SnapGear 1.7.8 manual Terminology, Term Meaning

Page 5

Terminology

This section explains terms that are commonly used in this document.

Term

Meaning

ADSL

Asymmetric Digital Subscriber Line. A technology allowing high-

 

speed data transfer over existing telephone lines. ADSL supports

 

data rates between 1.5 and 9 Mb/s when receiving data and between

 

16 and 640 Kb/s when sending data.

BOOTP

Bootstrap Protocol. A protocol that allows a network user to

 

automatically receive an IP address and have an operating system

 

boot without user interaction. BOOTP is the basis for the more

 

advanced DHCP.

DHCP

Dynamic Host Configuration Protocol. A communications protocol

 

that assigns IP addresses to computers when they are connected to

 

the network.

DNS

Domain Name System that allocates Internet domain names and

 

translates them into IP addresses. A domain name is a meaningful

 

and easy to remember name for an IP address.

DUN

Dial Up Networking.

Ethernet

A physical layer protocol based upon IEEE standards.

Extranet

A private network that uses the public Internet to securely share

 

business information and operations with suppliers, vendors,

 

partners, customers, or other businesses. Extranets add external

 

parties to a company’s intranet.

Failover

A method for detecting that the main Internet connection (usually a

 

broadband connection) has failed and the SnapGear apliance cannot

 

communicate with the Internet. If this occurs, the SnapGear appliance

 

automatically moves to a lower speed, secondary Internet

 

connection.

Fall-forward

A method for shutting down the failover connection when the main

 

Internet connection can be re-established.

Firewall

A network gateway device that protects a private network from users

 

on other networks. A firewall is usually installed to allow users on an

 

intranet access to the public Internet without allowing public Internet

 

users access to the intranet.

Gateway

A machine that provides a route (or pathway) to the outside world.

Hub

A network device that allows more than one computer to be

 

connected as a LAN, usually using UTP cabling.

IDB

Intruder Detection and Blocking. A feature of your SnapGear VPN

 

appliance that detects connection attempts from intruders and can

 

also optionally block all further connection attempts from the

 

intruder’s machine.

Internet

A worldwide system of computer networks - a public, cooperative,

 

and self-sustaining network of networks accessible to hundreds of

2

Introduction

Image 5
Contents Rev May 2nd Table of contents Virtual Private Networking Introduction Term Meaning TerminologyLAN TCP/IP Document conventionsStep Chapter Installing and configuring your SnapGear applianceLabel Activity Description Your SnapGear applianceLEDs SnapGear appliance back panels Network interconnections Software features SnapGear appliance featuresDial-in connection features Internet link featuresLAN link features Environmental features Getting started Static IP reset10.0.0.0 10.255.255.255 10/8 prefix New Networks192.168.0.0 192.168.0.255 192.168.0/24 prefix Configuring the SnapGear appliance on your network Page Set up IP addresses Multiple SnapGear appliances were found on the network Your SnapGear appliance was found on the networkYour SnapGear appliance needs an IP address SnapGear Management Console web administration pages Administrative passwordUsing linsetip Initial setup using LinuxPing -b subnet broadcast address Arp -a Using an existing local Dhcp or Bootp serverEdit the /etc/inetd.conf file Configuring a new local Dhcp or Bootp serverSnapGear Quick Setup LAN port quick setup LAN port quick setupISP connection quick setup ISP connection quick setupGetting started Configuring the PCs on your network TCP/IP properties Physically connect modem device Connecting to the InternetConnect to Internet Adsl Select Internet connectionConnect to Internet cable modem Connect to Internet modem Connect to Internet directField Description ISP. The Password and Confirm Password fields mustInternet failover Advanced configuration optionFollowing figure shows the failover configuration screen Failed connection Establishing the connection Configure PCs to use SnapGear appliance Internet gatewayDial-in server configuration Dial-in server configuration Dial-in setup Dial-in setupField Description Dial-in user account creation Dial-in user accountsFollowing figure shows the user maintenance screen Account list Dial-in password errorFor Windows 95 and Windows Remote user configurationServer types Connect to dialogue box WindowsClick Next to continue 11 Connection availability 13 Remote access login screen IP configuration Network configurationNetwork configuration Advanced IP configuration Advanced IP configurationNetwork configuration Dhcp server Dhcp server configurationNetwork configuration Additional routes Advanced networkingTraffic shaping Firewall Incoming accessIncoming access configuration Incoming access administration servicesConfigure external access to services External access to servicesPort forwarding Port forwarding configurationSecurity group classes configuration Outgoing accessFirewall rules Outgoing access settingsIntrusion detection and blocking Intrusion detection and blocking configurationPage Content filtering Content filtering Filtering Level Description Filtering levels and reportingVirtual Private Networking 1VPN tunneling using the Pptp serverPptp client setup Pptp client configuration Pptp server setup Pptp server setup Enable and configure the Pptp VPN serverField Description 4PPTP VPN server accounts screen Configuring user accounts for VPN serverVirtual Private Networking VPN Pptp IP address Configuring the remote VPN clientVirtual Private Networking Windows 95 and Windows VPN client setupYour VPN client is now set up correctly Windows NT Network and dial-up connections This displays the Destination Address window Connecting the remote VPN client 12 IPSec setup IPSec setup13 Add new IPSec connection Virtual Private Networking 14 Automatic keying setup Technique Description Aggressive mode phase 1 settingsIPSec interoperability Time server PasswordSystem Advanced DiagnosticsReset button Flash upgradeTechnical support Technical supportLED Pattern Status Action Appendix a LED status patternsAppendix B System Log Access LoggingEth0 Default DenyEth1 PppCreating Custom Log Rules Forward Iptables -I Forward -j LOG -i eth+ -o eth+ -p tcp Rate Limiting Administrative Access LoggingBoot Log Messages