Manuals / Brands / Computer Equipment / Modem / NETGEAR / Computer Equipment / Modem

NETGEAR FVS318N - page 180

1 425

Download 425 pages, 22.33 Mb

Firewall Protection

180

ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N

Figure 96.

2. In the Content Filtering section of the screen, select the Yes radio button.

Contents

Main Tech nica l Sup port Trademarks Statement of Conditions Revision History ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Contents Chapter 1 Introduction Chapter 2 IPv4 and IPv6 Internet and Broadband Settings Chapter 3 LAN Configuration Chapter 4 Wireless Configuration and Security Chapter 5 Firewall Protection Chapter 6 Virtual Private Networking Using IPSec and L2TP Connections Chapter 7 Virtual Private Networking Using SSL Connections Chapter 8 Manage Users, Authentication, and VPN Certificates Chapter 9 Network and System Management Chapter 10 Monitor System Access and Performance Chapter 11 Troubleshooting Page What Is the ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N? Key Features and Capabilities Wireless Features Advanced VPN Support for Both IPSec and SSL A Powerful, True Firewall Security Features Autosensing Ethernet Connections with Auto Uplink Extensive Protocol Support Easy Installation and Management Maintenance and Support Package Contents Hardware Features Front Panel Page Introduction ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N Table 1. LED descriptions (continued) Rear Panel Bottom Panel with Product Label Choose a Location for the Wireless VPN Firewall Log In to the Wireless VPN Firewall Page Web Management Interface Menu Layout Page Requirements for Entering IP Addresses IPv4 IPv6 Settings Internet and WAN Configuration Tasks Tasks to Set Up an IPv4 Internet Connection to Your ISP Tasks to Set Up an IPv6 Internet Connection to Your ISP Configure the IPv4 Internet Connection and WAN Settings Configure the IPv4 WAN Mode Network Address Translation Classical Routing Configure the IPv4 Routing Mode Let the Wireless VPN Firewall Automatically Detect and Configure an IPv4 Internet Connection Page Page Manually Configure an IPv4 Internet Connection Figure 13. Table 3. PPTP and PPPoE settings Table 3. PPTP and PPPoE settings (continued) Figure 14. Table 4. Internet IP address settings Table 5. DNS server settings Configure Dynamic DNS Page Configure the IPv6 Internet Connection and WAN Settings Configure the IPv6 Routing Mode Use a DHCPv6 Server to Configure an IPv6 Internet Connection Page Configure a Static IPv6 Internet Connection Page Configure a PPPoE IPv6 Internet Connection Page Page Configure 6to4 Automatic Tunneling Configure ISATAP Automatic Tunneling Page View the Tunnel Status and IPv6 Addresses Configure Stateless IP/ICMP Translation Configure Advanced WAN Options and Other Tasks Figure 29. Table 10. Broadband Advanced Options screen settings 4. Click Apply to save your changes. Table 10. Broadband Advanced Options screen settings (continued) Additional WAN-Related Configuration Tasks Verify the Connection What to Do Next Manage IPv4 Virtual LANs and DHCP Options Port-B ased VLAN s Assign and Manage VLAN Profiles VLAN DHCP Options DHCP Server DHCP Relay DNS Proxy LDAP Server Configure a VLAN Profile Page Table 11. Add VLAN Profile screen settings Table 11. Add VLAN Profile screen settings (continued) Table 11. Add VLAN Profile screen settings (continued) Configure VLAN MAC Addresses and LAN Advanced Settings Configure IPv4 Multihome LAN IP Addresses on the Default VLAN Page Manage IPv4 Groups and Hosts (IPv4 LAN Groups) Manage the Network Database Add Computers or Devices to the Network Database Edit Computers or Devices in the Network Database Deleting Computers or Devices from the Network Database Change Group Names in the Network Database Set Up DHCP Address Reservation Manage