Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

							Monitor System Access and Performance 
599  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
The incoming and outgoing volume of traffic for each protocol and the total volume of 
traffic are displayed. Traffic counters are updated in MBs; the counter starts only when 
traffic passed is at least 1 MB. In addition, the pop-up screen displays the traffic meter’s 
start and end dates. If you did not configure the traffic meter, the start date is blank.
View the Attached Devices 
You can view the network database (which is also referred to as the Known PCs and Devices 
table), which contains all IP devices that VPN firewall has discovered on the local network.
Note:If you reboot the VPN firewall, the data in the Known PCs and 
Devices table is lost until the VPN firewall rediscovers the devices.
To view the attached devices:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button. 
						

							Monitor System Access and Performance 
600 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
The Router Status screen displays.
6. Select Network Configuration > LAN Settings > LAN Groups.
The LAN Groups screen displays. The following figure shows some examples in the 
Known PCs and Devices table.
The Known PCs and Devices table contains lists all known computers and network 
devices that are assigned dynamic IP addresses by the VPN firewall, were discovered by 
other means, or were manually added. Collectively, these entries make up the network 
database. 
The following table describes the information that displays for each device.
ItemDescription
Name The name of the computer or device. For computers that do not support the NetBIOS 
protocol, the name is displayed as Unknown (you can change the entry manually to add 
a meaningful name). If the computer or device was assigned an IP address by the 
DHCP server, the name is appended by an asterisk. 
IP Address The current IP address of the computer or device. For DHCP clients of the VPN firewall, 
this IP address does not change. If a computer or device is assigned a static IP 
address, you must update this entry manually after the IP address on the computer or 
device changes.
MAC Address The MAC address of the computer’s or device’s network interface.
Group You can assign each computer or device to a single LAN group. By default, a computer 
or device is assigned to Group 1. However, you can manually select a different LAN 
group (see Manage the Network Database on page
 133).
Action The Edit button, which provides access to the Edit Groups and Hosts screen.
For information about how to change information for a device or manually add a device 
to the table, see Manage the Network Database on page
 133. 
						

							Monitor System Access and Performance 
601  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
View the DHCP Log
The following procedure describes how to view and clear the DHCP log. 
Note:For information about how to change the DHCP settings, see Manage 
VLAN Profiles on page 11 9.
To view the most recent entries in the DHCP log or clear the log:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > LAN Settings.
The LAN Setup screen displays the IPv4 settings.
7. Click the DHCP Log option arrow in the upper right.
The DHCP Log screen displays. 
						

							Monitor System Access and Performance 
602 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
8. To view the most recent entries, click the Refresh Log button.
The information onscreen is updated.
9. To remove all existing log entries, click the Clear Log button.
All log entries are removed. 
						

							603
13
13.   Diagnostics and Troubleshooting
This chapter provides troubleshooting tips and information for the VPN firewall. After each 
problem description, instructions are provided to help you diagnose and solve the problem. For 
the common problems listed, go to the section indicated.
The chapter contains the following sections:
•Use the Diagnostics Utilities
•Troubleshoot Basic Functioning
•Troubleshoot the Web Management Interface
•When You Enter a URL or IP Address, a Time-Out Error Occurs
•Troubleshoot the ISP Connection
•Troubleshoot the IPv6 Connection
•Troubleshoot a TCP/IP Network Using a Ping Utility
•Troubleshoot Problems with Date and Time
•Access Documentation from the Web Management Interface
Note:For information about restoring the VPN firewall to factory default 
settings, see Revert to Factory Default Settings on page 551. 
						

							Diagnostics and Troubleshooting 
604 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Use the Diagnostics Utilities
The following sections provide information about using the diagnostic utilities:
•Diagnostic Utility
•Send a Ping Packet
•Trace a Route
•Look Up a DNS Address
•Display the Routing Tables
•Capture Packets in Real Time
•Reboot the VPN Firewall Remotely
•Schedule the VPN Firewall to Reboot
Diagnostic Utility
The VPN firewall provides diagnostic tools that help you analyze the status of the network 
and traffic conditions. Two types of tools are available:
•Network diagnostic tools. These tools include a ping utility, traceroute utility, and DNS 
lookup utility, and the option to display the routing tables.
•Packet capture tool. This tool lets you capture packets for each interface in real time for 
a short period and download the packet information.
Note:For normal operation, diagnostic tools are not required.
Send a Ping Packet
Use the ping utility to send a ping packet request to check the connection between the VPN 
firewall and a specific IP address or FQDN. If the request times out (no reply is received), it 
usually means that the destination is unreachable. However, some network devices can be 
configured not to respond to a ping. 
To send a ping:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password. 
						

