Netgear FVS336G-300NAS Specifications

Browse online or download Specifications for Hardware firewalls Netgear FVS336G-300NAS. Netgear FVS336G-300EUS firewall (hardware) User Manual

  • Download
  • Add to my manuals
  • Print
  • Page
    / 693
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 0
350 East Plumeria Drive
San Jose, CA 95134
USA
December 2014
202-11413-01
ProSAFE Dual WAN Gigabit SSL
VPN
Firewall
Model FVS336Gv3
Reference Manual
Page view 0
1 2 3 4 5 6 ... 692 693

Summary of Contents

Page 1 - Firewall

350 East Plumeria DriveSan Jose, CA 95134USADecember 2014202-11413-01ProSAFE Dual WAN Gigabit SSL VPN FirewallModel FVS336Gv3Reference Manual

Page 2 - Revision History

10ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 View the Attached Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Page 3 - Contents

Configure the IPv6 Internet and WAN Settings 100ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 11. Click the Apply button.Your settings are s

Page 4

Configure the IPv6 Internet and WAN Settings 101 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Connection Status screen shows a valid IP

Page 5

Configure the IPv6 Internet and WAN Settings 102ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 6to4 is a WAN tunnel mechanism for automatic t

Page 6

Configure the IPv6 Internet and WAN Settings 103 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not a

Page 7

Configure the IPv6 Internet and WAN Settings 104ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Note: If you do not use a stateful DHCPv6 serv

Page 8

Configure the IPv6 Internet and WAN Settings 105 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. Click the Add button under the List of Ava

Page 9

Configure the IPv6 Internet and WAN Settings 106ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 2. In the address field of your browser, ente

Page 10

Configure the IPv6 Internet and WAN Settings 107 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3For the default administrative account, the de

Page 11

Configure the IPv6 Internet and WAN Settings 108ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The IPv6 Tunnel Status table shows the followi

Page 12

Configure the IPv6 Internet and WAN Settings 109 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, ente

Page 13 - Key Features and Capabilities

11 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Login and Logout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Page 14

Configure the IPv6 Internet and WAN Settings 110ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Auto-Rollover for IPv6 WAN InterfacesYou can c

Page 15

Configure the IPv6 Internet and WAN Settings 111 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, ente

Page 16 - Extensive Protocol Support

Configure the IPv6 Internet and WAN Settings 112ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The other WAN interface becomes disabled.c. S

Page 17 - Maintenance and Support

Configure the IPv6 Internet and WAN Settings 113 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. In the IPv6 WAN Settings table, click the

Page 18 - Hardware Features

Configure the IPv6 Internet and WAN Settings 114ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Note: You can configure the VPN firewall to ge

Page 19

11544. Configure the IPv4 LAN SettingsThis chapter describes how to configure the IPv4 LAN features of your VPN firewall. The chapter contains the f

Page 20 - Back Panel

Configure the IPv4 LAN Settings 116ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manage IPv4 Virtual LANs and DHCP OptionsThe following sect

Page 21 - DEFAULT ACCESS

Configure the IPv4 LAN Settings 117 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Port-Based VLANsThe VPN firewall supports port-based VLANs.

Page 22 - Login Requirements

Configure the IPv4 LAN Settings 118ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3  To assign VLAN profiles to LAN ports:1. On your computer

Page 23

Configure the IPv4 LAN Settings 119 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• VLAN ID. The unique ID (or tag) assigned to the VLAN prof

Page 24 - IPv6 Requirements

1211. Get an Overview of the Features and Hardware and Log InThis chapter provides an overview of the features and capabilities of the NETGEAR ProSA

Page 25

Configure the IPv4 LAN Settings 120ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For most applications, the default DHCP server and TCP/IP s

Page 26

Configure the IPv4 LAN Settings 121 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Manage VLAN ProfilesFor each VLAN on the VPN firewall, you

Page 27

Configure the IPv4 LAN Settings 122ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. Click the Add button. The Add VLAN Profile screen displ

Page 28 - WAN Settings

Configure the IPv4 LAN Settings 123 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Enter the settings as described in the following table.

Page 29 -  Complete these tasks:

Configure the IPv4 LAN Settings 124ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Start IP Address Enter the start IP address. This address s

Page 30

Configure the IPv4 LAN Settings 125 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Apply button.Your settings are saved.Change a

Page 31 - Classical Routing

Configure the IPv4 LAN Settings 126ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Click the Apply button.Your settings are saved. The mod

Page 32 - IPv4 Internet Connection

Configure the IPv4 LAN Settings 127 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The ! status icons change from green circles to gray circle

Page 33

Configure the IPv4 LAN Settings 128ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. From the MAC Address for VLANs menu, select Unique.The

Page 34

Configure the IPv4 LAN Settings 129 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not assigned a dom

Page 35

Get an Overview of the Features and Hardware and Log In 13 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3What Is the ProSAFE Dual WAN Gigabit

Page 36

Configure the IPv4 LAN Settings 130ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 access to the Internet, but you can do so only for the defa

Page 37

Configure the IPv4 LAN Settings 131 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Available Secondary LAN IPs table displays the secondar

Page 38

Configure the IPv4 LAN Settings 132ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 4. If you changed the default domain or were assigned a do

Page 39

Configure the IPv4 LAN Settings 133 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Router Status screen displays.6. Select Network Config

Page 40

Configure the IPv4 LAN Settings 134ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • You do not need to reserve an IP address for a computer i

Page 41

Configure the IPv4 LAN Settings 135 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• Remove One or More Devices from the Network DatabaseView

Page 42

Configure the IPv4 LAN Settings 136ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The Known PCs and Devices table lists the entries in the ne

Page 43

Configure the IPv4 LAN Settings 137 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Click the Add button.The computer or device is added to

Page 44

Configure the IPv4 LAN Settings 138ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The LAN Groups screen displays. The following figure shows

Page 45

Configure the IPv4 LAN Settings 139 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Remove One or More Devices from the Network DatabaseThe fol

Page 46

Get an Overview of the Features and Hardware and Log In 14ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Built-in four-port 10/100/1000 Mbp

Page 47

Configure the IPv4 LAN Settings 140ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Change Group Names in the Network DatabaseBy default, the g

Page 48

Configure the IPv4 LAN Settings 141 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Select the radio button next to the group name that you

Page 49

Configure the IPv4 LAN Settings 142ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 some cases, local computers can run the application correct

Page 50 - Protocol Binding

Configure the IPv4 LAN Settings 143 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. Enter the settings as described in the following table.

Page 51

Configure the IPv4 LAN Settings 144ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 DHCP for DMZ Connected ComputersSelect one of the following

Page 52

Configure the IPv4 LAN Settings 145 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Click the Apply button.Your settings are saved.Manage S

Page 53

Configure the IPv4 LAN Settings 146ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 and you do not need to configure additional static routes.

Page 54

Configure the IPv4 LAN Settings 147 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Add Static Route screen displays.8. Enter the settings

Page 55

Configure the IPv4 LAN Settings 148ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Change a Static IPv4 RouteThe following procedure describes

Page 56 - Method for IPv4 Interfaces

Configure the IPv4 LAN Settings 149 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, enter the IP addr

Page 57

Get an Overview of the Features and Hardware and Log In 15 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Advanced VPN Support for Both IPSec

Page 58

Configure the IPv4 LAN Settings 150ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 4. If you changed the default domain or were assigned a do

Page 59

Configure the IPv4 LAN Settings 151 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Enter the settings as described in the following table.

Page 60 - Secondary IPv4 WAN Addresses

Configure the IPv4 LAN Settings 152ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Your settings are saved.IPv4 Static Route ExampleIn this ex

Page 61

15355. Configure the IPv6 LAN SettingsThis chapter describes how to configure the IPv6 LAN features of your VPN firewall. The chapter contains the f

Page 62

Configure the IPv6 LAN Settings 154ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manage the IPv6 LANThe following sections provide informati

Page 63 - Configure Dynamic DNS

Configure the IPv6 LAN Settings 155 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The VPN firewall provides three DHCPv6 options for the LAN.

Page 64

Configure the IPv6 LAN Settings 156ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For stateless DHCPv6 with prefix delegation, you must enabl

Page 65

Configure the IPv6 LAN Settings 157 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, enter the IP addr

Page 66 - Managing Advanced WAN Options

Configure the IPv6 LAN Settings 158ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as described in the following table.

Page 67

Configure the IPv6 LAN Settings 159 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Apply button.Your settings are saved.Manage a

Page 68

Get an Overview of the Features and Hardware and Log In 16ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Security FeaturesThe VPN firewall is

Page 69

Configure the IPv6 LAN Settings 160ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Stateless DHCPv6 Server and Prefix Delegation for the LANAs

Page 70

Configure the IPv6 LAN Settings 161 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The WAN Setup screen displays the IPv4 settings.b. In the

Page 71

Configure the IPv6 LAN Settings 162ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 f. Make sure that the Prefix Delegation check box is selec

Page 72

Configure the IPv6 LAN Settings 163 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. Click the Apply button.Your settings are saved.DHCPv6DH

Page 73

Configure the IPv6 LAN Settings 164ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manually Add IPv6 LAN Prefixes for Prefix DelegationAs an o

Page 74

Configure the IPv6 LAN Settings 165 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. Click the Apply button.Your settings are saved. The new

Page 75

Configure the IPv6 LAN Settings 166ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Remove One or More IPv6 LAN Prefixes for Prefix DelegationT

Page 76

Configure the IPv6 LAN Settings 167 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• Change an IPv6 LAN Address Pool• Remove One or More IPv6

Page 77

Configure the IPv6 LAN Settings 168ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as described in the following table.

Page 78

Configure the IPv6 LAN Settings 169 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Apply button.Your settings are saved.Add an I

Page 79

Get an Overview of the Features and Hardware and Log In 17 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3obtains actual DNS addresses from th

Page 80

Configure the IPv6 LAN Settings 170ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain or were not assigned a dom

Page 81

Configure the IPv6 LAN Settings 171 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, enter the IP addr

Page 82 - Change a QoS Profile

Configure the IPv6 LAN Settings 172ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 3. In the Username field, type your user name and in the P

Page 83

Configure the IPv6 LAN Settings 173 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3IPv6 Router Advertisement Daemon for the LANThe RADVD is an

Page 84

Configure the IPv6 LAN Settings 174ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The NETGEAR Configuration Manager Login screen displays.3.

