NETGEAR FVS318 - ProSafe VPN Firewall Router User manual

Installation Guide
Cable/DSL ProSafe VPN Firewall
MODEL FVS318

Technical Support
YOU MUST REGISTER TO OBTAIN TECHNICAL SUPPORT. PLEASE RETAIN
PROOF OF PURCHASE AND THE WARRANTY INFORMATION.
To register your roduct, get roduct su ort or obtain roduct information and roduct
documentation, go to htt ://www.NETGEAR.com/register.
You’ll find technical su ort information at htt ://www.NETGEAR.com/ through the
Customer Service area. If you want to contact technical su ort by tele hone, see the su ort
information card for the correct tele hone number for your country.
©2002 by NETGEAR, Inc. All rights reserved.
NETGEAR and Auto U link are trademarks or registered trademarks of NETGEAR, Inc. in the United States and/or
other countries.
Other brand and roduct names are trademarks or registered trademarks of their res ective holders.
Information is subject to change without notice.

Introduction
Thank you for urchasing a NETGEAR FVS318 Cable/DSL ProSafe VPN Firewall. A firewall is
a s ecial ty e of router that incor orates features for network security. With this firewall you can
have secure Internet access through a high-s eed DSL or cable modem and share the single
modem with several com uters.
This installation guide shows you how to connect the firewall and configure it and your
com uters for secure Internet access. Setu is easy—follow the instructions in this guide and
your system will be u and running quickly.
If you have roblems, there is a troubleshooting section on age 13 to hel you—or you can
get more detailed troubleshooting information from the Reference Manual on the CD, online
from www.NETGEAR.com or by hone.
Installation Overview
Estimated time: 15 to 30 minutes
1. Gather the configuration information you have for your working DSL or cable modem
connection to the Internet.
2. Install the firewall between the DSL or cable modem and one com uter.
3. Configure that com uter to work with the firewall and restart the com uter and modem.
4. Configure the firewall and go online to test the connection.
5. Connect other com uters, configure them and restart each. (o tional)
6. Configure for VPN or ort forwarding. (o tional)
On the FVS318 Resource CD, you’ll find the FVS318 Installation Assistant, which
su lements the instructions in this installation guide by animating the ste -by-ste rocedures
given here. For more detailed information about installation, troubleshooting and configuration
rocedures, see the Reference Manual on the CD.
1
WirelessDSL
ProSafe VPN Firewall
MODEL
FVS318
PowerT
est
LNK
ACT
12345678
100
LNK/ACT
INTERNETLOCAL
Model FVS318 Cable/DSL ProSafe VPN Firewall

What’s in the Box
When you o en the box, verify that you received everything.
The ackage includes:
• FVS318 Cable/DSL ProSafe VPN Firewall
• AC ower ada ter
• Ethernet atch cable
• FVS318 Resource CD, including a full Reference Manual and Installation Assistant.
• FVS318 Installation Guide (this document)
• Warranty and registration card
• Su ort information card
If you don’t have everything listed above, see the su ort information card for contact
information. If the su ort information card is missing, you can get contact information at
www.NETGEAR.com in the Customer Service area.
2
WirelessDSL
ProSafeVPNFirewall
MODEL
FVS318
Power Te st
LNK
ACT
12345678
100
LNK/ACT
INTERNET LOCAL
FVS318 Cable/DSL ProSafe VPN Firewall
FVS318 Resource CD,
installation guide, support
information card &
warranty/registration card
Power adapter
Category 5
100 Mbps
Ethernet cable

