Enterasys Networks ANG-1000 manual Aurorean Network Gateway-1000 User’s Guide

Page 2

Notice

Enterasys Networks and its licensors reserve the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Enterasys Networks to determine whether any such changes have been made. The hardware, firmware, or software described in this manual is subject to change without notice.

IN NO EVENT SHALL Enterasys Networks AND ITS LICENSORS BE LIABLE FOR ANY INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION CONTAINED IN IT, EVEN IF Enterasys Networks AND ITS LICENSORS HAVE BEEN ADVISED OF, KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES.

Enterasys Networks, Inc.

35 Industrial Way

Rochester, NH 03866-5005

Part Number: AVN-ANG1-R10

May 2001

Printed in the USA

Enterasys Networks, Inc. is a subsidiary of Cabletron Systems, Inc. 2001 by Enterasys Networks, Inc. All Rights Reserved Printed in the United States of America

The Enterasys Networks logo, Aurorean, Prescriptive Diagnostics Engine, RiverMaster, Intelligent Client Routing, TollSaver are trademarks of Enterasys Networks.

Microsoft, MS, and MS-DOS are registered trademarks and Windows, Windows 95, Windows 98, Windows NT, Windows 2000 Professional and Windows Millennium are trademarks of Microsoft Corporation in the USA and other countries.

Virtual Network Computing is a trademark of AT&T Laboratories Cambridge.

ActiveState, ActivePerl, and PerlScript are trademarks of ActiveState Tool Corp.

Other trademarks and trade names used in this publication belong to their respective owners.

Aurorean Virtual Network software includes the following third-party components:

Commercial support for ActivePerl is available through PerlClinic at http://www.ActiveState.com. Peer support resources for ActivePerl issues can also be found at the ActiveState Web site under support at http://ActiveState.com/support/. The ActiveState Repository has a large collection of modules and extensions in binary packages that are easy to install and use. To view and install these packages, use the Perl Package Manager (PPM) which is included with ActivePerl. ActivePerl is the latest Perl binary distribution from ActiveState and replaces what was previously distributed as Perl for Win32. The latest release of ActivePerl as well as other professional tools for Perl developers are available from the ActiveState Web site.

Gate Daemon software © 1995 The Regents of the University of Michigan. All rights reserved.

Gate Daemon was originated and developed through release 3.0 by Cornell University and its collaborators.

A DES implementation written by Eric Young © 1995-1997 Eric Young (eay@cryptsoft.com). All rights reserved.

MD4 and MD5 implementation derived from the RSA Data Security, Inc. MD4 Message-Digest Algorithm and MD5 Message-Digest Algorithm © 1991-2, RSA Data Security, Inc. Created 1991. All rights reserved.

ccp.c - PPP Compression Control Protocol © 1994 The Australian National University. All rights reserved.

chap.c - Crytographic Handshake Authentication Protocol © 1991 Gregory M. Christy. All rights reserved.

chap_ms.c - Microsoft MS-CHAP compatible implementation © 1995 Eric Rosenquist, Strata Software Limited (www.strataware.com). All rights reserved.

fsm.c - {Link, IP} Control Protocol Finite State Machine © 1989 Carnegie Mellon University. All rights reserved.

Routines to compress and uncompress TCP packets (for transmission over low speed serial lines) © 1989 Regents of the University of California. All rights reserved.

Portions of the Aurorean Client Software are copyrighted to ICE Engineering, Inc. and licensed through a GNU public license. For more information, including access to the source code, visit their Web site at www.ice.com.

ii

Aurorean Network Gateway-1000 User’s Guide

Image 2
Contents ANG-1000 User’s Guide Aurorean Virtual NetworkAurorean Network Gateway-1000 User’s Guide Iii Important Safety Instructions Table of Contents Configuring the ANG-1000 with Aurorean Web Vii Page Contents of the Guide About This GuideConventions Used in This Guide Related Publications About This Guide Related PublicationsPage ANG-1000 Front Rear OverviewSystem Description ANG-1000 Topology System DescriptionInstallation Unpacking the ANG-1000Location Planning Connecting CablesAccessories Ethernet Cables PowerConnecting Cables Aurorean Network Gateway-1000 Do one of the following as shown in FigureANG-3000/7000 Connecting Power to the ANG-1000 Chapter Connecting Power to the ANG-1000Front Power LED will light the moment you power up the unit Connecting the Power Cable to the Power SupplyFront Panel LEDs Checking ANG-1000 ConnectionsRear Panel Link LEDs Chapter Checking ANG-1000 ConnectionsActive PowerCOM1 and COM2 Leds are not operational at this time InternetConfiguring the ANG-1000 with Aurorean Web Config Before You BeginConfiguring the ANG-1000 with Aurorean Web Config Login window appears as shown in Figure Logging into Web ConfigTo log into Web Config, perform the steps below VPN Status window appears as shown in FigureViewing VPN Status VPNFirmware Update window appears as shown in Figure Click the Firmware Upgrade menu optionFirmware Upgrade window appears as shown in Figure Downloading the Latest FirmwareSecond Firmware Update Window Aurorean Network Gateway Firmware Update ANG-1000 will take a few moments to accept the new softwareVPN Setup window appears as shown in Figure Setting Up the VPNClick the VPN Setup menu option Aurorean Network Gateway VPN SetupClick Apply Setting Up the Internet Connection Do one of the following Click the Internet Setup menu optionInternet Setup window appears as shown in Figure Configuring the ANG-1000 with Aurorean Web Config LAN Setup window appears as shown in Figure Setting Up the LANClick the LAN Setup menu option LAN SetupConfiguring the ANG-1000 with Aurorean Web Config Click the Firewall Setup menu option Setting Up the FirewallBegin Firewall Setup by performing the following steps Firewall Setup window appears as shown in FigureAurorean Network Gateway Firewall Setup Connectivity Setup LAN ConnectionSet Password window appears as shown in Figure Setting Your PasswordClick the Set Password menu option Set PasswordDevice Status window appears as shown in Figure Checking Device StatusClick the Device Status menu option Device Status Window Interrupts Network DevicesRoute Table System LogAdvanced Utilities window appears as shown in Figure Using Advanced UtilitiesClick the Advanced Utilities menu option Advanced UtilitiesUsing the Configuration Editor Click the Configuration Edit menu option Configuration Edit window appears as shown in FigureFile/etc/config/config Configuring IP Port Forwarding Usage Follow the steps below to configure IP port forwardingSwitch Arg Definition Example Page Aurorean Network Gateway Aurorean Web ConfigGlossary Aurorean Policy ServerEthernet FirewallIP Address Internet Service Provider ISPGeneric Routing Encapsulation GRE IP Security Protocol IPSecNetwork Address Translation NAT LEDsMac Address Point-to-Point Protocol PPP Network AdministratorPoint of Presence POP Point-to-Point Tunneling Protocol PptpTunneling RiverMasterRouters Virtual Private Network VPNCategory Parameters SpecificationsThis appendix details the specifications of the ANG-1000 Specifications Link 1 Trusted Pin SignalPin Assignments Link 2 ExternalPin Assignments License Grant License Agreement & SupportEnterasys Networks License Agreement Warranty Appendix D Infringement IndemnificationLimitation of Liability Applicable Law TerminationInternational Provisions Support from Enterasys Networks Technical SupportGovernment Commercial Computer Software Returning Products for Repair Technical SupportIndex Index POPIndex