Manuals / Compatible Systems / Computer Equipment / Network Router

Compatible Systems 5.4 manual 130

Models: 5.4

1 313

Download 313 pages 60.17 Kb

Page 136

130	Chapter 7 - VPN Client Tunnels

Image 136

Compatible Systems 5.4 manual 130

Contents

CompatiView 5.4 Reference Guide Page Installation and Overview Table of Contents IiiTable of Contents VPN Ports and LAN-to-LAN TunnelsTCP/IP Filtering 183 Ospf Installation and Overview CompatiView QuickstartCompatiView Installation Notes About this ManualSystem Requirements for Windows Selecting IP or IPX Operation with WindowsCompatiView’s Menus and Main Windows Device View and the Main Window Device ViewRight-Clicking in the Device View New Config Open Config FileFile Menu Open DeviceDownload Config to Device Dialog Box Save / Restart OptionsSave To File SubinterfaceVPN Port Firewall PathDatabase Menu Database Options Dialog Box OptionsGeneral Tab Confirmations Tab Save/Restart TabControl Menu Advanced TabTftp Download Download SoftwareRestart Device Statistics Menu Output WindowCompatiView Output Window Ethernet WAN StateSerial Statistics PPP StatisticsOspf Configuration IP Route TableIP Routing IPX Route TableCommand Line Edit Box View menu Moving and Customizing the WindowsCustomize Commands Window MenuCustomize Window View Dialog Box ToolbarsPage TCP/IP Routing Ethernet Configuration Dialog Box TCP/IP Routing Ethernet Dialog BoxIP Routing & Bridging IP Routing/Bridging/OffNetwork IP Subnet Mask IP AddressNetwork IP Broadcast Address Routing Protocol RIP Split Horizon Output RIP Input RIPIP Routing & Bridging Directed Broadcast OspfTCP/IP Routing WAN Configuration Dialog Box TCP/IP Routing WAN Configuration Dialog BoxNumbered Interface Network IP Broadcast Address Update Method RIP Split Horizon TCP/IP Routing VPN Configuration Dialog Box IP Routing & Bridging OptionsIP Routing/IP Bridging/IP Off IP Address Routing Protocol Update Method Ospf TCP/IP Routing Bridge Configuration Dialog Box Bridge Logical DiagramTCP/IP Routing Bridge 0 Configuration Dialog Box IP Routing/OffNetwork IP Subnet Mask IP Routing & Bridging Ospf IP Subinterface Dialog Box IP Connection Dialog Box IP Connection Dialog BoxIP On/IP Off IP Address IP Static Routing Dialog Box Mask DestinationGateway Metric Redistribute viaEthernet or Bridge TCP/IP Options Dialog Box Ethernet IP Options Bridge IP OptionsIP Proxy ARP UDP Forwarding Agents Relays UDP Forwarding Agents Dialog BoxWAN IP Options Server IP AddressUDP Ports/Protocols WAN IP Options Dialog BoxSend IP Address Configure Request Van Jacobson Header CompressionRIP V2 Password TCP/IP Routing OptionsIP Multiprotocol Precedence Dialog Box Protocol PrecedenceIP Route Redistribution Ospf Route Aggregation IP Route Redistribution Dialog BoxRIP to Ospf Default into Ospf Ospf to RIPBGP to Ospf BGP to RIPIP Routing & Bridging IPX Routing Ethernet Configuration Dialog Box IPX Routing Ethernet Configuration Dialog BoxIPX Ethernet Frame Types IPX Routing & BridgingIPX Routing/Bridging/Off Seed Status per Frame TypeRIP Update Timer SAP Update TimerNetwork Number per Frame Type Block IPX Type 20 Output PacketsIPX Routing WAN Configuration Dialog Box IPX Routing WAN Configuration Dialog BoxNetwork Number Optional Remote Node Network Number IPX Routing & Bridging Use Ethernet Port as End-Node Proxy IPX Routing VPN Configuration Dialog Box IPX Routing VPN Configuration Dialog BoxIPX Routing/Bridging/Off RIP Update Timer IPX Routing Bridge Configuration Dialog Box IPX Routing Bridge 0 Configuration Dialog Box IPX Frame TypesIPX Routing/Off Network Number per Frame