FVS336G Reference Manual
Page 7
...History ...xiv Chapter 1 Introduction Key Features ...1-1 Dual WAN Ports for Increased Reliability or Outbound Load Balancing 1-2 Advanced VPN Support for Both IPsec and SSL 1-2 A Powerful, True Firewall with Content Filtering 1-3 Autosensing Ethernet Connections with Auto...the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN ...
...History ...xiv Chapter 1 Introduction Key Features ...1-1 Dual WAN Ports for Increased Reliability or Outbound Load Balancing 1-2 Advanced VPN Support for Both IPsec and SSL 1-2 A Powerful, True Firewall with Content Filtering 1-3 Autosensing Ethernet Connections with Auto...the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN ...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database 3-6 Changing Group Names in the LAN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database 3-6 Changing Group Names in the LAN...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for Client and Gateway...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for Client and Gateway...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes ... Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify Policies 6-13 Adding New Network Resources 6-13 Configuring User, Group, and Global Policies 6-15 Viewing Policies ...6-16 Adding a Policy ...6-17 Chapter 7 Managing Users, Authentication...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes ... Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify Policies 6-13 Adding New Network Resources 6-13 Configuring User, Group, and Global Policies 6-15 Viewing Policies ...6-16 Adding a Policy ...6-17 Chapter 7 Managing Users, Authentication...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File Management 8-15 Upgrading the Firmware 8-17 Configuring Date... Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File Management 8-15 Upgrading the Firmware 8-17 Configuring Date... Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring ...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet Configuration Requirements C-3 Where Do I Get the Internet Configuration...the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet Configuration Requirements C-3 Where Do I Get the Internet Configuration...the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
FVS336G Reference Manual
Page 13
... special messages: Note: This format is intended for readers with SSL & IPsec VPN. Warning: Ignoring this manual is used to highlight a procedure that will save time or resources. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills.
... special messages: Note: This format is intended for readers with SSL & IPsec VPN. Warning: Ignoring this manual is used to highlight a procedure that will save time or resources. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills.
FVS336G Reference Manual
Page 14
... NETGEAR, Inc. ProSafe Dual WAN Gigabit Firewall with router firmware update. Failure to the NETGEAR website in personal injury or death. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 October First publication 2007 November Text corrections 2007 June 2008 Updated to align with SSL & IPsec VPN FVS336G...
... NETGEAR, Inc. ProSafe Dual WAN Gigabit Firewall with router firmware update. Failure to the NETGEAR website in personal injury or death. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 October First publication 2007 November Text corrections 2007 June 2008 Updated to align with SSL & IPsec VPN FVS336G...
FVS336G Reference Manual
Page 15
... Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for load balancing or failover protection of your network, while providing advanced IPsec and SSL VPN ...configured within minutes. The use of your primary Internet connection. As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in four-port 10/100/1000 Mbps Gigabit Ethernet LAN switch for secure and simple remote connections. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall...
... Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for load balancing or failover protection of your network, while providing advanced IPsec and SSL VPN ...configured within minutes. The use of your primary Internet connection. As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in four-port 10/100/1000 Mbps Gigabit Ethernet LAN switch for secure and simple remote connections. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall...
FVS336G Reference Manual
Page 16
...FVS336G has two broadband WAN ports. Remote access by telecommuters requires the installation of the NETGEAR ProSafe VPN Client software (VPN01L) - Supports 25 concurrent IPsec...Support for maximum bandwidth efficiency. See "Network Planning for Dual WAN Ports" on their computers. - ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for ...configured on the remote computer. - IPsec VPN with the single-user license of VPN client software on a mutually-exclusive basis to other IPsec gateways and clients. - Dual WAN...
...FVS336G has two broadband WAN ports. Remote access by telecommuters requires the installation of the NETGEAR ProSafe VPN Client software (VPN01L) - Supports 25 concurrent IPsec...Support for maximum bandwidth efficiency. See "Network Planning for Dual WAN Ports" on their computers. - ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for ...configured on the remote computer. - IPsec VPN with the single-user license of VPN client software on a mutually-exclusive basis to other IPsec gateways and clients. - Dual WAN...
FVS336G Reference Manual
Page 17
.... Autosensing Ethernet Connections with SSL & IPsec VPN FVS336G Reference Manual - That port will accommodate either a 10 Mbps standard Ethernet network, a 100 Mbps Fast Ethernet network, or a 1000 Mbps Gigabit Ethernet network. You can configure the firewall to email the log to access objectionable... or email pager whenever a significant event occurs. ProSafe Dual WAN Gigabit Firewall with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can also configure the firewall to send immediate alert messages to Internet locations or...
.... Autosensing Ethernet Connections with SSL & IPsec VPN FVS336G Reference Manual - That port will accommodate either a 10 Mbps standard Ethernet network, a 100 Mbps Fast Ethernet network, or a 1000 Mbps Gigabit Ethernet network. You can configure the firewall to email the log to access objectionable... or email pager whenever a significant event occurs. ProSafe Dual WAN Gigabit Firewall with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can also configure the firewall to send immediate alert messages to Internet locations or...
FVS336G Reference Manual
Page 18
... many networked PCs to share an Internet account using the Dynamic Host Configuration Protocol (DHCP). Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). The VPN...
