FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 7
... History ...xiv Chapter 1 Introduction Key Features ...1-1 Dual WAN Ports for Increased Reliability or Outbound Load Balancing 1-2 Advanced VPN Support for Both IPsec and SSL 1-2 A Powerful, True Firewall with Content Filtering 1-3 Autosensing Ethernet Connections with Auto...FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN...
... History ...xiv Chapter 1 Introduction Key Features ...1-1 Dual WAN Ports for Increased Reliability or Outbound Load Balancing 1-2 Advanced VPN Support for Both IPsec and SSL 1-2 A Powerful, True Firewall with Content Filtering 1-3 Autosensing Ethernet Connections with Auto...FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring ... Network Management Performance Management 8-1 Bandwidth Capacity 8-1 Features That Reduce Traffic 8-2 Features That Increase Traffic 8-5 Using QoS to Shift the Traffic Mix 8-8 Tools for Traffic Management 8-8 x v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring ... Network Management Performance Management 8-1 Bandwidth Capacity 8-1 Features That Reduce Traffic 8-2 Features That Increase Traffic 8-5 Using QoS to Shift the Traffic Mix 8-8 Tools for Traffic Management 8-8 x v1.0, March 2009
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G... Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the ...10-1 Power LED Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP...IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device 10-6 Restoring ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G... Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the ...10-1 Power LED Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP...IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device 10-6 Restoring ...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to... The Roll-over Case for Firewalls With Dual WAN Ports C-7 The Load Balancing Case for Firewalls With Dual WAN Ports C-7 Inbound Traffic ...C-8 Inbound Traffic to Single WAN Port (Reference Case C-8 Inbound Traffic to Dual WAN Port Systems C-8 Virtual Private ... What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to... The Roll-over Case for Firewalls With Dual WAN Ports C-7 The Load Balancing Case for Firewalls With Dual WAN Ports C-7 Inbound Traffic ...C-8 Inbound Traffic to Single WAN Port (Reference Case C-8 Inbound Traffic to Dual WAN Port Systems C-8 Virtual Private ... What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii...
FVS336G Reference Manual
Page 13
... addresses, GUI screen text Command prompt, CLI text, code URL links • Formats. xiii v1.0, March 2009 About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. The information in the following formats to highlight special...
... addresses, GUI screen text Command prompt, CLI text, code URL links • Formats. xiii v1.0, March 2009 About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. The information in the following formats to highlight special...
FVS336G Reference Manual
Page 14
ProSafe Dual WAN Gigabit Firewall with router firmware update. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 October First publication 2007 November Text corrections 2007 June 2008 Updated to align with SSL & IPsec VPN FVS336G...; Update the Certificate management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 Note: Product updates are available on the NETGEAR, Inc. For more information about network, Internet, firewall, and VPN technologies, see the links to take heed...
ProSafe Dual WAN Gigabit Firewall with router firmware update. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 October First publication 2007 November Text corrections 2007 June 2008 Updated to align with SSL & IPsec VPN FVS336G...; Update the Certificate management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 Note: Product updates are available on the NETGEAR, Inc. For more information about network, Internet, firewall, and VPN technologies, see the links to take heed...
FVS336G Reference Manual
Page 15
... IPsec and SSL VPN technologies for secure and simple remote connections. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009 As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in four-port 10/100/1000 Mbps Gigabit Ethernet LAN switch for load balancing or failover protection of...
... IPsec and SSL VPN technologies for secure and simple remote connections. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009 As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in four-port 10/100/1000 Mbps Gigabit Ethernet LAN switch for load balancing or failover protection of...
FVS336G Reference Manual
Page 16
... remote access for maximum bandwidth efficiency. Bundled with the single-user license of user repositories. 1-2 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs ...power supply. Advanced VPN Support for a wide variety of the NETGEAR ProSafe VPN Client software (VPN01L) - IPsec VPN with customizable user portals and support for Both IPsec and SSL The VPN firewall supports IPsec and SSL virtual private network (VPN) connections. ...
... remote access for maximum bandwidth efficiency. Bundled with the single-user license of user repositories. 1-2 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs ...power supply. Advanced VPN Support for a wide variety of the NETGEAR ProSafe VPN Client software (VPN01L) - IPsec VPN with customizable user portals and support for Both IPsec and SSL The VPN firewall supports IPsec and SSL virtual private network (VPN) connections. ...
FVS336G Reference Manual
Page 17
...and dual 10/100/1000 WAN ports, the FVS336G can configure the firewall to email the log to you specify as blocked incoming traffic, port scans, attacks, and administrator logins. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall,...Internet locations or services that you at specified intervals. Introduction 1-3 v1.0, March 2009 You can control access to corporate resources based upon user type or group membership. - Its firewall features include: • Automatically detects and thwarts denial of service...
