NETGEAR FR328S Cable/DSL ProSafe Firewall FR328S FR328S manual

M-10207-01, Reference Manual v2 October 200 3 NETGEAR , Inc. 4500 Great America Parkway Santa Clara, CA 95 054 USA Phone 1-888-NETGEAR FR328S ProSafe Firewall with Dial Back-Up Reference Manual v2[...]

ii M-10207-01, Reference Manual v2 © 2003 by NETGEAR, Inc. Full Manual. All rights reserved. T rademarks NETGEAR and Auto Uplink are tradema rks or regis ter ed trademarks of Netgear , Inc. Microsoft, W indows, and W indow s NT are registered trademar ks o f Microsoft Corporation. Other brand and product names are registered tradem arks or tradema[...]

M-10207-01, Reference Manual v2 iii Bestätigung des Herstellers/Importe urs Es wird hiermit bestätigt, daß dasFR328S ProSafe Firewall with Dial Back-Up gemäß der im BMP T -AmtsblVfg 243/ 1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betr eiben einiger Geräte (z.B. T estsender) kann jedoch gewissen Besc[...]

M-10207-01, Reference Manual v2 iv[...]

Contents v M-10207-01, Reference Manual v2 Content s Chapter 1 About This Manual Audience, V ersions , Conventions ............. ................ ................. ............. ................ ........ 1-1 How to Use this Manual .. ............. ................. ................ ............. ................ ................ ..... 1-2 How to Pr[...]

M-10207-01, Reference Manual v2 vi Contents How to Complete the Wizard-Detect ed Dyna mic IP Acc ount Setup ................ ...... 3-1 1 How to Complete Wizard-Det ected Fixed IP Account Setup ........... ... ... ... ... .... ... ... 3-12 Configuring a Serial Port as the Primary In ternet Connection ............ ................ .......... 3-13 Ho[...]

Contents vii M-10207-01, Reference Manual v2 Considerations for Inbound Rules ............... ............. ................. ............ .......... 5-10 Outbound Rules (Service Blocking) ... ....... ...... ................ ............. ................ .......... 5-1 1 Outbound Rule Example: Blocking Instant Messenger ................ ..........[...]

M-10207-01, Reference Manual v2 viii Contents MTU Size ..... ................ ............. ................ ............. ............. ................ ............. ........ 7-3 DHCP ....... ............. ................ ............. ................ ............. ............. ................ ............ 7-4 Use router as DHCP server ......[...]

Contents ix M-10207-01, Reference Manual v2 Private IP Addresses ....... ... ... .... ... ... ... .... ... ............. ... ... ... .... ... ............. ... ... ... .... ... ... . B-7 Single IP Address Operation Using NA T .................. ............. ................. ................ ....... B-8 MAC Addresses and Address Re solution Protoc[...]

M-10207-01, Reference Manual v2 x Contents Glossary Index[...]

About This Manual 1-1 M-10207-01, Reference Manual v2 Chapter 1 About This Manual Thank your for purcha sing the NETGEAR ™ FR328S ProSafe Firewall with Dial Back-Up. This chapter describes the target audience, versio ns, conventions, and features o f this manual. Audience, V ersions, Conventions This reference manual assumes that the reader h as [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 1-2 About This Manual M-10207-01, Reference Manual v2 How to Use this Manual The HTML ver sion of this manual in cludes a vari et y of navigation features as well as links to PDF versions of the full manual and indiv idual chapte rs. Figure Preface -2: HTML ver sion of this manual 1. Le[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 About This Manual 1-3 M-10207-01, Reference Manual v2 How to Print this Manual T o print this manual you man choose one of th e following several optio ns, according to your needs. • Printing a “How T o” Sequence of S teps in the HTML V iew . Use the Print button on the upper righ[...]

[...]

Introduction 2-1 M-10207-01, Reference Manua l v2 Chapter 2 Introduction This chapter describes the features of the N ETGEAR FR328S ProSafe Firewall with Dial Back-Up. The FR328S is a complete security solutio n that protects your ne twork from attacks and intrusions. Unlike simple Internet sharing routers that rely on Network Address T ranslation [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 2-2 Introduction M-10207-01, Reference Manua l v2 • Remote Access Server (RAS) allows you to log in remotely through the serial port to access a server on your LAN, other LAN resources, or th e Internet based on a user name and password you define. • LAN-to-LAN access betwee n two F[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Introduction 2-3 M-10207-01, Reference Manual v2 • Automatic Configuration of Attached PCs by DHCP The FR328S dynamically assigns network configuration information, in cluding IP , gateway , and domain name server (DNS) addresses, to attached PCs on the LAN using the Dynamic Host Conf[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 2-4 Introduction M-10207-01, Reference Manua l v2 • Browser-based management Browser-based configuration allows you to ea sily configure your firewall from almo st any type of personal computer , such as W indows, Macintosh, or Linux. A user-friendly Setup W izard is provided and onli[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Introduction 2-5 M-10207-01, Reference Manual v2 The Firewall’ s Front Panel The front panel of the FR328S ( Figure 2-1 ) conta ins status LEDs. Figure 2-1: FR328S Front Pane l Y ou can use some of the LED s to verify connections . T able 2-1 lists and describes each LED on the front [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 2-6 Introduction M-10207-01, Reference Manua l v2 The Firewall’ s Re ar Panel The rear panel of the FR328S ( Figure 2-2 ) con tains the connec tions identified below . Figure 2-2: FR328S Rear Pan el V iewed from left to right, the rear panel contains the following elements: • DB-9 s[...]

