NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN... User manual

202-10536-01
April 2010
v1.0
NETGEAR, Inc.
350 East Plumeria Drive
San Jose, CA 95134
ProSafe Gigabit Quad WAN
SSL VPN Firewall SRX5308
Reference Manual

ii
v1.0, April 2010
© 2010 by NETGEAR, Inc. All rights reserved.
No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into
any language in any form or by any means without the written permission of NETGEAR, Inc.
Technical Support
Please refer to the support information card that shipped with your product. By registering your product at
http://www.netgear.com/register, we can provide you with faster expert technical support and timely notices of
product and software upgrades.
NETGEAR, INC. Support Information
Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see your Support information card.
Email: [e-mail]
North American NETGEAR website: http://www.netgear.com
Trademarks
NETGEAR and the NETGEAR logo are registered trademarks and ProSecure and ProSafe are trademarks of
NETGEAR, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other
brand and product names are registered trademarks or trademarks of their respective holders.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
The NETGEAR®ProSafe™ Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual describes how to
install, configure, and troubleshoot a ProSafe Gigabit Quad WAN SSL VPN Firewall. The information in this manual is
intended for readers with intermediate computer and networking skills.

iii
v1.0, April 2010
Contents
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
About This Manual
Conventions, Formats, and Scope ................................................................................... xi
How to Print This Manual .................................................................................................xii
Revision History ................................................................................................................xii
Chapter 1
Introduction
What Is the ProSafe Gigabit Quad WAN SSL VPN Firewall? ........................................1-1
Key Features and Capabilities ........................................................................................1-2
Quad-WAN Ports for Increased Reliability and
Outbound Load Balancing ........................................................................................1-3
Advanced VPN Support for Both IPsec and SSL .....................................................1-3
A Powerful, True Firewall with Content Filtering ......................................................1-4
Security Features .....................................................................................................1-4
Autosensing Ethernet Connections with Auto Uplink ...............................................1-5
Extensive Protocol Support ......................................................................................1-5
Easy Installation and Management ..........................................................................1-6
Maintenance and Support ........................................................................................1-6
Package Contents ..........................................................................................................1-7
Hardware Features .........................................................................................................1-7
Front Panel ...............................................................................................................1-7
Rear Panel ...............................................................................................................1-9
Bottom Panel with Product Label ...........................................................................1-10
Choosing a Location for the SRX5308 .........................................................................1-11
Using the Rack-Mounting Kit ..................................................................................1-11
Chapter 2
Connecting the VPN Firewall to the Internet
Understanding the Internet and WAN Configuration Tasks ............................................2-1
Qualified Web Browsers ...........................................................................................2-2

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
iv
v1.0, April 2010
Logging In to the VPN Firewall .......................................................................................2-3
Understanding the Web Management Interface Menu Layout .................................2-5
Configuring the Internet Connections .............................................................................2-7
Automatically Detecting and Connecting .................................................................2-7
Setting the VPN Firewall’s MAC Address ..............................................................2-11
Manually Configuring the Internet Connection .......................................................2-11
Configuring the WAN Mode ..........................................................................................2-16
Configuring Network Address Translation ..............................................................2-16
Configuring Classical Routing ................................................................................2-17
Configuring the Auto-Rollover Mode and Failure Detection Method ......................2-18
Configuring Load Balancing and Optional Protocol Binding ..................................2-21
Configuring Secondary WAN Addresses ......................................................................2-25
Configuring Dynamic DNS ............................................................................................2-27
Configuring Advanced WAN Options ............................................................................2-31
Additional WAN-Related Configuration Tasks ........................................................2-34
What to Do Next ...........................................................................................................2-35
Chapter 3
LAN Configuration
Managing Virtual LANs and DHCP Options ...................................................................3-1
Understanding the VPN Firewall’s Port-Based VLANs ............................................3-2
Assigning and Managing VLAN Profiles ..................................................................3-3
VLAN DHCP Options ...............................................................................................3-4
Configuring a VLAN Profile ......................................................................................3-6
Configuring VLAN MAC Addresses and LAN Advanced Settings .........................3-11
Configuring Multi-Home LAN IP Addresses on the Default VLAN ................................3-12
Managing Groups and Hosts (LAN Groups) .................................................................3-14
Managing the Network Database ...........................................................................3-15
Changing Group Names in the Network Database ................................................3-18
Setting Up Address Reservation ............................................................................3-19
Configuring and Enabling the DMZ Port .......................................................................3-20
Managing Routing ........................................................................................................3-24
Configuring Static Routes .......................................................................................3-25
Configuring Routing Information Protocol ..............................................................3-27
Static Route Example .............................................................................................3-29

