Billion Electric Company BIPAC-7500G Configuring PPTP VPN in the Branch Office, Function

Page 91
Configuring PPTP VPN in the Branch Office

Billion BIPAC-7500G–802.11g ADSL VPN Firewall Router with 3DES Accelerator

Configuring PPTP VPN in the Branch Office

The IP address 69.1.121.30 is the Public IP address of the router located in head office. If you registered the DDNS (please refer to the DDNS section of this manual), you can also use the domain name instead of the IP address to reach the router.

1

2

3

4

5

6

Item Manual backgroundManual background

1

2

3

4

5

6

Function

Connection Name

 

VPN_PPTP1

Dial out

 

 

Server IP Address

 

69.1.121.3

(or Hostname)

 

 

 

Peer Network IP

 

192.168.1.0

Netmask

 

255.255.255.0

 

Username

 

Username

Password

 

xxxxxx

Auth.Type

 

Chap(Auto)

Data Encryption

 

Auto

Key Length

 

Auto

Mode

 

stateful

Idle Time

 

0

 

 

 

Description

Manual backgroundManual background Given a name of PPTP connection

Manual backgroundManual background Check Dial out

Manual backgroundManual background IP address of the head office router (in WAN side)

Manual backgroundManual background Head office network

Input username & password to authenticate branch Manual background office network

Keep as default value in most of the cases, PPTP server & client will determine the value automatically. Refer to manual for details if you want to change the Manual background setting.

The connection will be disconnected when there Is no traffic in a predefined period of time. Idle time 0 means the connection is always-on.

