Tunnel mode ESPMD5 with AES | Billion Electric Company 7402 manual

Example: Configuring a IPSec LAN-to-LAN VPN Connection

Billion BIPAC-7402 / 7402W (Wireless) ADSL VPN Firewall Router with 3DES Accelerator

Example: Configuring a IPSec LAN-to-LAN VPN Connection

Table 3: Network Configuration and Security Plan

Local Network ID

Local Router IP

Remote Network ID

Remote Router IP

IKE Pre-shared Key

VPN Connection Type

Security Algorithm

Branch Office

192.168.0.0/24

69.1.121.30

192.168.1.0/24

69.1.121.3

12345678

Tunnel mode

ESP:MD5 with AES

Head Office

192.168.1.0/24

69.1.121.3

192.168.0.0/24

69.1.121.30

12345678

Tunnel mode

ESP:MD5 with AES

Attention

Both office LAN networks MUST in different subnet with LAN to LAN application.

Functions of Pre-shared Key, VPN Connection Type and Security Algorithm MUST BE identically set up on both sides.

89

Chapter 4: Configuration

Image 95

Billion Electric Company 7402 Example Configuring a IPSec LAN-to-LAN VPN Connection, Tunnel mode ESPMD5 with AES

Contents

User’s Manual Version Release 1.54cWireless ADSL VPN Firewall Router with 3DES Accelerator BIPAC-7402 / 7402WPage Table of Contents CHAPTER 2 INSTALLING THE ROUTERCHAPTER 3 BASIC INSTALLATION CHAPTER 1 INTRODUCTION Q UICK S TART Table of Contents P ROBLEMS WITH THE LAN I NTERFACE S AVE C ONFIGURATION TO F LASHP ROBLEMS STARTING UP THE ROUTER P ROBLEMS WITH THE WAN I NTERFACEPage Quick Installation Wizard FeaturesWireless Ethernet 802.11b 7402W Only Fast Ethernet Switch Domain Name System DNS relay Dynamic Host Configuration Protocol DHCP client and serverNetwork Address Translation NAT Firewall Web based GUI Firmware UpgradeableStatic and RIP1/2 Routing Simple Network Management Protocol SNMP Figure 1.1 Application Diagram of BIPAC-7402 / 7402W ADSL Router Application7402 7402W Package Contents Chapter 2 Installing the RouterImportant note for using the BIPAC-7402W ADSL Router ADSL LAN Port 1X The Front LEDsMeaning PPP / MAIL Port Power Switch PWR RESET LAN 1Xpassword The Rear Ports Cabling Connecting your router Chapter 3 Basic Installation 4. Select Internet Protocol TCP/IP and click Properties. See Figure Configuring PCs in WindowsFor Windows XP 2. Double-click Local Area Connection. See Figure Figure 3.5 LAN Area Connection For Windows2. Double-click Local Area “LAN” Connection. See Figure 3.7 TCP / IP Figure 3.8 IP Address & DNS Configuration For Windows 98 / ME Then select the DNS Configuration tab. See FigureSelect the Disable DNS radio button and click OK to finish the configuration 2. Select TCP/IP Protocol and click Properties. See For Windows NT4.0 ISP setting in WAN site Factory Default SettingsUsername and Password LAN Device IP Settings PPPoE PPPoA RFC1483 Bridged RFC1483 Routed IPoA Information from your ISP Figure 3.14 User namd & Password Prompt Widonw Configuring with your Web Browser Quick Start Chapter 4 ConfigurationSave Config to FLASH ARP Table Status RIP Routing Table Routing TableRouting Table Permanent Table DHCP TableLeased Table Expired Table PPTP Status IPSec Status Email Status L2TP Status Event Log Error Logging UPnP Portmap NAT Sessions Quick Start Click Start to begin scanning for encapsulation types offered by your ISP. If the scan is successful you will then be presented with a list of supported options LAN, WAN, System, Firewall, VPN, QoS, Virtual Server and Advanced ConfigurationLAN Local Area Network Ethernet ESSID Broadcast Wireless 7402W Only WPA Pre-Shared Key Wireless Security 7402W OnlyPage Port Setting DHCP Server Click Apply to enable this function WAN Wide Area Network RFC 1483 Routed Connections PPPoE Connections Connection Advanced Options PPPoE Give DNSto Relay Controls whether the PPP Internet Protocol Control Protocol IPCP can request the DNS server IP address for a remote PPP peer. Once IPCP has discovered the DNS server IP address, it