Connecting the Fi rewa ll to the Internet 3-1 M-10207-01, Reference Manual v2 Chapter 3 Connecting the Firewall to the Internet This chapter describes how to set up the firewall on your Local Area Network (LAN), connect to the Internet, perform basic configuration of yo ur FR328S ProSafe Firewall with Dial Back-Up using the Setup W izard, or how to[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 3-2 Connecting the Firewall to the Intern et M-10207-01, Reference Manua l v2 Configuration Requirement s For the initial connection to the In ternet and configuration of yo ur firewall, you will need to connect a computer to th e firewall which is set to automatica lly get its TCP/IP c[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to th e Int er n et 3-3 M-10207-01, Reference Manual v2 Record Y our Internet Co nnection Information Print this page. Fill in the configuration parameters from your Internet Service Provider (ISP). ISP Login Name: The login name and password are case sensitiv[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 3-4 Connecting the Firewall to the Intern et M-10207-01, Reference Manua l v2 Connecting the FR328S Fire wall to Y our LAN This section provides instructions for connecting the FR328S ProS afe Firewall with Dial Back-Up to your Local Area Network (LAN). Note: The Resource CD included wi[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to th e Int er n et 3-5 M-10207-01, Reference Manual v2 c. Connect the Ethernet cable ( A) from your Cable or DSL modem to the FR328S’ s Internet port. Figure 3-2: Connect the Cable or DSL Modem to the f ir ewall d. Connect the Ethernet cable ( B) which came[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 3-6 Connecting the Firewall to the Intern et M-10207-01, Reference Manua l v2 e. T u rn on the Cable or DSL modem and wait about 30 seconds for the lights to stop blinking. 2. Log in to the Fir ewall Note: T o connect to the firewall, your computer needs to be configured to obtain an IP[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to th e Int er n et 3-7 M-10207-01, Reference Manual v2 A login window opens as shown in Figure 3-5 below: Figure 3-5: Login window d. For security reasons, the firewall has its own user name and pass word. When prompted, enter admin for the firewall User Name[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 3-8 Connecting the Firewall to the Intern et M-10207-01, Reference Manua l v2 b. Select the NA T option and click Next to follow the steps in the Setup W izard to input the configuration parameters from yo ur ISP to conn ect to the Internet. If you c hoose not to use NA T , each co mput[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connecting th e Fir ew all to th e Int er n et 3-9 M-10207-01, Reference Manual v2 When the W izard launches, select Y es in the menu below to allow the firewall to automatically determine your connection. Figure 3-7: Se tup Wizard Note: If you do not see the Setup W izard, click th e S[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 3-10 Connecting the Fir ewall to the Internet M-10207-01, Reference Manua l v2 How to Complete the Wizard -Detected Login Account Setup If the Setup W izard determines that your Internet service account uses a login protocol such as PPP over Ethernet (PPPoE), you will be di rect ed to a[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connectin g the Fi r ew all to th e Int er n et 3-11 M-10207-01, Reference Manual v2 4. Click Apply to save your settings. 5. Click T est to test your Internet connection. If th e NETGE AR website does not appear within one minute, refer to Chapter 8, T roubleshooting ”. How to Comple[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 3-12 Connecting the Fir ewall to the Internet M-10207-01, Reference Manua l v2 3. The Router ’ s MAC Address is the Ethernet MAC address that will be used by the firewall on the Internet port. If your ISP allows access from only one specific computer ’ s Ethernet MAC addres s, selec[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connectin g the Fi r ew all to th e Int er n et 3-13 M-10207-01, Reference Manual v2 1. Enter your assigned IP Address, Subnet Mask , and the IP Address of your ISP’ s gateway router . This information should have been provided to you by your ISP . Y o u will need the configuration pa[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 3-14 Connecting the Fir ewall to the Internet M-10207-01, Reference Manua l v2 b. From the Setup Basic Settings menu, click Serial Port. Figure 3-1 1: Serial Internet Connection configur ation menu c. Fill in the ISDN or analog ISP Internet configuration parameters as appropriate: • F[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connectin g the Fi r ew all to th e Int er n et 3-15 M-10207-01, Reference Manual v2 Note: Y ou can validate modem string settings by first connectin g the modem directly to a PC, establishing a connection to your ISP , and then copying the modem string settings from the PC configuratio[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 3-16 Connecting the Fir ewall to the Internet M-10207-01, Reference Manua l v2 Manually Configuring Y our Internet Connection Y ou can manually configure your firewall using t he menu below , or you can allow the Setup W izard to determine your configuration as described in the pre vio [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Connectin g the Fi r ew all to th e Int er n et 3-17 M-10207-01, Reference Manual v2 How to Manually Configure th e Primary Intern et Connection Use these steps to manually configure the primary Internet connection in th e Basic Settings menu. 1. Select your Internet connection type (br[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 3-18 Connecting the Fir ewall to the Internet M-10207-01, Reference Manua l v2[...]

