IPSec IP Security Protocol | Billion Electric Company 8501 specification

IPSec (IP Security Protocol)

SHDSL VPN Firewall Bridge/Router

IPSec (IP Security Protocol)

Click Create to create a new IPSec VPN connection account.

After you have created the IPSec connection, account information will be displayed. (See example above).

Enable / Disable: This function activates or deactivates the IPSec connection. To wish interrupting the tunnel, check Disable radio button and click Apply button to deactivate the connection.

Name: This is the user-defined name of the connection.

Local Subnet: Displays IP address and subnet of the local network.

Remote Subnet: Displays IP address and subnet of the remote network.

Remote Gateway: This is the IP address or Domain Name of the remote VPN device that is connected and established a VPN tunnel.

IPSec Proposal: This is selected IPSec security method.

81

Chapter 4: Configuration

Image 82

Billion Electric Company 8501 user manual IPSec IP Security Protocol

Contents

User’s Manual BiPAC 8500/8501/8520SHDSL VPN Firewall Bridge Router Version Release Table of Contents Time Schedule QoS Quality of ServiceCHAPTER 5 TROUBLESHOOTING Advanced Introduction to your Router FeaturesChapter 1 Introduction Fast Ethernet Switch Dynamic Domain Name System DDNS Dynamic Host Configuration Protocol DHCP client and serverDomain Name System DNS relay Virtual Private Network VPN Firmware Upgradeable Rich Management Interfaces Package Contents Chapter 2 Installing the RouterImportant note for using this router Do not use the same power source for this router as other equipment Lit when the system is ready The Front LEDs of BiPACLit when power is ON RJ-45 connector LED LINE 1 LAN Port 1X - 4X RJ-45 connectorSYS PWR LED PWR SYS LAN Port LINE 5 CONSOLE LINE 6 1X - 2X RJ-11 connector The Rear Ports of BiPAC 8500Port 1 Power Switch 2 PWR 3 RESET LAN 4 1X ＊Only the BiPAC 8520 has two Line jack ports. BiPAC 8500 has one Port 1 Power Switch 2 PWR 3 RESET LAN 4 1X - 4X RJ-45 connector The Rear Ports of BiPACCabling 5 CONSOLE 6 LINE Chapter 3 Basic Installation Connecting Your Router 2. Double-click Local Area Connection. See Figure Configuring PCs in Windows in Window XP4. Select Internet Protocol TCP/IP and click Properties. See Figure 2. Double-click Local Area “LAN” Connection. See Figure Configuring PCs in Windows4. Select Internet Protocol TCP/IP and click Properties See Figure 5. Then select the DNS Configuration tab. See Figure Configuring PC in Windows 95/98/ME3. Click Properties Configuring PC in Windows NT4.0 2. Select TCP/IP Protocol and click Properties. See Figure Device LAN IP settings Factory Default SettingsWeb Interface Username and Password ISP setting in WAN site PPPoE PPPoE / PPPoE with Pass-through PPPoA RFC 1483 Bridged Information from your ISPRFC 1483 Routed IPoA Routed IP over ATM Configuring with your Web Browser Congratulation! You are now successfully logon to the SHDSL Router Save Config to FLASH Chapter 4 ConfigurationQuick Start Configuration Status Routing Table StatusARP Table Routing Table Leased Table DHCP TablePPTP Status Expired Table IPSec Status L2TP Status Email Status Error Log Event Log Diagnostic NAT Sessions UPnP Portmap Quick Start Chapter 4 Configuration LAN Local Area Network ConfigurationBridge Interface Ethernet Primary IP Address IP Alias Ethernet Client Filter Default setting is set to Disable → Active PC in LANEthernet Client Filter Active PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router Port Setting DHCP Server WAN - Wide Area Network RFC 1483 Routed Connections IP Assignment RFC 1483 Bridged Connections All Ip Pppoe PPPoA Routed Connections Connection Advanced Options PPPoA IPoA Routed Connections PPPoE Connections Advanced Options PPPoE PPPoE with Pass-through Connections Connection Chapter 4 ConfigurationAdvanced Options PPPoE Page SHDSL - BiPAC 4-wired Mode 2-wired Mode SHDSL - BiPAC System Time Zone Remote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control General Settings Packet Filter Application