Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

							Configure the IPv4 Internet and WAN Settings 
61  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > WAN Settings > WAN Setup. 
The WAN Setup screen displays the IPv4 settings.
7. In the WAN IPv4 Settings table, click the Edit button for WAN interface for which you want 
to add a secondary WAN address. 
The WAN IPv4 ISP Settings screen displays.
8. Click the Secondary Addresses option arrow in the upper right.
The WAN Secondary Addresses screen displays for the WAN interface that you selected. 
The following figure shows the WAN2 Secondary Addresses screen as an example and 
includes one entry in the List of Secondary WAN addresses table.
The List of Secondary WAN addresses table displays the secondary LAN IP addresses 
added for the selected WAN interface.
9. In the Add WAN Secondary Addresses section, enter the following settings:
•IP Address. Enter the secondary address that you want to assign to the WAN port.
•Subnet Mask. Enter the subnet mask for the secondary IP address. 
						

							Configure the IPv4 Internet and WAN Settings 
62 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
10. Click the Add button.
The secondary IP address is added to the List of Secondary WAN addresses table.
11. Repeat Step 9 and Step 10 for each secondary IP address that you want to add to the List 
of Secondary WAN addresses table.
Remove One or More Secondary WAN Addresses
The following procedure describes how to remove one or more secondary WAN addresses 
from a WAN IPv4 interface.
To remove one or more secondary WAN addresses: 
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > WAN Settings > WAN Setup. 
The WAN Setup screen displays the IPv4 settings.
7. In the WAN IPv4 Settings table, click the Edit button for the WAN interface for which you 
want to remove one or more secondary WAN addresses.
The WAN IPv4 ISP Settings screen displays.
8. Click the Secondary Addresses option arrow in the upper right.
The WAN Secondary Addresses screen displays for the WAN interface that you selected. 
9. In the List of Secondary WAN addresses table, select the check box to the left of the 
address that you want to remove or click the Select All button to select all addresses.
10. Click the Delete button.
The selected addresses are removed from the List of Secondary WAN addresses table. 
						

							Configure the IPv4 Internet and WAN Settings 
63  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Manage Dynamic DNS Connections
The following sections provide information about managing Dynamic DNS:
•Dynamic DNS
•Configure Dynamic DNS
Dynamic DNS
Dynamic DNS (DDNS) is an Internet service that allows devices with varying public IPv4 
addresses to be located using Internet domain names. To use DDNS, you must set up an 
account with a DDNS provider such as DynDNS.org, TZO.com, Oray.net, or 3322.org. (The 
web management interface of the VPN firewall provides links to these DDNS providers.) The 
VPN firewall firmware includes software that notifies DDNS servers of changes in the WAN 
IP address so that the services running on this network can be accessed by others on the 
Internet.
If your network has a permanently assigned IP address, you can register a domain name and 
have that name linked with your IP address by public Domain Name Servers (DNS). 
However, if your Internet account uses a dynamically assigned IP address, you do not know 
in advance what your IP address will be, and the address can change frequently—hence, the 
need for a commercial DDNS service, which allows you to register an extension to its domain 
and restores DNS requests for the resulting fully qualified domain name (FQDN) to your 
frequently changing IP address.
After you configure your account information on the VPN firewall, when your ISP-assigned IP 
address changes, your VPN firewall automatically contacts your DDNS service provider, logs 
in to your account, and registers your new IP address. Consider the following:
•For auto-rollover mode, you need a fully qualified domain name (FQDN) to implement 
features such as exposed hosts and virtual private networks regardless of whether you 
have a fixed or dynamic IP address. 
•For load balancing mode, you might still need a fully qualified domain name (FQDN) 
either for convenience or if you have a dynamic IP address.
Note:If your ISP assigns a private WAN IP address such as 192.168.x.x or 
10.x.x.x, the DDNS service does not work because private addresses 
are not routed on the Internet.
Configure Dynamic DNS
The following procedure describes how to configure dynamic DNS (DDNS) for both WAN 
interfaces. 
						

							Configure the IPv4 Internet and WAN Settings 
64 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
To configure DDNS for both WAN interfaces:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > Dynamic DNS. 
The DNS submenu tabs display, with the Dynamic DNS screen in view. 
						

							Configure the IPv4 Internet and WAN Settings 
65  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
The WAN Mode section reports the configured WAN mode (for example, Single Port 
WAN1, Load Balancing, or Auto Rollover). Only those options that match the configured 
WAN mode are accessible on the screen.
7. Click the submenu tab for your DDNS service provider:
•Dynamic DNS for DynDNS.org (which is shown in the following figure)
•DNS TZO for TZO.com
•DNS Oray for Oray.net
•3322 DDNS for 3322.org
8. Click the Information option arrow in the upper right of a DNS screen for registration 
information (for example, DynDNS Information). 
9. Visit the website of the DDNS service provider and register for an account (for example, for 
DynDNS.org, visit 
http://www.dyndns.com/).
10. Configure the DDNS service settings as described in the following table.
11. Click the Apply button.
SettingDescription
WAN1 (... Status: ...)
Select the Ye s radio button to enable the DDNS service. The fields that display depend on the DDNS 
service provider that you have selected.
Host and Domain Name The host and domain name for the DDNS service.
Username or 
User Email AddressThe user name or email address for DDNS server authentication.
Password or User Key The password that is used for DDNS server authentication.
Use wildcards If your DDNS provider allows the use of wildcards in resolving your URL, you 
can select the Use wildcards check box to activate this feature. For example, 
the wildcard feature causes *.yourhost.dyndns.org to be aliased to the same IP 
address as yourhost.dyndns.org.
Update every 30 days If your WAN IP address does not often change, you might need to force a 
periodic update to the DDNS service to prevent your account from expiring. If 
the Update every 30 days check box displays, select it to enable a periodic 
update.
WAN2 (... Status: ...)
See the information for WAN1 in this table about how to enter the settings. You can select different DDNS 
services for different WAN interfaces. 
						

