NETGEAR ProSafe FR328S Скачать руководство пользователя страница 14 | Manualshive

Страница: 14 / 131

NETGEAR ProSafe FR328S Скачать руководство пользователя страница 14

FR328S Cable/DSL ProSafe Firewall with Dial Back-Up

xiv

About This Manual

Special Message Formats

This guide uses the following formats to highlight special messages:

Technical Support

For help with any technical issues, contact Customer Support at 1-888-NETGEAR, or visit us on
the Web at www.NETGEAR.com. The NETGEAR Web site includes an extensive knowledge
base, answers to frequently asked questions, and a means for submitting technical questions
online.

Note:

This format is used to highlight information of importance or special interest.

Procedure:

This format is used to let you know that you are following a sequence of

steps required to complete a task.

Warning:

This format is used to highlight information about the possibility of injury or

equipment damage.

Danger:

This format is used to alert you that there is the potential for incurring an

electrical shock if you mishandle the equipment.

FR328S.book Page xiv Monday, September 9, 2002 4:01 PM

«
...
12
13
14
15
16
...
»

Содержание ProSafe FR328S

Страница 1: ...Sept 2002 NETGEAR Inc 4500 Great America Parkway Santa Clara CA 95054 USA Phone 1 888 NETGEAR FR328S Cable DSL ProSafe Firewall with Dial Back Up Reference Manual FR328S book Page i Monday September 9...

Страница 2: ...tallation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications...

Страница 3: ...r to the notes in the operating instructions Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been granted the right to test the...

Страница 4: ...iv FR328S book Page iv Monday September 9 2002 4 01 PM...

Страница 5: ...agement 1 3 What s in the Box 1 5 The Firewall s Front Panel 1 5 The Firewall s Rear Panel 1 6 Chapter 2 Connecting the Firewall to the Internet What You Will Need Before You Begin 2 1 LAN Hardware Re...

Страница 6: ...e Example Blocking Instant Messenger 3 10 Order of Precedence for Rules 3 12 Services 3 13 Setting Times and Scheduling Firewall Services 3 14 Chapter 4 Managing Your Network Network Management Inform...

Страница 7: ...ED Stays On 6 2 Local or Internet Port Link LEDs Not On 6 2 Troubleshooting the Web Configuration Interface 6 4 Troubleshooting the ISP Connection 6 5 Troubleshooting a TCP IP Network Using a Ping Uti...

Страница 8: ...iguring Windows 95 98 and ME for TCP IP Networking C 2 Install or Verify Windows Networking Components C 2 Enabling DHCP to Automatically Configure TCP IP Settings C 4 Selecting Windows Internet Acces...

Страница 9: ...Contents ix Obtaining ISP Configuration Information for Macintosh Computers C 11 Restarting the Network C 12 Glossary Index FR328S book Page ix Monday September 9 2002 4 01 PM...

Страница 10: ...x Contents FR328S book Page x Monday September 9 2002 4 01 PM...

Страница 11: ...rocedure 3 1 Changing the Built In Password 3 2 Procedure 3 1 Changing the Administrator Login Timeout 3 3 Procedure 3 2 Block Keywords and Sites 3 4 Procedure 3 3 Define Services 3 13 Procedure 3 4 S...

Страница 12: ...xii FR328S book Page xii Monday September 9 2002 4 01 PM...

Страница 13: ...s tutorial information is provided in the Appendices Typographical Conventions This guide uses the following typographical conventions italics Book titles and UNIX file command and directory names cou...

Страница 14: ...frequently asked questions and a means for submitting technical questions online Note This format is used to highlight information of importance or special interest Procedure This format is used to le...

Страница 15: ...FR328S Cable DSL ProSafe Firewall with Dial Back Up About This Manual xv FR328S book Page xv Monday September 9 2002 4 01 PM...

Страница 16: ...FR328S book Page xvi Monday September 9 2002 4 01 PM...

Страница 17: ...r connectivity through the serial port provides highly reliable Internet access for up to 253 users Key Features The FR328S offers the following features A Powerful True Firewall Unlike simple Interne...

Страница 18: ...d the Internet WAN interfaces are autosensing and capable of full duplex or half duplex operation The firewall incorporates Auto UplinkTM technology Each LOCAL Ethernet port will automatically sense w...

