FVL328 Reference Manual
Page 6
... Your Internet Connection 3-10 How to Complete a Manual Configuration 3-11 Chapter 4 WAN and LAN Configuration Configuring LAN IP Settings 4-1 Using the Router as a DHCP Server 4-2 How to Configure LAN TCP/IP Settings and View the DHCP Log 4-3 How to Configure Reserved IP Addresses 4-4 ...Dynamic DNS 4-12 Using Static Routes ...4-12 Static Route Example 4-12 How to Configure Static Routes 4-13 Chapter 5 Protecting Your Network Firewall Protection and Content Filtering Overview 5-1 Using the Block Sites Menu to Screen Content 5-1 Apply Keyword Blocking to Groups 5-3 Services and Rules...
... Your Internet Connection 3-10 How to Complete a Manual Configuration 3-11 Chapter 4 WAN and LAN Configuration Configuring LAN IP Settings 4-1 Using the Router as a DHCP Server 4-2 How to Configure LAN TCP/IP Settings and View the DHCP Log 4-3 How to Configure Reserved IP Addresses 4-4 ...Dynamic DNS 4-12 Using Static Routes ...4-12 Static Route Example 4-12 How to Configure Static Routes 4-13 Chapter 5 Protecting Your Network Firewall Protection and Content Filtering Overview 5-1 Using the Block Sites Menu to Screen Content 5-1 Apply Keyword Blocking to Groups 5-3 Services and Rules...
FVL328 Reference Manual
Page 8
... Your FVL328 Firewall 7-1 How to Change the Built-In Password 7-1 How to Change the Administrator Login Timeout 7-2 Internet Traffic ...7-3 Internet Traffic Limit 7-3 Enable Monthly Limit 7-4 Internet Traffic Statistics 7-4 Traffic by Protocol ...7-5 Network Database ...7-5 Advantages of the Network Database 7-6 Known PCs and Devices 7-7 Operations ...7-7 Network Management ...7-8 How to Configure Remote Management 7-8 Viewing Router Status...
... Your FVL328 Firewall 7-1 How to Change the Built-In Password 7-1 How to Change the Administrator Login Timeout 7-2 Internet Traffic ...7-3 Internet Traffic Limit 7-3 Enable Monthly Limit 7-4 Internet Traffic Statistics 7-4 Traffic by Protocol ...7-5 Network Database ...7-5 Advantages of the Network Database 7-6 Known PCs and Devices 7-7 Operations ...7-7 Network Management ...7-8 How to Configure Remote Management 7-8 Viewing Router Status...
FVL328 Reference Manual
Page 9
... 8-7 Problems with Date and Time 8-8 Appendix A Technical Specifications Appendix B Networks, Routing, and Firewall Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-1 Routing Information Protocol B-2 IP Addresses and the Internet B-2 Netmask ...B-4 Subnet Addressing B-4 Private...DHCP B-9 Internet Security and Firewalls B-10 What is a Firewall B-10 Stateful Packet Inspection B-10 Denial of Service Attack B-11 Ethernet Cabling ...B-11 Category 5 Cable Quality B-11 Inside Twisted Pair Cables B-12 Uplink Switches, Crossover Cables, and MDI/MDIX Switching...
... 8-7 Problems with Date and Time 8-8 Appendix A Technical Specifications Appendix B Networks, Routing, and Firewall Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-1 Routing Information Protocol B-2 IP Addresses and the Internet B-2 Netmask ...B-4 Subnet Addressing B-4 Private...DHCP B-9 Internet Security and Firewalls B-10 What is a Firewall B-10 Stateful Packet Inspection B-10 Denial of Service Attack B-11 Ethernet Cabling ...B-11 Category 5 Cable Quality B-11 Inside Twisted Pair Cables B-12 Uplink Switches, Crossover Cables, and MDI/MDIX Switching...
FVL328 Reference Manual
Page 10
... 9.x ...C-9 MacOS X ...C-10 Verifying TCP/IP Properties for Macintosh Computers C-10 Restarting the Network C-11 Appendix D Firewall Log Formats Action List ...D-1 Field List ...D-1 Outbound Log ...D-1 Inbound Log ...D-2 Other IP Traffic ...D-2 Router Operation ...D-3 Other Connections and Traffic to this Router D-4 DoS Attack/Scan ...D-4 Access Block Site ...D-6 All Web Sites and News Groups Visited D-6 System Admin...
... 9.x ...C-9 MacOS X ...C-10 Verifying TCP/IP Properties for Macintosh Computers C-10 Restarting the Network C-11 Appendix D Firewall Log Formats Action List ...D-1 Field List ...D-1 Outbound Log ...D-1 Inbound Log ...D-2 Other IP Traffic ...D-2 Router Operation ...D-3 Other Connections and Traffic to this Router D-4 DoS Attack/Scan ...D-4 Access Block Site ...D-6 All Web Sites and News Groups Visited D-6 System Admin...
