NETGEAR FVS318 User Manual

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

NETGEAR, Inc.

4500 Great America Parkway

Santa Clara, CA 95054 USA

Phone 1-888-NETGEAR

SM-FVS318NA-0

April 2002

© 2002 by NETGEAR, Inc. All rights reserved.

Trademarks

NETGEAR and Auto Uplink are trademarks or registered trademarks of Netgear, Inc.

Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.

Other brand and product names are registered trademarks or trademarks of their respective holders.

Statement of Conditions

In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice.

NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.

Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to

part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

•Reorient or relocate the receiving antenna.

•Increase the separation between the equipment and receiver.

•Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

•Consult the dealer or an experienced radio/TV technician for help.

EN 55 022 Declaration of Conformance

This is to certify that the Model FVS318 Cable/DSL ProSafe VPN Firewall is shielded against the generation of radio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by the application of EN 55 022 Class B (CISPR 22).

ii

Bestätigung des Herstellers/Importeurs

Es wird hiermit bestätigt, daß das Model FVS318 Cable/DSL ProSafe VPN Firewall gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.

Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.

Certificate of the Manufacturer/Importer

It is hereby certified that the Model FVS318 Cable/DSL ProSafe VPN Firewall has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating instructions.

Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been granted the right to test the series for compliance with the regulations.

Voluntary Control Council for Interference (VCCI) Statement

This equipment is in the second category (information equipment to be used in a residential area or an adjacent area thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas.

When used near a radio or TV receiver, it may become the cause of radio interference.

Read instructions for correct handling.

Technical Support

Refer to the Support Information Card that shipped with your Model FVS318 Cable/DSL ProSafe VPN Firewall.

World Wide Web

NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL) http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer

or Netscape are required.

iii

iv

Contents

About This Guide
Typographical Conventions .............................................................................................	xv
Special Message Formats ...............................................................................................	xvi
Technical Support ............................................................................................................	xvi
Related Publications ........................................................................................................	xvi
Chapter 1
Introduction
About the FVS318 VPN Firewall ....................................................................................	1-1
Key Features ..................................................................................................................	1-1
A Powerful, True Firewall .........................................................................................	1-1
Virtual Private Networking (VPN) .............................................................................	1-2
Content Filtering .......................................................................................................	1-2
Configurable Ethernet Connection ...........................................................................	1-2
Protocol Support ......................................................................................................	1-3
Easy Installation and Management ..........................................................................	1-3
Maintenance and Support ........................................................................................	1-4
Chapter 2
Setting Up the Hardware
Package Contents ..........................................................................................................	2-1
Local Network Hardware Requirements .........................................................................	2-2
PC Requirements ..............................................................................................	2-2
Access Device Requirement .............................................................................	2-2
The Firewall’s Front Panel ..............................................................................................	2-3
The Firewall’s Rear Panel ..............................................................................................	2-4
Connecting the Firewall ..................................................................................................	2-4
Connecting to Your Internet Access Device .............................................................	2-5
Connecting to your Local Ethernet Network .............................................................	2-5
Connecting the Power Adapter ................................................................................	2-6
Verifying Connections .....................................................................................................	2-6

Contents

v

Chapter 3

Preparing Your Network

Preparing Your Personal Computers for IP Networking .................................................	3-1
Configuring Windows 95, 98, and ME for IP Networking ................................................	3-2
Install or Verify Windows Networking Components ..................................................	3-2
Assign TCP/IP configuration by DHCP ....................................................................	3-4
Selecting Internet Access Method ............................................................................	3-4
Verifying TCP/IP Properties .....................................................................................	3-5
Configuring Windows NT or 2000 for IP Networking ......................................................	3-5
Install or Verify Windows Networking Components ..................................................	3-5
Verifying TCP/IP Properties .....................................................................................	3-6
Configuring the Macintosh for IP Networking .................................................................	3-6
MacOS 8.6 or 9.x ...............................................................................................	3-7
MacOS X ...........................................................................................................	3-7
Verifying TCP/IP Properties (Macintosh) ..................................................................	3-8
Your Internet Account .....................................................................................................	3-8
Login Protocols ........................................................................................................	3-9
Account Information .................................................................................................	3-9
Obtaining ISP Configuration Information (Windows) .......................................	3-10
Obtaining ISP Configuration Information (Macintosh) .....................................	3-11
Restarting the Network .................................................................................................	3-11
Ready for Configuration ................................................................................................	3-12
Chapter 4
Basic Configuration
Accessing the Web Configuration Manager ...................................................................	4-1
Configuration using the Setup Wizard ............................................................................	4-4
Configuring for Dynamic IP Account ........................................................................	4-5
Configuring for Fixed IP Account .............................................................................	4-6
Configuring for an Account with Login .....................................................................	4-7
Manual Configuration .....................................................................................................	4-8
Completing the Configuration .........................................................................................	4-9
Chapter 5
Configuring Security Features
Security Log ....................................................................................................................	5-2
Block Sites ......................................................................................................................	5-3