Страница 19: ...sers to find your network using a domain name when your IP address is not permanently assigned The firewall contains a client that can connect to many popular Dynamic DNS services to register your dyn...

Страница 20: ...e firewall incorporates built in diagnostic functions such as Ping DNS lookup and remote reboot These functions allow you to test Internet connectivity and reboot the firewall You can use these diagno...

Страница 21: ...anty and registration card Support information card If any of the parts are incorrect missing or damaged contact your NETGEAR dealer Keep the carton including the original packing materials in case yo...

Страница 22: ...Label Activity Description POWER On Power is supplied to the firewall TEST On Off The system is initializing The system is ready and running MODEM On Blinking The port detected a link with the Interne...

Страница 23: ...ive Internet service such as that provided by a DSL or Cable modem account 3 The Internet Service Provider ISP configuration information for your DSL or Cable modem account LAN Hardware Requirements T...

Страница 24: ...ion information Your ISP should have provided you with all the information needed to connect to the Internet If you cannot locate this information you can ask your ISP to provide it or you can try one...

Страница 25: ...______ ______ ______ ______ Gateway IP Address ______ ______ ______ ______ ISP DNS Server Addresses If you were given DNS server addresses fill in the following Primary DNS Server IP Address ______ _...

Страница 26: ...ant to help you through this procedure Procedure 2 2 Connecting the Firewall to Your LAN There are three steps to connecting your firewall 1 Connect the firewall to your network 2 Log in to the firewa...

Страница 27: ...to your Cable or DSL modem Figure 2 1 Disconnect the Cable or DSL Modem c Connect the Ethernet cable A from your Cable or DSL modem to the FR328S s Internet port Figure 2 2 Connect the Cable or DSL Mo...

Страница 28: ...on This feature also eliminates the need to worry about crossover cables as Auto Uplink will accommodate either type of cable to make the right connection e Turn on the Cable or DSL modem and wait abo...

Страница 29: ...is lit indicating a link has been established to the cable or DSL modem c Next use a browser like Internet Explorer or Netscape to log in to the firewall at its default address of http 192 168 0 1 Fi...

Страница 30: ...tions on page 6 1 Connecting the FR328S Firewall to the Internet The firewall is now properly attached to your network You are now ready to configure your firewall to connect to the Internet There are...

Страница 31: ...atically When the Wizard launches select Yes in the menu below to allow the firewall to automatically determine your connection Figure 2 7 Built in Web based Configuration Manager Setup Wizard Note If...

Страница 32: ...e Setup Wizard determines that your Internet service account uses a login protocol such as PPP over Ethernet PPPoE you will be directed to a menu like the PPPoE menu in Figure 2 8 Figure 2 8 Setup Wiz...

Страница 33: ...DNS Server If a Secondary DNS Server address is available enter it also If you enter an address here after you finish configuring the firewall reboot your PCs so that the settings take effect 4 Click...

Страница 34: ...does not transfer an address you must obtain it from the ISP and enter it manually here If you enter an address here you should reboot your PCs after configuring the firewall 3 The Router s MAC Addre...

Страница 35: ...you recorded in Record Your Internet Connection Information on page 2 3 2 Enter the IP address of your ISP s Primary DNS Server If a Secondary DNS Server address is available enter it also A DNS serve...

Страница 36: ...firewall to your ISDN or dial up analog modem 2 Configure the firewall 3 Connect to the Internet Follow the steps below to configure a serial port Internet connection on your firewall 1 Connect the Fi...

Страница 37: ...o Appendix C Preparing Your Network a Use a browser to log in to the firewall at http 192 168 0 1 with its default User Name of admin and default Password of password or using whatever Password you ha...

Страница 38: ...f you want to enable a Idle Time disconnect check the box and enter a time in minutes To configure the TCP IP settings fill in whatever address parameters your ISP provided e Configure the Modem param...

Страница 39: ...pying the modem string settings from the PC configuration and pasting them into the FR328S Modem Properties Initial String field For more information on this procedure please refer to the support area...

Страница 40: ...nects to the Internet when one of your computers requires access It is not necessary to run a dialer or login application such as Dial Up Networking or Enternet to connect log in or disconnect These f...