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
v
v1.0, April 2010
Chapter 4
Firewall Protection
About Firewall Protection ................................................................................................4-1
Administrator Tips ....................................................................................................4-2
Using Rules to Block or Allow Specific Kinds of Traffic ..................................................4-2
Services-Based Rules ..............................................................................................4-3
Order of Precedence for Rules ..............................................................................4-10
Setting LAN WAN Rules ........................................................................................4-11
Setting DMZ WAN Rules ........................................................................................4-14
Setting LAN DMZ Rules .........................................................................................4-18
Inbound Rules Examples .......................................................................................4-21
Outbound Rules Example ......................................................................................4-25
Configuring Other Firewall Features .............................................................................4-26
Attack Checks ........................................................................................................4-26
Setting Session Limits ............................................................................................4-29
Managing the Application Level Gateway for SIP Sessions ..................................4-30
Creating Services, QoS Profiles, and Bandwidth Profiles ............................................4-31
Adding Customized Services .................................................................................4-31
Creating Quality of Service (QoS) Profiles .............................................................4-34
Creating Bandwidth Profiles ...................................................................................4-37
Setting a Schedule to Block or Allow Specific Traffic ....................................................4-40
Content Filtering (Blocking Internet Sites) ....................................................................4-41
Understanding the VPN Firewall’s Content Filtering ..............................................4-41
Enabling and Configuring Content Filtering ...........................................................4-42
Enabling Source MAC Filtering ....................................................................................4-44
Setting Up IP/MAC Bindings .........................................................................................4-46
Configuring Port Triggering ...........................................................................................4-48
Configuring Universal Plug and Play ............................................................................4-51
Chapter 5
Virtual Private Networking
Using IPsec Connections
Considerations for Multi-WAN Port Systems ..................................................................5-1
Using the IPsec VPN Wizard for Client and Gateway Configurations ............................5-3
Creating Gateway-to-Gateway VPN Tunnels with the Wizard .................................5-3
Creating a Client to Gateway VPN Tunnel ...............................................................5-8

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
vi
v1.0, April 2010
Testing the Connections and Viewing Status Information .............................................5-16
Testing the VPN Connection ..................................................................................5-16
NETGEAR VPN Client Status and Log Information ...............................................5-17
Viewing the VPN Firewall IPsec VPN Connection Status ......................................5-19
Viewing the VPN Firewall IPSec VPN Logs ...........................................................5-20
Managing IPsec VPN Policies ......................................................................................5-20
Configuring IKE Policies .........................................................................................5-21
Configuring VPN Policies .......................................................................................5-29
Configuring Extended Authentication (XAUTH) ............................................................5-37
Configuring XAUTH for VPN Clients ......................................................................5-38
User Database Configuration .................................................................................5-39
RADIUS Client Configuration .................................................................................5-39
Assigning IP Addresses to Remote Users (Mode Config) ............................................5-42
Mode Config Operation ..........................................................................................5-42
Configuring Mode Config Operation on the VPN Firewall ......................................5-42
Configuring the ProSafe VPN Client for Mode Config Operation ...........................5-50
Testing the Mode Config Connection .....................................................................5-55
Configuring Keepalives and Dead Peer Detection .......................................................5-55
Configuring Keepalives ..........................................................................................5-56
Configuring Dead Peer Detection ..........................................................................5-57
Configuring NetBIOS Bridging with IPsec VPN ............................................................5-59
Chapter 6
Virtual Private Networking
Using SSL Connections
Understanding the SSL VPN Portal Options ..................................................................6-1
Planning for an SSL VPN ...............................................................................................6-2
Creating the Portal Layout ..............................................................................................6-4
Configuring Domains, Groups, and Users ......................................................................6-7
Configuring Applications for Port Forwarding .................................................................6-8
Adding Servers and Port Numbers ..........................................................................6-8
Adding a New Host Name ......................................................................................6-10
Configuring the SSL VPN Client ...................................................................................6-10
Configuring the Client IP Address Range ..............................................................6-11
Adding Routes for VPN Tunnel Clients ..................................................................6-13
Using Network Resource Objects to Simplify Policies ..................................................6-14

