Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

							Optimize Performance and Manage Your System 
539  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Administration > SNMP. 
The SNMP screen displays. The following figure shows examples in the SNMP 
Configuration table.
The SNMP Configuration table shows the following columns:
•IP Address. The IP address of the SNMP manager. 
•Subnet Mask. The subnet mask of the SNMP manager.
•Port. The trap port number of the SNMP manager. 
•SNMP Version. The SNMP version (v1, v2c, or v3).
•Community. The trap community string of the SNMP manager. 
						

							Optimize Performance and Manage Your System 
540 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
7. In the Create New SNMP Configuration Entry section, enter the settings as described in the 
following table.
8. Click the Add button.
Your settings are saved and the new SNMP configuration is added to the SNMP 
Configuration table.
Change an SNMP Configuration
The following procedure describes how to change an existing SNMP configuration.
SettingDescription
Access From WAN
Enable access from 
WANTo enable SNMP access by an SNMP manager through the WAN interface, select 
the Enable access from WAN check box. By default, this check box is cleared and 
access is disabled.
Create New SNMP Configuration Entry
IP Address Enter the IP address of the new SNMP manager.
Subnet Mask Enter the subnet mask of the new SNMP manager. 
Note the following:
• If you want to narrow down the number of devices that can access the VPN 
firewall through the host IP address and receive traps, enter an IP address with 
a subnet mask of 255.255.255.252.
• If you want to allow a subnet to access the VPN firewall through the host IP 
address and receive traps, enter an IP address with a subnet mask of 
255.0.0.0. The traps are received at the IP address but almost the entire 
subnet has access through the community string.
Port Enter the port number of the new SNMP manager. The default port number is 162.
SNMP Version From the menu, select the SNMP version:
• v1. SNMPv1.
• v2c. SNMPv2c.
• v3. SNMPv3.
Community Enter the community string that allows the SNMP manager access to the MIB 
objects of the VPN firewall for the purpose of reading only.
SNMP Trap Events
Select the check boxes to specify which SNMP trap events are sent to an SNMP manager:
• WAN Connection Failure. Sent when the WAN connection fails.
• Firewall. Sent when a new connection is initiated through the addition of a custom firewall rule.
• IPSec VPN. Sent when an IPSec VPN tunnel is established or disconnected.
• SSL VPN. Sent when an SSL VPN tunnel is established or disconnected.
• User Login. Sent when a user logs in to the VPN firewall.
• User Login Fail. Sent when a user attempts to log in to the VPN firewall but fails to do so.
• Wan Fail Over. Sent when an auto-rollover occurs from one WAN interface to another.
• Configuration Change. Sent when the configuration of the VPN firewall changes. 
						

							Optimize Performance and Manage Your System 
541  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
To change an SNMP configuration:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Administration > SNMP. 
The SNMP screen displays.
7. In the SNMP Configuration table, click the Edit button for the SNMP configuration that you 
want to change.
The Edit SNMP screen displays.
8. Change the settings.
For information about the settings, see Set Up an SNMP Configuration and Specify the 
Trap Events on page 538.
9. Click the Apply button.
Your settings are saved. The modified SNMP configuration displays in the SNMP 
Configuration table on the SNMP screen. 
						

							Optimize Performance and Manage Your System 
542 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Remove One or More SNMP Configurations
The following procedure describes how to remove one or more SNMP configurations that you 
no longer need.
To remove one or more SNMP configurations:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Administration > SNMP. 
The SNMP screen displays.
7. In the SNMP Configuration table, select the check box to the left of each SNMP 
configuration that you want to remove or click the Select All button to select all SNMP 
configurations.
8. Click the Delete button.
The selected SNMP configurations are removed from the SNMP Configuration table.
View SNMPv3 Default Users and Change the Security for an SNMPv3 User
The following procedure describes how to view the SNMPv3 default users and change the 
security for an SNMPv3 user.
To view the SNMPv3 default users and change the security for an SNMPv3 user:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays. 
						

							Optimize Performance and Manage Your System 
543  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Administration > SNMP. 
The SNMP screen displays.
The SNMPv3 Users table lists the default SNMPv3 users that are preconfigured on the 
VPN firewall. The SNMPv3 Users table shows the following columns:
•Username. The default user names (admin or guest). 
						