Gather Configuration Information for
Your Working Connection to the Internet
Before installing the FVS318 firewall, you
should have an external DSL or cable
modem with an Ethernet ort set u and
working with one com uter. You’ll be
installing the firewall between the modem
and the com uter.
For each com uter that you want to
connect to the firewall, you must have
• An available RJ-45 Ethernet ort (or
ada ter) — either built-in or from a
network interface card (NIC) installed
in the com uter.
Note: If you have a built-in modem
or a modem card, the telephone jack
for the modem looks very similar to
an RJ- 5 Ethernet port, but the RJ-
5 port is larger.
• TCP/IP installed.
• If your com uter is a Windows®com uter, it must have the Client for Microsoft®
Networks software installed.
Note: Please see the Reference Manual on the CD if you need help installing
TCP/IP software or the Client for Microsoft Networks software on any Windows
computer that hasn’t been networked previously.
• A Category 5 (Cat 5) Ethernet atch cable
Note: There is one cable in the box with the firewall.
3
DSL modem
1
1
Note: If you have a cable
modem, you will have a cable
connection between the
modem and your cable outlet.

Connection information
Later in the setu rocess you’ll need to configure the firewall to work with your network. A
Setu Wizard is available to hel you through this rocedure. Alternatively, you can configure
the firewall yourself using information that you can get from your com uter or your ISP about
your current Internet connection.
The next age includes blanks for you to fill in and refer to later. To get the needed
information from your com uter:
• O en the Network control anel, select the TCP/IP entry, and click Pro erties.
(Windows 98/Me)
• O en Local Area Network Connection and click Pro erties. (Windows 2000/XP)
• O en the TCP/IP (or Network) control anel. (Macintosh®)
Your ISP should have provided you with a summary sheet of all the information needed to connect
your computer to the Internet. If you cannot locate the information, you’ll have to contact your ISP.
An ISP Guide is included with your firewall’s documentation, either as a rinted card or on the
Resource CD. The ISP Guide contains s ecific configuration guidelines for connecting to
many o ular ISPs.

Host and Domain Names
Some ISPs use a s ecific host or domain name—like jsmith or earthlink.net. If you haven’t
been given s ecific information about host or domain names then use the following exam les
as a guide:
• If your main e-mail account with your ISP is [e-mail], then use aaa as your host
name. (Your ISP might call this your account name, user name, or system name.)
• If your ISP’s mail server is mail.xxx.yyy.com, then use xxx.yyy.com as the domain name.
Host name:_____________________________________
Domain name: __________________________________
Login Name
If your ISP requires a login name and assword ( ossibly because you have a PPPoE account),
fill in the following:
Login name:____________________________________
(may be your full e-mail address)
Password:______________________________________
Note: The login name could be called a user name or account name by your ISP.
The login name is case sensitive. You must type it exactly as given by your ISP. For
example, c_jones is a different login name than C_Jones or cjones.
Fixed (or static) IP address
If you have a static IP address through your ISP, fill in the following information:
IP address: _____._____._____._____
Subnet mask: _____._____._____._____
Gateway IP address:_____._____._____._____
DNS server address information
If you were given s ecific Domain Name System (DNS) server addresses, fill in the following:
DNS Server IP address(es): _____._____._____._____
_____._____._____._____
5

Install the Firewall
After un acking the box and locating
the configuration information, you’re ready to
install the firewall.
Note: You do not have to power down any
equipment to do this, but if you need to move
your computers (perhaps to get to ports in
the back), you may want to shut down the
computers before moving them around.
1. Locate the Ethernet cable currently going
from the DSL or cable modem to the
com uter that you use to access the Internet.
Note: You must use this cable to connect the
DSL or cable modem to your firewall since
this may be a special cable even though it
looks like other LAN cables.
2. Remove this cable from the com uter and insert that end into the Internet ort on the
rear anel of the firewall.
3. Use the Ethernet atch cable that came with the firewall to connect the com uter to
one of the eight numbered local Ethernet orts on the rear anel of the firewall.
4. Connect the ower ada ter’s cord into the back of the firewall and then lug the
ada ter into a ower source (such as a wall socket or ower stri ).
5. Turn on the ower switch on the rear anel of the firewall.
Note: If you want to connect other computers to the firewall, don’t connect them
now. Do that after you know that the modem/firewall setup works with one
computer.
6
2
2
12VDC 1.2A
87654321
LOCAL
10/100M
INTERNET
OFF ON
DSL
modem
Model FVS318 Cable/DSL ProSafe VPN Firewall

