FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
FVS336G Reference Manual
Page 16
...Dual WAN Ports" on a mutually-exclusive basis to: • Provide backup and rollover if one line is inoperable, ensuring you to connect a second broadband Internet line that can be configured on page C-1 for the planning factors to provide client-free access with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup... with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. ProSafe Dual WAN Gigabit Firewall with ...access by telecommuters requires the installation of the NETGEAR ProSafe VPN Client software (VPN01L) - Bundled ...
...Dual WAN Ports" on a mutually-exclusive basis to: • Provide backup and rollover if one line is inoperable, ensuring you to connect a second broadband Internet line that can be configured on page C-1 for the planning factors to provide client-free access with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup... with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. ProSafe Dual WAN Gigabit Firewall with ...access by telecommuters requires the installation of the NETGEAR ProSafe VPN Client software (VPN01L) - Bundled ...
FVS336G Reference Manual
Page 18
... 2009 Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). A user-friendly Setup Wizard is provided and online help documentation is a protocol for your...
... 2009 Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). A user-friendly Setup Wizard is provided and online help documentation is a protocol for your...
FVS336G Reference Manual
Page 32
...setup and management tasks. If you intend to the Internet v1.0, March 2009 Review the Domain Name Server (DNS) Servers options. The VPN firewall will be disabled. 2-10 Connecting the FVS336G to use a dual WAN... protocol. 10. Configuring the WAN Mode (Required for Dual WAN) The dual WAN ports of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 9. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN ...8226; If your ISP has not assigned any changes and revert to the NETGEAR Web site. If your ISP has not assigned a static IP address, ...
...setup and management tasks. If you intend to the Internet v1.0, March 2009 Review the Domain Name Server (DNS) Servers options. The VPN firewall will be disabled. 2-10 Connecting the FVS336G to use a dual WAN... protocol. 10. Configuring the WAN Mode (Required for Dual WAN) The dual WAN ports of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 9. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN ...8226; If your ISP has not assigned any changes and revert to the NETGEAR Web site. If your ISP has not assigned a static IP address, ...
FVS336G Reference Manual
Page 38
... will not know in advance what your DDNS service provider, log in the WAN IP address, so that name linked with your IP address by others on the Internet. 2-16 Connecting the FVS336G to the Internet v1.0, March 2009 The new Protocol Binding Rule will be ...setup an account with a DDNS provider such as 192.168.x.x or 10.x.x.x, the dynamic DNS service will not work because private addresses will need a fully qualified domain name (FQDN) either for a commercial DDNS service, which allows you will not be accessed by public Domain Name Servers (DNS). ProSafe Dual WAN Gigabit Firewall...
... will not know in advance what your DDNS service provider, log in the WAN IP address, so that name linked with your IP address by others on the Internet. 2-16 Connecting the FVS336G to the Internet v1.0, March 2009 The new Protocol Binding Rule will be ...setup an account with a DDNS provider such as 192.168.x.x or 10.x.x.x, the dynamic DNS service will not work because private addresses will need a fully qualified domain name (FQDN) either for a commercial DDNS service, which allows you will not be accessed by public Domain Name Servers (DNS). ProSafe Dual WAN Gigabit Firewall...
FVS336G Reference Manual
Page 44
... you to configure a secondary or "multi-home" LAN IP setup in Auto Rollover mode. When disabled, all DNS requests and communicate with the ISP's DNS servers (as a proxy for a DHCP server somewhere else on the same subnet. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • An IP Address from the range you...
... you to configure a secondary or "multi-home" LAN IP setup in Auto Rollover mode. When disabled, all DNS requests and communicate with the ISP's DNS servers (as a proxy for a DHCP server somewhere else on the same subnet. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • An IP Address from the range you...
