Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual
Have a look at the manual Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 137 Netgear manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
Configure the IPv6 LAN Settings 160 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 b. In the upper right, select the IPv6 radio button. The WAN Setup screen displays the IPv6 settings. c. In the WAN IPv6 Settings table, click the Edit button for the WAN interface for which you want to check the WAN configuration. The WAN IPv6 ISP Settings screen displays. The following figure shows the WAN2 IPv6 ISP Settings screen as an example. d. In the Internet Address section, make sure that the selection from the IPv6 menu is DHCPv6. e. In the DHCPv6 section, make sure that the Stateless Address Auto Configuration radio button is selected.
Configure the IPv6 LAN Settings 161 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 f. Make sure that the Prefix Delegation check box is selected. g. If you made any changes, click the Apply button. Your settings are saved. 7. Select Network Configuration > LAN Settings. The LAN Setup screen displays the IPv4 settings. 8. In the upper right, select the IPv6 radio button. The LAN Setup screen displays the IPv6 settings. The following figure shows some examples. 9. Enter the settings as described in the following table. SettingDescription IPv6 LAN Setup IPv6 Address Enter the LAN IPv6 address. The default address is fc00::1. (For more information, see IPv6 LANs on page 153.) IPv6 Prefix Length Enter the IPv6 prefix length, for example, 10 or 64. The default prefix length is 64.
Configure the IPv6 LAN Settings 162 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 10. Click the Apply button. Your settings are saved. DHCPv6 DHCP Status Enable the DHCPv6 server by selecting Enable DHCPv6 Server from the DHCP Status menu. The default menu selection is Disable DHCPv6 Server. DHCP Mode From the DHCP Mode menu, select Stateless. The IPv6 clients generate their own IP address by using a combination of locally available information and router advertisements but receive DNS server information from the DHCPv6 server. When you enable the stateless DHCP server for the LAN, you must also enable and configure the RADVD for the LAN. For more information, see Manage the IPv6 Router Advertisement Daemon for the LAN on page 171. Prefix Delegation Select the Prefix Delegation check box. By default, prefix delegation is disabled in the LAN. When you enable prefix delegation, the stateless DHCPv6 server assigns prefixes to its IPv6 LAN clients. For information about adding more prefixes, see Manually Add IPv6 LAN Prefixes for Prefix Delegation on page 163. Domain Name Enter the domain name of the DHCP server. Server Preference Enter the DHCP server preference value. The possible values are 0–255, with 255 as the default setting. This is an optional setting that specifies the server’s preference value in a server advertise message. The client selects the server with the highest preference value as the preferred server. DNS Servers From the DNS Server menu, select a DNS server option: • Use DNS Proxy. The VPN firewall acts as a proxy for all DNS requests and communicates with the ISP DNS servers that you configure. For information about specifying the ISP DNS servers, see Manually Configure a Static IPv6 Internet Connection on page 94. • Use DNS from ISP. The VPN firewall uses the ISP DNS servers that you configure. For information about specifying the ISP DNS servers, see Manually Configure a Static IPv6 Internet Connection on page 94. • Use below. When you select this option, the Primary DNS Server and Secondary DNS Server fields become available for you to enter IP addresses: - Primary DNS Server. Enter the IP address of the primary DNS server for the LAN. - Secondary DNS Server. Enter the IP address of the secondary DNS server for the LAN. Lease/Rebind Time Enter the period after which the DHCP lease is renewed with the original DHCP server or rebound with another DHCP server to extend the existing DHCP lease. The default period is 86400 seconds (24 hours). SettingDescription
Configure the IPv6 LAN Settings 163 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 Manually Add IPv6 LAN Prefixes for Prefix Delegation As an option, you can also manually add prefixes to enable the DHCPv6 server to assign these prefixes to its IPv6 LAN clients. To add an IPv6 prefix manually for prefix delegation: 1. On your computer, launch an Internet browser. 2. In the address field of your browser, enter the IP address that was assigned to the VPN firewall during the installation process. The VPN firewall factory default IP address is 192.168.1.1. The NETGEAR Configuration Manager Login screen displays. 3. In the Username field, type your user name and in the Password / Passcode field, type your password. For the default administrative account, the default user name is admin and the default password is password. 4. If you changed the default domain or were assigned a domain, from the Domain menu, select the domain. If you did not change the domain or were not assigned a domain, leave the menu selection at geardomain. 5. Click the Login button. The Router Status screen displays. 6. Select Network Configuration > LAN Settings. The LAN Setup screen displays the IPv4 settings. 7. In the upper right, select the IPv6 radio button. The LAN Setup screen displays the IPv6 settings. 8. Click the Add button. The Add Prefix Delegation Prefixes screen displays. 9. Enter the following settings: •IPv6 Prefix. Enter a prefix, for example, 2001:db8::. •IPv6 Prefix Length. Enter the IPv6 prefix length, for example, 64.