Страница 41: ...iguring Your Internet Connection You can manually configure your firewall using the menu below or you can allow the Setup Wizard to determine your configuration as described in the previous section Fi...

Страница 42: ...nger need to launch the ISP s login program on your PC in order to access the Internet When you start an Internet application your firewall will automatically log you in 4 Internet IP Address If your...

Страница 43: ...ddress of that PC This feature allows your firewall to masquerade as that PC by cloning its MAC address To change the MAC address select Use this Computer s MAC address The firewall will then capture...

Страница 44: ...FR328S Cable DSL ProSafe Firewall with Dial Back Up 2 22 Connecting the Firewall to the Internet FR328S book Page 22 Monday September 9 2002 4 01 PM...

Страница 45: ...er admin for the firewall User Name and password for the firewall Password You can use procedures below to change the firewall s password and the amount of time for the administrator s login timeout N...

Страница 46: ...the Main Menu of the browser interface under the Maintenance heading select Set Password to bring up the menu shown in Figure 3 2 Figure 3 2 Set Password menu 3 To change the password first enter the...

Страница 47: ...ety of options for blocking Internet based content and communications services With its content filtering feature the FR328S Firewall prevents objectionable content from reaching your PCs The FR328S a...

Страница 48: ...User Name of admin default password of password or using whatever Password and LAN address you have chosen for the firewall 2 Click on the Block Sites link of the Security menu Figure 3 3 Block Sites...

Страница 49: ...used to block or allow specific traffic passing through from one side to the other Inbound rules WAN to LAN restrict access by outsiders to private resources selectively allowing only specific outside...

Страница 50: ...menu To edit an existing rule select its button on the left side of the table and click Edit To delete an existing rule select its button on the left side of the table and click Delete To move an exis...

Страница 51: ...opens holes in your firewall Only enable those ports that are necessary for your network Following are two application examples of inbound rules Inbound Rule Example A Local Public Web Server If you...

Страница 52: ...C or Server on your LAN which will receive the inbound traffic covered by this rule WAN Users These settings determine which packets are covered by the rule based on their source WAN IP address Select...

Страница 53: ...mple Videoconference from Restricted Addresses Considerations for Inbound Rules If your external IP address is assigned dynamically by your ISP the IP address may change periodically as the DHCP lease...

Страница 54: ...address the time of day the type of service being requested service port number Following is an application example of outbound rules Outbound Rule Example Blocking Instant Messenger If you want to b...

Страница 55: ...ddresses are covered by this rule Address range If this option is selected you must enter the Start and Finish fields Single address Enter the required address in the Start fields WAN Users These sett...

Страница 56: ...c attempting to pass through the firewall the packet information is subjected to the rules in the order shown in the Rules Table beginning at the top and proceeding to the default rules at the bottom...

Страница 57: ...ineering Task Force IETF and published in RFC1700 Assigned Numbers Service numbers for other applications are typically chosen from the range 1024 to 65535 by the authors of the application Although t...

Страница 58: ...ime Protocol NTP to obtain the current time and date from one of several Network Time Servers on the Internet In order to localize the time for your log entries you must select your Time Zone from the...

Страница 59: ...your time zone is currently in daylight savings time Note If your region uses Daylight Savings Time you must manually check Adjust for Daylight Savings Time on the first day of Daylight Savings Time a...

Страница 60: ...d and LAN address you have chosen for the firewall 2 Click on the Schedule link of the Security menu to display menu shown above in the Schedule Services menu 3 To block Internet services based on a s...

Страница 61: ...ewall with Dial Back Up Network Management Information The FR328S provides a variety of status and usage information which is discussed below Viewing Router Status and Usage Statistics From the Main M...

Страница 62: ...t DHCP If set to None the firewall is configured to use a fixed IP address on the WAN If set to Client the firewall is configured to obtain an IP address dynamically from the ISP IP Subnet Mask This f...

Страница 63: ...e number of packets transmitted on this port since reset or manual clear RxPkts The number of packets received on this port since reset or manual clear Collisions The number of collisions on this port...

Страница 64: ...under the Maintenance heading select Attached Devices to view the table shown in Figure 4 3 Figure 4 3 Attached Devices menu For each device the table shows the IP address NetBIOS Host Name if availab...

