NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN Manual técnico

October 2004

202-10066-01 (Beta Draft)

October 2004

NETGEAR, Inc.

4500 Great America Parkway

Santa Clara, CA 95054 USA

Network Planning Guide

for ProSafe VPN Firewall

Router FVX538

October 2004

Trademarks

NETGEAR and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc..

Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.

Other brand and product names are registered trademarks or trademarks of their respective holders.

October 2004

Statement of Conditions

In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to

make changes to the products described in this document without notice.

NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit

layout(s) described herein.

Export Restrictions

The NETGEAR VPN Client (the “software”) is subject to United States Export Controls. The software may not be

exported or transmitted 1) into (or to a national or resident of) Cuba, Iran, Iraq, Libya, North Korea, Syria, Sudan or any

other country to which the United States has embargoed goods; or 2) to anyone on the United States Treasury

Department's list of Specially Designated Nationals or the U.S. Commerce Department's Table of Deny Orders. By using

this software, you agree to abide by the laws, rules and regulations - including, but not limited to the Export

Administration Act and the Arms Export Control Act - applicable to such use and not to transfer, by electronic

transmission or otherwise, the software to either a foreign national or a foreign destination in violation of any such laws.

Contents iii

October 2004

Contents

Chapter 1

Introducing the FVX538

The Router’s Front Panel ...............................................................................................1-1

The Router’s Rear Panel ................................................................................................1-3

Rack Mounting the Router ..............................................................................................1-3

The Router’s IP Address, Login Name, and Password ..................................................1-4

Default Factory Settings .................................................................................................1-4

Chapter 2

Network Planning

Overview of the Planning Process ..................................................................................2-1

Single or Multiple Exposed Hosts ............................................................................2-1

Virtual Private Networks (VPNs) ..............................................................................2-2

The Fail-over Case for Routers With Dual WAN Ports .............................................2-2

The Load Balancing Case for Routers With Dual WAN Ports ..................................2-2

Single or Multiple Exposed Hosts ...................................................................................2-3

Single Exposed Host ................................................................................................2-3

Multiple Exposed Hosts ............................................................................................2-5

Virtual Private Networks (VPNs) .....................................................................................2-6

VPN Road Warrior (Client-to-Gateway) ...................................................................2-8

VPN Gateway-to-Gateway .....................................................................................2-10

VPN Telecommuter (Client-to-Gateway Through a NAT Router) ...........................2-13

October 2004

iv Contents

Network Planning Guide for ProSafe VPN Firewall Router FVX538

Introducing the FVX538 1-1

October 2004

Chapter 1

Introducing the FVX538

This chapter introduces the FVX538 ProSafe VPN Firewall Router.

The Router’s Front Panel

The FVX538 ProSafe VPN Firewall Router front panel shown below contains the port

connections, status LEDs, and the factory defaults reset button.

Figure 1-1: FVX538 Front Panel

You can use the LEDs to verify various conditions. Table 1-1 lists and describes each object on the

front panel of the router and its operation.

Table 1-1. Object Descriptions

Object Activity Description

Power LED On (Green)

Off Power is supplied to the router.

Power is not supplied to the router.

Test LED On (Amber)

Blinking (Amber)

Off

Test mode: The system is initializing or the initialization has failed.

Writing to Flash memory (during upgrading or resetting to defaults).

The system has booted successfully.

Tes t

Power

Factory

Defaults

WAN1 WAN2

Gigabit

ProSafe VPN Firewall

MODEL FVX538

LAN

DMZ

Link/Act

Link/Act Speed

100

Active Active

Link/Act 100Link/Act 100

CONSOLE

Power Test

LED LED WAN1 Port

and LEDs WAN2 Port

and LEDs

LAN Ports

and LEDs Console

Port

Factory

Defaults

Gigabit Port

and LEDs

DMZ Port

and LEDs Button

Network Planning Guide for ProSafe VPN Firewall Router FVX538

1-2 Introducing the FVX538

October 2004

WAN Ports

and LEDs Two RJ-45 WAN ports N-way automatic speed negotiation, Auto MDI/MDIX.

