NETGEAR, Inc
 EU Regulatory Compliance Statement
Technical Support
Trademarks
Statement of Conditions
 Additional Copyrights
Bestätigung des Herstellers/Importeurs
Certificate of the Manufacturer/Importer
Voluntary Control Council for Interference Vcci Statement
 MD5
 Model Number
Product and Publication Details
 V1.1, August
 Contents
 Chapter LAN Configuration
 Chapter Virtual Private Networking
 Chapter VPN Firewall and Network Management
 Appendix C Related Documents Index
 Xii Contents
 Conventions, Formats and Scope
About This Manual
 Revision History
How to Print This Manual
Part Number Version Date Description
 Settings screen see Manually Configuring Your Internet
 Xvi About This Manual
 Chapter Introduction
Key Features
 Advanced VPN Support for IPsec
Powerful, True Firewall with Content Filtering
 Autosensing Ethernet Connections with Auto Uplink
Security Features
 Extensive Protocol Support
Easy Installation and Management
 Package Contents
 LED Descriptions
VPN Firewall Front and Rear Panels
 Object Activity Description One WAN Port Active
 LAN IP Address User Name Password
Default IP Address, Login Name, and Password
Qualified Web Browsers
 Understanding the Connection Steps
Connecting the VPN Firewall to the Internet
 Logging into the VPN Firewall
 Navigating the Menus
 Configuring the Internet Connection to Your ISP
 Connection Data Required Method
Internet connection methods
 Manually Configuring Your Internet Connection
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Configuring the WAN Mode
 Classical Routing
Network Address Translation
 Configuring Dynamic DNS
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Configuring the Advanced Broadband Options
 Additional WAN Related Configuration
 Choosing the VPN Firewall Dhcp Options
Chapter LAN Configuration
 Configuring the LAN Setup Options
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Managing Groups and Hosts LAN Groups
 Group and individual control over PCs
Creating the Network Database
 Viewing the Network Database
 Adding Devices to the Network Database
 Changing Group Names in the LAN Groups Database
Setting Up Dhcp Address Reservation
 Configuring Multi Home LAN IP Addresses
 Configuring and Enabling the DMZ Port
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Configuring Static Routes
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Static Route Example
 Configuring Routing Information Protocol RIP
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 About Firewall Protection and Content Filtering
Firewall Protection and Content Filtering
 Using Rules to Block or Allow Specific Kinds of Traffic
 Outbound Rules Service Blocking
Services-Based Rules
Outbound Rules
 Or Allow Specific Traffic on
 Profile
Inbound Rules Port Forwarding
 Block always
Inbound Rules
 Inbound Rules
 Viewing Rules and Order of Precedence for Rules
 Configuring LAN WAN Rules
 LAN WAN Outbound Services Rules
 LAN WAN Inbound Services Rules
 Configuring DMZ WAN Rules
 Configuring LAN DMZ Rules
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 LAN WAN Inbound Rule Hosting a Local Public Web Server
Inbound Rules Examples
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 LAN WAN or DMZ WAN Inbound Rule Specifying an Exposed Host
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Outbound Rules Example
Configuring Other Firewall Features
LAN WAN Outbound Rule Blocking Instant Messenger
 WAN Security Checks
Attack Checks
 LAN Security Checks
 Setting Session Limits
 Managing the Application Level Gateway for SIP Sessions
 Adding Customized Services
Creating Services, QoS Profiles, and Bandwidth Profiles
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Modifying a Service
Specifying Quality of Service QoS Priorities
 Creating Bandwidth Profiles
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Setting a Schedule to Block or Allow Specific Traffic
 Blocking Internet Sites Content Filtering
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Configuring Source MAC Filtering
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Configuring IP/MAC Address Binding
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Configuring Port Triggering
 Outgoing Trigger Port Range fields
 Incoming Response Port Range fields
 Configuring UPnP Universal Plug and Play
 Email Notifications of Event Logs and Alerts
 Administrator Tips
 Chapter Virtual Private Networking
Using the VPN Wizard for Client and Gateway Configurations
 Creating Gateway to Gateway VPN Tunnels with the Wizard
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Creating a Client to Gateway VPN Tunnel
Use the VPN Wizard Configure the Gateway for a Client Tunnel
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Leave Virtual Adapter disabled
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Netgear VPN Client Status and Log Information
Testing the Connections and Viewing Status Information
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 System Tray Icon Status
 VPN Firewall VPN Connection Status and Logs
 Managing VPN Policies
Configuring IKE Policies
 IKE Policies Screen
