FVL328 Reference Manual
Page 6
... a Manual Configuration 3-11 Chapter 4 WAN and LAN Configuration Configuring LAN IP Settings 4-1 Using the Router as a DHCP Server 4-2 How to Configure LAN TCP/IP Settings and View the DHCP Log 4-3 How to Configure Reserved IP Addresses 4-4 Configuring WAN Settings 4-5 Connect Automatically, as Required ... 4-12 Using Static Routes ...4-12 Static Route Example 4-12 How to Configure Static Routes 4-13 Chapter 5 Protecting Your Network Firewall Protection and Content Filtering Overview 5-1 Using the Block Sites Menu to Screen Content 5-1 Apply Keyword Blocking to Groups 5-3 Services ...
... a Manual Configuration 3-11 Chapter 4 WAN and LAN Configuration Configuring LAN IP Settings 4-1 Using the Router as a DHCP Server 4-2 How to Configure LAN TCP/IP Settings and View the DHCP Log 4-3 How to Configure Reserved IP Addresses 4-4 Configuring WAN Settings 4-5 Connect Automatically, as Required ... 4-12 Using Static Routes ...4-12 Static Route Example 4-12 How to Configure Static Routes 4-13 Chapter 5 Protecting Your Network Firewall Protection and Content Filtering Overview 5-1 Using the Block Sites Menu to Screen Content 5-1 Apply Keyword Blocking to Groups 5-3 Services ...
FVL328 Reference Manual
Page 9
... Problems with Date and Time 8-8 Appendix A Technical Specifications Appendix B Networks, Routing, and Firewall Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-1 Routing Information Protocol B-2 IP Addresses and the Internet B-2 Netmask ...B-4 Subnet Addressing B-4 Private...IP Configuration by DHCP B-9 Internet Security and Firewalls B-10 What is a Firewall B-10 Stateful Packet Inspection B-10 Denial of Service Attack B-11 Ethernet Cabling ...B-11 Category 5 Cable Quality B-11 Inside Twisted Pair Cables B-12 Uplink Switches, Crossover Cables, and MDI...
... Problems with Date and Time 8-8 Appendix A Technical Specifications Appendix B Networks, Routing, and Firewall Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-1 Routing Information Protocol B-2 IP Addresses and the Internet B-2 Netmask ...B-4 Subnet Addressing B-4 Private...IP Configuration by DHCP B-9 Internet Security and Firewalls B-10 What is a Firewall B-10 Stateful Packet Inspection B-10 Denial of Service Attack B-11 Ethernet Cabling ...B-11 Category 5 Cable Quality B-11 Inside Twisted Pair Cables B-12 Uplink Switches, Crossover Cables, and MDI...
FVL328 Reference Manual
Page 10
...C-4 Configuring Windows 95, 98, and Me for TCP/IP Networking C-5 Install or Verify Windows Networking Components C-5 Enabling DHCP to Automatically Configure TCP/IP Settings C-6 Selecting Windows' Internet Access Method C-7 Verifying TCP/IP Properties C-7 Configuring Windows ... Macintosh Computers C-10 Restarting the Network C-11 Appendix D Firewall Log Formats Action List ...D-1 Field List ...D-1 Outbound Log ...D-1 Inbound Log ...D-2 Other IP Traffic ...D-2 Router Operation ...D-3 Other Connections and Traffic to this Router D-4 DoS Attack/Scan ...D-4 Access Block Site ...D-6 All Web...
...C-4 Configuring Windows 95, 98, and Me for TCP/IP Networking C-5 Install or Verify Windows Networking Components C-5 Enabling DHCP to Automatically Configure TCP/IP Settings C-6 Selecting Windows' Internet Access Method C-7 Verifying TCP/IP Properties C-7 Configuring Windows ... Macintosh Computers C-10 Restarting the Network C-11 Appendix D Firewall Log Formats Action List ...D-1 Field List ...D-1 Outbound Log ...D-1 Inbound Log ...D-2 Other IP Traffic ...D-2 Router Operation ...D-3 Other Connections and Traffic to this Router D-4 DoS Attack/Scan ...D-4 Access Block Site ...D-6 All Web...
FVL328 Reference Manual
Page 18
..., like using DHCP • Port Triggering • Ease of Use Improvements - Trace route support added in diagnostic page - Virtual Private Networking The FVL328 Firewall provides a secure encrypted connection between your local network and remote networks or clients. Logs sent when reboots are highlighted below. Clearer VPN status page - The FVL328 Prosafe High Speed VPN Firewall supports standard keying...
