User manual NETGEAR FM114P - Reference Guide

Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Family NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR SM-FM114PNA-0 May 2002 © 2002 by NETGEAR, Inc. All rights reserved. Trademarks NETGEAR and Auto Uplink are trademarks or registered trademarks of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein. Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: · · · · Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. EN 55 022 Declaration of Conformance This is to certify that the FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall is shielded against the generation of radio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by the application of EN 55 022 Class B (CISPR 22). ii Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung. Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen. Certificate of the Manufacturer/Importer It is hereby certified that the FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating instructions. Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been granted the right to test the series for compliance with the regulations. Voluntary Control Council for Interference (VCCI) Statement This equipment is in the second category (information equipment to be used in a residential area or an adjacent area thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling. Technical Support Refer to the Support Information Card that shipped with your FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall. World Wide Web NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL) http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer or Netscape are required. iii iv Contents About This Guide Typographical Conventions ............................................................................................. xv Special Message Formats ...............................................................................................xvi Technical Support ............................................................................................................xvi Related Publications ........................................................................................................xvi Chapter 1 Introduction About the NETGEAR ProSafe Firewalls .........................................................................1-1 Key Features ..................................................................................................................1-1 A Powerful, True Firewall .........................................................................................1-2 Content Filtering .......................................................................................................1-3 Configurable Ethernet Connection ...........................................................................1-3 Protocol Support ......................................................................................................1-3 Easy Installation and Management ..........................................................................1-4 Maintenance and Support ........................................................................................1-5 Chapter 2 Setting Up the Hardware Package Contents ..........................................................................................................2-1 Local Network Hardware Requirements .........................................................................2-2 PC Requirements ..............................................................................................2-2 Access Device Requirement .............................................................................2-2 The Firewall's Front Panel ..............................................................................................2-3 The Firewall's Rear Panel ..............................................................................................2-4 Connecting the Firewall ..................................................................................................2-4 Connecting to Your Internet Access Device .............................................................2-5 Connecting to your Local Ethernet Network .............................................................2-5 Preparing your Wireless Devices .............................................................................2-6 Installing a Wireless Card in the FR114W .........................................................2-6 Connecting the Power Adapter ................................................................................2-6 Contents v Verifying Connections .....................................................................................................2-7 Chapter 3 Preparing Your Network Preparing Your Personal Computers for IP Networking .................................................3-1 Configuring Windows 95, 98, and ME for IP Networking ................................................3-2 Install or Verify Windows Networking Components ..................................................3-2 Assign TCP/IP configuration by DHCP ....................................................................3-4 Selecting Internet Access Method ............................................................................3-4 Verifying TCP/IP Properties .....................................................................................3-5 Configuring Windows NT or 2000 for IP Networking ......................................................3-5 Install or Verify Windows Networking Components ..................................................3-5 Verifying TCP/IP Properties .....................................................................................3-6 Configuring the Macintosh for IP Networking .................................................................3-6 MacOS 8.6 or 9.x ...............................................................................................3-7 MacOS X ...........................................................................................................3-7 Verifying TCP/IP Properties (Macintosh) ..................................................................3-8 Your Internet Account .....................................................................................................3-8 Login Protocols ........................................................................................................3-9 Account Information .................................................................................................3-9 Obtaining ISP Configuration Information (Windows) .......................................3-10 Obtaining ISP Configuration Information (Macintosh) ..................................... 3-11 Restarting the Network ................................................................................................. 3-11 Ready for Configuration ................................................................................................3-12 Chapter 4 Basic Configuration Accessing the Web Configuration Manager ...................................................................4-1 Configuration using the Setup Wizard ............................................................................4-4 Configuring for Dynamic IP Account ........................................................................4-5 Configuring for Fixed IP Account .............................................................................4-6 Configuring for an Account with Login .....................................................................4-7 Manual Configuration .....................................................................................................4-8 Completing the Configuration .........................................................................................4-9 Chapter 5 Security What is a Firewall ...........................................................................................................5-1 vi Contents Security Log ....................................................................................................................5-2 Examples of log messages ......................................................................................5-4 Activation and Administration ............................................................................5-4 Dropped Packets ...............................................................................................5-4 Block Sites ......................................................................................................................5-5 Rules ..............................................................................................................................5-6 Inbound Rules (Port Forwarding) .............................................................................5-8 Inbound Rule Example: A Local Public Web Server ..........................................5-9 Inbound Rule Example: Allowing Videoconference from Restricted Addresses 5-10 Considerations for Inbound Rules: ..................................................................5-10 Outbound Rules (Service Blocking) ....................................................................... 