Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

							Configure the IPv4 Internet and WAN Settings 
71  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
9. In the Router’s MAC Address section, enter the settings as described in the following table.
WARNING:
Depending on the changes that you made, when you click the Apply 
button, the VPN firewall might restart or services such as HTTP and 
SMTP might restart.
10. Click the Apply button.
SettingDescription
Use Default Address To use the VPN firewall’s own MAC address, select the Use Default Address 
radio button. This is the default setting.
Use this computer’s MAC 
AddressSelect the Use this computer’s MAC Address radio button to allow the VPN 
firewall to use the MAC address of the computer you are now using to access 
the web management interface. This setting is useful if your ISP requires MAC 
authentication.
Use this MAC Address Select the Use this MAC Address radio button and manually enter the MAC 
address in the field next to the radio button. You would typically enter the MAC 
address that your ISP requires for MAC authentication.
Note:The format for the MAC address is 01:23:45:67:89:AB (numbers 
0–9 and either uppercase or lowercase letters A–F). If you enter a MAC address, 
the existing entry is overwritten. 
						

							Configure the IPv4 Internet and WAN Settings 
72 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Your settings are saved.
Set the WAN Connection Type and Corresponding Speeds
The WAN connection type and corresponding upload and download connection speeds in 
effect limit the rate of traffic that is being forwarded by the VPN firewall.
To set the WAN connection type and upload and download connection speeds:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > WAN Settings > WAN Setup.
The WAN Setup screen displays the IPv4 settings.
7. In the WAN IPv4 Settings table, click the Edit button for the WAN interface that you want to 
configure. 
The WAN IPv4 ISP Settings screen displays.
8. Click the Advanced option arrow in the upper right. 
The WAN Advanced Options screen displays for the WAN interface that you selected. 
The following figure shows the WAN2 Advanced Options screen as an example. 
						

							Configure the IPv4 Internet and WAN Settings 
73  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
9. In the Upload/Download Settings section, enter the settings as described in the following 
table.
WARNING:
Depending on the changes that you made, when you click the Apply 
button, the VPN firewall might restart or services such as HTTP and 
SMTP might restart.
10. Click the Apply button.
Your settings are saved.
SettingDescription
WAN Connection Type From the menu, select the type of connection that the VPN firewall uses to 
connect to the Internet over the selected interface: 
DSL, ADLS, T1, T3, or Other.
WAN Connection Speed 
UploadFrom the menu, select the maximum upload speed that your ISP provides for the 
selected interface. You can select from 56 Kbps to 1 Gbps, or you can select 
Custom and enter the speed in Kbps in the field below the WAN Connection 
Speed Upload menu.
WAN Connection Speed 
DownloadFrom the menu, select the maximum download speed that your ISP provides for 
the selected interface. You can select from 56 Kbps to 1 Gbps, or you can select 
Custom and enter the speed in Kbps in the field below the WAN Connection 
Speed Download menu.  
						

							Configure the IPv4 Internet and WAN Settings 
74 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Manage WAN QoS and WAN QoS Profiles
The following sections provide information about managing WAN Quality of Service (QoS) 
and WAN QoS profiles:
•WAN QoS
•Add a Rate Control WAN QoS Profile
•Add a Priority Queue WAN QoS Profile
•Enable WAN QoS and Select the WAN QoS Type
•Change a QoS Profile
•Enable, Disable, or Remove One or More WAN QoS Profiles
WAN QoS
The VPN firewall can support multiple Quality of Service (QoS) profiles for each WAN 
interface.
You can assign profiles to services such as HTTP, FTP, and DNS and to LAN groups or IP 
addresses. Profiles enforce either rate control with bandwidth allocation or priority queue 
control. You can configure both types of profiles, but either all profiles on the VPN firewall 
enforce rate control and the profiles that you configured for priority queue control are inactive, 
or the other way around. Both types of profiles cannot be active simultaneously.
•Rate control with bandwidth allocation. These types of profiles specify how bandwidth 
is distributed among the services and hosts. A profile with a high priority is offered excess 
bandwidth while the required bandwidth is still allocated to profiles that specify minimum 
and maximum bandwidth rates. The congestion priority represents the classification level 
of the packets among the priority queues within the system. If you select a default 
congestion priority, traffic is mapped based on the Type of Service (ToS) field in the 
packet’s IP header.
•Priority queue control. These types of profiles specify the priority levels of the services. 
You can select a high-priority queue or a low-priority queue. Services in the high-priority 
queue share 60 percent of the interface bandwidth; services in the low-priority queue 
share 10 percent of the interface bandwidth. By default, all services are assigned the 
medium-priority queue in which they share 30 percent of the interface bandwidth.
Both types of profiles let you allocate the Differentiated Services (DiffServ) QoS packet 
matching and QoS packet marking settings, which you configure by specifying Differentiated 
Services Code Point (DSCP) values, from 0 to 63.
Note:Before you enable WAN QoS, make sure that the WAN connection 
type and speeds are configured correctly (see 
Managing Advanced 
WAN Options on page 66). 
						