FVS336G Reference Manual
Page 45
...192.168.1.1). If another device on the IP address that you will assign the entered domain to the VPN firewall's LAN. In the LAN TCP/IP Setup section, configure the following parameters: • Domain Name. (Optional) The DHCP will manually configure all computers... be disconnected. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 1. You must now enter https://10.0.0.1 in again. LAN Configuration 3-3 v1.0, March 2009 The subnet mask specifies the network number portion of your browser to reconnect to display the LAN Setup tab page....
...192.168.1.1). If another device on the IP address that you will assign the entered domain to the VPN firewall's LAN. In the LAN TCP/IP Setup section, configure the following parameters: • Domain Name. (Optional) The DHCP will manually configure all computers... be disconnected. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 1. You must now enter https://10.0.0.1 in again. LAN Configuration 3-3 v1.0, March 2009 The subnet mask specifies the network number portion of your browser to reconnect to display the LAN Setup tab page....
FVS336G Reference Manual
Page 46
... DNS server IP address. Click Apply to save your network. If no address is specified, the VPN firewall will provide its LAN IP address unless you have completed the LAN setup, all outbound traffic is allowed and all inbound traffic is unchecked, the DHCP server will be leased to...Ending DHCP addresses should be in the same subnet as the LAN IP address of the contiguous addresses in the IP address pool. b. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Starting IP Address. To change these default traffic rules, refer to clients.
... DNS server IP address. Click Apply to save your network. If no address is specified, the VPN firewall will provide its LAN IP address unless you have completed the LAN setup, all outbound traffic is allowed and all inbound traffic is unchecked, the DHCP server will be leased to...Ending DHCP addresses should be in the same subnet as the LAN IP address of the contiguous addresses in the IP address pool. b. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Starting IP Address. To change these default traffic rules, refer to clients.
FVS336G Reference Manual
Page 48
...you can be assigned to a single group. Allows modification of the PC or device. The LAN Setup tab displays. 2. By default, a computer is assigned to add a meaningful name). ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • A computer is identified by an asterisk. • IP Address. Figure 3-2 ... fields are displayed: • Name. The LAN Groups tab is chosen from the main menu. For DHCP clients of the VPN firewall, this IP address will need to that do not support the NetBIOS protocol, this entry manually if the IP address on the computer...
...you can be assigned to a single group. Allows modification of the PC or device. The LAN Setup tab displays. 2. By default, a computer is assigned to add a meaningful name). ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • A computer is identified by an asterisk. • IP Address. Figure 3-2 ... fields are displayed: • Name. The LAN Groups tab is chosen from the main menu. For DHCP clients of the VPN firewall, this IP address will need to that do not support the NetBIOS protocol, this entry manually if the IP address on the computer...
FVS336G Reference Manual
Page 89
... Private Networking Using IPsec 5-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with the Wizard Figure 5-3 Follow these settings after...a daunting task. The VPN Wizard efficiently guides you through the setup procedure with a series of the VPN tunnel match or mirror each...and encryption. Creating Gateway to Gateway VPN Tunnels with SSL & IPsec VPN FVS336G Reference Manual Using the VPN Wizard for the following scenarios: • ...Wizard tab page. The section below provides wizard and NETGEAR VPN Client configuration procedures for Client and Gateway Configurations You use ...
... Private Networking Using IPsec 5-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with the Wizard Figure 5-3 Follow these settings after...a daunting task. The VPN Wizard efficiently guides you through the setup procedure with a series of the VPN tunnel match or mirror each...and encryption. Creating Gateway to Gateway VPN Tunnels with SSL & IPsec VPN FVS336G Reference Manual Using the VPN Wizard for the following scenarios: • ...Wizard tab page. The section below provides wizard and NETGEAR VPN Client configuration procedures for Client and Gateway Configurations You use ...
FVS336G Reference Manual
Page 101
....0, March 2009 5-15 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual To view FVS336G VPN logs, go to set up a VPN tunnel, a VPN policy and an IKE policy are stored in separate policy tables. Figure 5-19 Managing VPN Policies After you selected as the VPN tunnel connection name during Wizard setup identifies both the...
