NETGEAR FVS338 Router Manual PDF (Setup & Configuration Guide)

Page 136 / 178 Scroll up to view Page 131 - 135

FVS338 ProSafe VPN Firewall 50 Reference Manual

6-8

Router and Network Management

v1.0, September 2006

To modify User or Admin settings:

1.

Select

Administration

from the main menu and

Set Password

from the submenu. The

Set

Password

screen will display.

2.

Select the Settings you wish to edit by checking either the

Edit Admin Settings

or

Edit Guest

Settings

radio box.

3.

Change the password by first entering the old password, and then entering the new password

twice.

4.

Click

Apply

to save your settings or

Cancel

to return to your previous settings.

5.

Change the

Idle Logout Time

field to the number of minutes you require. The default is 5

minutes.

6.

Click

Apply

to save this setting.

Note:

If you make the administrator login time-out value too large, you will have to

wait a long time before you are able to log back into the router if your previous

login was disrupted (i.e., you did not click

Logout

on the Main Menu bar to

log out).

Figure 6-1

Page 137 / 178

FVS338 ProSafe VPN Firewall 50 Reference Manual

Router and Network Management

6-9

v1.0, September 2006

Enabling Remote Management Access

Using the Remote Management page, you can allow an administrator on the Internet to configure,

upgrade, and check the status of your VPN firewall. You must be logged in locally to enable

remote management (see

“Logging in to the VPN Firewall” on page 2-1

).

To configure your firewall for Remote Management:

1.

Select the Turn Remote Management On check box.

Note:

The password and time-out value you enter will be changed back to

password

and

5

minutes, respectively, after a factory defaults reset.

Note:

Be sure to change the firewall default configuration password to a very secure

password. The ideal password should contain no dictionary words from any

language, and should be a mixture of letters (both upper and lower case), numbers,

and symbols. Your password can be up to 30 characters. See

“Changing Passwords

and Settings” on page 6-7

for the procedure on how to do this.

Figure 6-2

Page 138 / 178

FVS338 ProSafe VPN Firewall 50 Reference Manual

6-10

Router and Network Management

v1.0, September 2006

a.

Specify what external addresses will be allowed to access the firewall’s remote

management.

b.

To allow access from any IP address on the Internet, select Everyone.

c.

To allow access from a range of IP addresses on the Internet, select IP address range.

Enter a beginning and ending IP address to define the allowed range.

d.

To allow access from a single IP address on the Internet, select Only this PC.

Enter the IP address that will be allowed access.

2.

Specify the Port Number that will be used for accessing the management interface.

Web browser access normally uses the standard HTTP service port 80. For greater security,

you can change the remote management Web interface to a custom port by entering that

number in the box provided. Choose a number between 1024 and 65535, but do not use the

number of any common service port. The default is 8080, which is a common alternate for

HTTP.

3.

Click

Apply

to have your changes take effect.

When accessing your firewall from the Internet, the Secure Sockets Layer (SSL) will be enabled.

You will enter

https://

and type the WAN IP address of your firewall into your browser, followed

by a colon (:) and the custom port number. For example, if your WAN IP address is 134.177.0.123

and you use port number 8080, enter the following in your browser:

https://134.177.0.123:8080

The remote URL login of the router is

https://IP_address:port_number

or

https://FullyQualifiedDomainName:port_number

.

If you do not use the SSL

https://address

, but rather use

http://address

, the FVS338 will

automatically attempt to redirect to

https://address.

Note:

For enhanced security, restrict access to as few external IP addresses as

practical.

Note:

The first time you remotely connect the FVS338 with a browser via SSL, you may

get a message regarding the SSL certificate. If you are using a Windows computer

with Internet Explorer 5.5 or higher, simply click Yes to accept the certificate.

Page 139 / 178

FVS338 ProSafe VPN Firewall 50 Reference Manual

Router and Network Management

6-11

v1.0, September 2006

Using a SNMP Manager

Simple Network Management Protocol (SNMP) lets you monitor and manage your router from an

SNMP Manager. It provides a remote means to monitor and control network devices, and to

manage configurations, statistics collection, performance, and security.

The SNMP Configuration table lists the SNMP configurations by:

•

IP Address

: The IP address of the SNMP manager.

•

Port

: The trap port of the configuration.

•

Community

: The trap community string of the configuration.

To create a new SNMP configuration entry:

1.

Select

Administration

from the main menu and

SNMP

from the submenu. The

SNMP

screen

will display.

2.

Under

Create New SNMP Configuration Entry,

enter the IP Address of the SNMP manager

in the

IP Address

field and the Subnet Mask in the

Subnet Mask

field.

•

If you want to allow only the host address to access the VPN firewall and receive traps (for

example, see

Figure 6-3

), enter an IP Address of, for example, 192.168.1.100 with a

Subnet Mask of 255.255.255.

255

.

•

If you want to allow a subnet access to the VPN firewall through SNMP, enter an IP

address of, for example,192.168.1.100 with a Subnet Mask of 255.255.255.

0

. The traps

will still be received on 192.168.1.100, but the entire subnet will have access through the

community string.

•

If you want to make the VPN firewall globally accessible using the community string, but

still receive traps on the host, enter 0.0.0.0 as the Subnet Mask and an IP Address for

where the traps will be received.

3.

Enter the trap port number of the configuration in the

Port

field. The default is 162.

4.

Enter the trap community string of the configuration in the

Community

field.

5.

Click

Add

to create the new configuration. The entry will display in the

SNMP

Configuration

table.

Note:

If you are using a dynamic DNS service such as TZO, you can always identify the

IP address of your FVS338 by running

tracert

from the Windows Run menu.

For example, renter

tracert yourFVS338.mynetgear.net

and you will

see the IP address your ISP assigned to the FVS338.

Page 140 / 178

FVS338 ProSafe VPN Firewall 50 Reference Manual

6-12

Router and Network Management

v1.0, September 2006

6.

Click

Edit

in the

Action

column adjacent to the entry to modify or change the selected

configuration.

The

SNMP System Info

link displays the VPN firewall identification information available to the

SNMP Manager. System Contact, System Location, and System name.

To modify the SNMP System contact information:

1.

Click the

SNMP System Info

link. The

SNMP SysConfiguration

screen will display.

2.

Modify any of the contact information that you want the SNMP Manager to use.

3.

Click

Apply

to save your settings.

Settings Backup and Firmware Upgrade

Once you have installed the VPN firewall and have it working properly, you should back up a copy

of your setting so that it is if something goes wrong. When you backup the settings, they are saved

as a file on your computer. You can then restore the VPN firewall settings from this file. The

Settings Backup & Upgrade

screen allows you to:

•

Back up and save a copy of your current settings

•

Restore saved settings from the backed-up file.

Figure 6-3

Rate

Popular NETGEAR Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share