the IPv6 LAN DHCPv6 Server Options Stateless DHCPv6 Server Stateless DHCPv6 Server With Prefix Delegation Stateful DHCPv6 Server Configure the IPv6 LAN Table 13. LAN Setup screen settings for IPv6 4. Click Apply to save your changes. IPv6 LAN Address Pools To add an IPv6 LAN address pool: Table 13. LAN Setup screen settings for IPv6 (continued) Page IPv6 LAN Prefixes for Prefix Delegation Configure the IPv6 Router Advertisement Daemon and Advertisement Prefixes for the LAN Page Advertisement Prefixes for the LAN Page Configure IPv6 Multihome LAN IP Addresses on the Default VLAN Enable and Configure the DMZ Port for IPv4 and IPv6 Traffic DMZ Port for IPv4 Traffic Figure 44. Table 18. DMZ Setup screen settings for IPv4 Table 18. DMZ Setup screen settings for IPv4 (continued) 3. Click Apply to save your settings. DMZ Port for IPv6 Traffic Table 18. DMZ Setup screen settings for IPv4 (continued) Page Table 19. DMZ Setup screen settings for IPv6 IPv6 DMZ Address Pools Configure the IPv6 Router Advertisement Daemon and Advertisement Prefixes for the DMZ Page Figure 47. 4. Enter the settings as explained in the following table: Table 22. RADVD screen settings for the DMZ Advertisement Prefixes for the DMZ Page Manage Static IPv4 Routing Configure Static IPv4 Routes 2. Click the Add table button under the Static Routes table. The Add Static Route screen displays: Figure 50. 4. Click Apply to save your settings. The new static route is added to the Static Routes table. 3. Enter the settings as explained in the following table: Table 24. Add Static Route screen settings for IPv4 Configure the Routing Information Protocol Figure 51. Table 25. RIP Configuration screen settings Table 25. RIP Configuration screen settings (continued) IPv4 Static Route Example Manage Static IPv6 Routing Page Page Overview of the Wireless Features Wireless Equipment Placement and Range Guidelines Configure the Basic Radio Settings Table 27. Radio Settings screen settings (continued) Operating Frequency (Channel) Guidelines Wireless Data Security Options Wireless Security Profiles Page Before You Change the SSID, WEP, and WPA Settings Configure and Enable Wireless Profiles 3. Specify the settings as explained in the following table: Page Table 29. Add Wireless Profiles screen settings (continued) Page Restrict Wireless Access by MAC Address Page View the Status of a Wireless Profile Configure Wi-Fi Protected Setup Page Configure Advanced Radio Settings 3. Specify the settings as explained in the following table: Table 31. Advanced Wireless screen settings Test Basic Wireless Connectivity About Firewall Protection Administrator Tips Overview of Rules to Block or Allow Specific Kinds of Traffic Outbound Rules (Service Blocking) Table 33. Outbound rules overview Table 33. Outbound rules overview (continued) Inbound Rules (Port Forwarding) Page Table 34. Inbound rules overview Table 34. Inbound rules overview (continued) Order of Precedence for Rules Configure LAN WAN Rules Page Create LAN WAN Outbound Service Rules IPv4 LAN WAN Outbound Rules Page IPv6 LAN WAN Outbound Rules Create LAN WAN Inbound Service Rules IPv4 LAN WAN Inbound Service Rules IPv6 LAN WAN Inbound Rules Configure DMZ WAN Rules Page Page Create DMZ WAN Outbound Service Rules IPv4 DMZ WAN Outbound Service Rules IPv6 DMZ WAN Outbound Service Rules Create DMZ WAN Inbound Service Rules IPv4 DMZ WAN Inbound Service Rules Page IPv6 DMZ WAN Inbound Service Rules Configure LAN DMZ Rules Page Create LAN DMZ Outbound Service Rules IPv4 LAN DMZ Outbound Service Rules IPv6 LAN DMZ Outbound Service Rules Create LAN DMZ Inbound Service Rules IPv4 LAN DMZ Inbound Service Rules IPv6 LAN DMZ Inbound Service Rules Examples of Firewall Rules Examples of Inbound Firewall Rules IPv4 LAN WAN Inbound Rule: Host a Local Public Web Server Page IPv4 LAN WAN