NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Manuale tecnico

October 2004

202-10066-01 (Beta Draft)

October 2004

NETGEAR, Inc.

4500 Great America Parkway

Santa Clara, CA 95054 USA

Network Planning Guide

for ProSafe VPN Firewall

Router FVX538

October 2004

Trademarks

NETGEAR and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc..

Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.

Other brand and product names are registered trademarks or trademarks of their respective holders.

October 2004

Statement of Conditions

In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to

make changes to the products described in this document without notice.

NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit

layout(s) described herein.

Export Restrictions

The NETGEAR VPN Client (the “software”) is subject to United States Export Controls. The software may not be

exported or transmitted 1) into (or to a national or resident of) Cuba, Iran, Iraq, Libya, North Korea, Syria, Sudan or any

other country to which the United States has embargoed goods; or 2) to anyone on the United States Treasury

Department's list of Specially Designated Nationals or the U.S. Commerce Department's Table of Deny Orders. By using

this software, you agree to abide by the laws, rules and regulations - including, but not limited to the Export

Administration Act and the Arms Export Control Act - applicable to such use and not to transfer, by electronic

transmission or otherwise, the software to either a foreign national or a foreign destination in violation of any such laws.

Contents iii

October 2004

Contents

Chapter 1

Introducing the FVX538

The Router’s Front Panel ...............................................................................................1-1

The Router’s Rear Panel ................................................................................................1-3

Rack Mounting the Router ..............................................................................................1-3

The Router’s IP Address, Login Name, and Password ..................................................1-4

Default Factory Settings .................................................................................................1-4

Chapter 2

Network Planning

Overview of the Planning Process ..................................................................................2-1

Single or Multiple Exposed Hosts ............................................................................2-1

Virtual Private Networks (VPNs) ..............................................................................2-2

The Fail-over Case for Routers With Dual WAN Ports .............................................2-2

The Load Balancing Case for Routers With Dual WAN Ports ..................................2-2

Single or Multiple Exposed Hosts ...................................................................................2-3

Single Exposed Host ................................................................................................2-3

Multiple Exposed Hosts ............................................................................................2-5

Virtual Private Networks (VPNs) .....................................................................................2-6

VPN Road Warrior (Client-to-Gateway) ...................................................................2-8

VPN Gateway-to-Gateway .....................................................................................2-10

VPN Telecommuter (Client-to-Gateway Through a NAT Router) ...........................2-13

October 2004

iv Contents

Network Planning Guide for ProSafe VPN Firewall Router FVX538

Introducing the FVX538 1-1

October 2004

Chapter 1

Introducing the FVX538

This chapter introduces the FVX538 ProSafe VPN Firewall Router.

The Router’s Front Panel

The FVX538 ProSafe VPN Firewall Router front panel shown below contains the port

connections, status LEDs, and the factory defaults reset button.

Figure 1-1: FVX538 Front Panel

You can use the LEDs to verify various conditions. Table 1-1 lists and describes each object on the

front panel of the router and its operation.

Table 1-1. Object Descriptions

Object Activity Description

Power LED On (Green)

Off Power is supplied to the router.

Power is not supplied to the router.

Test LED On (Amber)

Blinking (Amber)

Off

Test mode: The system is initializing or the initialization has failed.

Writing to Flash memory (during upgrading or resetting to defaults).

The system has booted successfully.

Tes t

Power

Factory

Defaults

WAN1 WAN2

Gigabit

ProSafe VPN Firewall

MODEL FVX538

LAN

DMZ

Link/Act

Link/Act Speed

100

Active Active

Link/Act 100Link/Act 100

CONSOLE

Power Test

LED LED WAN1 Port

and LEDs WAN2 Port

and LEDs

LAN Ports

and LEDs Console

Port

Factory

Defaults

Gigabit Port

and LEDs

DMZ Port

and LEDs Button

Network Planning Guide for ProSafe VPN Firewall Router FVX538

1-2 Introducing the FVX538

October 2004

WAN Ports

and LEDs Two RJ-45 WAN ports N-way automatic speed negotiation, Auto MDI/MDIX.

Link/Act LED

On (Green)

Blinking (Green)

Off

The WAN port has detected a link with a connected Ethernet device.

Data is being transmitted or received by the WAN port.

The WAN port has no link.

100 LED

On (Green)

Off The WAN port is operating at 100 Mbps.

The WAN port is operating at 10 Mbps.

Active LED

On (Green)

On (Amber)

Off

The WAN port has a valid Internet connection.

The Internet connection is down.

The WAN port is either not enabled or has no link.

LAN Ports

and LEDs 8-port RJ-45 10/100

Mbps Fast Ethernet

Switch

N-way automatic speed negotiation, auto MDI/MDIX.

Link/Act LED

On (Green)

Blinking (Green)

Off

The LAN port has detected a link with a connected Ethernet device.

Data is being transmitted or received by the LAN port.

The LAN port has no link.

100 LED

On (Green)

Off The LAN port is operating at 100 Mbps.

The LAN port is operating at 10 Mbps.

DMZ (port 8)

On (Green)

Off Port 8 is operating as a dedicated hardware DMZ port.

Port 8 is operating as a normal LAN port.

Gigabit Port

and LEDs Gbit RJ-45 connector Port for connecting to a gigabit Ethernet device.

