FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database 3-6 Changing...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database 3-6 Changing...
FVS336G Reference Manual
Page 16
...the installation of VPN client software on their computers. - Bundled with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation ...SSL The VPN firewall supports IPsec and SSL virtual private network (VPN) connections. • IPsec VPN delivers full network access between a central office and branch offices, or between the two lines for outgoing traffic. ProSafe Dual WAN Gigabit Firewall with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - The firewall balances users between a central office and telecommuters. Dual WAN...
...the installation of VPN client software on their computers. - Bundled with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation ...SSL The VPN firewall supports IPsec and SSL virtual private network (VPN) connections. • IPsec VPN delivers full network access between a central office and branch offices, or between the two lines for outgoing traffic. ProSafe Dual WAN Gigabit Firewall with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - The firewall balances users between a central office and telecommuters. Dual WAN...
FVS336G Reference Manual
Page 18
... local network. • DNS Proxy. This feature greatly simplifies configuration of ISP. The firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from almost any type of personal computer, such as EnterNet or...refer to the network. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). ...
... local network. • DNS Proxy. This feature greatly simplifies configuration of ISP. The firewall obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from almost any type of personal computer, such as EnterNet or...refer to the network. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). ...
FVS336G Reference Manual
Page 32
..., NETGEAR's Web site appears. 13. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN can be configured on a mutually exclusive basis for either auto-rollover (for increased system reliability) or load balancing (for Dual WAN) The dual WAN ports of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference...NETGEAR Web site. The text fields will be disabled. 2-10 Connecting the FVS336G to use a dual WAN mode, click the WAN2 ISP Settings tab and configure the WAN2 ISP settings using DHCP network protocol. 10. The ISP will attempt to connect to additional setup...
..., NETGEAR's Web site appears. 13. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN can be configured on a mutually exclusive basis for either auto-rollover (for increased system reliability) or load balancing (for Dual WAN) The dual WAN ports of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference...NETGEAR Web site. The text fields will be disabled. 2-10 Connecting the FVS336G to use a dual WAN mode, click the WAN2 ISP Settings tab and configure the WAN2 ISP settings using DHCP network protocol. 10. The ISP will attempt to connect to additional setup...
FVS336G Reference Manual
Page 38
...qualified domain name (FQDN) either for your convenience on the Dynamic DNS Configuration screen.) The VPN firewall firmware includes software that notifies dynamic DNS servers of changes in advance what your IP address will...setup an account with SSL & IPsec VPN FVS336G Reference Manual • Address range. If your frequently-changing IP address. Open the WAN2 Protocol Bindings tab and repeat the previous steps to set protocol bindings for the resulting FQDN to your network has a permanently assigned IP address, you can be routed on the Internet. ProSafe Dual WAN Gigabit Firewall...
...qualified domain name (FQDN) either for your convenience on the Dynamic DNS Configuration screen.) The VPN firewall firmware includes software that notifies dynamic DNS servers of changes in advance what your IP address will...setup an account with SSL & IPsec VPN FVS336G Reference Manual • Address range. If your frequently-changing IP address. Open the WAN2 Protocol Bindings tab and repeat the previous steps to set protocol bindings for the resulting FQDN to your network has a permanently assigned IP address, you can be routed on the Internet. ProSafe Dual WAN Gigabit Firewall...
FVS336G Reference Manual
Page 44
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • An IP Address from the range you have defined. • Subnet Mask. • Gateway IP Address (the firewall's LAN IP address). • Primary DNS Server (the firewall's LAN IP address). • WINS Server (if you entered a WINS server address in the DHCP Setup menu). • Lease Time (date obtained...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • An IP Address from the range you have defined. • Subnet Mask. • Gateway IP Address (the firewall's LAN IP address). • Primary DNS Server (the firewall's LAN IP address). • WINS Server (if you entered a WINS server address in the DHCP Setup menu). • Lease Time (date obtained...
FVS336G Reference Manual
Page 45
Go to Network Configuration > LAN Setup to the VPN firewall's LAN. Note: If you change the default IP address 192.168.1.1 to the new IP address and log in your VPN firewall (factory default: 192.168.1.1). Your VPN firewall will be the DHCP server, or if you must ...LAN Setup tab page. Figure 3-1 2. If the DHCP server is enabled, enter the following settings: • IP Address. For example, if you change the LAN IP address of an IP address. Unless you assign. LAN Configuration 3-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G ...
Go to Network Configuration > LAN Setup to the VPN firewall's LAN. Note: If you change the default IP address 192.168.1.1 to the new IP address and log in your VPN firewall (factory default: 192.168.1.1). Your VPN firewall will be the DHCP server, or if you must ...LAN Setup tab page. Figure 3-1 2. If the DHCP server is enabled, enter the following settings: • IP Address. For example, if you change the LAN IP address of an IP address. Unless you assign. LAN Configuration 3-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G ...