Type AppleTalk Routing Ethernet Configuration Dialog Box AppleTalk Phase 1 ConfigurationAppleTalk Routing Ethernet Configuration Dialog Box AppleTalk Routing & BridgingPhase 1 Routing/Bridging/Off Phase 1 Seed StatusPhase 1 Net # Phase 1 ZonePhase 1 Node NBP Lookup Filters FilteringPhase 2 Routing/Bridging/Off AppleTalk Phase 2 ConfigurationPhase 2 Seed Status Phase 2 Net # Range Phase 2 ZonesPhase 2 Default Zone Phase 2 NodeAppleTalk Routing WAN Configuration Dialog Box AppleTalk Routing WAN Configuration Dialog BoxAppleTalk Routing & Bridging AppleTalk On/Bridging/Off Node ZoneOptional Remote End-Node Network Number AppleTalk Routing VPN Configuration Dialog Box AppleTalk Routing VPN Configuration Dialog BoxOptional Remote End-Node Node Number Optional Remote End-Node ProxyAppleTalk On/Bridging/Off AppleTalk Zone AppleTalk Routing Bridge Configuration Dialog Box AppleTalk Routing Bridge 0 Configuration Dialog Box Phase 1 Routing/Off AppleTalk Routing & Bridging Phase 1 Net # Phase 2 Routing/Off Phase 2 Zones NBP Filtering NBP Filtering Configuration Dialog BoxNetwork Filters Zone Filters AppleTalk Options Configuration Dialog Box Phase 2 Aarp Probe TimeMain DECnet Routing Configuration Dialog Box Main DECnet Routing Configuration Dialog BoxDECnet Routing & Bridging DECnet OnRouting Timer Hello TimerArea DECnet Ethernet Configuration Dialog Box DECnet Routing & Bridging Max AddressesDECnet Ethernet Configuration Dialog Box DECnet Routing/Bridging/OffDECnet WAN Configuration Dialog Box DECnet WAN Configuration Dialog BoxDECnet On/Bridging/Off Hello Timer Add VPN Port Dialog Box Add VPN Port Dialog BoxTunnel Partner VPN Configuration Dialog Box VPN Ports and LAN-to-LAN TunnelsPartner Address Bind To InterfaceIKE Key Management Dialog Box IKE Key ManagementKey Manage Transform Shared KeyPerfect Forward Secrecy IKE Configuration Dialog Box Authentication101 EncryptionEnable Authentication Authentication MethodAuthentication Secret Manual Key ManagementInteroperability Settings Dialog Box Enable Encryption103 Encryption MethodInteroperability Settings Dialog Box Local and Peer SettingsMode Local / Access Peer / Access105 Local / ProtocolPeer / Port 107 108 VPN Group Configuration Dialog Box and General Tab VPN Group Configuration Dialog BoxVPN Client Tunnels 109 VPN Group Configuration General Tab VPN Client Tunnels 111 Inactivity Timeout SLA Enable ClientMinimumVersion Exclude Local LANVPN Group Configuration IKE Configuration Tab VPN Group Configuration IKE Configuration TabVPN Client Tunnels 113 Save SecretsVPN Group Configuration Manual Tab VPN Group Configuration Manual TabVPN Group Configuration IP Connection Tab VPN Group Configuration IP Connection TabVPN Client Tunnels 115 Start IP AddressLocal IP Net Assign IP RadiusVPN Client Tunnels 117 Allow Connections To AddAdd IP Address Dialog Box EditVPN Group Configuration IP Filters Tab VPN Config IP Filters TabInput Filters Output FiltersVPN Group Configuration IPX Connection Tab VPN Config IPX Connection TabVPN Client Tunnels 119 Local IPX NetVPN Group Configuration IPX Filters Tab VPN Group Configuration IPX Filters TabAssign IPX Radius VPN Group Configuration Rollover Tab VPN Group Configuration Rollover TabVPN Client Tunnels 121 Input Filters Alternate IntraPort AddressesVPN Group Configuration SecurID Tab VPN Group Configuration SecurID TabSecurID Required SecurID User NameVPN Group Configuration DNS Redirection Tab VPN Group Configuration Wins Redirection Tab VPN Group Configuration Wins TabAdd Local Domain Dialog Box Local Domain NameVPN User Configuration Dialog Box VPN