Netgear SRXN3205 Quick Start Manual

)NSTALLATION'UIDE

SRXN3205 ProSafe™ Wireless-N VPN Firewall

Start Here

Follow these instructions to set up your SRXN3205 Wireless-N VPN Firewall. You can
also consult the online SRXN3205 ProfSafe Wireless-N VPN Firewall Reference Manual
or the NETGEAR Knowledgebase at http://kbserver.netgear.com. A link to the online
Reference Manual is on the Resource CD.

Tip: Before placing the SRXN3205 in a high location, set up and test the SRXN3205 to
verify its wireless network connectivity. NETGEAR does not provide a mounting kit, but
refer to the Technical Specifications in the Reference Manual for mounting suggestions.

Prepare Your SRXN3205 Wireless-N VPN
Firewall

This guide provides instructions for setting up a simple WAN configuration and a basi c
wireless configuration. Refer to the Reference Manual for other configuration options.

Verify the Package Contents

Unpack the box and verify the contents:

• SRXN3205 ProSafe™ Wireless-N VPN Firewall

• Rubber feet (4) with adhesive backing

• Power adapter (12V, 1.5A) with cord (approximately 6 ft, or 183 cm)

• Three dual-band antennas (SMA connectors): 2 dipole (long); 1 patch (square)

• Straight through Category 5 Ethernet Cable

• Installation Guide

• Resource CD which includes a link to the Reference Manual

Connect Cables and Antennas to SRXN3205

1. CONNECT THE CABLES BETWEEN THE SRXN3205, THE MODEM, AND

A HOST COMPUTER.

a. Turn off and unplug the broadband modem.
b. Insert an Ethernet cable from a modem into the WAN port (7) of the SRXN3205.

c. Insert the Ethernet cable, supplied with your VPN firewall, into a LAN port on

the unit (6) and insert the other end into the Etherne t po rt of your Host computer.

1
2
3
4

5

d. Attach the three antennas to the SMA antenna connectors (10) on the rear of the

unit. For the best performance, attach the patch antenna to the middle connector
and attach the dipole antennas to the two connectors on both corners.

The network cables/antennas are connected and you are ready to restart your network.

8

6

9

7

8

2. RESTART YOUR NETWORK IN THE CORRECT SEQUENCE

Warning: Failure to restart your network in the correct sequence could prevent you
from connecting to the Internet and logging into the SRXN3205.

a. Power on the broadband modem and wait approximately 2 minutes until it

powers up.

b. Power on the SRXN3205 by plugging in the power adapter and connecting it to

the DC power connector (11) on the rear of the SRXN3205.

c. After the Test LED (2) turns off (approximately 2 min), turn on your Host

computer.

d. Before configuring your SRXN3205, observe its LEDs to verify the following:

11

10

• Power. The power LED (1) should turn solid green. If it does not turn solid
green, see the Troubleshooting section in the Reference Manual.

• Test. Initially, the amber test LED (2) will be lit for approximately 2 minutes.
If it is still on after 2 minutes, see the Troubleshooting Tips.

• WAN / LAN. The Link/Act LEDs (8) indicate activity on active WAN and
LAN ports (6/7). If no activity, ensure the Ethernet cables are securely
attached to the modem, the Host computer, and the WAN/LAN port(s), and
the modem is powered on. The Speed LEDs (9) respond as follows:
Green = 1000 Mbps; Amber = 100 Mbps; No light = 10 Mbps.

• Wireless. The n/a 5 GHz LED (3) and n/g 2.4 GHz LED (4) are off (default).

10

10

Configure SRXN3205 Internet Connectivity

Before you begin, ensure you have the configuration parameters avai lable from your ISP.

1. LOG IN TO THE FIREWALL

a. Use a browser to connect to https://192.168.1.1.

9

https://192.168.1.1

Note: To connect to the VPN firewall, your Host computer needs to be
configured to obtain an IP address automatically using DHCP server. If you need
instructions on how to do this, please refer to the online Reference Manual. A
link to the manual is on your Resource CD.

b. For security reasons, the VPN firewall

has its own user name and password.
When prompted, enter admin for the

firewall User Name and password for
the firewall Password.

c. Click Login. You are now connected to

the firewall. The default Router Status
screen displays.

The Web Support tab on the main menu contains links to the online NETGEAR
SRXN3205 product documentation and support knowledgebase.

Tip: After 5 minutes of inactivity (default login time-out), you are automatically
logged out.

2. CONNECT TO THE INTERNET

a. Select Network Configuration > WAN ISP Settings. The WAN ISP Settings tab

and setup screen displays.

b. Click Auto Detect at the bottom of the WAN ISP Settings screen. The firewall

will automatically try to detect your connection type.

c. If this is successful (DHCP service detected), click Apply and go to step e.
d. If you know your ISP connection type, you can manually configure the firewall

settings in the W AN ISP screen. If connecting manually , click Apply to save your
settings.

e. When finished, click Test to verify the Internet connection is active.

