FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 2
... equipment and receiver. • Connect the equipment into an outlet on , the user is no guarantee that the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN has been suppressed in accordance with SSL & IPsec VPN is verified by NETGEAR, Inc. Lesen Sie dazu bitte die Anmerkungen in this equipment does cause harmful interference to radio or television...
... equipment and receiver. • Connect the equipment into an outlet on , the user is no guarantee that the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN has been suppressed in accordance with SSL & IPsec VPN is verified by NETGEAR, Inc. Lesen Sie dazu bitte die Anmerkungen in this equipment does cause harmful interference to radio or television...
FVS336G Reference Manual
Page 5
... and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 interface of this software must not be removed or altered from the use acknowledge that you...
... and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 interface of this software must not be removed or altered from the use acknowledge that you...
FVS336G Reference Manual
Page 7
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes for VPN Tunnel Clients 6-12 Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes for VPN Tunnel Clients 6-12 Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File ... Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP Connection 10-4 Troubleshooting a TCP/IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File ... Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP Connection 10-4 Troubleshooting a TCP/IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
FVS336G Reference Manual
Page 13
... procedure that will save time or resources. Tip: This format is intended for readers with SSL & IPsec VPN. Warning: Ignoring this manual are described in the following typographical conventions: Italic Bold Fixed italic Emphasis, books, ... following paragraphs: • Typographical Conventions. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. The information in a malfunction...
... procedure that will save time or resources. Tip: This format is intended for readers with SSL & IPsec VPN. Warning: Ignoring this manual are described in the following typographical conventions: Italic Bold Fixed italic Emphasis, books, ... following paragraphs: • Typographical Conventions. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. The information in a malfunction...
FVS336G Reference Manual
Page 14
... First publication 2007 November Text corrections 2007 June 2008 Updated to the NETGEAR website in personal injury or death. ProSafe Dual WAN Gigabit Firewall with router firmware update. For more information about network, Internet, firewall, and VPN technologies, see the links to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Failure to take heed of...
... First publication 2007 November Text corrections 2007 June 2008 Updated to the NETGEAR website in personal injury or death. ProSafe Dual WAN Gigabit Firewall with router firmware update. For more information about network, Internet, firewall, and VPN technologies, see the links to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. Failure to take heed of...
FVS336G Reference Manual
Page 15
Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009 This chapter contains the following sections: • "Key Features" on page 1-1 • "Package Contents" on page ... • "Qualified Web Browsers" on page 1-8 Key Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for secure and simple remote connections. As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in case of failure of your Internet ...
Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009 This chapter contains the following sections: • "Key Features" on page 1-1 • "Package Contents" on page ... • "Qualified Web Browsers" on page 1-8 Key Features The VPN firewall provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports for secure and simple remote connections. As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in case of failure of your Internet ...
FVS336G Reference Manual
Page 16
... that can be configured on a mutually-exclusive basis to selected corporate resources without requiring a pre-installed VPN client on the remote computer. - IPsec VPN with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs...
... that can be configured on a mutually-exclusive basis to selected corporate resources without requiring a pre-installed VPN client on the remote computer. - IPsec VPN with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs...
FVS336G Reference Manual
Page 17
... connection such as blocked incoming traffic, port scans, attacks, and administrator logins. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to defend against hacker attacks. Provides granular... itself to corporate resources based upon user type or group membership. - A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - The FVS336G incorporates Auto UplinkTM technology. You can connect to either type of popular browsers, such as off...
... connection such as blocked incoming traffic, port scans, attacks, and administrator logins. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to defend against hacker attacks. Provides granular... itself to corporate resources based upon user type or group membership. - A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - The FVS336G incorporates Auto UplinkTM technology. You can connect to either type of popular browsers, such as off...
FVS336G Reference Manual
Page 18
...and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). The VPN firewall automatically senses the type of Attached PCs by simulating a...-based configuration allows you only for the information required for your local network. • DNS Proxy. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the network.
...and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP). The VPN firewall automatically senses the type of Attached PCs by simulating a...-based configuration allows you only for the information required for your local network. • DNS Proxy. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the network.
FVS336G Reference Manual
Page 19
... card provided with other helpful information. - Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. Package Contents The product package should contain the following...
... card provided with other helpful information. - Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. Package Contents The product package should contain the following...
FVS336G Reference Manual
Page 20
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN front panel shown below includes four groups of status indicator light-emitting diodes (LEDs), including Power and Test, WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR... PWR (Power) TEST WAN Ports ACTIVE On (Green) Off On (Amber) Blinking (Amber) Off On (Green) On (Amber) Description Power is operating at 1,000 Mbps. The LAN port is supplied to the VPN firewall. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of...
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN front panel shown below includes four groups of status indicator light-emitting diodes (LEDs), including Power and Test, WAN1, WAN2, and the LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR... PWR (Power) TEST WAN Ports ACTIVE On (Green) Off On (Amber) Blinking (Amber) Off On (Green) On (Amber) Description Power is operating at 1,000 Mbps. The LAN port is supplied to the VPN firewall. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of...
FVS336G Reference Manual
Page 21
....0, March 2009 ProSafe Dual WAN Gigabit Firewall with RJ-45 connectors. 3. Figure 1-2 Viewed from left to factory default settings. The LAN port is operating at 100 Mbps. Data is operating at 1,000 Mbps. LAN Ethernet ports: Four switched N-way automatic speed negotiating, Auto MDI/MDIX, Gigabit Ethernet ports with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. WAN Ethernet ports...
....0, March 2009 ProSafe Dual WAN Gigabit Firewall with RJ-45 connectors. 3. Figure 1-2 Viewed from left to factory default settings. The LAN port is operating at 100 Mbps. Data is operating at 1,000 Mbps. LAN Ethernet ports: Four switched N-way automatic speed negotiating, Auto MDI/MDIX, Gigabit Ethernet ports with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. WAN Ethernet ports...
FVS336G Reference Manual
Page 22
... Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use Internet Explorer 5.1 or higher, Apple Safari 1.2 or higher, or Mozilla Firefox l.x Web browser with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and...Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Although these web browsers are qualified for use with the VPN firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is...
... Figure 1-3 Qualified Web Browsers To configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use Internet Explorer 5.1 or higher, Apple Safari 1.2 or higher, or Mozilla Firefox l.x Web browser with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and...Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications. Although these web browsers are qualified for use with the VPN firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is...
FVS336G Reference Manual
Page 23
..., auto-rollover mode, or load balancing mode. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at: http://kbserver.netgear.com. 2. After logging in the installation guide. See "Logging into the VPN Firewall Router" on page 2-2 • "Navigating the Menus" on page 2-3 • "Configuring the Internet Connections" on page 2-4 • "Configuring...
..., auto-rollover mode, or load balancing mode. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at: http://kbserver.netgear.com. 2. After logging in the installation guide. See "Logging into the VPN Firewall Router" on page 2-2 • "Navigating the Menus" on page 2-3 • "Configuring the Internet Connections" on page 2-4 • "Configuring...