vi

Contents

Schedule .........................................................................................................................	5-5
Time Zone ..........................................................................................................	5-6
E-Mail .............................................................................................................................	5-7
Chapter 6
Virtual Private Networking
What is a VPN ................................................................................................................	6-2
Accessing Network Resources from a VPN Client PC ......................................	6-3
Linking Two Networks Together .........................................................................	6-4
Planning the VPN .....................................................................................................	6-4
Configuring a VPN Between Two LANs .........................................................................	6-4
Check the LAN Address Ranges .......................................................................	6-5
Configure the First Firewall ................................................................................	6-5
Configure the Second Firewall ..........................................................................	6-8
Check the VPN Connection ...............................................................................	6-8
Using the VPN Connection ..............................................................................	6-10
Configuring a VPN Between a LAN and a Remote PC ................................................	6-10
Configuring the Firewall .........................................................................................	6-10
Installing the VPN Client Software .........................................................................	6-13
Configuring the Client Software .............................................................................	6-14
Open the Security Policy Editor .......................................................................	6-14
Create a VPN Connection ...............................................................................	6-14
Configure the Security Policy ..........................................................................	6-15
Configure the VPN Client Identity ....................................................................	6-17
Configure VPN Client Authentication Proposal ...............................................	6-18
Configure VPN Client Key Exchange Proposal ...............................................	6-19
Save the VPN Client Settings ..........................................................................	6-19
Check the VPN Connection .............................................................................	6-20
Monitoring the VPN Connection using SafeNet Tools .....................................	6-20
Using the VPN Connection ..............................................................................	6-22
Accessing Remote Resources across a VPN ..............................................................	6-23
Other Topics .................................................................................................................	6-23
Deleting a Security Association ..............................................................................	6-23
Security Association Notes ....................................................................................	6-23
Alternative: Using Manual Keying ..........................................................................	6-24

Contents

vii

Chapter 7

Maintenance

System Status .................................................................................................................	7-1
Attached Devices ............................................................................................................	7-4
Changing the Administration Password ..........................................................................	7-4
Configuration File Settings Management .......................................................................	7-5
Restore and Backup the Configuration ....................................................................	7-6
Erase the Configuration ...........................................................................................	7-6
Router Upgrade ..............................................................................................................	7-7
Chapter 8
Advanced Configuration
Configuring for Port Forwarding to Local Servers ..........................................................	8-2
Default DMZ Server .................................................................................................	8-3
Supporting Internet Services, Applications, or Games .............................................	8-4
Local Web and FTP Server Example ................................................................	8-4
Tip: Multiple Computers for Half Life, KALI or Quake III ....................................	8-5
Respond to Ping on Internet WAN Port ...................................................................	8-5
Dynamic DNS .................................................................................................................	8-6
LAN IP Setup ..................................................................................................................	8-7
LAN TCP/IP Setup ...................................................................................................	8-7
MTU Size .................................................................................................................	8-8
DHCP .......................................................................................................................	8-9
Use router as DHCP server ...............................................................................	8-9
Reserved IP adresses .....................................................................................	8-10
Static Routes ................................................................................................................	8-10
Static Route Example .............................................................................................	8-12
Remote Management ...................................................................................................	8-13
Chapter 9
Troubleshooting
Basic Functioning ...........................................................................................................	9-1
Power LED Not On ...................................................................................................	9-2
Test LED Never Turns On or Test LED Stays On .....................................................	9-2
LAN or WAN Port LEDs Not On ...............................................................................	9-3
Troubleshooting the Web Configuration Interface ..........................................................	9-4
Troubleshooting the ISP Connection ..............................................................................	9-5

