Function, Description | Billion Electric Company 8501 specs

Configuring IPSec VPN in the Head Office

SHDSL VPN Firewall Bridge/Router

Configuring IPSec VPN in the Head Office

1

2

3

4

5

Item

1

2

3

4

5

	Function
	Connection Name	IPSec_HeadOffice
	Subnet
	IP Address	192.168.1.0
	Netmask	255.255.255.0
	Secure Gateway Address	69.121.1.30
	(or Hostname)	69.121.1.30
	(or Hostname)
	Subnet
	IP Address	192.168.0.0
	Netmask	255.255.255.0
	ESP

	Authentication	MD5
	Encryption	3DES
	Prefer Forward Security	None

	Pre-shared Key	12345678

Description

Given a name of IPSec connection

Check Subnet radio button

Head office network

IP address of the head office router (in WAN side)

Check Subnet radio button

Branch office network

Check ESP radio button

Security plan

87

Chapter 4: Configuration

Image 88

Billion Electric Company 8501 user manual Function, Description, Configuring IPSec VPN in the Head Office

Contents

BiPAC 8500/8501/8520 SHDSL VPN Firewall Bridge RouterUser’s Manual Version Release Table of Contents QoS Quality of Service CHAPTER 5 TROUBLESHOOTINGTime Schedule Advanced Features Chapter 1 IntroductionIntroduction to your Router Fast Ethernet Switch Dynamic Host Configuration Protocol DHCP client and server Domain Name System DNS relayDynamic Domain Name System DDNS Virtual Private Network VPN Firmware Upgradeable Rich Management Interfaces Chapter 2 Installing the Router Important note for using this routerPackage Contents Do not use the same power source for this router as other equipment The Front LEDs of BiPAC Lit when power is ONLit when the system is ready RJ-45 connector LED LINE 1 LAN Port 1X - 4X RJ-45 connectorSYS PWR LED PWR SYS LAN Port LINE The Rear Ports of BiPAC 8500 Port 1 Power Switch 2 PWR 3 RESET LAN 4 1X5 CONSOLE LINE 6 1X - 2X RJ-11 connector ＊Only the BiPAC 8520 has two Line jack ports. BiPAC 8500 has one The Rear Ports of BiPAC CablingPort 1 Power Switch 2 PWR 3 RESET LAN 4 1X - 4X RJ-45 connector 5 CONSOLE 6 LINE Chapter 3 Basic Installation Connecting Your Router 2. Double-click Local Area Connection. See Figure Configuring PCs in Windows in Window XP4. Select Internet Protocol TCP/IP and click Properties. See Figure 2. Double-click Local Area “LAN” Connection. See Figure Configuring PCs in Windows4. Select Internet Protocol TCP/IP and click Properties See Figure 5. Then select the DNS Configuration tab. See Figure Configuring PC in Windows 95/98/ME3. Click Properties Configuring PC in Windows NT4.0 2. Select TCP/IP Protocol and click Properties. See Figure Factory Default Settings Web Interface Username and PasswordDevice LAN IP settings ISP setting in WAN site PPPoE PPPoE / PPPoE with Pass-through PPPoA RFC 1483 Bridged Information from your ISPRFC 1483 Routed IPoA Routed IP over ATM Configuring with your Web Browser Congratulation! You are now successfully logon to the SHDSL Router Chapter 4 Configuration Quick Start ConfigurationSave Config to FLASH Status Status ARP TableRouting Table Routing Table DHCP Table PPTP StatusLeased Table Expired Table IPSec Status L2TP Status Email Status Error Log Event Log Diagnostic NAT Sessions UPnP Portmap Quick Start Chapter 4 Configuration LAN Local Area Network ConfigurationBridge Interface Ethernet Primary IP Address IP Alias Ethernet Client Filter Default setting is set to Disable → Active PC in LANEthernet Client Filter Active PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router Port Setting DHCP Server WAN - Wide Area Network RFC 1483 Routed Connections IP Assignment RFC 1483 Bridged Connections All Ip Pppoe PPPoA Routed Connections Connection Advanced Options PPPoA IPoA Routed Connections PPPoE Connections Advanced Options PPPoE PPPoE with Pass-through Connections Connection Chapter 4 ConfigurationAdvanced Options PPPoE Page SHDSL - BiPAC 4-wired Mode 2-wired Mode SHDSL - BiPAC System Time Zone Remote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control General Settings Packet Filter Example Predefined Port Filters Rules Table 1 Predefined