NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Instrucciones de instalación y funcionamiento

Application Note

Generating a Self Certificate Request Using OpenSSL

for an FVX538 or FVS338 ProSafe® VPN Firewall

Summary

This application note describes how to configure a self certificate request (CSR) on one

WAN interface of a NETGEAR FVX538 or FVS338 ProSafe VPN Firewall using

OpenSSL to create the certificate authority. The procedure is the same for both models.

This application note is an updated version using the version 2.x router firmware. The

older version of this application note describes the procedure using version 1.x firmware.

Procedure

This procedure was developed and tested using:

•NETGEAR FVX538 ProSafe VPN Firewall with version 2.x firmware

oIP address subnet: 192.168.1.1; 255.255.255.0

The procedure includes how to generate a self certificate request, and then how to use

OpenSSL commands to create the certificate authority.

Generating a Self Certificate Request

You can create a CSR from the Generate Self Certificate Request section of the VPN

> Certificates page (certificates.htm) by specifying the values in this procedure.

1. In the Name field, type a name for the certificate (for example, cert1).

2. In the Subject field, type an appropriate subject (for example, FVX538).

3. From the Hash Algorithm drop-down menu select the appropriate algorithm (for

example, MD5).

4. From the Signature Algorithm drop-down menu, select the RSA algorithm.

5. From the Signature Key Length drop-down menu, select the appropriate key length

(for example, 512).

6. In the IP Address field (optional), you can type an IP address or leave it blank.

7. In the Domain Name field (optional), you can type a domain name or leave it blank.

8. In the E-Mail Address field (optional), you can type an email address or leave it

blank.

9. Click the Generate button to generate the certificate request.

10. In the NETGEAR Certificates screen, make sure the certificate you just generated is

added to the Self Certificate Requests table.

11. Click the View button corresponding to the request to view the data created..

12. Select the content in the Data to supply to CA field, copy the selected content into a

.CSR file, and save it.

Creating the Certificate Authority (CA) Using OpenSSL Commands

This section describes how to create the CA that is used for signing the certificate

request.

1. Create an RSA key pair, for example ca.key, by typing the following command where

OpenSSL is installed:

$ openssl genrsa –des3 –out ca.key 1024

2. Create a self-signed root CA certificate, for example ca.crt, by typing the following

command:

$ openssl req –new –x509 –days 365 –key ca.key –out ca.crt

3. Create an Active Self Certificate by signing the CSR with the Trusted Certificate

created in Step 2 by typing the following command:

$ openssl x509 –req –days 182 –in host.csr –CA ca.crt –CAkey ca.key –

\ Cacreateserial –out host.crt

4. To upload the Trusted Certificate created in Step 2, click the Browse button to locate

the .crt file, and then click the Upload button.

5. To upload the Active Self Certificate created in Step 3, click the Browse button to

locate the .crt file, and then click the Upload button

Conclusion

You have now created a self certificate request and certificate authority. This lets you

create VPN tunnels using certificate authentication.

November 27, 2006

Copyright © 2006 NETGEAR®

Otros manuales para FVX538v2 - ProSafe VPN Firewall Dual WAN

2

Este manual sirve para los siguientes modelos

3

Tabla de contenidos

Otros manuales de Cortafuegos de NETGEAR

NETGEAR

NETGEAR FVS318G-100NAS Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

NETGEAR

NETGEAR ProSAFE SRX5308 Manual de usuario

NETGEAR

NETGEAR ProSafe FR328S Manual de usuario

NETGEAR

NETGEAR ProSAFE SRX5308 Manual de usuario

NETGEAR

NETGEAR ProSafe FR328S Manual de usuario

NETGEAR

NETGEAR STM150 - ProSecure Web And Email Threat Management... Manual de usuario

NETGEAR

NETGEAR FVS336G - ProSafe Dual WAN Gigabit Firewall Manual de usuario

NETGEAR

NETGEAR STM150 - ProSecure Web And Email Threat Management... Manual de usuario

NETGEAR

NETGEAR ProSafe FVS318N Manual de usuario

NETGEAR

NETGEAR ProSafe FVS318v3 Manual de usuario

NETGEAR

NETGEAR FVL328 - Cable/DSL ProSafe VPN Firewall... Manual de usuario

NETGEAR

NETGEAR FWG114P - ProSafe 802.11g Wireless Firewall Manual de usuario

NETGEAR

NETGEAR ProSafe FWAG114 Manual de usuario

NETGEAR

NETGEAR FVG318v2 - ProSafe 802.11g Wireless VPN Firewall... Manual de usuario

NETGEAR

NETGEAR FVS336G - ProSafe Dual WAN Gigabit Firewall Manual de usuario

NETGEAR

NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Manual de usuario

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

NETGEAR

NETGEAR FVL328 - Cable/DSL ProSafe VPN Firewall... Guía de instalación

NETGEAR

NETGEAR ProSafe FVS318N Manual de usuario

NETGEAR

NETGEAR ProSafe FR114W Manual de usuario

NETGEAR

NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... Manual de usuario

NETGEAR

NETGEAR ProSAFE SRX5308 Manual de usuario

Manuales populares de Cortafuegos de otras marcas

Cisco

Cisco S190 Manual de usuario

Fortinet

Fortinet FortiGate Voice Series Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Fortinet

Fortinet FortiGate-60 series Manual de usuario

Cisco

Cisco 3110 Manual

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario

GTA

GTA GB-200 Manual de usuario