FVS318 Reference Manual
Page 7
Setting the MTU Size 5-8 Using the Router as a DHCP Server 5-8 How to Specify Reserved IP Addresses 5-9 How to Configure LAN TCP/IP Settings 5-10 How to Configure Dynamic DNS 5-11 Using Static... an Alternative to IKE 6-28 How to Delete a Security Association 6-30 Blank VPN Tunnel Configuration Worksheets 6-31 Chapter 7 Managing Your Network Network Management Information 7-1 Viewing Router Status and Usage Statistics 7-1 Viewing Attached Devices 7-4 Viewing, Selecting, and Saving Logged Information 7-5 Selecting What Information to Log 7-6 Saving Log Files on a Server 7-7 Examples ...
Setting the MTU Size 5-8 Using the Router as a DHCP Server 5-8 How to Specify Reserved IP Addresses 5-9 How to Configure LAN TCP/IP Settings 5-10 How to Configure Dynamic DNS 5-11 Using Static... an Alternative to IKE 6-28 How to Delete a Security Association 6-30 Blank VPN Tunnel Configuration Worksheets 6-31 Chapter 7 Managing Your Network Network Management Information 7-1 Viewing Router Status and Usage Statistics 7-1 Viewing Attached Devices 7-4 Viewing, Selecting, and Saving Logged Information 7-5 Selecting What Information to Log 7-6 Saving Log Files on a Server 7-7 Examples ...
FVS318 Reference Manual
Page 8
... 7-10 How to Erase the Configuration 7-11 Running Diagnostic Utilities and Rebooting the Router 7-11 How to Enable Remote Management 7-12 How to Upgrade the Router's Firmware 7-13 Chapter 8 Troubleshooting Basic Functions ...8-1 Power LED Not On 8-2 ... Time 8-8 Appendix A Technical Specifications Technical Specifications A-1 Appendix B Networks, Routing, and Firewall Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-1 Routing Information Protocol B-2 IP Addresses and the Internet B-2 Netmask ...B-4 Subnet Addressing B-4 Private IP Addresses B-7 Single ...
... 7-10 How to Erase the Configuration 7-11 Running Diagnostic Utilities and Rebooting the Router 7-11 How to Enable Remote Management 7-12 How to Upgrade the Router's Firmware 7-13 Chapter 8 Troubleshooting Basic Functions ...8-1 Power LED Not On 8-2 ... Time 8-8 Appendix A Technical Specifications Technical Specifications A-1 Appendix B Networks, Routing, and Firewall Basics Related Publications ...B-1 Basic Router Concepts B-1 What is a Router B-1 Routing Information Protocol B-2 IP Addresses and the Internet B-2 Netmask ...B-4 Subnet Addressing B-4 Private IP Addresses B-7 Single ...
FVS318 Reference Manual
Page 17
The 8-port FVS318 provides highly reliable Internet access for Denial of the NETGEAR FVS318 Broadband ProSafe VPN Firewall . Unlike simple Internet sharing routers that protects your local area network (LAN) and remote networks or clients. Virtual Private Networking (VPN) The FVS318 VPN Firewall provides a secure encrypted connection between ...
The 8-port FVS318 provides highly reliable Internet access for Denial of the NETGEAR FVS318 Broadband ProSafe VPN Firewall . Unlike simple Internet sharing routers that protects your local area network (LAN) and remote networks or clients. Virtual Private Networking (VPN) The FVS318 VPN Firewall provides a secure encrypted connection between ...
FVS318 Reference Manual
Page 18
... for maximum security. You can configure the firewall to email the log to access objectionable Internet sites. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the FVS318 is compatible with many other VPN products. • Supports up to your LAN. • Blocks access from reaching your PCs. Its firewall features...
... for maximum security. You can configure the firewall to email the log to access objectionable Internet sites. A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the FVS318 is compatible with many other VPN products. • Supports up to your LAN. • Blocks access from reaching your PCs. Its firewall features...
FVS318 Reference Manual
Page 24
... the firewall via DHCP. Once you locate your Internet configuration parameters, you may also refer to the FVS318 Resource CD (SW-10021-01) for the NETGEAR Router ISP Guide which provides Internet connection information for assistance with all the information needed to connect to the Internet M-10146-01 Reference Manual for the...
... the firewall via DHCP. Once you locate your Internet configuration parameters, you may also refer to the FVS318 Resource CD (SW-10021-01) for the NETGEAR Router ISP Guide which provides Internet connection information for assistance with all the information needed to connect to the Internet M-10146-01 Reference Manual for the...