Example Predefined Port Filters RulesTable 1 Predefined Port Filter Protocol UDP17 Packet Filter - Add TCP/UDP Filter Packet Filter - Add Raw IP Filter Page Configuring Packet Filter Click DeleteClick Add TCP/UDP Filter Example 5. The new port filter rule for HTTP is shown below Intrusion Detection Block Duration Detect Parameter Table 2 Hacker attack types recognized by the IDSIntrusion Name Ascend Kill URL Filter 3. If the packet does not match either of the above two items, it is sent to the remote web server Peer to Peer Blocking The default is set to Disabled Instant Message Blocking The default is set to DisabledIM / P2P Blocking Firewall Log Log information can be seen in the Status - Event Log after enabling VPN - Virtual Private Networks PPTP Point-to-Point Tunneling Protocol PPTP Connection - Remote Access Dial-out Example Configuring a Remote Access PPTP VPN Dial-out Connection Function Configuring the PPTP VPN in the OfficeDescription PPTP Connection - LAN to LAN Example Configuring a PPTP LAN-to-LAN VPN Connection Description FunctionConfiguring PPTP VPN in the Head Office Configuring PPTP VPN in the Branch Office IPSec IP Security Protocol IPSec VPN Connection Select the Apply button to apply your changes Advanced Option IKE Proposal Ping to Keep Alive Local IDRemote ID Ping to the IP 192.168.0.0/24 69.1.121.30 192.168.1.0/24 69.1.121.3 12345678 Table 3 Network Configuration and Security PlanExample Configuring a IPSec LAN-to-LAN VPN Connection Tunnel mode ESPMD5 with AES Configuring IPSec VPN in the Head Office Configuring IPSec VPN in the Branch Office Example Configuring a IPSec Host-to-LAN VPN Connection Configuring IPSec VPN in the Office L2TP Layer Two Tunneling Protocol L2TP Connection - Remote Access L2TP VPN Connection L2TP over IPSec L2TP/IPSec VPN Connection Dial-in Example Configuring a L2TP VPN - Remote Access Dial-in Connection Configuring L2TP VPN in the Office Example Configuring a Remote Access L2TP VPN Dial-out Connection Configuring the L2TP VPN in the Office Example Configuring your Router to Dial-in to the Server L2TP Connection - LAN to LAN L2TP over IPSec L2TP/IPSec VPN Connection Example Configuring L2TP LAN-to-LAN VPN Connection Configuring L2TP VPN in the Head Office Configuring L2TP VPN in the Branch Office Prioritization QoS Quality of ServiceClick Clear High SHDSL Router Device Table 4 DSCP Mapping TableDSCP Mapping Table Standard DSCP Outbound IP Throttling LAN to WAN Inbound IP Throttling WAN to LAN Information and Settings VoIP Normal PCs Restricted PCConnection Diagram Example QoS for your Network Voice application Advanced setting by using IP throttlingMission-critical application Restricted Application Chapter 4 Configuration Virtual Server “Port Forwarding” Add Virtual Server Internal IP Example IP Address Edit DMZ Host Edit One-to-One NAT Network Address Translation Global IP Address Select the Apply button to apply your changes Port Number Table 5 Well-known and registered PortsExample List of some well-known and registered port numbers Protocol Time Schedule Edit a Time Slot Click EditConfiguration of Time Schedule Delete a Time Slot Advanced Management, IGMP and VLAN Bridge Static Route Dynamic DNS Check Email Device Management Embedded Web Server 2 Management IP accounts SNMP Universal Plug and Play UPnPSNMP V1 and SNMP Version SNMPv2c and SNMPv3 From RFC 1471 PPP/LCP MIB From RFC1650 EtherLike-MIBFrom RFC 1493 Bridge MIB From RFC 1472 PPP/Security MIB Go to Configuration LAN Bridge Interface Advanced VLAN Setup Example Triply PlayStep 1 Setup Member Ports IGMP VLAN Port Always starts with Go to Configuration WAN ISPBridge Interface Step 2 Create WAN Interface Pppoe Go to Configuration Advanced VLAN Bridge Step 3 Setup VLAN ServiceFrom the example Step 4 IGMP Snooping Enable Save Configuration to FlashGo Configuration Advanced IGMP Logout Problems with the WAN Interface Chapter 5 TroubleshootingProblems starting up the router Problems with the LAN Interface Contact Billion AUSTRALIA APPENDIX A Product Support and Contact InformationWORLDWIDE