FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 2
... that to radio communications. These limits are registered trademarks and ProSafe is a trademark of NETGEAR, Inc. Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das ProSafe Dual WAN Gigabit Firewall with the following EU Council Directives: 89/336/EEC and LVD... operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. However, there is no guarantee that the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN has been suppressed in accordance with...
... that to radio communications. These limits are registered trademarks and ProSafe is a trademark of NETGEAR, Inc. Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das ProSafe Dual WAN Gigabit Firewall with the following EU Council Directives: 89/336/EEC and LVD... operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. However, there is no guarantee that the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN has been suppressed in accordance with...
FVS336G Reference Manual
Page 5
...) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 Permission is ', without specific prior written permission. you must be plainly marked as being the...
...) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 Permission is ', without specific prior written permission. you must be plainly marked as being the...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes for VPN Tunnel Clients 6-12 Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes for VPN Tunnel Clients 6-12 Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File ... Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP Connection 10-4 Troubleshooting a TCP/IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File ... Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP Connection 10-4 Troubleshooting a TCP/IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
FVS336G Reference Manual
Page 13
About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to highlight a procedure that will save time or resources. Warning: Ignoring this type of this manual is used to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. This manual uses the following formats to highlight special...
About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to highlight a procedure that will save time or resources. Warning: Ignoring this type of this manual is used to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. This manual uses the following formats to highlight special...
FVS336G Reference Manual
Page 14
... http://kbserver.netgear.com/products/FVS336G.asp. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 October First publication 2007 November Text corrections 2007 June 2008 Updated to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. ProSafe Dual WAN Gigabit Firewall with router...
... http://kbserver.netgear.com/products/FVS336G.asp. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 October First publication 2007 November Text corrections 2007 June 2008 Updated to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. ProSafe Dual WAN Gigabit Firewall with router...
FVS336G Reference Manual
Page 15
...FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in four-port 10/100/1000 Mbps Gigabit Ethernet LAN switch for extremely fast data transfer between local network resources. • Advanced IPsec and SSL VPN support. • Advanced stateful packet inspection (SPI) firewall... 1-8 Key Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for secure and simple remote connections. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN connects your local area ...
...FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in four-port 10/100/1000 Mbps Gigabit Ethernet LAN switch for extremely fast data transfer between local network resources. • Advanced IPsec and SSL VPN support. • Advanced stateful packet inspection (SPI) firewall... 1-8 Key Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for secure and simple remote connections. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN connects your local area ...
FVS336G Reference Manual
Page 16
... with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. IPsec VPN with customizable user portals and support for firmware upgrade. • Internal universal switching power supply. Bundled with SSL & IPsec VPN FVS336G Reference ...access by telecommuters requires the installation of VPN client software on a mutually-exclusive basis to other IPsec gateways and clients. - ProSafe Dual WAN Gigabit Firewall with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - The firewall balances users between a central office ...
... with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. IPsec VPN with customizable user portals and support for firmware upgrade. • Internal universal switching power supply. Bundled with SSL & IPsec VPN FVS336G Reference ...access by telecommuters requires the installation of VPN client software on a mutually-exclusive basis to other IPsec gateways and clients. - ProSafe Dual WAN Gigabit Firewall with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - The firewall balances users between a central office ...
FVS336G Reference Manual
Page 17
... that you at specified intervals. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to defend against hacker attacks. You can configure the firewall to email the log to you...cable to access objectionable Internet sites. • Permits scheduling of firewall policies by screening for Web services, Web addresses, and keywords within Web addresses. A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - You can connect to your LAN. •...
... that you at specified intervals. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to defend against hacker attacks. You can configure the firewall to email the log to you...cable to access objectionable Internet sites. • Permits scheduling of firewall policies by screening for Web services, Web addresses, and keywords within Web addresses. A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - You can connect to your LAN. •...
FVS336G Reference Manual
Page 18
... by NAT. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (... refer to "Internet Configuration Requirements" on your Internet service provider (ISP). ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the network. The VPN firewall allows many networked PCs to the Internet over Ethernet (PPPoE).
... by NAT. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (... refer to "Internet Configuration Requirements" on your Internet service provider (ISP). ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the network. The VPN firewall allows many networked PCs to the Internet over Ethernet (PPPoE).
FVS336G Reference Manual
Page 19
... a remote location on the Internet. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your use of addresses. • Visual monitoring. The VPN firewall's front panel LEDs provide an easy way to...
... a remote location on the Internet. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your use of addresses. • Visual monitoring. The VPN firewall's front panel LEDs provide an easy way to...
FVS336G Reference Manual
Page 20
... no link. 1-6 Introduction v1.0, March 2009 The system has booted successfully. The WAN port has detected a link with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is supplied to defaults). LED Descriptions Object ...WAN port has no link. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN front panel shown below includes four groups of status indicator light-emitting diodes (LEDs), including Power and Test, WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR...
... no link. 1-6 Introduction v1.0, March 2009 The system has booted successfully. The WAN port has detected a link with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is supplied to defaults). LED Descriptions Object ...WAN port has no link. Front Panel Features The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN front panel shown below includes four groups of status indicator light-emitting diodes (LEDs), including Power and Test, WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR...
FVS336G Reference Manual
Page 21
.... LAN Ethernet ports: Four switched N-way automatic speed negotiating, Auto MDI/MDIX, Gigabit Ethernet ports with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an AC power connection. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. LED Descriptions (continued) Object LAN Ports SPEED LINK/ACT (Link...
.... LAN Ethernet ports: Four switched N-way automatic speed negotiating, Auto MDI/MDIX, Gigabit Ethernet ports with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an AC power connection. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. LED Descriptions (continued) Object LAN Ports SPEED LINK/ACT (Link...
FVS336G Reference Manual
Page 22
... 1.2 or higher, or Mozilla Firefox l.x Web browser with the VPN firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is only required for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password...
... 1.2 or higher, or Mozilla Firefox l.x Web browser with the VPN firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is only required for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password...
FVS336G Reference Manual
Page 23
... at : http://kbserver.netgear.com. 2. Log in the installation guide. Configure the Internet connections to the instructions in to your VPN firewall. You can also change your ISPs. Chapter 2 Connecting the FVS336G to the Internet The initial Internet configuration of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN for complete steps. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec...
... at : http://kbserver.netgear.com. 2. Log in the installation guide. Configure the Internet connections to the instructions in to your VPN firewall. You can also change your ISPs. Chapter 2 Connecting the FVS336G to the Internet The initial Internet configuration of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN for complete steps. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec...
FVS336G Reference Manual
Page 24
... page 1-8. 2. See "Configuring Dynamic DNS (Optional)" on page 2-16. 6. Optionally, you can enable each WAN port to respond to the link in later chapters. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. However, these are in "Qualified Web Browsers" on the WAN ports (optional). The Manager login features appear in the address field. Configure the...
... page 1-8. 2. See "Configuring Dynamic DNS (Optional)" on page 2-16. 6. Optionally, you can enable each WAN port to respond to the link in later chapters. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. However, these are in "Qualified Web Browsers" on the WAN ports (optional). The Manager login features appear in the address field. Configure the...