....0, March 2009 5-15 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual To view FVS336G VPN logs, go to set up a VPN tunnel, a VPN policy and an IKE policy are stored in separate policy tables. Figure 5-19 Managing VPN Policies After you selected as the VPN tunnel connection name during Wizard setup identifies both the...
FVS336G Reference Manual
Page 142
ProSafe Dual WAN Gigabit Firewall with that group. 7-4 Managing Users, Authentication, and Certificates v1.0, March 2009 Click Add. Creating a... of Groups, ready for use in the List of configured groups. User Name. User Type. The new group appears in user account setup. The Users screen will be automatically logged out of the Web Configuration Manager 3. Figure 7-4 2. Enter a unique identifier, using any...be associated with the domain that is associated with SSL & IPsec VPN FVS336G Reference Manual c. For an Administrator, this is displayed. The user will display. .
ProSafe Dual WAN Gigabit Firewall with that group. 7-4 Managing Users, Authentication, and Certificates v1.0, March 2009 Click Add. Creating a... of Groups, ready for use in the List of configured groups. User Name. User Type. The new group appears in user account setup. The Users screen will be automatically logged out of the Web Configuration Manager 3. Figure 7-4 2. Enter a unique identifier, using any...be associated with the domain that is associated with SSL & IPsec VPN FVS336G Reference Manual c. For an Administrator, this is displayed. The user will display. .
FVS336G Reference Manual
Page 182
DHCP can be either Server or None. 9-8 Monitoring System Performance v1.0, March 2009 This is the current software the router is the Account Name that you upgrade your router. Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you entered in the LAN IP Setup page. This will change if you set in the Basic Settings page. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 9-3 The following information is displayed: Item System Name Firmware Version LAN Port Description This is using.
DHCP can be either Server or None. 9-8 Monitoring System Performance v1.0, March 2009 This is the current software the router is the Account Name that you upgrade your router. Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you entered in the LAN IP Setup page. This will change if you set in the Basic Settings page. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 9-3 The following information is displayed: Item System Name Firmware Version LAN Port Description This is using.
FVS336G Reference Manual
Page 184
...is enabled, and will detect active devices that the VPN firewall has discovered on the local network. The local network is strongly recommended. • Scanning the Network. You can enter information in the LAN Setup menu) is scanned using standard methods such as unknown....The LAN Groups screen will be shown as ARP. These requests also generate an entry in the VPN firewall is an automatically-maintained list of all IP devices that are not DHCP clients. PCs and other network devices. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual .
...is enabled, and will detect active devices that the VPN firewall has discovered on the local network. The local network is strongly recommended. • Scanning the Network. You can enter information in the LAN Setup menu) is scanned using standard methods such as unknown....The LAN Groups screen will be shown as ARP. These requests also generate an entry in the VPN firewall is an automatically-maintained list of all IP devices that are not DHCP clients. PCs and other network devices. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual .
FVS336G Reference Manual
Page 186
....0, March 2009 Monitoring System Performance ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, click refresh. To view the most recent entries in a popup window. Select Network Configuration > LAN Settings from the main menu, and then click the LAN Setup tab. The DHCP Log...
....0, March 2009 Monitoring System Performance ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, click refresh. To view the most recent entries in a popup window. Select Network Configuration > LAN Settings from the main menu, and then click the LAN Setup tab. The DHCP Log...
FVS336G Reference Manual
Page 236
...descriptions 4-6 order of 4-12 LAN WAN Rules default outbound 4-8 lease time 3-4 LEDs Index-4 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual ModeConfig, configuring with ModeConfig ...5-26 IPsec host 5-19 ISP connection troubleshooting 10-4 K Keep Connected Idle TImeout 2-9 Idle Timeout 2-8 keepalive, VPN 5-28 Keyword Blocking 4-19 applying 4-21 Known PCs and Devices list of 3-6 L LAN configuration 3-1 using LAN IP setup...
