FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database 3-6 Changing...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database 3-6 Changing...
FVS336G Reference Manual
Page 16
Bundled with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - IPsec VPN with broad protocol support for a wide variety of user repositories. 1-2 Introduction v1.0, March 2009 Uses the ...configured on their computers. - See "Network Planning for Dual WAN Ports" on the remote computer. - Dual WAN Ports for firmware upgrade. • Internal universal switching power supply. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for...
Bundled with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - IPsec VPN with broad protocol support for a wide variety of user repositories. 1-2 Introduction v1.0, March 2009 Uses the ...configured on their computers. - See "Network Planning for Dual WAN Ports" on the remote computer. - Dual WAN Ports for firmware upgrade. • Internal universal switching power supply. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for...
FVS336G Reference Manual
Page 18
... the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). The VPN firewall automatically senses the type of Service (QoS) support for connecting remote hosts to share an Internet account using the Dynamic Host Configuration Protocol (DHCP). A user-friendly Setup...
... the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). The VPN firewall automatically senses the type of Service (QoS) support for connecting remote hosts to share an Internet account using the Dynamic Host Configuration Protocol (DHCP). A user-friendly Setup...
FVS336G Reference Manual
Page 32
... be inactivated. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN can be configured on a mutually exclusive basis for either auto-rollover (for increased system reliability) or load balancing (for Dual WAN) The dual WAN ports of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 9. Click Apply to save any changes to the WAN1 ISP Settings. (Or click Reset to additional setup and management tasks...
... be inactivated. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN can be configured on a mutually exclusive basis for either auto-rollover (for increased system reliability) or load balancing (for Dual WAN) The dual WAN ports of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 9. Click Apply to save any changes to the WAN1 ISP Settings. (Or click Reset to additional setup and management tasks...
FVS336G Reference Manual
Page 38
.... To use DDNS, you must setup an account with a DDNS provider such as exposed hosts and virtual private networks regardless of changes in advance what your IP address will not know in the WAN IP address, so that allows routers with SSL & IPsec VPN FVS336G Reference Manual • Address range. ProSafe Dual WAN Gigabit Firewall with varying public IP addresses...
.... To use DDNS, you must setup an account with a DDNS provider such as exposed hosts and virtual private networks regardless of changes in advance what your IP address will not know in the WAN IP address, so that allows routers with SSL & IPsec VPN FVS336G Reference Manual • Address range. ProSafe Dual WAN Gigabit Firewall with varying public IP addresses...
FVS336G Reference Manual
Page 44
...DHCP server somewhere else on your DHCP server. Configuring the LAN Setup Options The LAN IP Setup menu allows configuration of the ISP excluding the DNS Proxy IP address. The default values are using a dual WAN configuration with route diversity and failover. DHCP Relay options allow ... the router, in the DHCP Setup menu). • Lease Time (date obtained and duration of messages. The DHCP Relay Agent is therefore the routing protocol that do not support forwarding of these types of lease). ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • An IP...
...DHCP server somewhere else on your DHCP server. Configuring the LAN Setup Options The LAN IP Setup menu allows configuration of the ISP excluding the DNS Proxy IP address. The default values are using a dual WAN configuration with route diversity and failover. DHCP Relay options allow ... the router, in the DHCP Setup menu). • Lease Time (date obtained and duration of messages. The DHCP Relay Agent is therefore the routing protocol that do not support forwarding of these types of lease). ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • An IP...
FVS336G Reference Manual
Page 45
... of your network will be disconnected. In the DHCP section, select Enable or Disable DHCP Server. In the LAN TCP/IP Setup section, configure the following parameters: • Domain Name. (Optional) The DHCP will function as the subnet mask. 3. Note...of the firewall while connected through the browser, you will automatically calculate the subnet mask based on your VPN firewall (factory default: 192.168.1.1). Figure 3-1 2. For example, if you change the LAN IP address of an IP address. Unless you assign. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference ...
