Netgear Srx5308 Quick Reference Guide ProSAFE Gigabit Quad WAN SSL VPN Firewall

2014-07-06

• ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
• Contents
• 1. Introduction
  • What Is the ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308?
  • Key Features and Capabilities
    • Quad-WAN Ports for Increased Reliability and Load Balancing
    • Advanced VPN Support for Both IPSec and SSL
    • A Powerful, True Firewall with Content Filtering
    • Security Features
    • Autosensing Ethernet Connections with Auto Uplink
    • Extensive Protocol Support
    • Easy Installation and Management
  • Maintenance and Support
  • Package Contents
  • Hardware Features
    • Front Panel
    • Rear Panel
    • Bottom Panel with Product Label
  • Choose a Location for the VPN Firewall
    • Use the Rack-Mounting Kit
  • Log In to the VPN Firewall
  • Web Management Interface Menu Layout
  • Requirements for Entering IP Addresses
    • IPv4
    • IPv6
• 2. IPv4 and IPv6 Internet and WAN Settings
  • Internet and WAN Configuration Tasks
    • Roadmap to Setting Up IPv4 Internet Connections to Your ISPs
    • Roadmap to Setting Up IPv6 Internet Connections to Your ISPs
  • Configure the IPv4 Internet Connection and WAN Settings
    • Configure the IPv4 WAN Mode
    • Let the VPN Firewall Automatically Detect and Configure an IPv4 Internet Connection
    • Manually Configure an IPv4 Internet Connection
    • Configure Load Balancing or Auto-Rollover for IPv4 Interfaces
    • Configure Secondary WAN Addresses
    • Configure Dynamic DNS
  • Configure the IPv6 Internet Connection and WAN Settings
    • Configure the IPv6 Routing Mode
    • Use a DHCPv6 Server to Configure an IPv6 Internet Connection
    • Configure a Static IPv6 Internet Connection
    • Configure a PPPoE IPv6 Internet Connection
    • Configure 6to4 Automatic Tunneling
    • Configure ISATAP Automatic Tunneling
    • View the Tunnel Status and IPv6 Addresses
    • Configure Stateless IP/ICMP Translation
    • Configure Auto-Rollover for IPv6 Interfaces
  • Configure Advanced WAN Options and Other Tasks
  • Configure WAN QoS Profiles
  • Additional WAN-Related Configuration Tasks
    • Verify the Connection
  • What to Do Next
• 3. LAN Configuration
  • Manage IPv4 Virtual LANs and DHCP Options
    • Port-Based VLANs
    • Assign and Manage VLAN Profiles
    • VLAN DHCP Options
    • Configure a VLAN Profile
    • Configure VLAN MAC Addresses and LAN Advanced Settings
  • Configure IPv4 Multihome LAN IP Addresses on the Default VLAN
  • Manage IPv4 Groups and Hosts (IPv4 LAN Groups)
    • Manage the Network Database
    • Change Group Names in the Network Database
    • Set Up DHCP Address Reservation
  • Manage the IPv6 LAN
    • DHCPv6 Server Options
    • Configure the IPv6 LAN
    • Configure the IPv6 Router Advertisement Daemon and Advertisement Prefixes for the LAN
  • Configure IPv6 Multihome LAN IP Addresses on the Default VLAN
  • Enable and Configure the DMZ Port for IPv4 and IPv6 Traffic
    • DMZ Port for IPv4 Traffic
    • DMZ Port for IPv6 Traffic
    • Configure the IPv6 Router Advertisement Daemon and Advertisement Prefixes for the DMZ
  • Manage Static IPv4 Routing
    • Configure Static IPv4 Routes
    • Configure the Routing Information Protocol
    • IPv4 Static Route Example
  • Manage Static IPv6 Routing
• 4. Firewall Protection
  • About Firewall Protection
    • Administrator Tips
  • Overview of Rules to Block or Allow Specific Kinds of Traffic
    • Outbound Rules (Service Blocking)
    • Inbound Rules (Port Forwarding)
    • Order of Precedence for Rules
  • Configure LAN WAN Rules