viii

Contents

Troubleshooting a TCP/IP Network Using a Ping Utility	.................................................9-6
Testing the LAN Path to Your Firewall ......................................................................	9-6
Testing the Path from Your PC to a Remote Device ................................................	9-7
Restoring the Default Configuration and Password ........................................................	9-8
Using the Default Reset button ................................................................................	9-8
Problems with Date and Time .........................................................................................	9-8
Troubleshooting the VPN Connection ..........................................................................	9-10
Appendix A
Technical Specifications
Appendix B
Networks, Routing, and Firewall Basics
Basic Router Concepts ..................................................................................................	B-1
What is a Router? ...................................................................................................	B-1
Routing Information Protocol ...................................................................................	B-2
IP Addresses and the Internet .................................................................................	B-2
Netmask ..................................................................................................................	B-4
Subnet Addressing ..................................................................................................	B-5
Private IP Addresses ...............................................................................................	B-7
Single IP Address Operation Using NAT .................................................................	B-8
MAC Addresses and Address Resolution Protocol .................................................	B-9
Domain Name Server ..............................................................................................	B-9
IP Configuration by DHCP ....................................................................................	B-10
Ethernet Cabling ..........................................................................................................	B-10
Uplink Switches and Crossover Cables .................................................................	B-11
Cable Quality ..........................................................................................................	B-11
Internet Security and Firewalls .....................................................................................	B-11
What is a Firewall? ................................................................................................	B-12
Stateful Packet Inspection .....................................................................................	B-12
Denial of Service Attack ........................................................................................	B-12
Glossary
Index

Contents

ix

	x	Contents

Figure 2-1.	FVS318 Front Panel ................................................................................	2-3
Figure 2-2.	FVS318 Rear Panel .................................................................................	2-4
Figure 4-1.	Login window ...........................................................................................	4-2
Figure 4-2.	Browser-based configuration main menu ................................................	4-3
Figure 4-3.	Setup Wizard menu for Dynamic IP address ...........................................	4-5
Figure 4-4.	Setup Wizard menu for Fixed IP address ................................................	4-6
Figure 4-5.	Setup Wizard menu for PPPoE login accounts ........................................	4-7
Figure 6-1.	VPN Settings Window ..............................................................................	6-6
Figure 6-2.	VPN Edit menu for IKE ............................................................................	6-6
Figure 6-3.	VPN Settings Window ............................................................................	6-11
Figure 6-4.	VPN Edit menu for connecting with a VPN client ...................................	6-11
Figure 6-5.	VPN Edit menu for Manual Keying ........................................................	6-24
Figure 7-1.	System Status screen ..............................................................................	7-1
Figure 7-2.	Router Statistics screen ...........................................................................	7-3
Figure 7-3.	Attached Devices menu ...........................................................................	7-4
Figure 7-4.	Set Password menu .................................................................................	7-5
Figure 7-5.	Settings Backup menu .............................................................................	7-6
Figure 7-6.	Router Upgrade menu .............................................................................	7-7
Figure 8-1.	Port Forwarding Menu .............................................................................	8-2
Figure 8-2.	LAN IP Setup Menu .................................................................................	8-7
Figure 8-3.	Static Routes Summary Table ................................................................	8-11
Figure 8-4.	Static Route Entry and Edit Menu ..........................................................	8-11
Figure B-1.	Three Main Address Classes ..................................................................	B-3
Figure B-2.	Example of Subnetting a Class B Address .............................................	B-5
Figure B-3.	Single IP Address Operation Using NAT ................................................	B-8

xi

xii

Table 2-1.	LED Descriptions .....................................................................................	2-3
Table 5-1.	Log entry descriptions ..............................................................................	5-2
Table 5-2.	Log action buttons ....................................................................................	5-3
Table 7-1.	Menu 3.2 - System Status Fields .............................................................	7-2
Table 7-2.	Router Statistics Fields ...........................................................................	7-3
Table B-1.	Netmask Notation Translation Table for One Octet .................................	B-6
Table B-2.	Netmask Formats ....................................................................................	B-6
Table B-3.	UTP Ethernet cable wiring, straight-through .........................................	B-10

xiii

xiv

About This Guide

Congratulations on your purchase of the NETGEAR™ Model FVS318 Cable/DSL ProSafe VPN Firewall. A firewall is a special type of router that incorporates features for security. The FVS318 VPN Firewall is a complete security solution that protects your network from attacks and intrusions while allowing secure connections with other trusted users over the Internet.

