Manuals / TRENDnet / Computer Equipment / Network Router

TRENDnet BRV204 manual Security Configuration, Chapter, Overview, Admin Login Screen

Models: BRV204

1 146

Page 56

Chapter 7	7
Chapter 7
Security Configuration

This Chapter explains the settings available via the security configuration section of the "Security" menu.

Overview

The following advanced configurations are provided.

•Admin Login

•Access Control

•Firewall Rules

•Logs

•E-mail

•Security Options

•Scheduling

•Services

Admin Login

The Admin Login screen allows you to assign a user name and password to the TW100- BRV204 .

Figure 34: Admin Login Screen

1.The default login name is "admin". Change this to the desired value.

2.The default password is blank (no password). Enter the desired password in the New Password and Verify Password fields.

3.Save your changes.

You will see a login prompt when you connect to the TW100-BRV204 , as shown below.

Page 56

Image 56

TRENDnet BRV204 manual Security Configuration, Chapter, Overview, Admin Login Screen

Contents

Page Page Table of Contents TW100-BRV204 FeaturesPackage Contents CHAPTER 2 INSTALLATIONVPN Configuration Server SetupWindows Client Setup CHAPTER 10 OTHER FEATURES & SETTINGSTW100-BRV204 Features Internet Access FeaturesIntroduction ChapterAdvanced Internet Functions LAN FeaturesConfiguration & Management Package Contents Security FeaturesIPSec VPN Gateway Features Microsoft VPN Gateway SupportPhysical Details Front-mounted LEDsPower Figure 2 Front PanelUsing the DMZ Port Rear PanelReset Button To Clear All Data and restore the factory default valuesAdvantages of the DMZ Port Installation ProcedureRequirements This Chapter covers the physical installation of the TW100-BRV2045. Check the LEDs 4. Power Up3. Connect WAN Cable Setup OverviewThis Chapter provides Setup details of the TW100-BRV204 ChapterConfiguration Program PreparationIf you cant connect Using your Web BrowserFigure 5 Password Dialog TW100-BRV204 User’s Guide Setup Wizard Common Connection TypesType DetailsOther Modems e.g. Broadband Wireless Big Pond Cable AustraliaSingTel RAS TypeFigure 6 Home Screen Home ScreenNavigation & Data Input LAN Screen Save CancelFigure 7 LAN Screen TCP/IPDHCP Using the TW100-BRV204 s DHCP ServerUsing another DHCP Server To Configure your PCs to use DHCPPC Configuration TCP/IP Settings - OverviewWindows Clients ChapterChecking TCP/IP Settings - Windows 9x/ME Using DHCPUsing Specify an IP Address Figure 8 Network ConfigurationTW100-BRV204 User Guide Figure 10 Gateway Tab Win 95/98Figure 11 DNS Tab Win 95/98 Checking TCP/IP Settings - Windows NT4.0 PC ConfigurationFigure 12 Windows NT4.0 - TCP/IP Figure 13 Windows NT4.0 - IP AddressFigure 14 - Windows NT4.0 - Add Gateway Obtain an IP address from a DHCP ServerSpecify an IP Address PC Configuration Figure 15 Windows NT4.0 - DNSChecking TCP/IP Settings - Windows Figure 16 Network Configuration Win1. Select Control Panel - Network and Dial-up Connection Figure 17 TCP/IP Properties WinUsing DHCP Using a fixed IP Address Use the following IP Address1. Select Control Panel - Network Connection Checking TCP/IP Settings - Windows XPFigure 18 Network Configuration Windows XP Figure 19 TCP/IP Properties Windows XP Using DHCPUsing a fixed IP Address Use the following IP Address Internet Access Accessing AOL1. Select Start Menu - Settings - Control Panel - Internet Options 2. Select Set up or change your Internet ConnectionMacintosh Clients Linux ClientsOther Unix Systems Ensure you are logged in as root before attempting any changesOperation and Status OperationStatus Screen ChapterInternet Connection MethodBroadband Modem Internet ConnectionConnection Status - PPPoE Figure 21 PPPoE Status ScreenConnection Physical AddressButtons ConnectDisconnect Clear LogConnection Status - PPTP Figure 22 PPTP Status ScreenConnection Physical AddressConnection Status - Telstra Big Pond Clear LogRefresh Figure 23 Telstra Big Pond Status ScreenConnection Details - SingTel RAS Default GatewayConnection Log Connection LogRelease/Renew Button will display EITHER Release OR Renew Refresh DNS IP Address DHCP ClientButtons Connection Details - Fixed/Dynamic IP Address Physical Address IP Address Network Mask Default GatewayFigure 25 Connection Details - Fixed/Dynamic IP Address InternetOperation and Status Update the