FVS124G Product datasheet
Page 1
.... You can be remotely monitored and administered using most common Internet attacks, such as the NETGEAR ProSafe NMS100. Hardware-based encryption offloads the router CPU, accelerating your ISP or headquarters office, providing failover protection. Get high-speed performance. FVS124G ProSafe™ VPN Firewall 25 with selected local language support during office hours. The...
.... You can be remotely monitored and administered using most common Internet attacks, such as the NETGEAR ProSafe NMS100. Hardware-based encryption offloads the router CPU, accelerating your ISP or headquarters office, providing failover protection. Get high-speed performance. FVS124G ProSafe™ VPN Firewall 25 with selected local language support during office hours. The...
FVS124G Reference Manual
Page 6
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: FVS124G March 2005 Router FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Business English 202-10085-01 -6 202-10085-01, March 2005
Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: FVS124G March 2005 Router FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Business English 202-10085-01 -6 202-10085-01, March 2005
FVS124G Reference Manual
Page 7
... Auto Uplink 2-3 Extensive Protocol Support 2-4 Easy Installation and Management 2-4 Maintenance and Support 2-5 Package Contents ...2-5 The Router's Front Panel 2-6 The Router's Rear Panel 2-7 The Router's IP Address, Login Name, and Password 2-8 Logging into the Router 2-9 Default Factory Settings 2-10 NETGEAR Related Products 2-11 Chapter 3 Network Planning Overview of the Planning Process 3-1 Inbound Traffic ...3-1 Virtual Private Networks...
... Auto Uplink 2-3 Extensive Protocol Support 2-4 Easy Installation and Management 2-4 Maintenance and Support 2-5 Package Contents ...2-5 The Router's Front Panel 2-6 The Router's Rear Panel 2-7 The Router's IP Address, Login Name, and Password 2-8 Logging into the Router 2-9 Default Factory Settings 2-10 NETGEAR Related Products 2-11 Chapter 3 Network Planning Overview of the Planning Process 3-1 Inbound Traffic ...3-1 Virtual Private Networks...
FVS124G Reference Manual
Page 8
... Gateway-to-Gateway: Dual Gateway WAN Ports for Load Balancing .... 3-11 VPN Telecommuter (Client-to-Gateway Through a NAT Router 3-12 VPN Telecommuter: Single Gateway WAN Port (Reference Case 3-12 VPN Telecommuter: Dual Gateway WAN Ports for Improved Reliability ...Configuration Requirements 4-3 Internet Configuration Requirements 4-4 Where Do I Get the Internet Configuration Parameters 4-4 Record Your Internet Connection Information 4-5 Connecting the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 4-6 Step 1: Physically Connect the VPN Firewall to Your Network (...
... Gateway-to-Gateway: Dual Gateway WAN Ports for Load Balancing .... 3-11 VPN Telecommuter (Client-to-Gateway Through a NAT Router 3-12 VPN Telecommuter: Single Gateway WAN Port (Reference Case 3-12 VPN Telecommuter: Dual Gateway WAN Ports for Improved Reliability ...Configuration Requirements 4-3 Internet Configuration Requirements 4-4 Where Do I Get the Internet Configuration Parameters 4-4 Record Your Internet Connection Information 4-5 Connecting the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 4-6 Step 1: Physically Connect the VPN Firewall to Your Network (...
FVS124G Reference Manual
Page 10
... LAN and Dual WAN Ports Creating a VPN Connection: Between FVX538 and FVS124G 7-5 Configuring the FVX538 7-5 Configuring the FVS124G 7-9 Testing the Connection 7-11 Creating a VPN Connection: Netgear VPN Client to FVS124G 7-11 Configuring the FVS124G 7-12 Configuring the VPN Client 7-12 Testing the Connection 7-20 Chapter 8 Router and Network Management Performance Management 8-1 Bandwidth Capacity 8-1 VPN Firewall Features...
... LAN and Dual WAN Ports Creating a VPN Connection: Between FVX538 and FVS124G 7-5 Configuring the FVX538 7-5 Configuring the FVS124G 7-9 Testing the Connection 7-11 Creating a VPN Connection: Netgear VPN Client to FVS124G 7-11 Configuring the FVS124G 7-12 Configuring the VPN Client 7-12 Testing the Connection 7-20 Chapter 8 Router and Network Management Performance Management 8-1 Bandwidth Capacity 8-1 VPN Firewall Features...
