FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 2
... in this equipment does cause harmful interference to the use or application of some ii 1.0, March 2009 EU Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is verified by NETGEAR, Inc. Testsender) kann jedoch gewissen Beschränkungen unterliegen. If this document without notice. Bestätigung des Herstellers/Importeurs Es...
... in this equipment does cause harmful interference to the use or application of some ii 1.0, March 2009 EU Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is verified by NETGEAR, Inc. Testsender) kann jedoch gewissen Beschränkungen unterliegen. If this document without notice. Bestätigung des Herstellers/Importeurs Es...
FVS336G Reference Manual
Page 5
... format) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 Jean-loup Gailly: [email protected]; In no event will the authors...
... format) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 Jean-loup Gailly: [email protected]; In no event will the authors...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring ...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering Status...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering Status...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
FVS336G Reference Manual
Page 13
....0, March 2009 Tip: This format is used to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. The information in this type of note may result in the following paragraphs: • Typographical Conventions. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to highlight a procedure that...
....0, March 2009 Tip: This format is used to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. The information in this type of note may result in the following paragraphs: • Typographical Conventions. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to highlight a procedure that...
FVS336G Reference Manual
Page 14
Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 ...Update the Certificate management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 Note: Product updates are available on the NETGEAR, Inc. website at http://kbserver.netgear.com/products/FVS336G.asp. ProSafe Dual WAN Gigabit Firewall with router firmware update. For more information about network, Internet, firewall, and VPN technologies, see the links to ...
Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 ...Update the Certificate management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 Note: Product updates are available on the NETGEAR, Inc. website at http://kbserver.netgear.com/products/FVS336G.asp. ProSafe Dual WAN Gigabit Firewall with router firmware update. For more information about network, Internet, firewall, and VPN technologies, see the links to ...
FVS336G Reference Manual
Page 15
...increased system reliability or increased throughput. • Built-in case of failure of Gigabit Ethernet LAN and WAN ports ensures extremely high data transfer speeds The FVS336G is a plug-and-play device that can be installed and configured within minutes. ... on page 1-8 • "Qualified Web Browsers" on page 1-8 Key Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for secure and simple remote connections. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009
...increased system reliability or increased throughput. • Built-in case of failure of Gigabit Ethernet LAN and WAN ports ensures extremely high data transfer speeds The FVS336G is a plug-and-play device that can be installed and configured within minutes. ... on page 1-8 • "Qualified Web Browsers" on page 1-8 Key Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for secure and simple remote connections. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009
FVS336G Reference Manual
Page 16
...access with customizable user portals and support for maximum bandwidth efficiency. The firewall balances users between a central office and telecommuters. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management....Flash memory for Increased Reliability or Outbound Load Balancing The FVS336G has two broadband WAN ports. Dual WAN Ports for firmware upgrade. • Internal universal switching power supply. Bundled with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) -
...access with customizable user portals and support for maximum bandwidth efficiency. The firewall balances users between a central office and telecommuters. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management....Flash memory for Increased Reliability or Outbound Load Balancing The FVS336G has two broadband WAN ports. Dual WAN Ports for firmware upgrade. • Internal universal switching power supply. Bundled with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) -
FVS336G Reference Manual
Page 17
.... Each Ethernet port will then configure itself to defend against hacker attacks. ProSafe Dual WAN Gigabit Firewall with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can configure the firewall to log and report attempts to a switch or hub. The four LAN... and two WAN interfaces are autosensing and capable of cable to you specify as Microsoft...
.... Each Ethernet port will then configure itself to defend against hacker attacks. ProSafe Dual WAN Gigabit Firewall with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can configure the firewall to log and report attempts to a switch or hub. The four LAN... and two WAN interfaces are autosensing and capable of cable to you specify as Microsoft...
FVS336G Reference Manual
Page 18
... type of Attached PCs by simulating a dial-up connection. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). A user-friendly Setup Wizard is...