... of your network will be disconnected. In the DHCP section, select Enable or Disable DHCP Server. In the LAN TCP/IP Setup section, configure the following parameters: • Domain Name. (Optional) The DHCP will function as the subnet mask. 3. Note...of the firewall while connected through the browser, you will automatically calculate the subnet mask based on your VPN firewall (factory default: 192.168.1.1). Figure 3-1 2. For example, if you change the LAN IP address of an IP address. Unless you assign. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference ...
FVS336G Reference Manual
Page 46
...; Secondary DNS Server. (Optional) If an IP address is present in your settings. The VPN firewall will provide its LAN IP address unless you have completed the LAN setup, all outbound traffic is allowed and all inbound traffic is discarded. Specifies the first of the... This enables the DHCP server to save your network. Click Apply to provide LDAP server information. • Enable DNS Proxy. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Starting IP Address. The IP address 192.168.1.100 is enabled (the default), the DHCP server will ...
...; Secondary DNS Server. (Optional) If an IP address is present in your settings. The VPN firewall will provide its LAN IP address unless you have completed the LAN setup, all outbound traffic is allowed and all inbound traffic is discarded. Specifies the first of the... This enables the DHCP server to save your network. Click Apply to provide LDAP server information. • Enable DNS Proxy. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Starting IP Address. The IP address 192.168.1.100 is enabled (the default), the DHCP server will ...
FVS336G Reference Manual
Page 48
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • A computer is identified by an asterisk. • IP Address. Select Network Configuration > LAN Settings from the Group pull-down menu. • Action. The LAN Setup tab displays. 2. Figure 3-2 The Known PCs and Devices table lists the entries in the LAN Groups Database... Name. The current IP address of the PC's network interface. • Group. For computers that PC. For DHCP clients of the VPN firewall, this will be listed as "Unknown" (you will need to add a meaningful name).
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • A computer is identified by an asterisk. • IP Address. Select Network Configuration > LAN Settings from the Group pull-down menu. • Action. The LAN Setup tab displays. 2. Figure 3-2 The Known PCs and Devices table lists the entries in the LAN Groups Database... Name. The current IP address of the PC's network interface. • Group. For computers that PC. For DHCP clients of the VPN firewall, this will be listed as "Unknown" (you will need to add a meaningful name).
FVS336G Reference Manual
Page 89
... the setup procedure with a series of questions that promotes multi-vendor VPN interoperability. The parameters used by the VPN wizard are based on both sides of the VPN Consortium (VPNC), an organization that will also set up . Select VPN > IPsec VPN > VPN Wizard to configure multiple gateway or client VPN tunnel policies. You can be a daunting task. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G...
... the setup procedure with a series of questions that promotes multi-vendor VPN interoperability. The parameters used by the VPN wizard are based on both sides of the VPN Consortium (VPNC), an organization that will also set up . Select VPN > IPsec VPN > VPN Wizard to configure multiple gateway or client VPN tunnel policies. You can be a daunting task. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G...
FVS336G Reference Manual
Page 101
...setup identifies both the VPN policy and IKE policy. The name you use the VPN Wizard to remember that some traffic matches an existing VPN policy. You can edit existing policies, or add new VPN and IKE policies directly in separate policy tables. If the VPN policy is important to set up a VPN tunnel, a VPN... specify which IKE Policy to Monitoring > VPNLogs. Virtual Private Networking Using IPsec v1.0, March 2009 5-15 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual To view FVS336G VPN logs, go to use the IKE negotiation protocol. It is of the...
...setup identifies both the VPN policy and IKE policy. The name you use the VPN Wizard to remember that some traffic matches an existing VPN policy. You can edit existing policies, or add new VPN and IKE policies directly in separate policy tables. If the VPN policy is important to set up a VPN tunnel, a VPN... specify which IKE Policy to Monitoring > VPNLogs. Virtual Private Networking Using IPsec v1.0, March 2009 5-15 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual To view FVS336G VPN logs, go to use the IKE negotiation protocol. It is of the...
