Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

							Configure the IPv4 Internet and WAN Settings 
41  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
9. Enter the login name in the Login field and the password in the Password field. 
This information is provided by your ISP and is specific for the PPPoE service.
10. In the ISP Type section, select the Other (PPPoE) radio button.
11. Enter the PPPoE settings as described in the following table.
12. Locate the Internet (IP) Address section.
SettingDescription
Account Name The valid account name for the PPPoE connection.
Domain Name The name of your ISP’s domain or your domain name if your ISP assigned one. You 
can leave this field blank. 
Idle Timeout To keep the connection always on, select the Keep Connected radio button.
To log out after the connection is idle for a period, select the Idle Timeout radio button 
and, in the Idle Timeout field, enter the number of minutes to wait before 
disconnecting. This method is useful if your ISP charges you based on the period that 
you have logged in.  
						

							Configure the IPv4 Internet and WAN Settings 
42 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
13. Configure the IP address settings as described in the following table.
14. Locate the Domain Name Server (DNS) Servers section.
15. Specify the DNS settings as described in the following table. 
16. Locate the Connection Reset section.
SettingDescription
Select an IP address radio button:
• Get Dynamically from ISP. Select this radio button if your ISP has not assigned you a static IP 
address. The ISP automatically assigns an IP address to the VPN firewall using the DHCP network 
protocol.
• Use Static IP Address. Select this radio button if your ISP has assigned you a static (fixed or 
permanent) IP address. Enter the IP address and subnet mask.
IP Address The static IP address assigned to you. This address identifies the VPN firewall to 
your ISP. 
IP Subnet Mask The subnet mask is usually provided by your ISP.
SettingDescription
Select a Domain Name Server (DNS) IP address radio button:
• Get Automatically from ISP. Select this radio button if your ISP has not assigned you any DNS IP 
addresses. The ISP automatically assigns the DNS IP addresses to the VPN firewall using the DHCP 
network protocol.
• Use These DNS Servers. Select this radio button if your ISP assigned you static (fixed or permanent) 
DNS IP addresses. Enter the IP addresses in the Primary DNS Server and Secondary DNS Server 
fields.
Note:Make sure that you enter valid DNS server IP addresses in the fields. Incorrect DNS entries might 
cause connectivity issues.
Primary DNS Server The IP address of the primary DNS server.
Secondary DNS Server The IP address of the secondary DNS server. 
						

							Configure the IPv4 Internet and WAN Settings 
43  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
17. To configure an automatic connection reset, specify the settings as described in the 
following table.
18. Click the Apply button.
Your settings are saved.
19. To evaluate your entries, click the Test button. 
The VPN firewall attempts to make a connection according to the settings that you 
entered.
20. Verify the connection:
a.Select Network Configuration > WAN Settings > WAN Setup.
The WAN Setup screen displays the IPv4 settings.
b. In the IPv4 WAN Settings table, click the Status button for the WAN interface for 
which you want to display the connection status. 
The Connection Status pop-up screen displays. The IP addresses that are shown in 
this figure are not related to any other examples in this manual.
The Connection Status screen shows a valid IP address and gateway. You are 
connected to the Internet.
Note:If the configuration was not successful, see Troubleshoot the ISP 
Connection on page 615.
SettingDescription
Select the Connection Reset check box to specify a time when the WAN connection is reset, that is, the 
connection is disconnected momentarily and then reestablished. Then specify the disconnect time and 
delay.
Disconnect Time Specify the hour and minutes when the connection must be disconnected. 
Delay Specify the period in seconds after which the connection must be reestablished. 
						

							Configure the IPv4 Internet and WAN Settings 
44 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Manually Configure a PPTP IPv4 Internet Connection
To configure a PPTP IPv4 Internet connection, enter the PPTP IPv4 information that your 
IPv4 ISP gave you. If you do not have this information, contact your IPv4 ISP. 
For each WAN interface, you need the following information: login name, login password, the 
IP address assigned by the ISP to make the connection with the ISP server, the IP address of 
the ISP server, and, if applicable, account name and domain name.
If your ISP assigns you a static IP address, you also need the static IP address, IP subnet 
mask, and IP addresses of the primary DNS server and secondary DNS server. A static IP 
address can be assigned by ISP over PPTP.
Note:If your ISP requires MAC authentication and another MAC address was 
previously registered with your ISP, you must configure that MAC address 
on the VPN firewall (see 
Change the Advertised MAC Address of the VPN 
Firewall on page 70) before you begin the following procedure.
To manually configure and verify a PPTP IPv4 Internet connection for a WAN interface:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > WAN Settings > WAN Setup.
The WAN Setup screen displays the IPv4 settings. 
						

