Package Contents | LevelOne FBR-1404TX instruction

Introduction

•Protection against DoS attacks. DoS (Denial of Service) attacks can flood your Internet connection with invalid packets and connection requests, using so much band- width and so many resources that Internet access becomes unavailable. The LevelOne Broadband VPN Gateway incorporates protection against DoS attacks.

•Rule-based Policy Firewall. To provide additional protection against malicious pack- ets, you can define your own firewall rules. This can also be used to control the Internet services available to LAN users.

VPN Gateway Features

•IPSec.. Support for IPSec standards, including IKE and certificates.

•5 Tunnels. Up to 5 VPN tunnels can be created.

•High performance. High performance encryption engine maintains high throughput even when using 3DES.

Package Contents

The following items should be included:

•The LevelOne Broadband VPN Gateway Unit

•Power Adapter

•Quick Installation Guide

•CD-ROM containing the on-line manual.

If any of the above items are damaged or missing, please contact your dealer immediately.

3

Image 6

LevelOne FBR-1404TX user manual Package Contents

Contents

LevelOne Table of Contents General Problems Remote AdministrationUpgrade Firmware Internet Access LevelOne Broadband VPN Gateway Features Internet Access Features Security Features LAN FeaturesConfiguration & Management Advanced Internet Functions Package Contents Physical Details Front-mounted LEDs Rear Panel Requirements ProcedureChoose an Installation Site Connect LAN Cables Power Up Connect WAN CableCheck the LEDs Overview To Do this Refer to Configuration Program Using UPnPPreparation Using your Web Browser If you cant connect Cable Modems Setup WizardCommon Connection Types DSL Modems Other Modems e.g. Broadband Wireless Big Pond Cable AustraliaSingTel RAS Home Screen Navigation & Data Input LAN Screen Data LAN ScreenButtons To Configure your PCs to use Dhcp Using the LevelOne Broadband VPN Gateway s Dhcp ServerUsing another Dhcp Server What Dhcp Does Password Screen TCP/IP Settings Overview Windows Clients Checking TCP/IP Settings Windows 9x/ME Using DhcpUsing Specify an IP Address Gateway Tab Win 95/98 Checking TCP/IP Settings Windows NT4.0 Windows NT4.0 TCP/IP Obtain an IP address from a Dhcp Server Specify an IP Address Windows NT4.0 Add Gateway Windows NT4.0 DNS Checking TCP/IP Settings Windows Network Configuration Win Using a fixed IP Address Use the following IP Address TCP/IP Properties Win Checking TCP/IP Settings Windows XP Network Configuration Windows XP TCP/IP Properties Windows XP For Windows 9x/ME/2000 Internet AccessAccessing AOL For Windows XP Other Unix Systems Macintosh ClientsLinux Clients Fixed IP Address Operation Status Screen Data Status Screen InternetSystem Connection Connection Status PPPoEData PPPoE Screen Connection Log Connection Log Messages Message Description Connection Status Pptp Data Pptp ScreenPptp Status Connection Status Telstra Big Pond Data Telstra Big Pond ScreenConnection Status Connection Details SingTel RAS Data SingTel RAS ScreenRAS Plan Dhcp Client Default GatewayDNS IP Address Release/Renew Connection Details Fixed/Dynamic IP Address Data Fixed/Dynamic IP address Screen Update the data shown on screen Internet Features Identification WAN Port Configuration ScreenData WAN Port Screen IP Address Login MAC Address Advanced Internet ScreenCommunication Applications Communication Applications Data Special Applications Screen Special ApplicationsSpecial Applications Screen Send incoming calls to Ports Using a Special ApplicationIncoming Outgoing Data URL Filter Screen URL FilterURL Filter Screen Filter Strings Dynamic DNS Screen Ddns ServiceDynamic DNS Domain Name Server Data Dynamic DNS Screen User Name Password Domain NameDdns Data Ddns Status Virtual Servers IP Address seen by Internet Users Defining your own Virtual Servers Connecting to the Virtual ServersVirtual Servers Screen Data Virtual Servers Screen Data Options Screen Backup DNSInternet Options MTU size Security Configuration To use this feature Access ControlAccess Control Screen Data Access Control Screen Internet Access Date/Time Access Control LogGroup Members Screen Source IP address Firewall Rules Screen This feature is for advanced administrators onlyFirewall Rules Data Firewall Rules Screen Move DataEdit Delete Type Firewall RuleData Firewall Rule Screen Source IP Dest IP ActionLog Enable Logs LogsData Logs Screen Mail Logs Syslog Server Security Options Data Security Options ScreenSPI Firewall Options Scheduling Define Schedule ScreenData Define Schedule Screen Available Services ServicesData Services Screen Add New Service Cancel LevelOne Broadband VPN Gateway always uses Tunnel Mode IPSec VPN Configuration Policies Common VPN Situations VPN Pass-throughClient PC to VPN Gateway Connecting 2 LANs via VPN Connecting 2 VPN Gateways Data VPN Policies Screen VPN PoliciesVPN Policies Screen VPN List Enable/Disable Adding a New PolicyCopy Endpoint General SettingsEnable Policy Keys VPN Wizard Traffic Selector Local IP addresses Remote IP addresses Manual Key Exchange Manually assigned Keys ESP AuthenticationTion is enabled ESP Encryption IKE Phase IKE Phase 1 IKE SA IKE Phase 2 IPsec SA Want to enable both ESP Encryption and ESP Authentication Certificates Trusted CertificatesSelf Certificates Adding a Trusted Certificate Adding a Self Certificate Hash Algorithm Signature AlgorithmSignature Key Length Add Self Certificate CRLs To add a New CRL VPN Status Data VPN Status ScreenCurrent VPN SAs Setting LAN a Gate LAN B Gate Way Example 1 Connecting 2 LevelOne Broadband VPN GatewaysConfiguration Settings Examples DES IPSec SA Parameters LevelOne Broadband VPN Gateway Configuration Setting ValueExample 2 Windows 2000/XP Client to LAN Windows Client Configuration Windows 2000/XP Local Security Settings Windows 2000/XP Policy Properties Filter Properties Addressing New Rule Properties Filter Action VPN Setting Windows Setting Modify Security Method Tunnel Setting Windows 2000/XP Client to LevelOne Broadband VPN Gateway Filter List Filter Action Modify Security Method DUT to Win2K Properties Properties General Tab Key Exchange Security Methods IKE Security Algorithms Setting Single Client Server/Gateway Example 3 Windows 2000 Server to VPN Gateway Windows 2000 Server Configuration Windows 2000 Server Addressing Remote AdministrationUpgrade Firmware PC Database PC Database Screen Generate Report Data PC Database ScreenKnown PCs Advanced PC Database Admin Data PC Database Admin ScreenPC Properties Entry Update SelectedAdd as New Clear Form Remote Administration Remote AdministrationData Remote Administration Screen To connect from a remote PC via the Internet Overview Using this ScreenRouting Routing Screen Data Routing Screen Static Routing Configuring Other Routers on your LAN Local RouterOther Routers on the Local LAN Static Routing Example For Router As Default RouteFor Router Bs Default Route For the LevelOne Broadband VPN Gateway s Routing Table Upgrade Firmware To perform the Firmware Upgrade UPnP Data Upnp ScreenUPnP General Problems Internet Access Appendix a Troubleshooting LevelOne Broadband VPN Gateway FCC Statement CE Marking Warning FCC Radiation Exposure Statement