User manual NETGEAR FVS338 V1.0 REFERENCE MANUAL

[. . . ] Reference Manual for the ProSafe VPN Firewall 50 FVS338 NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10046-01 Version 1. 0 January 2005 January 2005 © 2005 by NETGEAR, Inc. All rights reserved. Trademarks NETGEAR is a trademark of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. [. . . ] Click WAN1 to bind this connection to the WAN1 port. Figure 8-2: WAN IP address of remote FVS338 8. Click Next. 8-2 January 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 50 FVS338 9. Enter the LAN IP address and subnet mask of the remote FVS338. Figure 8-3: LAN IP address and subnet mask of remote FVX538 10. Click Done to create the 'to_fvs' IKE and VPN policies. In the IKE Policies menu, the 'to_fvs' IKE policy will appear in the table. Figure 8-4: IKE Policies Virtual Private Networking January 2005 8-3 Reference Manual for the ProSafe VPN Firewall 50 FVS338 12. You can view the IKE parameters by selecting 'to_fvs' and clicking Edit. It should not be necessary to make any changes. Figure 8-5: FVX538-to-FVS338 IKE screen 8-4 January 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 50 FVS338 13. In the VPN Policies menu, the 'to_fvs' VPN policy will appear in the table. Figure 8-6: FVX538 VPN Policies screen Virtual Private Networking January 2005 8-5 Reference Manual for the ProSafe VPN Firewall 50 FVS338 14. You can view the VPN parameters by selecting 'to_fvs' and clicking Edit. It should not be necessary to make any changes. Figure 8-7: FVX538-to-FVS338 VPN screen Configuring the FVS338 1. 3. Select the VPN Wizard Give the client connection a name, such as to_fvx. Enter a value for the pre-shared key. 8-6 January 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 50 FVS338 4. Select 'a remote VPN gateway'. Figure 8-8: VPN Wizard start page 5. Enter the WAN IP address of the remote FVX538. Figure 8-9: WAN IP address of remote FVX538 7. Click Next. Virtual Private Networking January 2005 8-7 Reference Manual for the ProSafe VPN Firewall 50 FVS338 8. Enter the LAN IP address and subnet mask of the remote FVX538. Figure 8-10: LAN IP address and subnet mask of remote FVX538 9. Click Next. 10. Click Done to create the 'to_fvx' IKE and VPN policies. Testing the Connection 1. 2. From a PC on either firewall's LAN, try to ping a PC on the other firewall's LAN. For additional status and troubleshooting information, view the VPN log and status menu in the FVX538 or FVS338. Creating a VPN Connection: Netgear VPN Client to FVS338 This section describes how to configure a VPN connection between a Windows PC and the FVS338 VPN firewall. Using the FVS338's VPN Wizard, we will create a single set of policies (IKE and VPN) that will allow up to 50 remote PCs to connect from locations in which their IP addresses are unknown in advance. The PCs may be directly connected to the Internet or may be behind NAT routers. If more PCs are to be connected, an additional policy or policies must be created. Since the PC's IP address is assumed to be unknown, the PC must always be the Initiator of the connection. 8-8 January 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 50 FVS338 This procedure was developed and tested using: · · · Netgear FVS338 ProSafe VPN Firewall 50 with version 1. 6. 11 firmware Netgear VPN Client version 10. 3. 5 (Build 6) NAT router: Netgear FR114P with version 1. 5_09 firmware Configuring the FVS338 1. 4. Select the VPN Wizard Give the client connection a name, such as home. Click Done to create the 'home' IKE and VPN policies. Configuring the VPN Client 1. Right-click on the VPN client icon Editor. in your Windows toolbar and select the Security Policy Virtual Private Networking January 2005 8-9 Reference Manual for the ProSafe VPN Firewall 50 FVS338 2. In the upper left of the Policy Editor window, click the New Document icon to open a New Connection. Figure 8-12: New Client Connection screen 8-10 January 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 50 FVS338 3. Give the New Connection a name, such as to_FVS. to_FVS Figure 8-13: New connection named 4. 7. In the Remote Party Identity section, select ID Type of IP Subnet. Enter the LAN IP Subnet Address and Subnet Mask of the FVS338's LAN. Under ID Type, select 'Domain Name' and 'Gateway IP Address'. Virtual Private Networking January 2005 8-11 Reference Manual for the ProSafe VPN Firewall 50 FVS338 8. For Domain Name, enter 'fvs_local. com' and enter the WAN IP Address of the FVS338. to_FVS s Figure 8-14: Remote client info 9. In the left frame, click on My Identity. 10. [. . . ] A method for establishing a virtual private network (VPN) by embedding Microsoft's network protocol into Internet packets. Protocol A set of rules for communication between devices on a network. -8 January 2005 Glossary Reference Manual for the ProSafe VPN Firewall 50 FVS338 PSTN Public Switched Telephone Network. Q QoS See "Quality of Service" Quality of Service QoS is a networking term that specifies a guaranteed level of throughput. Throughput is the amount of data transferred from one device to another or processed in a specified amount of time - typically, throughputs are measured in bytes per second (Bps). R RADIUS Short for Remote Authentication Dial-In User Service, RADIUS is an authentication system. Using RADIUS, you must enter your user name and password before gaining access to a network. This information is passed to a RADIUS server, which checks that the information is correct, and then authorizes access. [. . . ]