..., like using DHCP • Port Triggering • Ease of Use Improvements - Trace route support added in diagnostic page - Virtual Private Networking The FVL328 Firewall provides a secure encrypted connection between your local network and remote networks or clients. Logs sent when reboots are highlighted below. Clearer VPN status page - The FVL328 Prosafe High Speed VPN Firewall supports standard keying...
FVL328 Reference Manual
Page 20
...technique, known as Auto Uplink will accommodate either type of Attached computers by DHCP The FVL328 dynamically assigns network configuration information, including IP, gateway, and domain name server ... about crossover cables, as NAT, allows the use of computers on your Internet service provider (ISP). Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 The firewall incorporates Auto ...firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. There is a checkbox to disable this feature. • PPP over a DSL...
...technique, known as Auto Uplink will accommodate either type of Attached computers by DHCP The FVL328 dynamically assigns network configuration information, including IP, gateway, and domain name server ... about crossover cables, as NAT, allows the use of computers on your Internet service provider (ISP). Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 The firewall incorporates Auto ...firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. There is a checkbox to disable this feature. • PPP over a DSL...
FVL328 Reference Manual
Page 30
...The Setup Wizard reports which connection type it finds. b. Unless your ISP automatically assigns your configuration automatically via DHCP, you will need the configuration parameters from your Internet service account uses a login protocol such as you can ...on page 3-10. Click Next and follow below. Configuring for inputting the configuration parameters from your firewall and the cable or DSL line. Choose NAT or Classical Routing. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 a. Classical routing lets you do not see the menu above, click ...
...The Setup Wizard reports which connection type it finds. b. Unless your ISP automatically assigns your configuration automatically via DHCP, you will need the configuration parameters from your Internet service account uses a login protocol such as you can ...on page 3-10. Click Next and follow below. Configuring for inputting the configuration parameters from your firewall and the cable or DSL line. Choose NAT or Classical Routing. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 a. Classical routing lets you do not see the menu above, click ...
FVL328 Reference Manual
Page 37
...should be suitable in the Main Menu of the browser interface. Note: If you change the LAN IP address of the firewall while connected through a gateway or router. You must be reached through the browser, you can be found under the Advanced heading in most applications. The... WAN and LAN settings of your network has a requirement to use a different IP addressing scheme, you will be disconnected. The firewall is the LAN Subnet Mask of LAN IP services such as a DHCP server. If your FVL328 Prosafe High Speed VPN Firewall. WAN and LAN Configuration 4-1 May 2004, 202-10030-02
...should be suitable in the Main Menu of the browser interface. Note: If you change the LAN IP address of the firewall while connected through a gateway or router. You must be reached through the browser, you can be found under the Advanced heading in most applications. The... WAN and LAN settings of your network has a requirement to use a different IP addressing scheme, you will be disconnected. The firewall is the LAN Subnet Mask of LAN IP services such as a DHCP server. If your FVL328 Prosafe High Speed VPN Firewall. WAN and LAN Configuration 4-1 May 2004, 202-10030-02
FVL328 Reference Manual
Page 38
... B-9 for an explanation of the firewall. See "IP Configuration by DHCP" on the LAN. When set to Both or Out Only, the firewall will incorporate the RIP information that the router sends. RIP-2M uses multicasting. For most networks, unless you have an unusual network setup. - Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 • RIP...
... B-9 for an explanation of the firewall. See "IP Configuration by DHCP" on the LAN. When set to Both or Out Only, the firewall will incorporate the RIP information that the router sends. RIP-2M uses multicasting. For most networks, unless you have an unusual network setup. - Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 • RIP...
FVL328 Reference Manual
Page 39
... the following parameters to any LAN device that requests DHCP: • An IP Address from the range you should be part of the range for the firewall. 2. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 If another device on your computers, clear the 'Use router as the firewall's LAN IP address. Otherwise, leave it checked. Specify...
... the following parameters to any LAN device that requests DHCP: • An IP Address from the range you should be part of the range for the firewall. 2. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 If another device on your computers, clear the 'Use router as the firewall's LAN IP address. Otherwise, leave it checked. Specify...
