Document Outline

• Chapter 1 About This Manual
  • Audience, Scope, Conventions, and Formats
  • How to Use This Manual
  • How to Print this Manual
• Chapter 2 Introduction
  • Key Features of the VPN Firewall
    • Dual WAN Ports for Increased Reliability or Outbound Load Balancing
    • A Powerful, True Firewall with Content Filtering
    • Security
    • Autosensing Ethernet Connections with Auto Uplink
    • Extensive Protocol Support
    • Easy Installation and Management
    • Maintenance and Support
  • Package Contents
    • The Router’s Front Panel
    • The Router’s Rear Panel
    • The Router’s IP Address, Login Name, and Password
    • Logging into the Router
    • Default Factory Settings
  • NETGEAR Related Products
• Chapter 3 Network Planning
  • Overview of the Planning Process
    • Inbound Traffic
    • Virtual Private Networks (VPNs)
    • The Rollover Case for Firewalls With Dual WAN Ports
    • The Load Balancing Case for Firewalls With Dual WAN Ports
  • Inbound Traffic
    • Inbound Traffic to Single WAN Port (Reference Case)
    • Inbound Traffic to Dual WAN Port Systems
      • Inbound Traffic: Dual WAN Ports for Improved Reliability
      • Inbound Traffic: Dual WAN Ports for Load Balancing
  • Virtual Private Networks (VPNs)
    • VPN Road Warrior (Client-to-Gateway)
      • VPN Road Warrior: Single Gateway WAN Port (Reference Case)
      • VPN Road Warrior: Dual Gateway WAN Ports for Improved Reliability
      • VPN Road Warrior: Dual Gateway WAN Ports for Load Balancing
    • VPN Gateway-to-Gateway
      • VPN Gateway-to-Gateway: Single Gateway WAN Ports (Reference Case)
      • VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Improved Reliability
      • VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Load Balancing
    • VPN Telecommuter (Client-to-Gateway Through a NAT Router)
      • VPN Telecommuter: Single Gateway WAN Port (Reference Case)
      • VPN Telecommuter: Dual Gateway WAN Ports for Improved Reliability
      • VPN Telecommuter: Dual Gateway WAN Ports for Load Balancing
• Chapter 4 Connecting the FVS124G to the Internet
  • What You Will Need to Do Before You Begin
    • Cabling and Computer Hardware Requirements
    • Computer Network Configuration Requirements
    • Internet Configuration Requirements
    • Where Do I Get the Internet Configuration Parameters?
    • Record Your Internet Connection Information
  • Connecting the FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports
    • Step 1: Physically Connect the VPN Firewall to Your Network (Required)
    • Step 2: Log in to the VPN Firewall (Required)
    • Step 3: Configure the Internet Connections to Your ISPs (Required)
      • Manually Configuring Your Internet Connection
      • Programming the Traffic Meter (if Desired)
    • Step 4: Configure the WAN Mode (Required for Dual WAN)
      • Rollover Setup
      • Load Balancing (and Protocol Binding) Setup
    • Step 5: Configure Dynamic DNS (If Needed)
    • Step 6: Configure the WAN Options (If Needed)
• Chapter 5 LAN Configuration
  • Using the LAN IP Setup Options
    • Configuring LAN TCP/IP Setup Parameters
    • Using the Firewall as a DHCP server
    • Using Address Reservation
    • Multi Home LAN IPs
  • Configuring Static Routes
• Chapter 6 Firewall Protection and Content Filtering
  • Firewall Protection and Content Filtering Overview
  • Using Rules to Block or Allow Specific Kinds of Traffic
    • Services-Based Rules
      • Inbound Rules (Port Forwarding)
      • Outbound Rules (Service Blocking)
      • Customized Services
      • Quality of Service (QoS) Priorities
    • Managing Groups and Hosts
    • Using a Schedule to Block or Allow Specific Traffic
    • Time Zone
  • Block Sites
  • Source MAC Filtering
  • Port Triggering
  • Getting E-Mail Notifications of Event Logs and Alerts
    • Syslog
    • Viewing Logs of Web Access or Attempted Web Access
  • Administrator Information
• Chapter 7 Virtual Private Networking
  • Dual WAN Port Systems
    • Rollover vs. Load Balancing Mode
    • Fully Qualified Domain Names
  • Creating a VPN Connection: Between FVX538 and FVS124G
    • Configuring the FVX538
    • Configuring the FVS124G
    • Testing the Connection
  • Creating a VPN Connection: Netgear VPN Client to FVS124G
    • Configuring the FVS124G
    • Configuring the VPN Client
    • Testing the Connection
• Chapter 8 Router and Network Management