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Manually Adding or Editing an IKE Policy
 General
Add IKE Policy Settings
Mode Config Record
Description or Subfield and Description
 Remote
Local
IKE SA Parameters
 Group 5 1536 bit
Group 1 768 bit
 Information, see Configuring Radius Clients for Xauth
 VPN Policies Screen
Configuring VPN Policies
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Manually Adding or Editing a VPN Policy
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Add VPN Policy Settings
 Manual Policy Parameters
Traffic Selection
 Auto Policy Parameters
 Group 768 bit
Managing Certificates
Group 1536 bit
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Viewing and Loading CA Certificates
Understanding the Certificates Screen
 Understanding and Viewing Active Self Certificates
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Obtaining a Self Certificate from a Certificate Authority
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Managing your Certificate Revocation List CRL
 Configuring Xauth for VPN Clients
Configuring Extended Authentication Xauth
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Configuring the User Database for Xauth
 Configuring Radius Clients for Xauth
 Enter the primary Radius Server IP Address
 Mode Config Operation
Assigning IP Addresses to Remote Users ModeConfig
 Configuring the Mode Config Screen
Configuring Mode Config Operation on the VPN Firewall
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Configuring an IKE Policy for Mode Config Operation
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Configuring the ProSafe VPN Client for ModeConfig
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Enable Replay Detection should be checked
 Configuring Keepalives
Configuring Keepalives and Dead Peer Detection
Testing the Mode Config Connection
 Configuring Dead Peer Detection
 Click the Yes radio button to Enable Dead Peer Detection
Configuring NetBIOS Bridging with VPN
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Bandwidth Capacity
Performance Management
 Service Blocking
VPN Firewall Features That Reduce Traffic
 Blocking Sites
 Source MAC Filtering
VPN Firewall Features That Increase Traffic
 Port Forwarding
 Port Triggering
 DMZ Port
Using QoS to Shift the Traffic Mix
VPN Tunnels
 Tools for Traffic Management
Changing Passwords and Settings
 Local Authentication Settings section of the screen
 Adding External Users
 Authentication Protocols
Configuring an External Server for Authentication
Authentication Description Protocol
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Enabling Remote Management Access
 Check Allow Remote Management radio box
 Using an Snmp Manager
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Managing the Configuration File
 Backing Up Settings
 Reverting to Factory Default Settings
Restoring Settings
Upgrading the Firmware
 Configuring Date and Time Service
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Activating Notification of Events and Alerts
Monitoring System Performance
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Viewing the Logs
 Firewall Log Field Descriptions
Enabling the Traffic Meter
Field Description
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Router Status Fields
Viewing the VPN Firewall Configuration and System Status
 Monitoring VPN Firewall Statistics
 Monitoring Broadband Port Status
 Monitoring Attached Devices
 Known PCs and Devices options
Monitoring VPN Tunnel Connection Status
 IPsec Connection Status Fields
Viewing the VPN Logs
 Viewing Port Triggering Status
Viewing the Dhcp Log
 Port Triggering Status Data
To view the most recent entries, click refresh
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Basic Functions
Chapter Troubleshooting
 LEDs Never Turn Off
Power LED Not On
LAN or Internet Port LEDs Not On
 Troubleshooting the Web Configuration Interface
 Troubleshooting the ISP Connection
 Testing the LAN Path to Your VPN Firewall
Troubleshooting a TCP/IP Network Using a Ping Utility
 Ping -n 10 IP address
Testing the Path from Your PC to a Remote Device
 Problems with Date and Time
Restoring the Default Configuration and Password
 Using the Diagnostics Utilities
 Through VPN tunnel
Diagnostics
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Local Network LAN
Table A-1. VPN firewall Default Configuration Settings
Feature Default Behavior Router Login
Internet Connection
 Physical Specifications
Table A-2. VPN firewall Technical Specifications
Feature Default Behavior Management
Power Adapter
 Interface Specifications
Feature Specifications Environmental Specifications
Electromagnetic Emissions
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 What are the benefits of Two-Factor Authentication?
Why do I need Two-Factor Authentication?
 What is Two-Factor Authentication
Netgear Two-Factor Authentication Solutions
 Figure B-1
 Figure B-3
 Document Link
Appendix C Related Documents
 ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
 Numerics
Index
 Index-2
 Index-3
 Index-4
 Index-5
 Index-6
 Index-7
 Index-8
 Index-9
 Index-10