Serial Port Configuration 4-1 M-10207-01, Reference Manual v2 Chapter 4 Serial Port Configuration This chapter describes how to config ure the serial port options o f your FR328S ProSafe Firewall with Dial Bac k-Up. The FR328S serial po rt lets you share the bro adband connection of another FR328S, share resources between two LANs, and take advanta[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 4-2 Serial Port Configuration M-10207-01, Reference Manua l v2 Configuring a Serial Port Modem Y ou can configure a se ria l port modem for any of the features described above. Be sure you have prepared the basic re quirements listed below , then follow the ‘how to’ procedure. Basic[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Serial Port Con figuration 4-3 M-10207-01, Reference Manual v2 — If your modem is not on the list, select “U ser Defined” and enter the Modem Properties. If you are using the “User Defi ned” selection and configuring your own modem stings, fill in the Modem Properties settings[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 4-4 Serial Port Configuration M-10207-01, Reference Manua l v2 Figure 4-2: Auto-Rollover config uration menu 3. Configure the Auto-Rollover settings. 4. Click Apply for the changes to take effect . Configuring Dial-in on the Serial Port Dial-in lets a single remote computer connect to t[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Serial Port Con figuration 4-5 M-10207-01, Reference Manual v2 Basic Requirement s for Dial-in Dial-in requires these elements: 1. A broadband connection to th e FR328S. 2. An analog phone line. 3. A serial modem properly configured a nd attached to the DB9 co nnector on the serial po r[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 4-6 Serial Port Configuration M-10207-01, Reference Manua l v2 Configuring LAN-to-LAN Settings LAN-to-LAN enables d irect comm unicat ions between two FR328S firewalls. Figure 4-4: LAN-to-LAN ne twork configuratio n Basic Requirement s for LAN-to-LAN Connections Serial port LAN-to-LAN c[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Serial Port Con figuration 4-7 M-10207-01, Reference Manual v2 Figure 4-5: LAN-to-LAN configur ation menu 3. Configure the LAN-to-LAN settings. Note: The LAN subnet address of each FR328S must be dif ferent. 4. Click Apply for the changes to take effect .[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 4-8 Serial Port Configuration M-10207-01, Reference Manua l v2[...]