Check the setup
• The Test light turns on for a few seconds and then goes off.
Note: If the Test light remains on for more than one minute, go to Troubleshooting
on page 13.
• The Power and Internet Link lights should be lit.
• If your com uter is on, the Local Link light should be on for the ort number that your
com uter is connected to.
Note: If the Local port connection is a 100 Mbps connection, the 100 light should be on.
If either the Power, Internet, or ort Link light isn’t lit, go to Troubleshooting on age 13.
7

Configure the Computer to Work with the
Firewall and Restart the Network
Next, you make sure that the com uter can interact with the firewall. To do this, you configure
the TCP/IP settings on the com uter and then restart the network. How you do this de ends
on your com uter.
Windows Operating System
Normally, you leave the TCP/IP setu arameters at their factory default settings unless you
have a s ecific reason to change them. You should verify that the com uter is set to ‘obtain an
IP address automatically’ in the Network control anel.
Windows 98 or Me
1. Choose Settings>Control Panel from the Start menu.
2. Double-click the Network icon.
3. Click the Configuration tab.
4. In the list of installed network com onents, select the TCP/IP entry for the com uter’s
Ethernet ada ter or NIC.
5. Click Pro erties.
6. Click the IP Address tab.
7. Check that Obtain an IP Address Automatically ia selected, select if not.
8. Click the Gateway tab.
9. Select and remove any IP Gateway addresses that are listed.
10. Click OK and click OK again to close the Network control anel.
11. Go to Restarting the Network on the next age.
Windows 2000 or XP
1. Right-click My Network Place and choose Pro erties.
2. Double-click Local Area Network Connection and
click Pro erties.
3. Select Internet Protocol (TCP/IP) and click Pro erties.
4. Select Obtain IP address automatically.
5. Click OK twice and click Close.
6. Go to Restarting the Network.
8
3
3
Windiws 98/Me

Macintosh Operating System
Mac OS®8.6 or 9.x
1. Choose Control Panels >TCP/IP from the A le
menu.
2. If not already selected, select Ethernet in the
Connect via list.
3. Select Using DHCP Server in the Configure list.
4. Click the close box.
5. If asked if you want to save this configuration,
click Save.
6. Go to Restarting the Network.
Mac OS X
1. Choose System Preferences from the A le menu.
2. Double-click Network.
3. If not already selected, select Built-in Ethernet in the Configure list.
4. If not already selected, select Using DHCP in the TCP/IP tab.
5. Click Save.
6. Go to Restarting the Network.
Linux®or UNIX®Operating System
If you’re installing the firewall with a Linux-based or UNIX-based com uter see your system
documentation for TCP/IP and networking setu information.
Restarting the Network
Once you’ve set u your com uter to work with the firewall, you must reset the network for
the devices to be able to communicate correctly.
1. Turn off the DSL or cable modem, wait 15 seconds, and then turn it on again.
Note: If the modem doesn’t have an on/off switch, either pull the modem’s power
adapter out of the wall socket or power down the power strip.
2. If the firewall was owered down, ower it u again and wait until the Test light turns off.
3. Restart the com uter that is connected to the firewall.
9

