Billion Electric Company BIPAC-7500G Configuring PPTP VPN in the Office, Function, Description

Page 85

Example: Configuring a Remote Access PPTP VPN Dial-in Connection

Billion BIPAC-7500G–802.11g ADSL VPN Firewall Router with 3DES Accelerator

Example: Configuring a Remote Access PPTP VPN Dial-in Connection

A remote worker establishes a PPTP VPN connection with the head office using Microsoft's VPN Adapter (included with Windows 2000/ME, etc.). The router is installed in the head office, connected to a couple of PCs and Servers.

Configuring PPTP VPN in the Office

The input IP address 192.168.1.200 will be assigned to the remote worker. Please make sure this IP is not used in the Office LAN.

1

2

3

4

5

Item

1

2

3

Function

	Connection Name	VPN_PPTP
	Dial in
	Private IP Address	192.168.1.200
	Assigned to	192.168.1.200
	Dialing User
	Username	username
	Password	xxxxxx
	Password	xxxxxx
	Auth.Type	Chap(Auto)
	Data Encryption	Auto

Description

Given a name of PPTP connection

Check Dial in

An assigned IP address for the remote worker

Input username & password to authenticate remote worker

Keep as default value in most of the cases, PPTP

81

Chapter 4: Configuration

Image 85

Contents BIPAC-7500G Version Release 1.10e802.11g ADSL VPN Firewall Router with 3DES Accelerator User’s Manual Page CHAPTER 2 INSTALLING THE ROUTER Table of ContentsCHAPTER 3 BASIC INSTALLATION CHAPTER 4 CONFIGURATIONCONTACT INFORMATION CHAPTER 5 TROUBLESHOOTINGAPPENDIX A PRODUCT SUPPORT AND S AVE C ONFIGURATION TO F LASHWireless Ethernet 802.11g FeaturesFast Ethernet Switch Quick Installation WizardNetwork Address Translation NAT Universal Plug and Play UPnP and UPnP NAT TraversalFirewall Domain Name System DNS relayFirmware Upgradeable Dynamic Host Configuration Protocol DHCP client and serverStatic and RIP1/2 Routing Simple Network Management Protocol SNMPFigure 1.1 Application Diagram BIPAC-7500G ADSL Router ApplicationPackage Contents Chapter 2 Installing the RouterImportant note for using the BIPAC-7500G ADSL Router Meaning The Front LEDs1 PWR 2 SYS 3 LAN port 4 LAN port 5 LAN port 6 LAN port 7 WLAN 10 MAIL 11 PPP 13 ADSLThe Rear Ports RESET PWR Power SwitchPort LINE CONSOLE LANCabling Connecting your router Chapter 3 Basic InstallationFor Windows XP Configuring PCs in Windows2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties. See FigureDouble-click Local Area “LAN” Connection . See For WindowsIn the LAN Area Connection Status window, click Properties . See FigureFor Windows 98 / ME 5. Then select the DNS Configuration tab. See Figure3. Click Properties 2. Select TCP/IP Protocol and click Properties. See For Windows NT4.03. Select the Obtain an IP address from a DHCP server Figure 3.12 TCP / IPUsername and Password Factory Default SettingsLAN Device IP Settings ISP setting in WAN sitePPPoE PPPoA RFC1483 Bridged RFC1483 Routed IPoA Information from your ISPFigure 3.14 User namd & Password Prompt Widonw Configuring with your Web BrowserSave Config to FLASH Chapter 4 ConfigurationQuick Start ARP Table StatusRouting Table Routing TableRIP Routing Table Leased Table DHCP TableExpired Table Permanent TablePPTP Status IPSec Status Email Status L2TP StatusEvent Log Error LoggingUPnP Portmap Quick Start Click Start to begin scanning for encapsulation types offered by your ISP. If the scan is successful you will then be presented with a list of supported options LAN Local Area Network ConfigurationEthernet LAN, WAN, System, Firewall, VPN, QoS, Virtual Server and AdvancedESSID Broadcast WirelessWPA