							Optimize Performance and Manage Your System 
544 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
•Access Type. Read-write user (RWUSER) or read-only user (ROUSER). By default, 
the user Admin is an RWUSER and the user guest is an ROUSER.
•Security Level. The level of security that indicates whether security is disabled:
-NoAuthNoPriv. Both authentication and privacy are disabled.
-AuthNoPriv. Authentication is enabled but privacy is disabled.
-AuthPriv. Both authentication and privacy are enabled.
7. In the SNMPv3 User table, to the right of the SNMPv3 user for which you want to change 
the settings, click the corresponding Edit button.
The Edit User screen displays.
8. Enter the settings as described in the following table.
SettingDescription
Username The default user name (admin or guest) for information only.
Access Type The default access type (RWUSER or ROUSER) for information only.
Security Level From the menu, select the security level for communication between the 
SNMPv3 user and the SNMP agent that collects the MIB objects from the VPN 
firewall:
• NoAuthNoPriv. Both authentication and privacy are disabled. This is the 
default setting.
• AuthNoPriv. Authentication is enabled but privacy is disabled. Make a 
selection from the Authentication Algorithm menu and enter an 
authentication password.
• AuthPriv. Authentication and privacy are enabled. Make a selection from 
the Authentication Algorithm menu and enter an authentication 
password. In addition, make a selection from the Privacy Algorithm menu 
and enter a privacy password.
Authentication Algorithm From the menu, select the protocol for authenticating an SNMPv3 user:
• MD5. Message Digest 5. This is a hash algorithm that produces a 128-bit 
digest.
• SHA1. Secure Hash Algorithm 1. This is a hash algorithm that produces a 
160-bit digest. 
						

							Optimize Performance and Manage Your System 
545  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
9. Click the Apply button.
Your settings are saved. If you changed the security level, the new level displays in the 
SNMPv3 User table on the SNMP screen.
Configure the SNMP System Information
The following procedure describes how to configure the SNMP system information.
To configure the SNMP system information:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Administration > SNMP. 
The SNMP screen displays.
7. Click the SNMP System Info option arrow in the upper right. 
The SNMP SysConfiguration screen displays.
Authentication Password The authentication password that an SNMPv3 user must enter to be granted 
access to the SNMP agent that collects the MIB objects from the VPN firewall.
Privacy Algorithm From the menu, select the encryption method for the communication between 
an SNMPv3 user and the SNMP agent that collects the MIB objects from the 
VPN firewall:
• DES. Data Encryption Standard.
• AES. Advanced  Encryption  Standard.
Privacy Password The privacy password that an SNMPv3 user must enter to allow decryption of 
the MIB objects that the SNMP agent collects from the VPN firewall. 
SettingDescription 
						

							Optimize Performance and Manage Your System 
546 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
8. Enter the settings as described in the following table.
9. Click the Apply button.
Your settings are saved.
Manage the Configuration File
The configuration settings of the VPN firewall are stored in a configuration file on the VPN 
firewall. You can save (back up) the configuration file to a computer, retrieve (restore) it from 
the computer, or upgrade it to a new version.
Once the VPN firewall is installed and works correctly, make a backup of the configuration file 
to a computer. If necessary, you can later restore the VPN firewall settings from this file. 
The following sections provide information about managing the configuration file:
•Back Up Settings
•Restore Settings 
•Upgrade the Firmware
Note:For information about how to return the configuration settings of 
theVPN firewall to the factory default settings, see 
Revert to Factory 
Default Settings on page 551.
SettingDescription
SysContact Enter the SNMP system contact information that is available to the SNMP manager. 
This setting is optional.
SysLocation Enter the physical location of the VPN firewall. This setting is optional.
SysName Enter the name of the VPN firewall for SNMP identification purposes. The default 
name is FVS336GV2. 
						

							Optimize Performance and Manage Your System 
547  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Back Up Settings
The backup feature saves all VPN firewall settings to a file. Back up your settings periodically 
and store the backup file in a safe place.
Tip:You can use a backup file to export all settings to another VPN 
firewall that has the same language and management software 
versions. Remember to change the IP address of the second VPN 
firewall before deploying it to eliminate IP address conflicts on the 
network.
To back up settings:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Administration > Settings Backup & Upgrade.
The Settings Backup and Firmware Upgrade screen displays. 
						

							Optimize Performance and Manage Your System 
548 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
7. Click the Back Up button.
A screen displays, showing the file name of the backup file (FVS336GV2.cfg).
8. Follow the directions of your browser to save the file.
9. Open the folder in which you saved the backup file and verify that it is saved successfully.
Restore Settings
The following procedure describes how to restore the configuration settings of the VPN 
firewall from a backup file.
WARNING:
Restore only settings that were backed up from the same software 
version. Restoring settings from a different software version can 
corrupt your backup file or the VPN firewall system software.
To restore settings from a backup file: 
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.