Configure the Firewall and Test the
Connection
Now you configure the firewall to work with your DSL or cable connection. You configure your
firewall using Internet browser software such as Microsoft®Internet Ex lorer 5.0 or Netsca e
Navigator®4.7 or later. You can either use the Setu Wizard or configure the firewall yourself.
1. Start a browser on the com uter connected to the firewall.
2. In the Address or Location box, ty e htt ://192.168.0.1 and ress Enter or Return.
Note: You may want to bookmark this address in your browser for handy access in
the future.
3. In the User Name box, ty e admin
4. In the Password box, ty e assword
Note: The User Name and Password are case sensitive.
5. Click OK. The firewall’s Setu Wizard age a ears. If not, select setu wizard from the
bar on the left.
6. To have the Setu Wizard automatically configure the firewall, click Yes, click Next and
follow the instructions on screen. To configure it yourself, click No, then click Next and
continue with the ste s listed here.
7. Fill in the form on the Basic Settings age. (Refer to age 4 where you filled in the
information reviously.)
Note: Helpful information appears on the right side of the page to assist you as you
fill in the form.
8. Click A ly to have your information sent to the firewall.
Test the Connection
1. Click the Test button on the Basic Settings age.
This should o en a new browser window and take you to NETGEAR’s Web site
(www.NETGEAR.com).
Note: If NETGEAR’s Web site doesn’t appear, go to Troubleshooting on page 13.
2. Close the browser window showing NETGEAR’s home age.
3. Click the Logout button on the left navigation area.
10
4
4

Connect and Configure Other
Computers (Optional)
Now that you have one com uter set u to access the Internet through the firewall, you can
connect other com uters so they can share the modem.
1. Connect a Category 5 Ethernet atch cable between another com uter and one of the
remaining numbered Local orts on the firewall.
2. Check to make sure that the associated ort number’s Link light is lit. The light flashes
when data is being transferred over the connection.
Note: If the numbered Link light isn’t lit, go to Troubleshooting on page 13.
3. Go back to Installation Ste 3 ( ages 6 and 7) and go through the sequence of ste s
a licable for each com uter.
4. Restart each com uter.
5. Test each com uter’s connection by going to NETGEAR’s Web site
(www.NETGEAR.com) from each com uter.
Note: If you have more than 8 computers or devices to connect to this firewall, you
must connect them to a hub or switch (such as the NETGEAR 8-port Fast Ethernet
Switch) and then connect the hub or switch to the firewall. By using hubs or
switches, you may connect up to 253 computers to the firewall.
11
5
5
Cable/DSL ProSafe VPN Firewall
MODELFVS318
Power Test
LNK
ACT
12345678
100
LNK/ACT
INTERNET LOCAL

Optional Configurations
Internet Services
To have a Web server, e-mail server, or other server on your network accessible from the
Internet, to use Internet communication features (such as NetMeeting), or to lay Internet-
enabled games,you’ll have to allow access to those com uters from the Internet. You do this by
configuring the Port Forwarding feature of the firewall using the Settings ages.
1. Start your browser and o en the Settings ages by going to htt ://192.168.0.1.
2. Click Port Forwarding.
3. Configure each com uter as needed. (Read the Hel ane for s ecific information.)
4. Click A ly.
Note: For more information about port forwarding, click the Port Forwarding Help
link on the index page of the Resource CD.
VPN Connections
To configure VPN connections to the FVS318 Cable/DSL ProSafe VPN Firewall, refer to the
VPN cha ter of the Reference Manual which can be found on the Resource CD.
12
6
6

Troubleshooting
No lights are lit on the firewall
The firewall has no ower.
• Make sure the ower cord is ro erly connected to the firewall.
• Make sure the ower switch is in the ON osition.
• Make sure the ower ada ter is ro erly connected to a functioning ower outlet. If it’s in
a ower stri , make sure the ower stri is turned on.
• Make sure you are using the correct NETGEAR ower ada ter su lied with your
firewall.
Test light doesn’t turn off
After you lug in the ower ada ter, the Test light should turn on and then, after
a roximately 10 seconds, turn off.
• If the Test light does not go off, switch the firewall off for a few seconds, then on again.
Contact NETGEAR if this doesn’t solve the roblem.
The Internet Link light doesn’t light up
The Power light is lit, but the Internet Link light isn’t lit.
• You have the wrong cable between the firewall and the modem. Use the cable that came
with the modem—not the one that came with the firewall.
There is no numbered Link light lit for a connected device
There’s a hardware connection roblem.
• Make sure the cable connectors are securely lugged in at the firewall and the device.
• Make sure the connected device is turned on.
13

