Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

							Monitor System Access and Performance 
559  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
7. If you want to configure the settings for the WAN2 interface, click the WAN2 Traffic Meter 
tab.
8. Enter the settings as described in the following table.
SettingDescription
Enable Traffic Meter
In the Do you want to enable Traffic Metering on WAN1? section, select a radio button:
• Ye s. Traffic metering is enabled and the traffic meter records the volume of Internet traffic passing 
through the WAN interface. Complete the fields on the right (see explanations later in this table).
• No. Traffic metering is disabled. This is the default setting.
Select a radio button to specify if or how the VPN firewall applies restrictions when the traffic limit is 
reached:
• No Limit. No restrictions are applied when the traffic limit is reached.
• Download only. Restrictions are applied to incoming traffic when the traffic limit is reached. Complete 
the Monthly Limit field.
• Both Directions. Restrictions are applied to both incoming and outgoing traffic when the traffic limit is 
reached. Complete the Monthly Limit field.
Monthly Limit Enter the monthly traffic volume limit in MB. The default setting is 0 MB. 
						

							Monitor System Access and Performance 
560 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
9. Click the Apply button.
Your settings are saved.
Manage the LAN IPv4 Traffic Meter
The following sections provide information about managing the LAN IPv4 traffic meter:
•Configure and Enable the Traffic Meter for a LAN IPv4 Address Account
•View Traffic Meter Statistics for a LAN Account
•Change the Traffic Meter for a LAN Account
•Remove One or More LAN Traffic Meter Accounts
Increase this month 
limit bySelect this check box to temporarily increase a previously specified monthly traffic 
volume limit, and enter the additional allowed volume in MB. The default setting is 0 
MB.
Note:When you click the Apply button to save these settings, this field is reset to 0 
MB so that the increase is applied only once.
This month limit This is a nonconfigurable field that displays the total monthly traffic volume limit that 
applies to this month. This total is the sum of the monthly traffic volume and the 
increased traffic volume.
Traffic Counter
Restart Traffic 
CounterSelect when the traffic counter restarts:
• Restart Traffic Counter Now. Select this option and click the Apply button at 
the bottom to restart the traffic counter immediately. 
• Restart Traffic Counter at a Specific Time. Restart the traffic counter at a 
specific time and day of the month. Complete the time fields and select the 
meridiem and the day of the month from the menus.
Send e-mail report 
before restarting 
counterAn email report is sent immediately before the counter restarts. Ensure that emailing 
of logs is enabled (see Enable and Schedule Emailing of Logs on page
 569).
When Limit is reached
Block Traffic Select which action the VPN firewall performs when the traffic limit is reached:
• Block All Traffic. All  incoming  and  outgoing  Internet  and  email  traffic  is 
blocked. 
• Block All Traffic Except E-Mail. All  incoming  and  outgoing  Internet  traffic  is 
blocked but incoming and outgoing email traffic is still allowed.
Send e-mail alert An email alert is sent when traffic is blocked. Ensure that emailing of logs is enabled 
(see Enable and Schedule Emailing of Logs on page
 569).
SettingDescription 
						

							Monitor System Access and Performance 
561  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Configure and Enable the Traffic Meter for a LAN IPv4 Address 
Account
If your ISP charges by traffic volume over a period and you must charge the costs to 
individual accounts, or if you want to study the traffic volume that is requested or sent over 
LAN IPv4 addresses over a period, add and configure individual LAN IPv4 address accounts 
(profiles) for the LAN traffic meter.
Note:When you add a profile for the LAN traffic meter, the performance of 
the VPN firewall might be affected slightly.
To add and configure a LAN IPv4 address account (profile) for the LAN traffic meter:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > LAN Settings. 
The LAN submenu tabs display with the LAN Setup screen in view. 
						

							Monitor System Access and Performance 
562 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
7. Click the Advanced option arrow in the upper right.
The IPv4 LAN Advanced screen displays.
8. Click the LAN Traffic Meter tab. 
The LAN Traffic Meter screen displays. The following figure shows some examples in the 
LAN Traffic Meter Table.
The LAN Traffic Meter Table shows the following columns, which are described in the 
table that follows the next figure:
•LAN IP Address. The LAN IP address that is subject to the traffic meter.
•Direction. The direction for which traffic is measured.
•Limit (MB). The traffic limit in MB.
•Traffic (MB). The traffic usage in MB.
•State. The state that indicates whether traffic to and from the IP address is allowed or 
blocked.
•Action. The Edit button provides access to the Edit LAN Traffic Meter screen for the 
corresponding IP address.
9. On the LAN Traffic Meter screen, click the Add button. 
The Add LAN Traffic Meter screen displays. 
						

