Page 161 / 203 Scroll up to view Page 156 - 160
Chapter 9:
Monitoring System Performance
|
161
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
Viewing the VPN Logs
The VPN Logs screen gives log details for recent VPN activity.
1.
Select Monitoring > VPN Logs from the menu, and select the
IPsec VPN Logs
tab. The
IPsec VPN Logs screen is displayed.
2.
Select the
SSL VPN Logs
tab to view SSL VPN log details.
To view the most recent entries, click
refresh log
. To delete all the existing log entries, click
clear log
.
Page 162 / 203
Chapter 10:
Troubleshooting
|
162
Troubleshooting
10
This chapter provides troubleshooting tips and information for your ProSafe Dual WAN Gigabit
Firewall with SSL & IPsec VPN FVS336Gv2. After each problem description, instructions are
provided to help you diagnose and solve the problem.
This chapter contains the following sections:
Basic Functions
” on this page.
“Troubleshooting the Web Configuration Interface”
on page 164.
“Troubleshooting the ISP Connection”
on page 165.
“Troubleshooting a TCP/IP Network Using a Ping Utility”
on page 166.
“Restoring the Default Configuration and Password”
on page 167.
“Problems with Date and Time”
on page 168.
“Using the Diagnostics Utilities”
on page 168.
Basic Functions
After you turn on power to the VPN firewall, the following sequence of events should occur:
1.
When power is first applied, verify that the PWR LED is on.
2.
After approximately two minutes, verify that:
a.
The TEST LED is not lit.
b.
The LAN port LINK/ACT LEDs are lit for any local ports that are connected.
c.
The WAN port LINK/ACT LEDs are lit for any WAN ports that are connected.
If a port’s LINK/ACT LED is lit, a link has been established to the connected device. If a
LAN port is connected to a 1000 Mbps device, verify that the port’s SPEED LED is green.
If the port is 100 Mbps, the LED will be amber. If the port is 10 Mbps, the LED will be off.
If any of these conditions does not occur, refer to the appropriate following section.
Page 163 / 203
Chapter 10:
Troubleshooting
|
163
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
Power LED Not On
If the Power and other LEDs are off when your VPN firewall is turned on:
Make sure that the power cord is properly connected to your VPN firewall and that the
power supply adapter is properly connected to a functioning power outlet.
Check that you are using the 12 V DC power adapter supplied by NETGEAR for this
product.
If the error persists, you have a hardware problem and should contact technical support.
LEDs Never Turn Off
When the VPN firewall is turned on, the LEDs turns on for about 10 seconds and then turn
off. If all the LEDs stay on, there is a fault within the network storage.
If all LEDs are still on one minute after power up:
Cycle the power to see if the VPN firewall recovers.
Clear the VPN firewall’s configuration to factory defaults. This will set the VPN firewall’s IP
address to 192.168.1.1. This procedure is explained in <pdf>“Restoring the Default
Configuration and Password” on page 10-167.
If the error persists, you might have a hardware problem and should contact technical
support.
LAN or WAN Port LEDs Not On
If either the LAN LEDs or WAN LEDs do not light when the Ethernet connection is made,
check the following:
Make sure that the Ethernet cable connections are secure at the VPN firewall and at the
hub or workstation.
Make sure that power is turned on to the connected hub or workstation.
Be sure you are using the correct cable:
When connecting the VPN firewall’s Internet port to a cable or DSL modem, use the cable
that was supplied with the cable or DSL modem. This cable could be a standard
straight-through Ethernet cable or an Ethernet crossover cable.
Page 164 / 203
164
|
Chapter 10:
Troubleshooting
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
Troubleshooting the Web Configuration Interface
If you are unable to access the VPN firewall’s Web Configuration interface from a PC on your
local network, check the following:
Check the Ethernet connection between the PC and the VPN firewall as described in the
previous section.
Make sure your PC’s IP address is on the same subnet as the VPN firewall. If you are
using the recommended addressing scheme, your PC’s address should be in the range of
192.168.1.2 to 192.168.1.254.
Note:
If your PC’s IP address is shown as 169.254.x.x:
Windows and MacOS will generate and assign an IP address if the
computer cannot reach a DHCP server. These auto-generated
addresses are in the range of 169.254.x.x. If your IP address is in
this range, check the connection from the PC to the VPN firewall and
reboot your PC.
If your VPN firewall’s IP address has been changed and you do not know the current IP
address, clear the VPN firewall’s configuration to factory defaults. This will set the VPN
firewall’s IP address to 192.168.1.1. This procedure is explained in
“Restoring the Default
Configuration and Password”
on page 167.
Tip:
If you do not want to revert to the factory default settings and lose your
configuration settings, you can reboot the VPN firewall and use a sniffer
to capture packets sent during the reboot. Look at the ARP packets to
locate the VPN firewall’s LAN interface address.
Make sure you are using the SSL
https://address
login rather than
http://address
.
Make sure your browser has Java, JavaScript, or ActiveX enabled. If you are using
Internet Explorer, click Refresh to be sure the Java applet is loaded.
Try quitting the browser and launching it again.
Make sure you are using the correct login information. The factory default login name is
admin
and the password is
password
. Make sure that Caps Lock is off when entering
this information.
If the VPN firewall does not save changes you have made in the Web Configuration Interface,
check the following:
When entering configuration settings, be sure to click the
Apply
button before moving to
another screen, or your changes are lost.
Click the Refresh or Reload button in the Web browser. The changes may have occurred,
but the Web browser may be caching the old configuration.
Page 165 / 203
Chapter 10:
Troubleshooting
|
165
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
Troubleshooting the ISP Connection
If your VPN firewall is unable to access the Internet, you should first determine whether the
VPN firewall is able to obtain a WAN IP address from the ISP. Unless you have been
assigned a static IP address, your VPN firewall must request an IP address from the ISP. You
can determine whether the request was successful using the Web Configuration Manager.
To check the WAN IP address:
1.
Launch your browser and navigate to an external site such as www.netgear.com.
2.
Access the Main Menu of the VPN firewall’s configuration at
.
3.
Select
Monitoring
>
Router Status
from the menu.
4.
Check that an IP address is shown for the WAN Port.
If 0.0.0.0 is shown, your VPN firewall has not obtained an IP address from your ISP.
If your VPN firewall is unable to obtain an IP address from the ISP, you may need to force
your cable or DSL modem to recognize your new VPN firewall by performing the following
procedure:
1.
Turn off power to the cable or DSL modem.
2.
Turn off power to your VPN firewall.
3.
Wait five minutes and reapply power to the cable or DSL modem.
4.
When the modem’s LEDs indicate that it has reacquired sync with the ISP, reapply
power to your VPN firewall.
If your VPN firewall is still unable to obtain an IP address from the ISP, the problem may be
one of the following:
Your ISP may require a login program.
Ask your ISP whether they require PPP over Ethernet (PPPoE) or some other type of
login.
If your ISP requires a login, you may have incorrectly set the login name and password.
Your ISP may check for your PC's host name.
Assign the PC Host Name of your ISP account as the Account Name on the WAN1 ISP
Settings or WAN2 ISP Settings screen (see
“Configuring the Internet Connections”
on
page 17).
Your ISP only allows one Ethernet MAC address to connect to the Internet, and may
check for your PC’s MAC address. In this case:
-
Inform your ISP that you have bought a new network device, and ask them to use the
VPN firewall’s MAC address; or
-
Configure your VPN firewall to spoof your PC’s MAC address. You can do this on the
WAN1 Advanced Options or WAN2 Advanced Options screen (see
“Configuring the
Advanced WAN Options (Optional)”
on page 28).

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top