Port FilterApplication Protocol UDP17 Packet Filter - Add TCP/UDP Filter Packet Filter - Add Raw IP Filter Page Click Delete Click Add TCP/UDP FilterConfiguring Packet Filter Example 5. The new port filter rule for HTTP is shown below Intrusion Detection Block Duration Table 2 Hacker attack types recognized by the IDS Intrusion NameDetect Parameter Ascend Kill URL Filter 3. If the packet does not match either of the above two items, it is sent to the remote web server Peer to Peer Blocking The default is set to Disabled Instant Message Blocking The default is set to DisabledIM / P2P Blocking Firewall Log Log information can be seen in the Status - Event Log after enabling VPN - Virtual Private Networks PPTP Point-to-Point Tunneling Protocol PPTP Connection - Remote Access Dial-out Example Configuring a Remote Access PPTP VPN Dial-out Connection Function Configuring the PPTP VPN in the OfficeDescription PPTP Connection - LAN to LAN Example Configuring a PPTP LAN-to-LAN VPN Connection Description FunctionConfiguring PPTP VPN in the Head Office Configuring PPTP VPN in the Branch Office IPSec IP Security Protocol IPSec VPN Connection Select the Apply button to apply your changes Advanced Option IKE Proposal Local ID Remote IDPing to Keep Alive Ping to the IP Table 3 Network Configuration and Security Plan Example Configuring a IPSec LAN-to-LAN VPN Connection192.168.0.0/24 69.1.121.30 192.168.1.0/24 69.1.121.3 12345678 Tunnel mode ESPMD5 with AES Configuring IPSec VPN in the Head Office Configuring IPSec VPN in the Branch Office Example Configuring a IPSec Host-to-LAN VPN Connection Configuring IPSec VPN in the Office L2TP Layer Two Tunneling Protocol L2TP Connection - Remote Access L2TP VPN Connection L2TP over IPSec L2TP/IPSec VPN Connection Dial-in Example Configuring a L2TP VPN - Remote Access Dial-in Connection Configuring L2TP VPN in the Office Example Configuring a Remote Access L2TP VPN Dial-out Connection Configuring the L2TP VPN in the Office Example Configuring your Router to Dial-in to the Server L2TP Connection - LAN to LAN L2TP over IPSec L2TP/IPSec VPN Connection Example Configuring L2TP LAN-to-LAN VPN Connection Configuring L2TP VPN in the Head Office Configuring L2TP VPN in the Branch Office QoS Quality of Service Click ClearPrioritization High Table 4 DSCP Mapping Table DSCP Mapping TableSHDSL Router Device Standard DSCP Outbound IP Throttling LAN to WAN Inbound IP Throttling WAN to LAN VoIP Normal PCs Restricted PC Connection DiagramInformation and Settings Example QoS for your Network Advanced setting by using IP throttling Mission-critical applicationVoice application Restricted Application Chapter 4 Configuration Virtual Server “Port Forwarding” Add Virtual Server Internal IP Example IP Address Edit DMZ Host Edit One-to-One NAT Network Address Translation Global IP Address Select the Apply button to apply your changes Table 5 Well-known and registered Ports Example List of some well-known and registered port numbersPort Number Protocol Time Schedule Click Edit Configuration of Time ScheduleEdit a Time Slot Delete a Time Slot Advanced Management, IGMP and VLAN Bridge Static Route Dynamic DNS Check Email Device Management Embedded Web Server 2 Management IP accounts Universal Plug and Play UPnP SNMP V1 andSNMP SNMP Version SNMPv2c and SNMPv3 From RFC1650 EtherLike-MIB From RFC 1493 Bridge MIBFrom RFC 1471 PPP/LCP MIB From RFC 1472 PPP/Security MIB Advanced VLAN Setup Example Triply Play Step 1 Setup Member PortsGo to Configuration LAN Bridge Interface IGMP Go to Configuration WAN ISP Bridge InterfaceVLAN Port Always starts with Step 2 Create WAN Interface Pppoe Go to Configuration Advanced VLAN Bridge Step 3 Setup VLAN ServiceFrom the example Step 4 IGMP Snooping Enable Save Configuration to FlashGo Configuration Advanced IGMP Logout Chapter 5 Troubleshooting Problems starting up the routerProblems with the WAN Interface Problems with the LAN Interface Contact Billion AUSTRALIA APPENDIX A Product Support and Contact InformationWORLDWIDE