NETGEAR fvs114 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212

Ir a la página of

Buen manual de instrucciones

Las leyes obligan al vendedor a entregarle al comprador, junto con el producto, el manual de instrucciones NETGEAR fvs114. La falta del manual o facilitar información incorrecta al consumidor constituyen una base de reclamación por no estar de acuerdo el producto con el contrato. Según la ley, está permitido adjuntar un manual de otra forma que no sea en papel, lo cual últimamente es bastante común y los fabricantes nos facilitan un manual gráfico, su versión electrónica NETGEAR fvs114 o vídeos de instrucciones para usuarios. La condición es que tenga una forma legible y entendible.

¿Qué es un manual de instrucciones?

El nombre proviene de la palabra latina “instructio”, es decir, ordenar. Por lo tanto, en un manual NETGEAR fvs114 se puede encontrar la descripción de las etapas de actuación. El propósito de un manual es enseñar, facilitar el encendido o el uso de un dispositivo o la realización de acciones concretas. Un manual de instrucciones también es una fuente de información acerca de un objeto o un servicio, es una pista.

Desafortunadamente pocos usuarios destinan su tiempo a leer manuales NETGEAR fvs114, sin embargo, un buen manual nos permite, no solo conocer una cantidad de funcionalidades adicionales del dispositivo comprado, sino también evitar la mayoría de fallos.

Entonces, ¿qué debe contener el manual de instrucciones perfecto?

Sobre todo, un manual de instrucciones NETGEAR fvs114 debe contener:
- información acerca de las especificaciones técnicas del dispositivo NETGEAR fvs114
- nombre de fabricante y año de fabricación del dispositivo NETGEAR fvs114
- condiciones de uso, configuración y mantenimiento del dispositivo NETGEAR fvs114
- marcas de seguridad y certificados que confirmen su concordancia con determinadas normativas

¿Por qué no leemos los manuales de instrucciones?

Normalmente es por la falta de tiempo y seguridad acerca de las funcionalidades determinadas de los dispositivos comprados. Desafortunadamente la conexión y el encendido de NETGEAR fvs114 no es suficiente. El manual de instrucciones siempre contiene una serie de indicaciones acerca de determinadas funcionalidades, normas de seguridad, consejos de mantenimiento (incluso qué productos usar), fallos eventuales de NETGEAR fvs114 y maneras de solucionar los problemas que puedan ocurrir durante su uso. Al final, en un manual se pueden encontrar los detalles de servicio técnico NETGEAR en caso de que las soluciones propuestas no hayan funcionado. Actualmente gozan de éxito manuales de instrucciones en forma de animaciones interesantes o vídeo manuales que llegan al usuario mucho mejor que en forma de un folleto. Este tipo de manual ayuda a que el usuario vea el vídeo entero sin saltarse las especificaciones y las descripciones técnicas complicadas de NETGEAR fvs114, como se suele hacer teniendo una versión en papel.

¿Por qué vale la pena leer los manuales de instrucciones?

Sobre todo es en ellos donde encontraremos las respuestas acerca de la construcción, las posibilidades del dispositivo NETGEAR fvs114, el uso de determinados accesorios y una serie de informaciones que permiten aprovechar completamente sus funciones y comodidades.

Tras una compra exitosa de un equipo o un dispositivo, vale la pena dedicar un momento para familiarizarse con cada parte del manual NETGEAR fvs114. Actualmente se preparan y traducen con dedicación, para que no solo sean comprensibles para los usuarios, sino que también cumplan su función básica de información y ayuda.

Índice de manuales de instrucciones

  • Página 1

    202-10098- 01, April 2005 202-10098-01 April 2005 NETGEAR , Inc. 4500 Great America Parkway Santa Clara, CA 95 054 USA Reference Manual for the ProSafe VPN Firewall FVS1 14[...]

  • Página 2

    ii 202-10098- 01, April 2005 © 2005 by NETGEAR, Inc. All rights reserved. T rademarks NETGEAR is a trademark of Netge ar , Inc. Microsoft, W indows, and W indow s NT are registered trademar ks of Microsoft Corporation. Other brand and product names are registered tradem arks or trad emarks of their respective holders. St atement of Conditions In t[...]

  • Página 3

    202-10098- 01, April 2005 iii Product and Publication Det ails Model Number: FVS1 14 Publication Date: April 2005 Product Family: Router Product Name: FVS1 14 ProSafe VPN Firewall Home or Business Prod uc t: Business Language: Engl ish[...]

  • Página 4

    202-10098-01 , April 2005 iv[...]

  • Página 5

    Contents v 202-10098-01, April 2005 Content s Chapter 1 About This Manual Audience, Scope, Conventions, and Formats . ......... .................... ................ ................ .. 1-1 How to Use This Manual ................. ................... ................ .................... ................... ..... 1-2 How to Print this Manual ..... [...]

  • Página 6

    202-10098-01, April 20 05 vi Contents Using the Smart Setup Wizard ..................... ... ................ ................ ................... .......... 3-10 How to Manually Configure Y our Internet Co nnection ..... ................ ................... .......... 3-1 1 Chapter 4 Firewall Protection and Content Filtering Firewall Protection an[...]

  • Página 7

    Contents vii 202-10098-01, April 2005 Procedure to Configure a Gatew ay-to-Gateway VPN Tunnel ................... ............. 5-21 VPN T u nnel Control .. ... ... .... ... ... ... ................. ... ... ... ... .... ................ ... ... .... ... ... ... ............. 5-26 Activating a VPN Tunnel .... ................ .................... .[...]

  • Página 8

    202-10098-01, April 20 05 viii Contents Erasing the Configuration ... ................ .................... ................... ................ ............... 7-7 Changing the Administrator Pa ssword ..... ................ .................... ................ .................. 7-8 Diagnostics ............ ................ ................... ..[...]

  • Página 9

    Contents ix 202-10098-01, April 2005 What is a Router? .............. .................... ................ ................... ................ .............. B-2 Routing Information Protocol .................. ... ............. ................... ................ .............. B-2 IP Addresses and the Internet ............ ... ... .... ... ....[...]

  • Página 10

    202-10098-01, April 20 05 x Contents VPN T unnel Between Gateways ........................ ................. ................... ................. C -8 VPNC IKE Security Parameters .. .... ... ... ... .... ... ... ................ ................ .................... ..... C-10 VPNC IKE Phase I Parameters ................. ... ................ ...[...]

  • Página 11

    Contents xi 202-10098-01, April 2005 B ............... ................ ................ .................... ................ ................ ................ .......... ....... G-2 C ............... ................ ................ .................... ................ ................ ................ .......... ....... G-3 D ............... .[...]

  • Página 12

    202-10098-01, April 20 05 xii Contents[...]

  • Página 13

    About This Manual 1-1 202-10098-01, April 2005 Chapter 1 About This Manual This chapter describes the intended audience, sc ope, conventions, and formats of this manual. Audience, Scope, Conventions, and Format s This reference manual assumes that the reader h as basic to interme diate computer and Internet skills. However , basic comp uter network[...]

  • Página 14

    Reference Manual for the ProSafe VPN Fire wall FVS114 1-2 About This Manual 202-10098-01, April 2005 How to Use This Manual The HTML version of this ma nual includes the following: • Buttons, and , for browsing forwards or backwards through the manual one page at a time • A button that displays the table of cont ents and an button. Double-click[...]

  • Página 15

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 About This Manual 1-3 202-10098-01, April 2005 How to Print this Manual T o prin t this manual you can choose on e of the fo llowing several options, a ccording to your needs. • Printing a Page in the HTML V iew . Each page in the HTML version of the manu al is dedicated to a major topic. Us[...]

  • Página 16

    Reference Manual for the ProSafe VPN Fire wall FVS114 1-4 About This Manual 202-10098-01, April 2005[...]

  • Página 17

    Introduction 2-1 202-10098-01, April 2005 Chapter 2 Introduction This chapter describes the features of the NETGEAR FVS1 14 ProSafe VPN Firewall. Key Features of the VPN Firewall The FVS1 14 ProSafe VPN Firewall with four-port switch connects your local are a network (LAN) to the Internet through an external access device suc h as a cable modem or [...]

  • Página 18

    Reference Manual for the ProSafe VPN Fire wall FVS114 2-2 Introduction 202-10098-01, April 2005 A Powerful, T r ue Firewall with Content Filtering Unlike simple Internet sharing NA T firewalls, the FVS1 14 is a true firewall, using stateful packet inspection to defend against hacker a ttacks. Its firewall features include: • DoS protection. Autom[...]

  • Página 19

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Introduction 2-3 202-10098-01, April 2005 Autosensing Ethernet Co nn ections with Auto Uplink W ith its internal eight-port 10/100 switch, the FV S1 14 can connect to either a 10 Mbps standard Ethernet network or a 100 M bps Fast Ethernet network. Both the LAN and W AN interfaces are autosensi[...]