Link/Act LED

On (Green)

Blinking (Green)

Off

The WAN port has detected a link with a connected Ethernet device.

Data is being transmitted or received by the WAN port.

The WAN port has no link.

100 LED

On (Green)

Off The WAN port is operating at 100 Mbps.

The WAN port is operating at 10 Mbps.

Active LED

On (Green)

On (Amber)

Off

The WAN port has a valid Internet connection.

The Internet connection is down.

The WAN port is either not enabled or has no link.

LAN Ports

and LEDs 8-port RJ-45 10/100

Mbps Fast Ethernet

Switch

N-way automatic speed negotiation, auto MDI/MDIX.

Link/Act LED

On (Green)

Blinking (Green)

Off

The LAN port has detected a link with a connected Ethernet device.

Data is being transmitted or received by the LAN port.

The LAN port has no link.

100 LED

On (Green)

Off The LAN port is operating at 100 Mbps.

The LAN port is operating at 10 Mbps.

DMZ (port 8)

On (Green)

Off Port 8 is operating as a dedicated hardware DMZ port.

Port 8 is operating as a normal LAN port.

Gigabit Port

and LEDs Gbit RJ-45 connector Port for connecting to a gigabit Ethernet device.

Link/Act LED

On (Green)

Blinking (Green)

Off

The LAN port has detected a link with a connected Ethernet device.

Data is being transmitted or received by the LAN port.

The LAN port has no link.

Speed LED

On (Green)

On (Amber)

Off

The LAN port is operating at 1,000 Mbps.

The LAN port is operating at 100 Mbps.

The LAN port is operating at 10 Mbps.

Console

Port DB9 male connector Port for connecting to an optional console terminal. Default baud rate

is 9,600; pinouts: (2) Tx, (3) Rx, (5) and (7) Gnd.

Factory

Defaults — Factory Defaults reset push button (see “Default Factory Settings” on

page 1-4 for the factory defaults).

Table 1-1. Object Descriptions (continued)

Object Activity Description

Network Planning Guide for ProSafe VPN Firewall Router FVX538

Introducing the FVX538 1-3

October 2004

The Router’s Rear Panel

The rear panel of the FVX538 ProSafe VPN Firewall Router (Figure 1-2) contains the On/Off

switch and AC power connection.

Figure 1-2: FVX538 Rear Panel

Viewed from left to right, the rear panel contains the following elements:

•ACpowerin

•On/Offswitch

Rack Mounting the Router

The FVX538 can be mounted either on a desktop (using included rubber feet) or in a 19-inch rack

(using the included rack mounting hardware illustrated in Figure 1-3).

Figure 1-3: Attaching Mounting Brackets

100-240 VAC, 50-60Hz, 0.7A max.

On/Off

Switch

AC Power

Connection

Network Planning Guide for ProSafe VPN Firewall Router FVX538

1-4 Introducing the FVX538

October 2004

The Router’s IP Address, Login Name, and Password

Check the label on the bottom of the FVX538’s enclosure if you forget the following factory

default information:

• IP Address: http://192.168.1.1 to reach the Web-based GUI from the LAN

•Username:admin

• Password: password

Figure 1-4: FVX538 Bottom Label

Default Factory Settings

When you first receive your FVX538, the default factory settings will be set as shown in Table 1-2

below. You can restore these defaults with the Factory Defaults restore switch on the front panel —

see “The Router’s Front Panel” on page 1-1.

• Pressing this switch for a prolonged period (>5 seconds) causes the router to restore all factory

default settings and reboot.

• A shorter press and release causes the router to merely reboot.