...descriptions 4-6 order of 4-12 LAN WAN Rules default outbound 4-8 lease time 3-4 LEDs Index-4 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual ModeConfig, configuring with ModeConfig ...5-26 IPsec host 5-19 ISP connection troubleshooting 10-4 K Keep Connected Idle TImeout 2-9 Idle Timeout 2-8 keepalive, VPN 5-28 Keyword Blocking 4-19 applying 4-21 Known PCs and Devices list of 3-6 L LAN configuration 3-1 using LAN IP setup...
FVS336G Reference Manual
Page 240
..., examples of 8-18 Time Zone screen 8-18 timeout, administrator login 8-10 Index-8 ToS. See QoS. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL...3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic increasing 8-5 reducing 8-2 traffic management 8-8 traffic meter 2-20 troubleshooting 10-1 browsers 10-3 configuration settings, using sniffer 10-3 defaults 10-3 ISP connection 10-4 NTP 10-7 testing your setup 10-6 Web configuration 10...
..., examples of 8-18 Time Zone screen 8-18 timeout, administrator login 8-10 Index-8 ToS. See QoS. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL...3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic increasing 8-5 reducing 8-2 traffic management 8-8 traffic meter 2-20 troubleshooting 10-1 browsers 10-3 configuration settings, using sniffer 10-3 defaults 10-3 ISP connection 10-4 NTP 10-7 testing your setup 10-6 Web configuration 10...
FVS336G Reference Manual
Page 241
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual telecommuter, about C-17 telecommuter, Dual gateway C-18 telecommuter, single gateway C-17 VPN Client configuring 5-6 VPN firewall connecting 2-1 VPN Logs screen 9-15 VPN passthrough 4-18, 8-6 VPN Policies screen 5-5, 5-8 VPN Policy Auto 5-17 Manual 5-17 VPN Tunnel addresses Dual WAN Port systems 5-2 VPN Tunnel Connection monitoring status 9-14 VPN tunnels about...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual telecommuter, about C-17 telecommuter, Dual gateway C-18 telecommuter, single gateway C-17 VPN Client configuring 5-6 VPN firewall connecting 2-1 VPN Logs screen 9-15 VPN passthrough 4-18, 8-6 VPN Policies screen 5-5, 5-8 VPN Policy Auto 5-17 Manual 5-17 VPN Tunnel addresses Dual WAN Port systems 5-2 VPN Tunnel Connection monitoring status 9-14 VPN tunnels about...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Network Address Translation 2-12 Classical Routing 2-12 Configuring Auto-Rollover Mode 2-13 Configuring Load Balancing 2-15 Configuring Dynamic DNS (Optional 2-17 Configuring the Advanced WAN Options (Optional 2-19 Additional WAN Related Configuration 2-21 Chapter 3 LAN Configuration Using the VPN Firewall as a DHCP server 3-1 Configuring the LAN Setup Options 3-2 Managing...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Network Address Translation 2-12 Classical Routing 2-12 Configuring Auto-Rollover Mode 2-13 Configuring Load Balancing 2-15 Configuring Dynamic DNS (Optional 2-17 Configuring the Advanced WAN Options (Optional 2-19 Additional WAN Related Configuration 2-21 Chapter 3 LAN Configuration Using the VPN Firewall as a DHCP server 3-1 Configuring the LAN Setup Options 3-2 Managing...
FVS336G Reference Manual
Page 18
... Internet line that can be configured on their computers. - ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy... monitoring of status and activity. • Flash memory for Increased Reliability or Outbound Load Balancing The FVS336G has two broadband WAN ports. The firewall balances users between a central office and telecommuters. IPsec VPN with the single-user license of the NETGEAR ProSafe...
... Internet line that can be configured on their computers. - ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy... monitoring of status and activity. • Flash memory for Increased Reliability or Outbound Load Balancing The FVS336G has two broadband WAN ports. The firewall balances users between a central office and telecommuters. IPsec VPN with the single-user license of the NETGEAR ProSafe...