Configuring and Testing Wireless Access

1. Select one of these options and continue with step 2 for basic wireless setup.

• If your are still logged in to the VPN firewall’s Network Configuration screen,

click Wireless Settings in the submenu.

• If the login time-out has expired or you have logged out, follow the VPN firewall
login procedure and select Network Configuration > Wireless Settings.

Testing Wireless Connectivity

1. Using the Client PC you set up previously (wireless Ethernet adapter), and the basic
wireless settings you applied to the SRXN3205 with the Host PC, try to access a file
or a printer on the LAN connected to the SRXN3205.

2. Once you have verified the basic wireless functions of the SRXN3205, you are ready
to deploy the SRXN3205 in your network.

3. Set the SRXN3205 wireless settings as required for your network situation, including
the level of data encryption security. If necessary, reset the Client PC to it original
settings.

Deploying the SRXN3205

• Disconnect the SRXN3205 and position it where it will be deployed.

• The best location is elevated, such as, on the top of a cubicle wall, or wall

mounted, at the center of your wireless coverage area, and within line of sight of
all mobile devices.

• Position the antennas. Vertical positioning provides the best side-to-side

coverage. Horizontal positioning provides best top-to-bottom coverage.

Troubleshooting Tips

Ensure the network settings of the computer are correct.

Computers must be configured to obtain IP and DNS addresses automatically using
DHCP. For help with this, please see the online SRXN3205 ProfSafe Wireless-N VPN
Firewall Reference Manual; a link to the manual is on the Resource CD.

For Cable Modem connections, use MAC spoofing.

Some cable modem ISPs require that you use the MAC address of the computer registered
on the account. If so, in the VPN firewall’s MAC Address section (accessed through the
Advanced link on the WAN ISP Settings screen), select either “Use this Computer’s
MAC” or “Use this MAC address” and enter the appropriate MAC address. The VPN
firewall will then capture and use the MAC address of the computer that you identified.
You must select the computer that is registered with the ISP. Click Apply to save your
settings. Restart the network in the correct sequence.

Use the SRXN3205 Test LED to verify correct operation.

If the SRXN3205 Test light does not go out approximately 2 minutes after turning the
VPN firewall on, reset the Factory Defaults (5) as described in the SRXN3205 ProfSafe
Wireless-N VPN Firewall Reference Manual.

Technical Support

2. Click Enable Wireless Access Point on the right side of the screen.

3. Type your network name in the Name (SSID) field on the left side of the screen.

4. Select the appropriate Region and Mode from the respective fields.

5. Leave the other settings in the upper left portion of the screen at the defaults.

6. Leave None selected as the Wireless Security Type for the basic wireless test.

7. Click Apply at the bottom of the Wireless Settings screen.

See the online help or the Reference Manual for full instructions. (A link to the online
Reference Manual is on your Resource CD).

8. Prepare a PC as the wireless Client with a wireless Ethernet adapter. If this PC is
already part of your network, record its TCP/IP configuration settings for use later.
Configure the Client PC to obtain its IP and DNS addresses automatically using the
internal DHCP server of the SRXN3205 (DHCP is a default VPN firewall setting).

9. Now you are ready to test the wireless connectivity of the SRXN3205.

August 2008

Here are some tips for correcting common problems you may encounter.

Be sure to restart your network in this sequence:

1. Turn off and unplug the modem, unplug the power adapter to the SRXN3205, and
shut down the Host computer.

2. Plug in and turn on the modem. Wait for the modem to power up (approximately 2
minutes).

3. Reconnect the power adapter to the SRXN3205. Wait until the amber test light goes
out (approximately 2 minutes).

4. Turn on your Host computer.

Ensure the Ethernet cables are securely plugged in.

• The WAN Link/Act light on the VPN firewall will be lit if the Ethernet cable to the
firewall from the modem is plugged in securely and the modem and firewall are
turned on.

• For each powered on computer connected to the VPN firewall with a securely
plugged in Ethernet cable, the corresponding firewall LAN port status light should be
lit. The front of the SRXN3205 identifies the number of each LAN port.

Thank you for selecting NETGEAR products.
After configuring your SRXN3205 Wireless-N VPN Firewall, locate the serial number on

the bottom label of your product and use it to register your product at
http://www.netgear.com/register. Registration on the web site is required before you can
use our telephone support service.

The phone numbers for worldwide regional customer support centers are on the Warranty
and Support Information card that came with your product.

Go to http://www.netgear.com/support for product upd ates and web support.

This symbol was placed in accordance with the European Union Directive 2002/
96 on the Waste Electrical and Electronic Equipm ent (the WEEE Directive). If
disposed of within the European Union, this product should be treated and
recycled in accordance with the laws of your jurisdiction implementing the
WEEE Directive.

©2008 by NETGEAR, Inc. All rights reserved.
NETGEAR, the NETGEAR logo and ProSafe are tradenarks or registered trademarks of NETGEAR, Inc., in the

United States and/or other countries.
Other brand and product names are trademarks or registered trademar ks of their respective holders. Information

is subject to change without notice.