5-11 Following is an application example of outbound rules: .................................. 5-11 Outbound Rule Example: Blocking Instant Messenger ................................... 5-11 Order of Precedence for Rules ..............................................................................5-12 Default DMZ Server ...............................................................................................5-12 Respond to Ping on Internet WAN Port .................................................................5-13 Services ........................................................................................................................5-14 Schedule .......................................................................................................................5-16 Time Zone ........................................................................................................5-17 E-Mail ...........................................................................................................................5-18 Chapter 6 Wireless Wireless Settings ............................................................................................................6-2 Identification ......................................................................................................6-2 Options ..............................................................................................................6-3 Access Point ......................................................................................................6-3 Configuring WEP (Wired Equivalent Privacy) .................................................................6-4 Restricting Wireless Access by MAC Address ...............................................................6-5 Additional Notes .............................................................................................................6-6 Security ....................................................................................................................6-6 Placement and Range ..............................................................................................6-6 Chapter 7 Print Server Network Printing from Windows .....................................................................................7-1 Installing the PTP Driver ..........................................................................................7-1 Contents vii Printer Management ..........................................................................................7-3 Port Options .......................................................................................................7-3 LPD/LPR Printing from Windows .............................................................................7-4 Windows NT 4.0 Server Configuration ..............................................................7-5 Client PC Setup for LPD/LPR Printing ...............................................................7-7 Network Printing from the Macintosh ..............................................................................7-9 MacOS 8 or 9 Configuration .....................................................................................7-9 MacOS X Configuration .........................................................................................7-10 Network Printing from Linux .........................................................................................7-10 Troubleshooting the Print Server ..................................................................................7-10 Chapter 8 Maintenance System Status .................................................................................................................8-1 Attached Devices ............................................................................................................8-4 Changing the Administration Password ..........................................................................8-4 Configuration File Settings Management .......................................................................8-5 Restore and Backup the Configuration ....................................................................8-6 Erase the Configuration ...........................................................................................8-6 Router Upgrade ..............................................................................................................8-7 Diagnostics .....................................................................................................................8-8 Ping an IP Address ..................................................................................................8-8 Perform a DNS Lookup ............................................................................................8-8 Display the Routing Table ........................................................................................8-9 Reboot the Router ....................................................................................................8-9 Chapter 9 Advanced Configuration Dynamic DNS .................................................................................................................9-1 LAN IP Setup ..................................................................................................................9-3 LAN TCP/IP Setup ...................................................................................................9-3 MTU Size .................................................................................................................9-5 DHCP .......................................................................................................................9-5 Use router as DHCP server ...............................................................................9-5 Reserved IP adresses .......................................................................................9-6 Static Routes ..................................................................................................................9-6 Static Route Example ...............................................................................................9-8 viii Contents Remote Management .....................................................................................................9-9 Chapter 10 Troubleshooting Basic Functioning .........................................................................................................10-1 Power LED Not On .................................................................................................10-2 Test LED Never Turns On or Test LED Stays On ...................................................10-2 Local or Internet Port Link LEDs Not On ................................................................10-2 Troubleshooting the Web Configuration Interface ........................................................10-4 Troubleshooting the ISP Connection ............................................................................10-5 Troubleshooting a TCP/IP Network Using a Ping Utility ...............................................10-6 Testing the LAN Path to Your Firewall ....................................................................10-6 Testing the Path from Your PC to a Remote Device ..............................................10-7 Restoring the Default Configuration and Password ......................................................10-8 Using the Default Reset button ..............................................................................10-8 Problems with Date and Time .......................................................................................10-8 Appendix A Technical Specifications Appendix B Networks, Routing, and Firewall Basics Basic Router Concepts .................................................................................................. B-1 What is a Router? ................................................................................................... B-1 Routing Information Protocol ................................................................................... B-2 IP Addresses and the Internet ................................................................................. B-2 Netmask .................................................................................................................. B-4 Subnet Addressing .................................................................................................. B-5 Private IP Addresses ............................................................................................... B-7 Single IP Address Operation Using NAT ................................................................. B-8 MAC Addresses and Address Resolution Protocol ................................................. B-9 Domain Name Server .............................................................................................. B-9 IP Configuration by DHCP .................................................................................... B-10 Internet Security and Firewalls .................................................................................... B-10 What is a Firewall? ................................................................................................ B-10 Stateful Packet Inspection ......................................................................................B-11 Denial of Service Attack .........................................................................................B-11 Wireless Networking .................................................................................................... B-12 Contents ix Wireless Network Configuration ............................................................................ B-12 Ad-hoc Mode (Peer-to-Peer Workgroup) ........................................................ B-12 Infrastructure Mode ........................................................................................ B-12 Extended Service Set Identification (ESSID) ........................................................ B-13 Authentication and WEP Encryption ..................................................................... B-13 Wireless Channel Selection .................................................................................. B-14 Ethernet Cabling .......................................................................................................... B-15 Uplink Switches and Crossover Cables ................................................................ B-16 Cable Quality ......................................................................................................... B-16 Glossary Index x Contents Figure 2-1. Figure 2-2. Figure 4-1. Figure 4-2. Figure 4-3. Figure 4-4. Figure 4-5. Figure 5-1. Figure 5-2. Figure 5-3. Figure 5-4. Figure 5-5. Figure 5-6. Figure 5-7. Figure 5-8. Figure 5-9. Figure 6-1. Figure 6-2. Figure 6-3. Figure 8-1. Figure 8-2. Figure 8-3. Figure 8-4. Figure 8-5. Figure 8-6. Figure 8-7. Figure 9-1. Figure 9-2. Figure 9-3. Figure 9-4. Figure B-1. Figure B-2. Figure B-3. FR114P Front Panel ................................................................................2-3 FR114P Rear Panel .................................................................................2-4 Login window ...........................................................................................4-2 Browser-based configuration main menu ................................................4-3 Setup Wizard menu for Dynamic IP address ...........................................4-5 Setup Wizard menu for Fixed IP address ................................................4-6 Setup Wizard menu for PPPoE login accounts ........................................4-7 Logs menu ...............................................................................................5-2 Block Sites menu .....................................................................................5-5 Rules menu ..............................................................................................5-6 Rule example: A Local Public Web Server ..............................................5-9 Rule example: Videoconference from Restricted Addresses .................5-10 Rule example: Blocking Instant Messenger ........................................... 5-11 Rules table with examples .....................................................................5-12 Services menu .......................................................................................5-14 Add Custom Service menu ....................................................................5-15 Wireless Settings menu ...........................................................................6-2 Wireless WEP menu ................................................................................6-4 Wireless Access menu .............................................................................6-5 System Status screen ..............................................................................8-1 Router Statistics screen ...........................................................................8-3 Attached Devices menu ...........................................................................8-4 Set Password menu .................................................................................8-5 Settings Backup menu .............................................................................8-6 Router Upgrade menu .............................................................................8-7 Diagnostics menu ....................................................................................8-8 Dynamic DNS menu ................................................................................9-2 LAN IP Setup Menu .................................................................................9-3 Static Routes Summary Table ..................................................................9-7 Static Route Entry and Edit Menu ............................................................9-7 Three Main Address Classes .................................................................. B-3 Example of Subnetting a Class B Address ............................................. B-5 Single IP Address Operation Using NAT ................................................ B-8 xi xii Table 2-1. Table 5-1. Table 5-2. Table 8-1. Table 8-2. Table B-1. Table B-2. Table B-3. Table B-4. LED Descriptions .....................................................................................2-3 Log entry descriptions ..............................................................................5-3 Log action buttons ....................................................................................5-3 Menu 3.2 - System Status Fields .............................................................8-2 Router Statistics Fields ...........................................................................8-3 Netmask Notation Translation Table for One Octet ................................. B-6 Netmask Formats .................................................................................... B-6 802.11 Radio Frequency Channels ....................................................... B-14 UTP Ethernet cable wiring, straight-through ......................................... B-15 xiii xiv About This Guide Congratulations on your purchase of the NETGEARTM FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall. A firewall is a special type of router that incorporates features for security. The NETGEAR ProSafe Firewall is a complete security solution that protects your network from attacks and intrusions. This guide describes the features of the firewall and provides installation and configuration instructions. Typographical Conventions This guide uses the following typographical