NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Technical manual

October 2004
202-10066-01 (Beta Draft)
October 2004
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
Network Planning Guide
for ProSafe VPN Firewall
Router FVX538

ii
October 2004
© 2004 by NETGEAR, Inc. All rights reserved. FullManual.
Trademarks
NETGEAR and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc..
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders.
October 2004
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
Export Restrictions
The NETGEAR VPN Client (the “software”) is subject to United States Export Controls. The software may not be
exported or transmitted 1) into (or to a national or resident of) Cuba, Iran, Iraq, Libya, North Korea, Syria, Sudan or any
other country to which the United States has embargoed goods; or 2) to anyone on the United States Treasury
Department's list of Specially Designated Nationals or the U.S. Commerce Department's Table of Deny Orders. By using
this software, you agree to abide by the laws, rules and regulations - including, but not limited to the Export
Administration Act and the Arms Export Control Act - applicable to such use and not to transfer, by electronic
transmission or otherwise, the software to either a foreign national or a foreign destination in violation of any such laws.

Contents iii
October 2004
Contents
Chapter 1
Introducing the FVX538
The Router’s Front Panel ...............................................................................................1-1
The Router’s Rear Panel ................................................................................................1-3
Rack Mounting the Router ..............................................................................................1-3
The Router’s IP Address, Login Name, and Password ..................................................1-4
Default Factory Settings .................................................................................................1-4
Chapter 2
Network Planning
Overview of the Planning Process ..................................................................................2-1
Single or Multiple Exposed Hosts ............................................................................2-1
Virtual Private Networks (VPNs) ..............................................................................2-2
The Fail-over Case for Routers With Dual WAN Ports .............................................2-2
The Load Balancing Case for Routers With Dual WAN Ports ..................................2-2
Single or Multiple Exposed Hosts ...................................................................................2-3
Single Exposed Host ................................................................................................2-3
Multiple Exposed Hosts ............................................................................................2-5
Virtual Private Networks (VPNs) .....................................................................................2-6
VPN Road Warrior (Client-to-Gateway) ...................................................................2-8
VPN Gateway-to-Gateway .....................................................................................2-10
VPN Telecommuter (Client-to-Gateway Through a NAT Router) ...........................2-13

October 2004
iv Contents

Network Planning Guide for ProSafe VPN Firewall Router FVX538
Introducing the FVX538 1-1
October 2004
Chapter 1
Introducing the FVX538
This chapter introduces the FVX538 ProSafe VPN Firewall Router.
The Router’s Front Panel
The FVX538 ProSafe VPN Firewall Router front panel shown below contains the port
connections, status LEDs, and the factory defaults reset button.
Figure 1-1: FVX538 Front Panel
You can use the LEDs to verify various conditions. Table 1-1 lists and describes each object on the
front panel of the router and its operation.
Table 1-1. Object Descriptions
Object Activity Description
Power LED On (Green)
Off Power is supplied to the router. Power is not supplied to the router.
Test LED On (Amber)
Blinking (Amber)
Off
Test mode: The system is initializing or the initialization has failed.
Writing to Flash memory (during upgrading or resetting to defaults).
The system has booted successfully.
Tes t
Power
Factory
Defaults
WAN1 WAN2
Gigabit
ProSafe VPN Firewall
14
58
MODEL FVX538
LAN
DMZ
Link/Act
Link/Act Speed
100
Active Active
Link/Act 100Link/Act 100
CONSOLE
Power Test
LED LED WAN1 Port
and LEDs WAN2 Port and LEDs
LAN Ports
and LEDs Console
Port
Factory
Defaults
Gigabit Port
and LEDs
DMZ Port
and LEDs Button

