NETGEAR FVS318G - ProSafe Gigabit VPN Firewall Data Sheet... User manual

202-10521-01
v1.1
November, 2009
NETGEAR, Inc.
350 East Plumeria Drive
San Jose, CA 95134
ProSafe Gigabit 8 Port
VPN Firewall FVS318G
Reference Manual

ii
1.1 November, 2009
© 2009 by NETGEAR, Inc. All rights reserved..
Technical Support
Please refer to the support information card that shipped with your product. By registering your product at
http://www.netgear.com/register, we can provide you with faster expert technical support and timely notices of product
and software upgrades.
NETGEAR, INC. Support Information
Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see your Support information card.
E-mail: [email protected]
North American NETGEAR website: http://www.netgear.com
Trademarks
NETGEAR, the NETGEAR logo, ProSafe, Smart Wizard, and Auto Uplink are trademarks or registered trademarks of
NETGEAR, Inc. Microsoft, Windows, Windows NT and Vista are registered trademarks of Microsoft
Corporation.Other brand and product names are registered trademarks or trademarks of their respective holders.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
Certificate of the Manufacturer/Importer
It is hereby certified that the ProSafe VPN Firewall has been suppressed in accordance with the conditions set out in the
BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in
accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating
instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß dasProSafe VPN Firewall gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/1992
aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann jedoch
gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class B category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used
near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.

1.1 November, 2009
iii
Model Number: FVS318G
Publication Date: November, 2009
Product Family: VPN Firewall Router
Product Name: ProSafe VPN Firewall
Home or Business Product: Business
Language: English
Publication Part Number: 202-10521-01
Publication Version Number: 1.1

1.1 November, 2009
iv

Contents v
1.1November, 2009
Contents
About This Manual
Conventions, Formats, and Scope ................................................................................... xi
How to Print This Manual ................................................................................................ xii
Revision History ............................................................................................................... xii
Chapter 1
Introduction
Key Features of the VPN Firewall ..................................................................................1-1
Advanced VPN Support for Both IPsec and SSL .....................................................1-2
A Powerful, True Firewall with Content Filtering ......................................................1-2
Autosensing Ethernet Connections with Auto Uplink ...............................................1-3
Extensive Protocol Support ......................................................................................1-3
Easy Installation and Management ................................................................................1-4
Maintenance and Support ..............................................................................................1-4
Package Contents ..........................................................................................................1-5
Front Panel Features ......................................................................................................1-5
Rear Panel Features ......................................................................................................1-7
Default IP Address, Login Name, and Password Location .............................................1-8
Qualified Web Browsers .................................................................................................1-8
Chapter 2
Connecting the FVS318G to the Internet
Understanding the Connection Steps .............................................................................2-1
Logging into the VPN Firewall Router Router .................................................................2-2
Navigating the Menus .....................................................................................................2-3
Configuring the Internet Connections .............................................................................2-4
Automatically Detecting and Connecting .................................................................2-5
Manually Configuring the Internet Connection .........................................................2-7
Configuring the WAN Mode ..........................................................................................2-11
Network Address Translation .................................................................................2-11

vi Contents
1.1 November, 2009
Classical Routing ...................................................................................................2-12
Configuring Dynamic DNS (Optional) ...........................................................................2-13
Configuring the Advanced WAN Options (Optional) .....................................................2-15
Chapter 3
LAN Configuration
Choosing the Firewall DHCP Options ............................................................................3-1
Configuring the LAN Setup Options .........................................................................3-2
Managing Groups and Hosts (LAN Groups) ...................................................................3-5
Viewing the LAN Groups Database ..........................................................................3-6
Changing Group Names in the LAN Groups Database ...........................................3-9
Configuring DHCP Address Reservation ........................................................................3-9
Configuring Multi Home LAN IP Addresses ..................................................................3-10
Configuring Static Routes .............................................................................................3-11
Configuring Routing Information Protocol (RIP) ...........................................................3-13
Chapter 4
Firewall Protection and Content Filtering
About Firewall Protection and Content Filtering .............................................................4-1
Using Rules to Block or Allow Specific Kinds of Traffic...................................................4-2
About Services-Based Rules ...................................................................................4-3
Viewing the Rules ....................................................................................................4-8
Order of Precedence for Rules ................................................................................4-8
Setting the Default Outbound Policy ........................................................................4-9
Creating a LAN WAN Outbound Services Rule .......................................................4-9
Creating a LAN WAN Inbound Services Rule ........................................................4-10
Inbound Rules Examples .......................................................................................4-13
Outbound Rules Example ......................................................................................4-16
Adding Customized Services .................................................................................4-16
Setting Quality of Service (QoS) Priorities .............................................................4-18
Attack Checks ...............................................................................................................4-19
Blocking Internet Sites (Content Filtering).....................................................................4-21
Configuring Source MAC Filtering ................................................................................4-24
Configuring IP/MAC Address Binding Alerts ................................................................4-26
Configuring Port Triggering ..........................................................................................4-27
Setting a Schedule to Block or Allow Specific Traffic ...................................................4-29