data shown on screenRefresh Internet Features The following advanced features are provided WAN Port ConfigurationChapter OverviewWAN Port Configuration Figure 26 WAN Port Configuration ScreenIdentification HostnameEnable NAT Disable NATDisabling NAT will disable Internet access, unless all PCs have LoginAdvanced Internet Communication ApplicationsFigure 27 Internet Screen Communication ApplicationsSpecial Applications Use this to Enable or Disable this Special Application as requiredFigure 28 Special Applications Screen CheckboxMulti-DMZ Using a Special ApplicationIncoming Ports Outgoing PortsURL Filter URL Filter ScreenFigure 29 URL Filter Screen Filter StringsDynamic DNS Domain Name Server Dynamic DNS ScreenThe Service works as follows DDNS ServiceDDNS Service User Name Password/Key Domain Name DDNS Status DDNS DataFigure 31 Virtual Servers Virtual ServersIP Address seen by Internet Users Connecting to the Virtual Servers Virtual Servers ScreenDefining your own Virtual Servers EnableOptions Backup DNSFigure 33 Options Screen IP AddressSecurity Configuration Admin LoginFigure 34 Admin Login Screen ChapterFigure 35 Password Dialog Security ConfigurationAccess Control Access Control ScreenIf required, you can also define your own Services Figure 36 Access Control ScreenInternet Access ServicesCancel Members ButtonAccess Control Log Group Members ScreenPCs not assigned to any group will be in the Default group PCs deleted from any other Group will be added to the Default groupFirewall Rules Firewall Rules ScreenThis feature is for advanced administrators only Figure 38 Firewall Rules ScreenData Add Edit Move Delete View Log System Rules Define Firewall Rule Figure 39 Define Firewall RuleName TypeAction ServicesDest IP Logs Enable LogsData - Logs Screen Figure 40 Logs ScreenEnable Syslog System LogRouter operations start up, get time etc - This option will log Connections to the Web - based interface of this Router - ThisE-mail Figure 41 E-Mail ScreenE-Mail Alerts Send E-Mail alertdefault value is SubjectEnter the text string to be shown in the Subject field for the E mailSecurity Options Enable DoS Firewall ThresholdData - Security Options Screen Figure 42 Security Options ScreenOptions Respond to ICMP ping Allow VPN pass- throughDrop fragmented IP packets Block TCP Flood Block UDP Flood Block non- standard packetsScheduling Define Schedule ScreenEnter the start using a 24 hr clock Enter the finish time using a 24 hr clockServices Figure 44 Services ScreenAvailable Services Available ServicesVPN IPSec IPSecThe TW100-BRV204 does NOT support Transport Mode The TW100-BRV204 always uses Tunnel ModeVPN Configuration PoliciesVPN Endpoint addressCommon VPN Situations VPN Pass-throughClient PC to VPN Gateway Figure 45 VPN Pass-throughConnecting 2 LANs via VPN Figure 47 Connecting 2 VPN GatewaysVPN Configuration VPN Policies ScreenEnable Figure 48 VPN Policies ScreenAdding a New Policy Enable/DisableMove CopyGeneral Settings Policy Name Enable Policy Allow NetBIOS traffic Remote VPN EndpointFigure 50 VPN Wizard - General Screen KeysType Figure 51 VPN Wizard - Traffic Selector ScreenLocal IP addresses Remote IP addresses TypeFigure 52 VPN Wizard - Manual Key Exchange Screen Manually assigned KeysESP Authentication tion is enabledESP Encryption Encryption AlgorithmIKE Phase 1 IKE SA IKE PhaseFigure 53 VPN Wizard - IKE Phase 1 Screen Authentication AuthenticationAlgorithm EncryptionFigure 54 VPN Wizard - IKE Phase 2 Screen IKE Phase 2 IPsec SAAH Authentication ESP AuthenticationFor IKE, configuration is now complete Click Next to view the final screenFigure 55 VPN Wizard - Final Screen TW100-BRV204 User GuideExample 1 Connecting 2 TW100-BRV204 s VPN ExamplesFigure 56 Connecting 2 TW100-BRV204 s SettingIPSec SA Parameters Example 2 Windows 2000/XP Client to LAN SettingFigure 57 Windows 2000/XP Client to TW100-BRV204 ValueWindows Client Configuration Figure 58 Windows 2000/XP - Local Security SettingsDeselect Activate the default response rule. Click Next IPSec SA ParametersFigure 59 Windows 2000/XP - Policy Properties Figure 60 IP Filter ListFigure 62 New Rule Properties IP Filter List Figure 61 Filter Properties Addressing8. Enter the Source IP address and the Destination IP address Figure 63 New Rule Properties Filter Action Figure 64 Require Security Properties12. Select