							Configure the IPv4 Internet and WAN Settings 
75  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Note:To configure and apply QoS profiles successfully, familiarity with QoS 
concepts such QoS priority queues, IP precedence, DHCP, and their 
values is helpful.
Add a Rate Control WAN QoS Profile
The following procedure describes how to add a rate control QoS profile for a WAN interface.
To add a rate control WAN QoS profile:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > QoS. 
The QoS screen displays.
7. Under the List of QoS Profiles table, click the Add button. 
The Add QoS screen displays. The following figure shows settings for a rate control QoS 
profile. 
						

							Configure the IPv4 Internet and WAN Settings 
76 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
8. Enter the settings as described in the following table.
SettingDescription
QoS Type From the menu, select Rate Control.
For information about the Priority selection, see Add a Priority Queue WAN 
QoS Profile on page
 78.
Interface From the menu, select a WAN interface.
Service From the menu, select a service or application to be covered by this profile. If 
the service or application does not appear in the list, you must define it (see 
Manage Customized Services on page
 280).
Direction From the menu, select the direction to which rate control is applied:
• Inbound Traffic. Rate control is applied to inbound traffic only.
• Outbound Traffic. Rate control is applied to outbound traffic only.
• Both. Rate control is applied to both outbound and inbound traffic.
Diffserv QoS Match Enter a DSCP value in the range of 0 through 63. Packets are classified against 
this value. Leave this field blank to disable packet matching. 
						

							Configure the IPv4 Internet and WAN Settings 
77  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
9. Click the Apply button.
Your settings are saved. The profile is added to the List of QoS Profiles table on the QoS 
screen.
You are now ready to enable WAN QoS and select the rate control QoS type (see Enable 
WAN QoS and Select the WAN QoS Type on page 80).
Congestion Priority From the menu, select the priority queue that determines the allocation of 
excess bandwidth and the classification level of the packets among other 
priority queues on the VPN firewall:
• Default. Traffic is mapped based on the ToS field in the packet’s IP header.
• High. This  queue  includes  the  following  DSCP  values: AF41, AF42, AF43, 
AF44, and CS4.
• Medium-high. This queue includes the following DSCP values: AF31, 
AF32, AF33, AF34,  and  CS3.
• Medium. This queue includes the following DSCP values: AF21, AF22, 
AF23, AF24,  and  CS2.
• Low. This  queue  includes  the  following  DSCP  values: AF11, AF12, AF13, 
AF14, CS1, 0, and all other values.
Hosts From the menu, select the IP address, range of IP addresses, or group to which 
the profile is applied, and, if applicable, specify how the bandwidth is allocated:
• Single IP Address. The profile is applied to a single IP address. Enter the 
address in the Start IP field.
• IP Address Range. The profile is applied to an IP address range. Enter the 
first address of the range in the Start IP field and the last address of the 
range in the End IP field. From the Bandwidth Allocation menu, select 
how the bandwidth is allocated:
-  Shared. The bandwidth is shared among all IP addresses the range.
-  Individual. The bandwidth is allocated to each IP address in the range.
• Group. The profile is applied to a LAN group. From the Select Group 
menu, select the LAN group to which the profile is applied. For information 
about LAN groups, see 
Manage IPv4 LAN Groups and Hosts on page 132. 
From the Bandwidth Allocation menu, select how the bandwidth is 
allocated:
-  Shared. The bandwidth is shared among all members of a group.
-  Individual. The bandwidth is allocated to each member of a group.
Outbound Minimum 
BandwidthEnter the minimum outbound bandwidth in Kbps that is allocated to the host.
Outbound Maximum 
BandwidthEnter the maximum outbound bandwidth in Kbps that is allocated to the host.
Inbound Minimum 
BandwidthEnter the minimum inbound bandwidth in Kbps that is allocated to the host.
Inbound Maximum 
BandwidthEnter the maximum inbound bandwidth in Kbps that is allocated to the host.
Diffserv QoS Remark Enter a DSCP value in the range of 0 through 63. Packets are marked with this 
value. Leave this field blank to disable packet marking.
SettingDescription 
						