Page 85

Configure the IPv6 LAN Settings 175 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Enter the settings as described in the following table.

Page 86

Configure the IPv6 LAN Settings 176ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 10. Click the Apply button.Your settings are saved.View Aut

Page 87 - IPv6 Network

Configure the IPv6 LAN Settings 177 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not assigned a dom

Page 88 - IPv6 Routing Mode

Configure the IPv6 LAN Settings 178ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you enabled the ISP DHCPv6 server to assign a prefix thr

Page 89 - Enable the IPv6 Routing Mode

Configure the IPv6 LAN Settings 179 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. Enter the settings as described in the following table.

Page 90 - Connection Automatically

Get an Overview of the Features and Hardware and Log In 18ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Package ContentsThe VPN firewall pro

Page 91

Configure the IPv6 LAN Settings 180ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain or were not assigned a dom

Page 92

Configure the IPv6 LAN Settings 181 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not assigned a dom

Page 93

Configure the IPv6 LAN Settings 182ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Secondary LAN IP address. 2001:db8:3000::2192 with a pref

Page 94

Configure the IPv6 LAN Settings 183 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Available Secondary LAN IPs table displays the secondar

Page 95

Configure the IPv6 LAN Settings 184ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the upper right, select the IPv6 radio button. The L

Page 96

Configure the IPv6 LAN Settings 185 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. In the Available Secondary LAN IPs table, select the ch

Page 97

Configure the IPv6 LAN Settings 186ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For the IPv6 DMZ, the VPN firewall provides two DHCPv6 serv

Page 98

Configure the IPv6 LAN Settings 187 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The VPN firewall factory default IP address is 192.168.1.1.

Page 99

Configure the IPv6 LAN Settings 188ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as described in the following table.

Page 100

Configure the IPv6 LAN Settings 189 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Apply button.Your settings are saved.Manage t

Page 101 - 6to4 Tunnel

Get an Overview of the Features and Hardware and Log In 19 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Figure 1. Front panelTable 1. LED d

Page 102

Configure the IPv6 LAN Settings 190ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 firewall periodically distributes router advertisements (RA

Page 103 - ISATAP Tunnel

Configure the IPv6 LAN Settings 191 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv34. If you changed the default domain or were assigned a do

Page 104 - Configure an ISATAP Tunnel

Configure the IPv6 LAN Settings 192ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Enter the settings as described in the following table.

Page 105 - Change an ISATAP Tunnel

Configure the IPv6 LAN Settings 193 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. Click the Apply button.Your settings are saved.Add an A

Page 106

Configure the IPv6 LAN Settings 194ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the upper right, select the IPv6 radio button. The D

Page 107

Configure the IPv6 LAN Settings 195 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Under the List of Prefixes to Advertise table, click th

Page 108 - Stateless IP/ICMP Translation

Configure the IPv6 LAN Settings 196ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 10. Enter the settings as described in the following table.

Page 109

Configure the IPv6 LAN Settings 197 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not assigned a dom

Page 110

Configure the IPv6 LAN Settings 198ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain or were not assigned a dom

Page 111

Configure the IPv6 LAN Settings 199 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Configure a Stateful DHCPv6 Server for the DMZThe following

Page 112 - Interfaces

2ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 SupportThank you for selecting NETGEAR products. After installing your device, locate the se

Page 113

Get an Overview of the Features and Hardware and Log In 20ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Back Panel The back panel of the VPN

Page 114 - What to Do Next

Configure the IPv6 LAN Settings 200ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as described in the following table.

Page 115

Configure the IPv6 LAN Settings 201 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Apply button.Your settings are saved.Add an I

Page 116 - IPv4 LANs and VLANs

Configure the IPv6 LAN Settings 202ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 4. If you changed the default domain or were assigned a do

Page 117 - Assign VLAN Profiles

Configure the IPv6 LAN Settings 203 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Enter the settings as described in the following table.

Page 118

Configure the IPv6 LAN Settings 204ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 5. Click the Login button.The Router Status screen display

Page 119 - DHCP Servers

Configure the IPv6 LAN Settings 205 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The DMZ Setup screen displays the IPv4 settings.7. In the

Page 120 - LDAP Servers

Configure the IPv6 LAN Settings 206ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain or were not assigned a dom

Page 121 - Add a VLAN Profile

Configure the IPv6 LAN Settings 207 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. Click the Apply button.Your settings are saved. The new

Page 122 - 7. Click the Add button

Configure the IPv6 LAN Settings 208ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The Static Routing screen displays the IPv6 settings.8. In

Page 123

Configure the IPv6 LAN Settings 209 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Delete button.The selected routes are removed

Page 124

Get an Overview of the Features and Hardware and Log In 21 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• Factory Defaults reset button. To

Page 125 - Change a VLAN Profile

21066. Customize Firewall ProtectionThis chapter describes how to use the firewall features of the VPN firewall to protect your network. The chapter

Page 126

Customize Firewall Protection 211 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Firewall Protection A firewall protects one network (the trus

Page 127

Customize Firewall Protection 212ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Overview of Rules to Block or Allow Specific Kinds of Traffic

Page 128

Customize Firewall Protection 213 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Default DMZ WAN RulesFor DMZ WAN traffic, the default policy

Page 129

Customize Firewall Protection 214ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Profiles for IPv4 Firewall Rules on page 295 and Default Qua

Page 130

Customize Firewall Protection 215 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Table 5. Outbound rules overview Setting Description Outboun

Page 131

Customize Firewall Protection 216ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 WAN Users The settings that determine which Internet location

Page 132

Customize Firewall Protection 217 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Inbound Rules — Port Forwarding The VPN firewall has a defaul

Page 133 - Network Database

Customize Firewall Protection 218ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 rule informs the firewall to direct inbound traffic for a par

Page 134 - Manage the Network Database

Customize Firewall Protection 219 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Settings for Inbound RulesThe following table describes the c

Page 135

Get an Overview of the Features and Hardware and Log In 22ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Rack-Mount the VPN Firewall with the

Page 136

Customize Firewall Protection 220ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 WAN Destination IP AddressThe setting that determines the des

Page 137

Customize Firewall Protection 221 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3DMZ Users The settings that determine which DMZ computers on

Page 138

Customize Firewall Protection 222ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Change the Default Outbound Policy for LAN WAN TrafficThe def

Page 139

Customize Firewall Protection 223 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The NETGEAR Configuration Manager Login screen displays.3. I

Page 140

Customize Firewall Protection 224ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Change the Default LAN WAN Outbound Policy for IPv6 TrafficTh

Page 141 - IPv4 DMZ

Customize Firewall Protection 225 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. From the Default Outbound Policy menu, select Block Alway

Page 142

Customize Firewall Protection 226ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Add an IPv6 LAN WAN Outbound RuleAdd an IPv4 LAN WAN Outbou

Page 143

Customize Firewall Protection 227 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. Under the Outbound Services table, click the Add button.T

Page 144

Customize Firewall Protection 228ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The following table lists the menus that apply to an IPv4 LAN

Page 145 - Manage Static IPv4 Routing

Customize Firewall Protection 229 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Firewall submenu tabs display with the LAN WAN Rules scre

Page 146 - Add a Static IPv4 Route

Get an Overview of the Features and Hardware and Log In 23 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Web Management Interface OverviewThe

Page 147 - 9. Click the Apply button

Customize Firewall Protection 230ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The following table lists the menus that apply to an IPv6 LAN

Page 148 - Change a Static IPv4 Route

Customize Firewall Protection 231 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Add an IPv4 LAN WAN Inbound RuleThe following procedure descr

Page 149

Customize Firewall Protection 232ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. Under the Inbound Services table, click the Add button.Th

Page 150

Customize Firewall Protection 233 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Apply button.Your settings are saved. The new r

Page 151

Customize Firewall Protection 234ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Under the Inbound Services table, click the Add button.Th

Page 152 - IPv4 Static Route Example

Customize Firewall Protection 235 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. Click the Apply button.Your settings are saved. The new r

Page 153

Customize Firewall Protection 236ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 3. In the Username field, type your user name and in the Pas

Page 154 - Manage the IPv6 LAN

Customize Firewall Protection 237 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Make your selections from the menus and enter the setting

Page 155

Customize Firewall Protection 238ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 2. In the address field of your browser, enter the IP addres

Page 156 - Delegation for the LAN

Customize Firewall Protection 239 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Make your selections from the menus and enter the setting

Page 157

Get an Overview of the Features and Hardware and Log In 24ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 - Both radio buttons are disabled.

Page 158

Customize Firewall Protection 240ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Note: Inbound LAN WAN rules take precedence over inbound DMZ

Page 159

Customize Firewall Protection 241 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. Under the Inbound Services table, click the Add button.Th

Page 160

Customize Firewall Protection 242ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The following table lists the menus that apply to an IPv4 DMZ

Page 161

Customize Firewall Protection 243 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Router Status screen displays.6. Select Security > Fi

Page 162 - IPv6 LAN Setup

Customize Firewall Protection 244ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The following table lists the menus that apply to an IPv6 DMZ

Page 163 - Your settings are saved

Customize Firewall Protection 245 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 To add an IPv4 LAN DMZ outbound rule:1. On your computer,

Page 164

Customize Firewall Protection 246ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Make your selections from the menus and enter the setting

Page 165

Customize Firewall Protection 247 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The NETGEAR Configuration Manager Login screen displays.3. I

Page 166

Customize Firewall Protection 248ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Make your selections from the menus and enter the setting

Page 167

Customize Firewall Protection 249 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The following sections provide information about adding LAN D

Page 168

Get an Overview of the Features and Hardware and Log In 25 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 To log in to the VPN firewall:1.