conventions: italics courier font Book titles and UNIX file, command, and directory names. Screen text, user-typed command-line entries. Menu titles and window and button names. Named keys in text are shown enclosed in square brackets. The notation [Enter] is used for the Enter key and the Return key. Two or more keys that must be pressed simultaneously are shown in text linked with a plus (+) sign. DOS file and directory names. Initial Caps [Enter] [Ctrl]+C ALL CAPS About This Guide xv Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Family Special Message Formats This guide uses the following formats to highlight special messages: Note: This format is used to highlight information of importance or special interest. Caution: This format is used to highlight information that will help you prevent equipment failure or loss of data. Warning: This format is used to highlight information about the possibility of injury or equipment damage. Danger: This format is used to alert you that there is the potential for incurring an electrical shock if you mishandle the equipment. Technical Support For help with any technical issues, contact Customer Support at 1-888-NETGEAR, or visit us on the Web at www.NETGEAR.com. The NETGEAR Web site includes an extensive knowledge base, answers to frequently asked questions, and a means for submitting technical questions online. Related Publications As you read this document, you may be directed to various RFC documents for further information. An RFC is a Request For Comment (RFC) published by the Internet Engineering Task Force (IETF), an open organization that defines the architecture and operation of the Internet. The RFC documents outline and define the standard protocols and procedures for the Internet. The documents are listed on the World Wide Web at www.ietf.org and are mirrored and indexed at many other sites worldwide. xvi About This Guide Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall For more information about address assignment, refer to the IETF documents RFC 1597, Address Allocation for Private Internets, and RFC 1466, Guidelines for Management of IP Address Space. For more information about IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). About This Guide xvii Chapter 1 Introduction This chapter describes the features of the NETGEAR FR114P, FR114W and FM114P Cable/DSL ProSafe Firewalls. About the NETGEAR ProSafe Firewalls The NETGEAR ProSafe Firewall is a complete security solution that protects your network from attacks and intrusions. Unlike simple Internet sharing routers that rely on NAT for security, the NETGEAR ProSafe Firewall uses Stateful Packet Inspection for Denial of Service (DoS) attack protection and intrusion detection. The NETGEAR ProSafe Firewall allows Internet access for up to 253 users. The ProSafe Firewall family consists of these three products: · · · FR114P Firewall with Print Server FR114W Wireless-Ready Firewall FM114P Wireless Firewall with Print Server The FR114P and FM114P firewalls include a built-in print server, allowing the sharing of a printer by all PCs on your network. The FM114P firewall includes an 802.11b-compliant wireless access point, while the FR114W firewall can be upgraded to an access point by adding a NETGEAR 802.11b wireless adapter card. Key Features The NETGEAR ProSafe Firewalls offer the following features. Introduction 1-1 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall A Powerful, True Firewall Unlike simple Internet sharing NAT routers, the NETGEAR ProSafe Firewall is a true firewall, using stateful packet inspection to defend against hacker attacks. Its firewall features include: · Denial of Service (DoS) protection Automatically detects and thwarts Denial of Service (DoS) attacks such as Ping of Death, SYN Flood, LAND Attack and IP Spoofing. Blocks unwanted traffic from the Internet to your LAN. Blocks access from your LAN to Internet locations or services that you specify as off-limits. Logs security incidents The NETGEAR ProSafe Firewall will log security events such as blocked incoming traffic, port scans, attacks, and administrator logins. You can configure the firewall to email the log to you at specified intervals. You can also configure the firewall to send immediate alert messages to your email address or email pager whenever a significant event occurs. · · · Wireless Access Point The FM114P firewall includes an 802.11b-compliant wireless access point, while the FR114W firewall can be upgraded to an access point by adding a NETGEAR 802.11b wireless adapter card. With an integrated wireless access point, the firewall provides continuous, high-speed 11 Mbps access between your wireless and Ethernet devices. The access point provides: · · · · 802.11b Standards-based wireless networking at up to 11 Mbps 64-bit and 128-bit WEP encryption security WEP keys can be generated manually or by passphrase Wireless access can be restricted by MAC address Integrated Print Server The FR114P and FM114P NETGEAR ProSafe Firewalls include a built-in print server. A print server eliminates the bottleneck of a dedicated always-on PC print server and supports multiple print jobs simultaneously. · Protocol Support PTP (Peer-to-Peer) over TCP/IP for Windows LPR printing for Windows, Macintosh, or Linux 1-2 Introduction Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall · High-speed Parallel Port Connection 36 pin Centronics, bi-directional IEEE 1284 compliant (supports Nibble mode) with up to 1.5Mbps transfer rate Content Filtering With its content filtering feature, the NETGEAR ProSafe Firewall prevents objectionable content from reaching your PCs. The firewall allows you to control access to Internet content by screening for keywords within Web addresses. You can configure the firewall to log and report attempts to access objectional Internet sites. Configurable Ethernet Connection With its internal 4-port 10/100 switch, the NETGEAR ProSafe Firewall can connect to either a 10 Mbps standard Ethernet network or a 100 Mbps Fast Ethernet network. The local LAN interface is autosensing and is capable of full-duplex or half-duplex operation. An uplink switch is provided for cascading to an external Ethernet hub or switch. Protocol Support The NETGEAR ProSafe Firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). For further information about TCP/IP, refer to Appendix B, "Networks, Routing, and Firewall Basics." · IP Address Sharing by NAT The NETGEAR ProSafe Firewall allows several networked PCs to share an Internet account using only a single IP address, which may be statically or dynamically assigned by your Internet service provider (ISP). This technique, known as Network Address Translation (NAT), allows the use of an inexpensive single-user ISP account. Automatic Configuration of Attached PCs by DHCP The NETGEAR ProSafe Firewall dynamically assigns network configuration information, including IP, gateway, and domain name server (DNS) addresses, to attached PCs on the LAN using the Dynamic Host Configuration Protocol (DHCP). This feature greatly simplifies configuration of PCs on your local network. · Introduction 1-3 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall · DNS Proxy When DHCP is enabled and no DNS addresses are specified, the firewall provides its own address as a DNS server to the attached PCs. The firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN. PPP over Ethernet (PPPoE) PPP over Ethernet is a protocol for connecting remote hosts to the Internet over a DSL connection by simulating a dial-up connection. This feature eliminates the need to run a login program such as EnterNet or WinPOET on your PC. Dynamic DNS Dynamic DNS services allow remote users to find your network using a domain name when your IP address is not permanently assigned. The firewall contains a client that can connect to many popular Dynamic DNS services to register your dynamic IP address. · · Easy Installation and Management You can install, configure, and operate the NETGEAR ProSafe Firewall within minutes after connecting it to the network. The following features simplify installation and management tasks: · Browser-based management Browser-based configuration allows you to easily configure your firewall from almost any type of personal computer, such as Windows, Macintosh, or Linux. A user-friendly Setup