I cannot get onto the Internet with a computer
You may not have restarted the com uter or the network to have TCP/IP changes take effect.
• Restart the com uter.
• Restart the Network as described on age 9.
Your com uter may not recognize any addresses.
• If you ty ed in addresses of one or two DNS servers when you configured the firewall,
restart your com uter. O en the firewall’s Settings ages and verify that the DNS
addresses a ear. See instructions on age 10 to view the firewall’s Basic Settings age.
Your com uter may not have the correct TCP/IP settings to recognize the firewall.
• Restart the com uter and check that you have TCP/IP set u ro erly on your com uter.
For Windows, the Network Pro erties should have Obtain an IP address automatically selected
(see age 6). For Macintosh com uters, the TCP/IP (or Network) control anel should be set
to Using DHCP Server (see age 9).
• You may also verify that the gateway address or the firewall’s local IP address is
192.168.0.1. The com uter’s IP address should be between 192.168.0.2 and
192.168.0.254.
Your firewall might not be able to obtain an IP address from the ISP.
1. Start your browser, ty e the address for an external site (like www.NETGEAR.com),
and ress Enter (Windows) or Return (Macintosh).
2. Go to the firewall’s Settings ages by going to htt ://192.168.0.1.
3. In the User ID box ty e admin, in the Password box ty e assword, and click OK.
4. Under the Maintenance heading, click Router Status.
5. Check that an IP address is shown for the WAN Port.
If you see 0.0.0.0, contact your ISP to get current configuration information.
1

Resetting TCP/IP Properties (Windows)
If you’re on a Windows com uter and are still having roblems, you may try the following
rocedure before contacting technical su ort.
Windows 98/Me
1. Click the Start button and then click Run.
2. Ty e wini cfg, and then click OK.
3. Select your Ethernet ada ter.
4. Click More Info and verify that the DNS Servers box dis lays 192.168.0.1.
5. Click Release All and then Renew All.
6. Verify that you got a valid address and click OK.
Windows 2000
1. Click the Start button and then click Run.
2. Ty e CMD and click OK.
3. Ty e i config /all.
4. Ty e i config /release.
5. Ty e i config /renew.
6. Verify that you got a valid address and close the window.
Windows XP
1. O en My Network Places.
2. Click View network connections (Network Tasks).
3. Click your enabled LAN connection.
4. Click Re air this connection (Network Tasks).
5. Verify that you got a valid address and close the window.
Note: For Windows XP, you’ll find the TCP/IP information in the Details area.
For any Windows computer, if you are using the recommended default TCP/IP
settings, they should be:
• IP Address: between 192.168.0.2 and 192.168.0.25
• Subnet Mask: 255.255.255.0
• Default Gateway: 192.168.0.1
15

Glossary of Terms
You’ll find a more extensive glossary in the Reference Manual on the FVS318 Resource CD.
Category 5 (CAT5): A twisted air cable that meets s ecified requirements for high-s eed
networking.
Domain Name System (DNS) server: A server that matches Internet names (such as
www.netgear.com) to numeric IP addresses.
IP Address: A 4- art number uniquely defining each host on the Internet. Usually written in
dotted-decimal notation with se arating eriods (for exam le, 134.177.244.57).
ISP: Internet service rovider.
Local Area Network (LAN): A communications network within a limited area, such as one building.
PPP: Point-to-Point Protocol, the standard Internet rotocol for dial-u connections.
PPP over Ethernet (PPPoE): A rotocol for connecting remote hosts to the Internet over an
always-on connection by simulating a dial-u connection.
TCP/IP: Transfer Control Protocol (TCP) with Internet Protocol (IP). The main
internetworking rotocol used in the Internet.
Wide Area Network (WAN): A long distance link used to extend or connect remotely located local area
networks (for exam le, connecting your home com uter to the Internet).
16