Page 169 - Add an IPv6 LAN Address Pool

Customize Firewall Protection 250ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. Under the Inbound Services table, click the Add button.Th

Page 170

Customize Firewall Protection 251 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, enter the IP addres

Page 171

Customize Firewall Protection 252ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Make your selections from the menus and enter the setting

Page 172

Customize Firewall Protection 253 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• Remove the rule To manage an existing rule:1. On your com

Page 173

Customize Firewall Protection 254ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Take one of the actions that are described in the followi

Page 174

Customize Firewall Protection 255 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• Examples of Inbound Firewall Rules• Examples of Outbound Fi

Page 175

Customize Firewall Protection 256ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as described in the following table.9.

Page 176 - Add Advertisement Prefixes

Customize Firewall Protection 257 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3IPv4 LAN WAN Inbound Rule: Allow a Videoconference from Restr

Page 177

Customize Firewall Protection 258ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as described in the following table.Se

Page 178

Customize Firewall Protection 259 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Apply button.Your settings are saved. The new r

Page 179

Get an Overview of the Features and Hardware and Log In 26ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Note: After five minutes of inactivi

Page 180

Customize Firewall Protection 260ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain or were not assigned a domai

Page 181

Customize Firewall Protection 261 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv313. Enter the settings as described in the following table.14

Page 182

Customize Firewall Protection 262ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 IPv6 LAN WAN Inbound Rule: Restrict RTelnet from a Single WAN

Page 183

Customize Firewall Protection 263 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Enter the settings as described in the following table.10

Page 184

Customize Firewall Protection 264ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 IPv4 LAN WAN Outbound Rule: Block Instant MessengerIf you wan

Page 185 - IPv6 DMZ

Customize Firewall Protection 265 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Enter the settings as described in the following table.9.

Page 186

Customize Firewall Protection 266ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 IPv6 DMZ WAN Outbound Rule: Allow a Group of DMZ User to Acce

Page 187

Customize Firewall Protection 267 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Enter the settings as described in the following table.10

Page 188

Customize Firewall Protection 268ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Set Limits for IPv4 Sessions• Manage Time-Out Periods for T

Page 189

Customize Firewall Protection 269 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Attack Checks screen displays the IPv4 settings.7. Enter

Page 190

Get an Overview of the Features and Hardware and Log In 27 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv36. Select Users > Users.The User

Page 191

Customize Firewall Protection 270ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Click the Apply button.Your settings are saved.Manage the

Page 192

Customize Firewall Protection 271 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3For the default administrative account, the default user name

Page 193

Customize Firewall Protection 272ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Manage VPN Pass-Through in the IPv4 Network• Manage VPN Pas

Page 194

Customize Firewall Protection 273 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. To block VPN pass-through, clear any of the following che

Page 195

Customize Firewall Protection 274ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 4. If you changed the default domain or were assigned a doma

Page 196

Customize Firewall Protection 275 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3For the default administrative account, the default user name

Page 197

Customize Firewall Protection 276ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as described in the following table.9.

Page 198

Customize Firewall Protection 277 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, enter the IP addres

Page 199

Customize Firewall Protection 278ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • ICMP Timeout. For ICMP traffic, the default time-out period

Page 200

Customize Firewall Protection 279 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not assigned a domai

Page 201 - Add an IPv6 DMZ Address Pool

2822. Configure the IPv4 Internet and WAN SettingsThis chapter explains how to configure the IPv4 Internet and WAN settings. The chapter contains th

Page 202

Customize Firewall Protection 280ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 b. Click the Add button.The multicast source address is adde

Page 203

Customize Firewall Protection 281 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 To enable ALG for SIP:1. On your computer, launch an Inter

Page 204

Customize Firewall Protection 282ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Manage Quality of Service Profiles for IPv4 Firewall Rules•

Page 205 - Manage Static IPv6 Routing

Customize Firewall Protection 283 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Services OverviewExamples of web servers that provide web ser

Page 206

Customize Firewall Protection 284ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 6. Select Security > Services. The Services screen displa

Page 207 - Change a Static IPv6 Route

Customize Firewall Protection 285 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, enter the IP addres

Page 208

Customize Firewall Protection 286ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3  To remove one or more customized services:1. On your compu

Page 209 - 9. Click the Delete button

Customize Firewall Protection 287 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3single firewall rule. For example, in a configuration with 10

Page 210 - Customize Firewall Protection

Customize Firewall Protection 288ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. In the Name field, enter a name for the service.9. Specify

Page 211 - Firewall Protection

Customize Firewall Protection 289 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv36. Select Network Security > Services > Service Groups

Page 212 - Default LAN WAN Rules

Configure the IPv4 Internet and WAN Settings 29 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Roadmap to Setting Up IPv4 Internet Connections

Page 213 - Categories of Service

Customize Firewall Protection 290ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manage IP Address GroupsYou can combine individual IP address

Page 214 - Order of Precedence

Customize Firewall Protection 291 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv36. Select Security > Services > IP Groups. The IP Grou

Page 215

Customize Firewall Protection 292ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 12. Repeat the previous two steps to add more IP addresses to

Page 216

Customize Firewall Protection 293 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The selected IP addresses are removed from the IP Addresses G

Page 217

Customize Firewall Protection 294ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Define a ScheduleSchedules define the time frames under which

Page 218

Customize Firewall Protection 295 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. In the Scheduled Days section, select a radio button:• Al

Page 219 - Settings for Inbound Rules

Customize Firewall Protection 296ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Change an IPv4 QoS Profile• Remove One or More IPv4 QoS Pro

Page 220

Customize Firewall Protection 297 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv33. In the Username field, type your user name and in the Pas

Page 221

Customize Firewall Protection 298ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as described in the following table.9.

Page 222

Customize Firewall Protection 299 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv33. In the Username field, type your user name and in the Pas

Page 223

3ContentsChapter 1 Get an Overview of the Features and Hardware and Log InWhat Is the ProSAFE Dual WAN Gigabit SSL VPN Firewall?. . . . . . . . . .

Page 224

Configure the IPv4 Internet and WAN Settings 30ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 This task is described in Manage Dynamic DNS Co

Page 225 - Add LAN WAN Rules

Customize Firewall Protection 300ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain or were not assigned a domai

Page 226

Customize Firewall Protection 301 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Manage Bandwidth Profiles for IPv4 TrafficBandwidth profiles

Page 227

Customize Firewall Protection 302ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Add and Enable a Bandwidth ProfileThe following procedure des

Page 228

Customize Firewall Protection 303 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. Under the List of Bandwidth Profiles table, click the Add

Page 229

Customize Firewall Protection 304ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Click the Apply button.Your settings are saved. The new b

Page 230

Customize Firewall Protection 305 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3For the default administrative account, the default user name

Page 231

Customize Firewall Protection 306ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 5. Click the Login button.The Router Status screen displays.

Page 232

30777. Protect Your NetworkThis chapter describes how to protect your network through features other than the firewall. The chapter contains the fol

Page 233

Protect Your Network 308ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manage Content FilteringTo restrict internal LAN users from access to

Page 234

Protect Your Network 309 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Note: Many websites require that cookies be accepted for the site to b

Page 235 - Add DMZ WAN Rules

Configure the IPv4 Internet and WAN Settings 31 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Note the following about NAT:• The VPN firewall

Page 236

Protect Your Network 310ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain or were not assigned a domain, leave

Page 237

Protect Your Network 311 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. In the Web Components section, select the check boxes for the comp

Page 238

Protect Your Network 312ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. To compose the list of blocked keywords and domain names, add, cha

Page 239

Protect Your Network 313 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv34. If you changed the default domain or were assigned a domain, from

Page 240

Protect Your Network 314ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The NETGEAR Configuration Manager Login screen displays.3. In the Use

Page 241

Protect Your Network 315 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 To enable MAC filtering and manage MAC addresses to be permitted or

Page 242

Protect Your Network 316ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Permit and Block the rest. Traffic coming from all addresses in the

Page 243

Protect Your Network 317 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3detects packets with an IP address that matches the IP address in the

Page 244 - Add LAN DMZ Rules

Protect Your Network 318ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 View and Set Up an IPv4/MAC BindingThe following procedure describes h

Page 245

Protect Your Network 319 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. In the Email IP/MAC Violations section, specify if you want to ena

Page 246

Configure the IPv4 Internet and WAN Settings 32ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the NAT (Network Address Translation) se

Page 247

Protect Your Network 320ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For the default administrative account, the default user name is admin

Page 248

Protect Your Network 321 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv35. Click the Login button.The Router Status screen displays.6. Selec

Page 249

Protect Your Network 322ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The pop-up screen displays the dropped IPv4 packets.8. Click the Stop

Page 250

Protect Your Network 323 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3For the default administrative account, the default user name is admin

Page 251

Protect Your Network 324ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Note: You must specify only once whether you want IP/MAC binding viola

Page 252

Protect Your Network 325 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Router Status screen displays.6. Select Security > Address Fil

Page 253 -  To manage an existing rule:

Protect Your Network 326ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the upper right, select the IPv6 radio button. The IP/MAC Bindi

Page 254 - Examples of Firewall Rules

Protect Your Network 327 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The pop-up screen displays the dropped IPv6 packets.9. Click the Stop

Page 255

Protect Your Network 328ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 3. The remote system receives the computer’s request and responds usi

Page 256 - WAN Rules screen

Protect Your Network 329 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Port Triggering screen displays. The following figure shows a rule

Page 257 - Addresses

Configure the IPv4 Internet and WAN Settings 33 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Note: If your ISP requires MAC authentication a

Page 258

Protect Your Network 330ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Change a Port Triggering RuleThe following procedure describes how to

Page 259

Protect Your Network 331 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, enter the IP address that wa

Page 260

Protect Your Network 332ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain or were not assigned a domain, leave

Page 261

Protect Your Network 333 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not assigned a domain, leave

Page 262 - Single LAN User

Protect Your Network 334ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Click the Refresh button. The content of the UPnP Portmap Table refres

Page 263

33588. Set Up Virtual Private Networking With IPSec ConnectionsThis chapter describes how to use the IP security (IPSec) virtual private networking

