Manuals / NETGEAR / Computer Equipment / Printer

NETGEAR FWG114P v2 manual VPN Manual Policy Menu

Models: FWG114P v2

1 296

Download 296 pages 46.73 Kb

Page 122

Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P v2

Figure 8-4: VPN - Manual Policy Menu

8-10	Virtual Private Networking

201-10301-02, May 2005

Image 122

NETGEAR FWG114P v2 manual VPN Manual Policy Menu

Contents

201-10301-02, May FCC Caution TrademarksStatement of Conditions EN 55 022 Declaration of ConformanceVoluntary Control Council for Interference Vcci Statement Bestätigung des Herstellers/ImporteursCertificate of the Manufacturer/Importer 201-10301-02, May Contents Chapter Wireless Configuration Chapter Firewall Protection Content Filtering Chapter Virtual Private Networking Chapter Advanced Configuration Appendix C Preparing Your Network Appendix D Firewall Log Formats Appendix F Virtual Private Networking Glossary Xiv Contents Typographical Conventions Chapter About This ManualAudience, Scope, Conventions, and Formats Manual ScopeHow to Use This Manual Printing a Chapter How to Print this ManualPrinting a Page in the Html View Printing the Full ManualAbout This Manual Key Features of the FWG114P Chapter IntroductionFull Routing on Both the Broadband and Serial Ports 802.11g and 802.11b Wireless NetworkingFlash memory for firmware upgrade NAT off classical routing Virtual Private Networking Wireless Multimedia WMM SupportPowerful, True Firewall with Content Filtering Security Autosensing Ethernet Connections with Auto UplinkExtensive Protocol Support Easy Installation and Management Netgear Related ProductsPackage Contents FWG114P v2 Rear Panel LED DescriptionsRouter to a broadband modem Introduction What You Will Need Before You Begin Connecting the FWG114P v2 to the InternetComputer Network Configuration Requirements Cabling and Computer Hardware RequirementsInternet Configuration Requirements Where Do I Get the Internet Configuration Parameters?Record Your Internet Connection Information Connecting the FWG114P v2 Wireless Firewall/Print Server Verify That Basic Requirements Are MetLocal Port It starts automatically Verify the connections to the firewallLOG in to the Wireless FIREWALL/PRINT Server Login Result RUN the Setup Wizard to Connect to the Internet Make sure the network settings of the computer are correct Basic Setup Troubleshooting TipsFWG114P v2 Setup Wizard Auto Detection Be sure to restart your network in the correct sequenceWizard-Detected Login Account Setup Setup Wizard menu for PPPoE login accountsConnecting the FWG114P v2 to the Internet Wizard-Detected Dynamic IP Account Setup 10 Setup Wizard menu for Dynamic IP addressWizard-Detected Fixed IP Account Setup 11 Setup Wizard menu for Fixed IP addressConfigure the Serial Port of the Firewall Connect the Firewall to your Isdn or dial-up modem12 Serial Internet Connection configuration menu Testing Your Internet Connection Connect to the Internet to test your configurationManually Configuring Your Internet Connection 13 Browser-based configuration Basic Settings menuHow to Manually Configure the Primary Internet Connection Connecting the FWG114P v2 to the Internet Chapter Wireless Configuration Observing Performance, Placement, and Range GuidelinesImplementing Appropriate Wireless Security FWG114P v2 wireless data security optionsUnderstanding Wireless Settings Wireless Settings menuWireless Card Access List Wireless Network. The station name of the FWG114PWireless Access Point Security Options Default Factory Settings Feature Default Factory Settings Ssid NetgearWPA or WPA2 Radius Settings Before You Change the Ssid and WEP SettingsAuthentication WEP Encryption KeysHow to Set Up and Test Basic Wireless Connectivity How to Restrict Wireless Access by MAC Address Wireless Station Access menuHow to Configure WEP To configure WEP data encryption, follow these stepsClick Wireless Settings in the main menu of the FWG114P Wireless Settings menu WEPHow to Configure WPA with Radius Wireless Settings menu WPA with Radius How to Configure WPA2 with Radius Wireless Settings menu WPA2 with Radius How to Configure WPA and WPA2 with Radius Wireless Settings menu WPA and WPA2 with Radius How to Configure WPA-PSK Wireless Settings menu WPA-PSK How to Configure WPA2-PSK 10 Wireless Settings menu WPA2-PSKHow to Configure WPA-PSK and