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
vii
v1.0, April 2010
Adding New Network Resources ..........................................................................6-14
Editing Network Resources to Specify Addresses .................................................6-15
Configuring User, Group, and Global Policies ..............................................................6-17
Viewing Policies .....................................................................................................6-18
Adding a Policy ......................................................................................................6-19
Accessing the SSL Portal Login Screen .......................................................................6-23
Viewing the SSL VPN Connection Status and SSL VPN Logs .....................................6-25
Chapter 7
Managing Users, Authentication, and Certificates
Configuring VPN Authentication Domains, Groups, and Users ......................................7-1
Configuring Domains ................................................................................................7-2
Configuring Groups for VPN Policies .......................................................................7-6
Configuring User Accounts ......................................................................................7-9
Setting User Login Policies ....................................................................................7-11
Changing Passwords and Other User Settings ......................................................7-15
Managing Digital Certificates ........................................................................................7-17
Understanding the Certificates Screen ..................................................................7-18
Managing CA Certificates ......................................................................................7-19
Managing Self Certificates .....................................................................................7-20
Managing the Certificate Revocation List ...............................................................7-24
Chapter 8
Network and System Management
Performance Management .............................................................................................8-1
Bandwidth Capacity .................................................................................................8-1
Features That Reduce Traffic ...................................................................................8-2
Features That Increase Traffic .................................................................................8-4
Using QoS and Bandwidth Assignment to Shift the Traffic Mix ................................8-7
Monitoring Tools for Traffic Management .................................................................8-8
System Management ......................................................................................................8-8
Changing Passwords and Administrator Settings ....................................................8-8
Configuring Remote Management Access .............................................................8-10
Using the Command-Line Interface .......................................................................8-14
Using a Simple Network Management Protocol Manager .....................................8-14
Managing the Configuration File ............................................................................8-17
Configuring Date and Time Service .......................................................................8-21

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
viii
v1.0, April 2010
Chapter 9
Monitoring System Access and Performance
Enabling the WAN Traffic Meter .....................................................................................9-1
Activating Notification of Events, Alerts, and Syslogs .....................................................9-5
Viewing Status and Log Screens ....................................................................................9-9
Viewing the System (Router) Status and Statistics ................................................9-10
Viewing the VLAN Status .......................................................................................9-16
Viewing and Disconnecting Active Users ...............................................................9-17
Viewing the VPN Tunnel Connection Status ..........................................................9-18
Viewing the VPN Logs ...........................................................................................9-19
Viewing the Port Triggering Status .........................................................................9-21
Viewing the WAN Port Connection Status ..............................................................9-21
Viewing the Attached Devices and DHCP Log ......................................................9-23
Using the Diagnostics Utilities ......................................................................................9-25
Sending a Ping Packet or Tracing a Route ............................................................9-26
Looking Up a DNS Address ...................................................................................9-27
Displaying the Routing Table ..................................................................................9-28
Rebooting the VPN Firewall ...................................................................................9-28
Capturing Packets ..................................................................................................9-28
Chapter 10
Troubleshooting and Using Online Support
Basic Functioning .........................................................................................................10-2
Power LED Not On .................................................................................................10-2
Test LED Never Turns Off ......................................................................................10-2
LAN or WAN Port LEDs Not On .............................................................................10-3
Troubleshooting the Web Management Interface .........................................................10-3
When You Enter a URL or IP Address a Time-Out Error Occurs .................................10-4
Troubleshooting the ISP Connection ............................................................................10-5
Troubleshooting a TCP/IP Network Using the Ping Utility ............................................10-6
Testing the LAN Path to Your VPN Firewall ...........................................................10-7
Testing the Path from Your PC to a Remote Device ..............................................10-7
Restoring the Default Configuration and Password ......................................................10-8
Problems with Date and Time .....................................................................................10-10
Accessing the Knowledge Base and Documentation .................................................10-10