... many networked PCs to share an Internet account using the Dynamic Host Configuration Protocol (DHCP). Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). The VPN...
FVS336G Reference Manual
Page 19
... one user license. • Warranty and Support Information Card. The VPN firewall includes the NETGEAR VPN Wizard to easily configure IPsec VPN tunnels according to the Web Management Interface from an SNMP-compliant system manager. The .... Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual •...
... one user license. • Warranty and Support Information Card. The VPN firewall includes the NETGEAR VPN Wizard to easily configure IPsec VPN tunnels according to the Web Management Interface from an SNMP-compliant system manager. The .... Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual •...
FVS336G Reference Manual
Page 21
...All configuration settings will be lost and the default password will be restored. 2. AC power receptacle: Universal AC input (100-240 VAC, 50-60 Hz). 6. On/off power switch. Data is operating at 100 Mbps. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with...operating at 1,000 Mbps. The LAN port is operating at 10 Mbps. The WAN port has detected a link with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. WAN Ethernet ports: Two independent N-way automatic speed negotiating, Auto MDI/ MDIX, Gigabit Ethernet ports with RJ-45 connectors. 4. The...
...All configuration settings will be lost and the default password will be restored. 2. AC power receptacle: Universal AC input (100-240 VAC, 50-60 Hz). 6. On/off power switch. Data is operating at 100 Mbps. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with...operating at 1,000 Mbps. The LAN port is operating at 10 Mbps. The WAN port has detected a link with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. WAN Ethernet ports: Two independent N-way automatic speed negotiating, Auto MDI/ MDIX, Gigabit Ethernet ports with RJ-45 connectors. 4. The...
FVS336G Reference Manual
Page 22
...suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with JavaScript, cookies, and SSL enabled. Although these web browsers are... or Mozilla Firefox l.x Web browser with the VPN firewall's Web Management Interface for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password...
...suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with JavaScript, cookies, and SSL enabled. Although these web browsers are... or Mozilla Firefox l.x Web browser with the VPN firewall's Web Management Interface for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password...
FVS336G Reference Manual
Page 23
... time. A PDF of the Installation Guide is described in the installation guide. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at: http://kbserver.netgear.com. 2. After logging in to the VPN Firewall. See "Configuring the Internet Connections" on page 2-4. 4. You can also select any necessary protocol bindings. Log in , you...
... time. A PDF of the Installation Guide is described in the installation guide. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at: http://kbserver.netgear.com. 2. After logging in to the VPN Firewall. See "Configuring the Internet Connections" on page 2-4. 4. You can also select any necessary protocol bindings. Log in , you...
FVS336G Reference Manual
Page 24
... https://192.168.1.1 in the browser. See "Configuring Dynamic DNS (Optional)" on how to configure your computer needs to be configured to obtain an IP address automatically from the VPN firewall by DHCP. To connect and log in Appendix B, "Related Documents. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Configure your fully qualified domain names during this chapter...
... https://192.168.1.1 in the browser. See "Configuring Dynamic DNS (Optional)" on how to configure your computer needs to be configured to obtain an IP address automatically from the VPN firewall by DHCP. To connect and log in Appendix B, "Related Documents. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Configure your fully qualified domain names during this chapter...
FVS336G Reference Manual
Page 25
The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Click Login.
The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Click Login.
FVS336G Reference Manual
Page 26
ProSafe Dual WAN Gigabit Firewall with an arrow in the center. Clicking on a primary category changes the contents of the tabs on some menus are one or more tabs, further subdividing the currently selected subcategory if necessary. • Option arrow. To the right of the submenu bar. • Submenu. The Web Configuration Manager offers two connection configuration options...
ProSafe Dual WAN Gigabit Firewall with an arrow in the center. Clicking on a primary category changes the contents of the tabs on some menus are one or more tabs, further subdividing the currently selected subcategory if necessary. • Option arrow. To the right of the submenu bar. • Submenu. The Web Configuration Manager offers two connection configuration options...
FVS336G Reference Manual
Page 27
Click Auto Detect at the bottom of connection methods and suggest one that your ISP appears to support. Auto Detect will probe the WAN port for connection to the Internet 2-5 v1.0, March 2009 Figure 2-4 Connecting the FVS336G to the Internet: Figure 2-3 1. ProSafe Dual WAN Gigabit Firewall with the WAN1 ISP Settings tab in view. 2. Select Network Configuration > WAN Settings from the menu. The WAN Settings tabs appear, with SSL & IPsec VPN FVS336G Reference Manual Automatically Detecting and Connecting To automatically configure the WAN ports for a range of the menu.
Click Auto Detect at the bottom of connection methods and suggest one that your ISP appears to support. Auto Detect will probe the WAN port for connection to the Internet 2-5 v1.0, March 2009 Figure 2-4 Connecting the FVS336G to the Internet: Figure 2-3 1. ProSafe Dual WAN Gigabit Firewall with the WAN1 ISP Settings tab in view. 2. Select Network Configuration > WAN Settings from the menu. The WAN Settings tabs appear, with SSL & IPsec VPN FVS336G Reference Manual Automatically Detecting and Connecting To automatically configure the WAN ports for a range of the menu.