Wizard is provided and online help documentation is built into the browser-based Web Management Interface. Smart Wizard The firewall automatically senses the type of Internet connection, asking you only for the information required for your type of ISP account. Remote management The firewall allows you to login to the Web Management Interface from a remote location on the Internet. For security, you can limit remote management access to a specified remote IP address or range of addresses, and you can choose a nonstandard port number. Diagnostic functions The firewall incorporates built-in diagnostic functions such as Ping, DNS lookup, and remote reboot. Visual monitoring The firewall's front panel LEDs provide an easy way to monitor its status and activity. · · · · 1-4 Introduction Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Maintenance and Support NETGEAR offers the following features to help you maximize your use of the firewall: · · Flash EPROM for firmware upgrade Technical support seven days a week, twenty-four hours a day Introduction 1-5 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall 1-6 Introduction Chapter 2 Setting Up the Hardware This chapter describes the hardware installation of the FR114P, FR114W and FM114P Cable/DSL ProSafe Firewalls. Package Contents The product package should contain the following items: · · · · FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall AC power adapter Category 5 (CAT5) Ethernet cable Resource CD, including: -- This manual -- Installer for Print server driver (applies to FR114P or FM114P only) -- Application Notes, Tools, and other helpful information · · · NETGEAR Cable/DSL ProSafe Firewall Installation Guide (for each model) Warranty and registration card Support information card If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the product for repair. Setting Up the Hardware 2-1 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Local Network Hardware Requirements The NETGEAR ProSafe Firewall is intended for use in a network of personal computers (PCs) that are interconnected by twisted-pair Ethernet cables. PC Requirements To install and run the NETGEAR ProSafe Firewall over your network of PCs, each PC must have an installed Ethernet Network Interface Card (NIC) and an Ethernet cable. If the PC will connect to your network at 100 Mbps, you must use a Category 5 (CAT5) cable such as the cable provided with your firewall. Any PC that will connect to the firewall (FR114W and FM114P only) by a wireless connection must have an 802.11b-compliant wireless adapter card. Access Device Requirement The shared broadband access device (cable modem or DSL modem) must provide a standard 10 Mbps (10BASE-T) Ethernet interface. 2-2 Setting Up the Hardware Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall The Firewall's Front Panel The front panel of the NETGEAR ProSafe Firewall contains status LEDs. The FR114P front panel is shown in Figure 2-1 Figure 2-1. FR114P Front Panel You can use some of the LEDs to verify connections. Table 2-1 lists and describes each LED on the front panel of the firewall. These LEDs are green when lit, except for the TEST LED, which is amber. Table 2-1. Label POWER TEST PRINTER ACT ALERT INTERNET 100 (100 Mbps) LINK/ACT (Link/Activity) LOCAL 100 (100 Mbps) LINK/ACT (Link/Activity) WLAN On Off On Blinking On The Local port is operating at 100 Mbps. The Local port is operating at 10 Mbps. The Local port has detected a link with an attached device. Data is being transmitted or received by the Local port. The Wireless (WLAN) port is operating (FR114W and FM114P) On Off On Blinking The Internet (WAN) port is operating at 100 Mbps. The Internet (WAN) port is operating at 10 Mbps. The Internet port has detected a link with an attached device. Data is being transmitted or received by the Internet port. Blinking On (Amber) LED Descriptions Activity On On Off Description Power is supplied to the firewall. The system is initializing. The system is ready and running. (These LEDs present only on FR114P and FM114P) Data is being transmitted or received by the Printer port. The connected printer is offline, is out of paper, or has a paper jam. Setting Up the Hardware 2-3 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall The Firewall's Rear Panel The rear panel of the NETGEAR ProSafe Firewall contains port connections. The FR114P Firewall rear panel is shown in Figure 2-2 Figure 2-2. FR114P Rear Panel The rear panel contains the following features: · · · · · · · · AC power adapter outlet Internet (WAN) Ethernet port for connecting the firewall to a cable or DSL modem Four Local (LAN) Ethernet ports for connecting the firewall to the local PCs Uplink switch for converting LAN port 4 to uplink (crossover) wiring Factory Default Reset pushbutton Parallel Printer port (FR114P and FM114P only) Wireless adapter slot (FR114W only) Wireless antenna (FM114P only) Connecting the Firewall Before using your firewall, you need to do the following: · Connect your cable or DSL modem to the Internet port of the firewall (described next. · Connect your local Ethernet network to the Local port(s) of the firewall (see page 2-5). · Prepare your wireless devices. · Install your wireless adapter card (FR114W only) · Connect the power adapter (see page 2-6) Note: The Resource CD included with your firewall contains an animated Connection Guide to help you through this procedure. 2-4 Setting Up the Hardware Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Connecting to Your Internet Access Device Your cable or DSL modem must provide a standard 10BASE-T or 100BASE-Tx Ethernet connection (not USB) for connection to your PC or network. The FR114P Firewall does not include a cable for this connection. Instead, use the Ethernet cable provided with your access device or any other standard Ethernet cable. Follow these steps: 1. Locate the Ethernet cable currently going from your DSL or cable modem to the computer that you use to access the Internet. Note: You must use the existing cable to connect the modem to your firewall, not to connect your PCs to your firewall. The Ethernet cable supplied by your ISP for connecting to your cable or DSL modem may be an Ethernet crossover cable rather than a normal straight-through cable. 2. 3. Remove this cable from the computer and insert that end into the Internet port on the firewall. Turn the cable or DSL modem off for ten seconds, then on again. Connecting to your Local Ethernet Network Your local area network (LAN) will attach to the firewall's Local ports shown in Figure 2-2. The Local ports are capable of operation at either 10 Mbps (10BASE-T) or 100 Mbps (100BASE-Tx), depending on the Ethernet interface of the attached PC, hub, or switch. For any connection which will operate at 100 Mbps, you must use a Category 5 (CAT5) rated Ethernet cable, such as the cable included with the firewall. The FR114P Firewall incorporates a four-port switch for connection to your local network. Ports 1 through 3 are permanently configured for MDI-X wiring, for connection to a PC. Port 4 can be set to MDI (Uplink) or MDI-X (Normal) by using the Normal/Uplink pushbutton switch. Connect up to four PCs directly to any of the four Local ports of the firewall using standard Ethernet cables such as the one included with your firewall. If a PC is connected to port 4, be sure that the Normal/Uplink pushbutton switch is in the Normal position. If your local network consists of more than four hosts, you will need to connect your firewall to another hub or switch. In this case, connect port 4 of your firewall to any port of an Ethernet hub or switch, and set the Normal/Uplink pushbutton switch to the Uplink position. Setting Up the Hardware 2-5 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Preparing your Wireless Devices For the FM114P Wireless Firewall with Print Server, rotate the antenna to a vertical position and tighten the base. Installing a Wireless Card in the FR114W The FR114W Wireless-Ready Firewall can be upgraded to wireless operation by purchasing and installing a NETGEAR Model MA401 802.11b Wireless PC Card. The FR114W will function normally without a wireless adapter card, but will not have wireless connectivity. To install the MA401 Wireless PC Card in your FR114W, follow these steps: 1. 2. 3. 