FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 7
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client ...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager ... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager ... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering ...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
FVS336G Reference Manual
Page 13
...skills. Conventions, Formats, and Scope The conventions, formats, and scope of this manual is used to highlight information of note may result in the following typographical conventions...manual are described in a malfunction or damage to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. Warning: Ignoring this type of importance or special interest. This manual uses the following paragraphs: • Typographical Conventions. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual...
...skills. Conventions, Formats, and Scope The conventions, formats, and scope of this manual is used to highlight information of note may result in the following typographical conventions...manual are described in a malfunction or damage to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. Warning: Ignoring this type of importance or special interest. This manual uses the following paragraphs: • Typographical Conventions. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual...
FVS336G Reference Manual
Page 14
Note: Product updates are available on the NETGEAR, Inc. ProSafe Dual WAN Gigabit Firewall with router firmware update. March 2009 Adds these corrections and topics for the March 2009 firmware maintenance release: • WIKID 2 factor ....0, March 2009 For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in personal injury or death. website at http://kbserver.netgear.com/products/FVS336G.asp. Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Revision History Part...
Note: Product updates are available on the NETGEAR, Inc. ProSafe Dual WAN Gigabit Firewall with router firmware update. March 2009 Adds these corrections and topics for the March 2009 firmware maintenance release: • WIKID 2 factor ....0, March 2009 For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in personal injury or death. website at http://kbserver.netgear.com/products/FVS336G.asp. Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Revision History Part...
FVS336G Reference Manual
Page 16
...dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. The second WAN port allows you to connect a second broadband Internet line that can be configured on their computers. - Remote access by telecommuters requires the installation of the NETGEAR ProSafe...VPN with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of user repositories. 1-2 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with broad protocol support for secure...
...dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. The second WAN port allows you to connect a second broadband Internet line that can be configured on their computers. - Remote access by telecommuters requires the installation of the NETGEAR ProSafe...VPN with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of user repositories. 1-2 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with broad protocol support for secure...
FVS336G Reference Manual
Page 17
... to corporate resources based upon user type or group membership. - You can configure the firewall to email the log to make the right connection. The FVS336G incorporates Auto UplinkTM technology. Introduction 1-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual - Browser based, platform-independent, remote access through a number of full-duplex or half...
... to corporate resources based upon user type or group membership. - You can configure the firewall to email the log to make the right connection. The FVS336G incorporates Auto UplinkTM technology. Introduction 1-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual - Browser based, platform-independent, remote access through a number of full-duplex or half...
FVS336G Reference Manual
Page 18
...configuration allows you only for the information required for traffic prioritization. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the network. The firewall obtains actual DNS addresses from the ISP during connection setup and ... by DHCP. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol ...
...configuration allows you only for the information required for traffic prioritization. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the network. The firewall obtains actual DNS addresses from the ISP during connection setup and ... by DHCP. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol ...
FVS336G Reference Manual
Page 19
... Route, DNS lookup, and remote reboot. • Remote Management. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your product. Package Contents The product package should contain the following...
... Route, DNS lookup, and remote reboot. • Remote Management. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your product. Package Contents The product package should contain the following...
FVS336G Reference Manual
Page 20
... Mbps. The LAN port is operating at 10 Mbps. ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. The WAN port has detected a link with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is either not enabled or...firewall for failover. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN front panel shown below includes four groups of status indicator light-emitting diodes (LEDs), including Power and Test, WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR...
... Mbps. The LAN port is operating at 10 Mbps. ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. The WAN port has detected a link with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is either not enabled or...firewall for failover. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN front panel shown below includes four groups of status indicator light-emitting diodes (LEDs), including Power and Test, WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR...
FVS336G Reference Manual
Page 21
...lock receptacle, power and reset switches, and an AC power connection. The WAN port has no link. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. Factory Defaults button: Using a sharp object, ... factory default settings. WAN Ethernet ports: Two independent N-way automatic speed negotiating, Auto MDI/ MDIX, Gigabit Ethernet ports with RJ-45 connectors. 3. Cable security lock receptacle. 5. Introduction 1-7 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. On/off...
