Tunnel mode ESPMD5 with AES | Billion Electric Company BIPAC-7500G

Example: Configuring a IPSec LAN-to-LAN PPTP VPN Connection

Billion BIPAC-7500G–802.11g ADSL VPN Firewall Router with 3DES Accelerator

Example: Configuring a IPSec LAN-to-LAN PPTP VPN Connection

Table 3: Network Configuration and Security Plan

Local Network ID

Local Router IP

Remote Network ID

Remote Router IP

IKE Pre-shared Key

VPN Connection Type

Security Algorithm

Branch Office

192.168.0.0/24

69.1.121.30

192.168.1.0/24

69.1.121.3

12345678

Tunnel mode

ESP:MD5 with AES

Head Office

192.168.1.0/24

69.1.121.3

192.168.0.0/24

69.1.121.30

12345678

Tunnel mode

ESP:MD5 with AES

88

Chapter 4: Configuration

Image 92

Billion Electric Company BIPAC-7500G user manual Example Configuring a IPSec LAN-to-LAN PPTP VPN Connection, Configuration

Contents

802.11g ADSL VPN Firewall Router with 3DES Accelerator User’s Manual Version Release 1.10eBIPAC-7500G Page Table of Contents CHAPTER 2 INSTALLING THE ROUTERCHAPTER 3 BASIC INSTALLATION CHAPTER 4 CONFIGURATION CHAPTER 5 TROUBLESHOOTING CONTACT INFORMATIONAPPENDIX A PRODUCT SUPPORT AND S AVE C ONFIGURATION TO F LASH Features Wireless Ethernet 802.11gFast Ethernet Switch Quick Installation Wizard Universal Plug and Play UPnP and UPnP NAT Traversal Network Address Translation NATFirewall Domain Name System DNS relay Dynamic Host Configuration Protocol DHCP client and server Firmware UpgradeableStatic and RIP1/2 Routing Simple Network Management Protocol SNMP BIPAC-7500G ADSL Router Application Figure 1.1 Application Diagram Important note for using the BIPAC-7500G ADSL Router Chapter 2 Installing the RouterPackage Contents The Front LEDs Meaning1 PWR 2 SYS 3 LAN port 4 LAN port 5 LAN port 6 LAN port 7 WLAN 10 MAIL 11 PPP 13 ADSL RESET PWR Power Switch The Rear PortsPort LINE CONSOLE LAN Cabling Chapter 3 Basic Installation Connecting your router Configuring PCs in Windows For Windows XP2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties. See Figure For Windows Double-click Local Area “LAN” Connection . SeeIn the LAN Area Connection Status window, click Properties . See Figure 3. Click Properties 5. Then select the DNS Configuration tab. See FigureFor Windows 98 / ME For Windows NT4.0 2. Select TCP/IP Protocol and click Properties. See3. Select the Obtain an IP address from a DHCP server Figure 3.12 TCP / IP Factory Default Settings Username and PasswordLAN Device IP Settings ISP setting in WAN site Information from your ISP PPPoE PPPoA RFC1483 Bridged RFC1483 Routed IPoA Configuring with your Web Browser Figure 3.14 User namd & Password Prompt Widonw Quick Start Chapter 4 ConfigurationSave Config to FLASH Status ARP Table RIP Routing Table Routing TableRouting Table DHCP Table Leased TableExpired Table Permanent Table PPTP Status IPSec Status L2TP Status Email Status UPnP Portmap Error LoggingEvent Log Quick Start Click Start to begin scanning for encapsulation types offered by your ISP. If the scan is successful you will then be presented with a list of supported options Configuration LAN Local Area NetworkEthernet LAN, WAN, System, Firewall, VPN, QoS, Virtual Server and Advanced Wireless ESSID Broadcast Wireless Security WPA Pre-Shared KeyPage Port Setting DHCP Server the requesting PC in the LAN your Local Area Network WAN Wide Area Network RFC 1483 Routed Connections PPPoE Connections Advanced Options PPPoE Connection discovered the DNS server IP address, it automatically gives the address to the local DNS relay so that a connection can be established RFC 1483 Bridged Connections All Ip Pppoe PPPoA Routed Connections Advanced Options PPPoA Chapter 4 Configuration IPoA Routed Connections Page ADSL System Time Zone Remote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control URL Filter To block PCs on your local network from unwanted websites General Settings Packet Filter Port Filters Table 1 Pre-defined Port Filter Address Filters Configuring Packet Filter Click Port Filters Click Delete 4. Click Add TCP FilterClick Add TCP Filter Input HTTP port number Select “Allow” HTTP inbound & outbound application Intrusion Detection Block Duration Table 2 Hacker attack types recognized by the IDS Intrusion Name Detect Parameter BlacklistType of Block Duration Drop Packet MAC Address Filter URL Filter Restrict URL Features Firewall Log Log information can be seen in the Status - Event Log after enabling VPN Virtual Private Networks PPTP Remote Access PPTP Connection Click Apply after changing settings LAN to LAN PPTP Connection Click Apply after changing settings IPSec Click Create to configure a new IPSec VPN connection Configure a new VPN Connection LocalRemote Proposal MD5 A one-way hashing algorithm that produces a 128−bit hash Advanced Option L2TP Remote Access L2TP Connection MD5 A one-way hashing algorithm that produces a 128−bit hash LAN to LAN L2TP Connection IPSec Enable for enhancing your LT2P VPN security Example Configuring a Remote Access PPTP VPN Dial-in Connection Configuring PPTP VPN in the OfficeFunction Description Key Length Mode Idle Time Auto stateful Example Configuring a Remote Access PPTP VPN Dial-out Connection Configuring the PPTP VPN in the Office Mode Idle Time stateful Example Configuring a LAN-to-LAN PPTP VPN Connection Configuring PPTP VPN in the Head Office Configuring PPTP VPN in the Branch Office Example Configuring a IPSec LAN-to-LAN PPTP VPN Connection Table 3 Network Configuration and Security Plan192.168.0.0/24 69.1.121.30 192.168.1.0/24 69.1.121.3 12345678 Tunnel mode ESPMD5 with AES WAN side Configuring IPSec VPN in the Head OfficeIP address of the head office router in Configuring IPSec VPN in the Branch Office QoS Quality of Service Prioritization High IP Throttling Port Number Protocol Virtual Server “Port Forwarding”Table 4 Well-know and registered Ports POP3 Post Office Protocol Version TCP or UDP, however you can specify other protocols using the drop-down Protocol menu. Setting the protocol to “all” will cause all incoming connection attempts using all protocols on all port numbers to be forwarded to the specified IP address Advanced Static Routing Dynamic DNS Check Emails Device Management Embedded Web Server SNMP Universal Plug and Play UPnPSNMP V1 and SNMP Version SNMPv2c and SNMPv3 From RFC 1213 MIB-IIFrom RFC1650 EtherLike-MIB From RFC 1493 Bridge MIB From RFC 1472 PPP/Security MIB From RFC 1473 PPP/IP MIBFrom RFC 1474 PPP/Bridge MIB From RFC1573 IfMIB Save Configuration to Flash Logout Chapter 5 Troubleshooting Problems starting up the routerProblems with the WAN Interface Problem Can’t ping any PCs on the LAN Problems with the LAN InterfaceFrequent loss of ADSL linesync disconnections WORLDWIDE APPENDIX A Product Support and Contact InformationContact Billion AUSTRALIA