Have what I need?

[hickoryboyz]

I have a question. Here's my list of hardware, can I setup a VPN for the office?

small retail/design studio, 2 employees and an owner.
3 XP machines, soon vista.
Verizon Business DSL.
Netgear FVS318 VPN Firewall.
DSL and cable connections at the homes of the employees.

We need to simply be able to access files/shares from home on 2 of the XP machines (the owner's machine won't have anything useful).

 

[colinT23]

Hi,

Yes. Take a look at this link:

http://kbserver.netgear.com/kb_web_files/n101436.asp

You'l need Netgear's VPN client software for this.

Regards Colin.

 

[hickoryboyz]

Thanks so much for the info. Can I not use the XP VPN client?

 

[colinT23]

Hi,

From what I can see from the Netgear web site, the 318 cannot act as a PPTP endpoint so using the XP built in PPTP VPN isn't going to work. I believe that the 318 only supports PPTP pass through so you are going to need an IPSec VPN Client to connect. Why no ditch the 318, get a PIX 501 and use the Cisco VPN Client - fairly simple to setup using the wizards and secure.

Regards Colin.

 

[hickoryboyz]

Another quick question. I have my DSL modem in bridged mode and the router is set for DHCP. The modem is no longer giving out IPs and so the wireless isn't functioning. I would like for the wireless to be available, but not allow those connected wirelessly into the network. No one on the network will connect wirelessly. How can I set my modem to once again issue IPs. I can't get to the modem configuration to set the DHCP settings. the router's ip is 192.168.0.1, but I don't know the modem's internal ip, i tried 192.168.1.1 and 192.168.2.1 and they didn't work.

 

[hickoryboyz]

I also found this correspondence about the FVS318...

"Exactly. Now, Microsoft silently added this technology in XP Service Pack 2. So it does exist in Service Pack 2, even though Microsoft is hostile for their client hooking up to endpoint VPN routers, unfortunately. However, all of the very latest VPN routers also support it. For example, Netgear has an FVS318, like Frank Victor Sam 318. It's in its third version right now. The Version 3 router does support this NAT-T traversal. However, versions 1 and 2 don't. And unfortunately they're not upgradeable to support this. So if you had an earlier version of this particular router, you'd be out of luck. But if you've got a Version 3 router, you're okay."

"So if you want to use a Windows computer to access your home network, and you have purchased a router that supports VPN, that must support also NAT-T, the NAT- Traversal, so your client can get into your network."

What does that mean?

 

[colinT23]

So you want the modem to hand out DHCP to clients to give them internet access but you don't want these clients to be able to access the internel LAN (after the 318) ? What modem are you using ?
I'm not sure what the clip is referring to but Nat Traversal allows natted clients to utilise an IPSec VPN Tunnel. For example, for my PC to establish a Remote Access VPN with a remote PIX (VPN Server/Endpoint), my firewall (in this case also a PIX) must have Nat-T enabled, otherwise I'm simply not going to connect. I'm sure someone out there can give you a more technical explanation!

Regards Colin.

 

[hickoryboyz]

Westell 327W.

If I set my WAN IP on my netgear router to match the IP of the modem (should be 192.168.1.1) and then open a browser to that IP, I should get into the config for the modem, correct? I haven't tried yet, going to tomorrow.