Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

-6

202-10085-01, March 2005

Product and Publication Details

Model Number:

FVS124G

Publication Date:

March 2005

Product Family:

Router

Product Name:

FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN

Ports

Home or Business Product:

Business

Language:

English

Publication Part Number:

202-10085-01

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

-1

202-10085-01, March 2005

Contents

Chapter 1

About This Manual

Audience, Scope, Conventions, and Formats

................................................................

1-1

How to Use This Manual

................................................................................................

1-2

How to Print this Manual

.................................................................................................

1-3

Chapter 2

Introduction

Key Features of the VPN Firewall

..................................................................................

2-1

Dual WAN Ports for Increased Reliability or Outbound Load Balancing

..................

2-2

A Powerful, True Firewall with Content Filtering

......................................................

2-2

Security

....................................................................................................................

2-3

Autosensing Ethernet Connections with Auto Uplink

...............................................

2-3

Extensive Protocol Support

......................................................................................

2-4

Easy Installation and Management

..........................................................................

2-4

Maintenance and Support

........................................................................................

2-5

Package Contents

..........................................................................................................

2-5

The Router’s Front Panel

.........................................................................................

2-6

The Router’s Rear Panel

.........................................................................................

2-7

The Router’s IP Address, Login Name, and Password

............................................

2-8

Logging into the Router

............................................................................................

2-9

Default Factory Settings

.........................................................................................

2-10

NETGEAR Related Products

........................................................................................

2-11

Chapter 3

Network Planning

Overview of the Planning Process

..................................................................................

3-1

Inbound Traffic

.........................................................................................................

3-1

Virtual Private Networks (VPNs)

..............................................................................

3-1

The Rollover Case for Firewalls With Dual WAN Ports

............................................

3-2

The Load Balancing Case for Firewalls With Dual WAN Ports

................................

3-2

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

-2

202-10085-01, March 2005

Inbound Traffic

................................................................................................................

3-3

Inbound Traffic to Single WAN Port (Reference Case)

............................................

3-3

Inbound Traffic to Dual WAN Port Systems

.............................................................

3-3

Inbound Traffic: Dual WAN Ports for Improved Reliability

.................................

3-4

Inbound Traffic: Dual WAN Ports for Load Balancing

........................................

3-4

Virtual Private Networks (VPNs)

.....................................................................................

3-5

VPN Road Warrior (Client-to-Gateway)

...................................................................

3-6

VPN Road Warrior: Single Gateway WAN Port (Reference Case)

....................

3-6

VPN Road Warrior: Dual Gateway WAN Ports for Improved Reliability

............

3-7

VPN Road Warrior: Dual Gateway WAN Ports for Load Balancing

...................

3-8

VPN Gateway-to-Gateway

.......................................................................................

3-9

VPN Gateway-to-Gateway: Single Gateway WAN Ports (Reference Case)

.....

3-9

VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Improved Reliability 3-10

VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Load Balancing

....

3-11

VPN Telecommuter (Client-to-Gateway Through a NAT Router)

...........................

3-12

VPN Telecommuter: Single Gateway WAN Port (Reference Case)

................

3-12

VPN Telecommuter: Dual Gateway WAN Ports for Improved Reliability

.........

3-13

VPN Telecommuter: Dual Gateway WAN Ports for Load Balancing

...............

3-14

Chapter 4

Connecting the FVS124G to the Internet

What You Will Need to Do Before You Begin

.................................................................

4-1

Cabling and Computer Hardware Requirements

.....................................................

4-3

Computer Network Configuration Requirements

.....................................................

4-3

Internet Configuration Requirements

.......................................................................

4-4

Where Do I Get the Internet Configuration Parameters?

.........................................

4-4

Record Your Internet Connection Information

..........................................................

4-5

Connecting the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

4-6

Step 1: Physically Connect the VPN Firewall to Your Network (Required)

..............

4-7

Step 2: Log in to the VPN Firewall (Required)

.........................................................

4-7

Step 3: Configure the Internet Connections to Your ISPs (Required)

......................

4-8

Manually Configuring Your Internet Connection

..............................................

4-12

Programming the Traffic Meter (if Desired)

.....................................................

