Billion Electric Company BIPAC-7500G user manual Remote Access PPTP Connection

Page 72
Remote Access PPTP Connection

Billion BIPAC-7500G–802.11g ADSL VPN Firewall Router with 3DES Accelerator

Remote Access PPTP Connection

Connection Name: This allows you to identify this particular connection, e.g. “Connection to office”.

Type: Check Dial Out if you want your router to operate as a client (connecting to a remote VPN server, e.g. your office server), check Dial In operates as a VPN server.

When configuring your router as a Client, enter the remote Server IP Address (or Hostname) you wish to connection to.

When configuring your router as a server, enter the Private IP Address Assigned to Dial in User address.

Username: If you are a Dial-Out user (client), enter the username provided by your Host. If you are a Dial-In user (server), enter your own username.

Password: If you are a Dial-Out user (client), enter the password provided by your Host. If you are a Dial-In user (server), enter your own password.

PPPAuthentication Type: Default is Auto if you want the router to determine the authentication type to use, or else manually specify CHAP (Challenge Handshake Authentication Protocol) or PAP (Password Authentication Protocol) if you know which type the server is using (when acting as a client), or else the authentication type you want clients connecting to you to use (when acting as a server). When using PAP, the password is sent unencrypted, whilst CHAP encrypts the password before sending, and also allows for challenges at different periods to ensure that the client has not been replaced by an intruder.

Data Encryption: Data sent over the VPN connection can be encrypted by an MPPE algorithm. Default is Auto, so that this setting is negotiated when establishing a connection, or else you can manually Enable or Disable encryption.

Key Length: The data can be encrypted by MPPE algorithm with 40 bits or 128 bits. Default is Auto, it is negotiated when establishing a connection. 128 bit keys provide stronger encryption than 40 bit keys.

Mode: You may select Stateful or Stateless mode. The key will be changed every 256

