Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

							Configure the IPv6 LAN Settings 
160 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
b. In the upper right, select the IPv6 radio button.
The WAN Setup screen displays the IPv6 settings.
c. In the WAN IPv6 Settings table, click the Edit button for the WAN interface for which 
you want to check the WAN configuration.
The WAN IPv6 ISP Settings screen displays. The following figure shows the WAN2 
IPv6 ISP Settings screen as an example.
d. In the Internet Address section, make sure that the selection from the IPv6 menu is 
DHCPv6.
e. In the DHCPv6 section, make sure that the Stateless Address Auto Configuration 
radio button is selected. 
						

							Configure the IPv6 LAN Settings 
161  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
f. Make sure that the Prefix Delegation check box is selected.
g. If you made any changes, click the Apply button.
Your settings are saved.
7. Select Network Configuration > LAN Settings.
The LAN Setup screen displays the IPv4 settings.
8. In the upper right, select the IPv6 radio button. 
The LAN Setup screen displays the IPv6 settings. The following figure shows some 
examples.
9. Enter the settings as described in the following table. 
SettingDescription
IPv6 LAN Setup
IPv6 Address Enter the LAN IPv6 address. The default address is fc00::1. (For more information, 
see IPv6 LANs on page
 153.)
IPv6 Prefix Length Enter the IPv6 prefix length, for example, 10 or 64. The default prefix length is 64. 
						

							Configure the IPv6 LAN Settings 
162 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
10. Click the Apply button.
Your settings are saved.
DHCPv6
DHCP Status Enable the DHCPv6 server by selecting Enable DHCPv6 Server from the DHCP 
Status menu.
The default menu selection is Disable DHCPv6 Server. 
DHCP Mode From the DHCP Mode menu, select Stateless. 
The IPv6 clients generate their own IP address by using a combination of locally 
available information and router advertisements but receive DNS server information 
from the DHCPv6 server.
When you enable the stateless DHCP server for the LAN, you must also enable and 
configure the RADVD for the LAN. For more information, see Manage the IPv6 
Router Advertisement Daemon for the LAN on page
 171. 
Prefix Delegation Select the Prefix Delegation check box. By default, prefix delegation is disabled in 
the LAN.
When you enable prefix delegation, the stateless DHCPv6 server assigns prefixes to 
its IPv6 LAN clients. For information about adding more prefixes, see Manually Add 
IPv6 LAN Prefixes for Prefix Delegation on page
 163.
Domain Name Enter the domain name of the DHCP server.
Server Preference Enter the DHCP server preference value. The possible values are 0–255, with 255 as 
the default setting.
This is an optional setting that specifies the server’s preference value in a server 
advertise message. The client selects the server with the highest preference value as 
the preferred server.
DNS Servers From the DNS Server menu, select a DNS server option:
• Use DNS Proxy. The VPN firewall acts as a proxy for all DNS requests and 
communicates with the ISP DNS servers that you configure. For information 
about specifying the ISP DNS servers, see 
Manually Configure a Static IPv6 
Internet Connection on page 94.
• Use DNS from ISP. The VPN firewall uses the ISP DNS servers that you 
configure. For information about specifying the ISP DNS servers, see 
Manually 
Configure a Static IPv6 Internet Connection on page 94.
• Use below. When you select this option, the Primary DNS Server and 
Secondary DNS Server fields become available for you to enter IP addresses:
-  Primary DNS Server. Enter the IP address of the primary DNS server for the 
LAN.
-  Secondary DNS Server. Enter the IP address of the secondary DNS server for 
the LAN.
Lease/Rebind Time Enter the period after which the DHCP lease is renewed with the original DHCP 
server or rebound with another DHCP server to extend the existing DHCP lease. The 
default period is 86400   seconds (24 hours).
SettingDescription 
						

							Configure the IPv6 LAN Settings 
163  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Manually Add IPv6 LAN Prefixes for Prefix Delegation
As an option, you can also manually add prefixes to enable the DHCPv6 server to assign 
these prefixes to its IPv6 LAN clients.
To add an IPv6 prefix manually for prefix delegation:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > LAN Settings.
The LAN Setup screen displays the IPv4 settings.
7. In the upper right, select the IPv6 radio button. 
The LAN Setup screen displays the IPv6 settings. 
8. Click the Add button.
The Add Prefix Delegation Prefixes screen displays.
9. Enter the following settings:
•IPv6 Prefix. Enter a prefix, for example, 2001:db8::.
•IPv6 Prefix Length. Enter the IPv6 prefix length, for example, 64. 
						