Page 264

Set Up Virtual Private Networking With IPSec Connections 336ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Dual WAN Port SystemsIf two WAN po

Page 265 - LAN WAN Rules screen

Set Up Virtual Private Networking With IPSec Connections 337 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Figure 7. WAN load balancing: FQDN

Page 266 - Site on the Internet

Set Up Virtual Private Networking With IPSec Connections 338ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Note: Although the VPN firewall su

Page 267

Set Up Virtual Private Networking With IPSec Connections 339 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The NETGEAR Configuration Manager

Page 268

Configure the IPv4 Internet and WAN Settings 34ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Failure Detection Method. The failure detecti

Page 269

Set Up Virtual Private Networking With IPSec Connections 340ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Create an IPv4 Gateway-to-Gateway

Page 270

Set Up Virtual Private Networking With IPSec Connections 341 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. Enter the settings as describe

Page 271 - Manage VPN Pass-Through

Set Up Virtual Private Networking With IPSec Connections 342ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Click the Apply button.Your se

Page 272 - VPN Pass-Through

Set Up Virtual Private Networking With IPSec Connections 343 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The configuration steps depend on

Page 273

Set Up Virtual Private Networking With IPSec Connections 344ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3  To set up an IPv6 gateway-to-gat

Page 274 - Set Limits for IPv4 Sessions

Set Up Virtual Private Networking With IPSec Connections 345 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Enter the settings as describe

Page 275

Set Up Virtual Private Networking With IPSec Connections 346ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Click the Apply button.Your se

Page 276

Set Up Virtual Private Networking With IPSec Connections 347 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv311. On the VPN firewall, activate

Page 277

Set Up Virtual Private Networking With IPSec Connections 348ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Figure 10. Example of an IPv4 clie

Page 278 - Multicast Pass-Through

Set Up Virtual Private Networking With IPSec Connections 349 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 To set up the VPN firewall for a

Page 279

Configure the IPv4 Internet and WAN Settings 35 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Click the Auto Detect button. The autodetec

Page 280

Set Up Virtual Private Networking With IPSec Connections 350ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. Enter the settings as describe

Page 281 - Manage Firewall Objects

Set Up Virtual Private Networking With IPSec Connections 351 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Click the Apply button.Your se

Page 282 - Manage Customized Services

Set Up Virtual Private Networking With IPSec Connections 352ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Collect the information that y

Page 283 - Add a Customized Service

Set Up Virtual Private Networking With IPSec Connections 353 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. From the main menu, select Con

Page 284 - Change a Customized Service

Set Up Virtual Private Networking With IPSec Connections 354ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 5. Specify the following VPN tunn

Page 285

Set Up Virtual Private Networking With IPSec Connections 355 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Specify the local and remote I

Page 286 - Service Groups Overview

Set Up Virtual Private Networking With IPSec Connections 356ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Configure the global parameter

Page 287 - Add a Service Group

Set Up Virtual Private Networking With IPSec Connections 357 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. Click the Save button.Your set

Page 288 - Change a Service Group

Set Up Virtual Private Networking With IPSec Connections 358ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 2. In the tree list pane of the C

Page 289

Set Up Virtual Private Networking With IPSec Connections 359 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv34. Specify the settings that are

Page 290 - Add an IP Address Group

Configure the IPv4 Internet and WAN Settings 36ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The Connection Status screen shows a valid IP a

Page 291

Set Up Virtual Private Networking With IPSec Connections 360ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. Specify the settings that are

Page 292 - Change an IP Address Group

Set Up Virtual Private Networking With IPSec Connections 361 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Your settings are saved. Continue

Page 293

Set Up Virtual Private Networking With IPSec Connections 362ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 11. Specify the settings that are

Page 294 - Define a Schedule

Set Up Virtual Private Networking With IPSec Connections 363 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv314. Specify the default lifetimes

Page 295

Set Up Virtual Private Networking With IPSec Connections 364ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Test the NETGEAR ProSAFE VPN Clien

Page 296 - Add an IPv4 QoS Profile

Set Up Virtual Private Networking With IPSec Connections 365 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Figure 11. VPN client system tray

Page 297

Set Up Virtual Private Networking With IPSec Connections 366ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 View the VPN Firewall IPSec VPN Co

Page 298 - Change an IPv4 QoS Profile

Set Up Virtual Private Networking With IPSec Connections 367 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Connection Status submenu tabs

Page 299

Set Up Virtual Private Networking With IPSec Connections 368ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3  To display the IPSec VPN log on

Page 300

Set Up Virtual Private Networking With IPSec Connections 369 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3You can change existing policies o

Page 301 - Bandwidth Profiles Overview

Configure the IPv4 Internet and WAN Settings 37 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv33. In the Username field, type your user name

Page 302

Set Up Virtual Private Networking With IPSec Connections 370ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3  To view the IKE policies:1. On

Page 303

Set Up Virtual Private Networking With IPSec Connections 371 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Each policy contains the settings

Page 304 - Change a Bandwidth Profile

Set Up Virtual Private Networking With IPSec Connections 372ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 6. Select VPN > IPSec VPN. The

Page 305

Set Up Virtual Private Networking With IPSec Connections 373 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Enter the settings as describe

Page 306

Set Up Virtual Private Networking With IPSec Connections 374ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Setting DescriptionMode Config Rec

Page 307 - Protect Your Network

Set Up Virtual Private Networking With IPSec Connections 375 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Identifier Type From the menu, sel

Page 308 - Manage Content Filtering

Set Up Virtual Private Networking With IPSec Connections 376ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Diffie-Hellman (DH) GroupThe DH Gr

Page 309

Set Up Virtual Private Networking With IPSec Connections 377 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. Click the Apply button.Your se

Page 310

Set Up Virtual Private Networking With IPSec Connections 378ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. To change a VPN policy for IPv

Page 311

Set Up Virtual Private Networking With IPSec Connections 379 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3a. Select VPN > IPSec VPN >

Page 312

Configure the IPv4 Internet and WAN Settings 38ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 10. Locate the Domain Name Server (DNS) Servers

Page 313

Set Up Virtual Private Networking With IPSec Connections 380ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Remove One or More IKE PoliciesThe

Page 314 - Enable Source MAC Filtering

Set Up Virtual Private Networking With IPSec Connections 381 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Note: When you use the VPN IPsec W

Page 315

Set Up Virtual Private Networking With IPSec Connections 382ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Auto. Some settings for the VPN

Page 316 - Manage IP/MAC Bindings

Set Up Virtual Private Networking With IPSec Connections 383 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain o

Page 317

Set Up Virtual Private Networking With IPSec Connections 384ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manually Add a VPN PolicyThe follo

Page 318

Set Up Virtual Private Networking With IPSec Connections 385 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The VPN Policies screen displays t

Page 319 - Change an IPv4/MAC Binding

Set Up Virtual Private Networking With IPSec Connections 386ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Other than the nature of the IP ad

Page 320

Set Up Virtual Private Networking With IPSec Connections 387 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Enable Keepalive Select a radio bu

Page 321 - Number of Dropped Packets

Set Up Virtual Private Networking With IPSec Connections 388ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Encryption Algorithm From the menu

Page 322

Set Up Virtual Private Networking With IPSec Connections 389 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. Click the Apply button.Your se

Page 323

Configure the IPv4 Internet and WAN Settings 39 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The VPN firewall attempts to make a connection

Page 324 - Change an IPv6/MAC Binding

Set Up Virtual Private Networking With IPSec Connections 390ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 2. In the address field of your b

Page 325

Set Up Virtual Private Networking With IPSec Connections 391 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The NETGEAR Configuration Manager

Page 326

Set Up Virtual Private Networking With IPSec Connections 392ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Extended Authentication OverviewWh

Page 327 - Manage Port Triggering

Set Up Virtual Private Networking With IPSec Connections 393 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv34. If you changed the default dom

Page 328 - Add a Port Triggering Rule

Set Up Virtual Private Networking With IPSec Connections 394ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 10. Locate the Extended Authentica

Page 329

Set Up Virtual Private Networking With IPSec Connections 395 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3c. In the List of VPN policies ta

Page 330 - Change a Port Triggering Rule

Set Up Virtual Private Networking With IPSec Connections 396ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain o

Page 331

Set Up Virtual Private Networking With IPSec Connections 397 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Click the Apply button.Your se

Page 332 -  To enable UPnP:

Set Up Virtual Private Networking With IPSec Connections 398ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 to remote users IP addresses from

Page 333

Set Up Virtual Private Networking With IPSec Connections 399 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv36. Select VPN > IPSec VPN >

Page 334

4ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Method for IPv4 Interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Page 335 - With IPSec Connections

Configure the IPv4 Internet and WAN Settings 40ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Note: If your ISP requires MAC authentication a

Page 336 - Dual WAN Port Systems

Set Up Virtual Private Networking With IPSec Connections 400ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as describe

Page 337 - Configurations

Set Up Virtual Private Networking With IPSec Connections 401 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Apply button.Your se

Page 338 - IPSec VPN Wizard Overview

Set Up Virtual Private Networking With IPSec Connections 402ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 13. Enter the settings as describe

Page 339

Set Up Virtual Private Networking With IPSec Connections 403 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3GeneralPolicy Name A descriptive n

Page 340

Set Up Virtual Private Networking With IPSec Connections 404ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 14. Click the Apply button.Your se

Page 341

Set Up Virtual Private Networking With IPSec Connections 405 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Configure the NETGEAR ProSAFE VPN

Page 342 - 8. Click the Apply button

Set Up Virtual Private Networking With IPSec Connections 406ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 2. In the tree list pane of the C

Page 343

Set Up Virtual Private Networking With IPSec Connections 407 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv34. Specify the settings that are

Page 344

Set Up Virtual Private Networking With IPSec Connections 408ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. Specify the settings that are

Page 345

Set Up Virtual Private Networking With IPSec Connections 409 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. In the tree list pane of the C

Page 346

Configure the IPv4 Internet and WAN Settings 41 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Enter the login name in the Login field and

Page 347 - Client-to-Gateway Tunnels

Set Up Virtual Private Networking With IPSec Connections 410ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 12. Click the Save button. Your se

