FVS336G Reference Manual
Page 9
... WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for Client and Gateway Configurations 5-3 Creating Gateway to Gateway VPN Tunnels with the Wizard 5-3 Creating a Client to Gateway VPN Tunnel 5-6 Testing the Connections...
... WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for Client and Gateway Configurations 5-3 Creating Gateway to Gateway VPN Tunnels with the Wizard 5-3 Creating a Client to Gateway VPN Tunnel 5-6 Testing the Connections...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File Management 8-15 Upgrading the Firmware 8-17 Configuring Date and Time Service 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File Management 8-15 Upgrading the Firmware 8-17 Configuring Date and Time Service 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring ...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet Configuration Requirements C-3 Where Do I Get the Internet Configuration Parameters C-4 Internet Connection Information Form C-5 Overview of the Planning Process C-6 Inbound Traffic ...C-6 Virtual Private Networks (VPNs C-6 The ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet Configuration Requirements C-3 Where Do I Get the Internet Configuration Parameters C-4 Internet Connection Information Form C-5 Overview of the Planning Process C-6 Inbound Traffic ...C-6 Virtual Private Networks (VPNs C-6 The ...
FVS336G Reference Manual
Page 16
... & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of status and activity. • Flash memory for the planning factors to provide client-free access with customizable user portals and support for Increased Reliability or Outbound Load Balancing The FVS336G has two broadband WAN ports. See "Network Planning for Dual WAN Ports" on the remote computer. - Bundled with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. Uses...
... & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of status and activity. • Flash memory for the planning factors to provide client-free access with customizable user portals and support for Increased Reliability or Outbound Load Balancing The FVS336G has two broadband WAN ports. See "Network Planning for Dual WAN Ports" on the remote computer. - Bundled with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. Uses...
FVS336G Reference Manual
Page 19
...; Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your use of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions. one user license. • Warranty and Support Information Card. Package Contents The product package should contain the following features to the terms identified in diagnostic functions such as Ping, Trace Route, DNS lookup, and remote reboot. • Remote Management. The VPN firewall supports the Simple Network Management Protocol (SNMP) to let you change the system variables for firmware upgrade...
...; Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your use of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions. one user license. • Warranty and Support Information Card. Package Contents The product package should contain the following features to the terms identified in diagnostic functions such as Ping, Trace Route, DNS lookup, and remote reboot. • Remote Management. The VPN firewall supports the Simple Network Management Protocol (SNMP) to let you change the system variables for firmware upgrade...
FVS336G Reference Manual
Page 23
.... See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-10. 2-1 v1.0, March 2009 After logging in the installation guide. For load balancing, you will connect to complete the basic Internet connection of the Installation Guide is described in this time. Connect the firewall physically to set up and configure your ISPs. See "Configuring the Internet Connections" on page 2-2. 3. Select either dedicated (single WAN) mode, auto-rollover mode, or load balancing mode. See "Logging into the VPN Firewall Router" on...
.... See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-10. 2-1 v1.0, March 2009 After logging in the installation guide. For load balancing, you will connect to complete the basic Internet connection of the Installation Guide is described in this time. Connect the firewall physically to set up and configure your ISPs. See "Configuring the Internet Connections" on page 2-2. 3. Select either dedicated (single WAN) mode, auto-rollover mode, or load balancing mode. See "Logging into the VPN Firewall Router" on...
FVS336G Reference Manual
Page 70
...: For security, NETGEAR strongly recommends that you are typically chosen from the Internet. For example, a packet that allows all other players' moves. When a computer on your network. ProSafe Dual WAN Gigabit Firewall with destination port number 80 is an HTTP (Web server) request. Create an inbound rule that is sent with SSL & IPsec VPN FVS336G Reference Manual To expose one of services that you prevent users from any internal IP address to any...
