NETGEAR FVS318N Router Manual (Setup & Configuration)

There is no better technical help than having the manual of any given product. Fortunately, we are presenting router guide for NETGEAR FVS318N router. If you need help on topics like web panel access for management, router hard reset, parental control settings, band width allocation, changing your router IP or password from default, port forwarding, then reading this guide is a must.

Page 1 / 414
350 East Plumeria Drive
San Jose, CA 95134
USA
March 16, 2012
202-10836-02
v1.0
ProSafe Wireless-N 8-Port
Gigabit VPN Firewall
FVS318N
Reference Manual
Page 2 / 414
2
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
© 2011–2012 NETGEAR, Inc. All rights reserved.
No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated
into any language in any form or by any means without the written permission of NETGEAR, Inc.
Technical Support
Thank you for choosing NETGEAR. To register your product, get the latest product updates, get support online, or
for more information about the topics covered in this manual, visit the Support website at
Phone (US & Canada only): 1-888-NETGEAR
Phone (Other Countries): Check the list of phone numbers at
.
Trademarks
NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or registered trademarks of
NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Information is subject to change
without notice. Other brand and product names are registered trademarks or trademarks of their respective
holders. © 2012 NETGEAR, Inc. All rights reserved.
Statement of Conditions
To improve internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes
to the products described in this document without notice. NETGEAR does not assume any liability that may occur
due to the use, or application of, the product(s) or circuit layout(s) described herein.
Revision History
Publication
Part Number
Version
Publish Date
Comments
202-10836-02
1.0
March 16, 2012
Added the following menus and features:
• New and improved general menu structure with IPv4 and IPv6
radio buttons
• New LAN IPv6 configuration menu with the LAN Setup (IPv6)
screen (see
Manage the IPv6 LAN
) and a new screen, the LAN
Multi-homing (IPv6) screen (see
Configure IPv6 Multihome LAN
IP Addresses on the Default VLAN
)
• IPv6 DMZ (
Enable and Configure the DMZ Port for IPv4 and
IPv6 Traffic
)
• IPv6 firewall rules (see
Configure LAN WAN Rules
,
Configure
DMZ WAN Rules
,
Configure LAN DMZ Rules
, and
Examples of
Firewall Rules
)
• IPv6 attack checks (see
Attack Checks
)
• IPv6/MAC bindings (see
Set Up IP/MAC Bindings
)
• Simplified wireless settings submenus for easier configuration
(see
Chapter 4, Wireless Configuration and Security
)
• IPSec VPN IPv6 address support (see
Chapter 6, Virtual Private
Networking Using IPSec and L2TP Connections
)
• IPSec VPN autoinitiate support (see
Manually Add or Edit a
VPN Policy
)
• SSL VPN IPv6 address support (see
Chapter 7, Virtual Private
Networking Using SSL Connections
)
Page 3 / 414
3
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
(continued)
• User login restrictions based on IPv6 addresses (see
Configure
Login Restrictions Based on IPv6 Addresses
)
• IPv6 remote management access (see
Configure Remote
Management Access
)
• IPv6 time zone (see
Configure Date and Time Service
)
• IPv6 diagnostics (see
Diagnostics Utilities
)
• Extensive list of factory default settings (see
Appendix A,
Default Settings and Technical Specifications
)
202-10836-01
1.0
September 2011
First publication
Page 4 / 414
4
Contents
Chapter 1
Introduction
What Is the ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N? .10
Key Features and Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Wireless Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Advanced VPN Support for Both IPSec and SSL. . . . . . . . . . . . . . . . . .11
A Powerful, True Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Security Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Autosensing Ethernet Connections with Auto Uplink . . . . . . . . . . . . . . .13
Extensive Protocol Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Easy Installation and Management . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Maintenance and Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Package Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Hardware Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Front Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Rear Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Bottom Panel with Product Label . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
Choose a Location for the Wireless VPN Firewall . . . . . . . . . . . . . . . . . . .19
Log In to the Wireless VPN Firewall. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Web Management Interface Menu Layout . . . . . . . . . . . . . . . . . . . . . . .22
Requirements for Entering IP Addresses . . . . . . . . . . . . . . . . . . . . . . . .24