WPA2-PSK 11 Wireless Settings menu WPA-PSK and WPA2-PSK Auto-Rollover Chapter Serial Port ConfigurationModem Dial-inHow to Configure a Serial Port Modem Configuring a Serial Port ModemBasic Requirements for Serial Port Modem Configuration Basic Requirements for Auto-Rollover Configuring Auto-RolloverHow to Configure Auto-Rollover Configuring Dial-in on the Serial Port Auto-Rollover configuration menuHow to Configure Dial-in Basic Requirements for Dial-inBasic Requirements for LAN-to-LAN Connections Configuring LAN-to-LAN SettingsHow to Configure LAN-to-LAN Connections LAN-to-LAN configuration menu Serial Port Configuration Using the Block Sites Menu to Screen Content Chapter Firewall Protection Content FilteringFirewall Protection and Content Filtering Overview Block Sites menu These steps are discussed below Services and Rules Regulate Inbound and Outbound TrafficDefining a Service Using Inbound/Outbound Rules to Block or Allow Services Rules menu Examples of Using Services and Rules to Regulate Traffic Inbound Rules Port ForwardingExample Port Forwarding to a Local Public Web Server This rule is shown in Figure Rule example Videoconference from Restricted AddressesOutbound Rules Service Blocking or Port Filtering Service example port forwarding for VPN when NAT is OffOther Rules Considerations Rule example Blocking Instant MessengerOrder of Precedence for Rules Rules Menu OptionsUsing a Schedule to Block or Allow Content or Traffic Schedule menuSetting the Time Zone Getting E-Mail Notifications of Event Logs and AlertsE-mail menu Firewall Protection and Content Filtering Viewing Logs of Web Access or Attempted Web Access 10 Logs menuLog action buttons What to Include in the Event LogLog action buttons are described in Table Firewall Protection and Content Filtering FWG114P v2 supports these methods for printing Chapter Print ServerPrinting Options For Macintosh computers LPR printingPort For Windows XP and 2000, Use TCP/IP LPR PrintingClick Add a printer. Click Next to proceed Complete the Add Standard TCP/IP Printer Port Wizard Add Printer Wizard Install Printer Software Print Server For Windows 95/98/Me, Use the Netgear Printer Port Driver Set up the Netgear printer port driver Print Server Printing from the Macintosh Windows Printer Port Management Print Port Configuration menu Troubleshooting the Print Server Windows Add Printer Wizard Windows Printer Properties Print Server Print Server Overview of FWG114P v2 Policy-Based VPN Configuration Chapter Virtual Private NetworkingUsing Policies to Manage VPN Traffic Using Automatic Key ManagementIKE Policies’ Automatic Key and Authentication Management IKE Policy Configuration MenuIKE Policy Configuration Fields Field Description GeneralField Description Remote VPN Policy Configuration for Auto Key Negotiation VPN Auto Policy MenuVPN Auto Policy Configuration Fields VPN Auto Policy fields are defined in the following tableAuthenticating Header AH VPN Policy Configuration for Manual Key Exchange Netbios EnableVPN Manual Policy Menu VPN Manual Policy Configuration Fields VPN Manual Policy fields are defined in the following tableValue in its Authentication Algorithm Key In field Value in its Encryption Algorithm Key Out field Certificate Revocation List CRL Walk-Through of Configuration Scenarios on the FWG114P How to Use the VPN Wizard to Configure a VPN TunnelVPN Wizard Start Screen Summary screen below displays Remote IPVPN Wizard Summary Vpnc Scenario 1 Gateway to Gateway with Preshared Secrets 10 VPN Consortium Scenario11 LAN to LAN VPN access from an FWG114P v2 to an FWG114P Scenario 1 FWG114P v2 to FWG114P v2 with Preshared Secrets13 LAN IP configuration menu Set up the IKE Policy illustrated below on the FWG114P 14 Scenario 1 IKE PolicySet up the FWG114P v2 VPN -Auto Policy illustrated below AddressHow to Check VPN Connections Vpnc Scenario 2 Gateway-to-Gateway with Certificates 16 VPN Consortium ScenarioObtain a root certificate Install the trusted CA certificate for the Trusted Root CAScenario 2 FWG114P v2 to FWG114P v2 with Certificates Create a certificate request for the FWG114PFWG114P Highlight, copy and paste this data into a text file 19 Self Certificate Requests table 20 Self Certificates table Set up Certificate Revocation List CRL checking Summary Configuration ProfileNetgear VPN Client to FWG114P