    • Create LAN WAN Outbound Service Rules
    • Create LAN WAN Inbound Service Rules
  • Configure DMZ WAN Rules
    • Create DMZ WAN Outbound Service Rules
    • Create DMZ WAN Inbound Service Rules
  • Configure LAN DMZ Rules
    • Create LAN DMZ Outbound Service Rules
    • Create LAN DMZ Inbound Service Rules
  • Examples of Firewall Rules
    • Examples of Inbound Firewall Rules
    • Examples of Outbound Firewall Rules
  • Configure Other Firewall Features
    • Attack Checks
    • Set Limits for IPv4 Sessions
    • Configure Multicast Pass-Through for IPv4 Traffic
    • Manage the Application Level Gateway for SIP Sessions
  • Services, Bandwidth Profiles, and QoS Profiles
    • Add Customized Services
    • Create IP Groups
    • Create Bandwidth Profiles
    • Create Quality of Service Profiles for IPv4 Firewall Rules
    • Quality of Service Priorities for IPv6 Firewall Rules
  • Configure Content Filtering
  • Set a Schedule to Block or Allow Specific Traffic
  • Enable Source MAC Filtering
  • Set Up IP/MAC Bindings
  • Configure Port Triggering
  • Configure Universal Plug and Play
• 5. Virtual Private Networking Using IPSec and L2TP Connections
  • Considerations for Dual WAN Port Systems
  • Use the IPSec VPN Wizard for Client and Gateway Configurations
    • Create an IPv4 Gateway-to-Gateway VPN Tunnel with the Wizard
    • Create an IPv6 Gateway-to-Gateway VPN Tunnel with the Wizard
    • Create an IPv4 Client-to-Gateway VPN Tunnel with the Wizard
  • Test the Connection and View Connection and Status Information
    • Test the NETGEAR VPN Client Connection
    • NETGEAR VPN Client Status and Log Information
    • View the VPN Firewall IPSec VPN Connection Status
    • View the VPN Firewall IPSec VPN Log
  • Manage IPSec VPN Policies
    • Manage IKE Policies
    • Manage VPN Policies
  • Configure Extended Authentication (XAUTH)
    • Configure XAUTH for VPN Clients
    • User Database Configuration
    • RADIUS Client and Server Configuration
  • Assign IPv4 Addresses to Remote Users (Mode Config)
    • Mode Config Operation
    • Configure Mode Config Operation on the VPN Firewall
    • Configure the ProSafe VPN Client for Mode Config Operation
    • Test the Mode Config Connection
    • Modify or Delete a Mode Config Record
  • Configure Keep-Alives and Dead Peer Detection
    • Configure Keep-Alives
    • Configure Dead Peer Detection
  • Configure NetBIOS Bridging with IPSec VPN
  • Configure the PPTP Server
    • View the Active PPTP Users
  • Configure the L2TP Server
    • View the Active L2TP Users
• 6. Virtual Private Networking Using SSL Connections
  • SSL VPN Portal Options
  • Overview of the SSL Configuration Process
  • Create the Portal Layout
  • Configure Domains, Groups, and Users
  • Configure Applications for Port Forwarding
    • Add Servers and Port Numbers
    • Add a New Host Name
  • Configure the SSL VPN Client
    • Configure the Client IP Address Range
    • Add Routes for VPN Tunnel Clients
  • Use Network Resource Objects to Simplify Policies
    • Add New Network Resources
    • Edit Network Resources to Specify Addresses
  • Configure User, Group, and Global Policies
    • View Policies
    • Add an IPv4 or IPv6 SSL VPN Policy
  • Access the New SSL Portal Login Screen
  • View the SSL VPN Connection Status and SSL VPN Log
• 7. Manage Users, Authentication, and VPN Certificates
  • The VPN Firewall’s Authentication Process and Options
  • Configure Authentication Domains, Groups, and Users
    • Configure Domains
    • Configure Groups
    • Configure User Accounts
    • Set User Login Policies
