Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

5-8

WAN and LAN Configuration

December 2003, M-10041-01

When you first configured your firewall, two implicit static routes were created. A default route

was created with your ISP as the gateway, and a second static route was created to your local

network for all 192.168.0.x addresses. With this configuration, if you attempt to access a device on

the 134.177.0.0 network, your firewall will forward your request to the ISP. The ISP forwards your

request to the company where you are employed, and the request will likely be denied by the

company’s firewall.

In this case you must define a static route, telling your firewall that 134.177.0.0 should be accessed

through the ISDN router at 192.168.0.100. The static route would look like

Figure 5-3

.

In this example:

•

The Destination IP Address and IP Subnet Mask fields specify that this static route applies to

all 134.177.x.x addresses.

•

The Gateway IP Address fields specifies that all traffic for these addresses should be

forwarded to the ISDN router at 192.168.0.100.

•

A Metric value of 1 will work since the ISDN router is on the LAN.

This represents the number of routers between your network and the destination. This is a

direct connection so it is set to 1.

•

Private is selected only as a precautionary security measure in case RIP is activated.

How to Configure Static Routes

1.

Log in to the firewall at its default LAN address of

with its default user

name of

admin

, default password of

password

, or using whatever password and LAN address

you have chosen for the firewall.

2.

From the Main Menu of the browser interface, under Advanced, click on Static Routes to view

the Static Routes menu, shown in

Figure 5-2

.

Figure 5-2:

Static Routes Table

3.

To add or edit a Static Route:

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

WAN and LAN Configuration

5-9

December 2003, M-10041-01

a.

Click the Edit button to open the Edit Menu, shown below.

Figure 5-3:

Static Route Entry and Edit Menu

b.

Type a route name for this static route in the Route Name box under the table.

This is for identification purpose only.

c.

Select Active to make this route effective.

d.

Select Private if you want to limit access to the LAN only.

The static route will not be reported in RIP.

e.

Type the Destination IP Address of the final destination.

f.

Type the IP Subnet Mask for this destination.

If the destination is a single host, type 255.255.255.255.

g.

Type the Gateway IP Address, which must be a router on the same LAN segment as the

firewall.

h.

Type a number between 1 and 15 as the Metric value.

This represents the number of routers between your network and the destination. Usually,

a setting of 2 or 3 works, but if this is a direct connection, set it to 1.

4.

Click Apply to have the static route entered into the table.

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

5-10

WAN and LAN Configuration

December 2003, M-10041-01

Protecting Your Network

6-1

December 2003, M-10041-01

Chapter 6

Protecting Your Network

This chapter describes how to use the basic firewall features of the FVS328 ProSafe VPN Firewall

with Dial Back-up to protect your network.

Protecting Access to Your FVS328 Firewall

For security reasons, the firewall has its own user name and password. Also, after a period of

inactivity for a set length of time, the administrator login will automatically disconnect. You can

use the procedures below to change the firewall's password and the amount of time for the

administrator’s login timeout.

Note:

The user name and password are not the same as any user name or password your may use

to log in to your Internet connection.

NETGEAR recommends that you change this password to a more secure password. The ideal

password should contain no dictionary words from any language, and should be a mixture of both

upper and lower case letters, numbers, and symbols.

Your password can be up to 30 characters.

How to Change the Built-In Password

1.

Log in to the firewall at its default LAN address of

with its default User

Name of

admin

, default password of

password

, or using whatever password and LAN

address you have chosen for the firewall.

2.

From the main menu of the browser interface, under the Maintenance heading, select Set

Password to bring up the menu shown below.

Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual

6-2

Protecting Your Network

December 2003, M-10041-01

Figure 6-1:

Set Password menu

3.

To change the password, first enter the old password, then enter the new password twice.

4.

Click Apply to save your changes.

Note:

After changing the password, you will be required to log in again to continue the

configuration. If you have backed up the firewall settings previously, you should do a new

backup so that the saved settings file includes the new password.

How to Change the Administrator Login Timeout

For security, the administrator’s login to the

firewall

configuration will time out after a period of

inactivity. To change the login timeout period:

1.

In the Set Password menu, type a number in ‘Administrator login times out’ field. The

suggested default value is 5 minutes.

2.

Click Apply to save your changes or click Cancel to keep the current period.

Configuring Basic Firewall Services

Basic firewall services you can configure include access blocking and scheduling of firewall

security. These topics are presented below.