Step-By-Step Configuration of FWG114P v2 Gateway 22 Addressing and Subnet Used for Examples23 Netgear FWG114P v2 IKE Policy Configuration Virtual Private Networking 24 VPN Auto Policy settings Virtual Private Networking Step-By-Step Configuration of the Netgear VPN Client Install the Netgear VPN Client Software on the PC Configure the Connection Network SettingsConfigure the Connection Identity Settings 27 My IdentityThis example, enter this pre-shared key in this field Select the Enable Perfect Forward Secrecy PFS check boxClick Pre-Shared Key Hr5xb84l6aa9r6Configure the Connection Security Policy 31 Connection Security Policy Authentication Phase32 Connection Security Policy Key Exchange Phase Check the Encapsulation Protocol ESP check boxConfigure the Global Policy Settings Save the VPN Client SettingsChoose FWG114P Testing the VPN ConnectionFrom the Client PC to the FWG114P Monitoring the PC VPN Connection From the FWG114P v2 to the Client PCViewing the FWG114P v2 VPN Status and Log Information 35 Connection Monitor screen36 FWG114P v2 VPN Status screen Chapter Maintenance Viewing Wireless Firewall/Print Server Status InformationRouter Status screen shows the following parameters Status FieldsDhcp Connection Status Fields Click WAN Status to display the WAN connection statusThis screen shows the following statistics Router Statistics Fields Click Show Statistics to display router usage statisticsConnection Status action buttons Viewing a List of Attached Devices WAN Status action buttons are described in TableConfiguration File Management Upgrading the Router SoftwareRestoring and Backing Up the Configuration Settings Backup menuChanging the Administrator Password Erasing the ConfigurationMaintenance Connect Automatically, as Required Chapter Advanced ConfigurationUsing the WAN Setup Options Setting Up a Default DMZ Server Respond to Ping on Internet WAN PortSetting the WAN Port Speed How to Configure Dynamic DNSSetting the MTU Size 10-4 Advanced Configuration Using the LAN IP Setup Options Configuring LAN TCP/IP Setup Parameters10-6 Advanced Configuration Using the Router as a Dhcp server Using Address ReservationConfiguring Static Routes Static Route Entry and Edit Menu Enabling Remote Management Access Using Universal Plug and Play UPnP UPnP MenuAdvanced Wireless Settings Advanced Wireless Settings menuFragmentation Length WMM supportRTS Threshold Beacon Interval10-14 Advanced Configuration Basic Functioning Chapter TroubleshootingPower LED Not On LEDs Never Turn Off LAN or Internet Port LEDs Not OnTroubleshooting the Web Configuration Interface Troubleshooting the ISP Connection Click on OK You should see a message like this one Troubleshooting a TCP/IP Network Using a Ping UtilityTesting the LAN Path to Your Router If the path is working, you see this messageTesting the Path from Your Computer to a Remote Device If the path is not working, you see this messageRestoring the Default Configuration and Password Problems with Date and Time11-8 Troubleshooting Protocols PPP over Ethernet PPPoE Appendix a Technical SpecificationsData and Routing Protocols10BASE-T or 100BASE-Tx, RJ-45 WirelessInterface Specifications Antenna External detachable 5 dBi omnidirectionalRelated Publications Basic Router Concepts What is a Router?Appendix B Networks, Routing, and Firewall Basics Is normally written as Routing Information ProtocolIP Addresses and the Internet Three Main Address Classes Combined with NetmaskSubnet Addressing EqualsExample of Subnetting a Class B Address Netmask Notation Translation Table for One Octet Netmask FormatsSingle IP Address Operation Using NAT Private IP AddressesSingle IP Address Operation Using NAT Domain Name Server MAC Addresses and Address Resolution ProtocolRelated Documents IP Configuration by Dhcp Internet Security and FirewallsEthernet Cabling What is a Firewall?Denial of Service Attack Stateful Packet InspectionTable B-1 UTP Ethernet cable wiring, straight-through Category 5 Cable QualityInside Twisted Pair Cables Figure B-1illustrates straight-through twisted pair cableUplink Switches, Crossover Cables, and MDI/MDIX Switching Networks, Routing, and Firewall Basics Networks, Routing, and Firewall Basics Appendix C Preparing Your Network Preparing Your Computers for TCP/IP NetworkingConfiguring Windows 95, 98, and Me for TCP/IP