FVS336G Reference Manual
Page 7
...History ...xiv Chapter 1 Introduction Key Features ...1-1 Dual WAN Ports for Increased Reliability or Outbound Load Balancing 1-2 Advanced VPN Support for Both IPsec and SSL 1-2 A Powerful, True Firewall with Content Filtering 1-3 Autosensing Ethernet Connections with Auto...the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN ...
...History ...xiv Chapter 1 Introduction Key Features ...1-1 Dual WAN Ports for Increased Reliability or Outbound Load Balancing 1-2 Advanced VPN Support for Both IPsec and SSL 1-2 A Powerful, True Firewall with Content Filtering 1-3 Autosensing Ethernet Connections with Auto...the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN ...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database 3-6 Changing Group Names in the LAN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database 3-6 Changing Group Names in the LAN...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for Client and Gateway...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for Client and Gateway...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes ... Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify Policies 6-13 Adding New Network Resources 6-13 Configuring User, Group, and Global Policies 6-15 Viewing Policies ...6-16 Adding a Policy ...6-17 Chapter 7 Managing Users, Authentication...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes ... Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify Policies 6-13 Adding New Network Resources 6-13 Configuring User, Group, and Global Policies 6-15 Viewing Policies ...6-16 Adding a Policy ...6-17 Chapter 7 Managing Users, Authentication...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File Management 8-15 Upgrading the Firmware 8-17 Configuring Date... Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File Management 8-15 Upgrading the Firmware 8-17 Configuring Date... Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring ...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet Configuration Requirements C-3 Where Do I Get the Internet Configuration...the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet Configuration Requirements C-3 Where Do I Get the Internet Configuration...the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
FVS336G Reference Manual
Page 13
...: This format is used to highlight information of this manual is intended for readers with SSL & IPsec VPN. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. Tip: This format is used to highlight a procedure that will...
...: This format is used to highlight information of this manual is intended for readers with SSL & IPsec VPN. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. Tip: This format is used to highlight a procedure that will...
FVS336G Reference Manual
Page 14
...Related Documents.". ProSafe Dual WAN Gigabit Firewall with router firmware update. March 2009 Adds these corrections and topics for the March 2009 firmware maintenance release: • WIKID 2 factor authentication • SIP AGL support • DHCP Relay support • Update VPN configuration procedure topics...Text corrections 2007 June 2008 Updated to the NETGEAR website in personal injury or death. For more information about network, Internet, firewall, and VPN technologies, see the links to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety ...
...Related Documents.". ProSafe Dual WAN Gigabit Firewall with router firmware update. March 2009 Adds these corrections and topics for the March 2009 firmware maintenance release: • WIKID 2 factor authentication • SIP AGL support • DHCP Relay support • Update VPN configuration procedure topics...Text corrections 2007 June 2008 Updated to the NETGEAR website in personal injury or death. For more information about network, Internet, firewall, and VPN technologies, see the links to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety ...
FVS336G Reference Manual
Page 15
Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009 As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in four-port 10/100/1000 Mbps Gigabit Ethernet LAN switch for secure and simple ...Browsers" on page 1-8 Key Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for load balancing or failover protection of your network, while providing advanced IPsec and SSL VPN technologies for extremely fast data...
Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009 As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in four-port 10/100/1000 Mbps Gigabit Ethernet LAN switch for secure and simple ...Browsers" on page 1-8 Key Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for load balancing or failover protection of your network, while providing advanced IPsec and SSL VPN technologies for extremely fast data...
FVS336G Reference Manual
Page 16
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of the NETGEAR ProSafe VPN Client software (VPN01L) - IPsec VPN with dual WAN port gateways: • Single or multiple exposed hosts... for firmware upgrade. • Internal universal switching power supply. The second WAN port allows you to connect a second broadband Internet line that can be configured on a mutually-exclusive basis to selected corporate resources without requiring a pre-...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of the NETGEAR ProSafe VPN Client software (VPN01L) - IPsec VPN with dual WAN port gateways: • Single or multiple exposed hosts... for firmware upgrade. • Internal universal switching power supply. The second WAN port allows you to connect a second broadband Internet line that can be configured on a mutually-exclusive basis to selected corporate resources without requiring a pre-...
FVS336G Reference Manual
Page 17
... the right connection. You can configure the firewall to email the log to you specify as Auto Uplink will accommodate either a 10 Mbps standard Ethernet network, a 100 Mbps Fast Ethernet network, or a 1000 Mbps Gigabit Ethernet network. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection...
... the right connection. You can configure the firewall to email the log to you specify as Auto Uplink will accommodate either a 10 Mbps standard Ethernet network, a 100 Mbps Fast Ethernet network, or a 1000 Mbps Gigabit Ethernet network. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection...