							Configure the IPv6 LAN Settings 
164 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
10. Click the Apply button.
Your settings are saved. The new prefix is added to the List of Prefixes for Prefix 
Delegation table on the LAN Setup screen for IPv6.
Change an IPv6 LAN Prefix for Prefix Delegation
The following procedure describes how to change an existing IPv6 LAN prefix for prefix 
delegation.
To change a prefix for prefix delegation:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > LAN Settings.
The LAN Setup screen displays the IPv4 settings.
7. In the upper right, select the IPv6 radio button. 
The LAN Setup screen displays the IPv6 settings. 
8. In the List of prefixes for prefix delegation table, click the Edit button for the prefix that you 
want to change.
The Edit Prefix Delegation Prefixes screen displays.
9. Modify the prefix, prefix length, or both:
•IPv6 Prefix. Modify the prefix.
•IPv6 Prefix Length. Modify the IPv6 prefix length.
10. Click the Apply button.
Your settings are saved. The modified prefix displays in the List of prefixes for prefix 
delegation table on the LAN Setup screen. 
						

							Configure the IPv6 LAN Settings 
165  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Remove One or More IPv6 LAN Prefixes for Prefix Delegation
The following procedure describes how to remove one or more prefixes that you no longer 
need for prefix delegation.
To remove one or more prefixes for prefix delegation:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > LAN Settings.
The LAN Setup screen displays the IPv4 settings.
7. In the upper right, select the IPv6 radio button. 
The LAN Setup screen displays the IPv6 settings. 
8. In the List of Prefixes for Prefix Delegation table, select the check box to the left of each 
prefix that you want to remove or click the Select All button to select all prefixes.
9. Click the Delete button.
The selected prefixes are removed from the List of prefixes for prefix delegation table.
Manage a Stateful DHCPv6 Server and IPv6 Address Pools for 
the LAN
The following sections provide information about managing a stateful DHCPv6 server and 
IPv6 address pools for the LAN:
•Stateful DHCPv6 Server and IPv6 Address Pool for the LAN
•Configure a Stateful DHCPv6 Server for the LAN
•Add an IPv6 LAN Address Pool
•Change an IPv6 LAN Address Pool 
						

							Configure the IPv6 LAN Settings 
166 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
•Remove One or More IPv6 LAN Address Pools
Stateful DHCPv6 Server and IPv6 Address Pool for the LAN
With a stateful DHCPv6 server, the IPv6 clients in the LAN obtain an interface IP address, 
configuration information such as DNS server information, and other parameters from the 
DHCPv6 server. The IP address is a dynamic address.
For stateful DHCPv6, you also must configure IPv6 address pools (see Add an IPv6 LAN 
Address Pool on page 168) so that the DHCPv6 server can assign IPv6 addresses from 
these pools.
For more information about stateful DHCPv6 servers, see DHCPv6 LAN Server Concepts 
and Configuration Roadmap on page 153.
Configure a Stateful DHCPv6 Server for the LAN
The following procedure describes how to configure a stateful DHCPv6 server and 
corresponding IPv6 settings for the LAN.
To configure a stateful DHCPv6 server and corresponding IPv6 settings for the LAN:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > LAN Settings.
The LAN Setup screen displays the IPv4 settings.
7. In the upper right, select the IPv6 radio button. 
The LAN Setup screen displays the IPv6 settings. The following figure shows some 
examples. 
						

