Forum Discussion

Guide

Aug 21, 2016

Solved

FVS336Gv3 - Help in configuring router

We have a Netgear FVS336Gv3 running latest firmware (V4.3.4-1). The FVS336Gv3 has a single LAN network with 4 devices and each have the following IP address: IP_A, IP_B, IP_C, IP_D. It also has ...

Installation

DaneA
Sep 14, 2016
Hi vpnman,

Just want to follow-up. Any updates?

Regards,

DaneA

NETGEAR Community Team

DaneA

NETGEAR Employee Retired

Aug 22, 2016

Hi vpnman,

I think you need a switch that supports access control list or ACL on your network setup to achieve your goal. Let me share this article below as reference:

Setting up VLANs & VLAN Routing with Access Control Lists

Regards,

DaneA

NETGEAR Community Team

vpnman
Guide
Aug 23, 2016
Hi DaneA,

Thanks for your response. Will a Netgear ProSAFE M4100 unit be able to accomplish this and support the additional requirements below?
In addition to IP_A device, to only allow a particular VPN client (coming from WAN side) with VPN_IP_Z address to access IP_D device and all other VPN clients are denied access to IP_D device?
Can a set of LAN IP address (ex: coming from a port connected to a WIFI access point) be put in a group and manage this group in a ACL rule (ex: deny this group access to IP_D)?

Regards,
vpnman
- DaneA
  NETGEAR Employee Retired
  Aug 24, 2016
  Hi vpnman,
  
  About the 1st additional requirement, I believe it can be configured on the VPN policies of the FVS336Gv3. While the 2nd additional requirement, can be configured on the M4100 switch as an ACL rule.
  
  Regards,
  
  DaneA
  
  NETGEAR Community Team
  - vpnman
    Guide
    Aug 25, 2016
    Aside from the M4100 switch, can it be accomplished using GS110TP and/or GS108T? Do these support IP-based ACL?
    
    Is there a guide or cookbook that shows step-by-step how to configure the FVS336gv3 to deny access to IP_D device from all VPN clients coming from GW-to-GW VPN but only allow a particular one (VPN_IP_Z address)?