Страница 65: ...and administrator logins If you enabled content filtering in the Block Sites menu the Logs page shows you when someone on your network tried to access a blocked site If you enabled e mail notification...

Страница 66: ...e of event and what action was taken if any Source IP The IP address of the initiating device for this log entry Source port and interface The service port number of the initiating device and whether...

Страница 67: ...nistrator logout IP 192 168 0 2 This entry shows an administrator logging in and out from IP address 192 168 0 2 Tue 2002 05 21 19 00 06 Login screen timed out IP 192 168 0 2 This entry shows a time o...

Страница 68: ...rmation in the configuration menu of your e mail program If you leave this box blank log and alert messages will not be sent via e mail Send to this e mail address Enter the e mail address to which lo...

Страница 69: ...t the log is cleared from the firewall s memory If the firewall cannot e mail the log file the log buffer may fill up In this case the firewall overwrites the log and discards its contents Backing Up...

Страница 70: ...the Maintenance heading of the Main Menu select the Settings Backup menu as seen in Figure 4 7 Figure 4 7 Settings Backup menu 3 Click Backup to save a copy of the current settings 4 Store the cfg fi...

Страница 71: ...the file to the firewall 5 The firewall will then reboot automatically Procedure 4 8 Erase the Configuration It is sometimes desirable to restore the firewall to the factory default settings This can...

Страница 72: ...IP address to verify that the DNS server configuration is working Display the Routing Table to identify what other routers the router is communicating with Trace the Routing Path to identify any conn...

Страница 73: ...a range of IP addresses on the Internet select IP address range Enter a beginning and ending IP address to define the allowed range c To allow access from a single IP address on the Internet select On...

Страница 74: ...ile is compressed ZIP file you must first extract the binary BIN or IMG file before uploading it to the firewall Note The Web browser used to upload new firmware into the firewall must support HTTP up...

Страница 75: ...mportant not to interrupt the Web browser by closing the window clicking a link or loading a new page If the browser is interrupted it may corrupt the software When the upload is complete your firewal...

Страница 76: ...FR328S Cable DSL ProSafe Firewall with Dial Back Up 4 16 Managing Your Network FR328S book Page 16 Monday September 9 2002 4 01 PM...

Страница 77: ...ult DMZ Server feature is helpful when using some online games and videoconferencing applications that are incompatible with NAT The firewall is programmed to recognize some of these applications and...

Страница 78: ...ool since it allows your firewall to be discovered Don t check this box unless you have a specific reason to do so Configuring LAN IP Settings The LAN IP Setup menu allows configuration of LAN IP serv...

Страница 79: ...router sends It recognizes both formats when receiving By default this is set for RIP 1 RIP 1 is universally supported RIP 1 is probably adequate for most networks unless you have an unusual network...

Страница 80: ...r as DHCP server If another device on your network will be the DHCP server or if you will manually configure the network settings of all of your computers clear the Use router as DHCP server check box...

Страница 81: ...rved IP addresses should be assigned to servers that require permanent IP settings To reserve an IP address 1 Click the Add button 2 In the IP Address box type the IP address to assign to the PC or se...

Страница 82: ...IP MTU or DHCP parameters 4 Click Apply to save your changes Configuring Dynamic DNS If your network has a permanently assigned IP address you can register a domain name and have that name linked with...

Страница 83: ...rs whose names appear in the Select Service Provider box and register for an account For example for dyndns org go to www dyndns org 4 Select the Use a dynamic DNS service check box 5 Select the name...

Страница 84: ...gateway and a second static route was created to your local network for all 192 168 0 x addresses With this configuration if you attempt to access a device on the 134 177 0 0 network your firewall wi...

Страница 85: ...all 2 From the Main Menu of the browser interface under Advanced click on Static Routes to view the Static Routes menu shown in Figure 5 2 Figure 5 2 Static Routes Table 3 To add or edit a Static Rout...

Страница 86: ...ination If the destination is a single host type 255 255 255 255 g Type the Gateway IP Address which must be a router on the same LAN segment as the firewall h Type a number between 1 and 15 as the Me...

Страница 87: ...wall but I can t access the Internet Go to Troubleshooting the ISP Connection on page 6 5 I can t remember the firewall s configuration password I want to clear the configuration and start over again...