Link/Act LED

On (Green)

Blinking (Green)

Off

The LAN port has detected a link with a connected Ethernet device.

Data is being transmitted or received by the LAN port.

The LAN port has no link.

Speed LED

On (Green)

On (Amber)

Off

The LAN port is operating at 1,000 Mbps.

The LAN port is operating at 100 Mbps.

The LAN port is operating at 10 Mbps.

Console

Port DB9 male connector Port for connecting to an optional console terminal. Default baud rate

is 9,600; pinouts: (2) Tx, (3) Rx, (5) and (7) Gnd.

Factory

Defaults — Factory Defaults reset push button (see “Default Factory Settings” on

page 1-4 for the factory defaults).

Table 1-1. Object Descriptions (continued)

Object Activity Description

Network Planning Guide for ProSafe VPN Firewall Router FVX538

Introducing the FVX538 1-3

October 2004

The Router’s Rear Panel

The rear panel of the FVX538 ProSafe VPN Firewall Router (Figure 1-2) contains the On/Off

switch and AC power connection.

Figure 1-2: FVX538 Rear Panel

Viewed from left to right, the rear panel contains the following elements:

•ACpowerin

•On/Offswitch

Rack Mounting the Router

The FVX538 can be mounted either on a desktop (using included rubber feet) or in a 19-inch rack

(using the included rack mounting hardware illustrated in Figure 1-3).

Figure 1-3: Attaching Mounting Brackets

100-240 VAC, 50-60Hz, 0.7A max.

On/Off

Switch

AC Power

Connection

Network Planning Guide for ProSafe VPN Firewall Router FVX538

1-4 Introducing the FVX538

October 2004

The Router’s IP Address, Login Name, and Password

Check the label on the bottom of the FVX538’s enclosure if you forget the following factory

default information:

• IP Address: http://192.168.1.1 to reach the Web-based GUI from the LAN

•Username:admin

• Password: password

Figure 1-4: FVX538 Bottom Label

Default Factory Settings

When you first receive your FVX538, the default factory settings will be set as shown in Table 1-2

below. You can restore these defaults with the Factory Defaults restore switch on the front panel —

see “The Router’s Front Panel” on page 1-1.

• Pressing this switch for a prolonged period (>5 seconds) causes the router to restore all factory

default settings and reboot.

• A shorter press and release causes the router to merely reboot.

ProSafe VPN Firewall FVX538

MAC

(internet)

http://192.168.1.1

user name: admin

password: password

DEFAULT ACCESS

MAC

(internet)

272-10134-01

SERIALMAC

(local)

N10947

E-E011-02-4749 (B)

IP Address

User Name

Password

Network Planning Guide for ProSafe VPN Firewall Router FVX538

Introducing the FVX538 1-5

October 2004

Table 1-2. Factory Default Settings

Feature Default

User Name (case sensitive) admin

Password (case sensitive) password

Built-in DHCP server DHCP server is enabled, issues addresses in the

default subnet

IP Configuration IP Address: 192.168.1.1

Subnet Mask: 255.255.255.0

Gateway: 0.0.0.0

Time Zone GMT

Time Zone Adjust for Daylight Saving TIme Disabled

SNMP Disabled

Network Planning Guide for ProSafe VPN Firewall Router FVX538

1-6 Introducing the FVX538

October 2004

Altri manuali per FVX538v1 - ProSafe VPN Firewall Dual WAN

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali NETGEAR Router di rete

NETGEAR

NETGEAR RT338 Manuale utente

NETGEAR

NETGEAR Nighthawk D7000 Manuale utente

NETGEAR

NETGEAR N150 Manuale utente

NETGEAR

NETGEAR Orbi RBW30 Manuale utente

NETGEAR

NETGEAR ReadyNAS 1500 Manuale utente

NETGEAR

NETGEAR GS408EPP Manuale utente

NETGEAR

NETGEAR AC1450 Manuale utente

NETGEAR

NETGEAR Nighthawk CAX30 Manuale utente

NETGEAR

NETGEAR DG834 - ADSL Firewall Router Manuale utente

NETGEAR

NETGEAR M5300 Series Manuale utente

NETGEAR

NETGEAR Nighthawk AX6 Manuale utente

NETGEAR

NETGEAR RAXE500 Manuale utente

NETGEAR

NETGEAR Nighthawk C7000 Manuale utente

NETGEAR

NETGEAR ProSAFE GS105Ev2 Manuale utente

NETGEAR

NETGEAR orbi CBK40 Manuale utente

NETGEAR

NETGEAR N900 Manuale utente

NETGEAR

NETGEAR C6220 Manuale dell'operatore

NETGEAR

NETGEAR Nighthawk AX6 Manuale utente

NETGEAR

NETGEAR DG834 - ADSL Firewall Router Manuale utente

NETGEAR

NETGEAR FSM7328SNA Manuale di istruzioni

NETGEAR

NETGEAR DG834Gv3 - 54 Mbps Wireless ADSL Firewall... Manuale utente

NETGEAR

NETGEAR R6400v2 Manuale utente

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Manuale utente

NETGEAR

NETGEAR RBRE960B Manuale utente

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza

LevelOne

LevelOne FBR-1416 Manuale utente