4. Locate the wireless adapter card slot on the rear panel. Remove the rubber dust cover from the slot. Slide the MA401 card into the slot with the card's front label and LED facing up. Be sure that the MA401 card is securely seated into the internal connector. The blue plastic end cap of the MA401card should be outside of the FR114W's case. Initial Configuration of Your Wireless PCs Detailed instructions on configuring your wireless devices for TCP/IP networking are provided in the next chapter. However, if you already have a functioning wireless network and you wish to use a wireless PC to initially configure the firewall, you will need to change the settings of that PC to match the default settings of the firewall: · · · The SSID should be Wireless (note the capitalization). WEP encryption is disabled. Your IP address must be in the range of 192.168.0.2 to 192.168.0.254, with a netmask of 255.255.255.0. Connecting the Power Adapter To connect the firewall to the power adapter: 1. 2. 3. Plug the connector of the power adapter into the power adapter outlet on the rear panel of the firewall. Plug the other end of the adapter into a standard wall outlet. Verify that the Power LED on the firewall is lit. 2-6 Setting Up the Hardware Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Verifying Connections After applying power to the firewall, complete the following steps to verify the connections to it: 1. 2. 3. When power is first applied, verify that the POWER LED is on. Verify that the TEST LED turns on within a few seconds. After approximately 10 seconds, verify that: a. b. c. The TEST LED has turned off. The LOCAL LINK/ACT LEDs are lit for any local ports that are connected. The INTERNET LINK/ACT LED is lit. If a LINK/ACT LED is lit, a link has been established to the connected device. 4. If any port is connected to a 100 Mbps device, verify that the 100 LED for that port is lit. The firewall is now properly attached to the network. Next, you need to prepare your network to access the Internet through the firewall. See the following chapter. Setting Up the Hardware 2-7 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall 2-8 Setting Up the Hardware Chapter 3 Preparing Your Network This chapter describes how to prepare your PC network to connect to the Internet through the FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall and how to order broadband Internet service from an Internet service provider (ISP). . Note: If an ISP technician configured your PC during the installation of a broadband modem, or if you configured it using instructions provided by your ISP, you may need to copy the current configuration information for use in the configuration of your firewall. Write down this information before reconfiguring your PCs. Refer to "Obtaining ISP Configuration Information (Windows)" on page 3-10 or "Obtaining ISP Configuration Information (Macintosh)" on page 3-11 for further information. Preparing Your Personal Computers for IP Networking Personal Computers access the Internet using a protocol called TCP/IP (Transmission Control Protocol/Internet Protocol). Each PC on your network must have TCP/IP installed and selected as its networking protocol. If a Network Interface Card (NIC) is already installed in your PC, then TCP/IP is probably already installed as well. Note: In this chapter, we use the term "PC" to refer to personal computers in general, and not necessarily Windows computers. Most PC operating systems include the software components you need for networking with TCP/ IP: · · Windows® 95 or later includes the software components for establishing a TCP/IP network. Windows 3.1 does not include a TCP/IP component. You need to purchase a third-party TCP/ IP application package such as NetManage Chameleon. Preparing Your Network 3-1 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall · · Macintosh Operating System 7 or later includes the software components for establishing a TCP/IP network. All versions of UNIX or Linux include TCP/IP components. Follow the instructions provided with your operating system or networking software to install TCP/IP on your computer.. In your IP network, each PC and the firewall must be assigned a unique IP addresses. Each PC must also have certain other IP configuration information such as a subnet mask (netmask), a domain name server (DNS) address, and a default gateway address. In most cases, you should install TCP/IP so that the PC obtains its specific network configuration information automatically from a DHCP server during bootup. For a detailed explanation of the meaning and purpose of these configuration items, refer to "Appendix B, "Networks, Routing, and Firewall Basics." The NETGEAR ProSafe Firewall is shipped preconfigured as a DHCP server. The firewall assigns the following TCP/IP configuration information automatically when the PCs are rebooted: · · · PC or workstation IP addresses--192.168.0.2 through 192.168.0.254 Subnet mask--255.255.255.0 Gateway address (the firewall)--192.168.0.1 These addresses are part of the IETF-designated private address range for use in private networks. Configuring Windows 95, 98, and ME for IP Networking As part of the PC preparation process, you need to manually install and configure TCP/IP on each networked PC. Before starting, locate your Windows CD; you may need to insert it during the TCP/IP installation process. Install or Verify Windows Networking Components To install or verify the necessary components for IP networking: 1. 2. On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel. Double-click the Network icon. The Network window opens, which displays a list of installed components: 3-2 Preparing Your Network Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall You must have an Ethernet adapter, the TCP/IP protocol, and Client for Microsoft Networks. Note: It is not necessary to remove any other network components shown in the Network window in order to install the adapter, TCP/IP, or Client for Microsoft Networks. If you need the adapter: a. b. c. Click the Add button. Select Adapter, and then click Add. Select the manufacturer and model of your Ethernet adapter, and then click OK. If you need TCP/IP: a. b. c. Click the Add button. Select Protocol, and then click Add. Select Microsoft. Preparing Your Network 3-3 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall d. Select TCP/IP, and then click OK. If you need Client for Microsoft Networks: a. b. c. d. 3. Click the Add button. Select Client, and then click Add. Select Microsoft. Select Client for Microsoft Networks, and then click OK. Restart your PC for the changes to take effect. Assign TCP/IP configuration by DHCP After the TCP/IP protocol components are installed, each PC must be assigned specific information about itself and resources that are available on its network. The simplest way to configure this information is to allow the PC to obtain the information from the internal DHCP server of the NETGEAR ProSafe Firewall. To use DHCP with the recommended default addresses, follow these steps: 1. 2. 3. 4. 5. 6. 7. 8. Connect all PCs to the firewall, then restart the firewall and allow it to boot. On each attached PC, open the Network control panel (refer to the previous section) and select the Configuration tab. From the components list, select TCP/IP->(your Ethernet adapter) and click Properties. In the IP Address tab, select "Obtain an IP address automatically". Select the Gateway tab. If any gateways are shown, remove them. Click OK. Restart the PC. Repeat steps 2 through 8 for each PC on your network. Selecting Internet Access Method 1. 2. On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel. Double-click the Internet Options icon. 3-4 Preparing Your Network Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall 3. 4. 5. 6. Select "I want to set up my Internet connection manually" or "I want to connect through a Local Area Network" and click Next. Select "I want to connect through a Local Area Network" and click Next. Uncheck all boxes in the LAN Internet Configuration screen and click Next. Proceed to the end of the Wizard. Verifying TCP/IP Properties After your PC is configured and has rebooted, you can check the TCP/IP configuration using the utility winipcfg.exe: 1. 2. On the Windows taskbar, click the Start button, and then click Run. Type winipcfg, and then click OK. The IP Configuration window opens, which lists (among other things), your IP address, subnet mask, and default gateway. 