Manuals / SnapGear / Computer Equipment / Network Card

SnapGear 2.0.1 user manual Network Connections

Models: 2.0.1

1 189

Download 189 pages 52.42 Kb

Page 49

Note

The Failover Cable/DSL/Direct/Dialout Internet option will not appear as an available Configuration until a primary Internet connection has been configured.

Refer to Enable the primary connection for failover above for details on enabling your primary broadband Internet connection for failover.

Figure 3-7

Next, configure the failover connection as you would a normal Internet connection.

See the Dialout Internet section in this chapter for a description of the fields on the Failover Modem Configuration page.

See the Internet section in this chapter for a description of how to configure a broadband Internet connection.

45

Network Connections

Image 49

SnapGear 2.0.1 user manual Network Connections

Contents

Revision June 7 Contents 104 Firewall169 159170 177CyberGuard SG Gateway Appliances IntroductionIntroduction CyberGuard SG PCI Appliances Secure by default Bridged modeDocument Conventions Text like this highlights important issuesFront panel LEDs Your CyberGuard SG Gateway ApplianceSG300 model includes two blue straight through UTP cables Rear panel Virtual Private Networking is enabledInternet link features CyberGuard SG Gateway Appliance FeaturesLAN link features DMZ link features SG570, SG575 onlyLEDs Your CyberGuard SG PCI ApplianceNetwork link features CyberGuard SG PCI Appliance FeaturesEnvironmental features Getting Started 255.255.255.0 192.168.0.1Page Right click on Local Area Connection and select Properties 192.168.0.100 Set up the Password and LAN Connection SettingsRoot Getting Started Getting Started Cable modem Set up Internet Connection SettingsAnalog modem DSL modemSet up the PCs on your LAN to Access the Internet LAN with no Dhcp server LAN with a Dhcp serverTo manually set up each Windows PC on your network Select Dhcp Server from the Networking menu Getting Started Set up your PC to Connect to the Web Management Console Install the Network Driver on your PCSelect Use the following DNS server addresses and enter Select Internet Protocol TCP/IP and click PropertiesSet up the Password and Network Connection Settings Network Setup Connections page will display Ensure Dhcp assigned is unchecked Click Apply and RebootGetting Started Click Apply and Reboot Getting Started Page Connections Network ConnectionsNetwork Connections Bridging LANInternet Physically connect modem device Internet Connection MethodsCable Direct Internet Bridged Internet Failover Direct/Cable/ADSL Internet COM/ModemDialout Internet Field Description ISP. The Password and Confirm Password fields mustOptional Direct DMZ Dialin accessBridged DMZ Direct LAN Services on the DMZ NetworkBridged LAN DMZ as a second Internet connectionLoad Balancing DMZ as a backup/failover Internet connectionInternet Failover Set up a secondary backup Internet connection Enable the primary connection for failoverNetwork Connections Additional routes RoutesRoute management Hostname AdvancedDNS Proxy Network Address Translation NAT/masquerading Dynamic DNS Interface aliases Change MAC address QoS Traffic ShapingDialin Setup Dialin SetupDialin Setup Following table describes the fields on the Dial-In Setup Dialin User Accounts Account list Page Windows 95/98/Me Remote User ConfigurationDialin Setup Windows 2000/XP Dialin Setup Page Dhcp Server Dhcp Server ConfigurationDhcp Server Dhcp Server Subnet List Enable/DisableInterface SubnetDhcp Server Dhcp Proxy Firewall Incoming AccessFirewall Administration services CyberGuard SG Administrative Web Server SSL/HTTPS Secure Http Add Local and Private Certificates SSL Certificate SetupIncoming Interface Packet FilteringOutgoing Interface ActionAddresses Service groups Rules Destination NAT/port forwarding EnableDescriptive Name Source NAT Destination ServicesSource Address Destination AddressTo-1 NAT Rules User authentication Access Control and Content FilteringPage Click Advanced Browser setupIP lists Web lists Content Categories ReportsZoneAlarm Intrusion Detection Intrusion DetectionBenefits of using an IDS Basic Intrusion Detection and Blocking Page Advanced Intrusion Detection Advanced Intrusion