FVS336G Reference Manual
Page 46
...secondary DNS server IP address. • WINS Server. (Optional) Specifies the IP address of the VPN firewall (the IP Address configured in the LAN TCP/IP Setup section). • Primary DNS Server. (Optional) If an IP address is unchecked, the DHCP ...LDAP server information. • Enable DNS Proxy. This enables the DHCP server to Chapter 4, "Firewall Protection and Content Filtering. 3-4 LAN Configuration v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Starting IP Address. Specifies the first of the contiguous addresses in the...
...secondary DNS server IP address. • WINS Server. (Optional) Specifies the IP address of the VPN firewall (the IP Address configured in the LAN TCP/IP Setup section). • Primary DNS Server. (Optional) If an IP address is unchecked, the DHCP ...LDAP server information. • Enable DNS Proxy. This enables the DHCP server to Chapter 4, "Firewall Protection and Content Filtering. 3-4 LAN Configuration v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Starting IP Address. Specifies the first of the contiguous addresses in the...
FVS336G Reference Manual
Page 48
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • A computer is identified by an asterisk. • IP Address. Select Network Configuration > LAN Settings from the Group pull-down menu. • Action. ... device. The LAN Groups tab is chosen from the main menu. The LAN Setup tab displays. 2. Each PC or device can edit the entry manually to update this IP address will not change. For DHCP clients of the VPN firewall, this entry manually if the IP address on the computer has been changed...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • A computer is identified by an asterisk. • IP Address. Select Network Configuration > LAN Settings from the Group pull-down menu. • Action. ... device. The LAN Groups tab is chosen from the main menu. The LAN Setup tab displays. 2. Each PC or device can edit the entry manually to update this IP address will not change. For DHCP clients of the VPN firewall, this entry manually if the IP address on the computer has been changed...
FVS336G Reference Manual
Page 89
... guides you through the setup procedure with the Wizard Figure 5-3 Follow these settings after completing the wizard. Creating Gateway to configure a VPN tunnel between a VPN gateway and a VPN client Configuring a VPN tunnel connection requires that all settings and parameters on the recommendations of questions that promotes multi-vendor VPN interoperability. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Using the...
... guides you through the setup procedure with the Wizard Figure 5-3 Follow these settings after completing the wizard. Creating Gateway to configure a VPN tunnel between a VPN gateway and a VPN client Configuring a VPN tunnel connection requires that all settings and parameters on the recommendations of questions that promotes multi-vendor VPN interoperability. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Using the...
FVS336G Reference Manual
Page 101
...v1.0, March 2009 5-15 Figure 5-19 Managing VPN Policies After you selected as the VPN tunnel connection name during Wizard setup identifies both the VPN policy and IKE policy. You can edit existing policies, or add new VPN and IKE policies directly in the policy tables. ...IKE negotiation protocol. • "Manual" generated VPN policies cannot use the IKE negotiation protocol. It is of the keys used in IPsec. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual To view FVS336G VPN logs, go to set up a VPN tunnel, a VPN policy and an IKE policy are stored in ...
...v1.0, March 2009 5-15 Figure 5-19 Managing VPN Policies After you selected as the VPN tunnel connection name during Wizard setup identifies both the VPN policy and IKE policy. You can edit existing policies, or add new VPN and IKE policies directly in the policy tables. ...IKE negotiation protocol. • "Manual" generated VPN policies cannot use the IKE negotiation protocol. It is of the keys used in IPsec. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual To view FVS336G VPN logs, go to set up a VPN tunnel, a VPN policy and an IKE policy are stored in ...
FVS336G Reference Manual
Page 142
... in the List of the Web Configuration Manager 3. ProSafe Dual WAN Gigabit Firewall with that group. 7-4 Managing Users, Authentication, and Certificates v1.0, March 2009 The Users screen will be associated with the domain that is associated with SSL & IPsec VPN FVS336G Reference Manual c. The new group appears in user account setup. The Add User tab screen is the period...
... in the List of the Web Configuration Manager 3. ProSafe Dual WAN Gigabit Firewall with that group. 7-4 Managing Users, Authentication, and Certificates v1.0, March 2009 The Users screen will be associated with the domain that is associated with SSL & IPsec VPN FVS336G Reference Manual c. The new group appears in user account setup. The Add User tab screen is the period...
FVS336G Reference Manual
Page 182
This is the current software the router is the Account Name that you set in the Basic Settings page. DHCP can be either Server or None. 9-8 Monitoring System Performance v1.0, March 2009 Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you entered in the LAN IP Setup page. This will change if you upgrade your router. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 9-3 The following information is displayed: Item System Name Firmware Version LAN Port Description This is using.
This is the current software the router is the Account Name that you set in the Basic Settings page. DHCP can be either Server or None. 9-8 Monitoring System Performance v1.0, March 2009 Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you entered in the LAN IP Setup page. This will change if you upgrade your router. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 9-3 The following information is displayed: Item System Name Firmware Version LAN Port Description This is using.
FVS336G Reference Manual
Page 184
...an entry in the LAN Setup menu) is scanned using standard methods such as unknown. • Manually Adding Devices. The local network is strongly recommended. • Scanning the Network. You can enter information in the VPN firewall is an automatically-maintained list ...devices that are not DHCP clients. Because of the PC or device cannot be accurately determined and will display. 2. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual . The scan will accept and respond to the database. 9-10 v1.0, March 2009 Monitoring System Performance ...
