Manuals / SnapGear / Computer Equipment / Network Card

SnapGear 2.0.1 user manual Rear panel, Virtual Private Networking is enabled

Models: 2.0.1

1 189

Download 189 pages 52.42 Kb

Page 10

Note

Not all the LEDs described below are present on all CyberGuard SG appliance models. Also, labels vary from model to model.

Label	Activity	Description

Power	On	Power is supplied to the CyberGuard SG appliance

Heart Beat	Flashing	The CyberGuard SG appliance is operating correctly

	On	If this LED is on and not flashing, an operating error
		has occurred

LAN Activity	Flashing	Network traffic on the LAN network interface

WAN Activity	Flashing	Network traffic on the Internet network interface

DMZ Activity	Flashing	Network traffic on the DMZ network interface

Serial Activity	Flashing	For either of the CyberGuard SG appliance COM
		ports, these LEDs indicate receive and transmit data

Online	On	An Internet connection has been established

VPN	On	Virtual Private Networking is enabled

Rear panel

The rear panel contains the connector ports for the LAN, Internet, modem (COM1) and possibly DMZ (SG570, SG575 only) as well as LAN status LEDs, Internet status LEDs, the reset button and power inlet.

The lower LAN/Internet status LED indicates the link condition, where a cable is connected correctly to another device. The upper LED indicates network activity.