							Configure the IPv4 Internet and WAN Settings 
45  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
7. In the WAN IPv4 Settings table, click the Edit button for the WAN interface that you want 
to configure.
The WAN IPv4 ISP Settings screen displays.
8. In the ISP Login section, select the Ye s radio button.
9. Enter the login name in the Login field and the password in the Password field. 
This information is provided by your ISP and is specific for the PPTP service.
10. In the ISP Type section, select the Austria (PPTP) radio button.
11. Enter the PPTP settings as described in the following table.
SettingDescription
Account Name The account name is also known as the host name or system name. Enter the valid 
account name for the PPTP connection (usually your email ID assigned by your ISP). 
Some ISPs require you to enter your full email address here.
Domain Name Your domain name or workgroup name assigned by your ISP, or your ISP’s domain 
name. You can leave this field blank.  
						

							Configure the IPv4 Internet and WAN Settings 
46 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
12. Locate the Internet (IP) Address section.
13. Configure the IP address settings as described in the following table.
14. Locate the Domain Name Server (DNS) Servers section.
Idle Timeout Select a connection method radio button:
• Keep Connected. Select this radio button to keep the connection always on. 
• Idle Timeout. Select this radio button to log out after the connection is idle for a 
period. In the Idle Timeout field, enter the number of minutes to wait before 
disconnecting. This method is useful if your ISP charges you based on the period 
that you have logged in.
My IP Address The IP address assigned by the ISP to make the connection with the ISP server. 
Server IP Address The IP address of the PPTP server.
SettingDescription
Select an IP address radio button:
• Get Dynamically from ISP. Select this radio button if your ISP has not assigned you a static IP 
address. The ISP automatically assigns an IP address to the VPN firewall using the DHCP network 
protocol.
• Use Static IP Address. Select this radio button if your ISP assigned you a static (fixed or permanent) 
IP address. Enter the IP address and subnet mask.
IP Address The static IP address assigned to you. This address identifies the VPN firewall to 
your ISP. 
IP Subnet Mask The subnet mask is usually provided by your ISP.
SettingDescription 
						

							Configure the IPv4 Internet and WAN Settings 
47  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
15. Specify the DNS settings as described in the following table. 
16. Locate the Connection Reset section.
17. To configure an automatic connection reset, specify the settings as described in the 
following table.
18. Click the Apply button.
Your settings are saved.
19. To evaluate your entries, click the Test button. 
The VPN firewall attempts to make a connection according to the settings that you 
entered.
20. Verify the connection:
a.Select Network Configuration > WAN Settings > WAN Setup.
The WAN Setup screen displays the IPv4 settings.
b. In the IPv4 WAN Settings table, click the Status button for the WAN interface for 
which you want to display the connection status. 
SettingDescription
Select a Domain Name Server (DNS) radio button:
• Get Automatically from ISP. Select this radio button if your ISP has not assigned you any DNS IP 
addresses. The ISP automatically assigns the DNS IP addresses to the VPN firewall using the DHCP 
network protocol.
• Use These DNS Servers. Select this radio button if your ISP assigned you static (fixed or permanent) 
DNS IP addresses. Enter the IP addresses in the Primary DNS Server and Secondary DNS Server 
fields.
Note:Make sure that you enter valid DNS server IP addresses in the fields. Incorrect DNS entries might 
cause connectivity issues.
Primary DNS Server The IP address of the primary DNS server.
Secondary DNS Server The IP address of the secondary DNS server.
SettingDescription
Select the Connection Reset check box to specify a time when the WAN connection is reset, that is, the 
connection is disconnected momentarily and then reestablished. Then specify the disconnect time and 
delay.
Disconnect Time Specify the hour and minutes when the connection must be disconnected. 
Delay Specify the period in seconds after which the connection must be reestablished. 
						

