Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

Manage Users, Authentication, and VPN Certificates 
499  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
User Accounts Overview
When you create a user account, you must assign the user to a user group. When you create 
a group, you must assign the group to a domain that specifies the authentication method. 
Therefore, first create any domains, then groups, and then user accounts.
Note:IPSec VPN, L2TP, and PPTP users do not belong to a domain and 
are not assigned to a group.
The VPN firewall...

Manage Users, Authentication, and VPN Certificates 
500 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Add a User Account
The following procedure describes how to manually add a user account.
To add a user account:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login...

Manage Users, Authentication, and VPN Certificates 
501  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
•Name. The name of the user. If the user name is appended by an asterisk, the user is 
a default user that is preconfigured on the VPN firewall and you cannot remove the 
user.
•Group. The group to which the user is assigned.
•Type. The type of access credentials that are assigned to the user.
•Authentication Domain. The authentication domain to which the user is assigned.
•Action. The Edit...

Manage Users, Authentication, and VPN Certificates 
502 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
9. Click the Apply button.
Your settings are saved. The user is added to the List of Users table.
Change a User Account
The following procedure describes how to change an existing user account. However, you 
cannot change the user name or the group to which the user is assigned.
To change a user account:
1. On your computer, launch an Internet browser.
2. In the address field of your browser,...

Manage Users, Authentication, and VPN Certificates 
503  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
The password fields become accessible.
10. Change the password.
11. Click the Apply button.
Your settings are saved. The modified user account displays in the List of Users table on 
the Users screen.
Remove One or More User Accounts
The following procedure describes how to remove one or more user accounts that you no 
longer need.
Note:You cannot remove the default admin or guest user...

Manage Users, Authentication, and VPN Certificates 
504 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Manage User Login Policies
You can restrict the ability of defined users to log in to the VPN firewall’s web management 
interface. You can also require or prohibit logging in from certain IP addresses or from 
particular browsers.
The following sections provide information about managing user login policies:
•Configure Login Policies
•Configure Login Restrictions Based on IP Addresses
•Remove...

Manage Users, Authentication, and VPN Certificates 
505  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
8. Select one or both check boxes:
•Disable Login. Prohibits the user from logging in to the VPN firewall.
•Deny Login from WAN Interface. Prohibits the user from logging in from the WAN 
interface. In this case, the user can log in only from the LAN interface.
Note:For security reasons, the Deny Login from WAN Interface check 
box is selected by default for guests and administrators. The...

Manage Users, Authentication, and VPN Certificates 
506 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
The Router Status screen displays.
6. Select Users > Users. 
The Users screen displays.
7. In the List of Users table, to the right of the user for which you want to set login policies, click 
the corresponding Policies button.
The policies submenu tabs display, with the Login Policies screen in view.
8. Click the By Source IP Address submenu tab.
The By Source IP Address screen displays the...

Manage Users, Authentication, and VPN Certificates 
507  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
WARNING:
If you allow login only from the defined IP addresses, add your own 
IP address to the Defined Addresses table; otherwise, you are 
locked out.
13. Click the Add button.
The address is added to the Defined Addresses table.
14. Repeat Step 12 and Step 13 for any other addresses that you want to add to the Defined 
Addresses table.
Remove One or More IP Addresses for Login Restrictions...

Manage Users, Authentication, and VPN Certificates 
508 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Users > Users. 
The Users screen displays.
7. In the List of Users table, to the right of the user for which you want to change login policies, 
click the corresponding Policies button.
The policies submenu tabs...