This guide describes the features of the firewall and provides installation and configuration instructions.

Typographical Conventions

This guide uses the following typographical conventions:

italics	Book titles and UNIX file, command, and directory names.
courier font	Screen text, user-typed command-line entries.
Initial Caps	Menu titles and window and button names.
[Enter]	Named keys in text are shown enclosed in square brackets. The notation
	[Enter] is used for the Enter key and the Return key.
[Ctrl]+C	Two or more keys that must be pressed simultaneously are shown in text
	linked with a plus (+) sign.
ALL CAPS	DOS file and directory names.

About This Guide

xv

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

Special Message Formats

This guide uses the following formats to highlight special messages:

Note: This format is used to highlight information of importance or special interest.

Caution: This format is used to highlight information that will help you prevent equipment failure or loss of data.

Warning: This format is used to highlight information about the possibility of injury or equipment damage.

Danger: This format is used to alert you that there is the potential for incurring an electrical shock if you mishandle the equipment.

Technical Support

For help with any technical issues, contact Customer Support at 1-888-NETGEAR, or visit us on the Web at www.NETGEAR.com. The NETGEAR Web site includes an extensive knowledge base, answers to frequently asked questions, and a means for submitting technical questions online.

Related Publications

As you read this document, you may be directed to various RFC documents for further information. An RFC is a Request For Comment (RFC) published by the Internet Engineering Task Force (IETF), an open organization that defines the architecture and operation of the Internet. The RFC documents outline and define the standard protocols and procedures for the Internet. The documents are listed on the World Wide Web at www.ietf.org and are mirrored and indexed at many other sites worldwide.

xvi	About This Guide

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

For more information about address assignment, refer to the IETF documents RFC 1597, Address Allocation for Private Internets, and RFC 1466, Guidelines for Management of IP Address Space.

For more information about IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT).

About This Guide

xvii

Chapter 1

Introduction

This chapter describes the features of the NETGEAR Model FVS318 Cable/DSL ProSafe VPN Firewall.

About the FVS318 VPN Firewall

The FVS318 VPN Firewall is a complete security solution that protects your network from attacks and intrusions while allowing secure connections with other trusted users over the Internet. Unlike simple Internet sharing routers that rely on NAT for security, the FVS318 uses Stateful Packet Inspection, widely considered as the most effective method of filtering IP traffic, to ensure secure firewall filtering. The FVS318 allows Internet access for up to 253 users, and is capable of eight simultaneous VPN connections.

Key Features

The FVS318 VPN Firewall offers the following features.

A Powerful, True Firewall

Unlike simple Internet sharing NAT routers, the FVS318 VPN Firewall is a true firewall, using stateful packet inspection to defend against hacker attacks. Its firewall features include:

•Denial of Service (DoS) protection

Automatically detects and thwarts Denial of Service (DoS) attacks such as Ping of Death, SYN Flood, LAND Attack and IP Spoofing.

•Blocks unwanted traffic from the Internet to your LAN.

•Blocks access from your LAN to Internet locations that you specify as off-limits

Introduction

1-1

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

•Logs security incidents

The FVS318 VPN Firewall will log security events such as blocked incoming traffic, port scans, attacks, and administrator logins. You can configure the firewall to email the log to you at specified intervals. You can also configure the firewall to send immediate alert messages to your email address or email pager whenever a significant event occurs.

Virtual Private Networking (VPN)

The FVS318 VPN Firewall provides a secure encrypted connection between your local network and remote networks or clients. Its VPN features include

•Supports eight simultaneous VPN connections.

•Supports industry standard VPN protocols

The FVS318 supports standard keying methods (Manual or IKE), standard authentication methods (MD5 and SHA-1), and standard encryption methods (DES, 3DES). It is compatible with many other VPN products.

•Supports up to 168 bit encryption (3DES) for maximum security.