  • Página 20

    Reference Manual for the ProSafe VPN Fire wall FVS114 2-4 Introduction 202-10098-01, April 2005 Easy Inst allation and Management Y ou can install, configure, and operate the FV S1 14 ProSafe VPN Firewall within minutes after connecting it to the network. Th e following featur es simplify in stallation and management tasks: • Browser-based manage[...]

  • Página 21

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Introduction 2-5 202-10098-01, April 2005 Package Content s The product package should contain the following it ems: • FVS1 14 ProSafe VPN Firewall. •A C p o w e r a d a p t e r . • Category 5 (Cat 5) Ethernet cable. • Installation Guide. • Resour ce CD (240-10207-01) for Pr oSafe VP[...]

  • Página 22

    Reference Manual for the ProSafe VPN Fire wall FVS114 2-6 Introduction 202-10098-01, April 2005 The FVS1 14 Rear Panel The rear panel of the FVS114 VP N Firewall contains the port connections listed below . Figure 2-2: FVS1 14 rear p anel V iewed from left to right, the rear panel contains the following features: • Factory default reset push but [...]

  • Página 23

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Introduction 2-7 202-10098-01, April 2005 • DC power input • ON/OFF switch NETGEAR-Related Product s NETGEAR products related to the FVS1 14 are listed in the following table: NETGEAR Product Registration, Support, and Document ation Register your product at http://www .NETGEAR.com/r egist[...]

  • Página 24

    Reference Manual for the ProSafe VPN Fire wall FVS114 2-8 Introduction 202-10098-01, April 2005 Documentation is available on the Resour ce CD and at http://kbserver .netgear .com . When the VPN firewall ro uter is connected to the Internet, click the Knowledge Base or the Documentation link under the W eb Support menu to view support information o[...]

  • Página 25

    Connecting the Fire wa ll to the Internet 3-1 202-10098-01, April 2005 Chapter 3 Connecting the Firewall to the Internet This chapter describes how to set up the firewall on your LAN, connect to the In ternet, perform basic configuration of yo ur FVS114 ProSafe VPN Firewall using the Setup W izard, or how to manually configure y our Internet co nne[...]

  • Página 26

    Reference Manual for the ProSafe VPN Fire wall FVS114 3-2 Connecting the Firewall to the Intern et 202-10098-01, April 2005 c. Locate the Ethernet cable (Cable 1 in the di agram) that connects your PC to the modem. Figure 3-1: Disconnect th e Ethernet cable from t he computer d. Disconnect the cable at the computer end only , point A in the diagram[...]

  • Página 27

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Connecting th e Fir ew all to the Int ernet 3 -3 202-10098-01, April 2005 f. Securely insert the blue cable that came with your VPN firewall router (the blue NETGEAR cable in the diagra m below) into a LOCAL port on the firewall such as LOCAL port 4 (point C in the diagram), and the oth er end[...]

  • Página 28

    Reference Manual for the ProSafe VPN Fire wall FVS114 3-4 Connecting the Firewall to the Intern et 202-10098-01, April 2005 Figure 3-4: S t atus light s d. Check the VPN firewall router stat us lights to verify the following: • PWR : The power light shou ld turn solid green. If it does not, see “T roubleshooting T ips” on page 3-6 . • TEST [...]

  • Página 29

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Connecting th e Fir ew all to the Int ernet 3 -5 202-10098-01, April 2005 W ith the VPN firewall router in its factory de fault state, your browser will automatically display the NETGEAR Smart W izard Co nfiguration Assistant welcome page. Figure 3-5: NETGEAR Smart Wizard Config uration Assist[...]

  • Página 30

    Reference Manual for the ProSafe VPN Fire wall FVS114 3-6 Connecting the Firewall to the Intern et 202-10098-01, April 2005 T roubleshooting Tip s Here are some tips for correctin g simple problems you may have. Be sure to restart your network in this sequence: 1. T urn of f the VPN firewall ro uter, shut down the computer , and unplug and turn of [...]

  • Página 31

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Connecting th e Fir ew all to the Int ernet 3 -7 202-10098-01, April 2005 Overview of How to A ccess the FVS1 14 VPN Firewall The table below describes how you access the VPN firewa ll router, depending on the state of the VPN firewall router. T able 3-1. W ays to access the firewall Firewall [...]

  • Página 32

    Reference Manual for the ProSafe VPN Fire wall FVS114 3-8 Connecting the Firewall to the Intern et 202-10098-01, April 2005 How to Log On to the FVS1 14 Af ter Configuration Settings Have Been Applied 1. Connect to the VPN firewall router by typing http://www .routerlogin.net in the address field of your browser , then press Enter . Figure 3-6: Log[...]

  • Página 33

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Connecting th e Fir ew all to the Int ernet 3 -9 202-10098-01, April 2005 Once you have entered your user name and password, your W eb browser should fi nd the FVS1 14 VPN Firewall and display th e home page as shown belo w . Figure 3-8: Login result: FVS1 14 home p age When the VPN firewall r[...]

  • Página 34

    Reference Manual for the ProSafe VPN Fire wall FVS114 3-10 Connecting the Firewall to th e Internet 202-10098-01, April 2005 2. The browser then di splays the FVS1 14 settings home page shown in “Login result: FVS1 14 home page” on page 3-9 . If you do not click Logout , the VPN firewall router waits five minutes after there is no activity befo[...]

  • Página 35

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Connecting th e Fir ew all to th e Int er n et 3-11 202-10098-01, April 2005 How to Manually Configure Y our Internet Connection Y ou can manually configu re your firewall using the menu b elow , or yo u can allow the Setup W izard to determine your configuration as described in the previous s[...]

  • Página 36

    Reference Manual for the ProSafe VPN Fire wall FVS114 3-12 Connecting the Firewall to th e Internet 202-10098-01, April 2005 a. Account: Enter your Account Name (may also be called Host Name) and Domain Name. These parameters may be ne cessary to access your ISP’ s services such as mail or news servers. b. Internet IP Address: If your ISP has ass[...]

  • Página 37

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Connecting th e Fir ew all to th e Int er n et 3-13 202-10098-01, April 2005 a. For connections that require a log in using protocols such as PPPoE, PP TP , T elstra Bigpond Cable broadband conn ections, select your Inte rnet service provider from the drop-down list. Figure 3-10: Basic Setting[...]

  • Página 38

    Reference Manual for the ProSafe VPN Fire wall FVS114 3-14 Connecting the Firewall to th e Internet 202-10098-01, April 2005[...]

  • Página 39

    Firewall Protection and Conten t Filtering 4-1 202-10098-01, April 2005 Chapter 4 Firewall Protection and Content Filtering This chapter describes how to u se the content filtering features of the FVS114 ProSafe VPN Firewall to protect yo ur network. Thes e features can be fou nd by clicking on the Security heading in the main menu of the browser i[...]

  • Página 40

    Reference Manual for the ProSafe VPN Fire wall FVS114 4-2 Firewall Protection and Content Filtering 202-10098-01, April 2005 Block Sites The FVS1 14 allows you to restrict access based on W eb addresses and W e b address keywords. Up to 255 entries are supported in the Keyword list. The Block Sites menu is shown in Figure 4-1 : Figure 4-1: Block Si[...]

  • Página 41

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Firewall Protection and Content Filtering 4-3 202-10098-01, April 2005 • T urn Cookies filtering on: Block all cookies. Note : Many W eb si tes will not function corre ctly if t hese components are blocked. Keyword Blocking : T o enable keyword bl ocking, check T urn keyword blocking on , th[...]

  • Página 42

    Reference Manual for the ProSafe VPN Fire wall FVS114 4-4 Firewall Protection and Content Filtering 202-10098-01, April 2005 These default rules are shown in the Rules table of th e Rules menu in Figure 4-2 : Figure 4-2: Rules menu Y ou may define additional rules that specify exceptions to the default ru les. By adding custom rules, you can block [...]

  • Página 43

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Firewall Protection and Content Filtering 4-5 202-10098-01, April 2005 An example of th e menu for defining or editing a rule is shown in Figure 4-3 . The parameters are: • Service . From this list, select the application or service to be allowed or blocked. The list already displays many co[...]

  • Página 44

    Reference Manual for the ProSafe VPN Fire wall FVS114 4-6 Firewall Protection and Content Filtering 202-10098-01, April 2005 – Block non-standard packets — Abnormal pack ets are often used by hackers and in DoS attacks, but may also be generated by other network devices. This setting should normally be enabled. – Enable DNS proxy — DNS prox[...]

