Function, Description | Billion Electric Company 7402 manual

Configuring L2TP VPN in the Branch Office

Billion BIPAC-7402 / 7402W (Wireless) ADSL VPN Firewall Router with 3DES Accelerator

Configuring L2TP VPN in the Branch Office

The IP address 69.1.121.30 is the Public IP address of the router located in head office. If you registered the DDNS (please refer to the DDNS section of this manual), you can also use the domain name instead of the IP address to reach the router.

1

2

3

4

5

6

7

Item

Function

Description

1

2

3

4

5

6

7

Connection Name Dial out

Server IP Address (or Hostname)

Peer Network IP

Netmask

Username

Password

Auth.Type

Idle Timeout

IPSec

Authentication

Encryption

Perfect Forward Secrecy

Pre-shared Key

BranchOffice

69.121.1.33

192.168.1.0

255.255.255.0

username

123456

Chap(Auto)

0

MD5

3DES

None

12345678

Given a name of L2TP connection

Check Dial out

IP address of the head office router (in WAN side)

Head office network

Input username & password to authenticate branch office network

Keep as default value in most of the cases.

The connection will be disconnected when there Is no traffic in a predefined period of time. Idle time 0 means the connection is always-on.

Enable for enhancing your L2TP VPN security.

Both sites should use the same value.

99

Chapter 4: Configuration

Image 105

Billion Electric Company 7402 user manual Configuring L2TP VPN in the Branch Office, Function, Description