FVS124G Reference Manual
Page 11
... a Remote Device 9-6 Restoring the Default Configuration and Password 9-7 Problems with Date and Time 9-7 Appendix A Technical Specifications Appendix B Network, Routing, Firewall, and Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-2 -5 202-10085-01, March 2005
... a Remote Device 9-6 Restoring the Default Configuration and Password 9-7 Problems with Date and Time 9-7 Appendix A Technical Specifications Appendix B Network, Routing, Firewall, and Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-2 -5 202-10085-01, March 2005
FVS124G Reference Manual
Page 20
...your LAN to Internet locations or services that can configure the firewall to email the log to defend against hacker attacks. The FVS124G will log security events such as off-limits. • Logs security incidents. The firewall balances users between the two lines ...2-2 Introduction 202-10085-01, March 2005 Reference Manual for the ProSafe VPN Firewall 25 with Content Filtering Unlike simple Internet sharing NAT routers, the FVS124G is inoperable, ensuring you are never disconnected. • Load balance, or use both Internet lines simultaneously for the outgoing traffic. You...
...your LAN to Internet locations or services that can configure the firewall to email the log to defend against hacker attacks. The FVS124G will log security events such as off-limits. • Logs security incidents. The firewall balances users between the two lines ...2-2 Introduction 202-10085-01, March 2005 Reference Manual for the ProSafe VPN Firewall 25 with Content Filtering Unlike simple Internet sharing NAT routers, the FVS124G is inoperable, ensuring you are never disconnected. • Load balance, or use both Internet lines simultaneously for the outgoing traffic. You...
FVS124G Reference Manual
Page 23
... Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports • VPN Wizard The FVS124G VPN Firewall includes the NETGEAR VPN Wizard to easily configure VPN tunnels according to the recommendations of the Virtual Private Network Consortium (VPNC) to ...manage log resources from a remote location on the Internet. Maintenance and Support NETGEAR offers the following items: • FVS124G ProSafe VPN Firewall 25 with other VPNC-compliant VPN routers and clients. • SNMP The FVS124G VPN Firewall supports the Simple Network Management Protocol (SNMP) to the Web ...
... Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports • VPN Wizard The FVS124G VPN Firewall includes the NETGEAR VPN Wizard to easily configure VPN tunnels according to the recommendations of the Virtual Private Network Consortium (VPNC) to ...manage log resources from a remote location on the Internet. Maintenance and Support NETGEAR offers the following items: • FVS124G ProSafe VPN Firewall 25 with other VPNC-compliant VPN routers and clients. • SNMP The FVS124G VPN Firewall supports the Simple Network Management Protocol (SNMP) to the Web ...
FVS124G Reference Manual
Page 24
...PWR TEST ACTIVE 100 LINK/ACT ACTIVE 100 1 LINK/ACT WAN1 WAN2 2 3 LAN MODEL SPEED 4 LINK/ACT FVS124G PWR TEST LED LED WAN1 Port LEDs Figure 2-1: FVS124G Front Panel WAN2 Port LEDs Gigabit LAN Port LEDs You can use the LEDs to return the firewall for ProSafe VPN... conditions. Table 2-1 lists and describes each object on the front panel of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. The Router's Front Panel The FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports, including: - ProSafe VPN Client Software - If any of the...
...PWR TEST ACTIVE 100 LINK/ACT ACTIVE 100 1 LINK/ACT WAN1 WAN2 2 3 LAN MODEL SPEED 4 LINK/ACT FVS124G PWR TEST LED LED WAN1 Port LEDs Figure 2-1: FVS124G Front Panel WAN2 Port LEDs Gigabit LAN Port LEDs You can use the LEDs to return the firewall for ProSafe VPN... conditions. Table 2-1 lists and describes each object on the front panel of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. The Router's Front Panel The FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports, including: - ProSafe VPN Client Software - If any of the...
