User manual NETGEAR FVS124G RM

[. . . ] Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports FVS124G NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10085-01 March 2005 202-10085-01, March 2005 © 2005 by NETGEAR, Inc. All rights reserved. Trademarks NETGEAR is a trademark of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. [. . . ] It should not be necessary to make any changes. Figure 7-8: FVX538-to-FVS124G IKE screen Virtual Private Networking 202-10085-01, March 2005 7-7 Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 13. In the VPN Policies menu, the 'to_fvs' VPN policy will appear in the table. Figure 7-9: FVX538 VPN Policies screen 7-8 202-10085-01, March 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 14. You can view the VPN parameters by selecting 'to_fvs' and clicking Edit. It should not be necessary to make any changes. Figure 7-10: FVX538-to-FVS124G VPN screen Configuring the FVS124G 1. 3. Select the VPN Wizard Give the client connection a name, such as to_fvx. Enter a value for the pre-shared key. Virtual Private Networking 202-10085-01, March 2005 7-9 Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 4. Select 'a remote VPN gateway'. Figure 7-11: VPN Wizard start page 5. Enter the WAN IP address of the remote FVX538. Figure 7-12: WAN IP address of remote FVX538 7. Click Next. 7-10 202-10085-01, March 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 8. Enter the LAN IP address and subnet mask of the remote FVX538. Figure 7-13: LAN IP address and subnet mask of remote FVX538 9. Click Next. 10. Click Done to create the 'to_fvx' IKE and VPN policies. Testing the Connection 1. 2. From a PC on either firewall's LAN, try to ping a PC on the other firewall's LAN. For additional status and troubleshooting information, view the VPN log and status menu in the FVX538 or FVS124G. Creating a VPN Connection: Netgear VPN Client to FVS124G This section describes how to configure a VPN connection between a Windows PC and the FVS124G VPN Firewall. Using the FVS124G's VPN Wizard, we will create a single set of policies (IKE and VPN) that will allow up to 50 remote PCs to connect from locations in which their IP addresses are unknown in advance. The PCs may be directly connected to the Internet or may be behind NAT routers. If more PCs are to be connected, an additional policy or policies must be created. Since the PC's IP address is assumed to be unknown, the PC must always be the Initiator of the connection. Virtual Private Networking 202-10085-01, March 2005 7-11 Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports This procedure was developed and tested using: · · · Netgear FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports with version 1. 0 firmware Netgear VPN Client version 10. 3. 5 (Build 6) NAT router: Netgear FR114P with version 1. 5_09 firmware Configuring the FVS124G 1. 4. Select the VPN Wizard Give the client connection a name, such as home. Click Done to create the 'home' IKE and VPN policies. Configuring the VPN Client 1. Right-click on the VPN client icon Editor. in your Windows toolbar and select the Security Policy 7-12 202-10085-01, March 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 2. In the upper left of the Policy Editor window, click the New Document icon to open a New Connection. Figure 7-15: New Client Connection screen Virtual Private Networking 202-10085-01, March 2005 7-13 Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 3. Give the New Connection a name, such as to_FVS. Figure 7-16: New connection named 4. 7. In the Remote Party Identity section, select ID Type of IP Subnet. Enter the LAN IP Subnet Address and Subnet Mask of the FVS124G's LAN. Under ID Type, select 'Domain Name' and 'Gateway IP Address'. 7-14 202-10085-01, March 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 8. For Domain Name, enter 'fvs_local. com' and enter the WAN IP Address of the FVS124G. Figure 7-17: Remote client info 9. In the left frame, click on My Identity. 10. Under ID Type, select 'Domain Name'. The value entered under Domain Name will be of the form '<name><XY>. fvs_remote. com', where each user must use a different variation on the Domain Name entered here. The <name> is the policy name used in the FVS124G configuration. Up to fifty user variations can be served by one policy. Virtual Private Networking 202-10085-01, March 2005 7-15 Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 12. [. . . ] A method for establishing a virtual private network (VPN) by embedding Microsoft's network protocol into Internet packets. Protocol A set of rules for communication between devices on a network. PSTN Public Switched Telephone Network. -8 202-10085-01, March 2005 Glossary Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports Q QoS See "Quality of Service" Quality of Service QoS is a networking term that specifies a guaranteed level of throughput. Throughput is the amount of data transferred from one device to another or processed in a specified amount of time - typically, throughputs are measured in bytes per second (Bps). R RADIUS Short for Remote Authentication Dial-In User Service, RADIUS is an authentication system. Using RADIUS, you must enter your user name and password before gaining access to a network. This information is passed to a RADIUS server, which checks that the information is correct, and then authorizes access. [. . . ]