Content Filtering

With its content filtering feature, the FVS318 VPN Firewall prevents objectionable content from reaching your PCs. The FVS318 allows you to control access to Internet content by screening for keywords within Web addresses. You can configure the FVS318 to log and report attempts to access objectional Internet sites.

Configurable Ethernet Connection

With its internal 8-port 10/100 switch, the FVS318 VPN Firewall can connect to either a 10 Mbps standard Ethernet network or a 100 Mbps Fast Ethernet network. The local LAN interface is autosensing and is capable of full-duplex or half-duplex operation.

The firewall incorporates Auto UplinkTM technology. Each LOCAL Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a 'normal' connection (e.g. connecting to a PC) or an 'uplink' connection (e.g. connecting to a switch or hub). That port will then configure itself to the correct configuration. This feature also eliminates the need to worry about crossover cables, as Auto Uplink will accommodate either type of cable to make the right connection.

1-2	Introduction

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

Protocol Support

The FVS318 VPN Firewall supports the Transmission Control Protocol/Internet Protocol (TCP/ IP) and Routing Information Protocol (RIP).

For further information about TCP/IP, refer to Appendix B, “Networks, Routing, and Firewall Basics.”

•IP Address Sharing by NAT

The FVS318 VPN Firewall allows several networked PCs to share an Internet account using only a single IP address, which may be statically or dynamically assigned by your Internet service provider (ISP). This technique, known as Network Address Translation (NAT), allows the use of an inexpensive single-user ISP account.

•Automatic Configuration of Attached PCs by DHCP

The FVS318 VPN Firewall dynamically assigns network configuration information, including IP, gateway, and domain name server (DNS) addresses, to attached PCs on the LAN using the Dynamic Host Configuration Protocol (DHCP). This feature greatly simplifies configuration of PCs on your local network.

•DNS Proxy

When DHCP is enabled and no DNS addresses are specified, the firewall provides its own address as a DNS server to the attached PCs. The firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN.

•PPP over Ethernet (PPPoE)

PPP over Ethernet is a protocol for connecting remote hosts to the Internet over a DSL connection by simulating a dial-up connection. This feature eliminates the need to run a login program such as Entersys or WinPOET on your PC.

•Dynamic DNS

Dynamic DNS services allow remote users to find your network using a domain name when your IP address is not permanently assigned. The firewall contains a client that can connect to many popular Dynamic DNS services to register your dynamic IP address.

Easy Installation and Management

You can install, configure, and operate the FVS318 VPN Firewall within minutes after connecting it to the network. The following features simplify installation and management tasks:

Introduction

1-3

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

•Browser-based management

Browser-based configuration allows you to easily configure your firewall from almost any type of personal computer, such as Windows, Macintosh, or Linux. A user-friendly Setup Wizard is provided and online help documentation is built into the browser-based Web Management Interface.

•Smart Wizard

The FVS318 automatically senses the type of Internet connection, asking you only for the information required for your type of ISP account.

•Remote management

The FVS318 allows you to login to the Web Management Interface from a remote location on the Internet. For security, you can limit remote management access to a specified remote IP address or range of addresses, and you can choose a nonstandard port number.

•Visual monitoring

The firewall’s front panel LEDs provide an easy way to monitor its status and activity.

Maintenance and Support

NETGEAR offers the following features to help you maximize your use of the firewall:

•Flash EPROM for firmware upgrade

•Five-year warranty, two years on power adapter

•Free technical support seven days a week, twenty-four hours a day

1-4	Introduction

Chapter 2

Setting Up the Hardware

This chapter describes the Model FVS318 Cable/DSL ProSafe VPN Firewall hardware and provides instructions for installing it.

Package Contents

The product package should contain the following items:

•Model FVS318 Cable/DSL ProSafe VPN Firewall

•AC power adapter

•Category 5 (CAT5) Ethernet cable

•Model FVS318 Resource CD, including:

—This manual

—Application Notes, Tools, and other helpful information

•FVS318 Cable/DSL ProSafe VPN Firewall Installation Guide

•Warranty and registration card

•Support information card

If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the product for repair.

Setting Up the Hardware

2-1

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

Local Network Hardware Requirements

The FVS318 VPN Firewall is intended for use in a network of personal computers (PCs) that are interconnected by twisted-pair Ethernet cables.