FVS124G Reference Manual
Page 25
... WAN port is being transmitted or received by the WAN port. Data is either not enabled or has no link. The Router's Rear Panel The rear panel of the FVS124G ProSafe VPN Firewall 25 with a connected Ethernet device. The LAN port is operating at 100 Mbps. Writing to Flash memory ...(during upgrading or resetting to the firewall. The LAN port is operating at 1,000 Mbps. Introduction 2-7 202-10085-01, March 2005 FVS124G front panel Object Activity PWR LED On (Green) Off TEST LED On (Amber) Blinking (Amber) Off WAN Port LEDs Link/Act LED On (Green)...
... WAN port is being transmitted or received by the WAN port. Data is either not enabled or has no link. The Router's Rear Panel The rear panel of the FVS124G ProSafe VPN Firewall 25 with a connected Ethernet device. The LAN port is operating at 100 Mbps. Writing to Flash memory ...(during upgrading or resetting to the firewall. The LAN port is operating at 1,000 Mbps. Introduction 2-7 202-10085-01, March 2005 FVS124G front panel Object Activity PWR LED On (Green) Off TEST LED On (Amber) Blinking (Amber) Off WAN Port LEDs Link/Act LED On (Green)...
FVS124G Reference Manual
Page 26
...-based GUI from left to right, the rear panel contains the following elements: Table 2-2. AC Power Adapter Connection 12 VDC, 1.2A The Router's IP Address, Login Name, and Password Check the label on page 2-10 for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and ...Dual WAN Ports Factory Defaults LAN 4 3 2 1 WAN2 WAN1 12VDC 1.2A Factory Defaults Button LAN Ports Figure 2-2: FVS124G Rear Panel WAN2 Port WAN1 Port AC Power Adapter Connection Viewed from the LAN • User name: admin • Password: password 2-8 Introduction 202-10085...
...-based GUI from left to right, the rear panel contains the following elements: Table 2-2. AC Power Adapter Connection 12 VDC, 1.2A The Router's IP Address, Login Name, and Password Check the label on page 2-10 for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and ...Dual WAN Ports Factory Defaults LAN 4 3 2 1 WAN2 WAN1 12VDC 1.2A Factory Defaults Button LAN Ports Figure 2-2: FVS124G Rear Panel WAN2 Port WAN1 Port AC Power Adapter Connection Viewed from the LAN • User name: admin • Password: password 2-8 Introduction 202-10085...
FVS124G Reference Manual
Page 27
Open a Web browser. 2. Enter http://192.168.1.1 as the URL. 3. Reference Manual for Password Introduction 2-9 202-10085-01, March 2005 Once you get the login screen (Figure 2-4), enter the following information: • admin for User Name • password for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports LAN IP Address User Name Password Figure 2-3: FVS124G Bottom Label Logging into the Router To log into the FVS124G once it is connected, 1.
Open a Web browser. 2. Enter http://192.168.1.1 as the URL. 3. Reference Manual for Password Introduction 2-9 202-10085-01, March 2005 Once you get the login screen (Figure 2-4), enter the following information: • admin for User Name • password for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports LAN IP Address User Name Password Figure 2-3: FVS124G Bottom Label Logging into the Router To log into the FVS124G once it is connected, 1.
FVS124G Reference Manual
Page 28
...Figure 2-4: Login screen on the Web browser Note: Read-only access is provided by logging in as shown in Table 2-1 below. see "The Router's Front Panel" on page 2-6. • Pressing this switch until the TEST LED blinks (approximately 10 seconds) causes the firewall to restore all ... and release causes the firewall to merely reboot. 2-10 202-10085-01, March 2005 Introduction Default Factory Settings When you first receive your FVS124G, the default factory settings will be set as username guest and default password password. Reference Manual for the ProSafe VPN Firewall 25 with the...
...Figure 2-4: Login screen on the Web browser Note: Read-only access is provided by logging in as shown in Table 2-1 below. see "The Router's Front Panel" on page 2-6. • Pressing this switch until the TEST LED blinks (approximately 10 seconds) causes the firewall to restore all ... and release causes the firewall to merely reboot. 2-10 202-10085-01, March 2005 Introduction Default Factory Settings When you first receive your FVS124G, the default factory settings will be set as username guest and default password password. Reference Manual for the ProSafe VPN Firewall 25 with the...
