NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
FVS318N csr signed by Openssl intermediate CA not accepted
Hello all, I have a FVS318N router, frmware 4.3.4-2. I have generated a certificate signing request (CSR) from the firewall (SHA-1 + RSA2048). I have issued certificates: using openssl and my Intermediate CA certificate & PK. The firewal refuses to load this certificate. using openssl and an Root CA certificate. The firewal accepts this certificate. In both cases: no extended key usage SHA1 + RSA2048 both the Root and Intermediate CAs certificates are loaded as trusted CAs in the firewall both the Root and Intermediate CAs certificates are SHA1 + RSA2048 Questions: Are Intermediate CAs issued certificates supported the Netgear CSR? If yes, any tips? The certificate I have uploaded is used now for the administration interface, which is unwanted. I would want to add an IPSEC only certificate which does not interfere with the SSL certificate. What keyUsage/Extended key usage to add or exclude? The documentation refers to IPSEC VPN extKeyUsage (EKU). AFAIK the IPSEC specific EKUs have been deprecated long ago and should no longe be used. The IPSEC VPN OIDs are not mentioned in the Netgear doc, does anyone know what do they mean? Is there any way to grab more information (ie: logs) of what happens inside for certificate management? The firewall has a serial port and I still have a PC with a serail port on. Can it be told to log anything usefull there (or elsewhere)?FVS318N - IPsec - Android. Tunnel establishes but drops within seconds.
I'm having a rather frustrating issue with connecting to the FVS318N via the Android built-in VPN client. I have verified all the settings are correct on both ends and the tunnel comes up just fine everytime. However, it drops within a matter of 10-20 seconds. I have the same issue when the phone is connected to 3G/4G or WiFi. I have used the Netgear Client as well as Shrewdsoft on Windows machines and they both work ok, after tinkering with the settings/policies. But everything I've tried so far hasn't worked for Android. Have tried a phone and a tablet, just to be sure. Would appreciate any help. Thanks. Details: FVS318N on FW 4.3.3-6 Phone and tablet on Android 5.0.1 LAN Subnet on FVS318N and VPN clients subnet are different (192.168.2.0 and 192.168.4.0) Mode config and non Mod Config both tried, same result. Other settings are just standard, as per VPN Wizard defaults.
IPSEC Site to Site FVS336 to FVS318
Hi Netgear Community, I want to set up a Site to Site connection between FVS336 and FVS318 at our costumer s office. At there site the FVS318 is behind a firewall. They forward ESP, AH and Port 500 UDP to the device. Is there any possibility to check the ports (like telnet)? Both routers were configured by wizard. I just changed the mode to aggressive and the SA lifetime to 86400. The local subnets are 10.9.8.x and 192.168.4.x. Thank you a lot for any suggestions.
