Manuals / TRENDnet / Computer Equipment / Network Router

TRENDnet TW100-BRV204 manual Example 3 Windows 2000 Server to VPN Gateway, Setting, Single Client

Models: VPN Firewall Router TW100-BRV204

1 123

Download 123 pages 41.73 Kb

Page 100

Image 100

VPN

Example 3: Windows 2000 Server to VPN Gateway

In this example, a Windows 2000 Server connects to the TW100-BRV204. Users on each LAN can then gain access to the remote LAN.

Figure 82: TW100-BRV204 to Windows 2000 Server

TW100-BRV204 Configuration

This is the same as for the client setup earlier, with the exception of the IP address range for the remote endpoint.

Setting	Single Client	Server/Gateway

Remote	172.16.9.10	Subnet address:
IP addresses	For a single client, this is the	11.5.0.0
	For a single client, this is the	255.255.0.0
	same as the Gateway address	255.255.0.0
	same as the Gateway address	Address range used on the remote LAN.
		Address range used on the remote LAN.

Page 100

Image 100

TRENDnet Example 3 Windows 2000 Server to VPN Gateway, TW100-BRV204 to Windows 2000 Server, Setting, Single Client

Contents

TW100-BRV204 VPN Firewall Router Cable/DSL Internet Access 4-Port Switching HubUsers Guide Table of Contents P/N 9560KZ0101 Copyright  2003. All Rights Reserved Document Version TW100-BRV204 Features Internet Access FeaturesIntroduction ChapterLAN Features Configuration & ManagementSecurity Features Advanced Internet FunctionsPackage Contents VPN Gateway FeaturesPhysical Details Front-mounted LEDsRear Panel Installation ProcedureRequirements This Chapter covers the physical installation of the TW100-BRV2043. Connect WAN Cable 4. Power Up5. Check the LEDs Setup OverviewThis Chapter provides Setup details of the TW100-BRV204 ChapterConfiguration Program PreparationFigure 5 Password Dialog Using your Web BrowserIf you cant connect Setup Wizard Common Connection TypesType DetailsOther Modems e.g. Broadband Wireless Big Pond Cable AustraliaSingTel RAS TypeHome Screen Navigation & Data InputWAN Port Configuration Screen Data - WAN Port ScreenIdentification IP AddressLogin Internet Options screenMAC Address MAC AddressAlso called Network Adapter Address or Physical Address. This is a LAN Screen Data - LAN ScreenTCP/IP ButtonsDHCP Using the TW100-BRV204 s DHCP ServerUsing another DHCP Server To Configure your PCs to use DHCPPC Configuration TCP/IP Settings - OverviewWindows Clients ChapterUsing DHCP Checking TCP/IP Settings - Windows 9x/MEUsing Specify an IP Address Figure 11 Gateway Tab Win 95/98 PC ConfigurationFigure 12 DNS Tab Win 95/98 Figure 13 Windows NT4.0 - TCP/IP Checking TCP/IP Settings - Windows NT4.0TW100-BRV204 User Guide Specify an IP Address Obtain an IP address from a DHCP ServerFigure 14 Windows NT4.0 - IP Address Figure 15 - Windows NT4.0 - Add Gateway PC Configuration Figure 16 Windows NT4.0 - DNSFigure 17 Network Configuration Win Checking TCP/IP Settings - Windows1. Select Control Panel - Network and Dial-up Connection Figure 18 TCP/IP Properties Win Figure 19 Network Configuration Windows XP Checking TCP/IP Settings - Windows XP1. Select Control Panel - Network Connection Using a fixed IP Address Use the following IP Address Using DHCPFigure 20 TCP/IP Properties Windows XP Internet Access Accessing AOL1. Select Start Menu - Settings - Control Panel - Internet Options 2. Select Set up or change your Internet ConnectionMacintosh Clients Linux ClientsOther Unix Systems Fixed IP AddressOperation and Status OperationStatus Screen ChapterData - Status Screen InternetSystem ButtonsConnection Status - PPPoE Data - PPPoE ScreenConnection Connection LogConnection Log Messages ButtonsConnect DisconnectConnection Status - PPTP Data - PPTP ScreenConnection Connection LogData - Telstra Big Pond Screen Connection Status - Telstra Big PondConnection Connection Details - SingTel RAS Data - SingTel RAS ScreenConnection Log ButtonsNetwork Mask ButtonsConnection Details - Fixed/Dynamic IP Address Data - Fixed/Dynamic IP address ScreenInternet ButtonsRenew RefreshInternet Features Advanced Internet ScreenChapter OverviewCommunication Applications Special ApplicationsSpecial Applications Screen Communication ApplicationsUsing a Special Application Data - Special Applications ScreenFigure 28 Special Applications Screen CheckboxURL Filter URL Filter Screen Data - URL Filter ScreenFilter Strings ButtonsDynamic DNS Screen Dynamic DNS Domain Name ServerDDNS Service Password DDNS DataUser Name Domain NameVirtual Servers IP Address seen by Internet UsersConnecting to the Virtual Servers Virtual Servers ScreenDefining your own Virtual Servers ServersBackup DNS OptionsData - Options Screen Security Configuration Admin LoginFigure 34 Admin Login Screen ChapterFigure 35 Password Dialog Security ConfigurationAccess Control Access Control ScreenIf required, you