  • Página 45

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Firewall Protection and Content Filtering 4-7 202-10098-01, April 2005 Figure 4-3: Rule example: a local public W eb server Inbound Rule Example: Allowing a V ideoconference from Restricted Addresses If you want to allow incoming vi deoconferencing to be initiated from a restricted range of ou[...]

  • Página 46

    Reference Manual for the ProSafe VPN Fire wall FVS114 4-8 Firewall Protection and Content Filtering 202-10098-01, April 2005 Considerations for Inbound Rules • If your external IP address is assigned dynamically by your ISP , the IP address may change periodically as the DHCP lease expires. Cons ider using the Dya mic DN S feature in the Advanced[...]

  • Página 47

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Firewall Protection and Content Filtering 4-9 202-10098-01, April 2005 Outbound Rule Example: Blocking Inst ant Messenger If you want to block Instant Messenger usage by employees during working hours, you can create an outbound rul e to block that application from a ny internal IP address to [...]

  • Página 48

    Reference Manual for the ProSafe VPN Fire wall FVS114 4-10 Firewall Protection and Content Filtering 202-10098-01, April 2005 Order of Precedence for Rules As you define new rules, they are added to the tables in the Rules table, as shown below: Figure 4-6: Rules t able For any traffic attempting to pass through the fire wall, the packet informa ti[...]

  • Página 49

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Firewall Protection and Content Filtering 4 -11 202-10098-01, April 2005 Services Services are functions performed by server computers at the request of client computers. For example, W eb servers serve W eb pages, time serve rs serve time and date information, and game hosts serve data about [...]

  • Página 50

    Reference Manual for the ProSafe VPN Fire wall FVS114 4-12 Firewall Protection and Content Filtering 202-10098-01, April 2005 T o add a service: 1. When you have the port number info rmation, go the Services menu and click o n the Add Custom Service button. The Add Services menu appears as shown in Figure 4-8 : Figure 4-8: Add Custom Service me nu [...]

  • Página 51

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Firewall Protection and Content Filtering 4 -13 202-10098-01, April 2005 Using a Schedule to Block or Allow S pecific T raffic If you enabled content filtering in the Block Sites me nu, or if you d efined an outbound rule to use a schedule, you can set up a sched ule for when blocking occurs o[...]

  • Página 52

    Reference Manual for the ProSafe VPN Fire wall FVS114 4-14 Firewall Protection and Content Filtering 202-10098-01, April 2005 T o block keywords or Internet domains bas ed on a schedule, select Every Day o r select o ne or more days. If you want to limit access completely fo r the selected days, select All Day . Otherwise, If you want to limit acce[...]

  • Página 53

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Firewall Protection and Content Filtering 4 -15 202-10098-01, April 2005 Getting E-Mail Notifications of Event Logs and Alert s In order to receive log s and alerts by e-mail, you must provide your e-mail information in the Send alerts and logs by e-mail area: Figure 4-10: E-mail menu • T ur[...]

  • Página 54

    Reference Manual for the ProSafe VPN Fire wall FVS114 4-16 Firewall Protection and Content Filtering 202-10098-01, April 2005 – If a user on your LAN attempts to access a W e b site that you blocked using the Block Sites menu. • Send logs according to this schedule. Y ou can specify that logs are sent to you according to a schedule. Select whet[...]

  • Página 55

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Firewall Protection and Content Filtering 4 -17 202-10098-01, April 2005 V iewing Logs of W eb Access or Attempted W eb Access The firewall logs security-related events such as denied incoming and outgoing service requests, hacker probes, and administrator logins. If you en able content filter[...]

  • Página 56

    Reference Manual for the ProSafe VPN Fire wall FVS114 4-18 Firewall Protection and Content Filtering 202-10098-01, April 2005 Log entries are described in T abl e 4-1 Log action buttons are described in Ta b l e 4 - 2 Syslog Y ou can configure the firewall to send system logs to an external PC th at is running a syslog logging program. Enter the IP[...]

  • Página 57

    Basic Virtual Private Ne tworking 5-1 202-10098-01, April 2005 Chapter 5 Basic V irtual Private Networking This chapter describes how to u se the virtual private networking (VPN) features of the FVS1 14 VPN Firewall. VPN communications paths are ca lled tunnels. VPN tunnels provide secure, encrypted communications between your local network and a r[...]

  • Página 58

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-2 Basic Virtual Private Networking 202-10098-01, April 2005 Overview of VPN Configuration T wo common scenarios for config uring VPN tunnels are between a remote personal comp uter and a network gateway and between two or more ne twork gateways. The FVS114 su pp orts both of these types of VPN[...]

  • Página 59

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networ king 5- 3 202-10098-01, April 2005 Figure 5-2: Gateway -t o-gateway VPN tunnel A VPN between two or more NETGEAR VPN-enabled firewalls is a good way to connect branch or home offices and business partners over the In ternet. VPN tunnels also enable ac cess to netwo[...]

  • Página 60

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-4 Basic Virtual Private Networking 202-10098-01, April 2005 FQDNs supplied by Dynamic DNS providers ca n allow a VPN endpoint with a dynamic IP address to initiate or respond to a tunnel request. Otherwise, the side using a dynamic IP address must always be the initiator . • What method will[...]

  • Página 61

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networ king 5- 5 202-10098-01, April 2005 VPN T unnel Configuration There are two tunnel configurations and three ways to configure them: • Use the VPN W izard to configure a VPN tunnel (recommended fo r most situations): — See “How to Set Up a Client-to-Gatewa y VP[...]

  • Página 62

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-6 Basic Virtual Private Networking 202-10098-01, April 2005 S tep 1: Configuring the Clien t-to-Gateway VPN T unnel on the FVS1 14 Follow this procedure to configure a client-t o-gateway VPN tunnel using the VPN W izard. 1. Log in to the FVS1 14 at its LAN address of http://192.168.0 .1 with i[...]

  • Página 63

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networ king 5- 7 202-10098-01, April 2005 Figure 5-5: Connection Na me and Remote IP T ype The Summary screen below displays. Figure 5-6: VPN Wizard Summary Enter the new Connection Name: ( RoadW arrior in this example) Enter the pre-shared key: ( 12345678 in this example[...]

  • Página 64

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-8 Basic Virtual Private Networking 202-10098-01, April 2005 T o view the VPNC recommended authenticatio n and encryption setting s used by the VPN W izard, click the here link (see Figure 5-6 ). Click Back to return to the Summary screen. Figure 5-7: VPNC Recommende d Settings 3. Click Done on[...]

  • Página 65

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networ king 5- 9 202-10098-01, April 2005 S tep 2: Configuring the NETGE AR ProSafe VPN C lient on the Remote PC This procedure describes how to configure the NETGEAR ProSafe VPN Client. This example assumes the PC running the client ha s a dynamically ass igned IP addre [...]

  • Página 66

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-10 Basic Virtual Priva te Networking 202-10098-01, April 2005 Note: In this example, the Connection Name used on the client side of the VPN tunnel is NETGEAR_VPN_router an d it does not have to match the RoadW arrior Connection Name used on the gateway side of the VPN tunnel (see Figure 5-5 ) [...]

  • Página 67

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-11 202-10098-01, April 2005 d. Select IP Subnet in the ID T ype menu. In this example, typ e 192 .168.3.1 in the Subnet field as the network address of the FVS1 14. e. Enter 255.255.255.0 in the Mask field as the LAN Subnet Mask of the FVS114. f. Select All i[...]

  • Página 68

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-12 Basic Virtual Priva te Networking 202-10098-01, April 2005 In this step, you will provide information about the remote VPN client PC. Y ou will need to provide: — The Pre-Shared Key that you configured in the FVS1 14. — Either a fixed IP address or a “fixed virtual” IP address of th[...]

  • Página 69

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-13 202-10098-01, April 2005 Figure 5-13: Security Poli cy Editor Pre-Shared Key 5. Configure the VPN Client Authentication Proposal. In this step, you will provide the ty pe of encryption (DES o r 3DES) to be used for this connection. This selection must matc[...]

  • Página 70

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-14 Basic Virtual Priva te Networking 202-10098-01, April 2005 f. In the SA Life menu, select Unspecified. g. In the Key Group menu, select Dif fie-Hellman Group 2. 6. Configure the VPN Client Key Exc ha nge Proposal. In this step, you will provide the ty pe of encryption (DES o r 3DES) to be u[...]

  • Página 71

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-15 202-10098-01, April 2005 After you have configured and saved the VPN clie nt information, your PC will automatically open the VPN connection when you attempt to access any IP addresses in the range of the remote VPN firewall’ s LAN. 8. Check the VPN Conn[...]

  • Página 72

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-16 Basic Virtual Priva te Networking 202-10098-01, April 2005 Once the connection is established , you can open the browser of the PC and enter the LAN IP address of the remote FVS1 14. After a short wait, you should see the login screen of the VPN Firewall (unless another PC already has the F[...]

