FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database...
FVS336G Reference Manual
Page 16
...can be configured on the remote computer. - Dual WAN Ports for Increased Reliability or Outbound Load Balancing The FVS336G has two broadband WAN ports. Remote access by telecommuters requires the installation of the NETGEAR ProSafe VPN Client software (VPN01L) - Uses the familiar Secure...central office and branch offices, or between the two lines for maximum bandwidth efficiency. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of user ...
...can be configured on the remote computer. - Dual WAN Ports for Increased Reliability or Outbound Load Balancing The FVS336G has two broadband WAN ports. Remote access by telecommuters requires the installation of the NETGEAR ProSafe VPN Client software (VPN01L) - Uses the familiar Secure...central office and branch offices, or between the two lines for maximum bandwidth efficiency. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of user ...
FVS336G Reference Manual
Page 18
... DNS addresses from the ISP during connection setup and forwards DNS requests from almost any type of Attached PCs by simulating a dial-up connection. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol...
... DNS addresses from the ISP during connection setup and forwards DNS requests from almost any type of Attached PCs by simulating a dial-up connection. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol...
FVS336G Reference Manual
Page 32
... for Dual WAN) The dual WAN ports of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 9. The ISP will be disabled. 2-10 Connecting the FVS336G to the previous settings.) 12. Review the Domain Name Server (DNS) Servers options. When you intend to additional setup and management tasks. The text fields will automatically assign an IP address to the NETGEAR...
... for Dual WAN) The dual WAN ports of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 9. The ISP will be disabled. 2-10 Connecting the FVS336G to the previous settings.) 12. Review the Domain Name Server (DNS) Servers options. When you intend to additional setup and management tasks. The text fields will automatically assign an IP address to the NETGEAR...
FVS336G Reference Manual
Page 38
... VPN FVS336G Reference Manual • Address range. However, if your Internet account uses a dynamically assigned IP address, you have that notifies dynamic DNS servers of whether you have a fixed or dynamic IP address. • For load balancing mode, you may still need a fully qualified domain name (FQDN) either for the WAN1 port. 5. ProSafe Dual WAN Gigabit Firewall...
... VPN FVS336G Reference Manual • Address range. However, if your Internet account uses a dynamically assigned IP address, you have that notifies dynamic DNS servers of whether you have a fixed or dynamic IP address. • For load balancing mode, you may still need a fully qualified domain name (FQDN) either for the WAN1 port. 5. ProSafe Dual WAN Gigabit Firewall...
FVS336G Reference Manual
Page 44
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • An IP Address from the range you have to configure the DHCP Relay Agent on the subnet that contains the remote clients, so that it possible for DHCP broadcast messages to configure a secondary or "multi-home" LAN IP setup...Relay Agent makes it can make the firewall a dhcp relay agent. The feature is running, i.e. Configuring the LAN Setup Options The LAN IP Setup menu allows configuration of messages. These are suitable for all DHCP clients will not use the FVS336G as a DHCP server but rather as...
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • An IP Address from the range you have to configure the DHCP Relay Agent on the subnet that contains the remote clients, so that it possible for DHCP broadcast messages to configure a secondary or "multi-home" LAN IP setup...Relay Agent makes it can make the firewall a dhcp relay agent. The feature is running, i.e. Configuring the LAN Setup Options The LAN IP Setup menu allows configuration of messages. These are suitable for all DHCP clients will not use the FVS336G as a DHCP server but rather as...
FVS336G Reference Manual
Page 45
.... • IP Subnet Mask. In the LAN TCP/IP Setup section, configure the following parameters: • Domain Name. (Optional) The DHCP will function as the subnet mask. 3. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 1. The subnet mask specifies the network number portion of the firewall while connected through the browser, you will be the...
.... • IP Subnet Mask. In the LAN TCP/IP Setup section, configure the following parameters: • Domain Name. (Optional) The DHCP will function as the subnet mask. 3. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 1. The subnet mask specifies the network number portion of the firewall while connected through the browser, you will be the...
FVS336G Reference Manual
Page 46
.... Lease Time. b. Click Apply to provide LDAP server information. • Enable DNS Proxy. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Starting IP Address. Specifies the last of the VPN firewall (the IP Address configured in the LAN TCP/IP Setup section). • Primary DNS Server. (Optional) If an IP address is enabled (the default...
.... Lease Time. b. Click Apply to provide LDAP server information. • Enable DNS Proxy. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Starting IP Address. Specifies the last of the VPN firewall (the IP Address configured in the LAN TCP/IP Setup section). • Primary DNS Server. (Optional) If an IP address is enabled (the default...
FVS336G Reference Manual
Page 48
...tab is identified by an asterisk. • IP Address. For DHCP clients of the VPN firewall, this IP address will need to update this will be appended by its MAC address...LAN Groups Database. If a computer is assigned to a single group. The MAC address of the PC or device. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • A computer is displayed. Hence, changing a computer's IP address does not affect any restrictions applied... 1, unless a different group is chosen from the main menu. The LAN Setup tab displays. 2. Click the LAN Groups tab.