Network Planning Guide for ProSafe VPN Firewall Router FVX538
1-2 Introducing the FVX538
October 2004
WAN Ports
and LEDs Two RJ-45 WAN ports N-way automatic speed negotiation, Auto MDI/MDIX.
Link/Act LED
On (Green)
Blinking (Green)
Off
The WAN port has detected a link with a connected Ethernet device.
Data is being transmitted or received by the WAN port.
The WAN port has no link.
100 LED
On (Green)
Off The WAN port is operating at 100 Mbps. The WAN port is operating at 10 Mbps.
Active LED
On (Green)
On (Amber)
Off
The WAN port has a valid Internet connection.
The Internet connection is down.
The WAN port is either not enabled or has no link.
LAN Ports
and LEDs 8-port RJ-45 10/100 Mbps Fast Ethernet
Switch
N-way automatic speed negotiation, auto MDI/MDIX.
Link/Act LED
On (Green)
Blinking (Green)
Off
The LAN port has detected a link with a connected Ethernet device.
Data is being transmitted or received by the LAN port.
The LAN port has no link.
100 LED
On (Green)
Off The LAN port is operating at 100 Mbps. The LAN port is operating at 10 Mbps.
DMZ (port 8)
On (Green)
Off Port 8 is operating as a dedicated hardware DMZ port. Port 8 is operating as a normal LAN port.
Gigabit Port
and LEDs Gbit RJ-45 connector Port for connecting to a gigabit Ethernet device.
Link/Act LED
On (Green)
Blinking (Green)
Off
The LAN port has detected a link with a connected Ethernet device.
Data is being transmitted or received by the LAN port.
The LAN port has no link.
Speed LED
On (Green)
On (Amber)
Off
The LAN port is operating at 1,000 Mbps.
The LAN port is operating at 100 Mbps.
The LAN port is operating at 10 Mbps.
Console
Port DB9 male connector Port for connecting to an optional console terminal. Default baud rate is 9,600; pinouts: (2) Tx, (3) Rx, (5) and (7) Gnd.
Factory
Defaults — Factory Defaults reset push button (see “Default Factory Settings” on page 1-4 for the factory defaults).
Table 1-1. Object Descriptions (continued)
Object Activity Description

Network Planning Guide for ProSafe VPN Firewall Router FVX538
Introducing the FVX538 1-3
October 2004
The Router’s Rear Panel
The rear panel of the FVX538 ProSafe VPN Firewall Router (Figure 1-2) contains the On/Off
switch and AC power connection.
Figure 1-2: FVX538 Rear Panel
Viewed from left to right, the rear panel contains the following elements:
•ACpowerin
•On/Offswitch
Rack Mounting the Router
The FVX538 can be mounted either on a desktop (using included rubber feet) or in a 19-inch rack
(using the included rack mounting hardware illustrated in Figure 1-3).
Figure 1-3: Attaching Mounting Brackets
100-240 VAC, 50-60Hz, 0.7A max.
On/Off
Switch
AC Power
Connection

Network Planning Guide for ProSafe VPN Firewall Router FVX538
1-4 Introducing the FVX538
October 2004
The Router’s IP Address, Login Name, and Password
Check the label on the bottom of the FVX538’s enclosure if you forget the following factory
default information:
• IP Address: http://192.168.1.1 to reach the Web-based GUI from the LAN
•Username:admin
• Password: password
Figure 1-4: FVX538 Bottom Label
Default Factory Settings
When you first receive your FVX538, the default factory settings will be set as shown in Table 1-2
below. You can restore these defaults with the Factory Defaults restore switch on the front panel —
see “The Router’s Front Panel” on page 1-1.
• Pressing this switch for a prolonged period (>5 seconds) causes the router to restore all factory
default settings and reboot.
• A shorter press and release causes the router to merely reboot.
ProSafe VPN Firewall FVX538
MAC
(internet)
http://192.168.1.1
user name: admin
password: password
DEFAULT ACCESS
MAC
(internet)
272-10134-01
SERIALMAC
(local)
N10947
E-E011-02-4749 (B)
IP Address
User Name
Password

Network Planning Guide for ProSafe VPN Firewall Router FVX538
Introducing the FVX538 1-5
October 2004
Table 1-2. Factory Default Settings
Feature Default
User Name (case sensitive) admin
Password (case sensitive) password
Built-in DHCP server DHCP server is enabled, issues addresses in the
default subnet
IP Configuration IP Address: 192.168.1.1
Subnet Mask: 255.255.255.0
Gateway: 0.0.0.0
Time Zone GMT
Time Zone Adjust for Daylight Saving TIme Disabled
SNMP Disabled

Network Planning Guide for ProSafe VPN Firewall Router FVX538
1-6 Introducing the FVX538
October 2004