Contents vii
1.1November, 2009
Configuring a Bandwidth Profile ...................................................................................4-30
Configuring Session Limits ...........................................................................................4-31
E-Mail Notifications of Event Logs and Alerts ...............................................................4-33
Administrator Tips .........................................................................................................4-33
Chapter 5
Virtual Private Networking Using IPsec
Using the VPN Wizard for Client and Gateway Configurations ......................................5-1
Creating Gateway to Gateway VPN Tunnels with the Wizard .................................5-2
Creating a Client to Gateway VPN Tunnel ...............................................................5-5
Testing the Connections and Viewing Status Information ............................................5-11
NETGEAR VPN Client Status and Log Information ...............................................5-11
FVS318G VPN Connection Status and Logs .........................................................5-13
Managing VPN Policies ................................................................................................5-14
Managing IKE Policies ...........................................................................................5-14
Managing VPN Policies ..........................................................................................5-16
Configuring Extended Authentication (XAUTH) ............................................................5-17
Configuring XAUTH for VPN Clients ......................................................................5-18
User Database Configuration .................................................................................5-19
RADIUS Client Configuration .................................................................................5-19
Assigning IP Addresses to Remote Users (ModeConfig) .............................................5-21
Mode Config Operation ..........................................................................................5-22
Configuring the VPN Firewall Router .....................................................................5-22
Configuring the ProSafe VPN Client for ModeConfig .............................................5-25
Configuring Keepalives and Dead Peer Detection .......................................................5-27
Configuring Keepalive ............................................................................................5-27
Configuring NetBIOS Bridging with VPN ......................................................................5-29
Chapter 6
Managing Users, Authentication, and Certificates
Managing Users ............................................................................................................. 6-1
Changing the Administrator Login ........................................................................... 6-2
Changing the Guest Login ...................................................................................... 6-3
Setting administrator timeout and domain display name ........................................ 6-4
Changing Passwords and Settings ......................................................................... 6-6

viii Contents
1.1 November, 2009
RADIUS Server External Authentication ................................................................. 6-7
Managing Certificates .................................................................................................... 6-8
Viewing and Loading CA Certificates .................................................................... 6-10
Viewing Active Self Certificates ............................................................................. 6-11
Obtaining a Self Certificate from a Certificate Authority ........................................ 6-11
Managing your Certificate Revocation List (CRL) ................................................. 6-14
Chapter 7
Router and Network Management
Performance Management .............................................................................................7-1
Bandwidth Capacity .................................................................................................7-1
Features That Reduce Traffic ..................................................................................7-2
Features That Increase Traffic .................................................................................7-5
Using QoS to Shift the Traffic Mix ............................................................................7-7
Tools for Traffic Management ..................................................................................7-8
Changing Passwords and Administrator Settings ..........................................................7-8
Enabling Remote Management Access .......................................................................7-10
Using the Command Line Interface ..............................................................................7-13
Using an SNMP Manager .............................................................................................7-13
Configuration File Management ...................................................................................7-15
Upgrading the Firmware ...............................................................................................7-17
Configuring Date and Time Service ..............................................................................7-18
Chapter 8
Troubleshooting
Basic Functions ..............................................................................................................8-1
Power LED Not On ...................................................................................................8-2
LEDs Never Turn Off ................................................................................................8-2
LAN or WAN Port LEDs Not On ...............................................................................8-2
Troubleshooting the Web Configuration Interface ..........................................................8-3
Troubleshooting the ISP Connection ..............................................................................8-4
Troubleshooting a TCP/IP Network Using a Ping Utility .................................................8-5
Testing the LAN Path to Your VPN Firewall Router..................................................8-5
Testing the Path from Your PC to a Remote Device ................................................8-6
Restoring the Default Configuration and Password ........................................................8-7

Contents ix
1.1November, 2009
Problems with Date and Time ........................................................................................8-8
Using the Diagnostics Utilities ........................................................................................8-9
Appendix A
Technical Specifications and Factory Default Settings
Appendix B
Related Documents
Appendix C
Two Factor Authentication
Why do I need Two-Factor Authentication? ...................................................................C-1
What are the benefits of Two-Factor Authentication? ...................................................C-1
What is Two-Factor Authentication ................................................................................C-2
NETGEAR Two-Factor Authentication Solutions ..........................................................C-2

x Contents
1.1 November, 2009