Page 348

Set Up Virtual Private Networking With IPSec Connections 411 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv314. Specify the following default

Page 349

Set Up Virtual Private Networking With IPSec Connections 412ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 After you have set up the Mode Con

Page 350

Set Up Virtual Private Networking With IPSec Connections 413 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Change a Mode Config RecordThe fol

Page 351

Set Up Virtual Private Networking With IPSec Connections 414ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Remove One or More Mode Config Rec

Page 352

Set Up Virtual Private Networking With IPSec Connections 415 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• Keep-Alive and Dead Peer Detecti

Page 353 - 4. Click the Next button

Set Up Virtual Private Networking With IPSec Connections 416ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The VPN Policies screen displays t

Page 354

Set Up Virtual Private Networking With IPSec Connections 417 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Configure Dead Peer DetectionThe f

Page 355

Set Up Virtual Private Networking With IPSec Connections 418ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. To change an IKE policy for IP

Page 356

Set Up Virtual Private Networking With IPSec Connections 419 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3b. To reenable a VPN policy for I

Page 357 - ProSAFE VPN Client

Configure the IPv4 Internet and WAN Settings 42ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 13. Configure the IP address settings as descri

Page 358

Set Up Virtual Private Networking With IPSec Connections 420ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. In the List of VPN Policies ta

Page 359 - 5. Click the Save button

Set Up Virtual Private Networking With IPSec Connections 421 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3A PPTP user typically initiates a

Page 360 - 8. Click the Save button

Set Up Virtual Private Networking With IPSec Connections 422ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. Enter the settings as describe

Page 361

Set Up Virtual Private Networking With IPSec Connections 423 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Your settings are saved.View the A

Page 362 - 12. Click the Save button

Set Up Virtual Private Networking With IPSec Connections 424ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. To disable an active PPTP user

Page 363 - Information

Set Up Virtual Private Networking With IPSec Connections 425 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 To enable the L2TP server and co

Page 364

Set Up Virtual Private Networking With IPSec Connections 426ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Click the Apply button.Your se

Page 365

Set Up Virtual Private Networking With IPSec Connections 427 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The List of L2TP Active Users tabl

Page 366

42899. Set Up Virtual Private Networking with SSL ConnectionsThis chapter describes how to use the SSL VPN solution of the VPN firewall to provide

Page 367

Set Up Virtual Private Networking with SSL Connections 429 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3SSL VPN Portals OverviewThe followin

Page 368

Configure the IPv4 Internet and WAN Settings 43 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv317. To configure an automatic connection reset,

Page 369 - View the IKE Policies

Set Up Virtual Private Networking with SSL Connections 430ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Port forwarding detects and rerout

Page 370 -  To view the IKE policies:

Set Up Virtual Private Networking with SSL Connections 431 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3SSL VPN Wizard OverviewThis section

Page 371 - Manually Add an IKE Policy

Set Up Virtual Private Networking with SSL Connections 432ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Add SSL VPN users that are allowed

Page 372

Set Up Virtual Private Networking with SSL Connections 433 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. Enter the settings as described

Page 373 - IPv6 settings are identical

Set Up Virtual Private Networking with SSL Connections 434ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Setting DescriptionPortal Layout an

Page 374

Set Up Virtual Private Networking with SSL Connections 435 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Note: For more information about por

Page 375

Set Up Virtual Private Networking with SSL Connections 436ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Setting DescriptionDomain Name A des

Page 376

Set Up Virtual Private Networking with SSL Connections 437 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Note: For more information about dom

Page 377

Set Up Virtual Private Networking with SSL Connections 438ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 WARNING:Do not enter an existing use

Page 378 - Change an IKE Policy

Set Up Virtual Private Networking with SSL Connections 439 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv313. Enter the settings as described

Page 379

Configure the IPv4 Internet and WAN Settings 44ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manually Configure a PPTP IPv4 Internet Connect

Page 380

Set Up Virtual Private Networking with SSL Connections 440ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Note: For more information about cli

Page 381 - VPN Policies Overview

Set Up Virtual Private Networking with SSL Connections 441 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3WARNING:In the upper Local Server IP

Page 382 - View the VPN Policies

Set Up Virtual Private Networking with SSL Connections 442ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 17. Verify the settings. To make cha

Page 383

Set Up Virtual Private Networking with SSL Connections 443 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Your settings are saved. If the VPN

Page 384 - Manually Add a VPN Policy

Set Up Virtual Private Networking with SSL Connections 444ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 3. In the Username field, type your

Page 385

Set Up Virtual Private Networking with SSL Connections 445 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. In the Username field, type the

Page 386

Set Up Virtual Private Networking with SSL Connections 446ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The following figure shows a portal

Page 387

Set Up Virtual Private Networking with SSL Connections 447 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3View SSL VPN Connection and Status I

Page 388

Set Up Virtual Private Networking with SSL Connections 448ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The SSL VPN Connection Status table

Page 389 - Change a VPN Policy

Set Up Virtual Private Networking with SSL Connections 449 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv36. Select Monitoring > VPN Logs

Page 390

Configure the IPv4 Internet and WAN Settings 45 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. In the WAN IPv4 Settings table, click the E

Page 391

Set Up Virtual Private Networking with SSL Connections 450ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 selection. The domain determines bot

Page 392

Set Up Virtual Private Networking with SSL Connections 451 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Policies determine access to network

Page 393

Set Up Virtual Private Networking with SSL Connections 452ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 2. In the address field of your bro

Page 394

Set Up Virtual Private Networking with SSL Connections 453 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you have enabled IPv6, you can se

Page 395

Set Up Virtual Private Networking with SSL Connections 454ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Click the Apply button.Your sett

Page 396

Set Up Virtual Private Networking with SSL Connections 455 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3way around. For this reason, the fol

Page 397 - Mode Config Overview

Set Up Virtual Private Networking with SSL Connections 456ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 corresponding IPv4 portal is removed

Page 398

Set Up Virtual Private Networking with SSL Connections 457 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3SSL VPN Port Forwarding OverviewNote

Page 399

Set Up Virtual Private Networking with SSL Connections 458ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Add a Server and Port Number for SSL

Page 400

Set Up Virtual Private Networking with SSL Connections 459 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. In the Add New Application for P

Page 401

Configure the IPv4 Internet and WAN Settings 46ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 12. Locate the Internet (IP) Address section.13

Page 402

Set Up Virtual Private Networking with SSL Connections 460ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For the default administrative accou

Page 403

Set Up Virtual Private Networking with SSL Connections 461 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Remove a Server and Port Number Conf

Page 404 - 14. Click the Apply button

Set Up Virtual Private Networking with SSL Connections 462ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For the default administrative accou

Page 405 - Operation

Set Up Virtual Private Networking with SSL Connections 463 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3192.168.1.100 are assigned to device

Page 406

Set Up Virtual Private Networking with SSL Connections 464ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the Client IP Address Range s

Page 407

Set Up Virtual Private Networking with SSL Connections 465 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Your settings are saved. VPN tunnel

Page 408

Set Up Virtual Private Networking with SSL Connections 466ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the Add Routes for VPN Tunnel

Page 409

Set Up Virtual Private Networking with SSL Connections 467 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The NETGEAR Configuration Manager Lo

Page 410

Set Up Virtual Private Networking with SSL Connections 468ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. In the Client IP Address Range s

Page 411

Set Up Virtual Private Networking with SSL Connections 469 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. In the upper right, select the I

Page 412

Configure the IPv4 Internet and WAN Settings 47 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv315. Specify the DNS settings as described in th

Page 413 - Change a Mode Config Record

Set Up Virtual Private Networking with SSL Connections 470ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The VPN firewall factory default IP

Page 414

Set Up Virtual Private Networking with SSL Connections 471 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3resources. But for most organization

Page 415 - Configure Keep-Alives

Set Up Virtual Private Networking with SSL Connections 472ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the Add New Resource section,

Page 416

Set Up Virtual Private Networking with SSL Connections 473 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or

Page 417 - Dead Peer Detection

Set Up Virtual Private Networking with SSL Connections 474ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 10. Click the Apply button.Your sett

Page 418

Set Up Virtual Private Networking with SSL Connections 475 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Resources screen displays.7. In

Page 419

Set Up Virtual Private Networking with SSL Connections 476ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. In the Defined Resource Addresse

Page 420 - Manage the PPTP Server

Set Up Virtual Private Networking with SSL Connections 477 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Assuming that no conflicting user or

Page 421

Set Up Virtual Private Networking with SSL Connections 478ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the Query section, select a r

Page 422

Set Up Virtual Private Networking with SSL Connections 479 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your bro

Page 423 - Item Description

Configure the IPv4 Internet and WAN Settings 48ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The Connection Status pop-up screen displays. T

Page 424 - Manage the L2TP Server

Set Up Virtual Private Networking with SSL Connections 480ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Enter the settings as described

Page 425 - L2TP Server Configuration

Set Up Virtual Private Networking with SSL Connections 481 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The NETGEAR Configuration Manager Lo

Page 426

Set Up Virtual Private Networking with SSL Connections 482ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Enter the settings as described

Page 427

Set Up Virtual Private Networking with SSL Connections 483 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv33. In the Username field, type your

Page 428

Set Up Virtual Private Networking with SSL Connections 484ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Enter the settings as described

Page 429 - SSL VPN Portals Overview

Set Up Virtual Private Networking with SSL Connections 485 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your bro

Page 430

Set Up Virtual Private Networking with SSL Connections 486ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Enter the settings as described

Page 431 - SSL VPN Wizard Overview

Set Up Virtual Private Networking with SSL Connections 487 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv33. In the Username field, type your

Page 432

Set Up Virtual Private Networking with SSL Connections 488ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Your settings are saved. The modifie

Page 433 - WARNING:

Set Up Virtual Private Networking with SSL Connections 489 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The selected policies are removed fr

Page 434

Configure the IPv4 Internet and WAN Settings 49 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3firewall supports weighted load balancing and r

Page 435

4901010. Manage Users, Authentication, and VPN CertificatesThis chapter describes how to manage users, authentication, and security certificates fo

Page 436

Manage Users, Authentication, and VPN Certificates 491 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3VPN Firewall’s AuthenticationUsers are a

Page 437 - 10. Click the Next button

Manage Users, Authentication, and VPN Certificates 492ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Configure Authentication Domains, Groups

Page 438

Manage Users, Authentication, and VPN Certificates 493 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• Remove One or More Authentication Doma

Page 439

Manage Users, Authentication, and VPN Certificates 494ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The List of Domains table lists the foll

Page 440

Manage Users, Authentication, and VPN Certificates 495 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Setting DescriptionDomain Name A descrip

Page 441

Manage Users, Authentication, and VPN Certificates 496ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Click the Apply button.Your settings

Page 442

Manage Users, Authentication, and VPN Certificates 497 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The VPN firewall factory default IP addr

Page 443

Manage Users, Authentication, and VPN Certificates 498ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 3. In the Username field, type your use

Page 444

Manage Users, Authentication, and VPN Certificates 499 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3IMPORTANT:When you add a domain, the VPN

Page 445

5 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Chapter 4 Configure the IPv4 LAN SettingsManage IPv4 Virtual LANs and DHCP Options . . . .