Protecting Your Network 5-1 M-10207-01, Reference Manual v2 Chapter 5 Protecting Y our Network This chapter describes how to use the basic firewa ll features of the FR328S ProSafe Firewall with Dial Back-Up to protect yo ur network. Protecting Access to Y our FR328S Firewall For security reasons, the firewall has its own user name and password. Als[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 5-2 Protecting Your Networ k M-10207-01, Reference Manua l v2 2. From the Main Menu of the browser interface, under the Maintenanc e heading, select Set Password to bring up the menu shown in Figure 5-1 . Figure 5-1: Set Pass word menu 3. T o change the password, first enter the old p a[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5-3 M-10207-01, Reference Manual v2 Blocking Keywords, Sites, and Services The firewall provides a variety of options for blocking Internet based content and communications services. W ith its content filtering feature, the FR328S Firewall prevents objectionable [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 5-4 Protecting Your Networ k M-10207-01, Reference Manua l v2 2. Click on the Block Sites link of the Security menu. Figure 5-2: Block Sites menu 3. T o enable keyword blocking, check “T urn keyw or d blocking on”, en ter a keyword or domain in the Keyword box, click Add Keyword, th[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5-5 M-10207-01, Reference Manual v2 Services Services are functions performed by server computers at the request of client computers. For example, W eb servers serve web pages, time serve rs serve time and date information, and game hosts serve data about other p[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 5-6 Protecting Your Networ k M-10207-01, Reference Manua l v2 3. Modify the menu show n below for defining or editing a service. Figure 5-4: Add Services menu 4. Click Apply to save your changes. Rules Firewall rules are used to block or allow specific traffic passing thro ugh fro m one[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5-7 M-10207-01, Reference Manual v2 T o access the Rules configuration of the FR328S, c lick the Rules link on the main menu, then click Add for either an Outbound or In bound Service. Figure 5-5. Rules menu • T o edit an existing rule, select its button on the[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 5-8 Protecting Your Networ k M-10207-01, Reference Manua l v2 Remember that allowing inbound services opens holes in your fi rewall. Only enab le those ports that are necessary fo r your network. Following are tw o application exampl es of in bound rules: Inbound Rule Example: A Local P[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5-9 M-10207-01, Reference Manual v2 The parameters are: •S e r v i c e From this list, select the application or serv ice to be allowed or blocked. The list already displays many co mmon services, but you ar e not limited to these choices. Use the Add Services [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 5-10 Protecting Your Networ k M-10207-01, Reference Manua l v2 Inbound Rule Example: Allowing V ideoconference from Re stricted Addresses If you want to allow incoming vi deoconferencing to be initiated from a restricted range of outside IP addresses, such as from a branch of fice, you [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5 -11 M-10207-01, Reference Manual v2 Outbound Ru les (Service Blo cking) The FR328S allows you to block the use of certain Internet services by PCs on your network. This is called service blocking or port filtering. Y ou ca n define an outbound rule to block Int[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 5-12 Protecting Your Networ k M-10207-01, Reference Manua l v2 The parameters are: •S e r v i c e From this list, select the application or serv ice to be allowed or blocked. The list already displays many co mmon services, but you ar e not limited to these choices. Use the Add Servic[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5 -13 M-10207-01, Reference Manual v2 Order of Precedence for Rules As you define new rules, they are added to the tables in the Rules menu, as shown in Figure 5-9 : Figure 5-9. Rules t able with examples For any traffic attempting to pass through the fire wall, [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 5-14 Protecting Your Networ k M-10207-01, Reference Manua l v2 How to Set Y o ur Time Zone In order to localize the time for your log entries, you must specify your T ime Zone: 1. Log in to the firewall at its default LAN addr ess of http://192.168.0.1 with its default User Name of admi[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Protecting Your Network 5 -15 M-10207-01, Reference Manual v2 Note: If your region uses Day light Savings T i me, you must manually check Adjust for Daylight Savings T ime on the first day of Daylight Savings T ime, and uncheck it at the end. Enabling Daylight Savings T ime will cause o[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 5-16 Protecting Your Networ k M-10207-01, Reference Manua l v2[...]

Managing Your Network 6-1 M-10207-01, Reference Manual v2 Chapter 6 Managing Y our Network This chapter describes how to perform network management tasks with your FR328S ProS afe Firewall with Dial Back-Up. Network Management Information The FR328S provides a variety of status and usage information which is discussed below . V iewing Router St atu[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 6-2 Mana ging Your Ne twork M-10207-01, Reference Manua l v2 This screen shows the following parameters: T able 6-1. Menu 3.2 - Router S t atus Fields Field Description System Name This field displays the Host Na me assigned to the firewall in the Basic Settings men u. Firmware V ersio [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-3 M-10207-01, Reference Manual v2 Click the “Show S tatistics” button to disp lay firewall usage statistics, as shown in Figure 6-2 below: Figure 6-2. Router S t atistics screen This screen shows the following statistics: T able 6-2. Router St atistics Fields[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 6-4 Mana ging Your Ne twork M-10207-01, Reference Manua l v2 V iewing Att ached Devices The Attach ed Dev ic es me nu co nta i n s a tab le of all IP devices that the firewall has discovered on the local network. From the Main Menu of the browser interface, under the Maintenance heading[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-5 M-10207-01, Reference Manual v2 V iewing, Selecting, and Sa ving Logged Information The firewall will log security-related events su ch as denied incoming service requests, hacker probes, and administrator logins. If you enabled content filtering in the Block S[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 6-6 Mana ging Your Ne twork M-10207-01, Reference Manua l v2 Log entries are described in T able 6-5 Log action buttons are described in Ta b l e 6 - 6 Selecting What Information to Log Besides the standard information listed above, you can choose to log additional info rmation. Those o[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-7 M-10207-01, Reference Manual v2 • Router operation (start up, get time, etc.) • Known DoS attacks and Port Scans Saving Log Files on a Server Y ou can choose to write the logs to a PC running a syslog program. T o activate this feature, chec k the Enable Sy[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 6-8 Mana ging Your Ne twork M-10207-01, Reference Manua l v2 Enabling Security Event E-mail Notification In order to receive logs and alerts by e-mail, you mu st provide you r e- mail information in the E-Mail subheading : Figure 6-7: E-mail notifica tion men u • T urn e-mail notifica[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-9 M-10207-01, Reference Manual v2 • Send to this e-mail address Enter the e-mail address to which logs and alerts are sent. This e-mail ad dress will also be used as the From address. If you leave this box blank, log and alert messages will not be sent via e-ma[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 6-10 Managi ng Your Netw ork M-10207-01, Reference Manua l v2 2. From the Maintenance heading of the Main Menu, select the Settings Backup menu as seen in Figure 6-8 . Figure 6-8: Settin gs Backup menu 3. Click Backup to save a copy of the current set tings. 4. St o r e t h e .cfg file [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-11 M-10207-01, Reference Manual v2 2. The firewall will then reboot automatically . After an erase, the firewall password will be password , the LAN IP address will be 192.168.0.1, and the router's DHCP client will be enabled. Note: T o restore the factory d[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 6-12 Managi ng Your Netw ork M-10207-01, Reference Manua l v2 Enabling Remote Management Using the Remote Manageme nt page , you can allow a user or users on the Internet to configure, upgrade an d check the status of your F R328S ProSafe Firewall with Dial Back -Up. How to Configure Re[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Managing Your Network 6-13 M-10207-01, Reference Manual v2 When accessing your router from th e Internet, you will type your router's W AN IP address into your browser's Addre ss (in IE) or Location (in Netscape) box, fo llowed by a colon (:) and th e custom port number . For [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 6-14 Managi ng Your Netw ork M-10207-01, Reference Manua l v2 5. Click Uploa d . Note: When uploading software to the firewall, it is important not to interrupt the W eb browser by closing the wind ow , clickin g a link, or loading a new page . If the browser is interrupted, it may corr[...]

