Function, Description | Billion Electric Company 8501 guide

Configuring IPSec VPN in the Branch Office

SHDSL VPN Firewall Bridge/Router

Configuring IPSec VPN in the Branch Office

1

2

3

4

5

Item

Function

Description

1

2

3

4

5

Connection Name

Subnet

IP Address

Netmask

Secure Gateway Address (or Hostname)

Subnet

IP Address

Netmask

ESP

Authentication

Encryption

Prefer Forward Security

Pre-shared Key

IPSec_Branch Office

192.168.0.0

255.255.255.0

69.121.1.3

192.168.1.0

255.255.255.0

MD5

3DES

None

12345678

Given a name of IPSec connection

Check Subnet radio button

Branch office network

IP address of the head office router (in WAN side)

Check Subnet radio button

Head office network

Check ESP radio button

Security plan

88

Chapter 4: Configuration

Image 89

Billion Electric Company 8501 user manual Function, Description, Configuring IPSec VPN in the Branch Office

Contents

SHDSL VPN Firewall Bridge Router BiPAC 8500/8501/8520User’s Manual Version Release Table of Contents CHAPTER 5 TROUBLESHOOTING QoS Quality of ServiceTime Schedule Advanced Chapter 1 Introduction FeaturesIntroduction to your Router Fast Ethernet Switch Domain Name System DNS relay Dynamic Host Configuration Protocol DHCP client and serverDynamic Domain Name System DDNS Virtual Private Network VPN Rich Management Interfaces Firmware Upgradeable Important note for using this router Chapter 2 Installing the RouterPackage Contents Do not use the same power source for this router as other equipment Lit when power is ON The Front LEDs of BiPACLit when the system is ready RJ-45 connector SYS PWR 1X - 4X RJ-45 connectorLED LINE 1 LAN Port LINE LED PWR SYS LAN Port Port 1 Power Switch 2 PWR 3 RESET LAN 4 1X The Rear Ports of BiPAC 85005 CONSOLE LINE 6 1X - 2X RJ-11 connector ＊Only the BiPAC 8520 has two Line jack ports. BiPAC 8500 has one Cabling The Rear Ports of BiPACPort 1 Power Switch 2 PWR 3 RESET LAN 4 1X - 4X RJ-45 connector 5 CONSOLE 6 LINE Connecting Your Router Chapter 3 Basic Installation 4. Select Internet Protocol TCP/IP and click Properties. See Figure Configuring PCs in Windows in Window XP2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties See Figure Configuring PCs in Windows2. Double-click Local Area “LAN” Connection. See Figure 3. Click Properties Configuring PC in Windows 95/98/ME5. Then select the DNS Configuration tab. See Figure 2. Select TCP/IP Protocol and click Properties. See Figure Configuring PC in Windows NT4.0 Web Interface Username and Password Factory Default SettingsDevice LAN IP settings ISP setting in WAN site RFC 1483 Routed IPoA Routed IP over ATM Information from your ISPPPPoE PPPoE / PPPoE with Pass-through PPPoA RFC 1483 Bridged Congratulation! You are now successfully logon to the SHDSL Router Configuring with your Web Browser Quick Start Configuration Chapter 4 ConfigurationSave Config to FLASH Status ARP Table StatusRouting Table Routing Table PPTP Status DHCP TableLeased Table Expired Table IPSec Status Email Status L2TP Status Event Log Error Log NAT Sessions Diagnostic UPnP Portmap Quick Start SHDSL VPN Firewall Bridge/Router Bridge Interface ConfigurationLAN Local Area Network Primary IP Address Ethernet IP Alias Ethernet Client Filter → Active PC in LANEthernet Client Filter Default setting is set to Disable Active PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router Port Setting DHCP Server WAN - Wide Area Network IP Assignment RFC 1483 Routed Connections All Ip Pppoe RFC 1483 Bridged Connections Connection PPPoA Routed Connections Advanced Options PPPoA IPoA Routed Connections PPPoE Connections Advanced Options PPPoE PPPoE with Pass-through Connections Advanced Options PPPoE Chapter 4 ConfigurationConnection Page SHDSL - BiPAC 2-wired Mode 4-wired Mode SHDSL - BiPAC Time Zone System Remote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control General Settings Packet Filter Table 1 Predefined Port Filter Example Predefined Port Filters RulesApplication Protocol