Page 391 / 469 Scroll up to view Page 386 - 390
Monitor System Access and Performance
391
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Capture Packets in Real Time
Capturing packets can assist NETGEAR technical support in diagnosing packet transfer
problems. You can also use a traffic analyzer to do your own problem diagnoses.
To capture packets in real time:
1.
In Router Options section of the screen, next to Capture Packets, click the
Packet
Trace
button. The Capture Packets pop-up screen displays:
Figure 257.
2.
From the Select Network drop-down list, select the physical or virtual interface for which you
want to capture packets.
3.
Click
Start
. After a few seconds, the packet-tracing process starts, which is indicated by a
message onscreen.
4.
When you want to stop the packet-tracing process, click
Stop
. After a few seconds, the
packet-tracing process stops, which is indicated by a message onscreen.
5.
Click
Download
. Select a location to save the captured packets. (The default file name is
pkt.cap.) The file is downloaded to the location that you specify.
6.
When the download is complete, browse to the download location you specified, and verify
that the file was downloaded successfully.
7.
Optional step: Send the file to NETGEAR technical support for analysis.
Reboot the VPN Firewall Remotely
You can perform a remote reboot, for example, when the VPN firewall seems to have
become unstable or is not operating normally.
Rebooting breaks any existing connections either to the VPN firewall (such as your
management session) or through the VPN firewall (for example, LAN users accessing the
Internet). However, connections to the Internet are automatically reestablished when
possible.
To reboot the VPN firewall:
In Router Options section of the screen, next to Reboot the Router, click the
Reboot
button.
The VPN firewall reboots. The Diagnostics screen might remain visible during the reboot
process, or a status message with a counter might show the number of seconds left until the
reboot process is complete. The reboot process takes about 160 seconds.
Page 392 / 469
392
10
10.
Troubleshooting
This chapter provides troubleshooting tips and information for the VPN firewall. After each
problem description, instructions are provided to help you diagnose and solve the problem. For
the common problems listed, go to the section indicated.
Is the VPN firewall on?
Go to
Basic Functioning
on page
393.
Have I connected the VPN firewall correctly?
Go to
Basic Functioning
on page
393.
I cannot access the VPN firewall’s web management interface.
Go to
Troubleshoot the Web Management Interface
on page
394.
A time-out occurs.
Go to
When You Enter a URL or IP Address, a Time-Out Error Occurs
on page
395.
I cannot access the Internet or the LAN.
Go to
Troubleshoot the ISP Connection
on page
396.
I have problems with the IPv6 connection.
Go to
Troubleshooting the IPv6 Connection
on page
397
I have problems with the LAN connection.
Go to
Troubleshoot a TCP/IP Network Using a Ping Utility
on page
400.
I want to clear the configuration and start over again.
Go to
Restore the Default Configuration and Password
on page
401.
The date or time is not correct.
Go to
Address Problems with Date and Time
on page
403.
I need more information.
Go to
Access the Knowledge Base and Documentation
on page
403.
Page 393 / 469
Troubleshooting
393
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Note:
The VPN firewall’s diagnostic tools are described in
Diagnostics
Utilities
on page
388.
Basic Functioning
Power LED Not On
Test LED Never Turns Off
LAN or WAN Port LEDs Not On
After you turn on power to the VPN firewall, verify that the following sequence of
events occurs:
1.
When power is first applied, verify that the Power LED is on.
2.
After approximately 2 minutes, verify that:
a.
The Test LED is no longer lit.
b.
The left LAN port LEDs are lit for any local ports that are connected.
c.
The left WAN port LEDs are lit for any WAN ports that are connected.
If a port’s left LED is lit, a link has been established to the connected device. If a port is
connected to a 1000 Mbps device, verify that the port’s right LED is green. If the port
functions at 100
Mbps, the right LED is amber. If the port functions at 10 Mbps, the right
LED is off.
If any of these conditions do not occur, see the appropriate following section.
Power LED Not On
If the Power and other LEDs are off when your VPN firewall is turned on, make sure that the
power cord is correctly connected to your VPN firewall and that the power supply adapter is
correctly connected to a functioning power outlet.