  • Página 73

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-17 202-10098-01, April 2005 2. The Connection Monitor sc reen for a similar connection is shown below: Figure 5-19: Connection Monit or screen In this example you can see the following: • The FVS1 14 has a public IP W AN address of 22.23.24.25 . • The FVS[...]

  • Página 74

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-18 Basic Virtual Priva te Networking 202-10098-01, April 2005 Figure 5-20: Exporting a sec urity policy Importing a Security Policy The following procedure ( Figure 5-21 ) enables you to import an existing security policy . St e p 1 : Select Export Security Policy from the File pulldown. St e [...]

  • Página 75

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-19 202-10098-01, April 2005 Figure 5-21: Importing a secur it y policy St e p 1 : Invoke the NETGEAR ProSafe VPN Client and select Import Security Policy from the File pulldown. St e p 2 : Select the security policy to import. In this example, the security po[...]

  • Página 76

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-20 Basic Virtual Priva te Networking 202-10098-01, April 2005 How to Set Up a Gateway-to -Gateway VPN Configuration Figure 5-22: Gateway-to -Gateway VPN T unnel Follow the procedure below to set the LAN IPs on each FVS1 14 to dif feren t subnets and configure each properly fo r the Internet. T[...]

  • Página 77

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-21 202-10098-01, April 2005 Procedure to Configure a Gateway-to-Gatew ay VPN T unnel Follow this procedure to configure a gateway- to-gateway VPN tunnel using the VPN W izard. 1. Log in to the FVS1 14 on LAN A at its default LAN address of http://192.168.0.1 [...]

  • Página 78

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-22 Basic Virtual Priva te Networking 202-10098-01, April 2005 3. Fill in the IP Address or F QDN for the ta rget VPN endpoint W AN connection and click Next . Figure 5-25: Remote IP 4. Identify the IP addresses at the target endp oint that can use this tunnel, and click Ne xt . Figure 5-26: Se[...]

  • Página 79

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-23 202-10098-01, April 2005 The Summary screen below displays. Figure 5-27: VPN Wizard Summary[...]

  • Página 80

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-24 Basic Virtual Priva te Networking 202-10098-01, April 2005 T o view the VPNC recommended authenticatio n and encryption setting s used by the VPN W izard, click the here link (see Figure 5-27 ). Click Back to return to the Summary screen. Figure 5-28: VPN Recommended Sett ings 5. Click Done[...]

  • Página 81

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-25 202-10098-01, April 2005 6. Repeat for the FVS1 14 on LAN B. Pay specia l attention and use the following network settings as appropriate. • W AN IP of the remote VPN gateway (e.g., 14.15.16.17 ) • LAN IP settings of the remote VPN gateway: — IP Addr[...]

  • Página 82

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-26 Basic Virtual Priva te Networking 202-10098-01, April 2005 Figure 5-31: Current VPN T unnels (SAs) Screen c. Look at the VPN Status/Log screen ( Figure 5-30 ) to verify that the tunnel is conn ec te d. VPN T unnel Control Activating a VPN T unnel There are three ways to activate a VPN tunne[...]

  • Página 83

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-27 202-10098-01, April 2005 Figure 5-32: VPN St atus/Log screen 3. Click VPN S tatus ( Figure 5-32 ) to get the Current VPN T unnels (SAs) screen ( Figure 5-33 ). Click Connect for the VPN tunnel you want to activate. Figure 5-33: Current VPN T unnels (SAs) s[...]

  • Página 84

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-28 Basic Virtual Priva te Networking 202-10098-01, April 2005 a. Establish an Internet connection from the PC. b. On the W indows taskbar , click the St a r t button, and then click Run . c. Ty p e ping -t 192.168.3.1 and then click OK . Figure 5-34: Running a Ping tes t to the LAN from the PC[...]

  • Página 85

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-29 202-10098-01, April 2005 Figure 5-36: Pinging test result s Note: The pings may fail the first time. If so, then try the pings a second time. V erifying the S tatus of a VPN T unnel T o use the VPN S tatus pa ge to determine the stat us of a VPN tunnel, pe[...]

  • Página 86

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-30 Basic Virtual Priva te Networking 202-10098-01, April 2005 • Click Clea r Lo g to delete all log entries. 3. Click VPN S tatus ( Figure 5-37 ) to get the Current VPN T unnels (SAs) screen ( Figure 5-38 ). Figure 5-38: Current VPN T unnels (SAs) screen This page lists the following da ta f[...]

  • Página 87

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Basic Virtual Private Networking 5-31 202-10098-01, April 2005 Figure 5-39: VPN Policies 3. Clear the Enable check box for the VPN tunnel you want to d eac tivate and click Apply . (T o reactivate the tunnel, chec k the Enable box and click Apply .) Using the VPN St atus Page to Deactivate a V[...]

  • Página 88

    Reference Manual for the ProSafe VPN Fire wall FVS114 5-32 Basic Virtual Priva te Networking 202-10098-01, April 2005 3. Click VPN S tatus ( Figure 5-40 ) to get the Current VPN T unnels (SAs) screen ( Figure 5-41 ). Click Dr op for the VPN t unnel you want to deactiv ate. Figure 5-41: Current VPN T unnels (SAs) screen Deleting a VPN T unnel T o de[...]

  • Página 89

    Advanced Virtual Private Networking 6-1 202-10098-01, April 2005 Chapter 6 Advanced V irtual Private Networking This chapter describes how to use the advanced virtual private networking (VPN) features of the FVS1 14 VPN Firewall. See Chapter 5, “Basic V irtual Private Networking ” for a description on how to use the basic VPN features. Overview[...]

  • Página 90

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-2 Advanced Virtual Private Networking 202-10098-01, April 2005 Using Policies to Manage VPN T raffic Y ou create policy definitions to manage VPN tr aff ic on the FVS1 14. There are two kinds of policies: • IKE Policies : Define the authenticatio n scheme and automatically generate the encry[...]

  • Página 91

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-3 202-10098-01, April 2005 IKE Policies’ Automatic Key and Authentication Management Click the IKE Policies link from the VPN section of the main menu, and then click the Add button of the IKE Policies screen to display th e IKE Policy Configuration menu[...]

  • Página 92

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-4 Advanced Virtual Private Networking 202-10098-01, April 2005 The IKE Policy Configuration fields are defined in the following tabl e. T able 6-1. IKE Policy Configuration fields Field Descripti on General These setti ngs identify this policy an d determine its major characteristics. Policy N[...]

  • Página 93

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-5 202-10098-01, April 2005 VPN Policy Configuration for Auto Key Negotiation An already defined IKE policy is required for VP N - Auto Policy config uration. From the VPN Policies section of the main menu, you can navigate to the VPN - Auto Policy configur[...]

  • Página 94

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-6 Advanced Virtual Private Networking 202-10098-01, April 2005 Figure 6-3: VPN - Auto Policy menu[...]

  • Página 95

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-7 202-10098-01, April 2005 The VPN – Auto Policy field s are defined in the following table. T able 6-1. VPN – Auto Policy Configuration Fie lds Field Description General These setting s identify this policy and determine its major characteristi c s. P[...]

  • Página 96

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-8 Advanced Virtual Private Networking 202-10098-01, April 2005 T raffic Selector These settings dete rmine if and whe n a VPN tunnel will be established. If network traffic meets all criteria, then a VPN tunnel will be create d. Local IP The drop-down menu allows yo u to configure the source I[...]

  • Página 97

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-9 202-10098-01, April 2005 VPN Policy Configuration for Manual Key Exchange W ith Manual Key Management, you w ill not use an IKE poli cy . Y ou mu st manually type in all the required key information. Click the VPN Policies link from the VPN section of th[...]

  • Página 98

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-10 Advanced Virtual Private Networking 202-10098-01, April 2005 Figure 6-4: VPN - Manual Policy menu[...]

  • Página 99

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-11 202-10098-01, April 2005 The VPN Manual Policy fields are defined in t he following table. T able 6-1. VPN Manual Poli cy Configuration Fields Field Description General These setting s identify this policy and determine its major characteristi c s. Poli[...]

  • Página 100

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-12 Advanced Virtual Private Networking 202-10098-01, April 2005 Authentication Algorith m If you enable AH, then select the auth entication algorithm: • MD5 — the default • SHA1 — more secure Enter the keys in the fields provided. For MD5, the keys should be 16 characters. For SHA-1, t[...]

  • Página 101

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-13 202-10098-01, April 2005 Using Digit al Certificates for IKE Auto-Policy Authentication Digital certificates are strings gene rated using encryption and authenticatio n sche mes that cannot be duplicated by anyone without access to the diff erent values[...]

