FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 2
...is compliant with the limits for help. EU Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is no guarantee that to which the receiver is verified by one or more of NETGEAR, Inc. Statement of Conditions In the interest of the FCC Rules.... der Vorschriften hin zu überprüfen. Trademarks NETGEAR and the NETGEAR logo are registered trademarks of some ii 1.0, March 2009 NETGEAR does not assume any liability that the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN has been suppressed in accordance with the conditions set out...
...is compliant with the limits for help. EU Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is no guarantee that to which the receiver is verified by one or more of NETGEAR, Inc. Statement of Conditions In the interest of the FCC Rules.... der Vorschriften hin zu überprüfen. Trademarks NETGEAR and the NETGEAR logo are registered trademarks of some ii 1.0, March 2009 NETGEAR does not assume any liability that the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN has been suppressed in accordance with the conditions set out...
FVS336G Reference Manual
Page 5
...) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 Mark Adler: [email protected] The data format used to 1952 in the product documentation...
...) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 Mark Adler: [email protected] The data format used to 1952 in the product documentation...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for Client...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for Client...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes for VPN Tunnel Clients 6-12 Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify Policies 6-13...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes for VPN Tunnel Clients 6-12 Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify Policies 6-13...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File ... Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP Connection 10-4 Troubleshooting a TCP/IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File ... Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP Connection 10-4 Troubleshooting a TCP/IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
FVS336G Reference Manual
Page 13
.... xiii v1.0, March 2009 The information in this manual are described in a malfunction or damage to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. Tip: This format is used to highlight information of note may result in the following paragraphs: • Typographical Conventions. Conventions, Formats... will save time or resources. Warning: Ignoring this type of importance or special interest. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to the equipment.
.... xiii v1.0, March 2009 The information in this manual are described in a malfunction or damage to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. Tip: This format is used to highlight information of note may result in the following paragraphs: • Typographical Conventions. Conventions, Formats... will save time or resources. Warning: Ignoring this type of importance or special interest. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to the equipment.
FVS336G Reference Manual
Page 14
... November Text corrections 2007 June 2008 Updated to the NETGEAR website in personal injury or death. ProSafe Dual WAN Gigabit Firewall with router firmware update. website at http://kbserver.netgear.com/products/FVS336G.asp. For more information about network, Internet, firewall, and VPN technologies, see the links to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Note: Product...
... November Text corrections 2007 June 2008 Updated to the NETGEAR website in personal injury or death. ProSafe Dual WAN Gigabit Firewall with router firmware update. website at http://kbserver.netgear.com/products/FVS336G.asp. For more information about network, Internet, firewall, and VPN technologies, see the links to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Note: Product...
FVS336G Reference Manual
Page 15
..." on page 1-8 • "Qualified Web Browsers" on page 1-8 Key Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for load balancing or failover protection of your primary Internet connection. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN connects your local area network (LAN) to the Internet through one...
..." on page 1-8 • "Qualified Web Browsers" on page 1-8 Key Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for load balancing or failover protection of your primary Internet connection. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN connects your local area network (LAN) to the Internet through one...
FVS336G Reference Manual
Page 16
... software on their computers. - ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of user repositories. 1-2 Introduction v1.0, March 2009 Dual WAN Ports for Both IPsec and SSL The VPN firewall supports IPsec and SSL virtual private network (VPN) connections. • IPsec VPN delivers full network access...
... software on their computers. - ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of user repositories. 1-2 Introduction v1.0, March 2009 Dual WAN Ports for Both IPsec and SSL The VPN firewall supports IPsec and SSL virtual private network (VPN) connections. • IPsec VPN delivers full network access...
FVS336G Reference Manual
Page 17
... then configure itself to the correct configuration. Introduction 1-3 v1.0, March 2009 A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - You can configure the firewall to email the log to you specify as Ping of full-duplex or half-duplex operation. You...of firewall policies by screening for Web services, Web addresses, and keywords within Web addresses. You can connect to either type of cable to make the right connection. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, ...
... then configure itself to the correct configuration. Introduction 1-3 v1.0, March 2009 A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - You can configure the firewall to email the log to you specify as Ping of full-duplex or half-duplex operation. You...of firewall policies by screening for Web services, Web addresses, and keywords within Web addresses. You can connect to either type of cable to make the right connection. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, ...
FVS336G Reference Manual
Page 18
... features simplify installation and management tasks: • Browser-Based Management. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the network. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing...
... features simplify installation and management tasks: • Browser-Based Management. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the network. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing...
FVS336G Reference Manual
Page 19
Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your use of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions. one user license. • Warranty and Support Information Card. The VPN firewall's front...
Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your use of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions. one user license. • Warranty and Support Information Card. The VPN firewall's front...
FVS336G Reference Manual
Page 20
... damaged, contact your NETGEAR dealer. Writing to Flash memory (during upgrading or resetting to the VPN firewall. The LAN port is described in case you need to the VPN firewall. The LAN port is down or not being transmitted or received by the WAN port. Keep the ... v1.0, March 2009 Power is initializing or the initialization has failed. The WAN port has no link. Test mode: The system is not supplied to return the firewall for failover. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is operating at 10 Mbps.
... damaged, contact your NETGEAR dealer. Writing to Flash memory (during upgrading or resetting to the VPN firewall. The LAN port is described in case you need to the VPN firewall. The LAN port is down or not being transmitted or received by the WAN port. Keep the ... v1.0, March 2009 Power is initializing or the initialization has failed. The WAN port has no link. Test mode: The system is not supplied to return the firewall for failover. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is operating at 10 Mbps.
FVS336G Reference Manual
Page 21
... restored. 2. Cable security lock receptacle. 5. The WAN port has no link. WAN Ethernet ports: Two independent N-way automatic speed negotiating, Auto MDI/ MDIX, Gigabit Ethernet ports with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an AC power connection. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. Data is operating...
... restored. 2. Cable security lock receptacle. 5. The WAN port has no link. WAN Ethernet ports: Two independent N-way automatic speed negotiating, Auto MDI/ MDIX, Gigabit Ethernet ports with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an AC power connection. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. Data is operating...
FVS336G Reference Manual
Page 22
... Safari 1.2 or higher, or Mozilla Firefox l.x Web browser with the VPN firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is only required for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check...
... Safari 1.2 or higher, or Mozilla Firefox l.x Web browser with the VPN firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is only required for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check...
FVS336G Reference Manual
Page 23
Log in to the instructions in the installation guide. Configure the Internet connections to your network. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at this chapter. You can also select any necessary protocol bindings. During this time if desired. See "Configuring the Internet Connections" on page 2-2. 3. For ...
Log in to the instructions in the installation guide. Configure the Internet connections to your network. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at this chapter. You can also select any necessary protocol bindings. During this time if desired. See "Configuring the Internet Connections" on page 2-2. 3. For ...
FVS336G Reference Manual
Page 24
Configure your fully qualified domain names during this chapter. Logging into the VPN Firewall Router To connect to the VPN firewall, your computer for DHCP, refer to the link in the address field. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Configure the WAN options (optional). In the User field, type admin 4. Optionally, you can change the factory default MTU...
Configure your fully qualified domain names during this chapter. Logging into the VPN Firewall Router To connect to the VPN firewall, your computer for DHCP, refer to the link in the address field. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Configure the WAN options (optional). In the User field, type admin 4. Optionally, you can change the factory default MTU...