ProSafe VPN Firewall 200 FVX538 Reference Manual

Contents

xi

v1.0, March 2009

Viewing Port Triggering Status

...............................................................................

6-24

Viewing Router Configuration and System Status

.................................................

6-25

Monitoring WAN Ports Status

.................................................................................

6-26

Monitoring VPN Tunnel Connection Status

............................................................

6-27

VPN Logs

...............................................................................................................

6-28

DHCP Log

..............................................................................................................

6-29

Performing Diagnostics

..........................................................................................

6-29

Chapter 7

Troubleshooting

Basic Functions

..............................................................................................................

7-1

Power LED Not On

...................................................................................................

7-1

LEDs Never Turn Off

................................................................................................

7-2

LAN or Internet Port LEDs Not On

...........................................................................

7-2

Troubleshooting the Web Configuration Interface

..........................................................

7-2

Troubleshooting the ISP Connection

..............................................................................

7-4

Troubleshooting a TCP/IP Network Using a Ping Utility

.................................................

7-5

Testing the LAN Path to Your Firewall

......................................................................

7-5

Testing the Path from Your PC to a Remote Device

................................................

7-6

Restoring the Default Configuration and Password

........................................................

7-7

Problems with Date and Time

.........................................................................................

7-7

Appendix A

Default Settings and Technical Specifications

Appendix B

Network Planning for Dual WAN Ports

What You Will Need to Do Before You Begin

................................................................

B-1

Cabling and Computer Hardware Requirements

....................................................

B-3

Computer Network Configuration Requirements

....................................................

B-3

Internet Configuration Requirements

......................................................................

B-3

Where Do I Get the Internet Configuration Parameters?

........................................

B-3

Internet Connection Information Form

....................................................................

B-5

Overview of the Planning Process

.................................................................................

B-6

Inbound Traffic

........................................................................................................

B-6

Virtual Private Networks (VPNs)

.............................................................................

B-6

The Roll-over Case for Firewalls With Dual WAN Ports

..........................................

B-7

The Load Balancing Case for Firewalls With Dual WAN Ports

...............................

B-7

ProSafe VPN Firewall 200 FVX538 Reference Manual

xii

Contents

v1.0, March 2009

Inbound Traffic

...............................................................................................................

B-8

Inbound Traffic to Single WAN Port (Reference Case)

...........................................

B-8

Inbound Traffic to Dual WAN Port Systems

............................................................

B-8

Inbound Traffic: Dual WAN Ports for Improved Reliability

................................

B-9

Inbound Traffic: Dual WAN Ports for Load Balancing

.......................................

B-9

Virtual Private Networks (VPNs)

..................................................................................

B-10

VPN Road Warrior (Client-to-Gateway)

.................................................................

B-11

VPN Road Warrior: Single Gateway WAN Port (Reference Case)

.................

B-12

VPN Road Warrior: Dual Gateway WAN Ports for Improved Reliability

.........

B-12

VPN Road Warrior: Dual Gateway WAN Ports for Load Balancing

................

B-13

VPN Gateway-to-Gateway

....................................................................................

B-14

VPN Gateway-to-Gateway: Single Gateway WAN Ports (Reference Case) .. B-14

VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Improved Reliability B-15

VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Load Balancing ... B-17

VPN Telecommuter (Client-to-Gateway Through a NAT Router)

..........................

B-17

VPN Telecommuter: Single Gateway WAN Port (Reference Case)

...............

B-18

VPN Telecommuter: Dual Gateway WAN Ports for Improved Reliability

........

B-18

VPN Telecommuter: Dual Gateway WAN Ports for Load Balancing

..............

B-20

Appendix C

System Logs and Error Messages

System Log Messages

..................................................................................................

C-1

System Startup

........................................................................................................

C-1

Reboot

.....................................................................................................................

C-2

NTP

.........................................................................................................................

C-2

Login/Logout

...........................................................................................................

C-3

Firewall Restart

.......................................................................................................

C-3

IPSec Restart

..........................................................................................................

C-4

WAN Status

.............................................................................................................

C-4

Load Balancing

.................................................................................................

C-4

Auto Rollover

....................................................................................................

C-5

PPP Logs

..........................................................................................................

C-6

Web Filtering and Content Filtering Logs

................................................................

C-7

Traffic Metering Logs

...............................................................................................

C-9

Unicast Logs

...........................................................................................................

C-9

ICMP Redirect Logs

.........................................................................................

C-9

ProSafe VPN Firewall 200 FVX538 Reference Manual

Contents

xiii

v1.0, March 2009

Multicast/Broadcast Logs

.................................................................................

C-9

FTP Logging

..........................................................................................................

C-10

Invalid Packet Logging

..........................................................................................

C-10

Routing Logs

...............................................................................................................

C-13

LAN to WAN Logs

.................................................................................................

C-13

LAN to DMZ Logs

..................................................................................................

C-14

DMZ to WAN Logs

................................................................................................

C-14

WAN to LAN Logs

.................................................................................................

C-14

DMZ to LAN Logs

..................................................................................................

C-14

WAN to DMZ Logs

................................................................................................

C-15

Appendix D

Related Documents

Appendix E

Two Factor Authentication

Why do I need Two-Factor Authentication?

...................................................................

E-1

What are the benefits of Two-Factor Authentication?

.............................................

E-1

What is Two-Factor Authentication

.........................................................................

E-2

NETGEAR Two-Factor Authentication Solutions

...........................................................

E-2

Index

ProSafe VPN Firewall 200 FVX538 Reference Manual

xiv

Contents

v1.0, March 2009

xv

v1.0, March 2009

About This Manual

The

NETGEAR

®

ProSafe™ VPN Firewall 200

describes how to install, configure and

troubleshoot the ProSafe VPN Firewall 200. The information in this manual is intended for readers

with intermediate computer and Internet skills.

Conventions, Formats and Scope

The conventions, formats, and scope of this manual are described in the following paragraphs.

•

Typographical Conventions.

This manual uses the following typographical conventions:

•

Formats.

This manual uses the following formats to highlight special messages:

Italics

Emphasis, books, CDs, file and server names, extensions

Bold

User input, IP addresses, GUI screen text

Fixed

Command prompt, CLI text, code

italics

URL links

Note:

This format is used to highlight information of importance or special interest.

Tip:

This format is used to highlight a procedure that will save time or resources.

Warning:

Ignoring this type of note may result in a malfunction or damage to the

equipment.