...tab is identified by an asterisk. • IP Address. For DHCP clients of the VPN firewall, this IP address will need to update this will be appended by its MAC address...LAN Groups Database. If a computer is assigned to a single group. The MAC address of the PC or device. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • A computer is displayed. Hence, changing a computer's IP address does not affect any restrictions applied... 1, unless a different group is chosen from the main menu. The LAN Setup tab displays. 2. Click the LAN Groups tab.
FVS336G Reference Manual
Page 89
... network connection: Security Association, traffic selectors, authentication algorithm, and encryption. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Using the VPN Wizard for Client and Gateway Configurations You use the VPN Wizard to display the VPN Wizard tab page. The section below provides wizard and NETGEAR VPN Client configuration procedures for the following scenarios: • Using the wizard...
... network connection: Security Association, traffic selectors, authentication algorithm, and encryption. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Using the VPN Wizard for Client and Gateway Configurations You use the VPN Wizard to display the VPN Wizard tab page. The section below provides wizard and NETGEAR VPN Client configuration procedures for the following scenarios: • Using the wizard...
FVS336G Reference Manual
Page 101
...VPN policy is important to set up a VPN tunnel, a VPN policy and an IKE policy are stored in the VPN policy are activated when the following occur: 1. Figure 5-19 Managing VPN Policies After you selected as the VPN tunnel connection name during Wizard setup identifies both the VPN.... ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual To view FVS336G VPN logs, go to use the IKE negotiation protocol. The VPN policy selector determines that : • "Auto" generated VPN policies must use the IKE negotiation protocol. • "Manual" generated VPN policies...
...VPN policy is important to set up a VPN tunnel, a VPN policy and an IKE policy are stored in the VPN policy are activated when the following occur: 1. Figure 5-19 Managing VPN Policies After you selected as the VPN tunnel connection name during Wizard setup identifies both the VPN.... ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual To view FVS336G VPN logs, go to use the IKE negotiation protocol. The VPN policy selector determines that : • "Auto" generated VPN policies must use the IKE negotiation protocol. • "Manual" generated VPN policies...
FVS336G Reference Manual
Page 142
The new group appears in user account setup. The Users screen will be automatically logged out of the Web Configuration Manager 3. The Add User tab screen is the period at which an idle .... Click Add. Select Users > Users from a list of Groups, ready for use in the List of configured groups. User Type. Select from the main menu. ProSafe Dual WAN Gigabit Firewall with that is associated with SSL & IPsec VPN FVS336G Reference Manual c. Configure the following fields: a. For an Administrator, this is displayed. Figure 7-4 2. c. Timeout.
The new group appears in user account setup. The Users screen will be automatically logged out of the Web Configuration Manager 3. The Add User tab screen is the period at which an idle .... Click Add. Select Users > Users from a list of Groups, ready for use in the List of configured groups. User Type. Select from the main menu. ProSafe Dual WAN Gigabit Firewall with that is associated with SSL & IPsec VPN FVS336G Reference Manual c. Configure the following fields: a. For an Administrator, this is displayed. Figure 7-4 2. c. Timeout.
FVS336G Reference Manual
Page 182
This will change if you set in the Basic Settings page. This is the current software the router is the Account Name that you upgrade your router. DHCP can be either Server or None. 9-8 Monitoring System Performance v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 9-3 The following information is displayed: Item System Name Firmware Version LAN Port Description This is using. Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you entered in the LAN IP Setup page.
This will change if you set in the Basic Settings page. This is the current software the router is the Account Name that you upgrade your router. DHCP can be either Server or None. 9-8 Monitoring System Performance v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 9-3 The following information is displayed: Item System Name Firmware Version LAN Port Description This is using. Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you entered in the LAN IP Setup page.
FVS336G Reference Manual
Page 184
...network is strongly recommended. • Scanning the Network. These requests also generate an entry in the VPN firewall is an automatically-maintained list of the PC or device cannot be shown as ARP. Because of ...in the LAN Setup menu) is scanned using standard methods such as unknown. • Manually Adding Devices. The Known PCs and Devices database is enabled, and will detect active devices that the VPN firewall has discovered ...known by the following methods: • DHCP Client Requests. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual .
...network is strongly recommended. • Scanning the Network. These requests also generate an entry in the VPN firewall is an automatically-maintained list of the PC or device cannot be shown as ARP. Because of ...in the LAN Setup menu) is scanned using standard methods such as unknown. • Manually Adding Devices. The Known PCs and Devices database is enabled, and will detect active devices that the VPN firewall has discovered ...known by the following methods: • DHCP Client Requests. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual .
FVS336G Reference Manual
Page 186
... > LAN Settings from the main menu, and then click the LAN Setup tab. Monitoring Active Users The Active Users menu screen displays a list of the tabs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, ...click refresh. Click the DHCP Log link to the right of administrators and SSL VPN users currently logged into the device....