3. From the drop-down box, select your Ethernet adapter. The window is updated to show your settings, which should match the values below if you are using the default TCP/IP settings that NETGEAR recommends: · · · The IP address is between 192.168.0.2 and 192.168.0.254 The subnet mask is 255.255.255.0 The default gateway is 192.168.0.1 Configuring Windows NT or 2000 for IP Networking As part of the PC preparation process, you need to manually install and configure TCP/IP on each networked PC. Before starting, locate your Windows CD; you may need to insert it during the TCP/IP installation process. Install or Verify Windows Networking Components To install or verify the necessary components for IP networking: 1. 2. On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel. Double-click the Network and Dialup Connections icon. 3-5 Preparing Your Network Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall 3. 4. 5. 6. 7. 8. If an Ethernet adapter is present in your PC, you should see an entry for Local Area Connection. Double-click that entry. Select Properties. Verify that `Client for Microsoft Networks' and `Internet Protocol (TCP/IP)' are present. If not, select Install and add them. Select `Internet Protocol (TCP/IP)', click Properties, and verify that "Obtain an IP address automatically is selected. Click OK and close all Network and Dialup Connections windows. Make sure your PC is connected to the firewall, then reboot your PC. Verifying TCP/IP Properties To check your PC's TCP/IP configuration: 1. On the Windows taskbar, click the Start button, and then click Run. The Run window opens. 2. Type cmd and then click OK. A command window opens 3. Type ipconfig /all Your IP Configuration information will be listed, and should match the values below if you are using the default TCP/IP settings that NETGEAR recommends: · · · The IP address is between 192.168.0.2 and 192.168.0.254 The subnet mask is 255.255.255.0 The default gateway is 192.168.0.1 4. Type exit Configuring the Macintosh for IP Networking Beginning with Macintosh Operating System 7, TCP/IP is already installed on the Macintosh. On each networked Macintosh, you will need to configure TCP/IP to use DHCP. 3-6 Preparing Your Network Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall MacOS 8.6 or 9.x 1. From the Apple menu, select Control Panels, then TCP/IP. The TCP/IP Control Panel opens: 2. 3. From the "Connect via" box, select your Macintosh's Ethernet interface. From the "Configure" box, select Using DHCP Server. You can leave the DHCP Client ID box empty. 4. 5. Close the TCP/IP Control Panel. Repeat this for each Macintosh on your network. MacOS X 1. 2. 3. 4. From the Apple menu, choose System Preferences, then Network. If not already selected, select Built-in Ethernet in the Configure list. If not already selected, Selct Using DHCP in the TCP/IP tab. Click Save. Preparing Your Network 3-7 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Verifying TCP/IP Properties (Macintosh) After your Macintosh is configured and has rebooted, you can check the TCP/IP configuration by returning to the TCP/IP Control Panel. From the Apple menu, select Control Panels, then TCP/IP. The panel is updated to show your settings, which should match the values below if you are using the default TCP/IP settings that NETGEAR recommends: · · · The IP Address is between 192.168.0.2 and 192.168.0.254 The Subnet mask is 255.255.255.0 The Router address is 192.168.0.1 If you do not see these values, you may need to restart your Macintosh or you may need to switch the "Configure" setting to a different option, then back again to "Using DHCP Server". Your Internet Account For access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using an external broadband access device such as a cable modem or DSL modem. This modem must be a separate physical box (not a card) and must provide an Ethernet port intended for connection to a Network Interface Card (NIC) in a PC. Your firewall does not support a USB-connected broadband modem. 3-8 Preparing Your Network Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall For a single-user Internet account, your ISP supplies TCP/IP configuration information for one PC. With a typical account, much of the configuration information is dynamically assigned when your PC is first booted up while connected to the ISP, and you will not need to know that dynamic information. In order to share the Internet connection among several computers, your firewall takes the place of the single PC, and you need to configure it with the TCP/IP information that the single PC would normally use. When the firewall's Internet port is connected to the broadband modem, the firewall appears to be a single PC to the ISP. The firewall then allows the PCs on the local network to masquerade as the single PC to access the Internet through the broadband modem. The method used by the firewall to accomplish this is called Network Address Translation (NAT) or IP masquerading. Login Protocols Some ISPs require a special login protocol, in which you must enter a login name and password in order to access the Internet. If you normally log in to your Internet account by running a program such as WinPOET or EnterNet, then your account uses PPP over Ethernet (PPPoE). When you configure your firewall, you will need to enter your login name and password in the firewall's configuration menus. After your network and firewall are configured, the firewall will perform the login task when needed, and you will no longer need to run the login program from your PC. It is not necessary to uninstall the login program. Account Information Unless these items are dynamically assigned by the ISP, your ISP should give you the following basic information for your account: · · · · An IP address and subnet mask A gateway IP address, which is the address of the ISP's router One or more domain name server (DNS) IP addresses Host name and domain suffix For example, your account's full server names may look like this: mail.xxx.yyy.com In this example, the domain suffix is xxx.yyy.com. Preparing Your Network 3-9 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall If any of these items are dynamically supplied by the ISP, your firewall automatically acquires them. If an ISP technician configured your PC during the installation of the broadband modem, or if you configured it using instructions provided by your ISP, you need to copy configuration information from your PC's Network TCP/IP Properties window (or Macintosh TCP/IP Control Panel) before reconfiguring your PC for use with the firewall. These procedures are described next. Obtaining ISP Configuration Information (Windows) As mentioned above, you may need to collect configuration information from your PC so that you can use this information when you configure the NETGEAR ProSafe Firewall. Following this procedure is only necessary when your ISP does not dynamically supply the account information. To get the information you need to configure the firewall for Internet access: 1. 2. On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel. Double-click the Network icon. The Network window opens, which displays a list of installed components. 3. Select TCP/IP, and then click Properties. The TCP/IP Properties dialog box opens. 4. Select the IP Address tab. If an IP address and subnet mask are shown, write down the information. If an address is present, your account uses a fixed (static) IP address. If no address is present, your account uses a dynamically-assigned IP address. Click "Obtain an IP address automatically". 5. Select the Gateway tab. If an IP address appears under Installed Gateways, write down the address. This is the ISP's gateway address. Select the address and then click Remove to remove the gateway address. 6. Select the DNS Configuration tab. If any DNS server addresses are shown, write down the addresses. If any information appears in the Host or Domain information box, write it down. Click Disable DNS. 7. Click OK to save your changes and close the TCP/IP Properties dialog box. You are returned to the Network window. 8. 