FVS318 Reference Manual
Page 27
... or DSL Modem to the firewall Note: The FVS318 VPN Firewall incorporates Auto UplinkTM technology. B Cable or DSL modem Figure 3-3: Connect the computers on the router to a PC) or an 'uplink' connection (e.g. connecting to the correct configuration. That port will automatically sense whether the cable plugged into the port should have...
... or DSL Modem to the firewall Note: The FVS318 VPN Firewall incorporates Auto UplinkTM technology. B Cable or DSL modem Figure 3-3: Connect the computers on the router to a PC) or an 'uplink' connection (e.g. connecting to the correct configuration. That port will automatically sense whether the cable plugged into the port should have...
FVS318 Reference Manual
Page 31
Domain Name Server (DNS) Address: If you leave the Domain Name field blank, the firewall will keep the router connected to the firewall during login, select "Use these DNS servers" and enter the IP address of your ISP. If you know that your PC ...
Domain Name Server (DNS) Address: If you leave the Domain Name field blank, the firewall will keep the router connected to the firewall during login, select "Use these DNS servers" and enter the IP address of your ISP. If you know that your PC ...
FVS318 Reference Manual
Page 33
...address of the network interface card in a MAC address. The firewall will be using the one minute, refer to numeric IP addresses. The Router's MAC Address is the Ethernet MAC address that you are now using its MAC address. 4. This feature allows your PCs after configuring the firewall.... 3. Click on the Internet port. If the ISP does not transfer an address, you should reboot your firewall to masquerade as www.netgear.com) to Chapter 8, Troubleshooting". You must obtain it manually here. They will then only accept traffic from the ISP and enter it from...
...address of the network interface card in a MAC address. The firewall will be using the one minute, refer to numeric IP addresses. The Router's MAC Address is the Ethernet MAC address that you are now using its MAC address. 4. This feature allows your PCs after configuring the firewall.... 3. Click on the Internet port. If the ISP does not transfer an address, you should reboot your firewall to masquerade as www.netgear.com) to Chapter 8, Troubleshooting". You must obtain it manually here. They will then only accept traffic from the ISP and enter it from...
FVS318 Reference Manual
Page 34
Enter the IP address of your ISP's gateway router. If a Secondary DNS Server address is now configured to provide Internet access for these settings to a numeric IP address. A DNS servers are performed by your ... IP Address of your ISP you recorded in , or disconnect. You should see the firewall's Internet LED blink, indicating communication to Chapter 8, Troubleshooting. If the NETGEAR website does not appear within one of translating an Internet name such as Microsoft Internet Explorer or Netscape Navigator. Your firewall is available, enter it...
Enter the IP address of your ISP's gateway router. If a Secondary DNS Server address is now configured to provide Internet access for these settings to a numeric IP address. A DNS servers are performed by your ... IP Address of your ISP you recorded in , or disconnect. You should see the firewall's Internet LED blink, indicating communication to Chapter 8, Troubleshooting. If the NETGEAR website does not appear within one of translating an Internet name such as Microsoft Internet Explorer or Netscape Navigator. Your firewall is available, enter it...
FVS318 Reference Manual
Page 36
... "cloning" its MAC address. Select Yes if you know that your network so that is first opened. If a Secondary DNS Server address is the ISP's router to step 4. Note: After completing the DNS configuration, restart the computers on your Internet connection does not require a login, click No at the top of...
... "cloning" its MAC address. Select Yes if you know that your network so that is first opened. If a Secondary DNS Server address is the ISP's router to step 4. Note: After completing the DNS configuration, restart the computers on your Internet connection does not require a login, click No at the top of...
FVS318 Reference Manual
Page 57
... private IP addresses on the LAN side, and to use in private networks, and should be reached through a gateway or router. • RIP Direction RIP (Router Information Protocol) allows a router to it receives. - When set for RIP-1. - RIP-1 is the default. - If your network has a requirement ...to act as a DHCP server. Combined with other routers. The RIP Direction selection controls how the Firewall sends and receives RIP packets. RIP-1 is probably adequate for use a different IP addressing scheme,...
... private IP addresses on the LAN side, and to use in private networks, and should be reached through a gateway or router. • RIP Direction RIP (Router Information Protocol) allows a router to it receives. - When set for RIP-1. - RIP-1 is the default. - If your network has a requirement ...to act as a DHCP server. Combined with other routers. The RIP Direction selection controls how the Firewall sends and receives RIP packets. RIP-1 is probably adequate for use a different IP addressing scheme,...
