Allied Telesis AR440S manual AlliedWare OS How To Note VPNs for Corporate Networks

Models: AR440S

1 53
Download 53 pages 24.96 Kb
Page 44
Image 44

branch office 1

#allows incoming roaming VPN client connections. The clients can

#only target a known, unchanging address.

create ppp=0 over=atm0.1 echo=10 lqr=off bap=off idle=off

set ppp=0 username="branch office 1" password=branch1 iprequest=off

#Note that this interface needs a permanent IP address because the

#branch office allows incoming roaming VPN client connections. The

#clients can only target a known, unchanging address.

#IP configuration

enable ip

add ip int=vlan1 ip=192.168.141.254

#Statically define the PPP interface address. add ip int=ppp0 ip=222.222.222.1

add ip rou=0.0.0.0 mask=0.0.0.0 int=ppp0 next=0.0.0.0

#Create an IP pool to allocate unique internal payload addresses to

#incoming VPN clients.

create ip pool=roaming ip=192.168.143.1-192.168.143.50

#DHCP configuration

#If desired, use the router as a DHCP server. create dhcp poli=branch1 lease=7200

add dhcp poli=branch1 rou=192.168.141.254 add dhcp poli=branch1 subn=255.255.255.0

create dhcp range=branch1_hosts poli=branch1 ip=192.168.141.16 num=32 ena dhcp

#SSH configuration

#You should not telnet to a secure gateway, so set up Secure Shell

#for remote management. This requires encryption keys - see

#"Before you start" on page 7.

#Enable the SSH server.

enable ssh server serverkey=3 hostkey=2

#Enable the user who connects via SSH to log in as secoff, by adding

#the secoff user as an SSH user. If desired, also restrict access so

#that it is only permitted from particular addresses.

add ssh user=secoff password=<secoff-password> ipaddress=<trusted-remote-ip-address> mask=<desired-subnet-mask-of-trusted-hosts>

disable telnet server

#As the commands above show, we strongly recommend SSH instead of

#telnet. However, if you choose to use telnet, create RSO users

#(remote security officers) and define the IP addresses that these

#users may connect from.

#add user rso ip=<ipadd>[-<ipadd>]

#enable user rso

#enable telnet server

Page 44 AlliedWare™ OS How To Note: VPNs for Corporate Networks

Page 44
Image 44
Allied Telesis AR440S manual AlliedWare OS How To Note VPNs for Corporate Networks

AR440S specifications

Allied Telesis offers a range of advanced routers designed to meet the connectivity and operational needs of modern enterprises. Among its extensive lineup, the AR450S, AR441S, AR415S, AR442S, and AR440S models stand out for their robust features and technologies, making them ideal solutions for various networking environments.

The Allied Telesis AR450S is a high-performance router tailored for service providers and large enterprises. It supports advanced routing protocols, including IPv4 and IPv6, ensuring compatibility with both legacy and modern networks. The AR450S boasts substantial throughput capabilities, making it suitable for bandwidth-intensive applications. Its versatile WAN options, including Ethernet and cellular connectivity, allow seamless integration into diverse network architectures.

Next in the lineup is the AR441S, which focuses on providing enhanced security and reliability. With built-in firewall capabilities and VPN support, this model ensures secure communication over the internet. The AR441S also features numerous Ethernet ports for flexible connectivity, enabling organizations to scale their networks as needed. Its user-friendly interface facilitates straightforward configuration and management.

The AR415S is designed for branch offices and small to medium-sized enterprises. This router offers a balance of performance and affordability, equipped with essential features like Quality of Service (QoS) and traffic shaping. The AR415S supports multiple WAN connections, which helps in maintaining reliable internet access by auto-failing to backup connections when necessary.

The AR442S incorporates advanced networking technologies, including dynamic routing protocols and deep packet inspection. This model enhances performance by optimizing traffic flow and improving bandwidth utilization. Its support for VoIP and other multimedia applications makes it an excellent choice for organizations seeking to maximize their communication capabilities.

Lastly, the AR440S is engineered for high availability and redundancy. It includes dual power supplies and hot-swappable components, ensuring that network services remain uninterrupted during maintenance. The AR440S is particularly valuable in mission-critical environments where downtime can lead to significant business disruption.

In summary, the Allied Telesis AR series routers—AR450S, AR441S, AR415S, AR442S, and AR440S—offer a rich set of features tailored to various operational needs. With their advanced routing capabilities, security features, and reliable performance, these routers represent the cutting edge of networking technology for businesses looking to enhance their connectivity and operational efficiency.