87

Chapter 4: Configuration

Image 91
Contents BIPAC-7500G Version Release 1.10e802.11g ADSL VPN Firewall Router with 3DES Accelerator User’s Manual Page CHAPTER 4 CONFIGURATION Table of ContentsCHAPTER 2 INSTALLING THE ROUTER CHAPTER 3 BASIC INSTALLATIONS AVE C ONFIGURATION TO F LASH CHAPTER 5 TROUBLESHOOTINGCONTACT INFORMATION APPENDIX A PRODUCT SUPPORT ANDQuick Installation Wizard FeaturesWireless Ethernet 802.11g Fast Ethernet SwitchDomain Name System DNS relay Universal Plug and Play UPnP and UPnP NAT TraversalNetwork Address Translation NAT FirewallSimple Network Management Protocol SNMP Dynamic Host Configuration Protocol DHCP client and serverFirmware Upgradeable Static and RIP1/2 RoutingFigure 1.1 Application Diagram BIPAC-7500G ADSL Router ApplicationPackage Contents Chapter 2 Installing the RouterImportant note for using the BIPAC-7500G ADSL Router 10 MAIL 11 PPP 13 ADSL The Front LEDsMeaning 1 PWR 2 SYS 3 LAN port 4 LAN port 5 LAN port 6 LAN port 7 WLANLINE CONSOLE LAN RESET PWR Power SwitchThe Rear Ports PortCabling Connecting your router Chapter 3 Basic Installation4. Select Internet Protocol TCP/IP and click Properties. See Figure Configuring PCs in WindowsFor Windows XP 2. Double-click Local Area Connection. See FigureProperties . See Figure For WindowsDouble-click Local Area “LAN” Connection . See In the LAN Area Connection Status window, clickFor Windows 98 / ME 5. Then select the DNS Configuration tab. See Figure3. Click Properties Figure 3.12 TCP / IP For Windows NT4.02. Select TCP/IP Protocol and click Properties. See 3. Select the Obtain an IP address from a DHCP serverISP setting in WAN site Factory Default SettingsUsername and Password LAN Device IP SettingsPPPoE PPPoA RFC1483 Bridged RFC1483 Routed IPoA Information from your ISPFigure 3.14 User namd & Password Prompt Widonw Configuring with your Web BrowserSave Config to FLASH Chapter 4 ConfigurationQuick Start ARP Table StatusRouting Table Routing TableRIP Routing Table Permanent Table DHCP TableLeased Table Expired TablePPTP Status IPSec Status Email Status L2TP StatusEvent Log Error LoggingUPnP Portmap Quick Start Click Start to begin scanning for encapsulation types offered by your ISP. If the scan is successful you will then be presented with a list of supported options LAN, WAN, System, Firewall, VPN, QoS, Virtual Server and Advanced ConfigurationLAN Local Area Network EthernetESSID Broadcast WirelessWPA Pre-Shared Key Wireless SecurityPage Port Setting DHCP Server the requesting PC in the LAN your Local Area Network WAN Wide Area Network RFC 1483 Routed Connections PPPoE Connections Connection Advanced Options PPPoEdiscovered the DNS server IP address, it automatically gives the address to the local DNS relay so that a connection can be established All Ip Pppoe RFC 1483 Bridged ConnectionsPPPoA Routed Connections Advanced Options PPPoA Chapter 4 Configuration IPoA Routed Connections Page ADSL Time Zone SystemRemote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control URL Filter To block PCs on your local network from unwanted websites General Settings Packet Filter Table 1 Pre-defined Port Filter Port FiltersAddress Filters Click Port Filters Configuring Packet FilterInput HTTP port number Select “Allow” Click Delete4. Click Add TCP Filter Click Add TCP FilterHTTP inbound & outbound application Block Duration Intrusion DetectionDrop Packet Table 2 Hacker attack types recognized by the IDSIntrusion Name Detect Parameter Blacklist Type of Block DurationMAC Address Filter URL Filter Restrict URL Features Log information can be seen in the Status - Event Log after enabling Firewall LogPPTP VPN Virtual Private NetworksRemote Access PPTP Connection Click Apply after changing settings LAN to LAN PPTP Connection Click Apply after changing settings Click Create to configure a new IPSec VPN connection IPSecProposal Configure a new VPN ConnectionLocal RemoteMD5 A one-way hashing algorithm that produces a 128−bit hash Advanced Option L2TP Remote Access L2TP Connection MD5 A one-way hashing algorithm that produces a 128−bit hash LAN to LAN L2TP Connection IPSec Enable for enhancing your LT2P VPN security Description Example Configuring a Remote Access PPTP VPN Dial-in ConnectionConfiguring PPTP VPN in the Office FunctionAuto stateful Key Length Mode Idle TimeConfiguring the PPTP VPN in the Office Example Configuring a Remote Access PPTP VPN Dial-out Connectionstateful Mode Idle TimeExample Configuring a LAN-to-LAN PPTP VPN Connection Configuring PPTP VPN in the Head Office Configuring PPTP VPN in the Branch Office Tunnel mode ESPMD5 with AES Example Configuring a IPSec LAN-to-LAN PPTP VPN ConnectionTable 3 Network Configuration and Security Plan 192.168.0.0/24 69.1.121.30 192.168.1.0/24 69.1.121.3 12345678IP address of the head office router in Configuring IPSec VPN in the Head OfficeWAN side Configuring IPSec VPN in the Branch Office QoS Quality of Service High PrioritizationIP Throttling Table 4 Well-know and registered Ports Virtual Server “Port Forwarding”Port Number Protocol POP3 Post Office Protocol Version TCP or UDP, however you can specify other protocols using the drop-down Protocol menu. Setting the protocol to “all” will cause all incoming connection attempts using all protocols on all port numbers to be forwarded to the specified IP address Static Routing AdvancedDynamic DNS Check Emails Embedded Web Server Device ManagementSNMP V1 and Universal Plug and Play UPnPSNMP From RFC 1493 Bridge MIB SNMP Version SNMPv2c and SNMPv3From RFC 1213 MIB-II From RFC1650 EtherLike-MIBFrom RFC1573 IfMIB From RFC 1472 PPP/Security MIBFrom RFC 1473 PPP/IP MIB From RFC 1474 PPP/Bridge MIBSave Configuration to Flash Logout Problem Chapter 5 TroubleshootingProblems starting up the router Problems with the WAN InterfaceFrequent loss of ADSL linesync disconnections Problems with the LAN InterfaceCan’t ping any PCs on the LAN Contact Billion AUSTRALIA APPENDIX A Product Support and Contact InformationWORLDWIDE