							Diagnostics and Troubleshooting 
605  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Monitoring > Diagnostics.
The Diagnostics screen displays the IPv4 settings.
7. To send a ping to an IPv6 location instead of an IPv4 location, in the upper right, select the 
IPv6 radio button.
The Diagnostics screen displays the IPv6 settings. Except for the Domain Name field, 
which is the IP Address / Domain Name field on the screen for IPv4, the IPv6 screen is 
identical to the IPv4 screen.
8. In the Ping or Trace an IP Address section, in the IP Address / Domain Name field, enter 
the IP address or domain name that you want to ping.
Note:On the Diagnostics screen for IPv6, you cannot enter an IP address. 
You must enter a domain name in the Domain Name field. 
						

							Diagnostics and Troubleshooting 
606 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
9. Select either a gateway or a VPN policy:
•Clear the Ping through VPN tunnel? check box and select a gateway from the 
Select Local Gateway menu. 
The Select VPN Policy menu is masked out.
•Select the Ping through VPN tunnel? check box and select a VPN policy from the 
Select VPN Policy menu. 
The Select Local Gateway menu is masked out.
10. Click the Ping button. 
The results of the ping display in a new screen.
11. To return to the Diagnostics screen, click the Back button on the browser menu bar.
The Diagnostics screen displays.
Trace a Route
A traceroute lists all routers between the source (the VPN firewall) and the destination IP 
address. 
To send a traceroute:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Monitoring > Diagnostics.
The Diagnostics screen displays the IPv4 settings. 
						

							Diagnostics and Troubleshooting 
607  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
7. To trace the route to an IPv6 location instead of an IPv4 location, in the upper right, select 
the IPv6 radio button.
The Diagnostics screen displays the IPv6 settings. Except for the Domain Name field, 
which is the IP Address / Domain Name field on the screen for IPv4, the IPv6 screen is 
identical to the IPv4 screen.
8. In the Ping or Trace an IP Address section, in the IP Address / Domain Name field, enter 
the IP address or domain name that you want to trace.
Note:On the Diagnostics screen for IPv6, you cannot enter an IP address. 
You must enter a domain name in the Domain Name field.
9. Select either a gateway or a VPN policy:
•Clear the Ping through VPN tunnel? check box and select a gateway from the 
Select Local Gateway menu. 
The Select VPN Policy menu is masked out.
•Select the Ping through VPN tunnel? check box and select a VPN policy from the 
Select VPN Policy menu. 
The Select Local Gateway menu is masked out.
10. Click the Traceroute button. 
The results of the traceroute display in a new screen. 
11. To return to the Diagnostics screen, click the Back button on the browser menu bar.
The Diagnostics screen displays. 
						

							Diagnostics and Troubleshooting 
608 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Look Up a DNS Address
A Domain Name Server (DNS) converts the Internet name (for example, www.netgear.com) 
to an IP address. If you need the IP address of a web, FTP, mail, or other server on the 
Internet, request a DNS lookup to find the IP address.
To look up a DNS address:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Monitoring > Diagnostics.
The Diagnostics screen displays the IPv4 settings.
7. To look up an IPv6 address instead of an IPv4 address, in the upper right, select the IPv6 
radio button.
The Diagnostics screen displays the IPv6 settings. 
8. In the Perform a DNS Lookup section, in the Internet Name field, enter a domain name.
9. Click the Lookup button.
The results of the lookup action display in a new screen.
10. To return to the Diagnostics screen, click the Back button on the browser menu bar.
The Diagnostics screen displays.
Display the Routing Tables
Displaying the internal routing table can assist NETGEAR technical support in diagnosing 
routing problems.