							Configure the IPv6 LAN Settings 
167  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
8. Enter the settings as described in the following table. 
SettingDescription
IPv6 LAN Setup
IPv6 Address Enter the LAN IPv6 address. The default address is fc00::1. (For more information, 
see IPv6 LANs on page
 153.)
IPv6 Prefix Length Enter the IPv6 prefix length, for example, 10 or 64. The default prefix length is 64.
DHCPv6
DHCP Status Enable the DHCPv6 server by selecting Enable DHCPv6 Server from the DHCP 
Status menu.
The default menu selection is Disable DHCPv6 Server. 
DHCP Mode From the DHCP Mode menu, select Stateful.
The IPv6 clients obtain an interface IP address, configuration information such as 
DNS server information, and other parameters from the DHCPv6 server. The IP 
address is a dynamic address. 
For stateful DHCPv6, you must add one or more IPv6 address pools (see Add an 
IPv6 LAN Address Pool on page
 168).
Note:If you select Stateful from the DHCP Mode menu, the Prefix Delegation 
check box is disabled.
Domain Name Enter the domain name of the DHCP server. 
						

							Configure the IPv6 LAN Settings 
168 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
9. Click the Apply button.
Your settings are saved.
Add an IPv6 LAN Address Pool
If you configure a stateful DHCPv6 server for the LAN, you must add local DHCP IPv6 
address pools so that the DHCPv6 server can control the allocation of IPv6 addresses in the 
LAN.
To add an IPv6 LAN address pool:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
Server Preference Enter the DHCP server preference value. The possible values are 0–255, with 255 as 
the default setting.
This is an optional setting that specifies the server’s preference value in a server 
advertise message. The client selects the server with the highest preference value as 
the preferred server.
DNS Servers From the DNS Server menu, select a DNS server option:
• Use DNS Proxy. The VPN firewall acts as a proxy for all DNS requests and 
communicates with the ISP DNS servers that you configure. For information 
about specifying the ISP DNS servers, see 
Manually Configure a Static IPv6 
Internet Connection on page 94.
• Use DNS from ISP. The VPN firewall uses the ISP DNS servers that you 
configure. For information about specifying the ISP DNS servers, see 
Manually 
Configure a Static IPv6 Internet Connection on page 94.
• Use below. When you select this option, the Primary DNS Server and 
Secondary DNS Server fields become available for you to enter IP addresses:
-  Primary DNS Server. Enter the IP address of the primary DNS server for the 
LAN.
-  Secondary DNS Server. Enter the IP address of the secondary DNS server for 
the LAN.
Lease/Rebind Time Enter the period after which the DHCP lease is renewed with the original DHCP 
server or rebound with another DHCP server to extend the existing DHCP lease. The 
default period is 86400   seconds (24 hours).
SettingDescription 
						

							Configure the IPv6 LAN Settings 
169  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > LAN Settings.
The LAN Setup screen displays the IPv4 settings.
7. In the upper right, select the IPv6 radio button. 
The LAN Setup screen displays the IPv6 settings. 
8. Under the List of IPv6 Address Pools table, click the Add button.
The LAN IPv6 Config screen displays.
9. Enter the settings as described in the following table.
10. Click the Apply button.
Your settings are saved. The new IPv6 address pool is added to the List of IPv6 Address 
Pools table on the LAN Setup screen for IPv6.
Change an IPv6 LAN Address Pool
The following procedure describes how to change an existing IPv6 LAN address pool.
To change an IPv6 LAN address pool:
1. On your computer, launch an Internet browser.
SettingDescription
Start IPv6 Address Enter the start IP address. This address specifies the first of the contiguous 
addresses in the IP address pool. Any new DHCPv6 client joining the LAN is 
assigned an IP address between this address and the end IP address.
End IPv6 Address Enter the end IP address. This address specifies the last of the contiguous 
addresses in the IP address pool. Any new DHCPv6 client joining the LAN is 
assigned an IP address between the start IP address and this IP address.
Prefix Length Enter the IPv6 prefix length, for example, 10 or 64.