Negotiate security this selects IKE, then click Add Microsoft VPNVPN Setting Windows SettingFigure 65 Modify Security Method Figure 66 Require Security PropertiesFigure 67 Tunnel Setting Figure 68 Authentication MethodFigure 69 Windows 2000/XP Client to TW100-BRV204 Figure 70 Windows 2000/XP Client to TW100-BRV204Figure 71 Filter Properties Addressing 22. Click OK to save your changes, then CloseFigure 72 Filter List Microsoft VPNFigure 73 Filter Action Figure 74 Security MethodsFigure 76 Tunnel Setting Figure 75 Modify Security MethodFigure 77 Authentication Method Figure 78 DUT to Win2K Properties31. Select the General tab TW100-BRV204 User GuideFigure 80 Key Exchange Settings Figure 79 Properties - General Tab32. Click the Advanced button to see the screen below 33. Click the Methods button to see the screen belowConfiguration is now complete Figure 81 Key Exchange Security MethodsFigure 82 IKE Security Algorithms Figure 83 Windows 2000/XP Client to TW100-BRV204Example 3 Windows 2000 Server to VPN Gateway SettingFigure 84 TW100-BRV204 to Windows 2000 Server Single ClientWindows 2000 Server Configuration Figure 85 Windows 2000 Server - AddressingCertificates Trusted CertificatesRequesting a Trusted Certificate Issuer NameSelf Certificates Issuer NameFigure 87 Add Trusted Certificate Figure 88 Self Certificates ScreenRequesting a Self Certificate Delete buttonSelf Certificate Requests Request ListName Subject NameHash Algorithm Signature AlgorithmFigure 91 Upload Self Certificate CRLsTo add a New CRL Status Figure 92 Certificate Revocation ListsFigure 93 Upload CRL Figure 94 VPN Status ScreenVPN Status Policy NameSA Type VPN EndpointServer Setup Microsoft VPNChapter OverviewClient Database EnableAuthentication PPTP ServerLogin Name Login PasswordVerify Password Update SelectedThis indicates whether or not the PPTP VPN Server is enabled Status ScreenFigure 97 Microsoft VPN Status Screen Server StatusWindows Client Setup Windows 98/ME1. Click Start - Settings - Dial-up Networking 2. Select Make New ConnectionWindows ME VPN Dialing Properties 2. Select Start - Settings - Dial-up NetworkingTo establish a connection Figure 101 Windows 2000 Public Network WindowsFigure 100 Windows 2000 Network Connection Figure 102 Windows 2000 VPN Host Click Next to continueFigure 103 Windows 2000 Connection Availability Microsoft VPNFigure 104 Windows 2000 Finish Wizard Figure 106 Windows XP Network Connection Windows XPFigure 105 Windows XP Network Connection Type Figure 107 Windows XP Connection Name 4. Enter a suitable name for this connection. Click Next to continueFigure 108 Windows XP Public Network Figure 109 Windows XP VPN ServerFigure 110 Windows XP Connection Availability Changing the connection settingsTo establish a connection Other Features & Settings Config FileDiagnostics Remote AdminFigure 111 Config File Screen Config FileData - Config File Screen Network Diagnostics Figure 112 Network Diagnostics ScreenPing IP AddressFigure 113 PC Database PC DatabasePC Database Screen Administration Known PCsName IP AddressPC Database Admin Figure 114 PC Database AdminKnown PCs PC PropertiesUpdate Selected ButtonsAdd as New EntryRemote Administration Figure 115 Remote Administration ScreenSettings EnableAccess To connect from a remote PC via the InternetPort Number Allow RemoteRouting OverviewRouting Screen Open Routing and Remote AccessEnable RIP Data - Routing ScreenFigure 116 Routing Screen Static RoutingConfiguring Other Routers on your LAN Save Add Update Delete Clear Form Generate ReportProperties ButtonsStatic Routing - Example Other Routers on the Local LANFor the TW100-BRV204 s Routing Table Figure 117 Routing ExampleOther Features and Settings For Router As Default RouteFor Router Bs Default Route Upgrade Firmware Figure 118 Upgrade Firmware ScreenUpgrade Firmware PasswordUPnP Enable UPnP Services Allow Configu rationAllow Internet access to be disabled Figure 119 UPnP ScreenTroubleshooting General ProblemsInternet Access Appendix AIt is a security risk, since the firewall is disabled FCC Statement Appendix B SpecificationsTW100-BRV204 CE Marking Warning FCC Radiation Exposure StatementLimited Warranty TW100-BRV204 - 5 Years WarrantyE-mail support@trendware.com Technical SupportTRENDware Technical Support Tel +1-310-891-1100 Fax +1-310-8911111 TW100-BRV204 User Guide