... > LAN Settings from the main menu, and then click the LAN Setup tab. Monitoring Active Users The Active Users menu screen displays a list of the tabs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, ...click refresh. Click the DHCP Log link to the right of administrators and SSL VPN users currently logged into the device....
FVS336G Reference Manual
Page 236
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual ModeConfig, configuring with ModeConfig 5-26 IPsec host 5-19 ISP connection troubleshooting 10-4 K Keep Connected Idle TImeout 2-9 Idle Timeout 2-8 keepalive, VPN 5-28 Keyword Blocking 4-19 applying 4-21 Known PCs and Devices list of 3-6 L LAN configuration 3-1 using LAN IP setup... field descriptions 4-6 inbound traffic C-6, C-8 dual WAN ports C-8, C-9 single WAN port reference case C-8 increasing traffic 8-5 Port Forwarding 8-5 Port Triggering 8-7 VPN Tunnels 8-7 installation 1-4 Installation, instructions for...
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual ModeConfig, configuring with ModeConfig 5-26 IPsec host 5-19 ISP connection troubleshooting 10-4 K Keep Connected Idle TImeout 2-9 Idle Timeout 2-8 keepalive, VPN 5-28 Keyword Blocking 4-19 applying 4-21 Known PCs and Devices list of 3-6 L LAN configuration 3-1 using LAN IP setup... field descriptions 4-6 inbound traffic C-6, C-8 dual WAN ports C-8, C-9 single WAN port reference case C-8 increasing traffic 8-5 Port Forwarding 8-5 Port Triggering 8-7 VPN Tunnels 8-7 installation 1-4 Installation, instructions for...
FVS336G Reference Manual
Page 240
traceroute 10-9 tracert use with 4-2 stateful packet inspection. See QoS. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL VPN Logs 9-16 Starting IP Address DHCP Address Pool 3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic increasing 8-5 reducing 8-2 traffic management 8-8 traffic meter...
traceroute 10-9 tracert use with 4-2 stateful packet inspection. See QoS. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL VPN Logs 9-16 Starting IP Address DHCP Address Pool 3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic increasing 8-5 reducing 8-2 traffic management 8-8 traffic meter...
FVS336G Reference Manual
Page 241
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual telecommuter, about C-17 telecommuter, Dual gateway C-18 telecommuter, single gateway C-17 VPN Client configuring 5-6 VPN firewall connecting 2-1 VPN Logs screen 9-15 VPN passthrough 4-18, 8-6 VPN Policies screen 5-5, 5-8 VPN Policy Auto 5-17 Manual 5-17 VPN Tunnel addresses Dual WAN Port systems 5-2 VPN Tunnel Connection monitoring status 9-14 VPN tunnels about 5-1 increasing traffic 8-7 load balancing mode 5-2 rollover mode 5-2 VPN Wizard Gateway tunnel...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual telecommuter, about C-17 telecommuter, Dual gateway C-18 telecommuter, single gateway C-17 VPN Client configuring 5-6 VPN firewall connecting 2-1 VPN Logs screen 9-15 VPN passthrough 4-18, 8-6 VPN Policies screen 5-5, 5-8 VPN Policy Auto 5-17 Manual 5-17 VPN Tunnel addresses Dual WAN Port systems 5-2 VPN Tunnel Connection monitoring status 9-14 VPN tunnels about 5-1 increasing traffic 8-7 load balancing mode 5-2 rollover mode 5-2 VPN Wizard Gateway tunnel...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Network Address Translation 2-12 Classical Routing 2-12 Configuring Auto-Rollover Mode 2-13 Configuring Load Balancing 2-15 Configuring Dynamic DNS (Optional 2-17 Configuring the Advanced WAN Options (Optional 2-19 Additional WAN Related Configuration 2-21 Chapter 3 LAN Configuration Using the VPN Firewall as a DHCP server 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Network Address Translation 2-12 Classical Routing 2-12 Configuring Auto-Rollover Mode 2-13 Configuring Load Balancing 2-15 Configuring Dynamic DNS (Optional 2-17 Configuring the Advanced WAN Options (Optional 2-19 Additional WAN Related Configuration 2-21 Chapter 3 LAN Configuration Using the VPN Firewall as a DHCP server 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and...
FVS336G Reference Manual
Page 18
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of user repositories. 1-2 Introduction v1.2, June 2008 See "Network Planning for Dual WAN Ports" on...WAN port allows you to connect a second broadband Internet line that can be configured on a mutually-exclusive basis to selected corporate resources without requiring a pre-installed VPN client on the remote computer. - Remote access by telecommuters requires the installation of the NETGEAR ProSafe VPN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of user repositories. 1-2 Introduction v1.2, June 2008 See "Network Planning for Dual WAN Ports" on...WAN port allows you to connect a second broadband Internet line that can be configured on a mutually-exclusive basis to selected corporate resources without requiring a pre-installed VPN client on the remote computer. - Remote access by telecommuters requires the installation of the NETGEAR ProSafe VPN...