Страница 88: ...should contact technical support Test LED Never Turns On or Test LED Stays On When the firewall is turned on the Test LED turns on for about 10 seconds and then turns off If the Test LED does not turn...

Страница 89: ...sure that power is turned on to the connected hub or PC Be sure you are using the correct cable When connecting the firewall s Internet port to a cable or DSL modem use the cable that was supplied wi...

Страница 90: ...address is in this range check the connection from the PC to the firewall and reboot your PC If your firewall s IP address has been changed and you don t know the current IP address clear the firewal...

Страница 91: ...ed to force your cable or DSL modem to recognize your new firewall by performing the following procedure 1 Turn off power to the cable or DSL modem 2 Turn off power to your firewall 3 Wait five minute...

Страница 92: ...ng system documentation Your PC may not have the firewall configured as its TCP IP gateway If your PC obtains its information from the firewall by DHCP reboot the PC and verify the gateway address as...

Страница 93: ...kstation are correct and that the addresses are on the same subnet Testing the Path from Your PC to a Remote Device After verifying that the LAN path works correctly test the path from your PC to a re...

Страница 94: ...tings changing the firewall s administration password to password and the IP address to 192 168 0 1 You can erase the current configuration and restore factory defaults in two ways Use the Erase funct...

Страница 95: ...the log is stamped with the date and time of day Problems with the date and time function can include Date shown is January 1 2000 Cause The firewall has not yet successfully reached a Network Time S...

Страница 96: ...FR328S Cable DSL ProSafe Firewall with Dial Back Up 6 10 Troubleshooting FR328S book Page 10 Monday September 9 2002 4 01 PM...

Страница 97: ...a and Routing Protocols TCP IP RIP 1 RIP 2 DHCP PPP over Ethernet PPPoE Power Adapter North America 120V 60 Hz input United Kingdom Australia 240V 50 Hz input Europe 230V 50 Hz input Japan 100V 50 60...

Страница 98: ...140 F 0 to 40 C Operating humidity 90 maximum relative humidity noncondensing Electromagnetic Emissions Meets requirements of FCC Part 15 Class B VCCI Class B EN 55 022 CISPR 22 Class B Interface Spec...

Страница 99: ...are listed on the World Wide Web at www ietf org and are mirrored and indexed at many other sites worldwide Basic Router Concepts Large amounts of bandwidth can be provided easily and relatively inex...

Страница 100: ...ters periodically update one another and check for changes to add to the routing table The FVS318 VPN Firewall supports both the older RIP 1 and the newer RIP 2 protocols Among other improvements RIP...

Страница 101: ...bit pattern which is used by the TCP IP software to identify the address class After the address class has been determined the software can correctly identify the host section of the address The foll...

Страница 102: ...es is not assigned but is used as the broadcast address for simultaneously sending a packet to all hosts with the same network address Netmask In each of the address classes previously described the s...

Страница 103: ...physical networks known as subnetworks Some of the node numbers are used as a subnet number instead A Class B address gives us 16 bits of node numbers translating to 64 000 nodes Most organizations d...

Страница 104: ...ing table lists the additional subnet mask bits in dotted decimal notation To use the table write down the original class netmask and replace the 0 value octets with the dotted decimal value of the ad...

Страница 105: ...e local and which are remote Private IP Addresses If your local network is isolated from the Internet for example when using NAT you can assign any IP addresses to the hosts without problems However t...

Страница 106: ...P This type of Internet account is more costly than a single address account typically used by a single user with a modem rather than a router The FVS318 VPN Firewall employs an address sharing method...

Страница 107: ...rs MAC Addresses and Address Resolution Protocol An IP address alone cannot be used to deliver data from one LAN device to another To send data between LAN devices you must convert the IP address of t...

Страница 108: ...ormation about address assignment refer to the IETF documents RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Management of IP Address Space For more information about IP...

Страница 109: ...N connects to the Internet through a router an opportunity is created for outsiders to access or disrupt your network A NAT router provides some protection because by the very nature of the Network Ad...

Страница 110: ...allowed to pass through or rejected Denial of Service Attack A hacker may be able to prevent your network from operating or communicating by launching a Denial of Service DoS attack The method used f...