Advanced Configuration 7-1 M-10207-01, Reference Manual v2 Chapter 7 Advanced Configuration This chapter describes how to configure the adva nced features of your FR328S ProSafe Firewall with Dial Back-Up. Configuring Advanced Security The FR328S ProSafe Firewal l with Dial Back-Up pr ovides a variety of advanced features, such as: • Setting up a[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 7-2 Advanced Configuration M-10207-01, Reference Manua l v2 T o assign a computer or server to be a Default DMZ serve r: 1. Click Default DMZ Server . 2. T ype the IP address for that server . 3. Click Apply . Respond to Ping on Internet W AN Port If you want the firewall to resp on d t[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Advanced Configur ation 7-3 M-10207-01, Reference Manual v2 • RIP Direction RIP (Router Information Protocol) allows a router to exchange routing information with other routers. The RIP Direction selection controls how the firewall sends and receives RIP packets. Both is the default. [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 7-4 Advanced Configuration M-10207-01, Reference Manua l v2 DHCP By default, the firewall will function as a DHCP (Dynami c Host Configur ation Protocol) server , allowing it to assign IP , DNS server , and default gateway addresses to all computers connected to the router's LAN. T[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Advanced Configur ation 7-5 M-10207-01, Reference Manual v2 Reserved IP addresses When you specify a reserved IP address for a PC on the LAN, that PC will always receive the same IP address each time it access the firewall’ s DHCP server . Reserved IP addresses should be assigned to s[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 7-6 Advanced Configuration M-10207-01, Reference Manua l v2 2. From the Main Menu, un der Advanced , click the L AN IP Setup l ink to view the men u, sh own in Figure 7-1 Figure 7-1: LAN IP Setup Menu 3. Enter the TCP/IP , MTU, or DHCP parameters. 4. Click Apply to save your changes. Co[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Advanced Configur ation 7-7 M-10207-01, Reference Manual v2 How to Configure Dynamic DNS 1. Log in to the firewall at its default LAN addr ess of http://192.168.0.1 with its default User Name of admin , default password of p assword , or using whatever password and LAN address you have [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 7-8 Advanced Configuration M-10207-01, Reference Manua l v2 Using S t atic Routes S tatic Routes provide additional routing info rmation t o your firewall. Under normal circumstances, the firewall has adequate routing info rmation after it has be en configured for Internet access, and y[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Advanced Configur ation 7-9 M-10207-01, Reference Manual v2 How to Configure St atic Routes 1. Log in to the firewall at its default LAN addr ess of http://192.168.0.1 with its default User Name of admin , default password of p assword , or usin g whatever Password and LAN address you h[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 7-10 Advanced C onfiguration M-10207-01, Reference Manua l v2 h. T ype a number between 1 and 1 5 as the Metric value. This represents the numb er o f routers between your ne twork and the dest in ation. Usually , a setting of 2 or 3 works, but if this is a direct connection, set it to [...]