FVS336G Reference Manual
Page 142
... 1. Click Add. b. Select from the main menu. ProSafe Dual WAN Gigabit Firewall with that group. 7-4 Managing Users, Authentication, and Certificates...that is associated with SSL & IPsec VPN FVS336G Reference Manual c. User Type. Select either Administrator, SSL VPN User, or IPsec VPN User. For an Administrator, this ...is displayed. Select Users > Users from a list of configured groups. The user will display. . The Users screen will be automatically logged out of Groups, ready for use in user account setup...
... 1. Click Add. b. Select from the main menu. ProSafe Dual WAN Gigabit Firewall with that group. 7-4 Managing Users, Authentication, and Certificates...that is associated with SSL & IPsec VPN FVS336G Reference Manual c. User Type. Select either Administrator, SSL VPN User, or IPsec VPN User. For an Administrator, this ...is displayed. Select Users > Users from a list of configured groups. The user will display. . The Users screen will be automatically logged out of Groups, ready for use in user account setup...
FVS336G Reference Manual
Page 182
This will change if you entered in the LAN IP Setup page. DHCP can be either Server or None. 9-8 Monitoring System Performance v1.0, March 2009 This is the current software the router is the Account Name that you set in the Basic Settings page. Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you upgrade your router. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 9-3 The following information is displayed: Item System Name Firmware Version LAN Port Description This is using.
This will change if you entered in the LAN IP Setup page. DHCP can be either Server or None. 9-8 Monitoring System Performance v1.0, March 2009 This is the current software the router is the Account Name that you set in the Basic Settings page. Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you upgrade your router. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 9-3 The following information is displayed: Item System Name Firmware Version LAN Port Description This is using.
FVS336G Reference Manual
Page 184
... and click Add to manually add a device to DHCP client requests from the main menu, and then select the LAN Groups tab. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual . The scan will be shown as ARP. The local network is enabled, and will display. 2. To view the LAN...and other LAN devices become known by the following methods: • DHCP Client Requests. By default, the DHCP server in the LAN Setup menu) is an automatically-maintained list of LAN-attached devices. The LAN Groups screen will accept and respond to the database. 9-10 ...
... and click Add to manually add a device to DHCP client requests from the main menu, and then select the LAN Groups tab. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual . The scan will be shown as ARP. The local network is enabled, and will display. 2. To view the LAN...and other LAN devices become known by the following methods: • DHCP Client Requests. By default, the DHCP server in the LAN Setup menu) is an automatically-maintained list of LAN-attached devices. The LAN Groups screen will accept and respond to the database. 9-10 ...
FVS336G Reference Manual
Page 186
... The Active Users menu screen displays a list of the tabs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, click refresh. Select Network Configuration > LAN Settings from the main menu, and then click the LAN Setup tab. Figure 9-7 3. The DHCP Log appears in the DHCP log...
... The Active Users menu screen displays a list of the tabs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, click refresh. Select Network Configuration > LAN Settings from the main menu, and then click the LAN Setup tab. Figure 9-7 3. The DHCP Log appears in the DHCP log...
FVS336G Reference Manual
Page 236
... 5-19 Inbound Rules default definition 4-2 field descriptions 4-6 order of 4-12 LAN WAN Rules default outbound 4-8 lease time 3-4 LEDs Index-4 v1.0, March 2009 See ISP. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual ModeConfig, configuring with 5-25 XAUTH, adding to assign 3-1 multi home...3-6 LAN Security Checks 4-18 LAN Setup screen 3-3 LAN side bandwidth capacity 8-1 LAN WAN Inbound Rule example of 4-11, 4-12, 4-13 LAN WAN Inbound Services Rules about 4-10 add 4-10 LAN WAN Outbound Rule example of 4-14 LAN WAN Rule example of precedence 4-8 Port ...
... 5-19 Inbound Rules default definition 4-2 field descriptions 4-6 order of 4-12 LAN WAN Rules default outbound 4-8 lease time 3-4 LEDs Index-4 v1.0, March 2009 See ISP. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual ModeConfig, configuring with 5-25 XAUTH, adding to assign 3-1 multi home...3-6 LAN Security Checks 4-18 LAN Setup screen 3-3 LAN side bandwidth capacity 8-1 LAN WAN Inbound Rule example of 4-11, 4-12, 4-13 LAN WAN Inbound Services Rules about 4-10 add 4-10 LAN WAN Outbound Rule example of 4-14 LAN WAN Rule example of precedence 4-8 Port ...