  • Performance Management
    • Bandwidth Capacity
    • VPN Firewall Features That Reduce Traffic
      • Service Blocking
      • Block Sites
      • Source MAC Filtering
    • VPN Firewall Features That Increase Traffic
      • Port Forwarding
      • Port Triggering
      • VPN Tunnels
    • Using QoS to Shift the Traffic Mix
    • Tools for Traffic Management
  • Administrator and Guest Access Authorization
    • Changing the Passwords and Login Timeout
    • Enabling Remote Management Access
    • Command Line Interface
  • Event Alerts
    • WAN Port Rollover
    • Traffic Limits Reached
    • Login Failures and Attacks
  • Monitoring
    • Viewing VPN Firewall Status and Time Information
      • Firewall Status
      • Time Information
    • WAN Ports
      • WAN Port Connection Status
      • Dynamic DNS Status
      • Internet Traffic Information
    • LAN Ports and Attached Devices
      • Known PCs and Devices
      • DHCP Log
      • Port Triggering Status
    • Firewall
    • VPN Tunnels
    • SNMP
    • Diagnostics
  • Configuration File Management
    • Restoring and Backing Up the Configuration
    • Upgrading the Firewall Software
    • Erasing the Configuration (Factory Defaults Reset)
• Chapter 9 Troubleshooting
  • Basic Functioning
    • Power LED Not On
    • LEDs Never Turn Off
    • LAN or Internet Port LEDs Not On
  • Troubleshooting the Web Configuration Interface
  • Troubleshooting the ISP Connection
  • Troubleshooting a TCP/IP Network Using a Ping Utility
    • Testing the LAN Path to Your Firewall
    • Testing the Path from Your PC to a Remote Device
  • Restoring the Default Configuration and Password
  • Problems with Date and Time
• Appendix A Technical Specifications
• Appendix B Network, Routing, Firewall, and Basics
  • Related Publications
  • Basic Router Concepts
    • What is a Router?
    • Routing Information Protocol
  • IP Addresses and the Internet
    • Netmask
    • Subnet Addressing
    • Private IP Addresses
  • Single IP Address Operation Using NAT
    • MAC Addresses and Address Resolution Protocol
    • Related Documents
    • Domain Name Server
  • IP Configuration by DHCP
  • Internet Security and Firewalls
    • What is a Firewall?
      • Stateful Packet Inspection
      • Denial of Service Attack
  • Ethernet Cabling
    • Category 5 Cable Quality
    • Inside Twisted Pair Cables
    • Uplink Switches, Crossover Cables, and MDI/MDIX Switching
• Appendix C Preparing Your Network
  • Preparing Your Computers for TCP/IP Networking
  • Configuring Windows 95, 98, and Me for TCP/IP Networking
    • Install or Verify Windows Networking Components
    • Enabling DHCP to Automatically Configure TCP/IP Settings
    • Selecting Windows’ Internet Access Method
    • Verifying TCP/IP Properties
  • Configuring Windows NT4, 2000 or XP for IP Networking
    • Install or Verify Windows Networking Components
    • Enabling DHCP to Automatically Configure TCP/IP Settings
    • DHCP Configuration of TCP/IP in Windows XP
    • DHCP Configuration of TCP/IP in Windows 2000
    • DHCP Configuration of TCP/IP in Windows NT4
    • Verifying TCP/IP Properties for Windows XP, 2000, and NT4
  • Configuring the Macintosh for TCP/IP Networking
    • MacOS 8.6 or 9.x
    • MacOS X
    • Verifying TCP/IP Properties for Macintosh Computers
  • Verifying the Readiness of Your Internet Account
    • Are Login Protocols Used?
    • What Is Your Configuration Information?
    • Obtaining ISP Configuration Information for Windows Computers
    • Obtaining ISP Configuration Information for Macintosh Computers
  • Restarting the Network
• Appendix D Virtual Private Networking
  • What is a VPN?
  • What Is IPSec and How Does It Work?
    • IPSec Security Features
    • IPSec Components
    • Encapsulating Security Payload (ESP)
    • Authentication Header (AH)
    • IKE Security Association
      • Mode
    • Key Management
  • Understand the Process Before You Begin
  • VPN Process Overview
    • Network Interfaces and Addresses
      • Interface Addressing
      • Firewalls
    • Setting Up a VPN Tunnel Between Gateways
  • VPNC IKE Security Parameters
    • VPNC IKE Phase I Parameters
    • VPNC IKE Phase II Parameters
  • Testing and Troubleshooting
  • Additional Reading
• Glossary
  • List of Glossary Terms
  • Numeric
  • A
  • B
  • C
  • D
  • E
  • G
  • I
  • L
  • M
  • P
  • Q
  • R
  • S
  • T
  • U
  • W