FVL328 Reference Manual
Page 11
... ...E-11 Appendix F NETGEAR VPN Configuration FVS318 or FVM318 to FVL328 Configuration Template F-1 Step-By-Step Configuration of FVS318 or FVM318 Gateway A F-2 Step-By-Step Configuration of FVL328 Gateway B F-5 Test the VPN Connection F-10 Appendix G NETGEAR VPN Client to NETGEAR FVL328 or FWAG114 VPN Router Configuration Profile ...G-1 Step-By-Step Configuration of FVL328 or FWAG114 Gateway G-2 Step-By-Step Configuration of the FVL328 Firewall B G-7 Contents...
... ...E-11 Appendix F NETGEAR VPN Configuration FVS318 or FVM318 to FVL328 Configuration Template F-1 Step-By-Step Configuration of FVS318 or FVM318 Gateway A F-2 Step-By-Step Configuration of FVL328 Gateway B F-5 Test the VPN Connection F-10 Appendix G NETGEAR VPN Client to NETGEAR FVL328 or FWAG114 VPN Router Configuration Profile ...G-1 Step-By-Step Configuration of FVL328 or FWAG114 Gateway G-2 Step-By-Step Configuration of the FVL328 Firewall B G-7 Contents...
FVL328 Reference Manual
Page 17
...of New Features in the FVL328 The NETGEAR FVL328 VPN ProSafe Firewall contains many new features, including: • Multi-DMZ (One-to-One DMZ) - It provides connections for Denial of Service (DoS) attack protection and intrusion detection. Unlike simple Internet sharing routers that rely on Network Address... Translation (NAT) for security, the FVL328 uses Stateful Packet Inspection for multiple computers to the Internet through an external broadband access device (such as a cable modem or DSL modem) and supports IPSec-...
...of New Features in the FVL328 The NETGEAR FVL328 VPN ProSafe Firewall contains many new features, including: • Multi-DMZ (One-to-One DMZ) - It provides connections for Denial of Service (DoS) attack protection and intrusion detection. Unlike simple Internet sharing routers that rely on Network Address... Translation (NAT) for security, the FVL328 uses Stateful Packet Inspection for multiple computers to the Internet through an external broadband access device (such as a cable modem or DSL modem) and supports IPSec-...
FVL328 Reference Manual
Page 19
... content from your computers. You can configure the firewall to e-mail the log to either a 10 Mbps standard Ethernet network or a 100 Mbps Fast Ethernet network. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the FVL328 is enabled with keyword blocking. Introduction 2-3 May ... your LAN to access objectionable Internet sites. You can be set for keywords within Web addresses. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 • Support for Fully Qualified Domain Name (FQDN) configuration when the Dynamic DNS feature is a true...
... content from your computers. You can configure the firewall to e-mail the log to either a 10 Mbps standard Ethernet network or a 100 Mbps Fast Ethernet network. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the FVL328 is enabled with keyword blocking. Introduction 2-3 May ... your LAN to access objectionable Internet sites. You can be set for keywords within Web addresses. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 • Support for Fully Qualified Domain Name (FQDN) configuration when the Dynamic DNS feature is a true...
FVL328 Reference Manual
Page 26
...PRGHP Figure 3-1: Disconnect the broadband modem d. A Disconnect from your computer into the Internet port (B) on the FVL328. Cable 1 "ROADBANDMODEM Figure 3-2: Connect the broadband modem to the router 3-2 Connecting the FVL328 to the router. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 c. point (A) in the diagram below) that you disconnected from your broadband modem to the computer. Internet...
...PRGHP Figure 3-1: Disconnect the broadband modem d. A Disconnect from your computer into the Internet port (B) on the FVL328. Cable 1 "ROADBANDMODEM Figure 3-2: Connect the broadband modem to the router 3-2 Connecting the FVL328 to the router. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 c. point (A) in the diagram below) that you disconnected from your broadband modem to the computer. Internet...
FVL328 Reference Manual
Page 27
... the blue Ethernet cable that came with your network to the router Note: The FVL328 incorporates Auto UplinkTM technology which eliminates the need to worry about crossover cables by automatically adjusting to... the Internet 3-3 May 2004, 202-10030-02 Securely insert one end of the cable (Cable 2 in the diagram below) into a LAN port on your router. Connecting the FVL328 to the cable type. Model FVL328 ProSafe High-Speed VPN Firewall...
... the blue Ethernet cable that came with your network to the router Note: The FVL328 incorporates Auto UplinkTM technology which eliminates the need to worry about crossover cables by automatically adjusting to... the Internet 3-3 May 2004, 202-10030-02 Securely insert one end of the cable (Cable 2 in the diagram below) into a LAN port on your router. Connecting the FVL328 to the cable type. Model FVL328 ProSafe High-Speed VPN Firewall...