Page 446

Configure the IPv4 Internet and WAN Settings 50ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Protocol BindingWhen a protocol is bound to a p

Page 447 - Disconnect Active Users

Manage Users, Authentication, and VPN Certificates 500ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The List of Groups table lists the follo

Page 448

Manage Users, Authentication, and VPN Certificates 501 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Change an Authentication GroupFor a grou

Page 449

Manage Users, Authentication, and VPN Certificates 502ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For a group that you created manually, i

Page 450

Manage Users, Authentication, and VPN Certificates 503 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3User Accounts OverviewWhen you create a

Page 451 - Create a Portal Layout

Manage Users, Authentication, and VPN Certificates 504ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Add a User AccountThe following procedur

Page 452

Manage Users, Authentication, and VPN Certificates 505 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• Name. The name of the user. If the use

Page 453

Manage Users, Authentication, and VPN Certificates 506ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Click the Apply button.Your settings

Page 454 - Change a Portal Layout

Manage Users, Authentication, and VPN Certificates 507 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The password fields become accessible.10

Page 455 -  To change a portal layout:

Manage Users, Authentication, and VPN Certificates 508ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manage User Login PoliciesYou can restri

Page 456

Manage Users, Authentication, and VPN Certificates 509 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Select one or both check boxes:• Dis

Page 457

Configure the IPv4 Internet and WAN Settings 51 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. In the Load Balancing Settings section, con

Page 458

Manage Users, Authentication, and VPN Certificates 510ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The Router Status screen displays.6. Se

Page 459

Manage Users, Authentication, and VPN Certificates 511 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3WARNING:If you allow login only from the

Page 460

Manage Users, Authentication, and VPN Certificates 512ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain or were

Page 461

Manage Users, Authentication, and VPN Certificates 513 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Router Status screen displays.6. Se

Page 462 - SSL VPN Clients Overview

Manage Users, Authentication, and VPN Certificates 514ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 12. Click the Add button. The browser is

Page 463

Manage Users, Authentication, and VPN Certificates 515 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Change Passwords and Automatic Logout Pe

Page 464

Manage Users, Authentication, and VPN Certificates 516ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the List of Users table, to the r

Page 465

Manage Users, Authentication, and VPN Certificates 517 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3VPN Certificates OverviewThe VPN firewal

Page 466

Manage Users, Authentication, and VPN Certificates 518ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 You can view loaded digital certificates

Page 467

Manage Users, Authentication, and VPN Certificates 519 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv34. In the Username field, type your use

Page 468

Configure the IPv4 Internet and WAN Settings 52ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The NETGEAR Configuration Manager Login screen

Page 469

Manage Users, Authentication, and VPN Certificates 520ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Remove a CA CertificateThe following pro

Page 470 - Network Objects Overview

Manage Users, Authentication, and VPN Certificates 521 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Generate a Certificate Signing Request a

Page 471 - Add an SSL Network Resource

Manage Users, Authentication, and VPN Certificates 522ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the Generate Self Certificate Req

Page 472

Manage Users, Authentication, and VPN Certificates 523 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Click the Generate button. A new SCR

Page 473 - Add Resource Addresses

Manage Users, Authentication, and VPN Certificates 524ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 16. Click the Upload button.The VPN fire

Page 474

Manage Users, Authentication, and VPN Certificates 525 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Remove One or More Self-Signed Certifica

Page 475

Manage Users, Authentication, and VPN Certificates 526ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 3. In the Username field, type your use

Page 476 - SSL Policies Overview

Manage Users, Authentication, and VPN Certificates 527 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv33. In the Username field, type your use

Page 477 - View SSL VPN Policies

Manage Users, Authentication, and VPN Certificates 528ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Remove One or More Certificate Revocatio

Page 478

Manage Users, Authentication, and VPN Certificates 529 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Figure 12. Security alertA security aler

Page 479

Configure the IPv4 Internet and WAN Settings 53 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Configure the protocol binding settings as

Page 480

5301111. Optimize Performance and Manage Your SystemThis chapter describes the tools for managing the network traffic to optimize its performance an

Page 481

Optimize Performance and Manage Your System 531 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Performance ManagementPerformance management co

Page 482

Optimize Performance and Manage Your System 532ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Features That Reduce TrafficThe following secti

Page 483

Optimize Performance and Manage Your System 533 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3- Address range. The rule applies to a range of

Page 484

Optimize Performance and Manage Your System 534ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 To further narrow down the content filtering, y

Page 485

Optimize Performance and Manage Your System 535 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Add LAN WAN Rules on page 225 and Add DMZ WAN

Page 486

Optimize Performance and Manage Your System 536ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Port TriggeringPort triggering allows some appl

Page 487

Optimize Performance and Manage Your System 537 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Use QoS and Bandwidth Assignment to Shift the T

Page 488

Optimize Performance and Manage Your System 538ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 System ManagementThe following sections provide

Page 489

Optimize Performance and Manage Your System 539 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Tip: If you are using a Dynamic DNS service suc

Page 490 - VPN Certificates

Configure the IPv4 Internet and WAN Settings 54ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Your settings are saved.The protocol binding ru

Page 491 - VPN Firewall’s Authentication

Optimize Performance and Manage Your System 540ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. To configure remote management for IPv6, in

Page 492 - Accounts

Optimize Performance and Manage Your System 541 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3WARNING:If you are remotely connected to the VP

Page 493 - Add an Authentication Domain

Optimize Performance and Manage Your System 542ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Use a Simple Network Management Protocol Manage

Page 494

Optimize Performance and Manage Your System 543 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not as

Page 495

Optimize Performance and Manage Your System 544ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. In the Create New SNMP Configuration Entry

Page 496

Optimize Performance and Manage Your System 545 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 To change an SNMP configuration:1. On your c

Page 497

Optimize Performance and Manage Your System 546ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Remove One or More SNMP ConfigurationsThe follo

Page 498 - Manage Authentication Groups

Optimize Performance and Manage Your System 547 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv33. In the Username field, type your user name

Page 499 - Add an Authentication Group

Optimize Performance and Manage Your System 548ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Access Type. Read-write user (RWUSER) or read

Page 500

Optimize Performance and Manage Your System 549 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Apply button.Your settings are sa

Page 501

Configure the IPv4 Internet and WAN Settings 55 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 To enable, disable, or remove one or more pro

Page 502 - Manage User Accounts

Optimize Performance and Manage Your System 550ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as described in the foll

Page 503 - User Accounts Overview

Optimize Performance and Manage Your System 551 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Back Up SettingsThe backup feature saves all VP

Page 504 - Add a User Account

Optimize Performance and Manage Your System 552ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. Click the Back Up button.A screen displays,

Page 505

Optimize Performance and Manage Your System 553 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not as

Page 506 - Change a User Account

Optimize Performance and Manage Your System 554ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Upgrade the FirmwareYou can install a different

Page 507

Optimize Performance and Manage Your System 555 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. To the left of the Upgrade button, click th

Page 508 - Configure Login Policies

Optimize Performance and Manage Your System 556ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 WARNING:When you press the hardware Factory Def

Page 509

Optimize Performance and Manage Your System 557 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, enter

Page 510

Optimize Performance and Manage Your System 558ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 number of seconds left until the reboot process

Page 511

Optimize Performance and Manage Your System 559 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The bottom of the screen displays the current w

Page 512

Configure the IPv4 Internet and WAN Settings 56ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Configure the Auto-Rollover Mode and Failure De

Page 513

Optimize Performance and Manage Your System 560ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Click the Apply button.Your settings are sa

Page 514

5611212. Monitor System Access and PerformanceThis chapter describes the system-monitoring features of the VPN firewall. You can be alerted to impor

Page 515 -  To change a password:

Monitor System Access and Performance 562ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Configure and Enable the WAN IPv4 Traffic MeterIf you

Page 516

Monitor System Access and Performance 563 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. If you want to configure the settings for the WAN

Page 517 - VPN Certificates Overview

Monitor System Access and Performance 564ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Click the Apply button.Your settings are saved.Ma

Page 518 - Upload a CA Certificate

Monitor System Access and Performance 565 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Configure and Enable the Traffic Meter for a LAN IPv4

Page 519

Monitor System Access and Performance 566ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 7. Click the Advanced option arrow in the upper righ

Page 520 - Remove a CA Certificate

Monitor System Access and Performance 567 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv310. Enter the settings as described in the following

Page 521

Monitor System Access and Performance 568ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Your settings are saved. The new account is added to

Page 522

Monitor System Access and Performance 569 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Change the Traffic Meter for a LAN AccountThe followi

Page 523

Configure the IPv4 Internet and WAN Settings 57 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3For the default administrative account, the def

Page 524 - View Self-Signed Certificates

Monitor System Access and Performance 570ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For more information about the settings, see Configur

Page 525 -  To remove one or more CSRs:

Monitor System Access and Performance 571 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Manage Logging, Alerts, and Event NotificationsThe fo

Page 526

Monitor System Access and Performance 572ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 If you did not change the domain or were not assigned

Page 527

Monitor System Access and Performance 573 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Click the Apply button.Your settings are saved.En

Page 528 -  To remove one or more CRLs:

Monitor System Access and Performance 574ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For the default administrative account, the default u

Page 529 - Figure 12. Security alert

Monitor System Access and Performance 575 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Click the Apply button.Your settings are saved.En

Page 530 - Manage Your System

Monitor System Access and Performance 576ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The NETGEAR Configuration Manager Login screen displa

Page 531 - Performance Management

Monitor System Access and Performance 577 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Click the Apply button.Your settings are saved.Vi

Page 532 - Features That Reduce Traffic

Monitor System Access and Performance 578ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 6. Select Monitoring > Firewall Logs & E-mail

Page 533 - Content Filtering

Monitor System Access and Performance 579 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not assigned

Page 534 - Source MAC Filtering

Configure the IPv4 Internet and WAN Settings 58ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Your settings are saved.Configure the Failure D

Page 535

Monitor System Access and Performance 580ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 4. If you changed the default domain or were assigne

Page 536 - VPN, L2TP, and PPTP Tunnels

Monitor System Access and Performance 581 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv34. At Site 2, set up a VPN tunnel between Gateway 2

Page 537 - Assigning Bandwidth Profiles

Monitor System Access and Performance 582ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The Router Status screen displays.6. Select VPN >

Page 538 - Remote Access

Monitor System Access and Performance 583 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. In the General section, clear the Enable NetBIOS

Page 539 - Configure Remote Access

Monitor System Access and Performance 584ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Click the Apply button.Your settings are saved.Ch

Page 540

Monitor System Access and Performance 585 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3On the Gateway at Site 2, Specify the Syslog Server o

Page 541 -  To access the CLI:

Monitor System Access and Performance 586ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • View the VPN Connection Status, L2TP Users, and PPT

Page 542 - SNMP Overview

Monitor System Access and Performance 587 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv34. If you changed the default domain or were assigne

Page 543

Monitor System Access and Performance 588ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 View the Traffic Statistics for the Interfaces and Ch

Page 544 - Change an SNMP Configuration

Monitor System Access and Performance 589 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3For the default administrative account, the default u

Page 545

Configure the IPv4 Internet and WAN Settings 59 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Note: The default time to roll over after the p

Page 546

Monitor System Access and Performance 590ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Wait for the counter to stop.b. In the Poll Interval

Page 547

Monitor System Access and Performance 591 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The following table explains the fields of the Detail

Page 548

Monitor System Access and Performance 592ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 VLAN ID The VLAN ID that you assigned to the LAN port

Page 549

Monitor System Access and Performance 593 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3WAN ConfigurationWAN Mode The WAN mode can be Single

Page 550 - Manage the Configuration File

Monitor System Access and Performance 594ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 View the VLAN StatusYou can view information about th

Page 551 - Back Up Settings

Monitor System Access and Performance 595 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If you did not change the domain or were not assigned

Page 552 - Restore Settings

Monitor System Access and Performance 596ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 3. In the Username field, type your user name and in

Page 553

Monitor System Access and Performance 597 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3View the VPN LogsThe following sections provide infor

Page 554 - Upgrade the Firmware

Monitor System Access and Performance 598ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The Port Triggering Status screen displays the inform

Page 555

Monitor System Access and Performance 599 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv34. If you changed the default domain or were assigne

Page 556

6ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manage a Stateful DHCPv6 Server and IPv6 Address Pools for the DMZ. 198Manage Static IPv6 Ro

Page 557

Configure the IPv4 Internet and WAN Settings 60ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Remove One or More Secondary WAN AddressesSec

Page 558

Monitor System Access and Performance 600ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. To terminate an active connection, click the Disc

Page 559

Monitor System Access and Performance 601 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv36. Select Network Configuration > WAN Settings &g

Page 560

Monitor System Access and Performance 602ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. To terminate an active connection, click the Disc

Page 561 - Performance

Monitor System Access and Performance 603 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The incoming and outgoing volume of traffic for each

Page 562

Monitor System Access and Performance 604ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The Router Status screen displays.6. Select Network

Page 563

Monitor System Access and Performance 605 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3View the DHCP LogThe following procedure describes ho

Page 564

Monitor System Access and Performance 606ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. To view the most recent entries, click the Refres

Page 565

6071313. Diagnostics and TroubleshootingThis chapter provides troubleshooting tips and information for the VPN firewall. After each problem descript

Page 566

Diagnostics and Troubleshooting 608ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Use the Diagnostics UtilitiesThe following sections provide

Page 567 - 11. Click the Apply button

Diagnostics and Troubleshooting 609 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3For the default administrative account, the default user na

Page 568

Configure the IPv4 Internet and WAN Settings 61 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv32. In the address field of your browser, enter

Page 569

Diagnostics and Troubleshooting 610ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Select either a gateway or a VPN policy:• Clear the Pin

Page 570

Diagnostics and Troubleshooting 611 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. To trace the route to an IPv6 location instead of an IP

Page 571 - Configure and Activate Logs

Diagnostics and Troubleshooting 612ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Look Up a DNS AddressA Domain Name Server (DNS) converts th

Page 572

Diagnostics and Troubleshooting 613 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 To display the routing table:1. On your computer, launch

Page 573

Diagnostics and Troubleshooting 614ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For the default administrative account, the default user na

Page 574

Diagnostics and Troubleshooting 615 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Reboot the VPN Firewall RemotelyYou can perform a remote re

Page 575 - Enable the Syslogs

Diagnostics and Troubleshooting 616ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3  To schedule the VPN firewall to reboot:1. On your comput

Page 576

Diagnostics and Troubleshooting 617 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3If a port’s left LED lights, a link is established to the c

Page 577

Diagnostics and Troubleshooting 618ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 cannot reach a DHCP server. These autogenerated addresses a

Page 578 - View the DNS Logs

Diagnostics and Troubleshooting 619 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• If the computer is configured correctly but still not wor

Page 579 - View the NTP Logs

Configure the IPv4 Internet and WAN Settings 62ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 10. Click the Add button.The secondary IP addre

Page 580

Diagnostics and Troubleshooting 620ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The WAN Setup screen for IPv4 displays.7. To check the WAN

Page 581

Diagnostics and Troubleshooting 621 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• If your ISP allows only one Ethernet MAC address to conne

Page 582

Diagnostics and Troubleshooting 622ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 - Windows Server 2003 R2, all versions- Linux and other UNI

Page 583

Diagnostics and Troubleshooting 623 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3c. Click or double-click View status of this connection. T

Page 584

Diagnostics and Troubleshooting 624ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 f. Make sure that an IPv6 address shows. The previous figu

Page 585

Diagnostics and Troubleshooting 625 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3- Verify that the Ethernet card driver software and TCP/IP

Page 586 - View the System Status

Diagnostics and Troubleshooting 626ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 correctly. If you have just completed configuring the VPN f

Page 587

Diagnostics and Troubleshooting 627 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The NETGEAR Configuration Manager Login screen displays.3.

Page 588

628AA. Network Planning for Multiple WAN PortsThis appendix describes the factors to consider when planning a network using a firewall that has more

Page 589

Network Planning for Multiple WAN Ports629 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3What to Consider Before You BeginThe following sect

Page 590

Configure the IPv4 Internet and WAN Settings 63 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Manage Dynamic DNS ConnectionsThe following sec

Page 591

Network Planning for Multiple WAN Ports630ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • If your ISP charges by the volume of data traffic

Page 592

Network Planning for Multiple WAN Ports631 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Internet Configuration RequirementsDepending on how

Page 593

Network Planning for Multiple WAN Ports632ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 WAN 1 gateway IP address: _

Page 594 - View the VLAN Status

Network Planning for Multiple WAN Ports633 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3You can configure two WAN ports on a mutually exclu

Page 595 - View the IPv6 Tunnel Status

Network Planning for Multiple WAN Ports634ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Figure 15. Dual WAN ports in load balancing modePl

Page 596

Network Planning for Multiple WAN Ports635 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Inbound Traffic to a Single WAN Port SystemThe Inte

Page 597 - View the VPN Logs

Network Planning for Multiple WAN Ports636ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Note: Load balancing is implemented for outgoing tr

Page 598 - Connection

Network Planning for Multiple WAN Ports637 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3For a single WAN gateway configuration, use an FQDN

Page 599

Network Planning for Multiple WAN Ports638ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 VPN Telecommuter - Client-to-GatewayThe following s

Page 600

Network Planning for Multiple WAN Ports639 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The IP addresses of the WAN ports can be either fix

Page 601

Configure the IPv4 Internet and WAN Settings 64ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3  To configure DDNS for both WAN interfaces:1.

Page 602

Network Planning for Multiple WAN Ports640ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 VPN Gateway-to-GatewayThe following situations exem

Page 603 - View the Attached Devices

Network Planning for Multiple WAN Ports641 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Figure 26. Gateway-to-gateway example in a dual WAN

Page 604

Network Planning for Multiple WAN Ports642ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Figure 28. Gateway-to-gateway example in a dual WAN

Page 605 - View the DHCP Log

Network Planning for Multiple WAN Ports643 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Figure 29. Telecommuter example in a single WAN por

Page 606 - All log entries are removed

Network Planning for Multiple WAN Ports644ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Figure 31. Telecommuter example in a dual WAN port

Page 607

645BB. System Logs and Error MessagesThis appendix provides examples and explanations of system logs and error message. When applicable, a recommend

Page 608 - Use the Diagnostics Utilities

System Logs and Error Messages646ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Log Message TermsThis appendix uses the following log messag

Page 609

System Logs and Error Messages647 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3These sections describe log messages that belong to one of t

Page 610 - Trace a Route

System Logs and Error Messages648ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 System StartupThis section describes the log message generat

Page 611

System Logs and Error Messages649 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3IPSec RestartThis section describes logs that are generated

Page 612 - Display the Routing Tables

Configure the IPv4 Internet and WAN Settings 65 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The WAN Mode section reports the configured WAN

Page 613 - Capture Packets in Real Time

System Logs and Error Messages650ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Multicast and Broadcast LogsWAN StatusThis section describes

Page 614

System Logs and Error Messages651 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3becomes active only until the primary link comes back up. Th

Page 615

System Logs and Error Messages652ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 PPP LogsThis section describes the WAN PPP connection logs.