User Configuration Dialog BoxVPN Client Tunnels 125 STEP/STAMP Authentication Secret VPN User Dialog BoxName VPN GroupVPN Client Tunnels 127 STEP/STAMP Encryption Secret IKE PolicyIKE Policy Global Dialog Box IPSec Gateway Dialog Box IPSec Gateway Configuration Dialog BoxIPSec Gateway VPN Client Tunnels 129 130 IntraGuard Firewall Configuration 131IntraGuard Firewall Configuration Settings FirewallPath Dialog BoxInterfaces Inside/Outside ‘AND’ Filters 133‘OR’ Filters Advanced Settings Firewall Path Dialog Box ResetRedirectsSendTCPReset Advanced OptionsSendICMPReset 135SynRejectOnly ICMPtoTCPsessionSecurity Policies Firewall Path Dialog Box Current Security Policy137 Security Policies at a Glance Security Policy Protocol Setting Dialog Box Security Policy Protocol Setting Dialog Box139 Policy140 141 Port/Protocol Allow Ports/Protocols Dialog BoxPort/Protocol Number 143 Firewall Logging Dialog BoxFirewall Logging Dialog Box IP Timeouts TCP TimeoutsTCP Resets RejectsIcmp Resets 145Redirects GeneralFirewall Settings Dialog Box Firewall Settings Dialog BoxSYN Timer FIN TimerTCPTimeout UDPTimeoutHalfShutTimer DynamicTimerPage Global Bridging Configuration Dialog Box Bridging 149Bridging Bridge OnLearning/IEEE Spanning Tree Table SizeFwd Delay Spanning Tree Bridging 151 Aging TimePriority Spanning Tree Max Age Spanning TreeInterface Configuration Dialog Box Priority Bridging 153 Bridging OnPath Cost Spanning Tree Exclude Non-Routed Protocols Link Configuration WAN Dialog Box Link Configuration WAN Dialog BoxWAN Link Protocols 155 WAN OnLink Type WAN Link ProtocolsFailover Type Backup Port TimersWAN Link Protocols 157 Allow Dial OutAllow Dial Always Keep Link UpDrop Link If Inactive For Dialing MethodDial-Out / Connect Script WAN Link Protocols 159Dial-back Script Script Timeout Retry Delay SettingDialing Retries / Connect Retries Failover Timers Configuration Dialog Box Backup Enable TimerBackup Disable Timer Backup Init TimerFrame Relay Configuration Dialog Box Frame Relay Configuration Dialog BoxMaintenance Protocol WAN Link Protocols 163 Polling Frequency Home DlciDlci Database Configuration Dialog Box Dlci Entry Dialog Box Dlci Database Dialog BoxDlci # WAN Link Protocols 165AppleTalk Address Chap Configuration Dialog Box Chap Configuration Dialog BoxIPX Address DECnet AddressWAN Link Protocols 167 Request Chap AuthenticationRespond to Chap Challenges PAP Configuration Dialog Box PAP Configuration Dialog BoxSecret WAN Link Protocols 169 Request PAP AuthenticationRespond to PAP Requests Password Smds Dialog BoxSmds Dialog Box Station AddressWAN Link Protocols 171 IP Multicast PPP Options Dialog BoxPPP Options Dialog Box Sequenced Predictor Compression PPP Link Quality Configuration Dialog BoxEcho Packets On LCP Options Configuration Dialog Box LCP Options Configuration Dialog BoxWAN Link Protocols 173 Frequency in Seconds Echo PacketsAddress/Control Compression Multilink PPP Dialog BoxProtocol Compression Enable WAN Link Protocols 175Mppp Bundle Name Linked PortsMPQual WAN Chat Script Editor Dialog BoxWAN Chat Script Editor Dialog Box Chat Script Editor Dialog Box Buttons & Controls WAN Link Protocols 177Chat Script Rules and Syntax 178 WAN Link Protocols 179 To connect to an Internet Service Provider using a modem Chat Script ExamplesUser Authentication Database Dialog Box WAN Link Protocols 181Password/Secret Remote NameInterfaces Dial-back ChatMain TCP/IP Filtering Dialog Box TCP/IP Filtering 183Route Filters Button Packet Filters ButtonTCP/IP Filter Editor Window TCP/IP FilteringBlock IP Source Routing Log Rejected Source-Routed