NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Istruzioni per l'installazione e il funzionamento

Application Note

Generating a Self Certificate Request Using OpenSSL

for an FVX538 or FVS338 ProSafe® VPN Firewall

Summary

This application note describes how to configure a self certificate request (CSR) on one

WAN interface of a NETGEAR FVX538 or FVS338 ProSafe VPN Firewall using

OpenSSL to create the certificate authority. The procedure is the same for both models.

This application note is an updated version using the version 2.x router firmware. The

older version of this application note describes the procedure using version 1.x firmware.

Procedure

This procedure was developed and tested using:

•NETGEAR FVX538 ProSafe VPN Firewall with version 2.x firmware

oIP address subnet: 192.168.1.1; 255.255.255.0

The procedure includes how to generate a self certificate request, and then how to use

OpenSSL commands to create the certificate authority.

Generating a Self Certificate Request

You can create a CSR from the Generate Self Certificate Request section of the VPN

> Certificates page (certificates.htm) by specifying the values in this procedure.

1. In the Name field, type a name for the certificate (for example, cert1).

2. In the Subject field, type an appropriate subject (for example, FVX538).

3. From the Hash Algorithm drop-down menu select the appropriate algorithm (for

example, MD5).

4. From the Signature Algorithm drop-down menu, select the RSA algorithm.

5. From the Signature Key Length drop-down menu, select the appropriate key length

(for example, 512).

6. In the IP Address field (optional), you can type an IP address or leave it blank.

7. In the Domain Name field (optional), you can type a domain name or leave it blank.

8. In the E-Mail Address field (optional), you can type an email address or leave it

blank.

9. Click the Generate button to generate the certificate request.

10. In the NETGEAR Certificates screen, make sure the certificate you just generated is

added to the Self Certificate Requests table.

11. Click the View button corresponding to the request to view the data created..

12. Select the content in the Data to supply to CA field, copy the selected content into a

.CSR file, and save it.

Creating the Certificate Authority (CA) Using OpenSSL Commands

This section describes how to create the CA that is used for signing the certificate

request.

1. Create an RSA key pair, for example ca.key, by typing the following command where

OpenSSL is installed:

$ openssl genrsa –des3 –out ca.key 1024

2. Create a self-signed root CA certificate, for example ca.crt, by typing the following

command:

$ openssl req –new –x509 –days 365 –key ca.key –out ca.crt

3. Create an Active Self Certificate by signing the CSR with the Trusted Certificate

created in Step 2 by typing the following command:

$ openssl x509 –req –days 182 –in host.csr –CA ca.crt –CAkey ca.key –

\ Cacreateserial –out host.crt

4. To upload the Trusted Certificate created in Step 2, click the Browse button to locate

the .crt file, and then click the Upload button.

5. To upload the Active Self Certificate created in Step 3, click the Browse button to

locate the .crt file, and then click the Upload button

Conclusion

You have now created a self certificate request and certificate authority. This lets you

create VPN tunnels using certificate authentication.

November 27, 2006

Copyright © 2006 NETGEAR®

Altri manuali per FVX538v2 - ProSafe VPN Firewall Dual WAN

2

Questo manuale è adatto per i seguenti modelli

3

Indice

Altri manuali NETGEAR Firewall

NETGEAR

NETGEAR ProSafe FR114P Manuale utente

NETGEAR

NETGEAR FVL328 - Cable/DSL ProSafe VPN Firewall... Manuale utente

NETGEAR

NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Manuale utente

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Manuale utente

NETGEAR

NETGEAR ProSafe VPN Firewall 200 FVX538 Manuale utente

NETGEAR

NETGEAR SRXN3205 - ProSafe Wireless-N VPN Firewall Wireless... Manuale utente

NETGEAR

NETGEAR ProSAFE SRX5308 Manuale utente

NETGEAR

NETGEAR ProSAFE SRX5308 Manuale utente

NETGEAR

NETGEAR ProSafe FVS318N Manuale utente

NETGEAR

NETGEAR FVS318 - ProSafe VPN Firewall Router Manuale utente

NETGEAR

NETGEAR ProSafe FVS318N Manuale utente

NETGEAR

NETGEAR FVL328 - Cable/DSL ProSafe VPN Firewall... Manuale utente

NETGEAR

NETGEAR ProSafe FVM318 Manuale utente

NETGEAR

NETGEAR SRXN3205 - ProSafe Wireless-N VPN Firewall Wireless... Manuale utente

NETGEAR

NETGEAR FVS338 - ProSafe VPN Firewall 50 Router Manuale utente

NETGEAR

NETGEAR ProSafe FVX538 Manuale utente

NETGEAR

NETGEAR ProSafe FM114P Manuale utente

NETGEAR

NETGEAR ProSafe FWAG114 Manuale utente

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Scheda tecnica

NETGEAR

NETGEAR FVS338 - ProSafe VPN Firewall 50 Router Manuale utente

NETGEAR

NETGEAR FVS124G - ProSafe VPN Firewall 25 Manuale utente

NETGEAR

NETGEAR FVS318G - ProSafe Gigabit VPN Firewall Data Sheet... Manuale utente

NETGEAR

NETGEAR FVS328 - ProSafe VPN Firewall Manuale utente

NETGEAR

NETGEAR ProSAFE SRX5308 Manuale utente

Manuali Firewall popolari di altre marche

Cisco

Cisco S190 Manuale utente

Fortinet

Fortinet FortiGate Voice Series Manuale utente

ADTRAN

ADTRAN NetVanta 2300 Manuale utente

SecureLogix

SecureLogix ETM System Manuale utente

Lanner

Lanner FW-8877 Manuale utente

Huawei

Huawei USG6000 Series Manuale di installazione e funzionamento

H3C

H3C SecPath F5000-AI-15 Manuale utente

Nexcom

Nexcom DNA 1150 Manuale utente

Fortinet

Fortinet FortiGate-60 series Manuale utente

Cisco

Cisco 3110 Manuale

Draytek

Draytek Vigor2860 Series Manuale utente

Lanner electronics

Lanner electronics FW-7650 Series Manuale utente

Swisscom

Swisscom Internet Backup Manuale utente

SonicWALL

SonicWALL NSa 5700 Manuale utente

DPtech

DPtech FW1000 SERIES Manuale utente

FEITIAN

FEITIAN MultiPass FIDO Manuale utente

EBLOCKER

EBLOCKER PRO Manuale utente

GTA

GTA GB-200 Manuale utente