Detection configuration Intrusion Detection Setting up the analysis server Page Web cache is only available on SG575 models Web CacheWeb Cache Cache size Web Cache SetupCreate a new user account Network Shares100 Web Cache 101 Web Cache Create the network share102 Web Cache Set the CyberGuard SG appliance to use the network sharePeers Set up LAN PCs to Use the Web Cache103 Web Cache 104 Virtual Private Networking Virtual Private NetworkingPptp Client Setup 106 Virtual Private Networking 107 Virtual Private Networking Pptp Server Setup108 Virtual Private Networking Enable and configure the Pptp VPN serverEncryption is strongly recommended. This keeps your Data private as well as providing secure authentication109 Virtual Private Networking Configuring user accounts for VPN server 111 Virtual Private Networking 112 Virtual Private Networking Configuring the remote VPN clientWindows 95, Windows 98 and Windows Me 114 Virtual Private Networking Windows115 Virtual Private Networking 116 Virtual Private Networking Windows XP117 Virtual Private Networking Connecting the remote VPN clientSet up the Branch Office IPSec SetupCyberGuard SG appliance to CyberGuard SG appliance Enabling IPSec119 Virtual Private Networking Tunnel settings Configure a tunnel to connect to the headquarters office120 Virtual Private Networking 121 Virtual Private Networking 122 Virtual Private Networking 123 Virtual Private Networking Local endpoint settings124 Virtual Private Networking 125 Virtual Private Networking Other options126 Virtual Private Networking 127 Virtual Private Networking 128 Virtual Private Networking TcgidKept confidential Phase 1 settings129 Virtual Private Networking 130 Virtual Private Networking 131 Virtual Private Networking Phase 2 settings132 Virtual Private Networking Configuring the Headquarters133 Virtual Private Networking Leave the Enable IP Payload Compression checkbox unchecked Remote endpoint settings134 Virtual Private Networking 135 Virtual Private Networking Connection Tunnel ListRemote party 136 Virtual Private Networking137 Virtual Private Networking Status138 Virtual Private Networking 139 Virtual Private Networking Dynamic DNS Support NAT Traversal Support140 Virtual Private Networking Extracting certificates Certificate Management141 Virtual Private Networking 142 Virtual Private Networking Creating certificates143 Virtual Private Networking Create the self-signed root CA certificate144 Virtual Private Networking Adding certificates145 Virtual Private Networking Adding a CA or CRL certificate146 Virtual Private Networking Adding a local certificate147 Virtual Private Networking Troubleshooting148 Virtual Private Networking 149 Virtual Private Networking 150 Virtual Private Networking CyberGuard SG appliance in Brisbane Internet address Setting up a GRE tunnelLAN address CyberGuard SG appliance in Slough Internet addressRemote subnet/netmask 10.1.0.0 GRE over IPSec 154 Virtual Private Networking 155 Virtual Private Networking Local Internal Address Place on Ethernet Bridge156 Virtual Private Networking Troubleshooting157 Virtual Private Networking L2TP VPN client158 Virtual Private Networking L2TP serverDate and Time SystemSet date and time NTP time server160 System Locality161 System UsersDiagnostic AdministrationEncrypted save/restore all User settingsInternet access via access controls DiagnosticsPassword Diagnostics164 System Network testsSystem log Configuration files165 System Flash upgrade Reset button RebootTechnical Support B.c.d B.c.d-e B.c.d-e.f.g.h B.c.d/e Appendix a IP Address Ranges169 Appendix a IP Address Ranges Term Meaning Appendix B Terminology170 Appendix B Terminology 171 Appendix B Terminology DNS172 Appendix B Terminology IDB173 Appendix B Terminology Isakmp174 Appendix B Terminology NTP175 Appendix B Terminology SHA176 Appendix C System Log Access LoggingEth0 Default DenyEth1 Ppp179 Appendix C System Log Creating Custom Log Rules180 Appendix C System Log 181 Appendix C System Log Iptables -I Forward -j LOG -i eth0 -p tcp182 Appendix C System Log Rate LimitingBoot Log Messages Administrative Access Logging183 Appendix C System Log 184 Appendix D Firmware Upgrade Practices and Precaut ions Appendix D Firmware Upgrade Practices and Precautions