PacketsTCP/IP Route Filter Rules Basic IP Route Filter Rules and Syntax TCP/IP Filtering 187 IP Route Filter Rule Options IP Route Filter Rule ModifiersIP Route Filter Rule Notification TCP/IP Packet Filter RulesIP Route Filter Rule Examples TCP/IP Filtering 189 Basic IP Packet Filter Rules and SyntaxIP Packet Filter Rule Operators and Port Names TCP/IP Filtering 191 TCP PortsIcmp Types IP Packet Filter Rule ModifiersTCP/IP Filtering 193 UDPIP Packet Filter Rule Notification Simple IP Packet Filter Rule ExamplesTCP/IP Filtering 195 IP Packet Filter Rule Set ExamplesInterface TCP/IP Packet Filtering Configuration Dialog Box TCP/IP Packet Filtering Bridge Dialog BoxMain IPX Filtering Configuration Dialog Box Main IPX Filtering Dialog BoxIPX Filtering 197 IPX Route FiltersIPX Filter Editor Window IPX FilteringIPX Filter Editor Window Filter Editor Window Buttons and ControlsIPX Filtering 199 IPX Packet Filter RulesBasic IPX Packet Filter Rules and Syntax IPX Packet Filter Options IPX Filtering 201 IPX Packet Filter Rule NotificationIPX Route Filter Rules IPX Packet Filter Rule ExamplesIPX Filtering 203 Basic IPX Route Filter Rules and Syntax IPX Route Filter Rule Options IPX Route Filter Rule ModifiersIPX SAP Filter Rules IPX Filtering 205IPX Route Filter Rule Notification IPX Route Filter Rule ExamplesBasic IPX SAP Filter Rules and Syntax IPX SAP Filter OptionsIPX Filtering 207 IPX SAP Filter Rule Notification IPX SAP Filter Rule ModifiersIPX SAP Filter Rule Examples Interface IPX Packet Filtering Configuration Dialog Box IPX Filtering 209210 AppleTalk Filtering 211 Main AppleTalk Filtering Editor WindowMain AppleTalk Filter Editor Window AppleTalk Filtering AppleTalk Packet Filter RulesGeneral Packet Filtering AppleTalk Filtering 213 Get Zone ListRouting Filters Rtmp Basic AppleTalk Filter Rules and Syntax214 AppleTalk Filtering 215 AppleTalk Get Zone List Filter Rule Set Examples Simple AppleTalk Packet Filter Rule ExamplesAppleTalk Rtmp Filter Rule Set Examples AppleTalk Filtering 217 Interface AppleTalk Filtering Configuration Dialog BoxInput Rtmp Filters Output Rtmp Filters Zone List FiltersInput Packet Filters Output Packet FiltersPhysical RS-232 Configuration WAN Dialog Box Physical RS-232 Configuration WAN Dialog BoxGeneral 219 Async/SyncBaud Rate Tx Clock Internal Sync OnlyFlow Control Async Only General 221 Physical T1 WAN Configuration Dialog BoxClock Scheme Fractional T1 Enabled FramingLine Encoding Start Channel & Number of ChannelsGeneral 223 Contiguous Channels or Alternate Channels Channel Data RateInvert Data PRM TransmitPhysical V.35 Configuration WAN Dialog Box Tx Clock InternalPhysical DS3 Configuration WAN Dialog Box General 225System Configuration Dialog Box System Configuration Dialog BoxBandwidth Allocation Confirm Password Enable PasswordConfirm Enable Password General 227Snmp Configuration Snmp System Info Configuration Dialog BoxName of Administrator and How to Contact Administrative NameAdvanced Snmp Configuration Dialog Box Snmp EnabledSets Enabled Traps EnabledSnmp Community Strings Configuration Dialog Box Snmp Community Strings Configuration Dialog BoxCommunity String Snmp Traps Configuration Dialog Box General 231 AccessSnmp Traps Dialog Box Host IP AddressDomain Name Server DNS Dialog Box Domain Name Server Dialog BoxPrimary DNS Server Secondary DNS Server Search OrderTime Server Configuration Dialog Box Time Server Dialog BoxGeneral 233 Add TCP/IP DNS ServerProtocol Backup IP AddressOffset from Server Radius Configuration Dialog Box Radius Configuration Dialog BoxGeneral 235 Authentication Port