Manuals / Billion Electric Company / Computer Equipment / Network Router

Billion Electric Company 8501 Function, Description, Configuring IPSec VPN in the Head Office

Models: 8501

1 134

Download 134 pages 2.47 Kb

Page 88

Image 88

SHDSL VPN Firewall Bridge/Router

Configuring IPSec VPN in the Head Office

Item

	Function
	Connection Name	IPSec_HeadOffice
	Subnet
	IP Address	192.168.1.0
	Netmask	255.255.255.0
	Secure Gateway Address	69.121.1.30
	(or Hostname)	69.121.1.30
	(or Hostname)
	Subnet
	IP Address	192.168.0.0
	Netmask	255.255.255.0
	ESP

	Authentication	MD5
	Encryption	3DES
	Prefer Forward Security	None

	Pre-shared Key	12345678

Description

Given a name of IPSec connection

Check Subnet radio button

Head office network

IP address of the head office router (in WAN side)

Check Subnet radio button

Branch office network

Check ESP radio button

Security plan

Chapter 4: Configuration

Page 88

Image 88

Billion Electric Company 8501 user manual Function, Description, Configuring IPSec VPN in the Head Office

Contents

BiPAC 8500/8501/8520 SHDSL VPN Firewall Bridge RouterUser’s Manual Version ReleaseTable of Contents QoS Quality of Service CHAPTER 5 TROUBLESHOOTINGTime Schedule AdvancedFeatures Chapter 1 IntroductionIntroduction to your Router Fast Ethernet SwitchDynamic Host Configuration Protocol DHCP client and server Domain Name System DNS relayDynamic Domain Name System DDNS Virtual Private Network VPNFirmware Upgradeable Rich Management InterfacesChapter 2 Installing the Router Important note for using this routerPackage Contents Do not use this router in high humidity or high temperaturesThe Front LEDs of BiPAC Lit when power is ONLit when the system is ready Chapter 2 Installing the Router1X - 4X RJ-45 connector The Front LEDs of BiPACLED LINE 1 LAN Port SYS PWR1X - 4X RJ-45 connector The Front LEDs of BiPACLED PWR SYS LAN Port LINEThe Rear Ports of BiPAC 8500 Port 1 Power Switch 2 PWR 3 RESET LAN 4 1X5 CONSOLE LINE 6 1X - 2X RJ-11 connector ＊Only the BiPAC 8520 has two Line jack ports. BiPAC 8500 has oneThe Rear Ports of BiPAC CablingPort 1 Power Switch 2 PWR 3 RESET LAN 4 1X - 4X RJ-45 connector 5 CONSOLE 6 LINEChapter 3 Basic Installation Connecting Your Router2. Double-click Local Area Connection. See Figure Configuring PCs in Windows in Window XP4. Select Internet Protocol TCP/IP and click Properties. See Figure 2. Double-click Local Area “LAN” Connection. See Figure Configuring PCs in Windows4. Select Internet Protocol TCP/IP and click Properties See Figure 5. Then select the DNS Configuration tab. See Figure Configuring PC in Windows 95/98/ME3. Click Properties Configuring PC in Windows NT4.0 Chapter 3 Basic Installation2. Select TCP/IP Protocol and click Properties. See Figure SHDSL VPN Firewall Bridge/RouterFactory Default Settings Web Interface Username and PasswordDevice LAN IP settings ISP setting in WAN sitePPPoE PPPoE / PPPoE with Pass-through PPPoA RFC 1483 Bridged Information from your ISPRFC 1483 Routed IPoA Routed IP over ATM Configuring with your Web Browser Congratulation! You are now successfully logon to the SHDSL RouterChapter 4 Configuration Quick Start ConfigurationSave Config to FLASH StatusStatus ARP TableRouting Table Routing TableDHCP Table PPTP StatusLeased Table Expired TableIPSec Status L2TP Status Email StatusError Log Event LogDiagnostic NAT SessionsChapter 4 Configuration SHDSL VPN Firewall Bridge/RouterChapter 4 Configuration UPnP PortmapSHDSL VPN Firewall Bridge/Router Quick Start Chapter 4 Configuration SHDSL VPN Firewall Bridge/RouterLAN Local Area Network ConfigurationBridge Interface Chapter 4 Configuration EthernetPrimary IP Address SHDSL VPN Firewall Bridge/RouterIP Alias Ethernet Client Filter Default setting is set to Disable → Active PC in LANEthernet Client Filter Active PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router Port Setting DHCP Server WAN - Wide Area Network RFC 1483 Routed Connections IP AssignmentRFC 1483 Bridged Connections All Ip PppoePPPoA Routed Connections ConnectionAdvanced Options PPPoA IPoA Routed Connections IP AssignmentPPPoE Connections ConnectionChapter 4 Configuration Advanced Options PPPoEPPPoE with Pass-through Connections Connection Chapter 4 ConfigurationAdvanced Options PPPoE Page SHDSL - BiPAC 2-wired Mode 4-wired ModeSHDSL - BiPAC SHDSL - BiPAC System Time ZoneRemote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control General Settings Packet Filter Chapter 4 ConfigurationSHDSL VPN Firewall Bridge/Router Example Predefined Port Filters Rules Table 1 Predefined Port FilterApplication ProtocolUDP17 Packet Filter - Add TCP/UDP