9. Click OK. Reboot your PC at the prompt. You may also be prompted to insert your Windows CD. 3-10 Preparing Your Network Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Obtaining ISP Configuration Information (Macintosh) As mentioned above, you may need to collect configuration information from your Macintosh so that you can use this information when you configure the NETGEAR ProSafe Firewall. Following this procedure is only necessary when your ISP does not dynamically supply the account information. To get the information you need to configure the firewall for Internet access: 1. From the Apple menu, select Control Panels, then TCP/IP. The TCP/IP Control Panel opens, which displays a list of configuration settings. If the "Configure" setting is "Using DHCP Server", your account uses a dynamically-assigned IP address. In this case, close the Control Panel and skip the rest of this section. 2. 3. 4. 5. 6. 7. If an IP address and subnet mask are shown, write down the information. If an IP address appears under Router address, write down the address. This is the ISP's gateway address. If any Name Server addresses are shown, write down the addresses. These are your ISP's DNS addresses. If any information appears in the Search domains information box, write it down. Change the "Configure" setting to "Using DHCP Server". Close the TCP/IP Control Panel. Restarting the Network Once you've set up your computers to work with the firewall, you must reset the network for the devices to be able to communicate correctly. 1. 2. 3. Turn off the DSL or cable modem, wait 15 seconds, and then turn it on again Turn off the firewall, and then turn it on again and wait until the Test light turns off. Restart any computer that is connected to the firewall. Note: If the modem doesn't have an on/off switch, either pull the modem's power adapter out of the wall socket or power down the power strip. Preparing Your Network 3-11 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Ready for Configuration After configuring all of your PCs for TCP/IP networking and connecting them to the local network of your NETGEAR ProSafe Firewall, you are ready to access and configure the firewall. Proceed to the next chapter. 3-12 Preparing Your Network Chapter 4 Basic Configuration This chapter describes how to perform the basic configuration of your FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall using the Setup Wizard, which walks you through the configuration process for your Internet connection. Accessing the Web Configuration Manager In order to use the browser-based Web Configuration Manager, your PC must have a web browser program installed such as Microsoft Internet Explorer or Netscape Navigator. Because the Configuration Manager uses Java, your Web browser must be Java-enabled and support HTTP uploads. NETGEAR recommends using Microsoft Internet Explorer 5.0 or Netscape Navigator 4.7 or above. Free browser programs are readily available for Windows, Macintosh, or UNIX/ Linux. To configure for Internet access using your browser: 1. 2. Connect your PC and firewall as described in the previous chapter. Make sure your PC has been rebooted since connecting with the firewall. Launch your web browser. Note: If you normally use a login program (such as Enternet or WinPOET) to access the Internet, do not launch that program. 3. 4. Click your browser's Stop button. In the Address (or Location) box of your browser, type http://192.168.0.1 and press ENTER. Basic Configuration 4-1 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall A login window opens as shown in Figure 4-1 below:. Figure 4-1. Login window This screen may have a different appearance in other browsers. 5. Type admin in the User Name box, password in the Password box, and then click OK. (If your firewall password was previously changed, enter the current password.) If your firewall has not yet been configured, the Setup Wizard should launch automatically. Otherwise, the main menu of the Web Configuration Manager will appear as shown in Figure 4-2 below: 4-2 Basic Configuration Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Figure 4-2. Browser-based configuration main menu You can manually configure your firewall using this menu as described in "Manual Configuration" on page 4-8, or you can allow the Setup Wizard to determine your configuration as described in the following chapter. Basic Configuration 4-3 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Configuration using the Setup Wizard The Web Configuration Manager contains a Setup Wizard that can automatically determine your network connection type. If the Setup Wizard does not launch automatically, click on the Setup Wizard heading in the upper left of the opening screen, shown in Figure 4-2. When the Wizard launches, allow the firewall to automatically determine your connection type by selecting Yes in the menu below and clicking Next: The Setup Wizard will now check for a connection on the Internet port. If the Setup Wizard determines that there is no connection to the Internet port, you will be prompted to check the physical connection between your firewall and cable or DSL modem. When the connection is properly made, the firewall's Internet LED should be on. Next, the Setup Wizard will attempt to determine which of the following connection types your Internet service account uses: · · · Dynamic IP assignment Fixed IP address assignment A login protocol such as PPPoE The Setup Wizard will report which connection type it has discovered, and it will then use the appropriate configuration menu for that connection type. 4-4 Basic Configuration Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall Configuring for Dynamic IP Account If the Setup Wizard determines that your Internet service account uses Dynamic IP assignment, you will be directed to the menu shown in Figure 4-3 below: Figure 4-3. 1. Setup Wizard menu for Dynamic IP address Enter your Account Name (may also be called Host Name) and Domain Name. These parameters may be necessary to access your ISP's services such as mail or news servers. If you leave the Domain Name field blank, the firewall will attempt to learn the domain automatically from the ISP. If this is not successful, you may need to enter it manually. Domain Name Server (DNS) Address: If you know that your ISP does not automatically transmit DNS addresses to the firewall during login, select "Use these DNS servers" and enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. A DNS server is a host on the Internet that translates Internet names (such as www addresses) to numeric IP addresses. Typically your ISP transfers the IP addresses of one or two DNS servers to your firewall during login. If the ISP does not transfer an address, you must obtain it from the ISP and enter it manually here. If you enter an address here, you should reboot your PCs after configuring the firewall. 2. Basic Configuration 4-5 Reference Manual for the Model FR114P, FR114W and FM114P Cable/DSL ProSafe Firewall 3. Router's MAC Address: This section determines the Ethernet MAC address that will be used by the firewall on the Internet port. If your ISP allows access by only one specific PC's Ethernet MAC address, select "Use this MAC address". The firewall will then capture and use the MAC address of the PC that you are now using. You must be using the one PC that is allowed by the ISP. Some ISPs will register the Ethernet MAC address of the network interface card in your PC when your account is first opened. They will then only accept traffic from the MAC address of that PC. This feature allows your firewall to masquerade as that PC by using its MAC address. 4. Click on Apply, then proceed to "Completing the Configuration" on page 4-9. Configuring for Fixed IP Account If the Setup Wizard determines that your Internet service account uses Fixed IP assignment, you will be directed to the menu shown in Figure 4-4 below: Figure 4-4. 1. 2. Setup Wizard menu for Fixed IP address Enter your assigned IP Address, Subnet Mask, and the IP Address of your ISP's gateway router. This information should have been provided to you by your ISP. Domain Name Server (DNS) Address: If you know that your ISP does not automatically transmit DNS addresses to the firewall during login, select "Use these DNS servers" and enter the IP address of your ISP's Primary DNS Server. If a Secondary DNS Server address is available, enter it also. 4-6 Basic Configuration