Configure the IPv6 LAN Settings 164 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 10. Click the Apply button. Your settings are saved. The new prefix is added to the List of Prefixes for Prefix Delegation table on the LAN Setup screen for IPv6. Change an IPv6 LAN Prefix for Prefix Delegation The following procedure describes how to change an existing IPv6 LAN prefix for prefix delegation. To change a prefix for prefix delegation: 1. On your computer, launch an Internet browser. 2. In the address field of your browser, enter the IP address that was assigned to the VPN firewall during the installation process. The VPN firewall factory default IP address is 192.168.1.1. The NETGEAR Configuration Manager Login screen displays. 3. In the Username field, type your user name and in the Password / Passcode field, type your password. For the default administrative account, the default user name is admin and the default password is password. 4. If you changed the default domain or were assigned a domain, from the Domain menu, select the domain. If you did not change the domain or were not assigned a domain, leave the menu selection at geardomain. 5. Click the Login button. The Router Status screen displays. 6. Select Network Configuration > LAN Settings. The LAN Setup screen displays the IPv4 settings. 7. In the upper right, select the IPv6 radio button. The LAN Setup screen displays the IPv6 settings. 8. In the List of prefixes for prefix delegation table, click the Edit button for the prefix that you want to change. The Edit Prefix Delegation Prefixes screen displays. 9. Modify the prefix, prefix length, or both: •IPv6 Prefix. Modify the prefix. •IPv6 Prefix Length. Modify the IPv6 prefix length. 10. Click the Apply button. Your settings are saved. The modified prefix displays in the List of prefixes for prefix delegation table on the LAN Setup screen.
Configure the IPv6 LAN Settings 165 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 Remove One or More IPv6 LAN Prefixes for Prefix Delegation The following procedure describes how to remove one or more prefixes that you no longer need for prefix delegation. To remove one or more prefixes for prefix delegation: 1. On your computer, launch an Internet browser. 2. In the address field of your browser, enter the IP address that was assigned to the VPN firewall during the installation process. The VPN firewall factory default IP address is 192.168.1.1. The NETGEAR Configuration Manager Login screen displays. 3. In the Username field, type your user name and in the Password / Passcode field, type your password. For the default administrative account, the default user name is admin and the default password is password. 4. If you changed the default domain or were assigned a domain, from the Domain menu, select the domain. If you did not change the domain or were not assigned a domain, leave the menu selection at geardomain. 5. Click the Login button. The Router Status screen displays. 6. Select Network Configuration > LAN Settings. The LAN Setup screen displays the IPv4 settings. 7. In the upper right, select the IPv6 radio button. The LAN Setup screen displays the IPv6 settings. 8. In the List of Prefixes for Prefix Delegation table, select the check box to the left of each prefix that you want to remove or click the Select All button to select all prefixes. 9. Click the Delete button. The selected prefixes are removed from the List of prefixes for prefix delegation table. Manage a Stateful DHCPv6 Server and IPv6 Address Pools for the LAN The following sections provide information about managing a stateful DHCPv6 server and IPv6 address pools for the LAN: •Stateful DHCPv6 Server and IPv6 Address Pool for the LAN •Configure a Stateful DHCPv6 Server for the LAN •Add an IPv6 LAN Address Pool •Change an IPv6 LAN Address Pool
Configure the IPv6 LAN Settings 166 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 •Remove One or More IPv6 LAN Address Pools Stateful DHCPv6 Server and IPv6 Address Pool for the LAN With a stateful DHCPv6 server, the IPv6 clients in the LAN obtain an interface IP address, configuration information such as DNS server information, and other parameters from the DHCPv6 server. The IP address is a dynamic address. For stateful DHCPv6, you also must configure IPv6 address pools (see Add an IPv6 LAN Address Pool on page 168) so that the DHCPv6 server can assign IPv6 addresses from these pools. For more information about stateful DHCPv6 servers, see DHCPv6 LAN Server Concepts and Configuration Roadmap on page 153. Configure a Stateful DHCPv6 Server for the LAN The following procedure describes how to configure a stateful DHCPv6 server and corresponding IPv6 settings for the LAN. To configure a stateful DHCPv6 server and corresponding IPv6 settings for the LAN: 1. On your computer, launch an Internet browser. 2. In the address field of your browser, enter the IP address that was assigned to the VPN firewall during the installation process. The VPN firewall factory default IP address is 192.168.1.1. The NETGEAR Configuration Manager Login screen displays. 3. In the Username field, type your user name and in the Password / Passcode field, type your password. For the default administrative account, the default user name is admin and the default password is password. 4. If you changed the default domain or were assigned a domain, from the Domain menu, select the domain. If you did not change the domain or were not assigned a domain, leave the menu selection at geardomain. 5. Click the Login button. The Router Status screen displays. 6. Select Network Configuration > LAN Settings. The LAN Setup screen displays the IPv4 settings. 7. In the upper right, select the IPv6 radio button. The LAN Setup screen displays the IPv6 settings. The following figure shows some examples.