Troubleshooting 8-1 M-10207-01, Reference Manual v2 Chapter 8 T roubleshooting This chapter gives information about troublesho oting your FR328S ProS afe Firewall with Dial Back-Up. For the common problems listed, go to t he section indicated. • Is the firewall on? • Have I connected the firewall correctly? Go to “Basic Func tions“ on page [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 8-2 Troubleshooting M-10207-01, Reference Manua l v2 If a port’ s Link LED is lit, a link has been esta blished to the connected device. If a port is connected to a 100 Mbps device, veri fy that the port’ s 100 LED is lit. If any of these conditions does not occur , refer to the app[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Troubleshooting 8- 3 M-10207-01, Reference Manual v2 • Be sure you are using the correct cable: — When connecting th e firewall’ s In ternet po rt to a cabl e or DSL modem, use the cable that was supplied with the cable or DSL modem. This cable could be a standard straight-through[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 8-4 Troubleshooting M-10207-01, Reference Manua l v2 • Click the Refresh or Reload button in the W e b browser . The changes may have occurred, but the W eb browser may be caching the old configuration. T roubleshooting the ISP Connection If your firewall is unable to a ccess the Inte[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Troubleshooting 8- 5 M-10207-01, Reference Manual v2 • Y our ISP only allows one Ethernet MAC address to connect to Internet, and may check for your PC’ s MAC address. In this case: Inform your ISP that you h ave bought a new ne twork device, and ask them to use the firewall’ s MA[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 8-6 Troubleshooting M-10207-01, Reference Manua l v2 2. In the field provided, type Pi ng followed by the IP address of th e firewall, as in this example: ping 192.168.0.1 3. Click on OK. Y ou should see a message like this one: Pinging <IP address> with 32 bytes of data If the pa[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Troubleshooting 8- 7 M-10207-01, Reference Manual v2 — Check that your PC has the IP address of y our firewall listed as the default gateway . If the IP configuration of your PC is assigned by DHCP , this information will not be visible in your PC’ s Network Control Panel. V erify t[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 8-8 Troubleshooting M-10207-01, Reference Manua l v2 1. Press and hold the Default Reset button until the T est LED turns on (about 10 seconds). Figure 8-1. Reset Button 2. Release the Default Reset button an d wait for the firewall to reboot. Problems with Date and T i me The E-Mail me[...]

Technical Specifications A-1 M-10207-01, Reference Manual v2 Appendix A T echnical S pecifications This appendix provides techni cal specifications for the FR3 28S ProSafe Firewall with Dial Back-Up. Network Protocol and St andards Comp atibility Data and Routing Protocols: TCP/IP , RIP-1, RIP-2, DHCP PPP over Ethernet (PPPoE) Power Adapter North A[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 A-2 Technical Specifications M-10207-01, Reference Manua l v2 Meets requirements of: FCC Part 15 Class B VCCI Class B EN 55 022 (CISPR 22), Class B Interface S pecifications Local: 10BASE-T or 100BASE-Tx, RJ-45 Internet: 10BASE-T or 100BASE-Tx, RJ-45[...]