							Configure the IPv4 Internet and WAN Settings 
78 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Add a Priority Queue WAN QoS Profile
The following procedure describes how to add a priority queue QoS profile for a WAN 
interface.
To add a priority queue WAN QoS profile:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Network Configuration > QoS. 
The QoS screen displays.
7. Under the List of QoS Profiles table, click the Add button. 
The Add QoS screen displays. The following figure shows settings for a priority QoS 
profile. 
						

							Configure the IPv4 Internet and WAN Settings 
79  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
8. Enter the settings as described in the following table.
SettingDescription
QoS Type From the menu, select Priority.
For information about the Rate Control selection, see Add a Rate Control WAN 
QoS Profile on page
 75).
Interface From the menu, select a WAN interface.
Service From the menu, select a service or application to be covered by this profile. If 
the service or application does not appear in the list, you must define it (see 
Manage Customized Services on page
 280). 
Direction From the menu, select the direction to which the priority queue is applied:
• Outbound Traffic. The priority queue is applied to outbound traffic only.
• Inbound Traffic. The priority queue is applied to inbound traffic only.
Diffserv QoS Match Enter a DSCP value in the range of 0 through 63. Packets are classified against 
this value. Leave this field blank to disable packet matching.
Priority From the menu, select the priority queue that determines the allocation of 
bandwidth:
• Low. All services that are assigned a low-priority queue share 10 percent of 
interface bandwidth.
• High. All services that are assigned a high-priority queue share 60 percent 
of interface bandwidth.
Note:By default, all services are assigned the medium-priority queue, in which 
they share 30 percent of the interface bandwidth. 
						

							Configure the IPv4 Internet and WAN Settings 
80 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
9. Click the Apply button.
Your settings are saved. The profile is added to the List of QoS Profiles table on the QoS 
screen.
You are now ready to enable WAN QoS and select the priority QoS type (see Enable 
WAN QoS and Select the WAN QoS Type on page 80).
Enable WAN QoS and Select the WAN QoS Type
Depending on the type of WAN QoS that you want to select, first configure one or more rate 
control QoS profiles (see 
Add a Rate Control WAN QoS Profile on page 75) or priority control 
QoS profiles (see Add a Priority Queue WAN QoS Profile on page 78) before you enable 
WAN QoS and select the type of WAN QoS.
Note:When you enable WAN QoS, the performance of the VPN firewall 
might be affected slightly.
To enable WAN QoS and select the type of WAN QoS:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
Hosts
These settings do not apply to a priority profile. Start IP
End IP
Select Group
Bandwidth Allocation
Outbound Minimum 
Bandwidth
Outbound Maximum 
Bandwidth
Inbound Minimum 
Bandwidth
Inbound Maximum 
Bandwidth
Diffserv QoS Remark Enter a DSCP value in the range of 0 through 63. Packets are marked with this 
value. Leave this field blank to disable packet marking.
SettingDescription