...and dual 10/100/1000 WAN ports, the FVS336G can configure the firewall to email the log to you specify as blocked incoming traffic, port scans, attacks, and administrator logins. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall,...Internet locations or services that you at specified intervals. Introduction 1-3 v1.0, March 2009 You can control access to corporate resources based upon user type or group membership. - Its firewall features include: • Automatically detects and thwarts denial of service...
FVS336G Reference Manual
Page 18
...address as EnterNet or WinPOET on page C-3. • IP Address Sharing by your firewall from the LAN. • PPP over a DSL connection by DHCP. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to easily configure your ...v1.0, March 2009 The VPN firewall automatically senses the type of ISP. This technique, known as Windows, Macintosh, or Linux. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall...
...address as EnterNet or WinPOET on page C-3. • IP Address Sharing by your firewall from the LAN. • PPP over a DSL connection by DHCP. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to easily configure your ...v1.0, March 2009 The VPN firewall automatically senses the type of ISP. This technique, known as Windows, Macintosh, or Linux. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall...
FVS336G Reference Manual
Page 19
... & IPsec VPN. • Resource CD, including: - Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your use of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions. one...
... & IPsec VPN. • Resource CD, including: - Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your use of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions. one...
FVS336G Reference Manual
Page 20
..., WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. SPEED LINK/ACT (Link and Activity) Off On (Green) On (Amber) Off On (.... 1-6 Introduction v1.0, March 2009 Test mode: The system is operating at 100 Mbps. Power is not supplied to return the firewall for failover. The LAN port is initializing or the initialization has failed. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If...
..., WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. SPEED LINK/ACT (Link and Activity) Off On (Green) On (Amber) Off On (.... 1-6 Introduction v1.0, March 2009 Test mode: The system is operating at 100 Mbps. Power is not supplied to return the firewall for failover. The LAN port is initializing or the initialization has failed. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If...
FVS336G Reference Manual
Page 21
...1-2 Viewed from left to factory default settings. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with RJ-45 connectors. 4. On/off power switch. Introduction 1-7 v1.0, March 2009 All configuration settings will be lost and the default password will be restored. ...The LAN port is being transmitted or received by the WAN port. LAN Ethernet ports: Four switched N-way automatic speed negotiating, Auto MDI/MDIX, Gigabit Ethernet ports with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. The WAN port has detected a link with a connected Ethernet device...
...1-2 Viewed from left to factory default settings. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with RJ-45 connectors. 4. On/off power switch. Introduction 1-7 v1.0, March 2009 All configuration settings will be lost and the default password will be restored. ...The LAN port is being transmitted or received by the WAN port. LAN Ethernet ports: Four switched N-way automatic speed negotiating, Auto MDI/MDIX, Gigabit Ethernet ports with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. The WAN port has detected a link with a connected Ethernet device...
FVS336G Reference Manual
Page 22
...Firefox l.x Web browser with JavaScript, cookies, and SSL enabled. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Note that ...User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with the VPN firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is ...
...Firefox l.x Web browser with JavaScript, cookies, and SSL enabled. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Note that ...User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with the VPN firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is ...
FVS336G Reference Manual
Page 23
...WAN mode (required for Dual WAN)" on page 2-10 • "Configuring Dynamic DNS (Optional)" on page 2-16 • "Configuring the Advanced WAN Options (Optional)" on page 2-10. 2-1 v1.0, March 2009 Connect the cables and restart your network according to the instructions in , you will connect to the VPN Firewall. See "Logging into the VPN Firewall...on page 2-1 • "Logging into the VPN Firewall Router" on page 2-4. 4. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at this chapter. A PDF of the Installation...
...WAN mode (required for Dual WAN)" on page 2-10 • "Configuring Dynamic DNS (Optional)" on page 2-16 • "Configuring the Advanced WAN Options (Optional)" on page 2-10. 2-1 v1.0, March 2009 Connect the cables and restart your network according to the instructions in , you will connect to the VPN Firewall. See "Logging into the VPN Firewall...on page 2-1 • "Logging into the VPN Firewall Router" on page 2-4. 4. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at this chapter. A PDF of the Installation...
FVS336G Reference Manual
Page 24
...the qualified browsers, as detailed in to the Internet v1.0, March 2009 In the User field, type admin 4. Configure the WAN options (optional). Optionally, you can enable each WAN port to respond to the VPN firewall, your fully qualified domain names during this chapter.... required. The configuration of these are in the address field. For instructions on page 2-18. Figure 2-1 3. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Configure your computer needs to be configured to the link in later chapters. See "Configuring Dynamic...
...the qualified browsers, as detailed in to the Internet v1.0, March 2009 In the User field, type admin 4. Configure the WAN options (optional). Optionally, you can enable each WAN port to respond to the VPN firewall, your fully qualified domain names during this chapter.... required. The configuration of these are in the address field. For instructions on page 2-18. Figure 2-1 3. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Configure your computer needs to be configured to the link in later chapters. See "Configuring Dynamic...
FVS336G Reference Manual
Page 25
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Click Login. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Click Login. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009