Networks, Routing, and Firewall Basics B-1 M-10207-01, Reference Manual v2 Appendix B Networks, Routing, and Firewall Basics This chapter provides an o verview of IP networks, routing, an d networking. Related Publications As you read this document, you may be dire cted to various RFC documents for further information. An RFC is a Request For Comme[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 B-2 Networks, Routing, and Firewall Basi cs M-10207-01, Reference Manua l v2 Routing Information Protocol One of the protocol s used by a rout er to build an d maintain a picture of the network is the Routing Information Protocol (RIP). Us ing RIP , routers periodically update one anoth[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-3 M-10207-01, Reference Manual v2 There are five standard classes of IP addres ses. The se address classes have different ways of determining the network and host sections of the address, allowing for different numbers of hosts on a network. Each[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 B-4 Networks, Routing, and Firewall Basi cs M-10207-01, Reference Manua l v2 • Class D Class D addresses are used for multicasts (message s sent to many hosts). Class D addresses are in this range: 224.0.0.0 to 239.255.255.255 . • Class E Class E addresses are for experimental use. [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-5 M-10207-01, Reference Manual v2 Subnet Addressing By looking at the addressing structures, you can se e that even with a Class C address, there are a large number of hosts per network. Such a structure is an inefficient use of addresses if each[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 B-6 Networks, Routing, and Firewall Basi cs M-10207-01, Reference Manua l v2 The following table lists the additional subnet mask bits in dotted-decimal notation. T o use the table, write down the original class netmask and replace the 0 value octets with the dotted-decimal value of the[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-7 M-10207-01, Reference Manual v2 Configure all hosts on a LAN segment to use the same netmask for the following reasons: • So that hosts recognize local IP broadcast packets When a device broadcasts to its segment neighb ors, it uses a destina[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 B-8 Networks, Routing, and Firewall Basi cs M-10207-01, Reference Manua l v2 Single IP Address Operation Using NA T In the past, if multiple PCs on a LAN needed to access the Internet simultaneously , you had to obtain a range of IP addresses from the ISP . This type of Internet account[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-9 M-10207-01, Reference Manual v2 This scheme of fers the additional benefit of fi rewall-like protection because the internal LAN addresses are not available to the Internet thro ugh the translated connection. All inc oming inquiries are filtere[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 B-10 Networks, Routing, and Firewall Ba sics M-10207-01, Reference Manua l v2 Domain Name Server Many of the resources on the In ternet can be addressed by si mple descriptive names such as www .NETGEAR.com . This addressing is very helpful at th e application level , but the descriptiv[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-11 M-10207-01, Reference Manual v2 What is a Firewall? A firewall is a device that protects one netw ork from another , while allowing communicat ion between the two. A firewall incorporates the functi ons of the NA T router , while adding featur[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 B-12 Networks, Routing, and Firewall Ba sics M-10207-01, Reference Manua l v2 . Category 5 Cable Quality Category 5 distributed cable that meets ANSI/EIA/ TIA-568-A building wiring standards can be a maximum of 328 feet (ft.) or 10 0 meters (m) in length, divided as follows: 20 ft. (6 m[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-13 M-10207-01, Reference Manual v2 Inside T w isted Pair Cables For two devices to communicate, th e transmitter of each device must be connected to the receiver of the other device. The cro ssover function is usually implemented inte rnally as p[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 B-14 Networks, Routing, and Firewall Ba sics M-10207-01, Reference Manua l v2 Figure 8-7: Category 5 UTP Cable with Male RJ-45 Plug at Each End Note: Flat “silver satin” telephone cable may ha ve the same RJ-45 plug. However , using telephone cable results in excessive collisions, c[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Networks, Routing, and Firewall Basics B-15 M-10207-01, Reference Manual v2 The FR328S Firewall incorporates Auto Uplink TM technology (also ca lled MDI/MDIX). Each LOCAL Ethernet port will automati cally sense whether the Ethernet cable plugged into the port should have a no rmal conne[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 B-16 Networks, Routing, and Firewall Ba sics M-10207-01, Reference Manua l v2[...]

Preparing Your Ne twork C-1 M-10207-01, Reference Manual v2 Appendix C Prep aring Y our Network This appendix describes how to prepare your ne twork to connect to the Internet through the FR328S ProSafe Firewall with Dial Back-Up an d how to verify the readiness of broadband Internet service from an Inte rnet service provider (ISP). Prep aring Y ou[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 C-2 Preparing Your Networ k M-10207-01, Reference Manua l v2 In your IP network, each PC and the firewall must be assigned a unique IP addresses. Each PC must also have certain other IP configuration information such as a subn et mask (netmask), a domain name server (DNS) address , and [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Preparing Your Ne twork C-3 M-10207-01, Reference Manual v2 Y ou must have an Ethernet adapter , the TCP/IP protocol, and Client for Microsoft Networks. If you need to install a ne w adapter , follow these steps: a. Click the Add button. b. Select Adapter , and then click Add. c. Select[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 C-4 Preparing Your Networ k M-10207-01, Reference Manua l v2 If you need Clie nt for Micro soft Networks: a. Click the Add button. b. Select Client, and then click Ad d. c. Select Microsoft. d. Select Client for Microsoft Networks, and then click OK. 3. Restart your PC for the changes t[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Preparing Your Ne twork C-5 M-10207-01, Reference Manual v2 5. Uncheck all boxes in the LAN Internet Configuration screen and cl ick Next. 6. Proceed to the end of the W izard. V erifying TCP/IP Properties After your PC is configured and has rebooted, you can check the TCP/IP configurat[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 C-6 Preparing Your Networ k M-10207-01, Reference Manua l v2 5. V erify that ‘Client for Microsoft Networks’ and ‘Internet Protocol (TCP/IP)’ are present. If not, select Install and add them. 6. Select ‘Internet Protocol (TCP/IP)’, click Prop erties, and verify that “Obtai[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Preparing Your Ne twork C-7 M-10207-01, Reference Manual v2 The TCP/IP Control Panel opens: 2. From the “Connect via” box, select your Macintosh’ s Ethernet interface. 3. From the “Configure” box, select Using DHCP Server . Y ou can le ave the DHCP Client ID box empty . 4. Clo[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 C-8 Preparing Your Networ k M-10207-01, Reference Manua l v2 V erifying TCP/IP Properties for Macintosh Computers After your Macintosh is confi gured and has rebo oted, you can check the TC P/IP configuration by returning to the TCP/IP Control Panel. From th e Apple menu, select Control[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Preparing Your Ne twork C-9 M-10207-01, Reference Manual v2 V erifying the Readiness of Y our Internet Account For broadband access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using a cable modem or DSL mode m. [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 C-10 Prep arin g Your Network M-10207-01, Reference Manua l v2 • An IP address and subnet mask • A gateway IP address, which is the address of the ISP’ s router • One or more domain name server (DNS) IP addresses • Host name and domain suf fix For example, your account’ s fu[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Preparing Your Ne twork C-1 1 M-10207-01, Reference Manual v2 If an IP address appears under Installed Gatewa ys, write down the address. This is the ISP’ s gateway address. Select the address and then click Re move to remove the gateway address. 6. Select the DNS Configuration tab. I[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 C-12 Prep arin g Your Network M-10207-01, Reference Manua l v2 Rest arting the Network Once you’ve set up your computers to work with the firewall, you must reset the network for the devices to be able to communicat e correctly . Re start any computer that is connected to the firewall[...]

