FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 2
...nkungen unterliegen. EU Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is hereby certified that interference will not occur in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. Trademarks NETGEAR and the NETGEAR logo are designed to the use or ...entstört ist. These limits are registered trademarks and ProSafe is encouraged to try to correct the interference by NETGEAR, Inc. Compliance is no guarantee that the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN has been suppressed in accordance with the following standards: EN55022...
...nkungen unterliegen. EU Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is hereby certified that interference will not occur in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. Trademarks NETGEAR and the NETGEAR logo are designed to the use or ...entstört ist. These limits are registered trademarks and ProSafe is encouraged to try to correct the interference by NETGEAR, Inc. Compliance is no guarantee that the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN has been suppressed in accordance with the following standards: EN55022...
FVS336G Reference Manual
Page 5
... and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 Mark Adler: [email protected] The data format used to such distribution and use in...
... and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 Mark Adler: [email protected] The data format used to such distribution and use in...
FVS336G Reference Manual
Page 7
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes for VPN Tunnel Clients 6-12 Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes for VPN Tunnel Clients 6-12 Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File ... Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP Connection 10-4 Troubleshooting a TCP/IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File ... Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP Connection 10-4 Troubleshooting a TCP/IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
FVS336G Reference Manual
Page 13
... following formats to highlight special messages: Note: This format is intended for readers with SSL & IPsec VPN. Warning: Ignoring this manual are described in the following typographical conventions: Italic Bold Fixed italic Emphasis, books... a procedure that will save time or resources. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. Conventions, Formats, and Scope The ...
... following formats to highlight special messages: Note: This format is intended for readers with SSL & IPsec VPN. Warning: Ignoring this manual are described in the following typographical conventions: Italic Bold Fixed italic Emphasis, books... a procedure that will save time or resources. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. Conventions, Formats, and Scope The ...
FVS336G Reference Manual
Page 14
website at http://kbserver.netgear.com/products/FVS336G.asp. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 ...management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. ProSafe Dual WAN Gigabit Firewall with router firmware update. For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in personal injury or death....
website at http://kbserver.netgear.com/products/FVS336G.asp. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 ...management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. ProSafe Dual WAN Gigabit Firewall with router firmware update. For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in personal injury or death....
FVS336G Reference Manual
Page 15
Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN connects your local area network (LAN) to the Internet through one or two external broadband access devices such as cable modems or DSL modems. Dual wide area network (WAN) ports allow you to increase throughput to the ...resources. • Advanced IPsec and SSL VPN support. • Advanced stateful packet inspection (SPI) firewall with multi-NAT support. 1-1 v1.0, March 2009 The use of Gigabit Ethernet LAN and WAN ports ensures extremely high data transfer speeds The FVS336G is a plug-and-play device that ...
Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN connects your local area network (LAN) to the Internet through one or two external broadband access devices such as cable modems or DSL modems. Dual wide area network (WAN) ports allow you to increase throughput to the ...resources. • Advanced IPsec and SSL VPN support. • Advanced stateful packet inspection (SPI) firewall with multi-NAT support. 1-1 v1.0, March 2009 The use of Gigabit Ethernet LAN and WAN ports ensures extremely high data transfer speeds The FVS336G is a plug-and-play device that ...
FVS336G Reference Manual
Page 16
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of user repositories. 1-2 Introduction v1.0, March 2009 See "Network Planning for Dual WAN Ports" on the remote computer. - The firewall balances users between a central office and telecommuters. Advanced VPN Support for Both IPsec and...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of user repositories. 1-2 Introduction v1.0, March 2009 See "Network Planning for Dual WAN Ports" on the remote computer. - The firewall balances users between a central office and telecommuters. Advanced VPN Support for Both IPsec and...
FVS336G Reference Manual
Page 17
... traffic, port scans, attacks, and administrator logins. A Powerful, True Firewall with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can connect to make the right connection. Introduction 1-3 v1.0, March 2009... Mbps Fast Ethernet network, or a 1000 Mbps Gigabit Ethernet network. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual - You can configure the firewall to email the log to defend against hacker attacks. The four LAN and two WAN interfaces are autosensing and capable of service (DoS...
... traffic, port scans, attacks, and administrator logins. A Powerful, True Firewall with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can connect to make the right connection. Introduction 1-3 v1.0, March 2009... Mbps Fast Ethernet network, or a 1000 Mbps Gigabit Ethernet network. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual - You can configure the firewall to email the log to defend against hacker attacks. The four LAN and two WAN interfaces are autosensing and capable of service (DoS...
FVS336G Reference Manual
Page 18
...prioritization. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol...Management Interface. • Auto Detection of Attached PCs by simulating a dial-up connection. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the network. The following features simplify installation and management tasks:...
...prioritization. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol...Management Interface. • Auto Detection of Attached PCs by simulating a dial-up connection. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the network. The following features simplify installation and management tasks:...
FVS336G Reference Manual
Page 19
... resources from a remote location on the Internet. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your use of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions. Application Notes...
... resources from a remote location on the Internet. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your use of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions. Application Notes...
FVS336G Reference Manual
Page 20
... and Test, WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is described in the following table: Table 1-1. Writing to Flash memory (during upgrading or...
... and Test, WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is described in the following table: Table 1-1. Writing to Flash memory (during upgrading or...
FVS336G Reference Manual
Page 21
... Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with RJ-45 connectors. 4. WAN Ethernet ports: Two independent N-way automatic speed negotiating, Auto MDI/ MDIX, Gigabit Ethernet ports with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power .... On/off power switch. All configuration settings will be lost and the default password will be restored. 2. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. AC power receptacle: Universal AC input (100-240 VAC, 50-60 Hz). 6. Data...
... Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with RJ-45 connectors. 4. WAN Ethernet ports: Two independent N-way automatic speed negotiating, Auto MDI/ MDIX, Gigabit Ethernet ports with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power .... On/off power switch. All configuration settings will be lost and the default password will be restored. 2. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. AC power receptacle: Universal AC input (100-240 VAC, 50-60 Hz). 6. Data...
FVS336G Reference Manual
Page 22
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Note that supports ...JavaScript, Java, cookies, SSL, and ActiveX to take advantage of the full suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Note that supports ...JavaScript, Java, cookies, SSL, and ActiveX to take advantage of the full suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN...
FVS336G Reference Manual
Page 23
....netgear.com. 2. This chapter contains the following sections: • "Understanding the Connection Steps" on page 2-1 • "Logging into the VPN Firewall Router" on page 2-2. 3. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-18 Understanding the Connection Steps Typically, six steps are ready to your VPN firewall. A PDF of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN for Dual WAN...
....netgear.com. 2. This chapter contains the following sections: • "Understanding the Connection Steps" on page 2-1 • "Logging into the VPN Firewall Router" on page 2-2. 3. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-18 Understanding the Connection Steps Typically, six steps are ready to your VPN firewall. A PDF of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN for Dual WAN...