FVS318 Reference Manual
Page 58
.... Specify the pool of all computers connected to the new IP address and log in this menu. You must then open a new connection to the router's LAN. Click Apply to reduce the MTU manually. For most Ethernet networks is rarely required, and should define a range between 64 and 1500. 3....automatically reduce the MTU. Using the default addressing scheme, you should not be done unless you may need to assign IP addresses for your router will be the DHCP server, or if you will need to save part of the Firewall. Reference Manual for the Model FVS318 Broadband ProSafe...
.... Specify the pool of all computers connected to the new IP address and log in this menu. You must then open a new connection to the router's LAN. Click Apply to reduce the MTU manually. For most Ethernet networks is rarely required, and should define a range between 64 and 1500. 3....automatically reduce the MTU. Using the default addressing scheme, you should not be done unless you may need to assign IP addresses for your router will be the DHCP server, or if you will need to save part of the Firewall. Reference Manual for the Model FVS318 Broadband ProSafe...
FVS318 Reference Manual
Page 59
...time it here. 4. Advanced WAN and LAN Configuration 5-9 M-10146-01 Reserved IP addresses should be assigned until the next time the PC contacts the router's DHCP server. In the IP Address box, type the IP address to assign to servers that require permanent IP settings. Type the MAC Address of... FVS318 Broadband ProSafe VPN Firewall The Firewall will deliver the following parameters to any LAN device that requests DHCP: • An IP Address from the router's LAN subnet, such as 192.168.0.X. 3. A WINS server records and reports a list of names and IP address of the PC or server. To ...
...time it here. 4. Advanced WAN and LAN Configuration 5-9 M-10146-01 Reserved IP addresses should be assigned until the next time the PC contacts the router's DHCP server. In the IP Address box, type the IP address to assign to servers that require permanent IP settings. Type the MAC Address of... FVS318 Broadband ProSafe VPN Firewall The Firewall will deliver the following parameters to any LAN device that requests DHCP: • An IP Address from the router's LAN subnet, such as 192.168.0.X. 3. A WINS server records and reports a list of names and IP address of the PC or server. To ...
FVS318 Reference Manual
Page 62
... routes only for oray.net, click the link or go to configure additional static routes. This router's address on your dynamic DNS account. 7. For example, for unusual cases such as multiple routers or multiple IP subnets located on your dynamic DNS service provider gave you is YourName.Ng.iego...providers whose names appear in the 'Use a dynamic DNS service' list, and register for connecting to an ISP. • You have an ISDN router on the Internet. Reference Manual for the service you are employed. Access the website of one of when a static route is needed, consider the following...
... routes only for oray.net, click the link or go to configure additional static routes. This router's address on your dynamic DNS account. 7. For example, for unusual cases such as multiple routers or multiple IP subnets located on your dynamic DNS service provider gave you is YourName.Ng.iego...providers whose names appear in the 'Use a dynamic DNS service' list, and register for connecting to an ISP. • You have an ISDN router on the Internet. Reference Manual for the service you are employed. Access the website of one of when a static route is needed, consider the following...
FVS318 Reference Manual
Page 63
In this case you must define a static route, telling your Firewall that 134.177.0.0 should be forwarded to the ISDN router at 192.168.0.100. To add or edit a Static Route: Advanced WAN and LAN Configuration M-10146-01 5-13 A default route was created to your local ...network for all traffic for these addresses should be accessed through the ISDN router at 192.168.0.100. • A Metric value of 1 will work since the ISDN router is on the LAN. • Private is selected only as the gateway, and a second static route was created...
In this case you must define a static route, telling your Firewall that 134.177.0.0 should be forwarded to the ISDN router at 192.168.0.100. To add or edit a Static Route: Advanced WAN and LAN Configuration M-10146-01 5-13 A default route was created to your local ...network for all traffic for these addresses should be accessed through the ISDN router at 192.168.0.100. • A Metric value of 1 will work since the ISDN router is on the LAN. • Private is selected only as the gateway, and a second static route was created...
FVS318 Reference Manual
Page 64
... route effective. Figure 5-6: Static Route Entry and Edit Menu b. Select Active to open the Edit Menu, shown in Figure 5-6. The static route will not be a router on the same LAN segment as the Metric value. e. f. h. This is for this destination. Usually, a setting of 2 or 3 works, but if this is a single host... the LAN only. This represents the number of the final destination. Type a number between your network and the destination. Type the Destination IP Address of routers between 1 and 15 as the Firewall. Reference Manual for this static route in RIP.