can also define your own Services GroupInternet Access ServicesCancel Members ButtonAccess Control Log Group Members ScreenPCs not assigned to any group will be in the Default group PCs deleted from any other Group will be added to the Default groupFirewall Rules Screen Firewall RulesRule List For each rule, the following data is shown Define Firewall Rule Data - Define Firewall Rule ScreenDest IP ServicesAction Enable Logs LogsData - Logs Screen E-Mail Logs TimezoneSyslog Server Data - Security Options Screen Security OptionsSPI Firewall Options Respond toICMP Allow IPsecScheduling Define Schedule ScreenServices Data - Services ScreenAvailable Services Add New ServiceDelete the selected service from the list Add a new entry to the Service list, using the data shown in the AddNew Service area on screen Clear the Add New Service area, ready for entering data for a newChapter IPSecOverview VPN Configuration PoliciesRemote VPN address Traffic SelectorVPN Pass-through Common VPN SituationsClient PC to VPN Gateway Connecting 2 LANs via VPN Figure 46 Connecting 2 VPN GatewaysVPN Configuration VPN Policies ScreenVPN List OperationsAdding a New Policy Enable/DisableMove CopyGeneral Settings Local IP addresses Remote IP addresses Manual Key ExchangeESP Authentication tion is enabledManually assigned Keys KeysIKE Phase Figure 52 VPN Wizard - IKE PhaseIKE Phase 1 IKE SA AuthenticationFigure 53 VPN Wizard - IKE Phase IKE Phase 2 IPsec SAAH Authentication IKE SA Life TimeFor IKE, configuration is now complete Example 1 Connecting 2 TW100-BRV204s ExamplesSetting LAN A GateIPSec SA Parameters Example 2 Windows 2000/XP Client to LAN TW100-BRV204 ConfigurationSetting ValueWindows Client Configuration Figure 56 Windows 2000/XP - Local Security SettingsDeselect Activate the default response rule. Click Next IPSec SA ParametersFigure 57 Windows 2000/XP - Policy Properties Figure 58 IP Filter List8. Enter the Source IP address and the Destination IP address Figure 59 Filter Properties AddressingFigure 60 New Rule Properties IP Filter List Figure 62 Require Security Properties Figure 61 New Rule Properties Filter Action12. Select Negotiate security this selects IKE, then click Add VPN Setting Windows SettingFigure 63 Modify Security Method Figure 64 Require Security PropertiesFigure 65 Tunnel Setting Figure 66 Authentication MethodFigure 67 Windows 2000/XP Client to Broadband VPN Gateway Figure 68 Windows 2000/XP Client to Broadband VPN Gateway22. Click OK to save your changes, then Close Figure 69 Filter Properties AddressingFigure 70 Filter List Figure 71 Filter Action Figure 72 Security MethodsFigure 74 Tunnel Setting Figure 73 Modify Security MethodFigure 75 Authentication Method Figure 76 DUT to Win2K Properties31. Select the General tab TW100-BRV204 User GuideFigure 78 Key Exchange Settings Figure 77 Properties - General Tab32. Click the Advanced button to see the screen below 33. Click the Methods button to see the screen belowConfiguration is now complete Figure 79 Key Exchange Security MethodsFigure 80 IKE Security Algorithms Figure 81 Windows 2000/XP Client to Broadband VPN GatewayExample 3 Windows 2000 Server to VPN Gateway SettingFigure 82 TW100-BRV204 to Windows 2000 Server Single ClientWindows 2000 Server Configuration Figure 83 Windows 2000 Server - AddressingTrusted Certificates Using CertificatesSelf Certificates Adding a Trusted Certificate Adding a Self CertificateSubject Name Hash AlgorithmSignature Algorithm Signature Key LengthCRLs To add a New CRLFigure 90 Upload CRL 4. Upload the CRL fileClick the Browse button, and locate the CRL file on your PC Select the file. The name will appear in the File to Upload fieldChapter Other Features and SettingsOverview Config File Data - Config File ScreenPC Database PC Database ScreenData - PC Database Screen Other Features and SettingsButtons Data - PC Database Admin Screen PC Database AdminPC Properties IP Address ButtonsRemote Administration Data - Remote Administration ScreenRemote Administration To connect from a remote PC via the InternetRouting OverviewRouting Screen Open Routing and Remote AccessEnable RIP Data - Routing ScreenFigure 95 Routing Screen Static RoutingConfiguring Other Routers on your LAN Local RouterOther Routers on the Local LAN ButtonsStatic Routing - Example For Router As Default RouteFor Router Bs Default Route For the TW100-BRV204 s Routing TableUpgrade Firmware To perform the Firmware UpgradeUPNP Data - UPNP ScreenUPnP ertiesTroubleshooting General ProblemsInternet Access Appendix AIt is a security risk, since the firewall is disabled FCC Statement TW100-BRV204Appendix B Specifications CE Marking Warning FCC Radiation Exposure Statement

Example 3: Windows 2000 Server to VPN Gateway

Figure 82: TW100-BRV204 to Windows 2000 Server

Single Client

Server/Gateway