Pre-Shared Key Wireless SecurityPage Port Setting DHCP Server the requesting PC in the LAN your Local Area Network WAN Wide Area Network RFC 1483 Routed Connections PPPoE Connections Connection Advanced Options PPPoEdiscovered the DNS server IP address, it automatically gives the address to the local DNS relay so that a connection can be established All Ip Pppoe RFC 1483 Bridged ConnectionsPPPoA Routed Connections Advanced Options PPPoA Chapter 4 Configuration IPoA Routed Connections Page ADSL Time Zone SystemRemote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control URL Filter To block PCs on your local network from unwanted websites General Settings Packet Filter Table 1 Pre-defined Port Filter Port FiltersAddress Filters Click Port Filters Configuring Packet Filter4. Click Add TCP Filter Click DeleteClick Add TCP Filter Input HTTP port number Select “Allow”HTTP inbound & outbound application Block Duration Intrusion DetectionIntrusion Name Detect Parameter Blacklist Table 2 Hacker attack types recognized by the IDSType of Block Duration Drop PacketMAC Address Filter URL Filter Restrict URL Features Log information can be seen in the Status - Event Log after enabling Firewall LogPPTP VPN Virtual Private NetworksRemote Access PPTP Connection Click Apply after changing settings LAN to LAN PPTP Connection Click Apply after changing settings Click Create to configure a new IPSec VPN connection IPSecLocal Configure a new VPN ConnectionRemote ProposalMD5 A one-way hashing algorithm that produces a 128−bit hash Advanced Option L2TP Remote Access L2TP Connection MD5 A one-way hashing algorithm that produces a 128−bit hash LAN to LAN L2TP Connection IPSec Enable for enhancing your LT2P VPN security Configuring PPTP VPN in the Office Example Configuring a Remote Access PPTP VPN Dial-in ConnectionFunction DescriptionAuto stateful Key Length Mode Idle TimeConfiguring the PPTP VPN in the Office Example Configuring a Remote Access PPTP VPN Dial-out Connectionstateful Mode Idle TimeExample Configuring a LAN-to-LAN PPTP VPN Connection Configuring PPTP VPN in the Head Office Configuring PPTP VPN in the Branch Office Table 3 Network Configuration and Security Plan Example Configuring a IPSec LAN-to-LAN PPTP VPN Connection192.168.0.0/24 69.1.121.30 192.168.1.0/24 69.1.121.3 12345678 Tunnel mode ESPMD5 with AESIP address of the head office router in Configuring IPSec VPN in the Head OfficeWAN side Configuring IPSec VPN in the Branch Office QoS Quality of Service High PrioritizationIP Throttling Table 4 Well-know and registered Ports Virtual Server “Port Forwarding”Port Number Protocol POP3 Post Office Protocol Version TCP or UDP, however you can specify other protocols using the drop-down Protocol menu. Setting the protocol to “all” will cause all incoming connection attempts using all protocols on all port numbers to be forwarded to the specified IP address Static Routing AdvancedDynamic DNS Check Emails Embedded Web Server Device ManagementSNMP V1 and Universal Plug and Play UPnPSNMP From RFC 1213 MIB-II SNMP Version SNMPv2c and SNMPv3From RFC1650 EtherLike-MIB From RFC 1493 Bridge MIBFrom RFC 1473 PPP/IP MIB From RFC 1472 PPP/Security MIBFrom RFC 1474 PPP/Bridge MIB From RFC1573 IfMIBSave Configuration to Flash Logout Problems starting up the router Chapter 5 TroubleshootingProblems with the WAN Interface ProblemFrequent loss of ADSL linesync disconnections Problems with the LAN InterfaceCan’t ping any PCs on the LAN Contact Billion AUSTRALIA APPENDIX A Product Support and Contact InformationWORLDWIDE