Contents

Wireless ADSL VPN Firewall Router with 3DES Accelerator Version Release 1.54cBIPAC-7402 / 7402W User’s ManualPage CHAPTER 3 BASIC INSTALLATION CHAPTER 2 INSTALLING THE ROUTERCHAPTER 1 INTRODUCTION Table of Contents Q UICK S TART Table of Contents P ROBLEMS STARTING UP THE ROUTER S AVE C ONFIGURATION TO F LASHP ROBLEMS WITH THE WAN I NTERFACE P ROBLEMS WITH THE LAN I NTERFACEPage Wireless Ethernet 802.11b 7402W Only FeaturesFast Ethernet Switch Quick Installation Wizard Network Address Translation NAT Dynamic Host Configuration Protocol DHCP client and serverFirewall Domain Name System DNS relay Static and RIP1/2 Routing Firmware UpgradeableSimple Network Management Protocol SNMP Web based GUI 7402 BIPAC-7402 / 7402W ADSL Router Application7402W Figure 1.1 Application Diagram of Chapter 2 Installing the Router Important note for using the BIPAC-7402W ADSL RouterPackage Contents Meaning The Front LEDsPPP / MAIL ADSL LAN Port 1X password Power Switch PWR RESET LAN 1XThe Rear Ports Port Cabling Connecting your router Chapter 3 Basic Installation For Windows XP Configuring PCs in Windows2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties. See Figure 2. Double-click Local Area “LAN” Connection. See For WindowsFigure 3.7 TCP / IP Figure 3.8 IP Address & DNS Configuration Figure 3.5 LAN Area Connection Select the Disable DNS radio button and click OK to Then select the DNS Configuration tab. See Figurefinish the configuration For Windows 98 / ME 2. Select TCP/IP Protocol and click Properties. See For Windows NT4.0 Username and Password Factory Default SettingsLAN Device IP Settings ISP setting in WAN site PPPoE PPPoA RFC1483 Bridged RFC1483 Routed IPoA Information from your ISP Figure 3.14 User namd & Password Prompt Widonw Configuring with your Web Browser Chapter 4 Configuration Save Config to FLASHQuick Start ARP Table Status Routing Table Routing TableRIP Routing Table Leased Table DHCP TableExpired Table Permanent Table PPTP Status IPSec Status Email Status L2TP Status Event Log Error Logging UPnP Portmap NAT Sessions Quick Start Click Start to begin scanning for encapsulation types offered by your ISP. If the scan is successful you will then be presented with a list of supported options LAN Local Area Network ConfigurationEthernet LAN, WAN, System, Firewall, VPN, QoS, Virtual Server and Advanced ESSID Broadcast Wireless 7402W Only WPA Pre-Shared Key Wireless Security 7402W OnlyPage Port Setting DHCP Server Click Apply to enable this function WAN Wide Area Network RFC 1483 Routed Connections PPPoE Connections Connection Advanced Options PPPoE Give DNSto Relay Controls whether the PPP Internet Protocol Control Protocol IPCP can request the DNS server IP address for a remote PPP peer. Once IPCP has discovered the DNS server IP address, it automatically gives the address to the local DNS relay so that a connection can be established All Ip Pppoe RFC 1483 Bridged Connections PPPoA Routed Connections Advanced Options PPPoA Chapter 4 Configuration IPoA Routed Connections Page ADSL Time Zone System Remote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control URL Filter To block PCs on your local network from unwanted websites General Settings Packet Filter Table 1 Pre-defined Port Filter Port Filters Address Filters Click Port Filters Configuring Packet Filter 4. Click Add TCP Filter Click DeleteClick Add TCP Filter Input HTTP port number Select “Allow” HTTP inbound & outbound application Block Duration Intrusion Detection Intrusion Name Table 2 Hacker attack types recognized by the IDSDetect Parameter Blacklist Type of Block Duration MAC Address Filter URL Filter Restrict URL Features Log information can be seen in the Status - Event Log after enabling Firewall Log PPTP VPN Virtual Private Networks Remote Access PPTP Connection Click Apply after changing settings LAN to LAN PPTP Connection Click Apply after changing settings Click Create to configure a new IPSec VPN connection IPSec Local Configure a new VPN ConnectionRemote Proposal MD5 A one-way hashing algorithm that produces a 128−bit hash Advanced Option Local IDRemote ID L2TP Remote Access L2TP Connection IPSec Enable for enhancing your LT2P VPN security LAN to LAN L2TP Connection IPSec Enable for enhancing your LT2P VPN security Dial-in Configuring PPTP VPN in the Office Example Configuring a Remote Access PPTP VPN Dial-in Connection Description Function Dial-out Configuring the PPTP VPN in the Office Example Configuring a Remote Access PPTP VPN Dial-out Connection Description Function Example Configuring a LAN-to-LAN PPTP VPN Connection Configuring PPTP VPN in the Head Office Configuring PPTP VPN in the Branch Office Table 3 Network Configuration and Security Plan Example Configuring a IPSec LAN-to-LAN VPN Connection192.168.0.0/24 69.1.121.30 192.168.1.0/24 69.1.121.3 12345678 Tunnel mode ESPMD5 with AES IP address of the head office router in WAN side Configuring IPSec VPN in the Head Office Configuring IPSec VPN in the Branch Office Dial-in Example Configuring a Remote Access L2TP VPN Dial-in Connection Configuring L2TP VPN in the Office Dial-out Example Configuring a Remote Access L2TP VPN Dial-out Connection Configuring the L2TP VPN in the Office Example Configuring your Router to Dial-in to the Server Example Configuring LAN-to-LAN L2TP VPN Connection Configuring L2TP VPN in the Head Office Configuring L2TP VPN in the Branch Office QoS Quality of Service High Prioritization IP Throttling Table 4 Well-know and registered Ports Virtual Server “Port Forwarding”Port Number Protocol NEWS Network News Transfer Protocol In addition to specifying the port number to be used, you will also need to specify the protocol used. The protocol used is determined by the particular application. Most applications will use TCP or UDP, however you can specify other protocols using the drop-down Protocol menu. Setting the protocol to “all” will cause all incoming connection attempts using all protocols on all port numbers to be forwarded to the specified IP address Static Routing Advanced Dynamic DNS Check Emails Embedded Web Server Device Management Universal Plug and Play UPnP SNMP V1 andSNMP From RFC 1213 MIB-II SNMP Version SNMPv2c and SNMPv3From RFC1650 EtherLike-MIB From RFC 1493 Bridge MIB From RFC 1473 PPP/IP MIB From RFC 1472 PPP/Security MIBFrom RFC 1474 PPP/Bridge MIB From RFC1573 IfMIB Save Configuration to Flash Logout Problems starting up the router Chapter 5 TroubleshootingProblems with the WAN Interface Problem Problems with the LAN Interface Frequent loss of ADSL linesync disconnectionsCan’t ping any PCs on the LAN APPENDIX A Product Support and Contact Information Contact Billion AUSTRALIAWORLDWIDE