  • Página 102

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-14 Advanced Virtual Private Networking 202-10098-01, April 2005 Each CA has its own certificate. The certificates of a CA are added to the FVS114 and then can be used to form IKE policies for the user . Once a CA certificate is added to the FVS1 14 and a certificate is created for a user , the[...]

  • Página 103

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-15 202-10098-01, April 2005 The PC must have the NETGEAR ProSafe VPN Client program installed that supports IPSec. Go to the NETGEAR W eb site ( http://www .netgear .com ) and select VPN01L_VPN05L in the Prod uct Quick Find drop down men u for information [...]

  • Página 104

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-16 Advanced Virtual Private Networking 202-10098-01, April 2005 The IKE Phase 2 parameters used in Scenario 1 are: • T ripleDES • SHA-1 • ESP tunnel mode • MODP group 2 (1024 b its) • Perfect forward secrecy for rekeying • SA lifetime of 36 00 seconds (one hour) wit h no kilobytes [...]

  • Página 105

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-17 202-10098-01, April 2005 Figure 6-7: F VS1 14 Internet IP Address menu b. Configure the W AN Internet Address acco rding to the settings above and click Apply to save your settings. For more in formation on configuring the W A N IP settings in the Basic[...]

  • Página 106

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-18 Advanced Virtual Private Networking 202-10098-01, April 2005 c. From the main menu Advanced section, click the LAN IP Setup link. The following menu appears Figure 6-8: LAN IP Setup menu d. Configure the LAN IP address according to the settings above and click Apply to save your settings. F[...]

  • Página 107

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-19 202-10098-01, April 2005 3. Set up the IKE Policy illustrated below on th e FVS1 14. a. From the main menu VP N section, click on the IKE Policies link, and then click the Add button to display the screen below . Figure 6-9: Sc enario 1 IKE Policy b. Co[...]

  • Página 108

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-20 Advanced Virtual Private Networking 202-10098-01, April 2005 4. Set up the FVS1 14 VPN -Auto Policy illustrated below . a. From the main menu VP N section, click on the VPN Policies link, and then click on the Add Auto Policy button. Figure 6-10: Scenario 1 VPN - Auto Policy b. Configure th[...]

  • Página 109

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-21 202-10098-01, April 2005 How to Check VPN Connections Y ou can test connectivity and view VPN stat us information on the FVS1 14 (see also “VPN Tunnel Control” on page 5-26 ). T esting the Gateway A FVS1 14 LAN and the Gateway B LAN 1. Using our exa[...]

  • Página 110

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-22 Advanced Virtual Private Networking 202-10098-01, April 2005 FVS1 14 Scenario 2: FVS1 14 to FVS1 14 with RSA Certificates The following is a typical gate way-to-gateway VPN that uses Public Key Infrastructure x.509 (PKIX) certificates for authentication. The netw ork setup is identical to t[...]

  • Página 111

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-23 202-10098-01, April 2005 b. Click the Generate Request button to display the screen illustrated in Figure 6-1 1 below . . Figure 6-1 1: Generate Self Certificate Re quest menu c. Fill in the fields on the Add Self Certificate screen. •R e q u i r e d [...]

  • Página 112

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-24 Advanced Virtual Private Networking 202-10098-01, April 2005 – Domain Name. If you have a domain name, you can enter it here. Otherwise, you should leave this blank. – E-mail Address. Y ou can enter you e-mail address here. d. Click the Next button to continue. The FVS1 14 gene rates a [...]

  • Página 113

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-25 202-10098-01, April 2005 c. When you have fini shed gathering the Se lf Certificate Request data, click the Done button. Y ou will return to the Certificates screen where your pending “FVS1 14” Self Certificate Request will be li sted, as illustrate[...]

  • Página 114

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-26 Advanced Virtual Private Networking 202-10098-01, April 2005 f. Y ou will now see the “FVS1 14” entry in the Activ e Self Certificates table and the pending “FVS1 14” Self Certificate Request is gone, as illustrated below . Figure 6-14: Self Certificat es t able 7. Associate the new[...]

  • Página 115

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Virtual Private Networking 6-27 202-10098-01, April 2005 Now , the traf fic from devices within the range of the LAN subnet addresses on FVS1 14 A and Gateway B will be authenticated using the certificates rather than via a shared key . 8. Set up Certificate Revocation List (CRL) chec[...]

  • Página 116

    Reference Manual for the ProSafe VPN Fire wall FVS114 6-28 Advanced Virtual Private Networking 202-10098-01, April 2005[...]

  • Página 117

    Maintenance 7-1 202-10098-01, April 2005 Chapter 7 Maintenance This chapter describes how to use the mainte nance features of your FVS1 14 ProSafe VPN Firewall. These features can be found by clicking on the Maintenance heading in the main menu of the browser interface. V iewing VPN Firewall S t atus Information The Router S tatus menu provides sta[...]

  • Página 118

    Reference Manual for the ProSafe VPN Fire wall FVS114 7-2 Maintenance 202-10098-01, April 2005 This screen shows the following parameters: T able 7-1. FVS1 14 St atus fields Field Descripti on System Name The System Name assigned to the firewall. Firmware V ersion T he fi rewall firmware version. W AN Port These parameters apply to the Internet (W [...]

  • Página 119

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Maintenanc e 7-3 202-10098-01, April 2005 Click Show W AN S tatus to display the W AN connection status. Figure 7-2: W AN Connectio n S tatus screen This screen shows the following statistics:. Log action buttons are described in Ta b l e 7 - 2 T able 7-1. Connection St atus fields Field Descr[...]

  • Página 120

    Reference Manual for the ProSafe VPN Fire wall FVS114 7-4 Maintenance 202-10098-01, April 2005 Click Show S tatistics to display firewall usage statistics. Figure 7-3: Router S t atistics screen This screen shows the following statistics: W AN Status action buttons are described in the table below: T able 7-1. Router St atistics fields Field Descri[...]

  • Página 121

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Maintenanc e 7-5 202-10098-01, April 2005 V iewing a List of Att ached Devices The Attach ed Dev ic es me nu co nta i n s a tab l e of a ll IP devices that the firewall has discovered on the local network. From the main menu of the browser interface, under the Maintenance heading, select Attac[...]

  • Página 122

    Reference Manual for the ProSafe VPN Fire wall FVS114 7-6 Maintenance 202-10098-01, April 2005 Figure 7-5: Router Upgrade menu T o upload new firmware: 1. Download and unzip the new so ftware file from NETGEAR. 2. In the Router Upgrade menu, click the Br owse button and browse to the location of the binary (.BIN) upgrade file 3. Click Upload . Note[...]

  • Página 123

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Maintenanc e 7-7 202-10098-01, April 2005 Figure 7-6: Settings Ba cku p menu Y ou can use the Settings Backup me nu to back up your configuratio n in a file, restore from that file, or erase the configuration settings. Backing Up the Configuration T o save your settings, select the Backup tab.[...]

  • Página 124

    Reference Manual for the ProSafe VPN Fire wall FVS114 7-8 Maintenance 202-10098-01, April 2005 T o restore the factory default configuration settings without knowing th e login password or IP address, you must use the rese t button on the rear panel of the firewall. See “Restoring the Default Configuration and Password” on pag e 9-7 . Changing [...]

  • Página 125

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Maintenanc e 7-9 202-10098-01, April 2005 Figure 7-8: Diagnostics me nu • Ping or T race an IP addr ess – Ping : Use this to send a "ping" packet request to the specified IP ad dress. This is often used to test a connection. If the request "times out" (no repl y is rece[...]

  • Página 126

    Reference Manual for the ProSafe VPN Fire wall FVS114 7-10 Maintenance 202-10098-01, April 2005 Note : Rebooting wi ll break any existing conn ections e ither to the Router (such as this one) or through the Router (for example, LAN users acc essing the Internet ). However , connections to the Internet will automatically be re-established when possi[...]

  • Página 127

    Advanced Configuration 8-1 202-10098-01, April 2005 Chapter 8 Advanced Configuration This chapter describes how to configure the ad vanced features of your FVS1 14 ProSafe VPN Firewall. These features can be found under the Advanced heading in th e main menu of the browser interface. WA N S e t u p Using the W AN Setup page, you can set up a Defaul[...]

  • Página 128

    Reference Manual for the ProSafe VPN Fire wall FVS114 8-2 Advanced Configuration 202-10098-01, April 2005 • Default DMZ Server : Specifying a Default DMZ Server a llows you to set up a computer or server that is available to anyo ne on the Internet for services that you haven't defined . There are security issues with doing this , so only do[...]

  • Página 129

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Configur ation 8-3 202-10098-01, April 2005 T o assign a computer or server to be a Default DMZ server: 1. Click Default DMZ Server . 2. T ype the IP address for that server . 3. Click Apply . Respond to Ping on Internet W AN Port If you want the firewall to respond to a ping from the[...]