or IPv4 DMZ WAN Inbound Rule: Set Up One-to-One NAT Mapping Page IPv4 LAN WAN or IPv4 DMZ WAN Inbound Rule: Specifying an Exposed Host Examples of Outbound Firewall Rules Page Configure Other Firewall Features Attack Checks IPv4 Attack Checks To enable IPv4 attack checks for your network environment: Figure 88. Table 35. Attack Checks screen settings for IPv4 Table 35. Attack Checks screen settings for IPv4 (continued) IPv6 Attack Checks Set Limits for IPv4 Sessions Manage the Application Level Gateway for SIP Sessions Services, Bandwidth Profiles, and QoS Profiles Add Customized Services Page Page Create Bandwidth Profiles Figure 95. Table 38. Add Bandwidth Profile screen settings Preconfigured Quality of Service Profiles Configure Content Filtering Page Page Page Set a Schedule to Block or Allow Specific Traffic Enable Source MAC Filtering Set Up IP/MAC Bindings IPv4/MAC Bindings Page IPv6/MAC Bindings Page Page Configure Port Triggering Page Configure Universal Plug and Play Page Using IPSec and L2TP Connections Use the IPSec VPN Wizard for Client and Gateway Configurations Create an IPv4 Gateway-to-Gateway VPN Tunnel with the Wizard Page Figure 108. 2. Complete the settings as explained in the following table: Table 42. IPSec VPN Wizard settings for an IPv4 gateway-to-gateway tunnel Page Create an IPv6 Gateway-to-Gateway VPN Tunnel with the Wizard Page Figure 113. Table 43. IPSec VPN Wizard settings for an IPv6 gateway-to-gateway tunnel Page Create an IPv4 Client-to-Gateway VPN Tunnel with the Wizard Use the VPN Wizard to Configure the Gateway for a Client Tunnel 2. Complete the settings as explained in the following table: Table 44. IPSec VPN Wizard settings for a client-to-gateway tunnel Use the NETGEAR VPN Client Wizard to Create a Secure Connection Page Page Page c. Specify the settings that are explained in the following table. Table 46. VPN client advanced authentication settings Manually Create a Secure Connection Using the NETGEAR VPN Client Page Page Page Page Figure 129. 3. Specify the settings that are explained in the following table. Table 49. VPN client IPSec configuration settings Page Test the Connection and View Connection and Status Information Test the NETGEAR VPN Client Connection Page Page View the Wireless VPN Firewall IPSec VPN Log Manage IPSec VPN Policies Manage IKE Policies IKE Policies Screen Manually Add or Edit an IKE Policy Page Table 52. Add IKE Policy screen settings Page Table 52. Add IKE Policy screen settings (continued) Page Manage VPN Policies VPN Policies Screen Figure 141. Table 53. VPN Policies screen information for IPv4 and IPv6 Manually Add or Edit a VPN Policy Page Page Table 54. Add New VPN Policy screen settings for IPv4 and IPv6 Page Table 54. Add New VPN Policy screen settings for IPv4 and IPv6 (continued) Configure Extended Authentication (XAUTH) Configure XAUTH for VPN Clients User Database Configuration RADIUS Client and Server Configuration Page Table 56. RADIUS Client screen settings (continued) Assign IPv4 Addresses to Remote Users (Mode Config) Mode Config Operation Configure Mode Config Operation on the Wireless VPN Firewall Figure 146. Table 57. Add Mode Config Record screen settings Table 57. Add Mode Config Record screen settings (continued) Page Page Table 58. Add IKE Policy screen settings for a Mode Config configuration Table 58. Add IKE Policy screen settings for a Mode Config configuration (continued) 9. Click Apply to save your settings. The IKE policy is added to the List of IKE Policies table. Configure the ProSafe VPN Client for Mode Config Operation Table 58. Add IKE Policy screen settings for a Mode Config configuration (continued) Page Page Page Page Page Page Test the Mode Config Connection Modify or Delete a Mode Config Record Configure Keep-Alives and Dead Peer Detection Configure