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
ix
v1.0, April 2010
Appendix A
Default Settings and Technical Specifications
Appendix B
Network Planning for Multiple WAN Ports
What to Consider Before You Begin .............................................................................. B-1
Cabling and Computer Hardware Requirements .................................................... B-3
Computer Network Configuration Requirements .................................................... B-3
Internet Configuration Requirements ...................................................................... B-3
Overview of the Planning Process ................................................................................. B-5
Inbound Traffic ............................................................................................................... B-7
Inbound Traffic to a Single WAN Port System ........................................................ B-7
Inbound Traffic to a Dual WAN Port System ........................................................... B-8
Virtual Private Networks ................................................................................................ B-9
VPN Road Warrior (Client-to-Gateway) .................................................................B-11
VPN Gateway-to-Gateway .................................................................................... B-13
VPN Telecommuter (Client-to-Gateway through a NAT Router) ........................... B-16
Appendix C
System Logs and Error Messages
System Log Messages ..................................................................................................C-2
NTP .........................................................................................................................C-2
Login/Logout ...........................................................................................................C-3
System Startup ........................................................................................................C-3
Reboot .....................................................................................................................C-3
Firewall Restart .......................................................................................................C-4
IPsec Restart ...........................................................................................................C-4
Unicast, Multicast, and Broadcast Logs ..................................................................C-4
WAN Status .............................................................................................................C-5
Resolved DNS Names ............................................................................................C-9
VPN Log Messages ................................................................................................C-9
Traffic Meter Logs .................................................................................................C-17
Routing Logs ...............................................................................................................C-18
LAN to WAN Logs .................................................................................................C-18
LAN to DMZ Logs ..................................................................................................C-18
DMZ to WAN Logs ................................................................................................C-18
WAN to LAN Logs .................................................................................................C-19

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
x
v1.0, April 2010
DMZ to LAN Logs ..................................................................................................C-19
WAN to DMZ Logs ................................................................................................C-19
Other Event Logs .........................................................................................................C-20
Session Limit Logs ................................................................................................C-20
Source MAC Filter Logs ........................................................................................C-20
Bandwidth Limit Logs ............................................................................................C-20
DHCP Logs ..................................................................................................................C-21
Appendix D
Two-Factor Authentication
Why Do I Need Two-Factor Authentication? .................................................................D-1
What Are the Benefits of Two-Factor Authentication? ............................................D-1
What Is Two-Factor Authentication .........................................................................D-2
NETGEAR Two-Factor Authentication Solutions ...........................................................D-2
Appendix E
Related Documents
Appendix F
Notification of Compliance
Index

xi
v1.0, April 2010
About This Manual
The NETGEAR®ProSafe™ Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
describes how to install, configure, and troubleshoot a ProSafe Gigabit Quad WAN SSL VPN
Firewall. The information in this manual is intended for readers with intermediate computer and
networking skills.
Conventions, Formats, and Scope
The conventions, formats, and scope of this manual are described in the following paragraphs:
•Typographical conventions.This manual uses the following typographical conventions:
•Formats.This manual uses the following formats to highlight special messages:
Italic Emphasis, books, CDs
Bold User input, IP addresses, GUI screen text
Fixed Command prompt, CLI text, code
italic URL links
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note might result in a malfunction or damage to the
equipment.
Danger: This is a safety warning. Failure to take heed of this notice might result in
personal injury or death.

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
xii
v1.0, April 2010
•Scope.This manual is written for the VPN firewall according to these specifications:
For more information about network, Internet, firewall, and VPN technologies, click the links to
the NETGEAR Website in Appendix E, “Related Documents.”
How to Print This Manual
Your computer must have the free Adobe Acrobat Reader installed for you to view and print PDF
files. The Acrobat Reader is available on the Adobe website at
http://www.adobe.com.
Revision History
Product Version ProSafe Gigabit Quad WAN SSL VPN Firewall
Manual Publication Date April 2010
Note: Product updates are available on the NETGEAR website at
http://kbserver.netgear.com/products/SRX5308.asp.
Tip: If your printer supports printing two pages on a single sheet of paper, you can
save paper and printer ink by selecting this feature.
Part Number Version
Number Date Description
202-10536-01 1.0 April 2010 Initial publication of this reference manual.