FVS124G Reference Manual
Page 32
... Ports Rollover (Figure 3-1) for the dual WAN port case is static. Dual WAN Ports (Before Rollover) Dual WAN Ports (After Rollover) Router WAN1 IP WAN1 port active X X WAN2 port inactive WAN2 IP (N/A) IP address of active WAN port changes after rollover Features such as ...port case when specifying the IP address. Hence, the use of fully-qualified domain names always required o features requiring fixed IP address blocks not supported Router WAN1 IP (N/A) WAN1 port inactive X X WAN2 port active WAN2 IP Figure 3-1: Dual WAN ports before and after a rollover: o use of ...
... Ports Rollover (Figure 3-1) for the dual WAN port case is static. Dual WAN Ports (Before Rollover) Dual WAN Ports (After Rollover) Router WAN1 IP WAN1 port active X X WAN2 port inactive WAN2 IP (N/A) IP address of active WAN port changes after rollover Features such as ...port case when specifying the IP address. Hence, the use of fully-qualified domain names always required o features requiring fixed IP address blocks not supported Router WAN1 IP (N/A) WAN1 port inactive X X WAN2 port active WAN2 IP Figure 3-1: Dual WAN ports before and after a rollover: o use of ...
FVS124G Reference Manual
Page 33
Router WAN IP netgear.dyndns.org IP address of WAN port: FQDN is required for dynamic IP address and is optional for exposed hosts in the Inbound Rules menu. ...
Router WAN IP netgear.dyndns.org IP address of WAN port: FQDN is required for dynamic IP address and is optional for exposed hosts in the Inbound Rules menu. ...
FVS124G Reference Manual
Page 34
... Network Planning 202-10085-01, March 2005 Dual WAN Ports (Before Rollover) Router WAN1 IP netgear.dyndns.org X X WAN2 port inactive WAN2 IP (N/A) Dual WAN Ports (After Rollover) Router WAN1 IP (N/A) WAN1 port inactive X X netgear.dyndns.org WAN2 IP IP address of active WAN port changes after a rollover...dual WAN port case with rollover (Figure 3-4), the WAN's IP address will always change at rollover. Dual WAN Ports (Load Balancing) Router WAN1 IP netgear1.dyndns.org netgear2.dyndns.org WAN2 IP IP addresses of WAN ports: use of fully-qualified domain names always required)...
... Network Planning 202-10085-01, March 2005 Dual WAN Ports (Before Rollover) Router WAN1 IP netgear.dyndns.org X X WAN2 port inactive WAN2 IP (N/A) Dual WAN Ports (After Rollover) Router WAN1 IP (N/A) WAN1 port inactive X X netgear.dyndns.org WAN2 IP IP address of active WAN port changes after a rollover...dual WAN port case with rollover (Figure 3-4), the WAN's IP address will always change at rollover. Dual WAN Ports (Load Balancing) Router WAN1 IP netgear1.dyndns.org netgear2.dyndns.org WAN2 IP IP addresses of WAN ports: use of fully-qualified domain names always required)...
FVS124G Reference Manual
Page 35
...WAN port case, the mechanism is to use a fully-qualified domain name (FQDN) when the IP address is dynamic and to -gateway through a NAT router) Dynamic Allowed (FQDN optional) FQDN required FQDN required FQDN required Allowed (FQDN optional) FQDN required * All tunnels must be re-established using the new ... rolls over , the VPN tunnel collapses and must be re-established after a rollover using the new WAN IP address. Note: Once the gateway router WAN port rolls over , the IP address of the active WAN port always changes. The addressing of the firewall's dual WAN port depends on ...
...WAN port case, the mechanism is to use a fully-qualified domain name (FQDN) when the IP address is dynamic and to -gateway through a NAT router) Dynamic Allowed (FQDN optional) FQDN required FQDN required FQDN required Allowed (FQDN optional) FQDN required * All tunnels must be re-established using the new ... rolls over , the VPN tunnel collapses and must be re-established after a rollover using the new WAN IP address. Note: Once the gateway router WAN port rolls over , the IP address of the active WAN port always changes. The addressing of the firewall's dual WAN port depends on ...