68

Chapter 4: Configuration

Image 72
Contents Version Release 1.10e BIPAC-7500G802.11g ADSL VPN Firewall Router with 3DES Accelerator User’s Manual Page Table of Contents CHAPTER 2 INSTALLING THE ROUTERCHAPTER 3 BASIC INSTALLATION CHAPTER 4 CONFIGURATIONCHAPTER 5 TROUBLESHOOTING CONTACT INFORMATIONAPPENDIX A PRODUCT SUPPORT AND S AVE C ONFIGURATION TO F LASHFeatures Wireless Ethernet 802.11gFast Ethernet Switch Quick Installation WizardUniversal Plug and Play UPnP and UPnP NAT Traversal Network Address Translation NATFirewall Domain Name System DNS relayDynamic Host Configuration Protocol DHCP client and server Firmware UpgradeableStatic and RIP1/2 Routing Simple Network Management Protocol SNMPBIPAC-7500G ADSL Router Application Figure 1.1 Application DiagramChapter 2 Installing the Router Package ContentsImportant note for using the BIPAC-7500G ADSL Router The Front LEDs Meaning1 PWR 2 SYS 3 LAN port 4 LAN port 5 LAN port 6 LAN port 7 WLAN 10 MAIL 11 PPP 13 ADSLRESET PWR Power Switch The Rear PortsPort LINE CONSOLE LANCabling Chapter 3 Basic Installation Connecting your routerConfiguring PCs in Windows For Windows XP2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties. See FigureFor Windows Double-click Local Area “LAN” Connection . SeeIn the LAN Area Connection Status window, click Properties . See Figure5. Then select the DNS Configuration tab. See Figure For Windows 98 / ME3. Click Properties For Windows NT4.0 2. Select TCP/IP Protocol and click Properties. See3. Select the Obtain an IP address from a DHCP server Figure 3.12 TCP / IPFactory Default Settings Username and PasswordLAN Device IP Settings ISP setting in WAN siteInformation from your ISP PPPoE PPPoA RFC1483 Bridged RFC1483 Routed IPoAConfiguring with your Web Browser Figure 3.14 User namd & Password Prompt WidonwChapter 4 Configuration Save Config to FLASHQuick Start Status ARP TableRouting Table Routing TableRIP Routing Table DHCP Table Leased TableExpired Table Permanent TablePPTP Status IPSec Status L2TP Status Email StatusError Logging Event LogUPnP Portmap Quick Start Click Start to begin scanning for encapsulation types offered by your ISP. If the scan is successful you will then be presented with a list of supported options Configuration LAN Local Area NetworkEthernet LAN, WAN, System, Firewall, VPN, QoS, Virtual Server and AdvancedWireless ESSID BroadcastWireless Security WPA Pre-Shared KeyPage Port Setting DHCP Server the requesting PC in the LAN your Local Area Network WAN Wide Area Network RFC 1483 Routed Connections PPPoE Connections Advanced Options PPPoE Connectiondiscovered the DNS server IP address, it automatically gives the address to the local DNS relay so that a connection can be established RFC 1483 Bridged Connections All Ip PppoePPPoA Routed Connections Advanced Options PPPoA Chapter 4 Configuration IPoA Routed Connections Page ADSL System Time ZoneRemote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control URL Filter To block PCs on your local network from unwanted websites General Settings Packet Filter Port Filters Table 1 Pre-defined Port FilterAddress Filters Configuring Packet Filter Click Port FiltersClick Delete 4. Click Add TCP FilterClick Add TCP Filter Input HTTP port number Select “Allow”HTTP inbound & outbound application Intrusion Detection Block DurationTable 2 Hacker attack types recognized by the IDS Intrusion Name Detect Parameter BlacklistType of Block Duration Drop PacketMAC Address Filter URL Filter Restrict URL Features Firewall Log Log information can be seen in the Status - Event Log after enablingVPN Virtual Private Networks PPTPRemote Access PPTP Connection Click Apply after changing settings LAN to LAN PPTP Connection Click Apply after changing settings IPSec Click Create to configure a new IPSec VPN connectionConfigure a new VPN Connection LocalRemote ProposalMD5 A one-way hashing algorithm that produces a 128−bit hash Advanced Option L2TP Remote Access L2TP Connection MD5 A one-way hashing algorithm that produces a 128−bit hash LAN to LAN L2TP Connection IPSec Enable for enhancing your LT2P VPN security Example Configuring a Remote Access PPTP VPN Dial-in Connection Configuring PPTP VPN in the OfficeFunction DescriptionKey Length Mode Idle Time Auto statefulExample Configuring a Remote Access PPTP VPN Dial-out Connection Configuring the PPTP VPN in the OfficeMode Idle Time statefulExample Configuring a LAN-to-LAN PPTP VPN Connection Configuring PPTP VPN in the Head Office Configuring PPTP VPN in the Branch Office Example Configuring a IPSec LAN-to-LAN PPTP VPN Connection Table 3 Network Configuration and Security Plan192.168.0.0/24 69.1.121.30 192.168.1.0/24 69.1.121.3 12345678 Tunnel mode ESPMD5 with AESConfiguring IPSec VPN in the Head Office IP address of the head office router inWAN side Configuring IPSec VPN in the Branch Office QoS Quality of Service Prioritization HighIP Throttling Virtual Server “Port Forwarding” Table 4 Well-know and registered PortsPort Number Protocol POP3 Post Office Protocol Version TCP or UDP, however you can specify other protocols using the drop-down Protocol menu. Setting the protocol to “all” will cause all incoming connection attempts using all protocols on all port numbers to be forwarded to the specified IP address Advanced Static RoutingDynamic DNS Check Emails Device Management Embedded Web ServerUniversal Plug and Play UPnP SNMP V1 andSNMP SNMP Version SNMPv2c and SNMPv3 From RFC 1213 MIB-IIFrom RFC1650 EtherLike-MIB From RFC 1493 Bridge MIBFrom RFC 1472 PPP/Security MIB From RFC 1473 PPP/IP MIBFrom RFC 1474 PPP/Bridge MIB From RFC1573 IfMIBSave Configuration to Flash Logout Chapter 5 Troubleshooting Problems starting up the routerProblems with the WAN Interface ProblemProblems with the LAN Interface Frequent loss of ADSL linesync disconnectionsCan’t ping any PCs on the LAN APPENDIX A Product Support and Contact Information Contact Billion AUSTRALIAWORLDWIDE