AccountingAccounting Port VPN Real IP AddressVPN Authentication PAP Authentication SecretGeneral 237 VPN Tunnel Secret VPN Group InfoSecondary Server IP Address Use Secret in ChecksumSecondary Server Retries SecurID Configuration Dialog Box Enable SecurIDGeneral 239 PortBackup Server TimeoutNAT Configuration Dialog Box New Button Modify Button NAT Configuration Dialog BoxGeneral 241 External Range Internal RangePassThru Range Addresses General 243 TCP Timeout UDP TimeoutTCP Syn Timeout TCP Fin TimeoutNAT Range Dialog Box NAT Range Dialog BoxGeneral 245 NAT Mapping Dialog BoxNAT Mapping Dialog Box NAT Range Dialog Box Internal IP address NAT Mapping Translation Pair ExamplesLogging Configuration Dialog Box Logging Configuration Dialog BoxGeneral 247 Logging OnSend Log to Aux Port Syslogd OnIP Address Syslogd On Only File Syslogd On OnlyLdap Configuration Ldap Server Dialog BoxGeneral 249 Ldap Server Dialog BoxLdap Config Name Enable LdapPrimary Server Primary Password Add Ldap Server Dialog BoxGeneral 251 Secondary Server Secondary Password BaseLdap Authentication Dialog Box Ldap Authentication Dialog BoxEnable Ldap Authentication General 253 Primary Server Primary Password Secondary Server Secondary PasswordVPN Group Attribute VPN Shared Secret Attribute254 Ospf 255 Ospf Dialog BoxOspf Dialog Box Ospf Enabled OspfArea ID CostOspf Area Ospf Area Dialog Box Add Ospf Area Dialog BoxOspf Authentication Type Enable Stub AreaStub Default Cost Ospf 259 Ospf Area NameOspf Virtual Link Net Range Dialog BoxEnable Virtual Link Ospf 261Ospf Virtual Link Dialog Box Add Ospf Virtual Link Dialog BoxVirtual Transit Delay Ospf Packet Authentication KeyTransit Area Virtual RetransmissionEnable BGP BGP 263BGP General Dialog Box BGP General Dialog BoxBGP Aggregates Dialog Box BGPBGP Local Preference Use IPR FiltersBGP Peer Configs Dialog Box BGP Peer Configs Dialog BoxBGP 265 Add BGP Aggregate Dialog BoxBGP Peer Config Name Enable Ebgp MultihopInput Route Map Output Route MapIP Loopback Dialog Box BGP Peers Dialog Box IP LoopbackBGP Peers Dialog Box Add BGP Peer Dialog BoxBGP Route Maps Editor Dialog Box BGP 269BGP Route Maps Dialog Box BGP Route Map Editor Dialog Box Buttons & ControlsBGP Route Mapping Rules BGP 271Enter Data Dialog Box ActionDirection Options/Output ModifiersBGP 273 Special Communities Options/Input ModifiersBGP Networks Dialog Box BGP NetworksBGP Network Dialog Box BGP 275 Subnet Mask 276 Appendices 277 IP AddressesChart 1 IP Address Classes Chart 2 Standard IP SubnetsAppendices Subnet MasksAppendices 279 Chart 3 Subnetted Class C Host RangesBroadcast Addresses Chart 4 Broadcast Address Examples Assigning an IP addressAssigning a Subnet Mask Assigning a Broadcast AddressAppendices 281 Static Routes & Routing Protocols IPXIPX Routing Basics 282 Appendices 283 Service Advertising ProtocolClient Machine Addressing AppleTalk AppleTalk Routing BasicsNon-extended and Extended AppleTalk Networks Appendices 285Seeding a Network Segment Probing ZonesRouter Autoconfiguration BridgingAppendices 287 Bridging BasicsTransparent Bridging Spanning Tree BridgingAppendices 289 Multiport Bridges/Switches and Bridge GroupsSimple Bridging Example Bridge Groups on a Multiport Router Frame Relay Appendices 291Virtual Circuits AddressingLocal & Global DLCIs Local Management Interface LMIEncapsulation and Fragmentation Network/Protocol Addressing and Virtual InterfacesFrame Relay Example Appendices 293Frame Relay Example Page Symbols Index 295Index Index 297 IPX Index 299 TCP/IPSee also, TCP/IP Index 301 NAT Index 303 RIPUDP Index 305 Dlci Index 307 Radius