Filter Packet Filter - Add Raw IP Filter Page Click Delete Click Add TCP/UDP FilterConfiguring Packet Filter Example5. The new port filter rule for HTTP is shown below Chapter 4 ConfigurationSHDSL VPN Firewall Bridge/Router Intrusion Detection Block DurationTable 2 Hacker attack types recognized by the IDS Intrusion NameDetect Parameter Ascend KillURL Filter 3. If the packet does not match either of the above two items, it is sent to the remote web server Peer to Peer Blocking The default is set to Disabled Instant Message Blocking The default is set to DisabledIM / P2P Blocking Chapter 4 Configuration Firewall LogLog information can be seen in the Status - Event Log after enabling SHDSL VPN Firewall Bridge/RouterVPN - Virtual Private Networks PPTP Point-to-Point Tunneling ProtocolPPTP Connection - Remote Access Dial-out Example Configuring a Remote Access PPTP VPN Dial-out ConnectionChapter 4 Configuration SHDSL VPN Firewall Bridge/RouterFunction Configuring the PPTP VPN in the OfficeDescription PPTP Connection - LAN to LAN Chapter 4 Configuration Example Configuring a PPTP LAN-to-LAN VPN ConnectionSHDSL VPN Firewall Bridge/Router Description FunctionConfiguring PPTP VPN in the Head Office Function Configuring PPTP VPN in the Branch OfficeDescription IPSec IP Security Protocol IPSec VPN Connection Chapter 4 ConfigurationSelect the Apply button to apply your changes Advanced Option IKE ProposalLocal ID Remote IDPing to Keep Alive Ping to the IPTable 3 Network Configuration and Security Plan Example Configuring a IPSec LAN-to-LAN VPN ConnectionTunnel mode ESPMD5 with AES Tunnel mode ESPMD5 with AESFunction Configuring IPSec VPN in the Head OfficeDescription Function Configuring IPSec VPN in the Branch OfficeDescription Chapter 4 Configuration Example Configuring a IPSec Host-to-LAN VPN ConnectionSHDSL VPN Firewall Bridge/Router Function Configuring IPSec VPN in the OfficeDescription L2TP Layer Two Tunneling Protocol L2TP Connection - Remote Access L2TP VPN ConnectionL2TP over IPSec L2TP/IPSec VPN Connection Dial-in Example Configuring a L2TP VPN - Remote Access Dial-in ConnectionChapter 4 Configuration SHDSL VPN Firewall Bridge/RouterFunction Configuring L2TP VPN in the OfficeDescription Example Configuring a Remote Access L2TP VPN Dial-out Connection Chapter 4 ConfigurationDial-out SHDSL VPN Firewall Bridge/RouterFunction Configuring the L2TP VPN in the OfficeDescription Chapter 4 Configuration Example Configuring your Router to Dial-in to the ServerSHDSL VPN Firewall Bridge/Router L2TP Connection - LAN to LAN L2TP VPN ConnectionL2TP over IPSec L2TP/IPSec VPN Connection Example Configuring L2TP LAN-to-LAN VPN Connection Chapter 4 ConfigurationFunction Configuring L2TP VPN in the Head OfficeDescription Function Configuring L2TP VPN in the Branch OfficeDescription QoS Quality of Service Click ClearPrioritization HighTable 4 DSCP Mapping Table DSCP Mapping TableSHDSL Router Device Standard DSCPClick Clear Outbound IP Throttling LAN to WANClick Clear Inbound IP Throttling WAN to LANVoIP Normal PCs Restricted PC Connection DiagramInformation and Settings Chapter 4 ConfigurationAdvanced setting by using IP throttling Mission-critical applicationVoice application Restricted ApplicationChapter 4 Configuration SHDSL VPN Firewall Bridge/RouterVirtual Server “Port Forwarding” Add Virtual Server Internal IPExample IP AddressEdit DMZ Host Edit One-to-One NAT Network Address Translation Global IP AddressSelect the Apply button to apply your changes Table 5 Well-known and registered Ports Example List of some well-known and registered port numbersPort Number ProtocolTime Schedule Click Edit Configuration of Time ScheduleEdit a Time Slot Delete a Time SlotAdvanced Management, IGMP and VLAN Bridge Static RouteDynamic DNS Check Email Device Management Embedded Web Server 2 Management IP accountsUniversal Plug and Play UPnP SNMP V1 andSNMP SNMP Version SNMPv2c and SNMPv3From RFC1650 EtherLike-MIB From RFC 1493 Bridge MIBFrom RFC 1471 PPP/LCP MIB From RFC 1472 PPP/Security MIBAdvanced VLAN Setup Example Triply Play Step 1 Setup Member PortsGo to Configuration LAN Bridge Interface IGMPGo to Configuration WAN ISP Bridge InterfaceVLAN Port Always starts with Step 2 Create WAN InterfacePppoe Go to Configuration Advanced VLAN Bridge Step 3 Setup VLAN ServiceFrom the example Step 4 IGMP Snooping Enable Save Configuration to FlashGo Configuration Advanced IGMP Logout Chapter 5 Troubleshooting Problems starting up the routerProblems with the WAN Interface Problems with the LAN InterfaceContact Billion AUSTRALIA APPENDIX A Product Support and Contact InformationWORLDWIDE