PC Requirements

To install and run the FVS318 VPN Firewall over your network of PCs, each PC must have an installed Ethernet Network Interface Card (NIC) and an Ethernet cable. If the PC will connect to your network at 100 Mbps, you must use a Category 5 (CAT5) cable such as the cable provided with your firewall.

Access Device Requirement

The shared broadband access device (cable modem or DSL modem) must provide a standard 10 Mbps (10BASE-T) Ethernet interface.

2-2	Setting Up the Hardware

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

The Firewall’s Front Panel

The front panel of the Model FVS318 Cable/DSL ProSafe VPN Firewall (Figure 2-1) contains status LEDs.

Figure 2-1. FVS318 Front Panel

You can use some of the LEDs to verify connections. Table 2-1 lists and describes each LED on the front panel of the firewall. These LEDs are green when lit, except for the TEST LED, which is amber.

Table 2-1.	LED Descriptions
Label		Activity		Description
POWER		On		Power is supplied to the firewall.
TEST		On		The system is initializing.
		Off		The system is ready and running.
INTERNET
LINK		On		The Internet port has detected a link with an attached device.
ACT (Activity)		Blinking		Data is being transmitted or received by the Internet port.
LOCAL
100 (100 Mbps)		On		The Local port is operating at 100 Mbps.
		Off		The Local port is operating at 10 Mbps.
LINK/ACT		On		The Local port has detected a link with an attached device.
(Link/Activity)		Blinking		Data is being transmitted or received by the Local port.

Setting Up the Hardware

2-3

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

The Firewall’s Rear Panel

The rear panel of the FVS318 VPN Firewall (Figure 2-2) contains port connections.

Figure 2-2. FVS318 Rear Panel

The rear panel contains the following features:

•Power switch

•AC power adapter outlet

•Internet (WAN) Ethernet port for connecting the firewall to a cable or DSL modem

•Eight Local (LAN) Ethernet ports for connecting the firewall to the local PCs

•Factory Default Reset pushbutton

•Grounding terminal

Connecting the Firewall

Before using your firewall, you need to do the following:

•Connect your cable or DSL modem to the Internet port of the firewall (described next.

•Connect your local Ethernet network to the Local port(s) of the firewall (see page 2-5).

•Connect the power adapter (see page 2-6)

Note: The Resource CD included with your firewall contains an animated Connection Guide to help you through this procedure.

2-4	Setting Up the Hardware

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

Connecting to Your Internet Access Device

Your cable or DSL modem must provide a standard 10BASE-T Ethernet connection (not USB) for connection to your PC or network. The FVS318 VPN Firewall does not include a cable for this connection. Instead, use the Ethernet cable provided with your access device or any other standard 10BASE-T Ethernet cable. Follow these steps:

1.Locate the Ethernet cable currently going from your DSL or cable modem to the computer that you use to access the Internet.

Note: You must use the existing cable to connect the modem to your firewall, not to connect your PCs to your firewall. The Ethernet cable supplied by your ISP for connecting to your cable or DSL modem may be an Ethernet crossover cable rather than a normal straight-through cable.

2.Remove this cable from the computer and insert that end into the Internet port on the firewall.

3.Turn the cable or DSL modem off for ten seconds, then on again.

Connecting to your Local Ethernet Network

Your local area network (LAN) will attach to the firewall’s Local ports shown in Figure 2-2. The Local ports are capable of operation at either 10 Mbps (10BASE-T) or 100 Mbps (100BASE-Tx), depending on the Ethernet interface of the attached PC, hub, or switch. For any connection which will operate at 100 Mbps, you must use a Category 5 (CAT5) rated Ethernet cable, such as the cable included with the firewall.

The FVS318 VPN Firewall incorporates an eight-port switch for connection to your local network. Connect up to eight PCs directly to any of the eight Local ports of the firewall using standard Ethernet cables such as the one included with your firewall.

If your local network consists of more than eight hosts, you will need to connect your firewall to another hub or switch. In this case, connect any LOCAL port of your firewall to any port of an Ethernet hub or switch. The firewall’s LOCAL port will automatically configure itself for the uplink connection.