  • Página 130

    Reference Manual for the ProSafe VPN Fire wall FVS114 8-4 Advanced Configuration 202-10098-01, April 2005 The firewall contains a client that can connect to a dynamic DNS service provider . T o use this feature, you must select a service provider and obtain an account with them. After you have configured your account inform ation in the firewall, w[...]

  • Página 131

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Configur ation 8-5 202-10098-01, April 2005 Using the LAN IP Setup Options The LAN IP Setup menu allows configuration of LAN IP services such as DHCP and RIP . From the main menu of the browser in terface, un der Advanced, click on LAN IP Setup to view the menu shown below . Figure 8-[...]

  • Página 132

    Reference Manual for the ProSafe VPN Fire wall FVS114 8-6 Advanced Configuration 202-10098-01, April 2005 These addresses are part of the IETF-designated private address range for use in private networks, and should be suitabl e in most applications. If your network has a requirement to use a different IP addressing scheme, you can make those chang[...]

  • Página 133

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Configur ation 8-7 202-10098-01, April 2005 Using the Firewall as a DHCP server By default, the firewall functions as a DHCP (Dynamic Host Config uration Protocol) server , allowing it to assign IP , DNS server, and default gatewa y addresses to all computers connected to the firewall[...]

  • Página 134

    Reference Manual for the ProSafe VPN Fire wall FVS114 8-8 Advanced Configuration 202-10098-01, April 2005 Figure 8-4: Reserved IP Address menu 2. In the IP Address box, type the IP ad dress to assign to the PC or server . (Choose an IP address from the firewa ll’ s LAN subnet, such as 192.168.0.X .) 3. T ype the MAC Address of the PC or server . [...]

  • Página 135

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Configur ation 8-9 202-10098-01, April 2005 Figure 8-5: S t atic Routes t able T o add or edit a Static Route: 1. Click the Add button to open the Add/Edi t menu, shown below . Figure 8-6: S t atic Route Entry and Edit menu 2. T ype a route name for this static route in the Route Name[...]

  • Página 136

    Reference Manual for the ProSafe VPN Fire wall FVS114 8-10 Advanced C onfiguration 202-10098-01, April 2005 8. T ype a nu mber between 1 and 15 as the M etric value. This represents the number of firewalls between your network and the destination. Usually , a setting of 2 or 3 works, but if this is a direct connection, set it to 1. 9. Click Apply t[...]

  • Página 137

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Configur ation 8-11 202-10098-01, April 2005 Figure 8-7: Remote Management menu T o confi gure your firewall for Remote Management: 1. Select the T urn Remote Management On check box. 2. Specify what external addresses will be allowed to access the firewall’ s remote management. Not[...]

  • Página 138

    Reference Manual for the ProSafe VPN Fire wall FVS114 8-12 Advanced C onfiguration 202-10098-01, April 2005 W eb browser access norma lly uses the standard HTTP service port 80. For greater security , you can change th e remote management web in terface to a custom port by entering that number in the box provided . Choose a number between 1024 and [...]

  • Página 139

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Advanced Configur ation 8-13 202-10098-01, April 2005 UPnP Universal Plug and Play (UPnP) helps devices, su ch as Internet appliances and computers, access the network and connect to oth er devices as need ed. UPnP devices can automatically discover the services from other registered UPnP devi[...]

  • Página 140

    Reference Manual for the ProSafe VPN Fire wall FVS114 8-14 Advanced C onfiguration 202-10098-01, April 2005 Click Refresh to update the portma p table and to show the active ports that are currently opened by UPnP devices.[...]

  • Página 141

    Troubleshooting 9-1 202-10098-0 1, April 2005 Chapter 9 T roubleshooting This chapter gives information about troubleshooting y our FVS1 14 ProSafe VPN Firewall. After each problem description, instructio ns are provided to help you d iagnose and solve the problem. Basic Functioning After you turn on power to th e firewall, the following seque nce [...]

  • Página 142

    Reference Manual for the ProSafe VPN Fire wall FVS114 9-2 Troubleshooting 202-10098-01 , April 2005 LEDs Never T urn Off When the firewall is turned on, the LEDs turn on brief ly and th en turn of f. If all the LEDs stay on, there is a fault within the firewall. If all LEDs are still on one minute after power up: • Cycle the power to see if the f[...]

  • Página 143

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Troubleshooting 9-3 202-10098-01 , April 2005 T roubleshooting the Web Configuration Interface If you are unable to access the firewall’ s W eb Conf iguration interface from a PC on your local network, check the following : • Check the Ethernet connection betwe en the PC and the firewall a[...]

  • Página 144

    Reference Manual for the ProSafe VPN Fire wall FVS114 9-4 Troubleshooting 202-10098-01 , April 2005 T roubleshooting the ISP Connection If your firewall is unable to a ccess the Internet, you should first determine whether the firewall is able to obtain a W AN IP address from the ISP . Un less you have been assigned a static IP address, your firewa[...]

  • Página 145

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Troubleshooting 9-5 202-10098-01 , April 2005 OR Configure your firewall to sp oof your PC’ s MAC address. This can be done in the Basic Settings menu. Refer to “How to Manually Configure Y our Internet Co nnection” on page 3- 1 1 . If your firewall can obtain an IP addre ss, but your PC[...]

  • Página 146

    Reference Manual for the ProSafe VPN Fire wall FVS114 9-6 Troubleshooting 202-10098-01 , April 2005 If the path is working, you see this message: Reply from < IP address >: bytes=32 time=NN ms TTL=xxx If the path is not working, you see this message: Request timed out If the path is not functioning correctly , you could have one of the foll o[...]

  • Página 147

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Troubleshooting 9-7 202-10098-01 , April 2005 — If your ISP assigned a host name to your P C, enter that host name as the Account Name in the Basic Settings menu. — Y our ISP could be rejecting the Ethernet MAC addresses of all but one of your PCs. Many broadband ISPs restrict access by on[...]

  • Página 148

    Reference Manual for the ProSafe VPN Fire wall FVS114 9-8 Troubleshooting 202-10098-01 , April 2005[...]

  • Página 149

    Technical Specifications A-1 202-10098-01, April 2005 Appendix A T echnical Specifications This appendix provides tech nical specifications for the FVS1 14 ProSafe VPN Firewall. Network Protocol and St andards Compatibility Data and Routing Protocols: TCP/IP , RIP-1, RIP-2, DHCP PPP over Ethernet (PPPoE) Power Adapter North America: 120V , 60 Hz, i[...]

  • Página 150

    Reference Manual for the ProSafe VPN Fire wall FVS114 A-2 Technical Specifications 202-10098-01, April 2005 Electromagnetic Emissions Meets requirements of: FCC Part 15 Class B VCCI Class B EN 55 022 (CISPR 22 ), Class B Interface S p ecifications LAN: 10BASE-T or 100BASE-Tx, RJ-45 W AN: 10BASE-T or 100BASE-Tx, RJ-45[...]

  • Página 151

    Network, Routing, and Firewall Basics B-1 202-10098-01, April 2005 Appendix B Network, Routing, and Firewall Basics This chapter provides an overview of IP networks, routing, and n etworking. Related Publications As you read this document, you may be dire cted to various RF C documents for further information. An RFC is a Request For Comment (RFC) [...]

  • Página 152

    Reference Manual for the ProSafe VPN Fire wall FVS114 B-2 Network, Routing, and Firewall Basics 202-10098-01, April 2005 What is a Router? A router is a device that forwards traffic between networks based on network layer information in the data and on routing tables main tained by the router . In these rou ting tables, a router builds up a logical[...]

  • Página 153

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Network, Routing, and Firewall Basics B-3 202-10098-01, April 2005 The latter version is easier to remember and easier to enter into your computer . In addition, the 32 bits of the ad dress are subdivided into two part s. The first part of the address identifies the network, and the seco nd pa[...]

  • Página 154

    Reference Manual for the ProSafe VPN Fire wall FVS114 B-4 Network, Routing, and Firewall Basics 202-10098-01, April 2005 • Class C Class C addresses can have 254 hosts on a netw ork. Class C addre sses use 24 bits for the network address and eight bits for the node. They are in this range: 192.0.1.x to 223.255.254.x. • Class D Class D addresses[...]

  • Página 155

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Network, Routing, and Firewall Basics B-5 202-10098-01, April 2005 As a shorter alternative to dotted-decimal notation, the netmask may also be expressed in terms of the number of ones from the left. This number is ap pended to the IP address, following a backward slash (/), as “/n.” In th[...]

  • Página 156

    Reference Manual for the ProSafe VPN Fire wall FVS114 B-6 Network, Routing, and Firewall Basics 202-10098-01, April 2005 Although the preceding example uses the entire third octet for a subnet address, note that you are not restricted to octet boundaries in subnetting. T o create more network numbers, you need only shift some bits from the host a d[...]