							Configure the IPv4 Internet and WAN Settings 
66 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Your settings are saved.
Managing Advanced WAN Options
The following sections provide information about managing advanced WAN options:
•Change the Maximum Transmission Unit Size
•Change the Port Speed and Duplex Settings
•Change the Advertised MAC Address of the VPN Firewall
•Set the WAN Connection Type and Corresponding Speeds
Note:For information about another advanced WAN option, the failure 
detection for auto-rollover mode for IPv4 interfaces, see 
Configure the 
Failure Detection Method for IPv4 WAN Interfaces on page 58.
Change the Maximum Transmission Unit Size
Change the maximum transmit unit (MTU) size only if you have reason to do so or your ISP 
requests that you do so.
To change the MTU size:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > WAN Settings > WAN Setup.
The WAN Setup screen displays the IPv4 settings. 
						

							Configure the IPv4 Internet and WAN Settings 
67  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
7. In the WAN IPv4 Settings table, click the Edit button for the WAN interface that you want to 
configure. 
The WAN IPv4 ISP Settings screen displays.
8. Click the Advanced option arrow in the upper right. 
The WAN Advanced Options screen displays for the WAN interface that you selected. 
The following figure shows the WAN2 Advanced Options screen as an example.
9. In the MTU Size section, configure the MTU size:
•Default. Select this radio button for the normal maximum transmit unit (MTU) size. 
For most Ethernet networks, this value is 1500 bytes, or 1492
 bytes for PPPoE 
connections.
•Custom. Select this radio button and enter an MTU value in the Bytes field. For 
some ISPs, you might need to reduce the MTU, but this is rarely required. Do not 
change the MTU unless you are sure that it is necessary for your ISP connection.
WARNING:
Depending on the changes that you make, when you click the Apply 
button, the VPN firewall might restart or services such as HTTP and 
SMTP might restart.
10. Click the Apply button.
Your settings are saved. 
						

							Configure the IPv4 Internet and WAN Settings 
68 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Change the Port Speed and Duplex Settings
In most cases, the VPN firewall can automatically determine the connection speed of the 
WAN port of the device (modem, dish, or router) that provides the WAN connection. If you 
cannot establish an Internet connection, you might need to manually select the port speed. 
To change the port speed and duplex settings:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > WAN Settings > WAN Setup.
The WAN Setup screen displays the IPv4 settings.
7. In the WAN IPv4 Settings table, click the Edit button for the WAN interface that you want to 
configure. 
The WAN IPv4 ISP Settings screen displays.
8. Click the Advanced option arrow in the upper right. 
The WAN Advanced Options screen displays for the WAN interface that you selected. 
The following figure shows the WAN2 Advanced Options screen as an example. 
						

							Configure the IPv4 Internet and WAN Settings 
69  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
9. In the Speed section, if you know the Ethernet port speed of the modem, dish, or router, 
select it from the Port Speed menu. 
•AutoSense. Speed autosensing. This is the default setting. The firewall can sense all 
Ethernet speeds and duplex modes, including 1000BASE-T speed at full duplex.
•10BaseT Half_Duplex. Ethernet speed at half duplex. Use the half-duplex settings 
only if the full-duplex settings do not function correctly.
•10BaseT Full_Duplex. Ethernet speed at full duplex.
•100BaseT Half_Duplex. Fast Ethernet speed at half duplex. Use the half-duplex 
settings only if the full-duplex settings do not function correctly.
•100BaseT Full_Duplex. Fast Ethernet speed at full duplex.
•1000BaseT Full_Duplex. Gigabit Ethernet speed at full duplex.
WARNING:
Depending on the changes that you made, when you click the Apply 
button, the VPN firewall might restart, or services such as HTTP 
and SMTP might restart.
10. Click the Apply button.
Your settings are saved. 
						

							Configure the IPv4 Internet and WAN Settings 
70 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Change the Advertised MAC Address of the VPN Firewall
Each computer or router on your network has a unique 48-bit local Ethernet address. This is 
also referred to as the computer’s Media Access Control (MAC) address.
If your ISP has MAC authentication enabled, you cannot establish a connection with your ISP 
if the VPN firewall is not configured with the correct MAC address. If your ISP requires MAC 
authentication and another MAC address was previously registered with your ISP, you must 
configure that MAC address on the VPN firewall.
To configure advanced WAN options:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > WAN Settings > WAN Setup.
The WAN Setup screen displays the IPv4 settings.
7. In the WAN IPv4 Settings table, click the Edit button for the WAN interface that you want to 
configure. 
The WAN IPv4 ISP Settings screen displays.
8. Click the Advanced option arrow in the upper right. 
The WAN Advanced Options screen displays for the WAN interface that you selected. 
The following figure shows the WAN2 Advanced Options screen as an example.