4-13

Step 4: Configure the WAN Mode (Required for Dual WAN)

.................................

4-15

Rollover Setup

.................................................................................................

4-16

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

-3

202-10085-01, March 2005

Load Balancing (and Protocol Binding) Setup

.................................................

4-17

Step 5: Configure Dynamic DNS (If Needed)

.........................................................

4-20

Step 6: Configure the WAN Options (If Needed)

....................................................

4-23

Chapter 5

LAN Configuration

Using the LAN IP Setup Options

....................................................................................

5-1

Configuring LAN TCP/IP Setup Parameters

............................................................

5-2

Using the Firewall as a DHCP server

.......................................................................

5-4

Using Address Reservation

......................................................................................

5-5

Multi Home LAN IPs

.................................................................................................

5-6

Configuring Static Routes

...............................................................................................

5-6

Chapter 6

Firewall Protection and Content Filtering

Firewall Protection and Content Filtering Overview

........................................................

6-1

Using Rules to Block or Allow Specific Kinds of Traffic

..................................................

6-1

Services-Based Rules

..............................................................................................

6-4

Inbound Rules (Port Forwarding)

......................................................................

6-5

Outbound Rules (Service Blocking)

.................................................................

6-12

Customized Services

.......................................................................................

6-16

Quality of Service (QoS) Priorities

...................................................................

6-18

Managing Groups and Hosts

.................................................................................

6-20

Using a Schedule to Block or Allow Specific Traffic

...............................................

6-22

Time Zone

..............................................................................................................

6-24

Block Sites

....................................................................................................................

6-24

Source MAC Filtering

...................................................................................................

6-27

Port Triggering

..............................................................................................................

6-28

Getting E-Mail Notifications of Event Logs and Alerts

..................................................

6-30

Syslog

....................................................................................................................

6-33

Viewing Logs of Web Access or Attempted Web Access

......................................

6-33

Administrator Information

.............................................................................................

6-35

Chapter 7

Virtual Private Networking

Dual WAN Port Systems

.................................................................................................

7-1

Rollover vs. Load Balancing Mode

...........................................................................

7-1

Fully Qualified Domain Names

.................................................................................

7-2

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

-4

202-10085-01, March 2005

Creating a VPN Connection: Between FVX538 and FVS124G

......................................

7-5

Configuring the FVX538

...........................................................................................

7-5

Configuring the FVS124G

........................................................................................

7-9

Testing the Connection

...........................................................................................

7-11

Creating a VPN Connection: Netgear VPN Client to FVS124G

...................................

7-11

Configuring the FVS124G

......................................................................................

7-12

Configuring the VPN Client

....................................................................................

7-12

Testing the Connection

...........................................................................................

7-20

Chapter 8

Router and Network Management

Performance Management

.............................................................................................

8-1

Bandwidth Capacity

.................................................................................................

8-1

VPN Firewall Features That Reduce Traffic

.............................................................

8-2

Service Blocking

................................................................................................

8-2

Block Sites

.........................................................................................................

8-4

Source MAC Filtering

........................................................................................

8-4

VPN Firewall Features That Increase Traffic

...........................................................

8-4

Port Forwarding

.................................................................................................

8-5

Port Triggering

...................................................................................................

8-6

VPN Tunnels

......................................................................................................

8-7

Using QoS to Shift the Traffic Mix

............................................................................

8-7

Tools for Traffic Management

...................................................................................

8-7

Administrator and Guest Access Authorization

..............................................................

8-8

Changing the Passwords and Login Timeout

..........................................................

8-8

Enabling Remote Management Access

...................................................................

8-9

Command Line Interface

........................................................................................

8-10

Event Alerts

..................................................................................................................

8-11

WAN Port Rollover

.................................................................................................

8-11

Traffic Limits Reached

............................................................................................

8-11

Login Failures and Attacks

.....................................................................................

8-12

Monitoring

.....................................................................................................................

8-14

Viewing VPN Firewall Status and Time Information

...............................................

8-14

Firewall Status

.................................................................................................

8-14

Time Information

..............................................................................................

8-16

WAN Ports

..............................................................................................................

8-18