Allied Telesis AR440S manual Save your configuration

Page 15

Headquarters

The rule for the private interface uses both source and destination addresses to identify outgoing VPN traffic.

add firewall policy=hq ru=5 ac=non int=vlan1 prot=all ip=192.168.140.1-192.168.140.254 rem=192.168.141.0-192.168.144.254

If you configured SSH (recommended), create a rule to allow SSH traffic to pass through the firewall.

add firewall policy=hq ru=6 ac=allo int=eth0 prot=tcp po=22 ip=200.200.200.1 gblip=200.200.200.1 gblp=22

If you instead stayed with telnet (not recommended) and configured RSOs, create a rule to allow telnet traffic to pass through the firewall.

add firewall policy=hq ru=7 ac=allo int=eth0 prot=tcp po=23 ip=200.200.200.1 gblip=200.200.200.1 gblp=23

10. Save your configuration

It is important to save your configuration when you finish, to preserve the configuration over any power cuts.

create conf=<your-file.cfg>

This is particularly important in security configurations because it preserves the security officer definition. Without this, regaining configuration access would destroy encryption information such as keys.

Once you have saved the configuration to a file, specify that file as the configuration script to use when the router boots up.

set config=<your-file.cfg>

Note: If you forget your secoff user password, log in as manager. The manager user cannot edit a router in system security mode, so enter the command disable system security. This destroys your encryption keys. Edit your configuration file to redefine your secoff user password, then reboot, then log in as secoff, then enable system security again, then recreate the keys.

Page 15 AlliedWare™ OS How To Note: VPNs for Corporate Networks

Page 14 Page 16
Image 15
Page 14 Page 16
Contents Introduction ContentsRelated How To Notes L2TP About IPsec modes tunnel and transportInternet Background NAT-T and policies5 AlliedWare OS How To Note VPNs for Corporate Networks Vlan How to configure VPNs in typical corporate networksATM Dslam Before you startConfigure general system and user settings How to configure the headquarters VPN access concentratorConfigure remote management access, if desired Configure IP for internet accessCapture status information remotely, if desired Configure dynamic PPP over L2TP connectionsCheck feature licences Enable Isakmp Configure the firewall’s basic settings Configure the firewall’s access rules Save your configuration How to configure the AR440S router at branch office Configure Adsl for internet access Configure PPP for PPPoAConfigure IP 18 AlliedWare OS How To Note VPNs for Corporate Networks Create ip pool=roaming ip=192.168.144.1-192.168.144.50 Create ipsec pol=internet int=ppp0 ac=permit Add firewall policy=branch1 int=vlan1 type=private 22 AlliedWare OS How To Note VPNs for Corporate Networks 23 AlliedWare OS How To Note VPNs for Corporate Networks Set system name=Branch2 Configure PPP for PPPoE 26 AlliedWare OS How To Note VPNs for Corporate Networks Configure the VPNs for connecting to the headquarters office Enable isakmp 29 AlliedWare OS How To Note VPNs for Corporate Networks How to make voice traffic high priority Reduce the MTU Create classifiersFor roaming clients, set L2TP TOS reflection For site-to-site VPNs, apply the SQoS policy to the tunnelsSet int=ppp0 mtu=256 34 AlliedWare OS How To Note VPNs for Corporate Networks Apply the SQoS policy to the tunnel LANs are How to test your VPN solutionBefore you use these scripts Configuration scripts for headquarters and branch officesHeadquarters VPN access concentrators configuration # Ipsec configuration # Dhcp configuration# SSH configuration # Log configuration# Isakmp Configuration # Firewall configuration # Trigger configuration if prioritising VoIP # INT configuration if prioritising VoIP# Classifier configuration if prioritising VoIP # Software QoS configuration if prioritising VoIP# ATM configuration # Adsl configuration# PPP configuration for PPPoA 44 AlliedWare OS How To Note VPNs for Corporate Networks 45 AlliedWare OS How To Note VPNs for Corporate Networks 46 AlliedWare OS How To Note VPNs for Corporate Networks Set int=ppp0 mtu=256 Set int=ppp0 frag=yes # PPP configuration for PPPoE # ETH configuration49 AlliedWare OS How To Note VPNs for Corporate Networks 50 AlliedWare OS How To Note VPNs for Corporate Networks 51 AlliedWare OS How To Note VPNs for Corporate Networks ISPs PPPoE access concentrator configuration # PPP templates configuration# PPP configuration # Firewall configuration enable firewall Hotels NAT gateway firewall configuration
Related manuals
Manual 54 pages 52.17 Kb

AR440S specifications

Allied Telesis offers a range of advanced routers designed to meet the connectivity and operational needs of modern enterprises. Among its extensive lineup, the AR450S, AR441S, AR415S, AR442S, and AR440S models stand out for their robust features and technologies, making them ideal solutions for various networking environments.

The Allied Telesis AR450S is a high-performance router tailored for service providers and large enterprises. It supports advanced routing protocols, including IPv4 and IPv6, ensuring compatibility with both legacy and modern networks. The AR450S boasts substantial throughput capabilities, making it suitable for bandwidth-intensive applications. Its versatile WAN options, including Ethernet and cellular connectivity, allow seamless integration into diverse network architectures.

Next in the lineup is the AR441S, which focuses on providing enhanced security and reliability. With built-in firewall capabilities and VPN support, this model ensures secure communication over the internet. The AR441S also features numerous Ethernet ports for flexible connectivity, enabling organizations to scale their networks as needed. Its user-friendly interface facilitates straightforward configuration and management.

The AR415S is designed for branch offices and small to medium-sized enterprises. This router offers a balance of performance and affordability, equipped with essential features like Quality of Service (QoS) and traffic shaping. The AR415S supports multiple WAN connections, which helps in maintaining reliable internet access by auto-failing to backup connections when necessary.

The AR442S incorporates advanced networking technologies, including dynamic routing protocols and deep packet inspection. This model enhances performance by optimizing traffic flow and improving bandwidth utilization. Its support for VoIP and other multimedia applications makes it an excellent choice for organizations seeking to maximize their communication capabilities.

Lastly, the AR440S is engineered for high availability and redundancy. It includes dual power supplies and hot-swappable components, ensuring that network services remain uninterrupted during maintenance. The AR440S is particularly valuable in mission-critical environments where downtime can lead to significant business disruption.

In summary, the Allied Telesis AR series routers—AR450S, AR441S, AR415S, AR442S, and AR440S—offer a rich set of features tailored to various operational needs. With their advanced routing capabilities, security features, and reliable performance, these routers represent the cutting edge of networking technology for businesses looking to enhance their connectivity and operational efficiency.
Top Page Image Contents