...: For security, NETGEAR strongly recommends that you are typically chosen from the Internet. For example, a packet that allows all other players' moves. When a computer on your network. ProSafe Dual WAN Gigabit Firewall with destination port number 80 is an HTTP (Web server) request. Create an inbound rule that is sent with SSL & IPsec VPN FVS336G Reference Manual To expose one of services that you prevent users from any internal IP address to any...
FVS336G Reference Manual
Page 108
... using these IP addresses. • NETGEAR FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual The FVS336G is configured on the RADIUS server. 5. Note: Selection of tries the VPN firewall will make to external users after verifying their authentication information. Assigning IP Addresses to Remote Users (ModeConfig) To simply the process of connecting remote VPN clients to the FVS336G, the ModeConfig module can be sufficient as a NAS (Network Access Server), allowing network access to the RADIUS server before giving up. 8. LAN IP address...
... using these IP addresses. • NETGEAR FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual The FVS336G is configured on the RADIUS server. 5. Note: Selection of tries the VPN firewall will make to external users after verifying their authentication information. Assigning IP Addresses to Remote Users (ModeConfig) To simply the process of connecting remote VPN clients to the FVS336G, the ModeConfig module can be sufficient as a NAS (Network Access Server), allowing network access to the RADIUS server before giving up. 8. LAN IP address...
FVS336G Reference Manual
Page 156
... installations. ProSafe Dual WAN Gigabit Firewall with one exception, the traffic that would have not defined any rules, only the default rule will be much lower when DSL or cable modems are used to connect to the WAN port that is no backup in load balancing mode increases the bandwidth capacity of the WAN side of the VPN firewall that can be called upon to decrease WAN-side loading are as follows: • Service blocking • Block...
... installations. ProSafe Dual WAN Gigabit Firewall with one exception, the traffic that would have not defined any rules, only the default rule will be much lower when DSL or cable modems are used to connect to the WAN port that is no backup in load balancing mode increases the bandwidth capacity of the WAN side of the VPN firewall that can be called upon to decrease WAN-side loading are as follows: • Service blocking • Block...
FVS336G Reference Manual
Page 171
... the FVS336G. 3. Router and Network Management v1.0, March 2009 8-17 To view the current version of the VPN firewall firmware from the Settings Backup and Firmware Upgrade menu. Select Administration > Settings Backup and Firmware Upgrade from the main menu. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Revert to Factory Default Settings To reset the VPN firewall to read the release notes on using them! When you intend on the download page before continuing. 4. Click default. 2. Warning: When you click default, your VPN firewall is...
... the FVS336G. 3. Router and Network Management v1.0, March 2009 8-17 To view the current version of the VPN firewall firmware from the Settings Backup and Firmware Upgrade menu. Select Administration > Settings Backup and Firmware Upgrade from the main menu. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Revert to Factory Default Settings To reset the VPN firewall to read the release notes on using them! When you intend on the download page before continuing. 4. Click default. 2. Warning: When you click default, your VPN firewall is...
FVS336G Reference Manual
Page 197
... method for the VPN firewall to 192.168.1.1. Refer to "Manually Configuring the Internet Connection" on the rear panel of the VPN firewall. Problems with the date and time function can erase the current configuration and restore factory defaults in the log is not known. Check that modem. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Your ISP could be rejecting the Ethernet MAC addresses of all but some ISPs additionally restrict access to the MAC address of a single PC...
... method for the VPN firewall to 192.168.1.1. Refer to "Manually Configuring the Internet Connection" on the rear panel of the VPN firewall. Problems with the date and time function can erase the current configuration and restore factory defaults in the log is not known. Check that modem. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Your ISP could be rejecting the Ethernet MAC addresses of all but some ISPs additionally restrict access to the MAC address of a single PC...
FVS336G Reference Manual
Page 199
... connections either to an IP address. A DNS (Domain Name Server) converts the Internet name (for example, LAN users accessing the Internet). click "Back" on that the destination is unreachable. Note: Rebooting will automatically be reached through a VPN tunnel, check Ping through the VPN firewall (for example, www.netgear.com) to the VPN firewall (such as your management session) or through VPN tunnel. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 10-1. Diagnostics Item Ping or trace an IP address Perform a DNS...
