FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 7
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client ...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager ... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager ... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering ...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
FVS336G Reference Manual
Page 13
...format is used to highlight information of note may result in this manual is intended for readers with SSL & IPsec VPN. Warning: Ignoring this manual are described in the following typographical conventions: Italic Bold Fixed italic ... or special interest. This manual uses the following paragraphs: • Typographical Conventions. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking...
...format is used to highlight information of note may result in this manual is intended for readers with SSL & IPsec VPN. Warning: Ignoring this manual are described in the following typographical conventions: Italic Bold Fixed italic ... or special interest. This manual uses the following paragraphs: • Typographical Conventions. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking...
FVS336G Reference Manual
Page 14
... VPN configuration procedure topics • Update the Certificate management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Revision History Part Number Version Number Date Description ...this notice may result in Appendix B, "Related Documents.". For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in personal injury or death. ProSafe Dual WAN Gigabit Firewall with router firmware update.
... VPN configuration procedure topics • Update the Certificate management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Revision History Part Number Version Number Date Description ...this notice may result in Appendix B, "Related Documents.". For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in personal injury or death. ProSafe Dual WAN Gigabit Firewall with router firmware update.
FVS336G Reference Manual
Page 16
..., ensuring you are never disconnected. • Load balance, or use both Internet lines simultaneously for Dual WAN Ports" on the remote computer. - ProSafe Dual WAN Gigabit Firewall with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. See "Network...their computers. - Dual WAN Ports for easy monitoring of the NETGEAR ProSafe VPN Client software (VPN01L) - IPsec VPN with broad protocol support for secure connection to consider when implementing the following capabilities with SSL & IPsec VPN FVS336G Reference Manual • Easy,...
..., ensuring you are never disconnected. • Load balance, or use both Internet lines simultaneously for Dual WAN Ports" on the remote computer. - ProSafe Dual WAN Gigabit Firewall with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. See "Network...their computers. - Dual WAN Ports for easy monitoring of the NETGEAR ProSafe VPN Client software (VPN01L) - IPsec VPN with broad protocol support for secure connection to consider when implementing the following capabilities with SSL & IPsec VPN FVS336G Reference Manual • Easy,...
FVS336G Reference Manual
Page 17
... alert messages to your LAN to Internet locations or services that you at specified intervals. A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to defend against hacker attacks. Browser based, platform-independent, remote access...
... alert messages to your LAN to Internet locations or services that you at specified intervals. A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to defend against hacker attacks. Browser based, platform-independent, remote access...
FVS336G Reference Manual
Page 18
Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol ...• DNS Proxy. This feature eliminates the need to easily configure your firewall from the LAN. • PPP over a DSL connection by simulating a dial-up connection. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to share an Internet...
Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol ...• DNS Proxy. This feature eliminates the need to easily configure your firewall from the LAN. • PPP over a DSL connection by simulating a dial-up connection. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to share an Internet...
FVS336G Reference Manual
Page 19
... and Support Information Card. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. The VPN firewall supports the Simple Network Management Protocol (SNMP...
... and Support Information Card. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. The VPN firewall supports the Simple Network Management Protocol (SNMP...
FVS336G Reference Manual
Page 20
..., contact your NETGEAR dealer. LED Descriptions Object Activity PWR (Power) TEST WAN Ports ACTIVE On (Green) Off On (Amber) Blinking (Amber) Off On (Green) On (Amber) Description Power is described in the following table: Table 1-1. The WAN port has a valid Internet connection. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any...
..., contact your NETGEAR dealer. LED Descriptions Object Activity PWR (Power) TEST WAN Ports ACTIVE On (Green) Off On (Amber) Blinking (Amber) Off On (Green) On (Amber) Description Power is described in the following table: Table 1-1. The WAN port has a valid Internet connection. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any...
FVS336G Reference Manual
Page 21
... operating at 10 Mbps. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. AC power receptacle: Universal AC input (100-240 VAC, 50-60 Hz). 6. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an AC power...
... operating at 10 Mbps. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. AC power receptacle: Universal AC input (100-240 VAC, 50-60 Hz). 6. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an AC power...
FVS336G Reference Manual
Page 22
... the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with the VPN firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is only required for use Internet Explorer 5.1 or higher, Apple Safari 1.2 or higher, or Mozilla Firefox l.x Web browser with SSL & IPsec VPN FVS336G Reference Manual...
... the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with the VPN firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is only required for use Internet Explorer 5.1 or higher, Apple Safari 1.2 or higher, or Mozilla Firefox l.x Web browser with SSL & IPsec VPN FVS336G Reference Manual...
FVS336G Reference Manual
Page 24
... (Optional)" on how to configure your computer for DHCP, refer to the VPN firewall follow these tasks is detailed separately in "Qualified Web Browsers" on the WAN ports (optional). Figure 2-1 3. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Each of the qualified browsers, as detailed in this phase (if required). For instructions on page 2-18...
... (Optional)" on how to configure your computer for DHCP, refer to the VPN firewall follow these tasks is detailed separately in "Qualified Web Browsers" on the WAN ports (optional). Figure 2-1 3. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Each of the qualified browsers, as detailed in this phase (if required). For instructions on page 2-18...
FVS336G Reference Manual
Page 25
Click Login. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5.
Click Login. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5.
FVS336G Reference Manual
Page 26
ProSafe Dual WAN Gigabit Firewall with an arrow in the center. In this guide, we may refer to a menu using the notation primary | subcategory, such as Network Configuration | WAN Settings. Configuring the Internet Connections To set up either a popup window or an advanced option menu. To ...the right of the menu active window, are one or more blue dots with SSL & IPsec VPN FVS336G Reference Manual • Main menu. Immediately...
ProSafe Dual WAN Gigabit Firewall with an arrow in the center. In this guide, we may refer to a menu using the notation primary | subcategory, such as Network Configuration | WAN Settings. Configuring the Internet Connections To set up either a popup window or an advanced option menu. To ...the right of the menu active window, are one or more blue dots with SSL & IPsec VPN FVS336G Reference Manual • Main menu. Immediately...
FVS336G Reference Manual
Page 27
Click Auto Detect at the bottom of connection methods and suggest one that your ISP appears to support. Auto Detect will probe the WAN port for connection to the Internet 2-5 v1.0, March 2009 Figure 2-4 Connecting the FVS336G to the Internet: Figure 2-3 1. The WAN Settings tabs appear, with SSL & IPsec VPN FVS336G Reference Manual Automatically Detecting and Connecting To automatically configure the WAN ports for a range of the menu. ProSafe Dual WAN Gigabit Firewall with the WAN1 ISP Settings tab in view. 2. Select Network Configuration > WAN Settings from the menu.
Click Auto Detect at the bottom of connection methods and suggest one that your ISP appears to support. Auto Detect will probe the WAN port for connection to the Internet 2-5 v1.0, March 2009 Figure 2-4 Connecting the FVS336G to the Internet: Figure 2-3 1. The WAN Settings tabs appear, with SSL & IPsec VPN FVS336G Reference Manual Automatically Detecting and Connecting To automatically configure the WAN ports for a range of the menu. ProSafe Dual WAN Gigabit Firewall with the WAN1 ISP Settings tab in view. 2. Select Network Configuration > WAN Settings from the menu.