User manual NETGEAR FVS124G RM

[. . . ] Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports FVS124G NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10085-01 March 2005 202-10085-01, March 2005 © 2005 by NETGEAR, Inc. All rights reserved. Trademarks NETGEAR is a trademark of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. [. . . ] Enter the WAN IP address of the remote FVS124G. Click WAN1 to bind this connection to the WAN1 port. Figure 7-5: WAN IP address of remote FVS124G 8. Enter the LAN IP address and subnet mask of the remote FVS124G. Figure 7-6: LAN IP address and subnet mask of remote FVS124G 10. Click Next. 7-6 202-10085-01, March 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 11. Click Done to create the 'to_fvs' IKE and VPN policies. In the IKE Policies menu, the 'to_fvs' IKE policy will appear in the table. Figure 7-7: IKE Policies 12. You can view the IKE parameters by selecting 'to_fvs' and clicking Edit. It should not be necessary to make any changes. Figure 7-8: FVX538-to-FVS124G IKE screen Virtual Private Networking 202-10085-01, March 2005 7-7 Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 13. In the VPN Policies menu, the 'to_fvs' VPN policy will appear in the table. Figure 7-9: FVX538 VPN Policies screen 7-8 202-10085-01, March 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 14. You can view the VPN parameters by selecting 'to_fvs' and clicking Edit. It should not be necessary to make any changes. Figure 7-10: FVX538-to-FVS124G VPN screen Configuring the FVS124G 1. 3. Select the VPN Wizard Give the client connection a name, such as to_fvx. Enter a value for the pre-shared key. Virtual Private Networking 202-10085-01, March 2005 7-9 Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 4. Select 'a remote VPN gateway'. Figure 7-11: VPN Wizard start page 5. Enter the WAN IP address of the remote FVX538. Figure 7-12: WAN IP address of remote FVX538 7. Click Next. 7-10 202-10085-01, March 2005 Virtual Private Networking Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports 8. Enter the LAN IP address and subnet mask of the remote FVX538. Figure 7-13: LAN IP address and subnet mask of remote FVX538 9. Click Next. 10. Click Done to create the 'to_fvx' IKE and VPN policies. Testing the Connection 1. 2. From a PC on either firewall's LAN, try to ping a PC on the other firewall's LAN. Establishing the VPN connection may take several seconds. For additional status and troubleshooting information, view the VPN log and status menu in the FVX538 or FVS124G. Creating a VPN Connection: Netgear VPN Client to FVS124G This section describes how to configure a VPN connection between a Windows PC and the FVS124G VPN Firewall. Using the FVS124G's VPN Wizard, we will create a single set of policies (IKE and VPN) that will allow up to 50 remote PCs to connect from locations in which their IP addresses are unknown in advance. The PCs may be directly connected to the Internet or may be behind NAT routers. If more PCs are to be connected, an additional policy or policies must be created. Each PC will use Netgear's VPN Client. Since the PC's IP address is assumed to be unknown, the PC must always be the Initiator of the connection. Virtual Private Networking 202-10085-01, March 2005 7-11 Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports This procedure was developed and tested using: · · · Netgear FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports with version 1. 0 firmware Netgear VPN Client version 10. 3. 5 (Build 6) NAT router: Netgear FR114P with version 1. 5_09 firmware Configuring the FVS124G 1. [. . . ] Throughput is the amount of data transferred from one device to another or processed in a specified amount of time - typically, throughputs are measured in bytes per second (Bps). R RADIUS Short for Remote Authentication Dial-In User Service, RADIUS is an authentication system. Using RADIUS, you must enter your user name and password before gaining access to a network. This information is passed to a RADIUS server, which checks that the information is correct, and then authorizes access. Though not an official standard, the RADIUS specification is maintained by a working group of the IETF. RFC Request For Comment. [. . . ]