FVL328 Reference Manual
Page 28
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 2. a. Check the status lights and verify the following: • Power: The power light goes on when your network in the address field ..., do not run that the Ethernet cable connecting the powered on computer to the Internet May 2004, 202-10030-02 Figure 3-4: Log in to the Internet, your firewall. Note: If software usually logs you in to the firewall 3-4 Connecting the FVL328 to the router is lit. b. b. Connect to the firewall by typing http://192.168.0.1 in...
Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 2. a. Check the status lights and verify the following: • Power: The power light goes on when your network in the address field ..., do not run that the Ethernet cable connecting the powered on computer to the Internet May 2004, 202-10030-02 Figure 3-4: Log in to the Internet, your firewall. Note: If software usually logs you in to the firewall 3-4 Connecting the FVL328 to the router is lit. b. b. Connect to the firewall by typing http://192.168.0.1 in...
FVL328 Reference Manual
Page 29
... name and password for the router password, both in to the Internet 3-5 May 2004, 202-10030-02 RUN THE SETUP WIZARD TO CONNECT TO THE INTERNET Figure 3-6: Setup Wizard Connecting the FVL328 to your Internet connection. 4. A login window opens as any user name or ...password you will see the Internet connection Setup Wizard on the settings main page. After logging in to the router, you may use to log in lower case letters. d. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual...
... name and password for the router password, both in to the Internet 3-5 May 2004, 202-10030-02 RUN THE SETUP WIZARD TO CONNECT TO THE INTERNET Figure 3-6: Setup Wizard Connecting the FVL328 to your Internet connection. 4. A login window opens as any user name or ...password you will see the Internet connection Setup Wizard on the settings main page. After logging in to the router, you may use to log in lower case letters. d. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual...
FVL328 Reference Manual
Page 31
...the computer's MAC (Media Access Control) address. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 1. When you start an Internet application, the firewall will automatically log you leave the Domain Name field blank, the firewall will no longer need to launch the ISP's login ... that your computer in order to Chapter 8, Troubleshooting. Perform a DNS Lookup. If this Router. If a Secondary DNS Server address is available, enter it manually. 2. If the NETGEAR Web site does not appear within one minute, refer to access the Internet. Enter your ...
...the computer's MAC (Media Access Control) address. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 1. When you start an Internet application, the firewall will automatically log you leave the Domain Name field blank, the firewall will no longer need to launch the ISP's login ... that your computer in order to Chapter 8, Troubleshooting. Perform a DNS Lookup. If this Router. If a Secondary DNS Server address is available, enter it manually. 2. If the NETGEAR Web site does not appear within one minute, refer to access the Internet. Enter your ...
FVL328 Reference Manual
Page 32
... FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Configuring for a Wizard-Detected Fixed IP (Static) Account If the Setup Wizard determines that your Internet service account uses Fixed IP assignment, you will be directed to the Dynamic IP menu. 1. If this MAC address." The firewall will.... If you can type in your computer when your ISP's services such as www.netgear.com) to Chapter 8, Troubleshooting. Typically your Account Name (may need to your settings. 5. The Router's MAC Address is first opened. Enter your ISP transfers the IP address of that ...
... FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Configuring for a Wizard-Detected Fixed IP (Static) Account If the Setup Wizard determines that your Internet service account uses Fixed IP assignment, you will be directed to the Dynamic IP menu. 1. If this MAC address." The firewall will.... If you can type in your computer when your ISP's services such as www.netgear.com) to Chapter 8, Troubleshooting. Typically your Account Name (may need to your settings. 5. The Router's MAC Address is first opened. Enter your ISP transfers the IP address of that ...
FVL328 Reference Manual
Page 33
... the NETGEAR Web site does not appear within one minute, refer to connect, log in to display a Web page. The following chapters describe how to a numeric IP address. Enter your assigned IP Address, Subnet Mask, and the IP Address of translating an Internet name such as needed. Model FVL328 ProSafe High-Speed VPN Firewall Reference...
... the NETGEAR Web site does not appear within one minute, refer to connect, log in to display a Web page. The following chapters describe how to a numeric IP address. Enter your assigned IP Address, Subnet Mask, and the IP Address of translating an Internet name such as needed. Model FVL328 ProSafe High-Speed VPN Firewall Reference...
FVL328 Reference Manual
Page 35
...to install the FVL328 in a setting where you are a Telstra BigPond cable modem customer, or if you will reboot the router and reset all the FVL328 configuration settings to establish a PPPoE connection that your ISP does not automatically transmit DNS addresses to the firewall during login, ...default. You must launch a login program such as mail or news servers. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 How to Complete a Manual Configuration Manually configure the firewall in the Basic Settings menu using these DNS servers" and enter the IP address ...
