FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 7
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client ...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager ... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager ... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering ...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
FVS336G Reference Manual
Page 13
... intended for readers with SSL & IPsec VPN. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. Conventions, Formats, and Scope The conventions, formats, and scope of this manual are described in a malfunction or damage to the equipment...
... intended for readers with SSL & IPsec VPN. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. Conventions, Formats, and Scope The conventions, formats, and scope of this manual are described in a malfunction or damage to the equipment...
FVS336G Reference Manual
Page 14
... & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 October First publication 2007 November Text corrections 2007 June 2008 Updated to the NETGEAR website in personal injury or death. ProSafe Dual WAN Gigabit Firewall with router firmware...
... & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 October First publication 2007 November Text corrections 2007 June 2008 Updated to the NETGEAR website in personal injury or death. ProSafe Dual WAN Gigabit Firewall with router firmware...
FVS336G Reference Manual
Page 16
...NETGEAR ProSafe VPN Client software (VPN01L) - Uses the familiar Secure Sockets Layer (SSL) protocol, commonly used for e-commerce transactions, to provide client-free access with customizable user portals and support for secure connection to other IPsec gateways and clients. - See "Network Planning for Dual WAN...network access between a central office and branch offices, or between a central office and telecommuters. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for...
...NETGEAR ProSafe VPN Client software (VPN01L) - Uses the familiar Secure Sockets Layer (SSL) protocol, commonly used for e-commerce transactions, to provide client-free access with customizable user portals and support for secure connection to other IPsec gateways and clients. - See "Network Planning for Dual WAN...network access between a central office and branch offices, or between a central office and telecommuters. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for...
FVS336G Reference Manual
Page 17
ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to defend against hacker attacks. A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - You can configure the firewall to email the log ...Autosensing Ethernet Connections with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can configure the firewall to log and report attempts to access objectionable Internet sites. • Permits scheduling of ...
ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to defend against hacker attacks. A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - You can configure the firewall to email the log ...Autosensing Ethernet Connections with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can configure the firewall to log and report attempts to access objectionable Internet sites. • Permits scheduling of ...
FVS336G Reference Manual
Page 18
... NAT. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). The VPN firewall automatically senses the type of personal computer, such as EnterNet or WinPOET...
... NAT. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). The VPN firewall automatically senses the type of personal computer, such as EnterNet or WinPOET...
FVS336G Reference Manual
Page 19
... system configuration lets you maximize your product. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. For security, you can limit remote...
... system configuration lets you maximize your product. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. For security, you can limit remote...
FVS336G Reference Manual
Page 20
..., WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. Test mode: The system is in case you need to the VPN... Internet connection is down or not being transmitted or received by the WAN port. The LAN port is either not enabled or has no link. 1-6 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is operating at 1,000 Mbps. Keep ...
..., WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. Test mode: The system is in case you need to the VPN... Internet connection is down or not being transmitted or received by the WAN port. The LAN port is either not enabled or has no link. 1-6 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is operating at 1,000 Mbps. Keep ...
FVS336G Reference Manual
Page 21
... switch. The LAN port is being transmitted or received by the WAN port. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. Data is operating at 10 Mbps. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an...
... switch. The LAN port is being transmitted or received by the WAN port. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. Data is operating at 10 Mbps. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an...
FVS336G Reference Manual
Page 22
...suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with JavaScript, cookies, and SSL enabled. Although these web ... or Mozilla Firefox l.x Web browser with the VPN firewall's Web Management Interface for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location ...
...suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with JavaScript, cookies, and SSL enabled. Although these web ... or Mozilla Firefox l.x Web browser with the VPN firewall's Web Management Interface for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location ...
FVS336G Reference Manual
Page 24
... DHCP. For instructions on page 2-18. To connect and log in the address field. Configure dynamic DNS on the WAN ports (optional). Figure 2-1 3. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. However, these steps: 1. Enter https://192.168.1.1 in to a ping, and you can change the factory default MTU size and port speed. In...
... DHCP. For instructions on page 2-18. To connect and log in the address field. Configure dynamic DNS on the WAN ports (optional). Figure 2-1 3. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. However, these steps: 1. Enter https://192.168.1.1 in to a ping, and you can change the factory default MTU size and port speed. In...
FVS336G Reference Manual
Page 25
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Click Login. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Click Login. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009
FVS336G Reference Manual
Page 26
..., containing subcategories of the menu active window, are one or more blue dots with SSL & IPsec VPN FVS336G Reference Manual • Main menu. The Web Configuration Manager offers two connection configuration options: • Automatic detection and configuration of ... the network connection. Clicking an option arrow brings up your VPN firewall for secure Internet connections, you configure WAN ports 1 and 2. ProSafe Dual WAN Gigabit Firewall with an arrow in the sections following. 2-4 Connecting the FVS336G to the Internet v1.0, March 2009 Configuring the Internet Connections To ...
..., containing subcategories of the menu active window, are one or more blue dots with SSL & IPsec VPN FVS336G Reference Manual • Main menu. The Web Configuration Manager offers two connection configuration options: • Automatic detection and configuration of ... the network connection. Clicking an option arrow brings up your VPN firewall for secure Internet connections, you configure WAN ports 1 and 2. ProSafe Dual WAN Gigabit Firewall with an arrow in the sections following. 2-4 Connecting the FVS336G to the Internet v1.0, March 2009 Configuring the Internet Connections To ...
FVS336G Reference Manual
Page 27
Auto Detect will probe the WAN port for connection to the Internet: Figure 2-3 1. Click Auto Detect at the bottom of connection methods and suggest one that your ISP appears to the Internet 2-5 v1.0, March 2009 The WAN Settings tabs appear, with SSL & IPsec VPN FVS336G Reference Manual Automatically Detecting and Connecting To automatically configure the WAN ports for a range of the menu. Figure 2-4 Connecting the FVS336G to support. ProSafe Dual WAN Gigabit Firewall with the WAN1 ISP Settings tab in view. 2. Select Network Configuration > WAN Settings from the menu.
Auto Detect will probe the WAN port for connection to the Internet: Figure 2-3 1. Click Auto Detect at the bottom of connection methods and suggest one that your ISP appears to the Internet 2-5 v1.0, March 2009 The WAN Settings tabs appear, with SSL & IPsec VPN FVS336G Reference Manual Automatically Detecting and Connecting To automatically configure the WAN ports for a range of the menu. Figure 2-4 Connecting the FVS336G to support. ProSafe Dual WAN Gigabit Firewall with the WAN1 ISP Settings tab in view. 2. Select Network Configuration > WAN Settings from the menu.