UDP17 Packet Filter - Add TCP/UDP Filter Packet Filter - Add Raw IP Filter Page Click Add TCP/UDP Filter Click DeleteConfiguring Packet Filter Example 5. The new port filter rule for HTTP is shown below Block Duration Intrusion Detection Intrusion Name Table 2 Hacker attack types recognized by the IDSDetect Parameter Ascend Kill URL Filter 3. If the packet does not match either of the above two items, it is sent to the remote web server IM / P2P Blocking Instant Message Blocking The default is set to DisabledPeer to Peer Blocking The default is set to Disabled Log information can be seen in the Status - Event Log after enabling Firewall Log PPTP Point-to-Point Tunneling Protocol VPN - Virtual Private Networks PPTP Connection - Remote Access Example Configuring a Remote Access PPTP VPN Dial-out Connection Dial-out Description Configuring the PPTP VPN in the OfficeFunction PPTP Connection - LAN to LAN Example Configuring a PPTP LAN-to-LAN VPN Connection Configuring PPTP VPN in the Head Office FunctionDescription Configuring PPTP VPN in the Branch Office IPSec IP Security Protocol IPSec VPN Connection Select the Apply button to apply your changes IKE Proposal Advanced Option Remote ID Local IDPing to Keep Alive Ping to the IP Example Configuring a IPSec LAN-to-LAN VPN Connection Table 3 Network Configuration and Security Plan192.168.0.0/24 69.1.121.30 192.168.1.0/24 69.1.121.3 12345678 Tunnel mode ESPMD5 with AES Configuring IPSec VPN in the Head Office Configuring IPSec VPN in the Branch Office Example Configuring a IPSec Host-to-LAN VPN Connection Configuring IPSec VPN in the Office L2TP Layer Two Tunneling Protocol L2TP VPN Connection L2TP Connection - Remote Access L2TP over IPSec L2TP/IPSec VPN Connection Example Configuring a L2TP VPN - Remote Access Dial-in Connection Dial-in Configuring L2TP VPN in the Office Example Configuring a Remote Access L2TP VPN Dial-out Connection Configuring the L2TP VPN in the Office Example Configuring your Router to Dial-in to the Server L2TP Connection - LAN to LAN L2TP over IPSec L2TP/IPSec VPN Connection Example Configuring L2TP LAN-to-LAN VPN Connection Configuring L2TP VPN in the Head Office Configuring L2TP VPN in the Branch Office Click Clear QoS Quality of ServicePrioritization High DSCP Mapping Table Table 4 DSCP Mapping TableSHDSL Router Device Standard DSCP Outbound IP Throttling LAN to WAN Inbound IP Throttling WAN to LAN Connection Diagram VoIP Normal PCs Restricted PCInformation and Settings Example QoS for your Network Mission-critical application Advanced setting by using IP throttlingVoice application Restricted Application SHDSL VPN Firewall Bridge/Router Virtual Server “Port Forwarding” Internal IP Add Virtual Server IP Address Example Edit DMZ Host Global IP Address Edit One-to-One NAT Network Address Translation Select the Apply button to apply your changes Example List of some well-known and registered port numbers Table 5 Well-known and registered PortsPort Number Protocol Time Schedule Configuration of Time Schedule Click EditEdit a Time Slot Delete a Time Slot Management, IGMP and VLAN Bridge Static Route Advanced Dynamic DNS Check Email Embedded Web Server 2 Management IP accounts Device Management SNMP V1 and Universal Plug and Play UPnPSNMP SNMP Version SNMPv2c and SNMPv3 From RFC 1493 Bridge MIB From RFC1650 EtherLike-MIBFrom RFC 1471 PPP/LCP MIB From RFC 1472 PPP/Security MIB Step 1 Setup Member Ports Advanced VLAN Setup Example Triply PlayGo to Configuration LAN Bridge Interface IGMP Bridge Interface Go to Configuration WAN ISPVLAN Port Always starts with Step 2 Create WAN Interface Pppoe From the example Step 3 Setup VLAN ServiceGo to Configuration Advanced VLAN Bridge Go Configuration Advanced IGMP Save Configuration to FlashStep 4 IGMP Snooping Enable Logout Problems starting up the router Chapter 5 TroubleshootingProblems with the WAN Interface Problems with the LAN Interface WORLDWIDE APPENDIX A Product Support and Contact InformationContact Billion AUSTRALIA