6

Introduction

Image 10

SnapGear 2.0.1 user manual Rear panel, Virtual Private Networking is enabled

Contents

Revision June 7 Contents Firewall 104170 159169 177CyberGuard SG Gateway Appliances IntroductionIntroduction CyberGuard SG PCI Appliances Bridged mode Secure by defaultText like this highlights important issues Document ConventionsFront panel LEDs Your CyberGuard SG Gateway ApplianceSG300 model includes two blue straight through UTP cables Virtual Private Networking is enabled Rear panelLAN link features CyberGuard SG Gateway Appliance FeaturesInternet link features DMZ link features SG570, SG575 onlyYour CyberGuard SG PCI Appliance LEDsNetwork link features CyberGuard SG PCI Appliance FeaturesEnvironmental features Getting Started 192.168.0.1 255.255.255.0Page Right click on Local Area Connection and select Properties Set up the Password and LAN Connection Settings 192.168.0.100Root Getting Started Getting Started Analog modem Set up Internet Connection SettingsCable modem DSL modemSet up the PCs on your LAN to Access the Internet LAN with a Dhcp server LAN with no Dhcp serverTo manually set up each Windows PC on your network Select Dhcp Server from the Networking menu Getting Started Install the Network Driver on your PC Set up your PC to Connect to the Web Management ConsoleSelect Internet Protocol TCP/IP and click Properties Select Use the following DNS server addresses and enterSet up the Password and Network Connection Settings Network Setup Connections page will display Click Apply and Reboot Ensure Dhcp assigned is uncheckedGetting Started Click Apply and Reboot Getting Started Page Connections Network ConnectionsNetwork Connections LAN BridgingInternet Physically connect modem device Internet Connection MethodsCable Direct Internet Bridged Internet Failover Direct/Cable/ADSL Internet COM/ModemDialout Internet Field Description ISP. The Password and Confirm Password fields mustOptional Direct DMZ Dialin accessBridged DMZ Bridged LAN Services on the DMZ NetworkDirect LAN DMZ as a second Internet connectionLoad Balancing DMZ as a backup/failover Internet connectionInternet Failover Enable the primary connection for failover Set up a secondary backup Internet connectionNetwork Connections Additional routes RoutesRoute management Hostname AdvancedDNS Proxy Network Address Translation NAT/masquerading Dynamic DNS Interface aliases QoS Traffic Shaping Change MAC addressDialin Setup Dialin SetupDialin Setup Following table describes the fields on the Dial-In Setup Dialin User Accounts Account list Page Remote User Configuration Windows 95/98/MeDialin Setup Windows 2000/XP Dialin Setup Page Dhcp Server Dhcp Server ConfigurationDhcp Server Dhcp Server Interface Enable/DisableSubnet List SubnetDhcp Server Dhcp Proxy Firewall Incoming AccessFirewall Administration services CyberGuard SG Administrative Web Server SSL/HTTPS Secure Http SSL Certificate Setup Add Local and Private CertificatesOutgoing Interface Packet FilteringIncoming Interface ActionAddresses Service groups Rules Destination NAT/port forwarding EnableDescriptive Name Source Address Destination ServicesSource NAT Destination AddressTo-1 NAT Rules Access Control and Content Filtering User authenticationPage Browser setup Click AdvancedIP lists Web lists Content Reports CategoriesZoneAlarm Intrusion Detection Intrusion DetectionBenefits of using an IDS Basic Intrusion Detection and Blocking Page Advanced Intrusion Detection Advanced Intrusion Detection configuration Intrusion Detection Setting up the analysis server Page Web cache is only available on SG575 models Web CacheWeb Cache Web Cache Setup Cache sizeCreate a new user account Network Shares100 Web Cache Create the network share 101 Web CacheSet the CyberGuard SG appliance to use the network share 102 Web CachePeers Set up LAN PCs to Use the Web Cache103 Web Cache Virtual Private Networking 104 Virtual Private NetworkingPptp Client Setup 106 Virtual Private Networking Pptp Server Setup 107 Virtual Private NetworkingEnable and configure the Pptp VPN server 108 Virtual Private NetworkingEncryption is strongly recommended. This keeps your Data private as well as providing secure authentication109 Virtual Private Networking Configuring user accounts for VPN server 111 Virtual Private Networking Configuring the remote VPN client 112 Virtual Private NetworkingWindows 95, Windows 98 and Windows Me Windows 114 Virtual Private Networking115 Virtual Private Networking Windows XP 116 Virtual Private NetworkingConnecting the remote VPN client 117 Virtual Private NetworkingCyberGuard SG appliance to CyberGuard SG appliance IPSec SetupSet up the Branch Office Enabling IPSec119 Virtual Private Networking Tunnel settings Configure a tunnel to connect to the headquarters office120 Virtual Private Networking 121 Virtual Private Networking 122 Virtual Private Networking Local endpoint settings 123 Virtual Private Networking124 Virtual Private Networking Other options 125 Virtual Private Networking126 Virtual Private Networking 127 Virtual Private Networking Tcgid 128 Virtual Private NetworkingKept confidential Phase 1 settings129 Virtual Private Networking 130 Virtual Private Networking Phase 2 settings 131 Virtual Private NetworkingConfiguring the Headquarters 132 Virtual Private Networking133 Virtual Private Networking Leave the Enable IP Payload Compression checkbox unchecked Remote endpoint settings134 Virtual Private Networking 135 Virtual Private Networking Remote party Tunnel ListConnection 136 Virtual Private NetworkingStatus 137 Virtual Private Networking138 Virtual Private Networking 139 Virtual Private Networking Dynamic DNS Support NAT Traversal Support140 Virtual Private Networking Extracting certificates Certificate Management141 Virtual Private Networking Creating certificates 142 Virtual Private NetworkingCreate the self-signed root CA certificate 143 Virtual Private NetworkingAdding certificates 144 Virtual Private NetworkingAdding a CA or CRL certificate 145 Virtual Private NetworkingAdding a local certificate 146 Virtual Private NetworkingTroubleshooting 147 Virtual Private Networking148 Virtual Private Networking 149 Virtual Private Networking 150 Virtual Private Networking LAN address Setting up a GRE tunnelCyberGuard SG appliance in Brisbane Internet address CyberGuard SG appliance in Slough Internet addressRemote subnet/netmask 10.1.0.0 GRE over IPSec 154 Virtual Private Networking Local Internal Address Place on Ethernet Bridge 155 Virtual Private NetworkingTroubleshooting 156 Virtual Private NetworkingL2TP VPN client 157 Virtual Private NetworkingL2TP server 158 Virtual Private NetworkingSet date and time SystemDate and Time NTP time serverLocality 160 SystemUsers 161 SystemEncrypted save/restore all AdministrationDiagnostic User settingsPassword DiagnosticsInternet access via access controls DiagnosticsNetwork tests 164 SystemSystem log Configuration files165 System Flash upgrade Reboot Reset buttonTechnical Support B.c.d B.c.d-e B.c.d-e.f.g.h B.c.d/e Appendix a IP Address Ranges169 Appendix a IP Address Ranges Term Meaning Appendix B Terminology170 Appendix B Terminology DNS 171 Appendix B TerminologyIDB 172 Appendix B TerminologyIsakmp 173 Appendix B TerminologyNTP 174 Appendix B TerminologySHA 175 Appendix B Terminology176 Access Logging Appendix C System LogEth1 Default DenyEth0 PppCreating Custom Log Rules 179 Appendix C System Log180 Appendix C System Log Iptables -I Forward -j LOG -i eth0 -p tcp 181 Appendix C System LogRate Limiting 182 Appendix C System LogBoot Log Messages Administrative Access Logging183 Appendix C System Log Appendix D Firmware Upgrade Practices and Precautions 184 Appendix D Firmware Upgrade Practices and Precaut ions