FVL328 Reference Manual
Page 40
.... 4. How to servers that PC will always receive the same IP address each time it accesses the firewall's DHCP server. To reserve an IP address: 1. Click the Add button. 2. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Figure 4-1: LAN IP Setup Menu 3. Reserved IP addresses should be assigned to Configure Reserved IP Addresses ... box, type the IP address to assign to save your changes. Click Apply to the PC or server. Choose an IP address from the router's LAN subnet, such as 192.168.0.X. 4-4 WAN and LAN Configuration May 2004, 202-10030-02
.... 4. How to servers that PC will always receive the same IP address each time it accesses the firewall's DHCP server. To reserve an IP address: 1. Click the Add button. 2. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Figure 4-1: LAN IP Setup Menu 3. Reserved IP addresses should be assigned to Configure Reserved IP Addresses ... box, type the IP address to assign to save your changes. Click Apply to the PC or server. Choose an IP address from the router's LAN subnet, such as 192.168.0.X. 4-4 WAN and LAN Configuration May 2004, 202-10030-02
FVL328 Reference Manual
Page 41
... a reserved address entry: 1. Configuring WAN Settings Using this page, you can be assigned until the next time the PC contacts the router's DHCP server. Both of the PC or server. Note: Configure the Networking Database (see "Network Database" on page 7-5) before configuring the ...FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 3. Click Edit or Delete. WAN and LAN Configuration 4-5 May 2004, 202-10030-02 These features can set up a Default DMZ Server and allow the router to respond to the reserved address you can copy its IP configuration and force a DHCP...
... a reserved address entry: 1. Configuring WAN Settings Using this page, you can be assigned until the next time the PC contacts the router's DHCP server. Both of the PC or server. Note: Configure the Networking Database (see "Network Database" on page 7-5) before configuring the ...FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 3. Click Edit or Delete. WAN and LAN Configuration 4-5 May 2004, 202-10030-02 These features can set up a Default DMZ Server and allow the router to respond to the reserved address you can copy its IP configuration and force a DHCP...
FVL328 Reference Manual
Page 57
... using the Dynamic DNS feature in the Advanced menus so that external users can make a local server (for your location. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Examples of Using Services and Rules to Regulate Traffic Use the examples to see how you combine Services and ... local LAN address of inbound rules: Protecting Your Network 5-7 May 2004, 202-10030-02 Attempts by DHCP, it discovers active servers at your network. The rule tells the router to direct inbound traffic for servers and suspend your account if it may check for a particular service ...
... using the Dynamic DNS feature in the Advanced menus so that external users can make a local server (for your location. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Examples of Using Services and Rules to Regulate Traffic Use the examples to see how you combine Services and ... local LAN address of inbound rules: Protecting Your Network 5-7 May 2004, 202-10030-02 Attempts by DHCP, it discovers active servers at your network. The rule tells the router to direct inbound traffic for servers and suspend your account if it may check for a particular service ...
FVL328 Reference Manual
Page 93
... to connect to the built-in Figure 6-11 above and click Apply to Configure LAN TCP/IP Settings and View the DHCP Log" on the FVL328. From the main menu Advanced section, click the LAN IP Setup link. Configure the LAN IP address according to the ... in Web-based configuration manager of the FVL328. 3. You will be disconnected from the FVL328. Set up the IKE Policy illustrated below on page 4-3. Note: After you click Apply to change the LAN IP address settings, your settings. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 d. Virtual Private Networking...
... to connect to the built-in Figure 6-11 above and click Apply to Configure LAN TCP/IP Settings and View the DHCP Log" on the FVL328. From the main menu Advanced section, click the LAN IP Setup link. Configure the LAN IP address according to the ... in Web-based configuration manager of the FVL328. 3. You will be disconnected from the FVL328. Set up the IKE Policy illustrated below on page 4-3. Note: After you click Apply to change the LAN IP address settings, your settings. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 d. Virtual Private Networking...
FVL328 Reference Manual
Page 109
... and respond to DHCP client requests from PCs and other network devices. This is necessary if the PC or devices is not yet attached to know more details of this Router is enabled, and will be shown as ARP and NetBIOS. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision ...Database is an automatically-maintained list of the PC or device cannot be accurately determined, and will detect active devices which are not DHCP clients. Because of the Internet Traffic. These requests also generate an entry in the Network Database. However, sometimes the name of all...
... and respond to DHCP client requests from PCs and other network devices. This is necessary if the PC or devices is not yet attached to know more details of this Router is enabled, and will be shown as ARP and NetBIOS. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision ...Database is an automatically-maintained list of the PC or device cannot be accurately determined, and will detect active devices which are not DHCP clients. Because of the Internet Traffic. These requests also generate an entry in the Network Database. However, sometimes the name of all...
FVL328 Reference Manual
Page 110
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Figure 7-4: Network Database Advantages of the Network Database • Generally, you do not need to assign a fixed IP to a PC to ensure ...; If necessary, you don't need to identify each PC, users cannot avoid these restrictions by expiry (inactive for a PC in the DHCP Server. All IP address assignments made by the DHCP Server will be maintained until the PC or device is removed from the database, either IP address or MAC addresses. •...