  • Página 157

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Network, Routing, and Firewall Basics B-7 202-10098-01, April 2005 Configure all hosts on a LAN segment to use the same netmask for the following reasons: • So that hosts recognize local IP broadcast packets When a device broadcasts to its segment neighb ors, it uses a destination address of[...]

  • Página 158

    Reference Manual for the ProSafe VPN Fire wall FVS114 B-8 Network, Routing, and Firewall Basics 202-10098-01, April 2005 Single IP Address Operation Using NA T In the past, if multiple PCs on a LAN needed to access the Internet simultaneously , you had to obtain a range of IP addresses from the ISP . This type of Internet account is more costly tha[...]

  • Página 159

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Network, Routing, and Firewall Basics B-9 202-10098-01, April 2005 MAC Addresses an d Address Re solution Protocol An IP address alone cannot be used to deliver da ta from one LAN device to another . T o send data between LAN devices, you must convert the IP ad dress of the destination device [...]

  • Página 160

    Reference Manual for the ProSafe VPN Fire wall FVS114 B-10 Network, Routing, and Firewall Ba sics 202-10098-01, April 2005 When a PC accesses a resource by its descriptive name, it first contacts a DNS s erver to obtain the IP address of the resource. The PC sends the d esired message using the IP address. Ma ny lar ge organizations, such as ISPs, [...]

  • Página 161

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Network, Routing, a nd Firewall Basics B-11 202-10098-01, April 2005 What is a Firewall? A firewall is a device that protects one netw ork from another , while allowing communication between the two. A firewall incorporates the functi ons of the NA T router , while adding features for dealing [...]

  • Página 162

    Reference Manual for the ProSafe VPN Fire wall FVS114 B-12 Network, Routing, and Firewall Ba sics 202-10098-01, April 2005 Category 5 Cable Quality Category 5 distributed cable that me ets ANSI/EIA/ TIA-568-A building wiring standa rds can be a maximum of 328 feet (ft.) or 10 0 meters (m) in length, div ided as follows: 20 ft. (6 m) between the hu [...]

  • Página 163

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Network, Routing, a nd Firewall Basics B-13 202-10098-01, April 2005 Inside T wisted Pair Cables For two devices to communicate, th e transmitter of each device must be connected to the receiver of the other device. The cro sso ver function is usually implemented inte rnally as part of the cir[...]

  • Página 164

    Reference Manual for the ProSafe VPN Fire wall FVS114 B-14 Network, Routing, and Firewall Ba sics 202-10098-01, April 2005 Figure B-6: Category 5 UTP cable with male RJ-45 plug at eac h end Note : Flat “silver satin” tele phone cable may have th e same RJ-45 plug. Howeve r , using telephone cable results in excessive collisio ns, causing the at[...]

  • Página 165

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Network, Routing, a nd Firewall Basics B-15 202-10098-01, April 2005 The FVS1 14 VPN Firewall incorporates Auto Uplink TM technology (also called MDI/MDIX). Each LOCAL Ethernet port will automatically sens e whether the Ethernet cable plugged into the port should have a normal con nection (e.g[...]

  • Página 166

    Reference Manual for the ProSafe VPN Fire wall FVS114 B-16 Network, Routing, and Firewall Ba sics 202-10098-01, April 2005[...]

  • Página 167

    Virtual Private Networking C-1 202-10098-01, April 2005 Appendix C V irtual Private Networking There have been many improvem ents in the Internet including Quality of Service, network performance, and inexpensive technologies, such as DSL. But one of the most important advances has been in V irtual Private Networking (VPN) Inte rnet Protocol securi[...]

  • Página 168

    Reference Manual for the ProSafe VPN Fire wall FVS114 C-2 Virtual Private Networking 202-10098-01, April 2005 • Remote Access: Remote access enables telecommuters and mobile workers to access e-mail and business applications. A dia l-up connection to an organization’ s modem po ol is on e method of access for remote workers, but is expensive be[...]

  • Página 169

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Virtual Private Networking C-3 202-10098-01, April 2005 • Encapsulating Security Payload (ESP) : Provides confidentiality , authentication, and integrity . • Authentication Header (AH) : Provides authentication and integrity . • Internet Key Exchange (IKE) : Provides key management and S[...]

  • Página 170

    Reference Manual for the ProSafe VPN Fire wall FVS114 C-4 Virtual Private Networking 202-10098-01, April 2005 The ESP header is inserted into the packet betw een the IP header and any subsequent packet contents. However , because ESP encrypts the data, the payload is changed. ESP does not encrypt the ESP header , nor does it encrypt the ESP authent[...]

  • Página 171

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Virtual Private Networking C-5 202-10098-01, April 2005 Mode SAs operate using modes. A mode is the method in which the IPSec protocol is applied to the packet. IPSec can be used in tunne l mode or tran sport mode. T ypically , the tunnel mode is used for gateway-to-gateway IPSec tunnel protec[...]

  • Página 172

    Reference Manual for the ProSafe VPN Fire wall FVS114 C-6 Virtual Private Networking 202-10098-01, April 2005 Key Management IPSec uses the Internet Key Exchange (IKE) protoc ol to facilitate and automate the SA setup and the exchange of keys between parties transferring data. Using keys ensures that only the sender and receiver of a message can ac[...]

  • Página 173

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Virtual Private Networking C-7 202-10098-01, April 2005 VPN Process Overview Even though IPSec is standards-based, e ach vendo r has its own set of terms and procedures for implementing the standard. Because of these differences, it may be a good idea to review some of the terms and the generi[...]

  • Página 174

    Reference Manual for the ProSafe VPN Fire wall FVS114 C-8 Virtual Private Networking 202-10098-01, April 2005 Y ou need to know the subnet mask of both gateway LAN Conn ectio ns. Refer to Appen dix A, “T echnical Specifications ” to gather the necessary address and subnet mask information to aid in the configuration and troubleshooting process.[...]

  • Página 175

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Virtual Private Networking C-9 202-10098-01, April 2005 Figure C-5: VPN tunnel Security Associat on (SA) The SA contains all the information necessary for gateway A to negotiate a secure and encrypted communication stream with gateway B. This comm unication is often referred to as a “tunnel.[...]

  • Página 176

    Reference Manual for the ProSafe VPN Fire wall FVS114 C-10 Virtual Private Networking 202-10098-01, April 2005 2. IKE Phase I. a. The two parties negotiate the en cryption and au thentication algorithms to use in the IKE SAs. b. The two parties authenticate each other us ing a predetermined mechanism, such as preshared keys or digital certificates.[...]

  • Página 177

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Virtual Private Networking C-11 202-10098-01, April 2005 VPNC IKE Phase II Parameters The IKE Phase 2 parameters used in Scenario 1 are: •T r i p l e D E S • SHA-1 • ESP tunnel mode • MODP group 1 • Perfect forward secrecy for rekeying • SA lifetime of 28 800 seconds (one hour) T e[...]

  • Página 178

    Reference Manual for the ProSafe VPN Fire wall FVS114 C-12 Virtual Private Networking 202-10098-01, April 2005 Relevant RFCs listed numerical ly: • [RFC 791] Internet Pr otocol DARP A Internet Pr ogram Pr otocol Specifi cation , Information Sciences Institute, US C, September 1981. • [RFC 1058] Routing Information Pr otocol , C Hedrick, Rutgers[...]

  • Página 179

    Preparing Your Netwo rk D-1 202-10098-01, April 2005 Appendix D Prep aring Y our Network This appendix describes how to prepare your ne twork to connect to the Internet through the FVS1 14 ProSafe VPN Firewall and how to verify th e readiness of broadband Internet service from an Internet service provider (ISP). Prep aring Y our Computers for TCP/I[...]

  • Página 180

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-2 Preparing Yo ur Network 202-10098-01, April 2005 In your IP network, each PC and the firewall must be assigned a unique IP addresses. Each PC must also have certain other IP configuration information such as a subn et mask (netmask), a domain name s erver (DNS) address, and a defau lt gatewa[...]

  • Página 181

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Preparing Your Netwo rk D-3 202-10098-01, April 2005 Y ou must have an Ethernet adapt er , the TCP/IP protocol, and Client for M icrosoft Networks. If you need to install a ne w adapter , follow these steps: a. Click the Add button. b. Select Adapter , and then click Add . c. Select the manufa[...]

  • Página 182

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-4 Preparing Yo ur Network 202-10098-01, April 2005 If you need Client for Micro soft Networks: a. Click the Add button. b. Select Client , and then click Add . c. Select Microsoft . d. Select Client for Microsoft Networks , and then click OK . 3. Restart your PC for the changes to take ef fect[...]