FVS124G Reference Manual
Page 36
... Network Planning 202-10085-01, March 2005 Dual WAN Ports (Load Balancing) WAN1 IP Gateway netgear1.dyndns.org netgear2.dyndns.org VPN Router WAN2 IP IP addresses of WAN ports same as single WAN port case (use of fully-qualified domain names required for dynamic IP ...and Dual WAN Ports Dual WAN Ports (Before Rollover) WAN1 IP Gateway netgear.dyndns.org X X VPN Router WAN2 port inactive WAN2 IP (N/A) Dual WAN Ports (After Rollover) Gateway WAN1 IP (N/A) WAN1 port inactive X X netgear.dyndns.org VPN Router WAN2 IP IP address of active WAN port changes after a rollover (use...
... Network Planning 202-10085-01, March 2005 Dual WAN Ports (Load Balancing) WAN1 IP Gateway netgear1.dyndns.org netgear2.dyndns.org VPN Router WAN2 IP IP addresses of WAN ports same as single WAN port case (use of fully-qualified domain names required for dynamic IP ...and Dual WAN Ports Dual WAN Ports (Before Rollover) WAN1 IP Gateway netgear.dyndns.org X X VPN Router WAN2 port inactive WAN2 IP (N/A) Dual WAN Ports (After Rollover) Gateway WAN1 IP (N/A) WAN1 port inactive X X netgear.dyndns.org VPN Router WAN2 IP IP address of active WAN port changes after a rollover (use...
FVS124G Reference Manual
Page 37
...The gateway WAN port must act as a responder. 10.5.6.0/24 Road Warrior Example (Dual WAN Ports, Before Rollover) LAN IP 10.5.6.1 Gateway A VPN Router (at employer's main office) WAN IP FQDN bzrouter.dyndns.org Fully-Qualified Domain Names (FQDN) - If the IP address is dynamic, a fully-...Fixed IP addresses - Network Planning 3-7 202-10085-01, March 2005 required for Dynamic IP addresses WAN IP 0.0.0.0 Client B Remote PC (running NETGEAR ProSafe VPN Client) Figure 3-8: Single gateway WAN port case for VPN road warrior The IP address of the gateway WAN port can be either ...
...The gateway WAN port must act as a responder. 10.5.6.0/24 Road Warrior Example (Dual WAN Ports, Before Rollover) LAN IP 10.5.6.1 Gateway A VPN Router (at employer's main office) WAN IP FQDN bzrouter.dyndns.org Fully-Qualified Domain Names (FQDN) - If the IP address is dynamic, a fully-...Fixed IP addresses - Network Planning 3-7 202-10085-01, March 2005 required for Dynamic IP addresses WAN IP 0.0.0.0 Client B Remote PC (running NETGEAR ProSafe VPN Client) Figure 3-8: Single gateway WAN port case for VPN road warrior The IP address of the gateway WAN port can be either ...
FVS124G Reference Manual
Page 38
...case) for VPN road warrior 3-8 Network Planning 202-10085-01, March 2005 required for Dynamic IP addresses WAN IP 0.0.0.0 Remote PC (running NETGEAR ProSafe VPN Client) Remote PC must re-establish VPN tunnel after a rollover Figure 3-10: Dual gateway WAN ports, after rollover, for VPN ...WAN port must act as the responder. 10.5.6.0/24 Road Warrior Example (Dual WAN Ports, Load Balancing) Client B LAN IP 10.5.6.1 Gateway A VPN Router (at employer's main office) WAN1 IP (N/A) WAN1 port inactive X X bzrouter.dyndns.org WAN2 IP Fully-Qualified Domain Names (FQDN) - Reference ...
...case) for VPN road warrior 3-8 Network Planning 202-10085-01, March 2005 required for Dynamic IP addresses WAN IP 0.0.0.0 Remote PC (running NETGEAR ProSafe VPN Client) Remote PC must re-establish VPN tunnel after a rollover Figure 3-10: Dual gateway WAN ports, after rollover, for VPN ...WAN port must act as the responder. 10.5.6.0/24 Road Warrior Example (Dual WAN Ports, Load Balancing) Client B LAN IP 10.5.6.1 Gateway A VPN Router (at employer's main office) WAN1 IP (N/A) WAN1 port inactive X X bzrouter.dyndns.org WAN2 IP Fully-Qualified Domain Names (FQDN) - Reference ...