If the error persists, you have a hardware problem and should contact NETGEAR technical
support.
Test LED Never Turns Off
When the VPN firewall is powered on, the Test LED turns on for approximately 2
minutes and
then turns off when the VPN firewall has completed its initialization. If the Test LED remains
on, there is a fault within the VPN firewall.
Page 394 / 469
Troubleshooting
394
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
If all LEDs are still on more than several minutes minute after power-up, do the
following:
Turn off the power, and turn it on again to see if the VPN firewall recovers.
Reset the VPN firewall’s configuration to factory default settings. Doing so sets the VPN
firewall’s IP address to
192.168.1.1
. This procedure is described in
Restore the Default
Configuration and Password
on page
401.
If the error persists, you might have a hardware problem and should contact NETGEAR
technical support.
LAN or WAN Port LEDs Not On
If either the LAN LEDs or WAN LEDs do not light when the Ethernet connection is
made, check the following:
Make sure that the Ethernet cable connections are secure at the VPN firewall and at the
hub, router, or workstation.
Make sure that power is turned on to the connected hub, router, or workstation.
Be sure that you are using the correct cables:
When connecting the VPN firewall’s WAN ports to one or two devices that provide the
Internet connections, use the cables that are supplied with the devices. These cables
could be standard straight-through Ethernet cables or Ethernet crossover cables.
Troubleshoot the Web Management Interface
If you cannot access the VPN firewall’s web management interface from a computer on
your local network, check the following:
Check the Ethernet connection between the computer and the VPN firewall as described
in the previous section (
LAN or WAN Port LEDs Not On
).
If your computer’s IP address is shown as 169.254.x.x:
Windows and Mac operating systems generate and assign an IP address if the computer
cannot reach a DHCP server. These autogenerated addresses are in the range of
169.254.x.x. If your IP address is in this range, check the connection from the computer
to the VPN firewall and reboot your computer.
If your VPN firewall’s IP address has been changed and you do not know the current IP
address, reset the VPN firewall’s configuration to factory default settings. This sets the
VPN firewall’s IP address to
192.168.1.1
. This procedure is described in
Restore the
Default Configuration and Password
on page
401.
Tip:
If you do not want to revert to the factory default settings and lose your
configuration settings, you can reboot the VPN firewall and use a sniffer
to capture packets sent during the reboot. Look at the ARP packets to
locate the VPN firewall’s LAN interface address.
Page 395 / 469
Troubleshooting
395
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Make sure that you are using the SSL https://
address
login rather than the http://
address
login.
Make sure that your browser has Java, JavaScript, or ActiveX enabled. If you are using
Internet Explorer, click
Refresh
to be sure that the Java applet is loaded.
Try quitting the browser and launching it again.
Clear the browser’s cache.
Make sure that you are using the correct login information. The factory default login name
is admin, and the password is password. Make sure that Caps Lock is off when entering
this information.
Note:
To be able to configure the VPN firewall, your computer’s IP address
does not need to be on the same subnet as the VPN firewall.
If the VPN firewall does not save changes you made in the web management interface,
check the following:
When entering configuration settings, be sure to click the
Apply
button before moving to
another menu or tab, or your changes are lost.
Click the
Refresh
or
Reload
button in the web browser. The changes might have
occurred, but the web browser might be caching the old configuration.
When You Enter a URL or IP Address, a Time-Out Error
Occurs
A number of things could be causing this situation. Try the following troubleshooting
steps:
Check whether other computers on the LAN work correctly. If they do, ensure that your
computer’s TCP/IP settings are correct. If you use a fixed (static) IP address, check the
subnet mask, default gateway, DNS, and IP addresses on a WAN IPv4 ISP Settings
screen. For more information, see
Manually Configure an IPv4 Internet Connection
on
page
34.
If the computer is configured correctly, but still not working, ensure that the VPN firewall is
connected and turned on. Connect to the web management interface, and check the VPN
firewall’s settings. If you cannot connect to the VPN firewall, see the information in the
previous section (
Troubleshoot the Web Management Interface
on page
394).
If the VPN firewall is configured correctly, check your Internet connection (for example,
your modem, dish, or router) to make sure that it is working correctly.

Rate

3.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top