    • Change Passwords and Other User Settings
  • Manage Digital Certificates for VPN Connections
    • VPN Certificates Screen
    • Manage VPN CA Certificates
    • Manage VPN Self-Signed Certificates
    • Manage the VPN Certificate Revocation List
• 8. Network and System Management
  • Performance Management
    • Bandwidth Capacity
    • Features That Reduce Traffic
    • Features That Increase Traffic
    • Use QoS and Bandwidth Assignment to Shift the Traffic Mix
    • Monitoring Tools for Traffic Management
  • System Management
    • Change Passwords and Administrator and Guest Settings
    • Configure Remote Management Access
    • Use the Command-Line Interface
    • Use a Simple Network Management Protocol Manager
    • Manage the Configuration File
    • Configure Date and Time Service
• 9. Monitor System Access and Performance
  • Configure and Enable the WAN Traffic Meter
  • Configure and Enable the LAN Traffic Meter
  • Configure Logging, Alerts, and Event Notifications
    • How to Send Syslogs over a VPN Tunnel between Sites
  • View Status Screens
    • View the System Status
    • View the VPN Connection Status, L2TP Users, and PPTP Users
    • View the VPN Logs
    • View the Port Triggering Status
    • View the WAN Port Status
    • View the Attached Devices and the DHCP Log
  • Diagnostics Utilities
    • Send a Ping Packet
    • Trace a Route
    • Look Up a DNS Address
    • Display the Routing Tables
    • Capture Packets in Real Time
    • Reboot the VPN Firewall Remotely
• 10. Troubleshooting
  • Basic Functioning
    • Power LED Not On
    • Test LED Never Turns Off
    • LAN or WAN Port LEDs Not On
  • Troubleshoot the Web Management Interface
  • When You Enter a URL or IP Address, a Time-Out Error Occurs
  • Troubleshoot the ISP Connection
  • Troubleshooting the IPv6 Connection
  • Troubleshoot a TCP/IP Network Using a Ping Utility
    • Test the LAN Path to Your VPN Firewall
    • Test the Path from Your Computer to a Remote Device
  • Restore the Default Configuration and Password
  • Address Problems with Date and Time
  • Access the Knowledge Base and Documentation
• A. Default Settings and Technical Specifications
  • Factory Default Settings
  • Physical and Technical Specifications
• B. Network Planning for Multiple WAN Ports
  • What to Consider Before You Begin
    • Cabling and Computer Hardware Requirements
    • Computer Network Configuration Requirements
    • Internet Configuration Requirements
  • Overview of the Planning Process
  • Inbound Traffic
    • Inbound Traffic to a Single WAN Port System
    • Inbound Traffic to a Dual WAN Port System
  • Virtual Private Networks
    • VPN Road Warrior (Client-to-Gateway)
    • VPN Gateway-to-Gateway
    • VPN Telecommuter (Client-to-Gateway through a NAT Router)
• C. System Logs and Error Messages
  • Log Message Terms
  • System Log Messages
    • NTP
    • Login/Logout
    • System Startup
    • Reboot
    • Firewall Restart
    • IPSec Restart
    • Unicast, Multicast, and Broadcast Logs
    • WAN Status
    • Resolved DNS Names
    • VPN Log Messages
    • Traffic Meter Logs
  • Routing Logs
    • LAN to WAN Logs
    • LAN to DMZ Logs
    • DMZ to WAN Logs
    • WAN to LAN Logs
    • DMZ to LAN Logs
    • WAN to DMZ Logs
  • Other Event Logs
    • Session Limit Logs
    • Source MAC Filter Logs
    • Bandwidth Limit Logs
  • DHCP Logs
• D. Two-Factor Authentication
  • Why Do I Need Two-Factor Authentication?
    • What Are the Benefits of Two-Factor Authentication?
    • What Is Two-Factor Authentication?
  • NETGEAR Two-Factor Authentication Solutions
• E. Notification of Compliance
• Index