... connections either to an IP address. A DNS (Domain Name Server) converts the Internet name (for example, LAN users accessing the Internet). click "Back" on that the destination is unreachable. Note: Rebooting will automatically be reached through a VPN tunnel, check Ping through the VPN firewall (for example, www.netgear.com) to the VPN firewall (such as your management session) or through VPN tunnel. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 10-1. Diagnostics Item Ping or trace an IP address Perform a DNS...
FVS336G Reference Manual
Page 209
...have an installed Ethernet Network Interface Card (NIC) and an Ethernet cable. The cable or DSL modem broadband access device must use the VPN firewall on the FVS336G, your cable or DSL modems and a computer. Cabling and Computer Hardware Requirements To use a Category 5 (CAT5) cable such as Microsoft Internet Explorer or Netscape Navigator. ProSafe Dual WAN Gigabit Firewall with DHCP configuration, please refer to the link in Appendix B, "Related Documents." These options include enabling a WAN port to respond to your must use a Java-enabled Web browser program that is set up...
...have an installed Ethernet Network Interface Card (NIC) and an Ethernet cable. The cable or DSL modem broadband access device must use the VPN firewall on the FVS336G, your cable or DSL modems and a computer. Cabling and Computer Hardware Requirements To use a Category 5 (CAT5) cable such as Microsoft Internet Explorer or Netscape Navigator. ProSafe Dual WAN Gigabit Firewall with DHCP configuration, please refer to the link in Appendix B, "Related Documents." These options include enabling a WAN port to respond to your must use a Java-enabled Web browser program that is set up...
FVS336G Reference Manual
Page 21
... Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with other helpful information. The firewall allows you change the system variables for firmware upgrade. • Free technical support seven days a week, 24 hours a day, according to the Web Management Interface from an SNMP-compliant system manager. The SNMP system configuration lets you to login to the terms identified in diagnostic functions such as Ping, Trace Route, DNS lookup, and remote reboot. • Remote Management. ProSafe Dual WAN Gigabit Firewall with your...
... Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with other helpful information. The firewall allows you change the system variables for firmware upgrade. • Free technical support seven days a week, 24 hours a day, according to the Web Management Interface from an SNMP-compliant system manager. The SNMP system configuration lets you to login to the terms identified in diagnostic functions such as Ping, Trace Route, DNS lookup, and remote reboot. • Remote Management. ProSafe Dual WAN Gigabit Firewall with your...
FVS336G Reference Manual
Page 27
... WAN) mode, auto-rollover mode, or load balancing mode. Configure the Internet connections to your network. See "Configuring the Internet Connections" on page 2-2. 3. For load balancing, you will connect to your ISPs. Connect the firewall physically to your ISP(s). See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-11. 2-1 v1.2, June 2008 This chapter contains the following sections: • "Understanding the Connection Steps" on page 2-1 • "Logging into the VPN Firewall Router" on page 2-4. 4. A PDF...
... WAN) mode, auto-rollover mode, or load balancing mode. Configure the Internet connections to your network. See "Configuring the Internet Connections" on page 2-2. 3. For load balancing, you will connect to your ISPs. Connect the firewall physically to your ISP(s). See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-11. 2-1 v1.2, June 2008 This chapter contains the following sections: • "Understanding the Connection Steps" on page 2-1 • "Logging into the VPN Firewall Router" on page 2-4. 4. A PDF...
FVS336G Reference Manual
Page 49
... default DHCP and TCP/IP settings of the VPN firewall. If another device on your network will be the DHCP server, or if you may wish to configure the advanced LAN features of your ProSafe Dual WAN Gigabit Firewall with fixed addresses. 3-1 v1.2, June 2008 Otherwise, leave the Enable DHCP server radio button checked. These addresses should define a range between 192.168.1.2 and 192.168.1.100, although you will function as a DHCP server" on page 3-1 • "Managing Groups...