Networking Install or Verify Windows Networking ComponentsPreparing Your Network Enabling Dhcp to Automatically Configure TCP/IP Settings Selecting Windows’ Internet Access MethodVerifying TCP/IP Properties Configuring Windows NT, 2000 or XP for IP NetworkingInstalling or Verifying Windows Networking Components From the Apple menu, select Control Panels, then TCP/IP Configuring the Macintosh for TCP/IP NetworkingMacOS 8.6 or MacOS Verifying TCP/IP Properties for Macintosh Computers Verifying the Readiness of Your Internet Account Are Login Protocols Used?What Is Your Configuration Information? Mail.xxx.yyy.com Preparing Your Network Restarting the Network Field List Appendix D Firewall Log FormatsAction List Outbound LogFormat is Inbound LogOther IP Traffic Router Operation Operations that the router initiates are logged Format isCommon attacks and scans are logged Other Connections and Traffic to this RouterDoS Attack/Scan Datetimepkttype Srcip Dstipaction All Web Sites and News Groups Visited Access Block SiteSystem Admin Sessions Policy Administration LOG Date Time Event Direction Service DescriptionFirewall Log Formats Infrastructure Mode Appendix E Wireless Networking BasicsWireless Networking Overview This chapter provides an overview of Wireless networkingNetwork Name Extended Service Set Identification Essid Authentication and WEP Data EncryptionAd Hoc Mode Peer-to-Peer Workgroup Authentication Open System AuthenticationShared Key Authentication Figure E-1 Open system authenticationFigure E-2 Shared key authentication Overview of WEP ParametersKey Size Wireless Channels WEP Configuration OptionsWPA Wireless Security How Does WPA Compare to WEP? What are the Key Features of WPA Security? How Does WPA Compare to Ieee 802.11i?Wireless Networking Basics Login Authentication Figure E-3 WPA OverviewAccess point replies with an EAP-request identity message Figure E-4 802.1x Authentication SequenceWPA Data Encryption Key Management Temporal Key Integrity Protocol Tkip Is WPA Perfect? Product Support for WPAOpen system, then 802.1x EAP with Radius or preshared key WPA two-phase authenticationNew WPA information element MichaelChanges to Wireless Client Programs What is a VPN? Appendix F Virtual Private NetworkingIPSec Components What is IPSec and How Does It Work?IPSec Security Features IPSec contains the following elementsEncapsulating Security Payload ESP Authentication Header AH IKE Security AssociationMode Understand the Process Before You Begin Key ManagementVpnc Example Network Interface Addressing VPN Process OverviewInterfaces and Addresses Subnet Addressing Setting Up a VPN Tunnel Between GatewaysWAN Internet/Public and LAN Internal/Private Addressing IPSec Security Association IKE VPN Tunnel Negotiation Steps Vpnc IKE Phase I Parameters Vpnc IKE Security ParametersAdditional Reading Testing and TroubleshootingVpnc IKE Phase II Parameters Virtual Private Networking Configuration Template Table G-1 SummaryFigure G-2 Netgear FVS318 VPN Settings Pre-Configuration Log in toFigure G-3 Netgear FVS318 VPN Settings part 1 Main Mode Figure G-4 Netgear FVS318 VPN Settings part 2 Main Mode Step-By-Step Configuration of FWG114P Gateway B Figure G-5 Netgear FVS328 IKE Policy Configuration PartFigure G-6 Netgear FVS328 IKE Policy Configuration Part Figure G-8 Netgear FVS328 VPN Auto Policy part Figure G-9 Netgear FWG114P v2 VPN Auto Policy part Test the VPN Connection Netgear VPN Configuration FVS318 or FVM318 to FWG114P Table H-1 Summary Table H-1 Step-By-Step Configuration of FVS318 or FVM318 Gateway a Figure H-2 Dynamic DNS Setup menuFigure H-3 Netgear FVS318 VPN Settings Pre-Configuration Figure H-4 Netgear FVS318 VPN Settings part 1 Main Mode Figure H-5 Netgear FVS318 VPN Settings part 2 Main Mode Step-By-Step Configuration of FVS328 Gateway B Figure H-6 Netgear FVS328 IKE Policy Configuration PartFigure H-7 Netgear FVS328 IKE Policy Configuration Part Figure H-9 Netgear FVS328 VPN Auto Policy part Figure H-10 Netgear FVS328 VPN Auto Policy part Test the VPN Connection 201-10301-02, May Glossary 802.11e Standard Bandwidth Collision avoidance DNS Domain Name System Encryption Key Gateway IP Internet Protocol address PHY Plug and Play Satellite broadband TCP/IP War Driving Wi-Fi Protected Access and Ieee 802.11i Comparison Wi-Fi Protected Access in Mixed Mode Deployment