Firewall System Requirements
To use the firewall in your network you must have:
• Cable or DSL modem
• Working Internet service
• Ethernet network card (NIC) or built-in networking for each com uter
• Network software (Windows, Mac OS, Linux)
• Internet Ex lorer 4.0 or later; Netsca e 4.0 or later
Firewall Specifications
Routing Protocols: TCP/IP, RIP-1, RIP-2, DHCP, NAT, PPTP, PPPoE, IPSec
Dimensions: W: 253mm (9.95”) D: 181mm (7.1”) H: 35mm (1.4”)
Weight: 1.2 kg (2.6 lbs)
Microprocessor: ARM7, 50MHz
Memory: 1 MB Flash, 16 MB SDRAM
LAN: 10BASE-T or 100BASE-TX
WAN: 10BASE-T, RJ-45
Power Adapter: 12 V DC 1.2 A with localized lug for North America, Ja an, UK, Euro e
and Australia
Environmental Specifications
Operating
temperature: 0°C to 40°C (32˚ to 104˚F)
Operating humidity: 90% maximum relative humidity, noncondensing
Electromagnetic
Emissions: FCC Part 15 Class B
VCCI Class B
EN 55 022 (CISPR 22), Class B Interface S ecifications
17

Voluntary Control Council for Interference (VCCI) Statement
This equi ment is in the second category (information equi ment to be used in residential areas) and conforms to the
standards set by the Voluntary Control Council for Interference by Data Processing Equi ment and Electronic Office
Machines that are aimed at reventing radio interference in residential areas.
EN 55 022 Declaration of Conformance
This is to certify that the NETGEAR Model FVS318 Cable/DSL ProSafe VPN Firewall is shielded against the generation
of radio interference in accordance with the a lication of Council Directive 89/336/EEC, Article 4a. Conformity is
declared by the a lication of EN 55 022 Class B (CISPR 22).
Federal Communications Commission (FCC) Compliance Notice:Radio Frequency Notice
This equi ment has been tested and found to com ly with the limits for a Class B digital device, ursuant to art 15 of the
FCC Rules. These limits are designed to rovide reasonable rotection against harmful interference in a residential
installation. This equi ment generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee
that interference will not occur in a articular installation. If this equi ment does cause harmful interference to radio or
television rece tion, which can be determined by turning the equi ment off and on, the user is encouraged to try to correct
the interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the se aration between the equi ment and receiver.
• Connect the equi ment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an ex erienced radio/TV technician for hel .
Canadian Department of Communications Radio Interference Regulations
This digital a aratus (NETGEAR Model FVS318 Cable/DSL ProSafe VPN Firewall) does not exceed the Class B limits
for radio-noise emissions from digital a aratus as set out in the Radio Interference Regulations of the Canadian
De artment of Communications.
Règlement sur le brouillage radioélectrique du ministère des Communications
Cet a areil numérique (NETGEAR Model FVS318 Cable/DSL ProSafe VPN Firewall) res ecte les limites de bruits
radioélectriques visant les a areils numériques de classe B rescrites dans le Règlement sur le brouillage radioélectrique du
ministère des Communications du Canada.
Statement of Conditions
In the interest of im roving internal design, o erational function, and/or reliability, NETGEAR reserves the right to make
changes to the roducts described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or a lication of the roduct(s) or circuit layout(s)
described herein.
Certificate of the Manufacturer/Importer
It is hereby certified that the NETGEAR Model FVS318 Cable/DSL ProSafe VPN Firewall has been su ressed in
accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The o eration of some
equi ment (for exam le, test transmitters) in accordance with the regulations may, however, be subject to certain
restrictions. Please refer to the notes in the o erating instructions.
Federal Office for Telecommunications A rovals has been notified of the lacing of this equi ment on the market and has
been granted the right to test the series for com liance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß das Model FVS318 Cable/DSL ProSafe VPN Firewall gemäß der im BMPT-AmtsblVfg
243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B.
Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der
Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu über rüfen.
March 2002