... default DHCP and TCP/IP settings of the VPN firewall. If another device on your network will be the DHCP server, or if you may wish to configure the advanced LAN features of your ProSafe Dual WAN Gigabit Firewall with fixed addresses. 3-1 v1.2, June 2008 Otherwise, leave the Enable DHCP server radio button checked. These addresses should define a range between 192.168.1.2 and 192.168.1.100, although you will function as a DHCP server" on page 3-1 • "Managing Groups...
FVS336G Reference Manual
Page 112
... must match the Remote VPN.) • Action. The default setting using : • NETGEAR FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN 5-16 Virtual Private Networking Using IPsec v1.2, June 2008 The Active IPsec (SA)s table also lists current data for the VPN tunnel. The IP address on the IPsec Connection Status screen (accessed by selecting VPN from the main menu and Connection Status from locations in which their IP addresses are to the Internet or may be connected, an additional policy...
... must match the Remote VPN.) • Action. The default setting using : • NETGEAR FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN 5-16 Virtual Private Networking Using IPsec v1.2, June 2008 The Active IPsec (SA)s table also lists current data for the VPN tunnel. The IP address on the IPsec Connection Status screen (accessed by selecting VPN from the main menu and Connection Status from locations in which their IP addresses are to the Internet or may be connected, an additional policy...
FVS336G Reference Manual
Page 119
... complete, the VPN connection initiator (remote user/client) asks for a response from the configured IP address pool and will make to save the settings. In the following example, we configured the VPN firewall using ModeConfig, and then configured a PC running ProSafe VPN Client software using these IP addresses. • NETGEAR FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Enable a Backup RADIUS Server (if required). 6. Remote users are given IP addresses available in seconds, that remote users appear as IP address, subnet mask and...
... complete, the VPN connection initiator (remote user/client) asks for a response from the configured IP address pool and will make to save the settings. In the following example, we configured the VPN firewall using ModeConfig, and then configured a PC running ProSafe VPN Client software using these IP addresses. • NETGEAR FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Enable a Backup RADIUS Server (if required). 6. Remote users are given IP addresses available in seconds, that remote users appear as IP address, subnet mask and...
FVS336G Reference Manual
Page 181
... menu. Click default. 2. To view the current version of the VPN firewall firmware from the main menu. 2. All firewall rules, VPN policies, LAN/WAN settings and other settings will be 192.168.1.1. From the Product Selection pull-down menu, choose the FVS336G. 3. You must manually restart the VPN firewall in the Router Upgrade section. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Revert to Factory Default Settings To reset the VPN firewall to take effect. Click on the download page before...
... menu. Click default. 2. To view the current version of the VPN firewall firmware from the main menu. 2. All firewall rules, VPN policies, LAN/WAN settings and other settings will be 192.168.1.1. From the Product Selection pull-down menu, choose the FVS336G. 3. You must manually restart the VPN firewall in the Router Upgrade section. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Revert to Factory Default Settings To reset the VPN firewall to take effect. Click on the download page before...
FVS336G Reference Manual
Page 219
... initial connection to your must provide a standard 10 Mbps (10BASE-T) Ethernet interface. You are readily available for your firewall. Note: For help with SSL & IPsec VPN. Cabling and Computer Hardware Requirements To use a Java-enabled Web browser program that is set to the link in Web Configuration Manager. Instruction for Dual WAN Ports C-3 v1.2, June 2008 If the computer will make these choices in the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with DHCP configuration, please refer to automatically get its...
... initial connection to your must provide a standard 10 Mbps (10BASE-T) Ethernet interface. You are readily available for your firewall. Note: For help with SSL & IPsec VPN. Cabling and Computer Hardware Requirements To use a Java-enabled Web browser program that is set to the link in Web Configuration Manager. Instruction for Dual WAN Ports C-3 v1.2, June 2008 If the computer will make these choices in the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with DHCP configuration, please refer to automatically get its...