Reference Manual For The Model FR114P, FR114W And FM114P .

Reference Manual for theModel FR114P, FR114Wand FM114P Cable/DSLProSafe Firewall FamilyNETGEAR, Inc.4500 Great America ParkwaySanta Clara, CA 95054 USAPhone 1-888-NETGEARSM-FM114PNA-0May 2002

2002 by NETGEAR, Inc. All rights reserved.TrademarksNETGEAR and Auto Uplink are trademarks or registered trademarks of Netgear, Inc.Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.Other brand and product names are registered trademarks or trademarks of their respective holders.Statement of ConditionsIn the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right tomake changes to the products described in this document without notice.NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuitlayout(s) described herein.Federal Communications Commission (FCC) Compliance Notice: Radio Frequency NoticeThis equipment has been tested and found to comply with the limits for a Class B digital device, pursuant topart 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in aresidential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed andused in accordance with the instructions, may cause harmful interference to radio communications. However, there is noguarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference toradio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to tryto correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help.EN 55 022 Declaration of ConformanceThis is to certify that the FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall is shielded against the generation ofradio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity isdeclared by the application of EN 55 022 Class B (CISPR 22).ii

Bestätigung des Herstellers/ImporteursEs wird hiermit bestätigt, daß das FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall gemäß der imBMPT-AmtsblVfg 243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreibeneiniger Geräte (z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte dieAnmerkungen in der Betriebsanleitung.Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Marktgebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.Certificate of the Manufacturer/ImporterIt is hereby certified that the FR114P, FR114W or FM114P Cable/DSL ProSafe Firewall has been suppressedin accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of someequipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certainrestrictions. Please refer to the notes in the operating instructions.Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the marketand has been granted the right to test the series for compliance with the regulations.Voluntary Control Council for Interference (VCCI) StatementThis equipment is in the second category (information equipment to be used in a residential area or an adjacent areathereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data ProcessingEquipment and Electronic Office Machines aimed at preventing radio interference in such residential areas.When used near a radio or TV receiver, it may become the cause of radio interference.Read instructions for correct handling.Technical SupportRefer to the Support Information Card that shipped with your FR114P, FR114W or FM114P Cable/DSL ProSafeFirewall.World Wide WebNETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL)http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Exploreror Netscape are required.iii

iv

ContentsAbout This GuideTypographical Conventions . xvSpecial Message Formats .xviTechnical Support .xviRelated Publications .xviChapter 1IntroductionAbout the NETGEAR ProSafe Firewalls .1-1Key Features .1-1A Powerful, True Firewall .1-2Content Filtering .1-3Configurable Ethernet Connection .1-3Protocol Support .1-3Easy Installation and Management .1-4Maintenance and Support .1-5Chapter 2Setting Up the HardwarePackage Contents .2-1Local Network Hardware Requirements .2-2PC Requirements .2-2Access Device Requirement .2-2The Firewall’s Front Panel .2-3The Firewall’s Rear Panel .2-4Connecting the Firewall .2-4Connecting to Your Internet Access Device .2-5Connecting to your Local Ethernet Network .2-5Preparing your Wireless Devices .2-6Installing a Wireless Card in the FR114W .2-6Connecting the Power Adapter .2-6Contentsv

Verifying Connections .2-7Chapter 3Preparing Your NetworkPreparing Your Personal Computers for IP Networking .3-1Configuring Windows 95, 98, and ME for IP Networking .3-2Install or Verify Windows Networking Components .3-2Assign TCP/IP configuration by DHCP .3-4Selecting Internet Access Method .3-4Verifying TCP/IP Properties .3-5Configuring Windows NT or 2000 for IP Networking .3-5Install or Verify Windows Networking Components .3-5Verifying TCP/IP Properties .3-6Configuring the Macintosh for IP Networking .3-6MacOS 8.6 or 9.x .3-7MacOS X .3-7Verifying TCP/IP Properties (Macintosh) .3-8Your Internet Account .3-8Login Protocols .3-9Account Information .3-9Obtaining ISP Configuration Information (Windows) .3-10Obtaining ISP Configuration Information (Macintosh) . 3-11Restarting the Network . 3-11Ready for Configuration .3-12Chapter 4Basic ConfigurationAccessing the Web Configuration Manager .4-1Configuration using the Setup Wizard .4-4Configuring for Dynamic IP Account .4-5Configuring for Fixed IP Account .4-6Configuring for an Account with Login .4-7Manual Configuration .4-8Completing the Configuration .4-9Chapter 5SecurityWhat is a Firewall .5-1viContents

Security Log .5-2Examples of log messages .5-4Activation and Administration .5-4Dropped Packets .5-4Block Sites .5-5Rules .5-6Inbound Rules (Port Forwarding) .5-8Inbound Rule Example: A Local Public Web Server .5-9Inbound Rule Example: Allowing Videoconference from Restricted Addresses 5-10Considerations for Inbound Rules: .5-10Outbound Rules (Service Blocking) . 5-11Following is an application example of outbound rules: . 5-11Outbound Rule Example: Blocking Instant Messenger . 5-11Order of Precedence for Rules .5-12Default DMZ Server .5-12Respond to Ping on Internet WAN Port .5-13Services .5-14Schedule .5-16Time Zone .5-17E-Mail .5-18Chapter 6WirelessWireless Settings .6-2Identification .6-2Options .6-3Access Point .6-3Configuring WEP (Wired Equivalent Privacy) .6-4Restricting Wireless Access by MAC Address .6-5Additional Notes .6-6Security .6-6Placement and Range .6-6Chapter 7Print ServerNetwork Printing from Windows .7-1Installing the PTP Driver .7-1Contentsvii

Printer Management .7-3Port Options .7-3LPD/LPR Printing from Windows .7-4Windows NT 4.0 Server Configuration .7-5Client PC Setup for LPD/LPR Printing .7-7Network Printing from the Macintosh .7-9MacOS 8 or 9 Configuration .7-9MacOS X Configuration .7-10Network Printing from Linux .7-10Troubleshooting the Print Server .7-10Chapter 8MaintenanceSystem Status .8-1Attached Devices .8-4Changing the Administration Password .8-4Configuration File Settings Management .8-5Restore and Backup the Configuration .8-6Erase the Configuration .8-6Router Upgrade .8-7Diagnostics .8-8Ping an IP Address .8-8Perform a DNS Lookup .8-8Display the Routing Table .8-9Reboot the Router .8-9Chapter 9Advanced ConfigurationDynamic DNS .9-1LAN IP Setup .9-3LAN TCP/IP Setup .9-3MTU Size .9-5DHCP .9-5Use router as DHCP server .9-5Reserved IP adresses .9-6Static Routes .9-6Static Route Example .9-8viiiContents

Remote Management .9-9Chapter 10TroubleshootingBasic Functioning .10-1Power LED Not On .10-2Test LED Never Turns On or Test LED Stays On .10-2Local or Internet Port Link LEDs Not On .10-2Troubleshooting the Web Configuration Interface .10-4Troubleshooting the ISP Connection .10-5Troubleshooting a TCP/IP Network Using a Ping Utility .10-6Testing the LAN Path to Your Firewall .10-6Testing the Path from Your PC to a Remote Device .10-7Restoring the Default Configuration and Password .10-8Using the Default Reset button .10-8Problems with Date and Time .10-8Appendix ATechnical SpecificationsAppendix BNetworks, Routing, and Firewall BasicsBasic Router Concepts . B-1What is a Router? . B-1Routing Information Protocol .

SM-FM114PNA-0 May 2002 NETGEAR,Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR Reference Manual for the Model FR114P, FR114W