Keep-Alives Configure Dead Peer Detection Configure NetBIOS Bridging with IPSec VPN Configure the L2TP Server Page View the Active L2TP Users Using SSL Connections SSL VPN Portal Options Overview of the SSL Configuration Process Create the Portal Layout Page Page Table 66. Add Portal Layout screen settings Configure Domains, Groups, and Users Configure Applications for Port Forwarding Add Servers and Port Numbers Add a New Host Name Configure the SSL VPN Client Configure the Client IP Address Range Figure 167. SSL VPN Client screen for IPv6 Table 68. SSL VPN Client screen settings for IPv4 and IPv6 Add Routes for VPN Tunnel Clients Use Network Resource Objects to Simplify Policies Add New Network Resources Edit Network Resources to Specify Addresses Page Configure User, Group, and Global Policies View Policies Add an IPv4 or IPv6 SSL VPN Policy Page Table 70. Add SSL VPN Policy screen settings Table 70. Add SSL VPN Policy screen settings (continued) Access the New SSL Portal Login Screen Page Page Page View the SSL VPN Connection Status and SSL VPN Log Page VPN Certificates The Wireless VPN Firewalls Authentication Process and Options Table 71. External authentication protocols and methods Configure Authentication Domains, Groups, and Users Configure Domains Create Domains Page Table 72. Add Domain screen settings (continued) Page Edit Domains Configure Groups Create Groups Page Edit Groups Configure User Accounts Page Figure 185. 4. Click Apply to save your settings. The user is added to the List of Users table. Table 74. Add Users screen settings Set User Login Policies Configure Login Policies Configure Login Restrictions Based on IPv4 Addresses Configure Login Restrictions Based on IPv6 Addresses Page Configure Login Restrictions Based on Web Browser Change Passwords and Other User Settings Page Manage Digital Certificates for VPN Connections VPN Certificates Screen Manage VPN CA Certificates Manage VPN Self-Signed Certificates Generate a CSR and Obtain a Self-Signed Certificate from a CA Page Page View and Manage Self-Signed Certificates Manage the VPN Certificate Revocation List Page Performance Management Bandwidth Capacity Features That Reduce Traffic LAN WAN Outbound Rules and DMZ WAN Outbound Rules (Service Blocking) Content Filtering Source MAC Filtering Features That Increase Traffic LAN WAN Inbound Rules and DMZ WAN Inbound Rules (Port Forwarding) Page Port Triggering DMZ Port Exposed Hosts VPN and L2TP Tunnels Use QoS and Bandwidth Assignment to Shift the Traffic Mix Set QoS Priorities Assign Bandwidth Profiles Monitoring Tools for Traffic Management System Management Change Passwords and Administrator and Guest Settings Page Configure Remote Management Access Page Figure 199. Remote Management screen for IPv6 Table 79. Remote Management screen settings for IPv4 and IPv6 About Remote Access Use the Command-Line Interface Use a Simple Network Management Protocol Manager Page Page Page Network and System Management ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N 3. Click Apply to save your changes. To configure the SNMP system information: Figure 203. Table 82. SNMP SysConfiguration screen settings Table 81. Edit User screen settings for SNMPv3 users (continued) Manage the Configuration File Back Up Settings Restore Settings Revert to Factory Default Settings Update the Firmware Configure Date and Time Service Page Enable the WAN Traffic Meter Page Table 84. Broadband Traffic Meter screen settings Configure Logging, Alerts, and Event Notifications Page Table 85. Firewall Logs & E-mail screen settings Table 85. Firewall Logs & E-mail screen settings (continued) How to Send Syslogs over a VPN Tunnel between Sites Configure Gateway 1 at Site 1 Configure Gateway 2 at Site 2 View Status Screens View the System Status Router Status Screen The following