... type of Attached PCs by simulating a dial-up connection. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). A user-friendly Setup Wizard is...
FVS336G Reference Manual
Page 19
... Interface from an SNMP-compliant system manager. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. Package Contents The product package...
... Interface from an SNMP-compliant system manager. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. Package Contents The product package...
FVS336G Reference Manual
Page 20
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN front panel shown below includes four groups of status indicator light-emitting diodes (LEDs), including Power and Test, WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR... has no link. 1-6 Introduction v1.0, March 2009 The WAN port has no link. Writing to Flash memory (during upgrading or resetting to return the firewall for failover. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is described in the...
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN front panel shown below includes four groups of status indicator light-emitting diodes (LEDs), including Power and Test, WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR... has no link. 1-6 Introduction v1.0, March 2009 The WAN port has no link. Writing to Flash memory (during upgrading or resetting to return the firewall for failover. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is described in the...
FVS336G Reference Manual
Page 21
.... LAN Ethernet ports: Four switched N-way automatic speed negotiating, Auto MDI/MDIX, Gigabit Ethernet ports with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. The WAN port has no link. On/off power switch. ProSafe Dual WAN Gigabit Firewall with RJ-45 connectors. 3. Introduction 1-7 v1.0, March 2009 The WAN port has detected a link with a connected Ethernet device. Data is operating...
.... LAN Ethernet ports: Four switched N-way automatic speed negotiating, Auto MDI/MDIX, Gigabit Ethernet ports with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. The WAN port has no link. On/off power switch. ProSafe Dual WAN Gigabit Firewall with RJ-45 connectors. 3. Introduction 1-7 v1.0, March 2009 The WAN port has detected a link with a connected Ethernet device. Data is operating...
FVS336G Reference Manual
Page 22
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Although these web browsers are qualified for use Internet Explorer 5.1 or higher, Apple Safari ...full suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with JavaScript, cookies, and SSL enabled.
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Although these web browsers are qualified for use Internet Explorer 5.1 or higher, Apple Safari ...full suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with JavaScript, cookies, and SSL enabled.
FVS336G Reference Manual
Page 23
... the Internet Connections" on the NETGEAR website at: http://kbserver.netgear.com. 2. A PDF of the Installation Guide is described in the installation guide. After logging in to the VPN Firewall. Select either dedicated (single WAN) mode, auto-rollover mode, or... can also select any necessary protocol bindings. Configure the WAN mode (required for complete steps. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-4. 4. See "Configuring the WAN Mode (Required for Dual WAN)" on page 2-10 • "Configuring Dynamic DNS ...
... the Internet Connections" on the NETGEAR website at: http://kbserver.netgear.com. 2. A PDF of the Installation Guide is described in the installation guide. After logging in to the VPN Firewall. Select either dedicated (single WAN) mode, auto-rollover mode, or... can also select any necessary protocol bindings. Configure the WAN mode (required for complete steps. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-4. 4. See "Configuring the WAN Mode (Required for Dual WAN)" on page 2-10 • "Configuring Dynamic DNS ...
FVS336G Reference Manual
Page 24
...phase (if required). Figure 2-1 3. However, these are in lower case letters. 2-2 Connecting the FVS336G to the link in later chapters. For instructions on the WAN ports (optional). Enter https://192.168.1.1 in the browser. In the Password field, type password ...advanced features and changing them is described in Appendix B, "Related Documents. Start any of firewall and VPN features is not usually required. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Configure dynamic DNS on how to configure your fully qualified domain names during...
...phase (if required). Figure 2-1 3. However, these are in lower case letters. 2-2 Connecting the FVS336G to the link in later chapters. For instructions on the WAN ports (optional). Enter https://192.168.1.1 in the browser. In the Password field, type password ...advanced features and changing them is described in Appendix B, "Related Documents. Start any of firewall and VPN features is not usually required. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Configure dynamic DNS on how to configure your fully qualified domain names during...