1-1
v1.0, April 2010
Chapter 1
Introduction
This chapter provides an overview of the features and capabilities of the ProSafe Gigabit Quad
WAN SSL VPN Firewall SRX5308. This chapter contains the following sections:
•“What Is the ProSafe Gigabit Quad WAN SSL VPN Firewall?” on this page
•“Key Features and Capabilities” on page 1-2
•“Package Contents” on page 1-7
•“Hardware Features” on page 1-7
•“Choosing a Location for the SRX5308” on page 1-11
What Is the ProSafe Gigabit Quad WAN SSL VPN Firewall?
The ProSafe Gigabit Quad WAN SSL VPN Firewall, hereafter in this chapter referred to as the
SRX5308, connects your local area network (LAN) to the Internet through up to four external
broadband access devices such as cable modems or DSL modems. Four wide area network (WAN)
ports allow you to increase effective data rate to the Internet by utilizing all WAN ports to carry
session traffic or to maintain backup connections in case of failure of your primary Internet
connection.
The SRX5308 is a complete security solution that protects your network from attacks and
intrusions. For example, the SRX5308 provides support for stateful packet inspection (SPI), denial
of service (DoS) attack protection, and multi-NAT support. The SRX5308 supports multiple Web
content filtering options, plus browsing activity reporting and instant alerts—both via email.
Network administrators can establish restricted access policies based on time of day, website
addresses, and address keywords.
The SRX5308 provides advanced IPsec and SSL VPN technologies for secure and simple remote
connections. The use of Gigabit Ethernet LAN and WAN ports ensures extremely high data
transfer speeds.
The SRX5308 is a plug-and-play device that can be installed and configured within minutes.

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
1-2 Introduction
v1.0, April 20102
Key Features and Capabilities
The SRX5308 provides the following key features and capabilities:
• Four 10/100/1000 Mbps Gigabit Ethernet WAN ports for load balancing and failover
protection of your Internet connection, providing increased data rate and increased system
reliability.
• Built-in four-port 10/100/1000 Mbps Gigabit Ethernet LAN switch for extremely fast data
transfer between local network resources and support for up to 200,000 internal or external
connections.
• Advanced IPsec VPN and SSL VPN support with support for up to 125 concurrent IPsec VPN
tunnels and up to 50 concurrent SSL VPN tunnels.
• Bundled with a single-user license of the NETGEAR ProSafe VPN Client software
(VPN01L).
• Advanced stateful packet inspection (SPI) firewall with multi-NAT support.
• Quality of service (QoS) and SIP 2.0 support for traffic prioritization, voice, and multimedia.
• Extensive protocol support.
• Easy, Web-based wizard setup for installation and management.
• One console port for local management.
• SNMP-manageable, optimized for the NETGEAR ProSafe Network Management Software
(NMS100).
• Front panel LEDs for easy monitoring of status and activity.
• Flash memory for firmware upgrade.
• Internal universal switching power supply.
• One U rack-mountable, using the rack-mounting kit.

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Introduction 1-3
v1.0, April 2010
Quad-WAN Ports for Increased Reliability and
Outbound Load Balancing
The SRX5308 provides four broadband WAN ports. These WAN ports allow you to connect
additional broadband Internet lines that can be configured to:
• Load-balance between up to four lines for maximum bandwidth efficiency.
• Provide backup and rollover if one line is inoperable, ensuring that you are never
disconnected.
See “Network Planning for Multiple WAN Ports” on page B-1 for the planning factors to consider
when implementing the following capabilities with multiple WAN port gateways:
• Single or multiple exposed hosts.
• Virtual private networks (VPNs).
Advanced VPN Support for Both IPsec and SSL
The SRX5308 supports IPsec and SSL VPN connections.
• IPsec VPN delivers full network access between a central office and branch offices, or
between a central office and telecommuters. Remote access by telecommuters requires the
installation of VPN client software on the remote computer.
– IPsec VPN with broad protocol support for secure connection to other IPsec gateways and
clients.
– Bundled with a single-user license of the NETGEAR ProSafe VPN Client software
(VPN01L).
– Supports 125 concurrent IPsec VPN tunnels.
• SSL VPN provides remote access for mobile users to selected corporate resources without
requiring a pre-installed VPN client on their computers.
– Uses the familiar Secure Sockets Layer (SSL) protocol, commonly used for e-commerce
transactions, to provide client-free access with customizable user portals and support for a
wide variety of user repositories.
– Browser-based, platform-independent, remote access through a number of popular
browsers, such as Microsoft Internet Explorer, Mozilla Firefox, and Apple Safari.
– Provides granular access to corporate resources based on user type or group membership.
– Supports 50 concurrent SSL VPN sessions.