							Monitor System Access and Performance 
563  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
10. Enter the settings as described in the following table.
11. Click the Apply button.
SettingDescription
Add LAN Traffic Meter Account
LAN IP Address  The LAN IP address for the account.
Direction From the Direction menu, select the direction of the traffic that is measured:
• Inbound traffic. Restrictions are applied to incoming traffic when the traffic limit 
is reached.
• Both directions. Restrictions are applied to both incoming and outgoing traffic 
when the traffic limit is reached.
Limit Enter the monthly traffic volume limit in MB. The default setting is 0 MB. The 
maximum limit that you can enter is 256,000 MB.
Traffic Counter
Restart Traffic 
CounterSelect when the traffic counter restarts:
• Restart Traffic Counter Now. The traffic counter restarts immediately after you 
click the Apply button.
• Restart Traffic Counter at a Specific Time. Restart the traffic counter at a 
specific time and day of the month. Complete the time fields and select the 
meridiem and day of the month from the menu.
Send e-mail report 
before restarting 
counterAn email report is sent immediately before the counter restarts. Ensure that emailing 
of logs is enabled (see Enable and Schedule Emailing of Logs on page
 569).
When Limit is reached
Block Traffic Select what action the VPN firewall performs when the traffic limit is reached:
• Block. All incoming and outgoing Internet and email traffic is blocked.
• Send Email Alert and Block. An email alert is sent when all incoming and 
outgoing Internet and email traffic is blocked. Ensure that emailing of logs is 
enabled (see 
Enable and Schedule Emailing of Logs on page 569). 
						

							Monitor System Access and Performance 
564 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Your settings are saved. The new account is added to the LAN Traffic Meter Table on the 
LAN Traffic Meter screen.
View Traffic Meter Statistics for a LAN Account
The following procedure describes how to view the traffic meter statistics for a LAN IPv4 
address account.
To view the traffic meter statistics for a LAN IPv4 address account:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > LAN Settings. 
The LAN submenu tabs display with the LAN Setup screen in view.
7. Click the Advanced option arrow in the upper right.
The IPv4 LAN Advanced screen displays.
8. Click the LAN Traffic Meter tab. 
The LAN Traffic Meter screen displays.
9. In the LAN Traffic Meter Table, click the Edit button for the account for which you want to 
view the statistics.
The Edit LAN Traffic Meter Account screen displays that traffic statistics. 
						

							Monitor System Access and Performance 
565  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Change the Traffic Meter for a LAN Account
The following procedure describes how to change the traffic meter for an existing LAN IPv4 
address account.
To change the traffic meter for an existing LAN IPv4 address account:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > LAN Settings. 
The LAN submenu tabs display with the LAN Setup screen in view.
7. Click the Advanced option arrow in the upper right.
The IPv4 LAN Advanced screen displays.
8. Click the LAN Traffic Meter tab. 
The LAN Traffic Meter screen displays.
9. In the LAN Traffic Meter Table, click the Edit button for the account that you want to change.
The Edit LAN Traffic Meter Account screen displays.
10. Change the settings. 
						

							Monitor System Access and Performance 
566 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
For more information about the settings, see Configure and Enable the Traffic Meter for a 
LAN IPv4 Address Account on page 561.
11. Click the Apply button.
Your settings are saved. The modified account displays in the LAN Traffic Meter Table on 
the LAN Traffic Meter screen.
Remove One or More LAN Traffic Meter Accounts
The following procedure describes how to remove one or more LAN IPv4 address accounts 
that you no longer need for the LAN traffic meter.
To remove one or more LAN IPv4 address accounts:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > LAN Settings. 
The LAN submenu tabs display, with the LAN Setup screen in view.
7. Click the Advanced option arrow in the upper right.
The IPv4 LAN Advanced screen displays.
8. Click the LAN Traffic Meter tab. 
The LAN Traffic Meter screen displays.
9. In the LAN Traffic Meter Table, select the check box to the left of the accounts that you want 
to remove or click the Select All button to select all accounts.
10. Click the Delete button.
The selected accounts are removed from the LAN Traffic Meter Table. 
						

							Monitor System Access and Performance 
567  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Manage Logging, Alerts, and Event Notifications
The following sections provide information about managing logging, alerts, and event 
notifications:
•Logging, Alert, and Event Notification
•Configure and Activate Logs
•Enable and Schedule Emailing of Logs
•Enable the Syslogs
•View the Routing Logs, System Logs, and Other Event Logs
•View the DNS Logs
•View the NTP Logs
•Send Syslogs over a VPN Tunnel Between Sites
Note:This release does not support sending the NTP and DNS logs to the 
syslog server or the mail server.
Logging, Alert, and Event Notification
You can configure the VPN firewall to log routing events such as dropped and accepted 
packets; to log system events such as a change of time by an NTP server, secure login 
attempts, and reboots; and to log other events. You can also schedule logs to be sent to the 
administrator and enable logs to be sent to a syslog server on the network.
Note:Enabling routing and other event logs might generate a significant 
volume of log messages. NETGEAR recommends that you enable 
firewall logs for debugging purposes only.
Configure and Activate Logs
To configure and activate logs:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password. 
						

							Monitor System Access and Performance 
568 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Monitoring > Firewall Logs & E-mail.
The Firewall Logs & E-mail screen displays. The following figure shows the top section 
only.
7. Enter the settings as described in the following table.
SettingDescription
Log Options
Log Identifier Enter the name of the log identifier. The identifier is appended to log messages to 
identify the device that sent the log messages. The default identifier is 
FVS336GV2.
Routing Logs
In the Accepted Packets and Dropped Packets columns, select which traffic is logged.