Configure the IPv6 LAN Settings 167 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 8. Enter the settings as described in the following table. SettingDescription IPv6 LAN Setup IPv6 Address Enter the LAN IPv6 address. The default address is fc00::1. (For more information, see IPv6 LANs on page 153.) IPv6 Prefix Length Enter the IPv6 prefix length, for example, 10 or 64. The default prefix length is 64. DHCPv6 DHCP Status Enable the DHCPv6 server by selecting Enable DHCPv6 Server from the DHCP Status menu. The default menu selection is Disable DHCPv6 Server. DHCP Mode From the DHCP Mode menu, select Stateful. The IPv6 clients obtain an interface IP address, configuration information such as DNS server information, and other parameters from the DHCPv6 server. The IP address is a dynamic address. For stateful DHCPv6, you must add one or more IPv6 address pools (see Add an IPv6 LAN Address Pool on page 168). Note:If you select Stateful from the DHCP Mode menu, the Prefix Delegation check box is disabled. Domain Name Enter the domain name of the DHCP server.
Configure the IPv6 LAN Settings 168 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 9. Click the Apply button. Your settings are saved. Add an IPv6 LAN Address Pool If you configure a stateful DHCPv6 server for the LAN, you must add local DHCP IPv6 address pools so that the DHCPv6 server can control the allocation of IPv6 addresses in the LAN. To add an IPv6 LAN address pool: 1. On your computer, launch an Internet browser. 2. In the address field of your browser, enter the IP address that was assigned to the VPN firewall during the installation process. The VPN firewall factory default IP address is 192.168.1.1. The NETGEAR Configuration Manager Login screen displays. 3. In the Username field, type your user name and in the Password / Passcode field, type your password. For the default administrative account, the default user name is admin and the default password is password. 4. If you changed the default domain or were assigned a domain, from the Domain menu, select the domain. Server Preference Enter the DHCP server preference value. The possible values are 0–255, with 255 as the default setting. This is an optional setting that specifies the server’s preference value in a server advertise message. The client selects the server with the highest preference value as the preferred server. DNS Servers From the DNS Server menu, select a DNS server option: • Use DNS Proxy. The VPN firewall acts as a proxy for all DNS requests and communicates with the ISP DNS servers that you configure. For information about specifying the ISP DNS servers, see Manually Configure a Static IPv6 Internet Connection on page 94. • Use DNS from ISP. The VPN firewall uses the ISP DNS servers that you configure. For information about specifying the ISP DNS servers, see Manually Configure a Static IPv6 Internet Connection on page 94. • Use below. When you select this option, the Primary DNS Server and Secondary DNS Server fields become available for you to enter IP addresses: - Primary DNS Server. Enter the IP address of the primary DNS server for the LAN. - Secondary DNS Server. Enter the IP address of the secondary DNS server for the LAN. Lease/Rebind Time Enter the period after which the DHCP lease is renewed with the original DHCP server or rebound with another DHCP server to extend the existing DHCP lease. The default period is 86400 seconds (24 hours). SettingDescription
Configure the IPv6 LAN Settings 169 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 If you did not change the domain or were not assigned a domain, leave the menu selection at geardomain. 5. Click the Login button. The Router Status screen displays. 6. Select Network Configuration > LAN Settings. The LAN Setup screen displays the IPv4 settings. 7. In the upper right, select the IPv6 radio button. The LAN Setup screen displays the IPv6 settings. 8. Under the List of IPv6 Address Pools table, click the Add button. The LAN IPv6 Config screen displays. 9. Enter the settings as described in the following table. 10. Click the Apply button. Your settings are saved. The new IPv6 address pool is added to the List of IPv6 Address Pools table on the LAN Setup screen for IPv6. Change an IPv6 LAN Address Pool The following procedure describes how to change an existing IPv6 LAN address pool. To change an IPv6 LAN address pool: 1. On your computer, launch an Internet browser. SettingDescription Start IPv6 Address Enter the start IP address. This address specifies the first of the contiguous addresses in the IP address pool. Any new DHCPv6 client joining the LAN is assigned an IP address between this address and the end IP address. End IPv6 Address Enter the end IP address. This address specifies the last of the contiguous addresses in the IP address pool. Any new DHCPv6 client joining the LAN is assigned an IP address between the start IP address and this IP address. Prefix Length Enter the IPv6 prefix length, for example, 10 or 64.