Note: The FVS318 VPN Firewall incorporates Auto UplinkTM technology. Each LOCAL Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a 'normal' connection (e.g. connecting to a PC) or an 'uplink' connection (e.g. connecting to a switch or hub). That port will then configure itself to the correct configuration. This feature also eliminates the need to worry about crossover cables, as Auto Uplink will accommodate either type of cable to make the right connection.

Setting Up the Hardware

2-5

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

Connecting the Power Adapter

To connect the firewall to the power adapter:

1.Plug the connector of the power adapter into the power adapter outlet on the rear panel of the firewall.

2.Plug the other end of the adapter into a standard wall outlet.

3.Turn the Power switch to the ON position.

4.Verify that the Power LED on the firewall is lit.

Verifying Connections

After applying power to the firewall, complete the following steps to verify the connections to it:

1.When power is first applied, verify that the POWER LED is on.

2.Verify that the TEST LED turns on within a few seconds.

3.After approximately 10 seconds, verify that:

a.The TEST LED has turned off.

b.The LOCAL LINK/ACT LEDs are lit for any local ports that are connected.

c.The INTERNET LINK/ACT LED is lit.

If a LINK/ACT LED is lit, a link has been established to the connected device.

4.If any LOCAL port is connected to a 100 Mbps device, verify that the 100 LED for that port is lit.

The firewall is now properly attached to the network. Next, you need to prepare your network to access the Internet through the firewall. See the following chapter.

2-6	Setting Up the Hardware

Chapter 3

Preparing Your Network

This chapter describes how to prepare your PC network to connect to the Internet through the Model FVS318 Cable/DSL ProSafe VPN Firewall and how to order broadband Internet service from an Internet service provider (ISP). .

Note: If an ISP technician configured your PC during the installation of a broadband modem, or if you configured it using instructions provided by your ISP, you may need to copy the current configuration information for use in the configuration of your firewall. Write down this information before reconfiguring your PCs. Refer to “Obtaining ISP Configuration Information (Windows)” on page 3-10 or “Obtaining ISP Configuration Information (Macintosh)” on page 3-11 for further information.

Preparing Your Personal Computers for IP Networking

Personal Computers access the Internet using a protocol called TCP/IP (Transmission Control Protocol/Internet Protocol). Each PC on your network must have TCP/IP installed and selected as its networking protocol. If a Network Interface Card (NIC) is already installed in your PC, then TCP/IP is probably already installed as well.

Note: In this chapter, we use the term “PC” to refer to personal computers in general, and not necessarily Windows computers.

Most PC operating systems include the software components you need for networking with TCP/ IP:

•Windows® 95 or later includes the software components for establishing a TCP/IP network.

•Windows 3.1 does not include a TCP/IP component. You need to purchase a third-party TCP/ IP application package such as NetManage Chameleon.

Preparing Your Network

3-1

Reference Manual for the Model FVS318 Cable/DSL ProSafe VPN Firewall

•Macintosh Operating System 7 or later includes the software components for establishing a TCP/IP network.

•All versions of UNIX or Linux include TCP/IP components. Follow the instructions provided with your operating system or networking software to install TCP/IP on your computer..

In your IP network, each PC and the firewall must be assigned a unique IP addresses. Each PC must also have certain other IP configuration information such as a subnet mask (netmask), a domain name server (DNS) address, and a default gateway address. In most cases, you should install TCP/IP so that the PC obtains its specific network configuration information automatically from a DHCP server during bootup. For a detailed explanation of the meaning and purpose of these configuration items, refer to “Appendix B, “Networks, Routing, and Firewall Basics.”

The FVS318 VPN Firewall is shipped preconfigured as a DHCP server. The firewall assigns the following TCP/IP configuration information automatically when the PCs are rebooted:

•PC or workstation IP addresses—192.168.0.2 through 192.168.0.254

•Subnet mask—255.255.255.0

•Gateway address (the firewall)—192.168.0.1

These addresses are part of the IETF-designated private address range for use in private networks.

Configuring Windows 95, 98, and ME for IP Networking

As part of the PC preparation process, you need to manually install and configure TCP/IP on each networked PC. Before starting, locate your Windows CD; you may need to insert it during the TCP/IP installation process.

Install or Verify Windows Networking Components

To install or verify the necessary components for IP networking:

1.On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel.

2.Double-click the Network icon.

The Network window opens, which displays a list of installed components:

3-2	Preparing Your Network