... route effective. Figure 5-6: Static Route Entry and Edit Menu b. Select Active to open the Edit Menu, shown in Figure 5-6. The static route will not be a router on the same LAN segment as the Metric value. e. f. h. This is for this destination. Usually, a setting of 2 or 3 works, but if this is a single host... the LAN only. This represents the number of the final destination. Type a number between your network and the destination. Type the Destination IP Address of routers between 1 and 15 as the Firewall. Reference Manual for this static route in RIP.
FVS318 Reference Manual
Page 65
...VPN) features of VPN Configuration Two common scenarios for configuring VPN tunnels are called tunnels. Figure 6-1: Secure access through FVS318 VPN routers The FVS318 supports these configurations: • Secure access between your local network and a remote network or computer. VPN tunnels also... over the Internet. Virtual Private Networking 6-1 M-10146-01 A VPN between two or more networks, and between two or more NETGEAR VPN-enabled routers is enabled and remote computers have been assigned private IP addresses. • Secure access from a remote PC, such as a...
...VPN) features of VPN Configuration Two common scenarios for configuring VPN tunnels are called tunnels. Figure 6-1: Secure access through FVS318 VPN routers The FVS318 supports these configurations: • Secure access between your local network and a remote network or computer. VPN tunnels also... over the Internet. Virtual Private Networking 6-1 M-10146-01 A VPN between two or more networks, and between two or more NETGEAR VPN-enabled routers is enabled and remote computers have been assigned private IP addresses. • Secure access from a remote PC, such as a...
FVS318 Reference Manual
Page 66
... client software. The FVS318 VPN Firewall router on tests with many VPN products do not interoperate. However, due to variations in how manufacturers interpret these two kinds of the SafeNet client. NETGEAR provides support for connections between NETGEAR VPN Firewalls, and between an FVS318 ... VPN information. Although the FVS318 can interoperate with the FVS318 and versions 8 and 9 of information: • Connection. Please see NETGEAR's web site for Windows. Main Mode authentication is slightly slower than Main Mode but more secure. - Identifies the VPN endpoints by IPSec...
... client software. The FVS318 VPN Firewall router on tests with many VPN products do not interoperate. However, due to variations in how manufacturers interpret these two kinds of the SafeNet client. NETGEAR provides support for connections between NETGEAR VPN Firewalls, and between an FVS318 ... VPN information. Although the FVS318 can interoperate with the FVS318 and versions 8 and 9 of information: • Connection. Please see NETGEAR's web site for Windows. Main Mode authentication is slightly slower than Main Mode but more secure. - Identifies the VPN endpoints by IPSec...
FVS318 Reference Manual
Page 68
... addresses. 3. You can choose one of the following four options: 1. Enter the start and finish Local IP addresses. 4. Then enter the NAT router's public (WAN) IP address or FQDN in your LAN can be accessed Use this VPN tunnel. Enter the remote WAN IP address or FQDN....as the Local IPSec Identifier. Enter the Local LAN start IP Address field, along with the designated devices on the remote LAN communications through a NAT router, select "A subnet of the following table. A subnet of the VPN tunnel. For a discussion of calculating IP addresses based on a subnet mask,...
... addresses. 3. You can choose one of the following four options: 1. Enter the start and finish Local IP addresses. 4. Then enter the NAT router's public (WAN) IP address or FQDN in your LAN can be accessed Use this VPN tunnel. Enter the remote WAN IP address or FQDN....as the Local IPSec Identifier. Enter the Local LAN start IP Address field, along with the designated devices on the remote LAN communications through a NAT router, select "A subnet of the following table. A subnet of the VPN tunnel. For a discussion of calculating IP addresses based on a subnet mask,...
FVS318 Reference Manual
Page 78
... A: LAN_A Note: The IPSec names must always initiate the connection. • Remote WAN IP Address in the FVS318 on LAN B by viewing its Maintenance menu Router Status link. You can specify the IP address of a single address on LAN B. For each FVS318, fill in the configuration screen of the FVS318 on...
... A: LAN_A Note: The IPSec names must always initiate the connection. • Remote WAN IP Address in the FVS318 on LAN B by viewing its Maintenance menu Router Status link. You can specify the IP address of a single address on LAN B. For each FVS318, fill in the configuration screen of the FVS318 on...