Chapter 2
Internet and Broadband Settings
Internet and WAN Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . .25
Tasks to Set Up an IPv4 Internet Connection to Your ISP. . . . . . . . . . .25
Tasks to Set Up an IPv6 Internet Connection to Your ISP. . . . . . . . . . .26
Configure the IPv4 Internet Connection and WAN Settings. . . . . . . . . . . .26
Configure the IPv4 WAN Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Let the Wireless VPN Firewall Automatically Detect and
Configure an IPv4 Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . .28
Manually Configure an IPv4 Internet Connection. . . . . . . . . . . . . . . . . .31
Configure the IPv6 Internet Connection and WAN Settings. . . . . . . . . . . .35
Configure the IPv6 Routing Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36
Use a DHCPv6 Server to Configure an IPv6 Internet Connection . . . . .37
Configure a Static IPv6 Internet Connection . . . . . . . . . . . . . . . . . . . . .39
Configure 6to4 Automatic Tunneling . . . . . . . . . . . . . . . . . . . . . . . . . . .41
Configure ISATAP Automatic Tunnelling . . . . . . . . . . . . . . . . . . . . . . . .42
View the Tunnel Status and IPv6 Addresses . . . . . . . . . . . . . . . . . . . . .45
Configure Dynamic DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45
Configure Advanced WAN Options and Other Tasks. . . . . . . . . . . . . . . . .47
Page 5 / 414
5
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Additional WAN-Related Configuration Tasks . . . . . . . . . . . . . . . . . . . .50
Verify the Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
What to Do Next . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
Chapter 3 LAN Configuration
Manage IPv4 Virtual LANs and DHCP Options . . . . . . . . . . . . . . . . . . . . .51
Port-Based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52
Assign and Manage VLAN Profiles. . . . . . . . . . . . . . . . . . . . . . . . . . . . .53
VLAN DHCP Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54
Configure a VLAN Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56
Configure VLAN MAC Addresses and LAN Advanced Settings. . . . . . .61
Configure IPv4 Multihome LAN IP Addresses on the Default VLAN . . . . .62
Manage IPv4 Groups and Hosts (IPv4 LAN Groups). . . . . . . . . . . . . . . . .64
Manage the Network Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65
Change Group Names in the Network Database . . . . . . . . . . . . . . . . . .68
Set Up DHCP Address Reservation . . . . . . . . . . . . . . . . . . . . . . . . . . . .69
Manage the IPv6 LAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70
DHCPv6 Server Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70
Configure the IPv6 LAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72
Configure the IPv6 Router Advertisement Daemon and
Advertisement Prefixes for the LAN . . . . . . . . . . . . . . . . . . . . . . . . . . . .77
Configure IPv6 Multihome LAN IP Addresses on the Default VLAN . . . . .81
Enable and Configure the DMZ Port for IPv4 and IPv6 Traffic. . . . . . . . . .82
DMZ Port for IPv4 Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83
DMZ Port for IPv6 Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86
Configure the IPv6 Router Advertisement Daemon and
Advertisement Prefixes for the DMZ. . . . . . . . . . . . . . . . . . . . . . . . . . . .90
Manage Static IPv4 Routing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95
Configure Static IPv4 Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95
Configure the Routing Information Protocol . . . . . . . . . . . . . . . . . . . . . .97
IPv4 Static Route Example. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100
Manage Static IPv6 Routing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100
Chapter 4
Wireless Configuration and Security
Overview of the Wireless Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103
Wireless Equipment Placement and Range Guidelines . . . . . . . . . . . .104
Configure the Basic Radio Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105
Operating Frequency (Channel) Guidelines . . . . . . . . . . . . . . . . . . . . .107
Wireless Data Security Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107
Wireless Security Profiles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109
Before You Change the SSID, WEP, and WPA Settings . . . . . . . . . . .110
Configure and Enable Wireless Profiles . . . . . . . . . . . . . . . . . . . . . . . .112
Restrict Wireless Access by MAC Address . . . . . . . . . . . . . . . . . . . . .117
View the Status of a Wireless Profile . . . . . . . . . . . . . . . . . . . . . . . . . .119
Configure Wi-Fi Protected Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120
Configure Advanced Radio Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . .122
Test Basic Wireless Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124