automatically gives the address to the local DNS relay so that a connection can be established All Ip Pppoe RFC 1483 Bridged Connections PPPoA Routed Connections Advanced Options PPPoA Chapter 4 Configuration IPoA Routed Connections Page ADSL Time Zone System Remote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control URL Filter To block PCs on your local network from unwanted websites General Settings Packet Filter Table 1 Pre-defined Port Filter Port Filters Address Filters Click Port Filters Configuring Packet Filter Input HTTP port number Select “Allow” Click Delete4. Click Add TCP Filter Click Add TCP Filter HTTP inbound & outbound application Block Duration Intrusion Detection Type of Block Duration Table 2 Hacker attack types recognized by the IDSIntrusion Name Detect Parameter Blacklist MAC Address Filter URL Filter Restrict URL Features Log information can be seen in the Status - Event Log after enabling Firewall Log PPTP VPN Virtual Private Networks Remote Access PPTP Connection Click Apply after changing settings LAN to LAN PPTP Connection Click Apply after changing settings Click Create to configure a new IPSec VPN connection IPSec Proposal Configure a new VPN ConnectionLocal Remote MD5 A one-way hashing algorithm that produces a 128−bit hash Remote ID Advanced OptionLocal ID L2TP Remote Access L2TP Connection IPSec Enable for enhancing your LT2P VPN security LAN to LAN L2TP Connection IPSec Enable for enhancing your LT2P VPN security Dial-in Configuring PPTP VPN in the Office Example Configuring a Remote Access PPTP VPN Dial-in Connection Description Function Dial-out Configuring the PPTP VPN in the Office Example Configuring a Remote Access PPTP VPN Dial-out Connection Description Function Example Configuring a LAN-to-LAN PPTP VPN Connection Configuring PPTP VPN in the Head Office Configuring PPTP VPN in the Branch Office Tunnel mode ESPMD5 with AES Example Configuring a IPSec LAN-to-LAN VPN ConnectionTable 3 Network Configuration and Security Plan 192.168.0.0/24 69.1.121.30 192.168.1.0/24 69.1.121.3 12345678 IP address of the head office router in WAN side Configuring IPSec VPN in the Head Office Configuring IPSec VPN in the Branch Office Dial-in Example Configuring a Remote Access L2TP VPN Dial-in Connection Configuring L2TP VPN in the Office Dial-out Example Configuring a Remote Access L2TP VPN Dial-out Connection Configuring the L2TP VPN in the Office Example Configuring your Router to Dial-in to the Server Example Configuring LAN-to-LAN L2TP VPN Connection Configuring L2TP VPN in the Head Office Configuring L2TP VPN in the Branch Office QoS Quality of Service High Prioritization IP Throttling Protocol Virtual Server “Port Forwarding”Table 4 Well-know and registered Ports Port Number NEWS Network News Transfer Protocol In addition to specifying the port number to be used, you will also need to specify the protocol used. The protocol used is determined by the particular application. Most applications will use TCP or UDP, however you can specify other protocols using the drop-down Protocol menu. Setting the protocol to “all” will cause all incoming connection attempts using all protocols on all port numbers to be forwarded to the specified IP address Static Routing Advanced Dynamic DNS Check Emails Embedded Web Server Device Management SNMP Universal Plug and Play UPnPSNMP V1 and From RFC 1493 Bridge MIB SNMP Version SNMPv2c and SNMPv3From RFC 1213 MIB-II From RFC1650 EtherLike-MIB From RFC1573 IfMIB From RFC 1472 PPP/Security MIBFrom RFC 1473 PPP/IP MIB From RFC 1474 PPP/Bridge MIB Save Configuration to Flash Logout Problem Chapter 5 TroubleshootingProblems starting up the router Problems with the WAN Interface Can’t ping any PCs on the LAN Problems with the LAN InterfaceFrequent loss of ADSL linesync disconnections WORLDWIDE APPENDIX A Product Support and Contact InformationContact Billion AUSTRALIA