  • Página 183

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Preparing Your Netwo rk D-5 202-10098-01, April 2005 V erify the following settings as shown: • Client for Microsoft Network exists • Ethernet adapter is present • TCP/IP is present • Primary Network Logon is set to W indows logon Click on the Properties button. The following TCP/IP Pr[...]

  • Página 184

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-6 Preparing Yo ur Network 202-10098-01, April 2005 Selecting Windows’ In ternet Access Method 1. On the W indows taskbar , click the St a r t button, point to Settings , and then click Co ntrol Panel . 2. Double-click the Internet Options icon. 3. Select I want to set up my Internet connecti[...]

  • Página 185

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Preparing Your Netwo rk D-7 202-10098-01, April 2005 1. On the W indows taskbar , click the St a r t button, and then click Run . 2. Ty p e winipcfg , and then click OK . The IP Configuration window opens, which lists (a mong other things), your IP address, subnet mask, and default gateway . 3[...]

  • Página 186

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-8 Preparing Yo ur Network 202-10098-01, April 2005 8. Then, restart your PC. Enabling DHCP to Automatically Configure TCP/IP Settings Y ou will find there are many similarities in th e procedures for different W indows systems when using DHCP to configure TCP/IP . The following steps will walk[...]

  • Página 187

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Preparing Your Netwo rk D-9 202-10098-01, April 2005 • Now you should be at the Local Area Network Connection S tatus window . This box displays the conn ection status, duration, speed, and activity statistics. • Administrator logon access rights are needed to use this window . • Click t[...]

  • Página 188

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-10 Preparing Your Network 202-10098-01, April 2005 DHCP Configuration of TC P/IP in Windows 2000 Once again, after you have installed the network card, TCP/IP for W indows 2000 is con figured. TCP/IP should be added by de fault and set to DHCP without your hav ing to configure it. However , if[...]

  • Página 189

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Preparing Your Netwo rk D-11 202-10098-01, April 2005 • Click on the My Network Places icon on the W indows desktop. This will bring up a window called Network and Dial-up Connectio ns. • Right click on Local Ar ea Connection a nd select Properties . •T h e Local Area Connection Pr opert[...]

  • Página 190

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-12 Preparing Your Network 202-10098-01, April 2005 • W ith Internet Protocol (TCP/IP) selected, click on Properties to open the Internet Protocol (TCP/IP) Propert ies dialogue box. • V erify that • Obtain an IP address automatically is selected. • Obtain DNS server address automaticall[...]

  • Página 191

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Preparing Your Netwo rk D-13 202-10098-01, April 2005 DHCP Configuration of TCP/IP in Windows NT4 Once you have installed the network card, you need to configure the TCP/IP env ironment for W indows NT 4.0. Follow this procedure to configure TCP/IP with DHCP in W indows NT 4.0 . • Choose Set[...]

  • Página 192

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-14 Preparing Your Network 202-10098-01, April 2005 • Highlight the TCP/IP Pr otocol in the Network Protocols box, and click on the Properties button.[...]

  • Página 193

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Preparing Your Netwo rk D-15 202-10098-01, April 2005 V erifying TCP/IP Properties fo r W indows XP , 2000, and NT4 T o check your PC’ s TCP/IP configuration: 1. On the W indows taskbar , click the St a r t button, and then click Run . The Run window opens. 2. Ty p e cmd and then click OK . [...]

  • Página 194

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-16 Preparing Your Network 202-10098-01, April 2005 • The default gateway i s 192.168.0.1 4. Ty p e exit Configuring the Macintos h for TCP/IP Networking Beginning with Macintosh Operating System 7 , TCP/ IP is already installed on the Macint osh. On each networked Macintosh, you will need to[...]

  • Página 195

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Preparing Your Netwo rk D-17 202-10098-01, April 2005 2. If not already selected, select Built- in Ethernet in the Configure list. 3. If not already selected, Select Using DHCP in the TCP/IP tab. 4. Click Save . V erifying TCP/IP Properties for Macintosh Computers After your Macintosh is confi[...]

  • Página 196

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-18 Preparing Your Network 202-10098-01, April 2005 V erifying the Readiness of Y our Internet Account For broadband access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using a cable modem or DSL mode m. This modem must [...]

  • Página 197

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Preparing Your Netwo rk D-19 202-10098-01, April 2005 • An IP address and subnet mask • A gateway IP address, which is the address of the ISP’ s router • One or more domain name server (DNS) IP addresses • Host name and domain suf fix For example, your account’ s full server names [...]

  • Página 198

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-20 Preparing Your Network 202-10098-01, April 2005 If an IP address appears under Installed Gatewa ys, write down the address. This is the ISP’ s gateway address. Select the address and then click Remove to remove the gateway address. 6. Select the DNS Configuration tab. If any DNS server ad[...]

  • Página 199

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Preparing Your Netwo rk D-21 202-10098-01, April 2005 Rest arting the Network Once you’ve set up yo ur computers to work with the fi rewall, you must reset the network for the devices to be able to communicate correctly . Rest art any computer that is connected to the FVS1 14 VPN Firewall. A[...]

  • Página 200

    Reference Manual for the ProSafe VPN Fire wall FVS114 D-22 Preparing Your Network 202-10098-01, April 2005[...]

  • Página 201

    202-10098-01, April 20 05 Glossary 1 Glossary List of Glossary T erms Use the list below to find definitions for technical terms used in this manual. Numeric 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. 100BASE-Tx IEEE 802.3 specification for 100 Mbps Ethernet over twis ted pair wiring. 802.1x 802.1x defines port[...]

  • Página 202

    Reference Manual for the ProSafe VPN Fire wall FVS114 2 Glossary 202-10098-01, April 20 05 AES AES stands for Advanced Encryption Standard. AES is a symmetric key encryption technique that will replace the commonly used Data Encryption Standard (DES). Not only does AE S provide more security than DES and 3DES, it also has better performan ce, makin[...]

  • Página 203

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Glossary 3 202-10098-01, April 20 05 Broadcast A packet sent to all devices on a network. C Class of Service A term to describe treating different types of traffic with dif fer en t levels of service priority . Higher priority traffic gets faster treatment during times of switch congestion CA [...]

  • Página 204

    Reference Manual for the ProSafe VPN Fire wall FVS114 4 Glossary 202-10098-01, April 20 05 Specifying a Default DMZ Server allows you to set up a computer or server that is available to anyone on the Internet for services that you have n't defined. There are security issues with doin g this, so only do th is if you'll willing to risk open[...]

  • Página 205

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Glossary 5 202-10098-01, April 20 05 Ethernet A LAN specification develo ped jointly by Xerox, Inte l and Digital Equipment Corporation. Ethernet networks transmit packets at a rate of 10 Mbps. G Gateway A local device, usually a router , t hat con nec ts ho st s on a local net wor k to ot h e[...]

  • Página 206

    Reference Manual for the ProSafe VPN Fire wall FVS114 6 Glossary 202-10098-01, April 20 05 gateway then forwards the packet directly to the computer whose address is specified. Because a message is divided into a number of packets, each packet can, if necessary , be sent by a different route across the Internet. Packets can ar rive in a dif ferent [...]

  • Página 207

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Glossary 7 202-10098-01, April 20 05 M MAC (1) Medium Access Control. In LANs, the sublayer of the data link contr ol layer that supports medium-dependent fun ctions and uses the services of the physical layer to provide services to the logical link control (LLC) sublayer . The MAC sublayer in[...]

  • Página 208

    Reference Manual for the ProSafe VPN Fire wall FVS114 8 Glossary 202-10098-01, April 20 05 PPP A protocol allowing a computer using TCP/ IP to connect directly to the Internet. PPPoA PPPoA. PPP over A TM is a protocol for connecting remote hosts to the Internet over an always-on connection by simulati ng a dial-up connection. PPPoE PPPoE. PPP over [...]

  • Página 209

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Glossary 9 202-10098-01, April 20 05 R RADIUS Short for Remote Authentication Di al-In User Service, RADIUS is an authentication system. Using RADIUS, you must en ter your user name and pa ssword before gaining acces s to a network. This information is passed to a RADIUS serv er , which checks[...]

  • Página 210

    Reference Manual for the ProSafe VPN Fire wall FVS114 10 Glossary 202-10098-01, April 20 05 U Universal Plug and Play UPnP . A networking architecture that provides compatibilit y among networking tech nol ogy . UPnP compliant routers provide broadband user s at home and small businesses with a seamless way to participate in online games, videoconf[...]

  • Página 211

    Reference M anual for the Pr oSafe VPN Fire wall FVS114 Glossary 11 202-10098-01, April 20 05[...]

  • Página 212

    Reference Manual for the ProSafe VPN Fire wall FVS114 12 Glossary 202-10098-01, April 20 05[...]