M-10207-01, Reference Manual v2 Glossary 1 Glossary Use the list below to find definitions for technical terms used in this manual. 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. 100BASE-Tx IEEE 802.3 specification for 100 Mbps Ethernet over twisted pair wiring. Access Control L ist (ACL) An ACL is a database that [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 2 Glossary M-10207-01, Reference Manual v2 Broadcast A packet sent to all devices on a network. Class of Service A term to describe treating different types of traffic with different levels of service priority . Higher priority traffic gets faster treatment during times of switch conges[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Glossary 3 M-10207-01, Reference Manual v2 (known as the upstream rate). ADSL requires a special A DSL modem. ADSL is growing in p opularity as more areas around the world gain access. DSLAM DSL Access Multiplexor . The piece of equipment at th e telephone company c entral of fice that [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 4 Glossary M-10207-01, Reference Manual v2 recognizes the packet as belonging to a computer within its immediate neighbo rho od or domain. That gateway then forwards the packet directly to the computer whose address is specified. Because a message is divided into a number of packets, ea[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Glossary 5 M-10207-01, Reference Manual v2 MAC address The Media Access Control address is a unique 48-bit hardware address assigned to every network interface card. Usually written in the form 01:23 :45 :67: 89:ab. Maximum Receive Unit The size in bytes of the largest pack et that can [...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 6 Glossary M-10207-01, Reference Manual v2 PPP over Ethernet PPPoE. PPP over Ether net is a prot ocol for connecting remot e hosts to the Internet over an always-on connection by simulati ng a dial-up connection. PPTP Point-t o-Point T unnelin g Protocol. A method for esta blishi ng a v[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 Glossary 7 M-10207-01, Reference Manual v2 WA N See “W ide Area Network” We b Also known as W orld-Wide W eb (WWW) or W3. An Intern et client-server system to distribute information, based upon the hypertext transfer proto col (HTTP). WEB Proxy Server A W eb proxy server is a specia[...]

FR328S ProSafe Firewall with Dia l Back-Up Reference Manual v2 8 Glossary M-10207-01, Reference Manual v2[...]

Index 1 M-10207-01, Reference Manual v2 A Account Name 3-10, 3-1 1, 3-17 Address Resolution Protocol B-9 Austria 3-17 Auto MDI/MDI-X B-15, G-1 Auto Uplink 2-3, B-15, G-1 B backup configuration 6-9 BigPond 3-17 C Cabling B-1 1 Cat5 cable 3-1, B-12, G-2 configuration automatic by DHCP 2-3 backup 6-9 erasing 6-10 router , initial 3-1 crossover cable 2[...]

2 Index M-10207-01, Reference Manual v2 I IANA contacting B-2 IETF B-1 W eb site address B-7 inbound rules 5-7 installation 2-3 Internet account address information C-9 establishing C-9 IP addresses C-10, C-1 1 and NA T B-8 and the Internet B-2 assigning B-2, B-9 auto-generated 8-3 private B-7 translating B-9 IP configuration by DHCP B-10 IP networ[...]

Index 3 M-10207-01, Reference Manual v2 publications, related B-1 R rear panel 2-6 reserved IP addresses 7-5 reset button, clearing config 8-7 restore factory settings 6-10 RFC 1466 B-7, B-9 1597 B-7, B-9 1631 B-8, B-9 finding B-7 RIP (Router Information Protocol) 7-3 router concepts B-1 Routing Information Protocol 2-2, B-2 R TS Threshold 4-3, 4-5[...]