table explains the fields of the Router Status screen: Router Statist ics Screen To view the Router Statistics screen: Table 86. Router Status screen information (continued) Detailed Status Screen Page The following table explains the fields of the Detailed Status screen: Table 88. Detailed Status screen information Table 88. Detailed Status screen information (continued) Tunnel Status Screen View the VPN Connection Status and L2TP Users View the VPN Logs View the Port Triggering Status View the WAN Port Status IPv4 WAN Port Status Figure 220. Click Disconnect to disconnect the connection; click Connect to establish the connection. Table 90. Connection Status screen information for an IPv4 connection IPv6 WAN Port Status View the Attached Devices and the DHCP Log View the Attached Devices View the DHCP Log View the Status of a Wireless Profile Diagnostics Utilities Page Send a Ping Packet Trace a Route Look Up a DNS Address Display the Routing Tables Capture Packets in Real Time Reboot the Wireless VPN Firewall Remotely Page Basic Functioning Power L ED Not On Test LED Never Turns Off LAN or WAN Port LEDs Not On Troubleshoot the Web Management Interface When You Enter a URL or IP Address, a Time-Out Error Occurs Troubleshoot the ISP Connection Troubleshooting the IPv6 Connection Page Page Troubleshoot a TCP/IP Network Using a Ping Utility Test the LAN Path to Your Wireless VPN Firewall Test the Path from Your Computer to a Remote Device Restore the Default Configuration and Password Address Problems with Date and Time Access the Knowledge Base and Documentation A Specifications Factory Default Settings Page Page Page Page Page Physical and Technical Specifications The following table shows the physical and technical specifications for the wireless VPN firewall: Table 94. Wireless VPN firewall physical and technical specifications Table 94. Wireless VPN firewall physical and technical specifications (continued) The following table shows the IPSec VPN specifications for the wireless VPN firewall: The following table shows the SSL VPN specifications for the wireless VPN firewall: Table 95. Wireless VPN firewall IPSec VPN specifications Table 96. Wireless VPN firewall SSL VPN specifications The following table shows the wireless specifications for the wireless VPN firewall: Table 97. Wireless VPN firewall wireless specifications B Why Do I Need Two-Factor Authentication? What Are the Benefits of Two-Factor Authentication? What Is Two-Factor Authentication? NETGEAR Two-Factor Authentication Solutions Page Page C NETGEAR Wired Products Page Notification of Compliance (Wired) Additional Copyrights Notification of Compliance (Wired) D D. Notification of Compliance (Wireless) NETGEAR Wireless Routers, Gateways, APs Regulatory Compliance Information Europe EU Declaration of Conformity EDOC in Languages of the European Community Page FCC Requirements for Operation in the United States FCC Information to User FCC Guidelines for Human Exposure FCC Declaration of Conformity FCC Radio Frequency Interference Warnings & Instructions Canadian Department of Communications Radio Interference Regulations Industry Canada IMPORTANT NOTE: Radiation Exposure Statement: Caution: NOTE IMPORTANTE: Dclaration d'exposition aux radiations: Index Numerics A B C D E F G H I J K L M N O P Page Q R S Page T U V W X

Related pages Troubleshooting guide for Sony CDX-C910 Specifications for Patton electronic 3101RC HOW TO USE THE UPPER BODY ARMS for ProForm PMTL32706.0 Questions and Answers for GE JHC56G Chapter 3. Quick Installation Guide for TP-Link AC1200 Table 36. Parts list-Overall continued for IBM T410SI Preset code list for Pioneer VSX-C301 Table 6-3 Error Messages for Xantrex Technology PROsine 2.0 Contents for Sun Microsystems 1 Commande for Whirlpool W10270332A 1Service for Lochinvar 151 - 801