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
1-4 Introduction
v1.0, April 20104
A Powerful, True Firewall with Content Filtering
Unlike simple NAT routers, the SRX5308 is a true firewall, using stateful packet inspection (SPI)
to defend against hacker attacks. Its firewall features have the following capabilities:
•DoS protection.Automatically detects and thwarts denial of service (DoS) attacks such as
Ping of Death and SYN flood.
•Secure firewall.Blocks unwanted traffic from the Internet to your LAN.
•Content filtering. Prevents objectionable content from reaching your PCs. You can control
access to Internet content by screening for Web services, Web addresses, and keywords within
Web addresses. You can configure the SRX5308 to log and report attempts to access
objectionable Internet sites.
•Schedule policies. Permits scheduling of firewall policies by day and time.
•Logs security incidents.Logs security events such as blocked incoming traffic, port scans,
attacks, and administrator logins. You can configure the SRX5308 to email the log to you at
specified intervals. You can also configure the SRX5308 to send immediate alert messages to
your email address or email pager when a significant event occurs.
Security Features
The SRX5308 is equipped with several features designed to maintain security:
•PCs hidden by NAT. NAT opens a temporary path to the Internet for requests originating
from the local network. Requests originating from outside the LAN are discarded, preventing
users outside the LAN from finding and directly accessing the computers on the LAN.
•Port forwarding with NAT.Although NAT prevents Internet locations from directly
accessing the PCs on the LAN, the SRX5308 allows you to direct incoming traffic to specific
PCs based on the service port number of the incoming request. You can specify forwarding of
single ports or ranges of ports.
•DMZ port. Incoming traffic from the Internet is normally discarded by the SRX5308 unless
the traffic is a response to one of your local computers or a service for which you have
configured an inbound rule. Instead of discarding this traffic, you can use the dedicated
demilitarized zone (DMZ) port to forward the traffic to one PC on your network.

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Introduction 1-5
v1.0, April 2010
Autosensing Ethernet Connections with Auto Uplink
With its internal four-port 10/100/1000 Mbps switch and four 10/100/1000 WAN ports, the
SRX5308 can connect to either a 10 Mbps standard Ethernet network, a 100 Mbps Fast Ethernet
network, or a 1000 Mbps Gigabit Ethernet network. The four LAN and four WAN interfaces are
autosensing and capable of full-duplex or half-duplex operation.
The SRX5308 incorporates Auto UplinkTM technology. Each Ethernet port automatically senses
whether the Ethernet cable plugged into the port should have a “normal” connection such as to a
PC or an “uplink” connection such as to a switch or hub. That port then configures itself correctly.
This feature eliminates the need for you to think about crossover cables, as Auto Uplink
accommodates either type of cable to make the right connection.
Extensive Protocol Support
The SRX5308 supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing
Information Protocol (RIP). For further information about TCP/IP, see “Internet Configuration
Requirements” on page B-3. The SRX5308 provides the following protocol support:
•IP address sharing by NAT. The SRX5308 allows many networked PCs to share an Internet
account using only a single IP address, which might be statically or dynamically assigned by
your Internet Service Provider (ISP). This technique, known as NAT, allows the use of an
inexpensive single-user ISP account.
•Automatic configuration of attached PCs by DHCP. The SRX5308 dynamically assigns
network configuration information, including IP, gateway, and Domain Name Server (DNS)
addresses, to attached PCs on the LAN using the Dynamic Host Configuration Protocol
(DHCP). This feature greatly simplifies configuration of PCs on your local network.
•DNS proxy. When DHCP is enabled and no DNS addresses are specified, the SRX5308
provides its own address as a DNS server to the attached PCs. The SRX5308 obtains actual
DNS addresses from the ISP during connection setup and forwards DNS requests from the
LAN.
•PPP over Ethernet (PPPoE). PPPoE is a protocol for connecting remote hosts to the Internet
over a DSL connection by simulating a dial-up connection. This feature eliminates the need to
run a login program.
•Quality of Service (QoS).The SRX5308 supports QoS, including traffic prioritization and
traffic classification with Type of Service (ToS) and Differentiated Services Code Point
(DSCP) marking.