FVS336G Reference Manual
Page 240
...with 4-2 stateful packet inspection. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL VPN Logs 9-16 Starting IP Address DHCP Address Pool 3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic... your setup 10-6 Web configuration 10-3 Trusted Certificates 7-11, 7-12 two-factor authentication WiKID 7-10 TZO.com 2-16 U UDP flood 4-18 special rule 8-6 User Database 5-20 User Policies 6-15 V view protocol bindings Load Balancing 2-15 VPN gateway to...
...with 4-2 stateful packet inspection. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL VPN Logs 9-16 Starting IP Address DHCP Address Pool 3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic... your setup 10-6 Web configuration 10-3 Trusted Certificates 7-11, 7-12 two-factor authentication WiKID 7-10 TZO.com 2-16 U UDP flood 4-18 special rule 8-6 User Database 5-20 User Policies 6-15 V view protocol bindings Load Balancing 2-15 VPN gateway to...
FVS336G Reference Manual
Page 241
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual telecommuter, about C-17 telecommuter, Dual gateway C-18 telecommuter, single gateway C-17 VPN Client configuring 5-6 VPN firewall connecting 2-1 VPN Logs screen 9-15 VPN passthrough 4-18, 8-6 VPN Policies screen 5-5, 5-8 VPN Policy Auto 5-17 Manual 5-17 VPN Tunnel addresses Dual WAN Port systems 5-2 VPN Tunnel Connection monitoring status 9-14 VPN tunnels about 5-1 increasing traffic 8-7 load balancing mode 5-2 rollover mode 5-2 VPN Wizard Gateway tunnel 5-3 VPN Client...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual telecommuter, about C-17 telecommuter, Dual gateway C-18 telecommuter, single gateway C-17 VPN Client configuring 5-6 VPN firewall connecting 2-1 VPN Logs screen 9-15 VPN passthrough 4-18, 8-6 VPN Policies screen 5-5, 5-8 VPN Policy Auto 5-17 Manual 5-17 VPN Tunnel addresses Dual WAN Port systems 5-2 VPN Tunnel Connection monitoring status 9-14 VPN tunnels about 5-1 increasing traffic 8-7 load balancing mode 5-2 rollover mode 5-2 VPN Wizard Gateway tunnel 5-3 VPN Client...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Network Address Translation 2-12 Classical Routing 2-12 Configuring Auto-Rollover Mode 2-13 Configuring Load Balancing 2-15 Configuring Dynamic DNS (Optional 2-17 Configuring the Advanced WAN Options (Optional 2-19 Additional WAN Related Configuration 2-21 Chapter 3 LAN Configuration Using the VPN Firewall as a DHCP server 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Network Address Translation 2-12 Classical Routing 2-12 Configuring Auto-Rollover Mode 2-13 Configuring Load Balancing 2-15 Configuring Dynamic DNS (Optional 2-17 Configuring the Advanced WAN Options (Optional 2-19 Additional WAN Related Configuration 2-21 Chapter 3 LAN Configuration Using the VPN Firewall as a DHCP server 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts...
FVS336G Reference Manual
Page 18
... with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - Dual WAN Ports for secure connection to other IPsec gateways and clients. - See "Network Planning for Dual WAN Ports" on page C-1 for the planning...VPN client on the remote computer. - The firewall balances users between a central office and telecommuters. IPsec VPN with broad protocol support for Increased Reliability or Outbound Load Balancing The FVS336G has two broadband WAN ports. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup...
... with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - Dual WAN Ports for secure connection to other IPsec gateways and clients. - See "Network Planning for Dual WAN Ports" on page C-1 for the planning...VPN client on the remote computer. - The firewall balances users between a central office and telecommuters. IPsec VPN with broad protocol support for Increased Reliability or Outbound Load Balancing The FVS336G has two broadband WAN ports. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup...