Advanced | RCA 605, 620, 608WL instruction

Chapter 5

Expert Configuration

5.7.5 Advanced

When to use The Advanced VPN menu gives access to two main pages where the complete IPSec configuration can be done. These pages are component-oriented, as opposed to the application-oriented pages described in “5.7.1 LAN to LAN” on page 177, “5.7.2 VPN Client” on page 178 and “5.7.3 VPN Server” on page 179. Component- oriented means that a number of components are constructed and subsequently combined.

It is highly recommended to use the application-oriented web pages for VPN configurations. Only in exceptional cases, these pages will not be sufficiently flexible to fulfil your requirements. Only in these cases, the Advanced VPN menu should be used.

How to use Configuring an operational IPSec connection basically consists of the definition of a Peer Profile and a Connection Profile. The Peer represents the remote Security Gateway and all the parameters required to set up an IKE Security Association to this Security Gateway. A Connection represents the IPSec connection and all its associated parameters.

All parameters of an IPSec configuration can be adjusted, so the functionality of these web pages corresponds to the Command Line Interface (CLI). Choices have to be made in accordance to the data known to the user, and the VPN layout.

The Advanced VPN menu should be used by skilled persons only, as these ! pages allow you to manually adjust configuration components that are in

general automatically generated by the SpeedTouch™. Therefore, take care when altering settings in the Advanced VPN menu.

E-DOC-CTC-20051017-0151 v1.0	181

Image 191

RCA 605, 620, 608WL manual Advanced

Contents

SpeedTouch 605/608/608 WL/620 Page SpeedTouch 605/608 608 WL/620 Document Information CopyrightTrademarks Contents Basic Configuration Expert Configuration IP Router 121 Software Keys Contents About this User’s Guide Terminology Documentation and software updates About this User’s Guide Getting to know your SpeedTouch SpeedTouch LED Behaviour Indicator Description Name Colour State DSL Indicator Description Name LED Status Access Method Can be used to Accessing your SpeedTouch To access the SpeedTouch via the Web interface Access via the Web Interface For more information, see Quote site command on Access via CLITo access the SpeedTouch via the Command Line Interface CLI To start a Telnet session Select All Programs Accessories Command Prompt Open a Command Prompt window Access via FTP Use Command Common FTP commands Ftp quote site ip iplist Remote Assistance To access the SpeedTouch remotely To enable remote accessTo disable remote access Chapter Wired Ethernet Wireless Ethernet Local Network Setup For more information, see Device settings on Wired Ethernet Introduction Wireless client requirements Wireless Ethernet Wireless Basics Chapter Wireless Security on Connecting Wireless Clients for the First TimeWireless default settings Click Connect Anyway First-time association example Name Ssid Wireless Security WPA-PSK Wi-Fi Protected Access Pre-Shared Key Search for wireless devices taskSecurity disabled default WEP Wired-Equivalent Privacy Registering clients via Web pages Connecting Additional Wireless ClientsSecurity issues Registering wireless clients Click Configure Registering clients via the association button Wireless Distribution System WDS Extending the Range of Your Wirelstess Network Chapter Chapter Internet Gateway Internet Connectivity Dial-In ClientsSpeedTouch Web Pages See 3.1 SpeedTouch Web Pages on page 31 to proceed If your computer runs You can use Monitoring your Internet connection SpeedTouch Web PagesIntroduction Starting an Internet session Terminating an Internet session Internet Gateway Device Control Agent Internet connection status Terminating an Internet session Basic and Expert Mode SpeedTouch documentation Basic Configuration Menu Language Bar Navigation Bar Notification Area Tasks Navigation Menu items Collapsing and expanding the menu Menu Language Bar Navigation Bar Notification Area Tasks SpeedTouch Broadband Connection Toolbox Office Network HomeSpeedTouch home SpeedTouch Information Configuration Event Logs Update Information SpeedTouch Easy Setup Click Yes, restart my SpeedTouch. The SpeedTouch restarts RestartRestarting your SpeedTouch Configuration Restoring a previously saved configuration Back up & RestoreAccessing the Backup & Restore Saving your current configuration Resetting the SpeedTouch factory defaults Reset to Factory Defaults Event Logs Indicator Description Updating the SpeedTouch system software Update Broadband Connection menu DSL Connection Internet ServicesBroadband Connection Click Check Connectivity Connectivity CheckPick a task list, click Check connectivity to the Internet DSL Connection Internet Services Broadband Connection menu, click Internet Services Internet Service SettingsAccessing the Internet Service Settings Overview Toolbox Terminating remote assistance Username PasswordEnabling Remote Assistance Game & Application Sharing Chapter Defined Games & Applications Accessing the Defined Games & Applications Game or Application Name you can Accessing the Game or Application Definition OverviewConfigure Under Game or Application Definition Adding a Port Translation rule Creating a new game or application New Game or Application Web Site Filtering Allow is selected under Action for Unknown Sites Deny access to a specific Web siteAllow access to a specific Web site Redirect a Web site Proceed as follows Click Redirect in the Action list Configure content based filtering settingsUnder Content Based Filtering you can Redirecting all Web sites Click Standard Accessing this page Proceed as followsWeb Filtering Activation Web Filtering Activation Standard license activation Icon Description Content LevelAccessing the Content Level Toolbox menu, click Web Site Filtering Click Configure Content level creation Proceed as follows New Content LevelAccessing the New Content Level Chapter Standard FirewallHigh Medium Low DisabledDetails of a security level Creating a new security level Editing a security level Proceed as follows Destination Interface and IP Address range Source Interface and IP Address range Intrusion Detection Dynamic DNS On the Dynamic DNS page, click Configure User Privileges User Management Chapter Toolbox menu, click User Management Edit UserEditing a user account Proceed as follows Change Default User page appears Change Default UserChanging the default user Add User Interfaces Office NetworkDevices Devices See 4.6.2 Device Settings on page 84 for more information Connection Sharing Device SettingsAccessing the device settings Overview Office Network menu, click Devices Chapter Assigning the public IP address to a device Assign Public IP Device settings Wireless Device SettingsAccessing the wireless Point settings Access Point SettingsAccessing the Access Encryption Allow multicast from Broadband NetworkBroadcast Network Name Allow New Devices Select Use WPA-PSK Encryption 64 bit, Hexadecimal128 bit, Alphanumeric 128 bit, Hexadecimal New stations are allowed via registration Access control on the SpeedTouchFor more information, see Allowing new wireless on New stations are allowed automatically Information, see 4.6.4 Wireless Device Settings on Establishing a WDS connection Configuring WDSClick Configure Pick a task list, click Configure WDS Pick a task list, click Scan for wireless Access Points Interfaces Assigning a new IP address to the SpeedTouch Interface Settings Office Network menu, click Interfaces Dhcp Pool Accessing the Dhcp PoolDhcp Pool Components of the Dhcp Pool Chapter Connections Expert ConfigurationClick IP Router 100 101 SpeedTouch Services Easy SetupDiagnostics System Update Easy Setup If result is Then Diagnostics DSL Line Info Configuration SystemSee 5.2.6 System Update on page 110 for more information System Information Software Release Board Name Serial Number Product Code Product Name Connections If the status is Then Diagnostics Facility Severity Messages ConfigurationSyslog 109 See Upload system files on page 110 for more information System UpdateSystem configuration System Upgrade Manage configuration files System software version Switchtoanothersystem software versionUpload system software Proceed as follows Edit SpeedTouch service properties SpeedTouch ServicesView detailed SpeedTouch service information Service properties Edit SpeedTouch service properties Type Indicates a SpeedTouch service that Sntp Client Manual Sntp Modify ping test properties 9 SLA Delete the entry see Add/delete a traceroute test Modify traceroute test properties Traceroute tests and results Add/delete a traceroute testModify traceroute test Properties Add-on IP Router Select Obtain an IP address automatically IP AddressesAdd/change an IP address Interface Expressions Properties table Interface ServiceExpressions Related expression Adding an IP related expression Service Adding a service related expression TCP Ack class Classification Label ServiceIndex Name Adding an IP route To add an IP route IP Routing 5 RIP Configuration Interfaces Neighbours 6 NAT Type MappingCreating a NAT template Group IP QoS Configuration Queues Meter Wfq WFQ queue WeightDiscard Priority Mark rate PropagateAckFilter Drop rate Mark action # marked# compliant Drop action Bridged Ethernet Routed PPPoERouted PPPoA Routed PPPoI Phonebook QoS Book Interfaces Connection Service Name1 ATM Identifiers VPI and VCI Upper layer protocol Routing Other Routed PPPoECreating a Routed PPPoE connection entry On-Demand ModeManually Always-On Introduction Creating a Routed PPPoA connection entry Routed PPPoA 142 143 Creating a Routed Routed PPPoIAvailability Introduction 145 146 Vlan Bridged Ethernet 148 Vlan interface configuration Routed Ethernet Generated IP routes Routed IPoACreating a new Routed IPoA Ethernet Interface PPTP-to-PPP Relay Virtual LAN Local Networking Managed SwitchWireless Activate trust client DhcpActivate server Activate verify first Used Client IDAddress Pool Secondary DNS Server Primary DNS Server Relay Interfaces Relay Config Bound InitRequesting Selecting 2 DNS Configuration Hostname Table Overview Managed Ethernet Switch Managed Switch 162 Wireless Framebursting Interoperability ModeRate Only stations with correct Network name Ssid can connect Channel Selection list, click auto Network Name broadcast Interoperability Mode Security Mode settings Access Control settings Enable/disable the wireless interfaceClear wireless interface enabled Select Wireless interface enabled Select Security Level 2 WPA-PSK WPA Personal Select Security Level 1 WEPBits, Alphanumeric Bits, Hexadecimal Select Security Level 2 WPA Scan for Other Networks Log Expressions onPolicy Policy Buttons Click Destination Interface Flags EnableReset Click Customize 174 2 Log VPN Remote Gateway Address Known as the starting page when ConfigurationProcedure LAN to LAN Select VPN VPN Client Configuration procedureVPN Client Select VPN VPN Server SpeedTouch as VPN Server Configuration procedureVPN Server Certificates Advanced Debug Browse to Expert mode VPN Debug LoggingBrowse again to Expert mode VPN Debug Logging SIP PBX General Location Service Call Logging Call Screening 184 HowtoactivateaSoftware module Software Keys 186 Troubleshooting Performance General SpeedTouch TroubleshootingSpeedTouch does not work SpeedTouch unreachable Poor SpeedTouch LANLEDdoesnotlightup Make sure that Wired Ethernet Troubleshooting Not able to connect wireless clients Wireless Ethernet Troubleshooting Message Due to Upgrade Troubleshooting UPnP on Windows XP Systems Adding IGD Discovery and Control Software reset Hardware reset Resetting your SpeedTouch 195 196 Page Need more help?