Page 96 / 414 Scroll up to view Page 91 - 95
LAN Configuration
96
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Figure 48.
3.
Enter the settings as explained in the following table:
4.
Click
Apply
to save your settings. The new static route is added to the Static Routes table.
Table 23.
Add Static Route screen settings for IPv4
Setting
Description
Route Name
The route name for the static route (for purposes of identification and
management).
Active
To make the static route effective, select the
Active
check box.
Note:
A route can be added to the table and made inactive if not needed. This
allows you to use routes as needed without deleting and re-adding the entry. An
inactive route is not advertised if RIP is enabled.
Private
If you want to limit access to the LAN only, select the
Private
check box. Doing so
prevents the static route from being advertised in RIP.
Destination IP Address
The destination IP address of the host or network to which the route leads.
Subnet Mask
The IP subnet mask of the host or network to which the route leads. If the
destination is a single host, enter
255.255.255.255
.
Interface
From the drop-down list, select the physical or virtual network interface (WAN,
LAN, or DMZ interface ) through which the route is accessible.
Gateway IP Address
The gateway IP address through which the destination host or network can be
reached.
Metric
The priority of the route. Select a value between 2 and 15. If multiple routes to the
same destination exist, the route with the lowest metric is used.
Page 97 / 414
LAN Configuration
97
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
To edit an IPv4 static route:
1.
On the Static Routing screen for IPv4 (see
Figure 47
on page 95), click the
Edit
button
in the Action column for the route that you want to modify. The Edit Static Route screen
displays. This screen is identical to the Add Static Route screen (see the previous
figure).
2.
Modify the settings as explained in the previous table.
3.
Click
Apply
to save your settings.
To delete one or more routes:
1.
On the Static Routing screen for IPv4 (see
Figure 47
on page 95), select the check box
to the left of each route that you want to delete, or click the
Select All
table button to
select all routes.
2.
Click the
Delete
table button.
Configure the Routing Information Protocol
Routing Information Protocol (RIP), RFC 2453, is an Interior Gateway Protocol (IGP) that is
commonly used in internal IPv4 networks (LANs). RIP enables a router to exchange its
routing information automatically with other routers, to dynamically adjust its routing tables,
and to adapt to changes in the network. RIP is disabled by default. RIP does not apply to
IPv6.
To enable and configure RIP:
1.
Select
Network Configuration > Routing
. In the upper right of the screen, the IPv4
radio button is selected by default. The Static Routing screen displays the IPv4 settings
(see
Figure 47
on page 95).
2.
Click the
RIP Configuration
option arrow to the right of the Static Routing submenu tab.
The RIP Configuration screen displays. (The following figure contains some examples.)
Page 98 / 414
LAN Configuration
98
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Figure 49.
3.
Enter the settings as explained in the following table:
Table 24.
RIP Configuration screen settings
Setting
Description
RIP
RIP Direction
From the RIP Direction drop-down list, select the direction in which the wireless
VPN firewall sends and receives RIP packets:
None
. The wireless VPN firewall neither advertises its route table, nor accepts
any RIP packets from other routers. This effectively disables RIP, and is the
default setting.
In Only
. The wireless VPN firewall accepts RIP information from other routers
but does not advertise its routing table.
Out Only
. The wireless VPN firewall advertises its routing table but does not
accept RIP information from other routers.
Both
. The wireless VPN firewall advertises its routing table and also processes
RIP information received from other routers.
Page 99 / 414
LAN Configuration
99
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
4.
Click
Apply
to save your settings.
RIP Version
By default, the RIP version is set to Disabled. From the RIP Version drop-down list,
select the version:
RIP-1
. Classful routing that does not include subnet information. This is the most
commonly supported version.
RIP-2
. Routing that supports subnet information. Both RIP-2B and RIP-2M send
the routing data in RIP-2 format:
-
RIP-2B
. Sends the routing data in RIP-2 format and uses subnet
broadcasting.
-
RIP-2M
. Sends the routing data in RIP-2 format and uses multicasting.
Authentication for RIP-2B/2M
Authentication for
RIP-2B/2M required?
Authentication for RP-2B or RIP-2M is disabled by default, that is, the No radio
button is selected. To enable authentication for RP-2B or RIP-2M, select the
Yes
radio button, and enter the settings for the following fields.
First Key Parameters
MD5 Key Id
The identifier for the key that is used for authentication.
MD5 Auth Key
The password that is used for MD5 authentication.
Not Valid Before
The beginning of the lifetime of the MD5 key. Enter the month,
date, year, hour, minute, and second. Before this date and
time, the MD5 key is not valid.
Not Valid After
The end of the lifetime of the MD5 key. Enter the month, date,
year, hour, minute, and second. After this date and time, the
MD5 key is no longer valid.
Second Key Parameters
MD5 Key Id
The identifier for the key that is used for authentication.
MD5 Auth Key
The password that is used for MD5 authentication.
Not Valid Before
The beginning of the lifetime of the MD5 key. Enter the month,
date, year, hour, minute, and second. Before this date and
time, the MD5 key is not valid.
Not Valid After
The end of the lifetime of the MD5 key. Enter the month, date,
year, hour, minute, and second. After this date and time, the
MD5 key is no longer valid.
Table 24.
RIP Configuration screen settings (continued)
Setting
Description
Page 100 / 414
LAN Configuration
100
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
IPv4 Static Route Example
In this example, we assume the following:
The wireless VPN firewall’s primary Internet access is through a cable modem to an ISP.
The wireless VPN firewall is on a local LAN with IP address 192.168.1.100.
The wireless VPN firewall connects to a remote network where you need to access a
device.
The LAN IP address of the remote network is 134.177.0.0.
When you first configured the wireless VPN firewall, two implicit static routes were created:
A default static route was created with your ISP as the gateway.
A second static route was created to the local LAN for all 192.168.1.x addresses.
With this configuration, if you attempt to access a device on the 134.177.0.0 remote network,
the wireless VPN firewall forwards your request to the ISP. In turn, the ISP forwards your
request to the remote network, where the request is likely to be denied by the remote
network’s firewall.
In this case, you need to define a static route, informing the wireless VPN firewall that the
134.177.0.0 IP address should be accessed through the local LAN IP address
(192.168.1.100).
The static route on the wireless VPN firewall needs to be defined as follows:
The destination IP address and IP subnet mask need to specify that the static route
applies to all 134.177.x.x IP addresses.
The gateway IP address needs to specify that all traffic for the 134.177.x.x IP addresses
should be forwarded to the local LAN IP address (192.168.1.100).
A metric value of 1 should work since the wireless VPN firewall is on the local LAN.
The static route can be made private only as a precautionary security measure in case
RIP is activated.
Manage Static IPv6 Routing
At this time, NETGEAR’s implementation of IPv6 does not support RIP next generation
(RIPng) to exchange routing information, and dynamic changes to IPv6 routes are not
possible. To enable routers to exchange information over a static IPv6 route, you need to
manually configure the static route information on each router.
To add an IPv6 static route to the Static Route table:
1.
Select
Network Configuration > Routing
.
2.
In the upper right of the screen, select the
IPv6
radio button. The Static Routing screen
displays the IPv6 settings:

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top