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Figure 7-4: Network Database Advantages of the Network Database • Generally, you do not need to assign a fixed IP to a PC to ensure ...; If necessary, you don't need to identify each PC, users cannot avoid these restrictions by expiry (inactive for a PC in the DHCP Server. All IP address assignments made by the DHCP Server will be maintained until the PC or device is removed from the database, either IP address or MAC addresses. •...
FVL328 Reference Manual
Page 111
For DHCP clients, where the IP address is fixed at manufacture. • Group Each PC or device must be listed. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Known PCs and Devices This table lists all entries are in the Default group (the D column.) Operations • Group ... this IP address will be listed as a fixed IP address), you may not be in . The Group column indicates which is allocated by the DHCP Server in the Network Database. By default, all current entries in this device, this case, you can delete it by clicking the Add button....
For DHCP clients, where the IP address is fixed at manufacture. • Group Each PC or device must be listed. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Known PCs and Devices This table lists all entries are in the Default group (the D column.) Operations • Group ... this IP address will be listed as a fixed IP address), you may not be in . The Group column indicates which is allocated by the DHCP Server in the Network Database. By default, all current entries in this device, this case, you can delete it by clicking the Add button....
FVL328 Reference Manual
Page 114
... is configured to assign IP addresses to the firewall in the Basic Settings menu. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Figure 7-5: Router Status screen The Router Status menu provides a limited amount of the firewall. Router Status Fields Field System Name Firmware Version LAN Port MAC Address IP Address DHCP Description This field displays the Host Name...
... is configured to assign IP addresses to the firewall in the Basic Settings menu. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Figure 7-5: Router Status screen The Router Status menu provides a limited amount of the firewall. Router Status Fields Field System Name Firmware Version LAN Port MAC Address IP Address DHCP Description This field displays the Host Name...
FVL328 Reference Manual
Page 115
...FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Table 7-1. These addresses are sure you do not require it. Router Statistics screen This screen shows the following statistics: Managing Your Network May 2004, 202-10030-02 7-11 MAC Address This field displays the Ethernet MAC address being used by the Internet (WAN) port of the firewall...Mask being used by the firewall. DHCP If set to Client, the firewall is shown, the firewall cannot connect to the Internet (WAN) port of the firewall. If no address is configured to None, the firewall is 255.255.255. ...
...FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Table 7-1. These addresses are sure you do not require it. Router Statistics screen This screen shows the following statistics: Managing Your Network May 2004, 202-10030-02 7-11 MAC Address This field displays the Ethernet MAC address being used by the Internet (WAN) port of the firewall...Mask being used by the firewall. DHCP If set to Client, the firewall is shown, the firewall cannot connect to the Internet (WAN) port of the firewall. If no address is configured to None, the firewall is 255.255.255. ...
FVL328 Reference Manual
Page 123
After an erase, the firewall's password will be password, the LAN IP address will be 192.168.0.1, and the router's DHCP client will be enabled. For normal operation, these functions are not required. The Trace Route results will be displayed... the Router The FVL328 Firewall has a diagnostics feature. Figure 7-13: Diagnostics menu You can reach a remote host. • Often called Trace Route, this will then reboot automatically. From the main menu of the firewall. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 2. The firewall will list all Routers between the...
After an erase, the firewall's password will be password, the LAN IP address will be 192.168.0.1, and the router's DHCP client will be enabled. For normal operation, these functions are not required. The Trace Route results will be displayed... the Router The FVL328 Firewall has a diagnostics feature. Figure 7-13: Diagnostics menu You can reach a remote host. • Often called Trace Route, this will then reboot automatically. From the main menu of the firewall. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 2. The firewall will list all Routers between the...
FVL328 Reference Manual
Page 129
... will generate and assign an IP address if the computer cannot reach a DHCP server. Troubleshooting 8-3 May 2004, 202-10030-02 If your firewall's IP address has been changed and you are using the correct cable: - Follow the instructions in the previous section. • Make sure your computer's...at the hub or computer. • Make sure that was supplied with the cable or DSL modem. This procedure is shown as 169.254.x.x: Recent versions of 169.254.x.x. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Local or Internet Port Link LEDs Not On If either the...
... will generate and assign an IP address if the computer cannot reach a DHCP server. Troubleshooting 8-3 May 2004, 202-10030-02 If your firewall's IP address has been changed and you are using the correct cable: - Follow the instructions in the previous section. • Make sure your computer's...at the hub or computer. • Make sure that was supplied with the cable or DSL modem. This procedure is shown as 169.254.x.x: Recent versions of 169.254.x.x. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Local or Internet Port Link LEDs Not On If either the...