...an entry in the LAN Setup menu) is scanned using standard methods such as unknown. • Manually Adding Devices. The local network is strongly recommended. • Scanning the Network. You can enter information in the VPN firewall is an automatically-maintained list ...devices that are not DHCP clients. Because of the PC or device cannot be accurately determined and will display. 2. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual . The scan will accept and respond to the database. 9-10 v1.0, March 2009 Monitoring System Performance ...
FVS336G Reference Manual
Page 186
... delete all the existing log entries, click clear log. The LAN Setup screen will display. Figure 9-7 3. Figure 9-6 2. The DHCP Log appears in the DHCP log: 1. Monitoring Active Users The Active Users menu screen displays a list of the tabs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent...
... delete all the existing log entries, click clear log. The LAN Setup screen will display. Figure 9-7 3. Figure 9-6 2. The DHCP Log appears in the DHCP log: 1. Monitoring Active Users The Active Users menu screen displays a list of the tabs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent...
FVS336G Reference Manual
Page 240
See QoS. See SPI. traceroute 10-9 tracert use with dual WAN ports C-7 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL VPN Logs 9-16 Starting IP Address DHCP Address Pool 3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic increasing 8-5 reducing 8-2 traffic management 8-8 traffic meter...
See QoS. See SPI. traceroute 10-9 tracert use with dual WAN ports C-7 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL VPN Logs 9-16 Starting IP Address DHCP Address Pool 3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic increasing 8-5 reducing 8-2 traffic management 8-8 traffic meter...
FVS336G Reference Manual
Page 18
.... 1-2 Introduction v1.2, June 2008 See "Network Planning for Dual WAN Ports" on the remote computer. - IPsec VPN with broad protocol support for the planning factors to provide client-free access with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. ProSafe Dual WAN Gigabit Firewall with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) -
.... 1-2 Introduction v1.2, June 2008 See "Network Planning for Dual WAN Ports" on the remote computer. - IPsec VPN with broad protocol support for the planning factors to provide client-free access with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. ProSafe Dual WAN Gigabit Firewall with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) -
FVS336G Reference Manual
Page 152
Select the appropriate domain (only for use in user account setup. The new group appears in the Add New Group section of the Web Configuration Manager 3. Select Users > Users from the main menu. Name.... v1.2, June 2008 Configure the new group settings in the List of Groups, ready for Administrator or SSL VPN User). Click Add. c. Creating a New User Account To add individual user accounts: 1. Domain. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 7-3 2. Enter a descriptive name for the group. Timeout. The Users screen will ...
Select the appropriate domain (only for use in user account setup. The new group appears in the Add New Group section of the Web Configuration Manager 3. Select Users > Users from the main menu. Name.... v1.2, June 2008 Configure the new group settings in the List of Groups, ready for Administrator or SSL VPN User). Click Add. c. Creating a New User Account To add individual user accounts: 1. Domain. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 7-3 2. Enter a descriptive name for the group. Timeout. The Users screen will ...
FVS336G Reference Manual
Page 196
... 9-7 3. Select Network Configuration > LAN Settings from the main menu, and then click the LAN Setup tab. Figure 9-6 2. The LAN Setup screen will display. Monitoring Active Users The Active Users menu screen displays a list of the tabs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, click refresh.
... 9-7 3. Select Network Configuration > LAN Settings from the main menu, and then click the LAN Setup tab. Figure 9-6 2. The LAN Setup screen will display. Monitoring Active Users The Active Users menu screen displays a list of the tabs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, click refresh.
FVS336G Reference Manual
Page 244
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Add Protocol Binding 2-16 Specifying an Exposed Host example of 8-18 Time Zone screen 8-18 timeout, administrator login 8-10 ToS. Static 3-10 static IP address configuring 2-10 detecting 2-6 static routes about C-14 gateway-to-gateway, Dual...meter 2-21 troubleshooting 10-1 browsers 10-3 configuration settings, using sniffer 10-3 defaults 10-3 ISP connection 10-4 NTP 10-7 testing your setup 10-6 Web configuration 10-3 Trusted Certificates 7-9, 7-10 TZO.com 2-17 U UDP flood 4-20 special rule 8-6 User Database 5-20...
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Add Protocol Binding 2-16 Specifying an Exposed Host example of 8-18 Time Zone screen 8-18 timeout, administrator login 8-10 ToS. Static 3-10 static IP address configuring 2-10 detecting 2-6 static routes about C-14 gateway-to-gateway, Dual...meter 2-21 troubleshooting 10-1 browsers 10-3 configuration settings, using sniffer 10-3 defaults 10-3 ISP connection 10-4 NTP 10-7 testing your setup 10-6 Web configuration 10-3 Trusted Certificates 7-9, 7-10 TZO.com 2-17 U UDP flood 4-20 special rule 8-6 User Database 5-20...