primary DNS Server IP Address: ______

.______

.______

.______

Secondary DNS Server IP Address: ______

.______

.______

.______

Host and Domain Names:

Some ISPs use a specific host or domain name like

CCA7324-A

or

home

. If you haven’t been given host or domain names, you can use the following examples as a

guide:

•

If your main e-mail account with your ISP is

, then use

aaa

as your host name.

Your ISP might call this your account, user, host, computer, or system name.

•

If your ISP’s mail server is

mail.xxx.yyy.com

, then use

xxx.yyy.com

as the domain name.

ISP Host Name: _________________________

ISP Domain Name: _______________________

Fully Qualified Domain Name:

Some organizations use a fully qualified domain name (FQDN)

from a dynamic DNS service provider for their IP addresses.

Dynamic DSN Service Provider: ______________________

FQDN: _______________________

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

4-6

Connecting the FVS124G to the Internet

202-10085-01, March 2005

Connecting the FVS124G ProSafe VPN Firewall 25 with 4

Gigabit LAN and Dual WAN Ports

This section provides instructions for connecting the FVS124G VPN Firewall. Also, the

Resource

CD for ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

included with your

firewall contains an animated Installation Assistant to help you through this procedure.

There are six major steps to connecting your firewall:

1.

Connect the firewall physically to your network (required)

You physically connect the cables during this step and then make sure the test lights are

working OK.

2.

Log in to the firewall (required)

You log in to the firewall to enter the information needed in the remaining steps. You can also

change your password and enable remote management at this time if you want.

3.

Configure the Internet connections to your ISPs (required)

You connect to your ISPs during this step. You can program the WAN traffic meters at this

time if you want also.

4.

Configure the WAN mode (required for dual WAN)

You select either rollover mode or load balancing (on a mutually exclusive basis) during this

step. For load balancing, you can also select the protocol bindings if you want.

5.

Configure dynamic DNS on the WAN ports (if needed)

You set up your fully qualified domain names during this step.

6.

Configure the WAN options (if needed)

You can optionally enable each WAN port to respond to a ping during this step. You can also

optionally change the factory default MTU size, port speed, and uplink bandwidth.

Follow the steps below to connect your firewall to your network.

You can also refer to the Resource CD included with your firewall which contains an animated

Installation Assistant to help you through this procedure.