Setting Single Client Server/Gateway | Planet Technology VRT-401

VPN

Example 3: Windows 2000 Server to VPN Gateway

In this example, a Windows 2000 Server connects to VRT-401. Users on each LAN can then gain access to the remote LAN.

Figure 81: VRT-401 to Windows 2000 Server

VRT-401 Configuration

This is the same as for the client setup earlier, with the exception of the IP address range for the remote endpoint.

Setting	Single Client	Server/Gateway

Remote	172.16.9.10	Subnet address:
IP addresses	For a single client, this is	11.5.0.0
	For a single client, this is	255.255.0.0
	the same as the Gateway	255.255.0.0
	the same as the Gateway
	address	Address range used on the remote
		LAN.

99

Image 103

Planet Technology VRT-401 user manual Example 3 Windows 2000 Server to VPN Gateway, Setting Single Client Server/Gateway

Contents

Broadband VPN Router Copyright Table of Contents 107 Using Certificates 101Remote Administration 111 106 Internet Access Features VRT-401 Features Advanced Internet Functions LAN FeaturesConfiguration & Management Security Features Package Contents Front-mounted LEDs Physical Details Rear Panel To Clear All Data and restore the factory default values Connect LAN Cables ProcedureChoose an Installation Site Requirements Check the LEDs Using the DMZ PortPower Up Connect WAN Cable To Do this Refer to Overview Preparation Configuration ProgramUsing UPnP Using your Web Browser If you cant connect Password Dialog DSL Modems Config WizardCommon Connection Types Cable Modems Big Pond Cable Australia Other Modems e.g. Broadband WirelessSingTel RAS Navigation & Data Input Home Screen Data LAN Screen LAN Screen What Dhcp Does Using VRT-401’s Dhcp ServerUsing another Dhcp Server To Configure your PCs to use Dhcp Windows Clients TCP/IP Settings Overview Using Dhcp Checking TCP/IP Settings Windows 9x/MEUsing Specify an IP Address Gateway Tab Win 95/98 Windows NT4.0 TCP/IP Checking TCP/IP Settings Windows NT4.0 Specify an IP Address Obtain an IP address from a Dhcp Server Windows NT4.0 Add Gateway Windows NT4.0 DNS Network Configuration Win Checking TCP/IP Settings Windows TCP/IP Properties Win Using a fixed IP Address Use the following IP Address Network Configuration Windows XP Checking TCP/IP Settings Windows XP TCP/IP Properties Windows XP For Windows XP Internet AccessAccessing AOL For Windows 9x/ME/2000 Fixed IP Address Macintosh ClientsLinux Clients Other Unix Systems Status Screen Operation Data Status Screen PPPoE Link Status Connection Status PPPoEData PPPoE Screen Connection Physical Address Connection Log Messages Operation and Status Dress Connection Status PptpData Pptp Screen Connection Physical Ad Data Telstra Big Pond Screen Connection Status Telstra Big Pond Connection Status Connection Details SingTel RAS Data SingTel RAS Screen Data Fixed/Dynamic IP address Screen Connection Details Fixed/Dynamic IP AddressInternet Physical Ad Buttons Release/Renew Internet Screen Advanced Internet Screen Special Applications Communication ApplicationsSpecial Applications Screen Data Special Applications Screen Using a Special ApplicationCheckbox Name Incoming Ports Outgoing Ports URL Filter DMZ Data URL Filter Screen URL Filter Screen Dynamic DNS Domain Name Server Service works as followsDynamic DNS Screen Ddns Data User Name Ddns ServicePassword Domain Name Data Dynamic DNS Screen IP Address seen by Internet Users Virtual Servers Virtual Servers Screen Using the DMZ port for Virtual ServersData Virtual Servers Screen Defining your own Virtual Servers Connecting to the Virtual ServersBackup DNS IP Address Options MTU size MTU Admin Login Screen Admin Login Password Dialog Access Control Screen Access ControlTo use this feature Data Access Control Screen View Log Group Members Screen Access Control Log Security Configuration Firewall Rules This feature is for advanced administrators onlyFirewall Rules Screen Data Firewall Rules Screen Source IP Define Firewall RuleData Define Firewall Rule Screen Type Action Dest IPLog Internet Connec Enable Logs DoS AttacksLogs Data Logs Screen Timezone Access ControlSyslog Server Enable Syslog Firewall Rules Include Firewall SPI Firewall Enable DoSSecurity Options Data Security Options Screen Allow L2TP Options Respond toAllow IPsec Allow Pptp Define Schedule Screen SchedulingData Define Schedule Screen Data Services Screen Services Buttons Delete VRT-401 always uses Tunnel Mode VRT-401 does not support Transport ModeIPSec Policies VPN Configuration VPN Pass-through Common VPN SituationsClient PC to VPN Gateway Connecting 2 VPN Gateways Connecting 2 LANs via VPN VPN Policies Screen VPN ConfigurationData VPN Policies Screen Adding a New Policy Able/Disable CopyOperations Add Keys General SettingsEnable Policy Endpoint Local IP addresses Type VPN Wizard Traffic Selector Manual Key Exchange Remote IP addresses Type ESP Authentica Tication is enabledManually assigned Keys ESP Encryption Local Identity IKE PhaseRemote Identity Mode AuthenticationEncryption IKE Exchange IPSec PFS IKE Phase 2 IPsec SA IPsec SA LifeAH Authentication Time Examples Example 1 Connecting 2 VRT-401sConfiguration Settings Setting LAN a Gateway LAN B Gateway IPSec SA Parameters DES Setting Value VRT-401 ConfigurationExample 2 Windows 2000/XP Client to LAN Windows 2000/XP Local Security Settings Windows Client Configuration Windows 2000/XP Policy Properties Filter Properties Addressing New Rule Properties Filter Action Modify Security Method VPN Setting Windows Setting Tunnel Setting Windows 2000/XP Client to VRT-401 Filter List Filter Action Modify Security Method DUT to Win2K Properties Properties General Tab IKE Security Algorithms Key Exchange Security Methods Example 3 Windows 2000 Server to VPN Gateway Setting Single Client Server/Gateway Windows 2000 Server Addressing Windows 2000 Server Configuration Using Certificates Adding a Self Certificate Adding a Trusted Certificate Length Hash AlgorithmSignature Algorithm Signature Key To add a New CRL CRLs Upload CRL Remote Administra Tion RoutingUpgrade PC Database PC Database Screen PC Database Data PC Database Screen Data PC Database Admin Screen PC Database AdminPC Properties Name Entry Update Se∙ Dchp Client Reserved IP Address Select this if the PC Buttons Add as New Data Remote Administration Screen Remote AdministrationTo connect from a remote PC via the Internet Routing Screen Using this ScreenRouting Overview Data Routing Screen Enable RIPStatic Routing Static Routing Table Entries Local Router Configuring Other Routers on your LAN For VRT-401’s Routing Table For Router As Default RouteStatic Routing Example Other Routers on the Local LAN For Router Bs Default Route Firmware UpgradeTo perform the Firmware Upgrade Data Upnp Screen Internet Access General ProblemsProblem 1 Cant connect to VRT-401 to configure it 119 FCC Statement VRT-401 FCC Radiation Exposure Statement CE Marking Warning