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
1-6 Introduction
v1.0, April 20106
Easy Installation and Management
You can install, configure, and operate the SRX5308 within minutes after connecting it to the
network. The following features simplify installation and management tasks:
•Browser-based management. Browser-based configuration allows you to easily configure
the SRX5308 from almost any type of operating system, such as Windows, Macintosh, or
Linux. Online help documentation is built into the browser-based Web Management Interface.
•Auto detection of ISP. The SRX5308 automatically senses the type of Internet connection,
asking you only for the information required for your type of ISP account.
•IPsec VPN Wizard. The SRX5308 includes the NETGEAR IPsec VPN Wizard so you can
easily configure IPsec VPN tunnels according to the recommendations of the Virtual Private
Network Consortium (VPNC) to ensure that the IPsec VPN tunnels are interoperable with
other VPNC-compliant VPN routers and clients.
•SNMP. The SRX5308 supports the Simple Network Management Protocol (SNMP) to let you
monitor and manage log resources from an SNMP-compliant system manager. The SNMP
system configuration lets you change the system variables for MIB2.
•Diagnostic functions. The SRX5308l incorporates built-in diagnostic functions such as ping,
traceroute, DNS lookup, and remote reboot.
•Remote management. The SRX5308 allows you to log in to the Web Management Interface
from a remote location on the Internet. For security, you can limit remote management access
to a specified remote IP address or range of addresses.
•Visual monitoring. The SRX5308’s front panel LEDs provide an easy way to monitor its
status and activity.
Maintenance and Support
NETGEAR offers the following features to help you maximize your use of the SRX5308:
• Flash memory for firmware upgrades.
• Technical support seven days a week, 24 hours a day, according to the terms that are identified
in the Warranty and Support information card provided with your product.

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Introduction 1-7
v1.0, April 2010
Package Contents
The SRX5308 product package contains the following items:
• ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 appliance
• One AC power cable
• Rubber feet (4)
• One Category 5 (Cat5) Ethernet cable
• One rack-mounting kit
•ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Installation Guide
•Resource CD, including:
– Application Notes and other helpful information
– ProSafe VPN Client software (VPN01L)
If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the
carton, including the original packing materials, in case you need to return the product for repair.
Hardware Features
The front panel ports and LEDs, rear panel ports, and bottom label of the SRX5308 are described
in the following sections.
Front Panel
Viewed from left to right, the SRX5308 front panel contains the following ports (see Figure 1-1 on
page 1-8:
• LAN Ethernet ports: four switched N-way automatic speed negotiating, Auto MDI/MDIX,
Gigabit Ethernet ports with RJ-45 connectors
• WAN Ethernet ports: four independent N-way automatic speed negotiating, Auto MDI/MDIX,
Gigabit Ethernet ports with RJ-45 connectors

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
1-8 Introduction
v1.0, April 20108
The front panel also contains three groups of status indicator light-emitting diodes (LEDs),
including Power and Test LEDs, LAN LEDs, and WAN LEDs, all of which are explained in
Table 1-1.
Figure 1-1
Table 1-1. LED Descriptions
Object Activity Description
Power On (Green) Power is supplied to the SRX5308.
Off Power is not supplied to the SRX5308.
Test On (Amber) during
startup. Test mode: The SRX5308 is initializing. After approximately 2 minutes, when the SRX5308 has completed its initialization, the
Test LED goes off.
On (Amber) during
any other time The initialization has failed or a hardware failure has occurred.
Blinking (Amber) The SRX5308 is writing to flash memory (during upgrading or
resetting to defaults).
Off The system has booted successfully.
LAN Ports
Left LED On (Green) The LAN port has detected a link with a connected Ethernet device.
Blink (Green) Data is being transmitted or received by the LAN port.
Off The LAN port has no link.
Power LED
Test LED
Left LAN LEDs
Right LAN LEDs
DMZ LEDLeft WAN LEDs
Right WAN LEDs
LEDs
Internet