							Configure the IPv4 Internet and WAN Settings 
48 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
The Connection Status pop-up screen displays. The IP addresses that are shown in 
this figure are not related to any other examples in this manual.
The Connection Status screen shows a valid IP address and gateway. You are 
connected to the Internet.
Note:If the configuration was not successful, see Troubleshoot the ISP 
Connection on page 615.
Configure Load Balancing or Auto-Rollover for IPv4 
Interfaces
You can configure the VPN firewall’s IPv4 interfaces on a mutually exclusive basis for either 
auto-rollover (for increased system reliability) or load balancing (for maximum bandwidth 
efficiency). If you do not select load balancing, you must specify one WAN interface as the 
primary interface.
The following sections provide information about configuring load balancing and auto-rollover 
for IPv4 interfaces:
•Load Balancing and Auto-Rollover for IPv4 WAN Interfaces
•Configure Load Balancing Mode and Optional Protocol Binding for IPv4 Interfaces
•Configure the Auto-Rollover Mode and Failure Detection Method for IPv4 Interfaces
Load Balancing and Auto-Rollover for IPv4 WAN Interfaces
The VPN firewall supports the following modes for IPv4 interfaces:
•Load balancing mode. The VPN firewall distributes the outbound traffic equally among 
the WAN interfaces that are functional. You can configure two WAN interfaces. The VPN  
						

							Configure the IPv4 Internet and WAN Settings 
49  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
firewall supports weighted load balancing and round-robin load balancing (see Configure 
Load Balancing Mode and Optional Protocol Binding for IPv4 Interfaces on page 49).
Note:Scenarios could arise in which load balancing must be bypassed for 
certain traffic or applications. If certain traffic must travel on a specific 
WAN interface, configure protocol binding rules for that WAN 
interface. The rule must match the desired traffic.
•Primary WAN mode. The selected WAN interface is made the primary interface. The 
other three interfaces are disabled.
•Auto-rollover mode. The selected WAN interface is defined as the primary link, and 
another interface must be defined as the rollover link. As long as the primary link is up, all 
traffic is sent over the primary link. When the primary link goes down, the rollover link is 
brought up to send the traffic. When the primary link comes back up, traffic automatically 
rolls back to the original primary link.
If you want to use a redundant ISP link for backup purposes, select the WAN port that 
must function as the primary link for this mode. Ensure that you also configure the backup 
WAN port and that you configure the WAN failure detection method to support 
auto-rollover (see 
Configure the Auto-Rollover Mode and Failure Detection Method for 
IPv4 Interfaces on page 56).
Note:If the VPN firewall functions in IPv4/IPv6 mode, you cannot configure 
load balancing. For information about IPv4/IPv6 mode, see 
Manage 
the IPv6 Routing Mode on page 88.
Configure Load Balancing Mode and Optional Protocol Binding 
for IPv4 Interfaces
To use two ISP IPv4 links simultaneously, configure load balancing. In load balancing mode, 
any WAN port carries any outbound protocol unless you configure protocol binding.
The following sections provide information about configuring load balancing mode and 
optional protocol binding for IPv4 interfaces:
•Protocol Binding
•Configure Load Balancing Mode for IPv4 Interfaces
•Configure Protocol Binding Rules for IPv4 Interfaces
•Change a Protocol Binding Rule
•Manage Existing Protocol Binding Rules 
						

							Configure the IPv4 Internet and WAN Settings 
50 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Protocol Binding
When a protocol is bound to a particular WAN port, all outgoing traffic of that protocol is 
directed to the bound WAN port. For example, if the HTTPS protocol is bound to the WAN1 
port and the FTP protocol is bound to the WAN2 port, the VPN firewall automatically routes 
all outbound HTTPS traffic from the computers on the LAN through the WAN1 port. All 
outbound FTP traffic is routed through the WAN2 port.
Protocol binding addresses two issues:
•Segregation of traffic between links that are not of the same speed. 
High-volume traffic can be routed through the WAN port connected to a high-speed link, 
and low-volume traffic can be routed through the WAN port connected to the low-speed 
link.
•Continuity of source IP address for secure connections. 
Some services, particularly HTTPS, cease to respond when a client’s source IP address 
changes shortly after a session is established.
Configure Load Balancing Mode for IPv4 Interfaces
The following procedure describes how to configure load balancing mode, which the VPN 
firewall supports only for IPv4 WAN interfaces.
To configure load balancing mode:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > WAN Settings > WAN Mode. 
The WAN Mode screen displays.