Страница 111: ...ectors Crossover cables are often unmarked as such and must be identified by comparing the two connectors Since the cable connectors are clear plastic it is easy to place them side by side and view th...

Страница 112: ...Reference Manual for the Model FVS318 Cable DSL ProSafe VPN Firewall B 14 Networks Routing and Firewall Basics FR328S book Page 14 Monday September 9 2002 4 01 PM...

Страница 113: ...need for networking with TCP IP Windows 95 or later includes the software components for establishing a TCP IP network Windows 3 1 does not include a TCP IP component You need to purchase a third part...

Страница 114: ...l is shipped preconfigured as a DHCP server The firewall assigns the following TCP IP configuration information automatically when the PCs are rebooted PC or workstation IP addresses 192 168 0 2 throu...

Страница 115: ...Adapter and then click Add c Select the manufacturer and model of your Ethernet adapter and then click OK If you need TCP IP a Click the Add button b Select Protocol and then click Add c Select Micro...

Страница 116: ...ese steps 1 Connect all PCs to the firewall then restart the firewall and allow it to boot 2 On each attached PC open the Network control panel refer to the previous section and select the Configurati...

Страница 117: ...g the default TCP IP settings that NETGEAR recommends The IP address is between 192 168 0 2 and 192 168 0 254 The subnet mask is 255 255 255 0 The default gateway is 192 168 0 1 Configuring Windows NT...

Страница 118: ...Start button and then click Run The Run window opens 2 Type cmd and then click OK A command window opens 3 Type ipconfig all Your IP Configuration information will be listed and should match the valu...

Страница 119: ...Using DHCP Server You can leave the DHCP Client ID box empty 4 Close the TCP IP Control Panel 5 Repeat this for each Macintosh on your network MacOS X 1 From the Apple menu choose System Preferences...

Страница 120: ...n TCP IP The panel is updated to show your settings which should match the values below if you are using the default TCP IP settings that NETGEAR recommends The IP Address is between 192 168 0 2 and 1...

Страница 121: ...and modem the firewall appears to be a single PC to the ISP The firewall then allows the PCs on the local network to masquerade as the single PC to access the Internet through the broadband modem The...

Страница 122: ...Obtaining ISP Configuration Information for Windows Computers As mentioned above you may need to collect configuration information from your PC so that you can use this information when you configure...

Страница 123: ...information when you configure the FR328S Firewall Following this procedure is only necessary when your ISP does not dynamically supply the account information To get the information you need to confi...

Страница 124: ...eset the network for the devices to be able to communicate correctly Restart any computer that is connected to the firewall After configuring all of your computers for TCP IP networking and restarting...

Страница 125: ...addresses on the Internet Domain names are of the form of a registered entity name plus one of a number of predefined top level suffixes such as com edu uk etc For example in the address mail NETGEAR...

Страница 126: ...mation transmitted over public networks IPSec is a VPN method providing a higher level of security than PPTP ISP Internet service provider LAN See local area network local area network LAN A communica...

Страница 127: ...onnection PPTP Point to Point Tunneling Protocol A method for establishing a virtual private network VPN by embedding Microsoft s network protocol into Internet packets PSTN Public Switched Telephone...

Страница 128: ...ed with a 64 bit or 128 bit Shared Key for data encryption wide area network WAN A long distance link used to extend or connect remotely located local area networks The Internet is a large WAN Windows...

Страница 129: ...ver 5 1 default reset button 6 8 Denial of Service DoS protection 1 1 3 3 denial of service attack B 12 DHCP 1 3 5 4 B 11 DHCP Client ID C 7 DHCP Setup field Ethernet Setup menu 4 2 DMZ Server 5 1 DNS...

Страница 130: ...n Information C 11 masquerading C 9 metric 5 10 Modem 2 16 2 17 modem 1 3 1 6 2 14 MTU 5 3 multicasting 5 3 N NAT C 9 NAT See Network Address Translation NETGEAR contacting 1 xiv netmask translation t...

Страница 131: ...3 10 service numbers 3 13 Setup Wizard 2 1 SMTP 4 8 spoof MAC address 6 6 stateful packet inspection 1 1 B 12 Static Routes 5 6 subnet addressing B 5 subnet mask B 6 C 10 C 11 Syslog 4 7 T TCP IP con...

Отзывы:

Нет отзывов