...lock receptacle, power and reset switches, and an AC power connection. The WAN port has no link. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. Factory Defaults button: Using a sharp object, ... factory default settings. WAN Ethernet ports: Two independent N-way automatic speed negotiating, Auto MDI/ MDIX, Gigabit Ethernet ports with RJ-45 connectors. 3. Cable security lock receptacle. 5. Introduction 1-7 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. On/off...
FVS336G Reference Manual
Page 22
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Note that Java is only required for configuring the VPN firewall, SSL VPN ... suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with JavaScript, cookies, and SSL enabled. Although these web browsers...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Note that Java is only required for configuring the VPN firewall, SSL VPN ... suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with JavaScript, cookies, and SSL enabled. Although these web browsers...
FVS336G Reference Manual
Page 24
...2009 Configure your computer needs to be configured to a ping, and you can enable each WAN port to respond to obtain an IP address automatically from the VPN firewall by DHCP. In the User field, type admin 4. To connect and log in "Qualified... steps: 1. The Manager login features appear in lower case letters. 2-2 Connecting the FVS336G to the VPN firewall follow these tasks is not usually required. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. In the Password field, type password Note that both entries are advanced features and...
...2009 Configure your computer needs to be configured to a ping, and you can enable each WAN port to respond to obtain an IP address automatically from the VPN firewall by DHCP. In the User field, type admin 4. To connect and log in "Qualified... steps: 1. The Manager login features appear in lower case letters. 2-2 Connecting the FVS336G to the VPN firewall follow these tasks is not usually required. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. In the Password field, type password Note that both entries are advanced features and...
FVS336G Reference Manual
Page 25
Click Login. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5.
Click Login. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5.
FVS336G Reference Manual
Page 26
...submenu, containing subcategories of the network connection. Clicking an option arrow brings up your VPN firewall for secure Internet connections, you configure WAN ports 1 and 2. ProSafe Dual WAN Gigabit Firewall with an arrow in the center. Tip: In the instructions in this example, Network...WAN Settings is the main menu, containing the primary configuration categories. To the right of the menu active window, are one or more blue dots with SSL & IPsec VPN FVS336G Reference Manual • Main menu. You can now proceed to the first configuration task, configuring the VPN firewall...
...submenu, containing subcategories of the network connection. Clicking an option arrow brings up your VPN firewall for secure Internet connections, you configure WAN ports 1 and 2. ProSafe Dual WAN Gigabit Firewall with an arrow in the center. Tip: In the instructions in this example, Network...WAN Settings is the main menu, containing the primary configuration categories. To the right of the menu active window, are one or more blue dots with SSL & IPsec VPN FVS336G Reference Manual • Main menu. You can now proceed to the first configuration task, configuring the VPN firewall...
FVS336G Reference Manual
Page 27
The WAN Settings tabs appear, with SSL & IPsec VPN FVS336G Reference Manual Automatically Detecting and Connecting To automatically configure the WAN ports for a range of the menu. Click Auto Detect at the bottom of connection methods and suggest one that your ISP appears to the Internet 2-5 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with the WAN1 ISP Settings tab in view. 2. Figure 2-4 Connecting the FVS336G to support. Auto Detect will probe the WAN port for connection to the Internet: Figure 2-3 1. Select Network Configuration > WAN Settings from the menu.
The WAN Settings tabs appear, with SSL & IPsec VPN FVS336G Reference Manual Automatically Detecting and Connecting To automatically configure the WAN ports for a range of the menu. Click Auto Detect at the bottom of connection methods and suggest one that your ISP appears to the Internet 2-5 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with the WAN1 ISP Settings tab in view. 2. Figure 2-4 Connecting the FVS336G to support. Auto Detect will probe the WAN port for connection to the Internet: Figure 2-3 1. Select Network Configuration > WAN Settings from the menu.