FVS336G Reference Manual
Page 18
... many networked PCs to share an Internet account using the Dynamic Host Configuration Protocol (DHCP). Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). This feature...
... many networked PCs to share an Internet account using the Dynamic Host Configuration Protocol (DHCP). Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). This feature...
FVS336G Reference Manual
Page 19
... NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. one user license. • Warranty and Support Information Card. The VPN firewall includes the NETGEAR VPN Wizard to easily configure IPsec...
... NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. one user license. • Warranty and Support Information Card. The VPN firewall includes the NETGEAR VPN Wizard to easily configure IPsec...
FVS336G Reference Manual
Page 21
... & IPsec VPN FVS336G Reference Manual Table 1-1. On/off power switch. ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an AC power connection. Figure 1-2 Viewed from left to factory default settings. All configuration settings...
... & IPsec VPN FVS336G Reference Manual Table 1-1. On/off power switch. ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an AC power connection. Figure 1-2 Viewed from left to factory default settings. All configuration settings...
FVS336G Reference Manual
Page 22
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Note that Java is only required for configuring the VPN firewall, SSL ...suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with JavaScript, cookies, and SSL enabled. Although these web browsers are...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Note that Java is only required for configuring the VPN firewall, SSL ...suite of the following factory default information: IP Address User Name Password Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with JavaScript, cookies, and SSL enabled. Although these web browsers are...
FVS336G Reference Manual
Page 23
... load balancing mode. Chapter 2 Connecting the FVS336G to the Internet The initial Internet configuration of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN for complete steps. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-10. 2-1 v1.0, March 2009 Configure the Internet connections to the VPN Firewall. See "Logging into the VPN Firewall Router" on page 2-2 • "Navigating...
... load balancing mode. Chapter 2 Connecting the FVS336G to the Internet The initial Internet configuration of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN for complete steps. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-10. 2-1 v1.0, March 2009 Configure the Internet connections to the VPN Firewall. See "Logging into the VPN Firewall Router" on page 2-2 • "Navigating...
FVS336G Reference Manual
Page 24
... are in Appendix B, "Related Documents. For instructions on how to configure your computer needs to be configured to the Internet v1.0, March 2009 Each of firewall and VPN features is not usually required. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Optionally, you can enable each WAN port to respond to a ping, and you can change the...
... are in Appendix B, "Related Documents. For instructions on how to configure your computer needs to be configured to the Internet v1.0, March 2009 Each of firewall and VPN features is not usually required. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. Optionally, you can enable each WAN port to respond to a ping, and you can change the...
FVS336G Reference Manual
Page 25
Click Login. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5.
Click Login. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5.
FVS336G Reference Manual
Page 26
... notation primary | subcategory, such as Network Configuration | WAN Settings. In this guide, we may refer to the first configuration task, configuring the VPN firewall's Internet connections. The Web Configuration Manager offers two connection configuration options: • Automatic detection and configuration of the network connection. • Manual configuration of the submenu bar. • Submenu. ProSafe Dual WAN Gigabit Firewall with an arrow in the center...
... notation primary | subcategory, such as Network Configuration | WAN Settings. In this guide, we may refer to the first configuration task, configuring the VPN firewall's Internet connections. The Web Configuration Manager offers two connection configuration options: • Automatic detection and configuration of the network connection. • Manual configuration of the submenu bar. • Submenu. ProSafe Dual WAN Gigabit Firewall with an arrow in the center...
FVS336G Reference Manual
Page 27
Figure 2-4 Connecting the FVS336G to support. Auto Detect will probe the WAN port for connection to the Internet: Figure 2-3 1. Click Auto Detect at the bottom of connection methods and suggest one that your ISP appears to the Internet 2-5 v1.0, March 2009 The WAN Settings tabs appear, with SSL & IPsec VPN FVS336G Reference Manual Automatically Detecting and Connecting To automatically configure the WAN ports for a range of the menu. ProSafe Dual WAN Gigabit Firewall with the WAN1 ISP Settings tab in view. 2. Select Network Configuration > WAN Settings from the menu.
Figure 2-4 Connecting the FVS336G to support. Auto Detect will probe the WAN port for connection to the Internet: Figure 2-3 1. Click Auto Detect at the bottom of connection methods and suggest one that your ISP appears to the Internet 2-5 v1.0, March 2009 The WAN Settings tabs appear, with SSL & IPsec VPN FVS336G Reference Manual Automatically Detecting and Connecting To automatically configure the WAN ports for a range of the menu. ProSafe Dual WAN Gigabit Firewall with the WAN1 ISP Settings tab in view. 2. Select Network Configuration > WAN Settings from the menu.