...to install the FVL328 in a setting where you are a Telstra BigPond cable modem customer, or if you will reboot the router and reset all the FVL328 configuration settings to establish a PPPoE connection that your ISP does not automatically transmit DNS addresses to the firewall during login, ...default. You must launch a login program such as mail or news servers. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 How to Complete a Manual Configuration Manually configure the firewall in the Basic Settings menu using these DNS servers" and enter the IP address ...
FVL328 Reference Manual
Page 36
...static) IP address for your computers after configuring the firewall. - Or, select "Use this Computer's MAC address." If the NETGEAR Web site does not appear within one minute, refer to Chapter 8, Troubleshooting. 3-12 Connecting the FVL328 to numeric IP addresses. Also enter the netmask and ... firewall to which your account is the ISP's router to masquerade as www.netgear.com) to the Internet May 2004, 202-10030-02 Typically your ISP transfers the IP address of the network interface card in a setting where you are now using. Model FVL328 ProSafe High-Speed VPN Firewall ...
...static) IP address for your computers after configuring the firewall. - Or, select "Use this Computer's MAC address." If the NETGEAR Web site does not appear within one minute, refer to Chapter 8, Troubleshooting. 3-12 Connecting the FVL328 to numeric IP addresses. Also enter the netmask and ... firewall to which your account is the ISP's router to masquerade as www.netgear.com) to the Internet May 2004, 202-10030-02 Typically your ISP transfers the IP address of the network interface card in a setting where you are now using. Model FVL328 ProSafe High-Speed VPN Firewall ...
FVL328 Reference Manual
Page 37
...of your network has a requirement to act as DHCP and RIP. Note: If you change the LAN IP address of the firewall while connected through a gateway or router. Configuring LAN IP Settings The LAN IP Setup menu allows configuration of the browser interface. These features can make those changes....the browser, you can be found under the Advanced heading in the Main Menu of LAN IP services such as a DHCP server. If your FVL328 Prosafe High Speed VPN Firewall. The LAN TCP/IP Setup parameters are: • IP Address This is : • LAN IP addresses-192.168.0.1 • Subnet mask...
...of your network has a requirement to act as DHCP and RIP. Note: If you change the LAN IP address of the firewall while connected through a gateway or router. Configuring LAN IP Settings The LAN IP Setup menu allows configuration of the browser interface. These features can make those changes....the browser, you can be found under the Advanced heading in the Main Menu of LAN IP services such as a DHCP server. If your FVL328 Prosafe High Speed VPN Firewall. The LAN TCP/IP Setup parameters are: • IP Address This is : • LAN IP addresses-192.168.0.1 • Subnet mask...
FVL328 Reference Manual
Page 38
... and will broadcast its routing table periodically. - However, if one router uses multicasting, then all computers connected to assign IP addresses for your network must use multicasting. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 • RIP Direction RIP (Router Information Protocol) allows a router to avoid duplicate addresses on the LAN. When set to None...
... and will broadcast its routing table periodically. - However, if one router uses multicasting, then all computers connected to assign IP addresses for your network must use multicasting. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 • RIP Direction RIP (Router Information Protocol) allows a router to avoid duplicate addresses on the LAN. When set to None...
FVL328 Reference Manual
Page 39
...entered a Primary DNS address in the Basic Settings menu How to Configure LAN TCP/IP Settings and View the DHCP Log 1. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 If another device on your network will be the DHCP server, or if you will deliver the following parameters... you have defined • Subnet Mask • Gateway IP Address is the firewall's LAN IP address • Primary DNS Server, if you have chosen for devices with its default user name of admin, default password of your computers, clear the 'Use router as the firewall's LAN IP address.
...entered a Primary DNS address in the Basic Settings menu How to Configure LAN TCP/IP Settings and View the DHCP Log 1. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 If another device on your network will be the DHCP server, or if you will deliver the following parameters... you have defined • Subnet Mask • Gateway IP Address is the firewall's LAN IP address • Primary DNS Server, if you have chosen for devices with its default user name of admin, default password of your computers, clear the 'Use router as the firewall's LAN IP address.
FVL328 Reference Manual
Page 40
... IP address from the router's LAN subnet, such as 192.168.0.X. 4-4 WAN and LAN Configuration May 2004, 202-10030-02 How to servers that PC will always receive the same IP address each time it accesses the firewall's DHCP server. To reserve an IP address: 1. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Figure...
... IP address from the router's LAN subnet, such as 192.168.0.X. 4-4 WAN and LAN Configuration May 2004, 202-10030-02 How to servers that PC will always receive the same IP address each time it accesses the firewall's DHCP server. To reserve an IP address: 1. Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2 Figure...