Page 616

System Logs and Error Messages653 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• PPTP idle time-out logs• PPP authentication logsTable 26.

Page 617

System Logs and Error Messages654ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Resolved DNS NamesThis section describes the logs of DNS nam

Page 618

System Logs and Error Messages655 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Table 29. System logs: IPSec VPN tunnel, tunnel establishme

Page 619 - Check the WAN IP Address

System Logs and Error Messages656ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Recommended action NoneTable 30. System logs: IPSec VPN tu

Page 620

System Logs and Error Messages657 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Table 31. System logs: IPSec VPN tunnel, SA lifetime (150

Page 621

System Logs and Error Messages658ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Table 33. System logs: IPSec VPN tunnel, Dead Peer Detecti

Page 622

System Logs and Error Messages659 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3SSL VPN LogsThis section describes the log messages that are

Page 623

Configure the IPv4 Internet and WAN Settings 66ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Your settings are saved.Managing Advanced WAN O

Page 624

System Logs and Error Messages660ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Traffic Meter LogsRouting LogsThe following sections provide

Page 625

System Logs and Error Messages661 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3LAN to WAN LogsLAN to DMZ LogsDMZ to WAN LogsWAN to LAN Logs

Page 626 - Interface

System Logs and Error Messages662ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 DMZ to LAN LogsWAN to DMZ LogsOther Event LogsThe following

Page 627

System Logs and Error Messages663 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Source MAC Filter LogsBandwidth Limit LogsTable 47. Other e

Page 628 - WAN Ports

System Logs and Error Messages664ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 DHCP LogsThis section explains the log messages that are gen

Page 629 - Planning Overview

665CC. Two-Factor AuthenticationThis appendix provides an overview of two-factor authentication and an example of how to implement the WiKID solutio

Page 630

Two-Factor Authentication666ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Why Do I Need Two-Factor Authentication?This section includes the

Page 631

Two-Factor Authentication667 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• Something the user is—for example, biometrics such as a fingerp

Page 632

Two-Factor Authentication668ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The WiKID authentication server generates the one-time passcode (

Page 633

Two-Factor Authentication669 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv36. Enter the OTP as the login password.7. Click the Login butto

Page 634 - Planning for Inbound Traffic

Configure the IPv4 Internet and WAN Settings 67 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv37. In the WAN IPv4 Settings table, click the E

Page 635

670DD. Default Settings and Technical SpecificationsThis appendix provides the default settings and the physical and technical specifications of the

Page 636

Default Settings and Technical Specifications671 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Factory Default SettingsFor information about

Page 637

Default Settings and Technical Specifications672ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 IPv4 LAN, DMZ, and routing settingsLAN IPv4 a

Page 638

Default Settings and Technical Specifications673 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Firewall and security settingsInbound LAN WAN

Page 639

Default Settings and Technical Specifications674ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 QoS priorities (for IPv6 firewall rules) Norm

Page 640 - Reliability

Default Settings and Technical Specifications675 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3VPN IPsec Wizard: IKE policy settings for IPv

Page 641

Default Settings and Technical Specifications676ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Physical and Technical SpecificationsThe foll

Page 642

Default Settings and Technical Specifications677 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The following table shows the IPSec VPN speci

Page 643

Default Settings and Technical Specifications678ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The following table shows the SSL VPN specifi

Page 644

679Index Numerics10BASE-T, 100BASE-T, and 1000BASE-T speeds 693322.org 63–656to4 tunnelsconfiguring globally 101DMZ, configuring for 196LAN, configuri

Page 645

Configure the IPv4 Internet and WAN Settings 68ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Change the Port Speed and Duplex SettingsIn mos

Page 646 - System Log Messages

680ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 configuring 56–58described 49IPv6configuring 110described 110VPN IPSec 336, 342, 346, 351a

Page 647 - Login and Logout

681 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3configuration settings 671–676DMZ portIPv4 address and subnet mask 143IPv6 address and pre

Page 648 - Firewall Restart

682ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 proxy, VLANs 120, 124queries, auto-rollover 56server IP addressesSSL VPN settings 439serve

Page 649 - ICMP Redirect Logs

683 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3front panelLEDs 19ports 18FTP access, allowing from DMZ (rule example) 266full tunnel, SSL

Page 650 - Auto-Rollover

684ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 IP precedence, QoS 298IP/MAC bindings 316–326IPSec hosts, XAUTH 392–394IPSec VPN Wizardcli

Page 651

685 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3IPv6 tunnel status and addresses, viewing 107IPv6 tunnelsconfiguring globally 101–108DMZ,

Page 652 - PPP Logs

686ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 login time-outchanging 515default 26looking up DNS address 612MMAC addressesblocked or per

Page 653 - • PPP authentication logs

687 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3NT domain 492NTP (Network Time Protocol)modes and servers, settings 560troubleshooting 625

Page 654 - IPSec VPN Logs

688ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 customized services 283port triggering 327SSL VPN port forwarding 441, 457port rangesport

Page 655

689 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Rrack-mounting kit 22RADIUSCHAP and PAPdomain authentication 436, 495MSCHAP(v2), domain au

Page 656

Configure the IPv4 Internet and WAN Settings 69 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. In the Speed section, if you know the Ether

Page 657

690ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 shared bandwidth allocation, WAN traffic 77shutting down 615signature key length 522SIIT (

Page 658

691 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3technical support 2, 613telecommuter (client-to-gateway) 638Telnet and RTelnet, restrictin

Page 659 - SSL VPN Logs

692ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 versionsSNMP 544videoconferencingDMZ port 141, 185from restricted address (rule example) 2

Page 660 - Routing Logs

693 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3classical routing (IPv4), configuring 31connection speed 73connection statusIPv4, viewing

Page 661 - WAN to LAN Logs

7 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Chapter 7 Protect Your NetworkManage Content Filtering. . . . . . . . . . . . . . . . . . .

Page 662 - Other Event Logs

Configure the IPv4 Internet and WAN Settings 70ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Change the Advertised MAC Address of the VPN Fi

Page 663 - Bandwidth Limit Logs

Configure the IPv4 Internet and WAN Settings 71 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. In the Router’s MAC Address section, enter

Page 664 - DHCP Logs

Configure the IPv4 Internet and WAN Settings 72ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Your settings are saved.Set the WAN Connection

Page 665 - Two-Factor Authentication

Configure the IPv4 Internet and WAN Settings 73 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. In the Upload/Download Settings section, en

Page 666 - Two-Factor Authentication

Configure the IPv4 Internet and WAN Settings 74ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manage WAN QoS and WAN QoS ProfilesThe followin

Page 667

Configure the IPv4 Internet and WAN Settings 75 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Note: To configure and apply QoS profiles succe

Page 668

Configure the IPv4 Internet and WAN Settings 76ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 8. Enter the settings as described in the foll

Page 669 - You are logged in

Configure the IPv4 Internet and WAN Settings 77 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. Click the Apply button.Your settings are sa

Page 670 - Specifications

Configure the IPv4 Internet and WAN Settings 78ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Add a Priority Queue WAN QoS ProfileThe followi

Page 671 - Factory Default Settings

Configure the IPv4 Internet and WAN Settings 79 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Enter the settings as described in the foll

Page 672

8ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Test the Mode Config Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Page 673

Configure the IPv4 Internet and WAN Settings 80ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 9. Click the Apply button.Your settings are sa

Page 674

Configure the IPv4 Internet and WAN Settings 81 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The NETGEAR Configuration Manager Login screen

Page 675

Configure the IPv4 Internet and WAN Settings 82ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • QoS Type. The type of profile, either Rate Co

Page 676

Configure the IPv4 Internet and WAN Settings 83 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. Change the settings.For information about t

Page 677

Configure the IPv4 Internet and WAN Settings 84ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 The ! status icons change from green circles to

Page 678

8533. Configure the IPv6 Internet and WAN SettingsThis chapter explains how to configure the IPv6 Internet and WAN settings. The chapter contains th

Page 679 - Numerics

Configure the IPv6 Internet and WAN Settings 86ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Roadmap to Setting Up an IPv6 Internet Connecti

Page 680

Configure the IPv6 Internet and WAN Settings 87 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv35. (Optional) Configure auto-rollover and fail

Page 681

Configure the IPv6 Internet and WAN Settings 88ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 After you configured the IPv6 routing mode, you

Page 682

Configure the IPv6 Internet and WAN Settings 89 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Enable the IPv6 Routing ModeThe following proce

Page 683

9 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Manage User Login Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Page 684

Configure the IPv6 Internet and WAN Settings 90ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 WARNING:Changing the IP routing mode causes the

Page 685

Configure the IPv6 Internet and WAN Settings 91 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3Note: If your ISP requires MAC authentication a

Page 686

Configure the IPv6 Internet and WAN Settings 92ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 • Status. The status of the WAN interface (UP o

Page 687

Configure the IPv6 Internet and WAN Settings 93 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3• Prefix delegation check box is selected. A pr

Page 688

Configure the IPv6 Internet and WAN Settings 94ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Manually Configure a Static IPv6 Internet Conne

Page 689

Configure the IPv6 Internet and WAN Settings 95 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv38. In the IPv6 WAN Settings table, click the E

Page 690

Configure the IPv6 Internet and WAN Settings 96ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 Note: If you do not know your static IPv6 addre

Page 691

Configure the IPv6 Internet and WAN Settings 97 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3The Connection Status screen shows a valid IP a

Page 692

Configure the IPv6 Internet and WAN Settings 98ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3 For the default administrative account, the def

Page 693

Configure the IPv6 Internet and WAN Settings 99 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv39. In the Internet Address section, from the I

Comments to this Manuals

No comments