ProSafe VPN Firewall FVX538

MAC

(internet)

http://192.168.1.1

user name: admin

password: password

DEFAULT ACCESS

MAC

(internet)

272-10134-01

SERIALMAC

(local)

N10947

E-E011-02-4749 (B)

IP Address

User Name

Password

Network Planning Guide for ProSafe VPN Firewall Router FVX538

Introducing the FVX538 1-5

October 2004

Table 1-2. Factory Default Settings

Feature Default

User Name (case sensitive) admin

Password (case sensitive) password

Built-in DHCP server DHCP server is enabled, issues addresses in the

default subnet

IP Configuration IP Address: 192.168.1.1

Subnet Mask: 255.255.255.0

Gateway: 0.0.0.0

Time Zone GMT

Time Zone Adjust for Daylight Saving TIme Disabled

SNMP Disabled

Network Planning Guide for ProSafe VPN Firewall Router FVX538

1-6 Introducing the FVX538

October 2004

Otros manuales para FVX538v1 - ProSafe VPN Firewall Dual WAN

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Enrutador de red de NETGEAR

NETGEAR

NETGEAR GC110 Manual de usuario

NETGEAR

NETGEAR Orbi RBR20 Manual de usuario

NETGEAR

NETGEAR N300 Manual de usuario

NETGEAR

NETGEAR SXK50 Manual de usuario

NETGEAR

NETGEAR ProSafe JFS516 Manual de usuario

NETGEAR

NETGEAR AC1450 Manual de usuario

NETGEAR

NETGEAR Nighthawk XR300 Manual de usuario

NETGEAR

NETGEAR MR814 - 802.11b Cable/DSL Wireless Router Guía del usuario

NETGEAR

NETGEAR Orbi Manual de usuario

NETGEAR

NETGEAR Nighthawk X6 AC3000 R7850 Manual de usuario

NETGEAR

NETGEAR RAXE300 Manual de usuario

NETGEAR

NETGEAR RT338 Manual de usuario

NETGEAR

NETGEAR DG834 - ADSL Firewall Router Manual de usuario

NETGEAR

NETGEAR WGT624 v3 Manual de usuario

NETGEAR

NETGEAR WAG302 Manual de usuario

NETGEAR

NETGEAR ProSafe FVS318v3 Manual de usuario

NETGEAR

NETGEAR WGR614v2 Manual de usuario

NETGEAR

NETGEAR GSS108E Manual

NETGEAR

NETGEAR WGR614 v7 Guía del usuario

NETGEAR

NETGEAR FS605 Manual de usuario

NETGEAR

NETGEAR N600 DGND3800B Manual de usuario

NETGEAR

NETGEAR FS308 - Switch Manual de usuario

NETGEAR

NETGEAR D6400 Manual de usuario

NETGEAR

NETGEAR C6300v2 Manual de usuario

Manuales populares de Enrutador de red de otras marcas

Allnet

Allnet ALL0333AU Manual de usuario

HomeSeer

HomeSeer HT-SEL Manual de usuario

Sercomm

Sercomm Genesis OC3505D Manual de usuario

Billion

Billion BIPAC 5102 Series Manual de usuario

TP-Link

TP-Link TD-8817 Manual de usuario

Motorola

Motorola MR1900 Manual de usuario

Digi

Digi IX14 Manual de usuario

Cisco

Cisco NCS 540 Manual

XAVi

XAVi X8821e Manual de usuario

BEC

BEC 6200WZL Manual de usuario

MikroTik

MikroTik hAP ac3 Series Manual de usuario

Korenix

Korenix JetNet 5428G Series Manual de usuario

Korenix

Korenix JetNet 5710G Series Manual de usuario

Automated Logic

Automated Logic ZN551 Manual del propietario

Cisco

Cisco ASR 1000 Series Manual del operador

EnGenius

EnGenius ESR-9710 Manual de usuario

Cisco

Cisco 805 Series Instrucciones de funcionamiento y seguridad

LevelOne

LevelOne FBR-1416 Manual de usuario