Manuals / TRENDnet / Computer Equipment / Network Router

TRENDnet VPN Firewall Router, TW100-BRV204 manual Other Features and Settings, Chapter, Overview

Models: VPN Firewall Router TW100-BRV204

1 123

Download 123 pages 41.73 Kb

Page 107

Chapter 9	9
Chapter 9
Other Features and Settings

This Chapter explains the screens and settings available via the "Other" menu.

Overview

Normally, it is not necessary to use these screens, or change any settings. These screens and settings are provided to deal with non-standard situations, or to provide additional options for advanced users.

The screens available are:

Config File	Backup or restore the configuration file for the Broadband Router. This
	file contains all the configuration data.
PC Database	This is the list of PCs shown when you select the "DMZ PC", "Virtual
	Server", or "Internet Application". This database is maintained automati-
	cally, but you can add and delete entries for PCs which use a Fixed
	(Static) IP Address.
Remote	This feature allows you to manage the TW100-BRV204 via the Internet.
Administration
Routing	Only required if your LAN has other Routers or Gateways.
Upgrade	The firmware (software) in the TW100-BRV204 can be upgraded using
Firmware	your Web Browser.
UPNP	UPnP (Universal Plug and Play) allows automatic discovery and con-
	figuration of the TW100-BRV204

104

Image 107

TRENDnet VPN Firewall Router, TW100-BRV204 manual Other Features and Settings, Chapter, Overview

Contents

Users Guide Cable/DSL Internet Access 4-Port Switching HubTW100-BRV204 VPN Firewall Router Table of Contents P/N 9560KZ0101 Copyright  2003. All Rights Reserved Document Version Chapter TW100-BRV204 FeaturesInternet Access Features IntroductionAdvanced Internet Functions LAN FeaturesConfiguration & Management Security FeaturesVPN Gateway Features Package ContentsFront-mounted LEDs Physical DetailsRear Panel This Chapter covers the physical installation of the TW100-BRV204 InstallationProcedure Requirements5. Check the LEDs 4. Power Up3. Connect WAN Cable Chapter SetupOverview This Chapter provides Setup details of the TW100-BRV204Preparation Configuration ProgramIf you cant connect Using your Web BrowserFigure 5 Password Dialog Details Setup WizardCommon Connection Types TypeType Other Modems e.g. Broadband WirelessBig Pond Cable Australia SingTel RASNavigation & Data Input Home ScreenIP Address WAN Port Configuration ScreenData - WAN Port Screen IdentificationInternet Options screen LoginAlso called Network Adapter Address or Physical Address. This is a MAC AddressMAC Address Buttons LAN ScreenData - LAN Screen TCP/IPTo Configure your PCs to use DHCP DHCPUsing the TW100-BRV204 s DHCP Server Using another DHCP ServerChapter PC ConfigurationTCP/IP Settings - Overview Windows ClientsUsing Specify an IP Address Checking TCP/IP Settings - Windows 9x/MEUsing DHCP Figure 12 DNS Tab Win 95/98 PC ConfigurationFigure 11 Gateway Tab Win 95/98 TW100-BRV204 User Guide Checking TCP/IP Settings - Windows NT4.0Figure 13 Windows NT4.0 - TCP/IP Figure 14 Windows NT4.0 - IP Address Obtain an IP address from a DHCP ServerSpecify an IP Address Figure 15 - Windows NT4.0 - Add Gateway Figure 16 Windows NT4.0 - DNS PC Configuration1. Select Control Panel - Network and Dial-up Connection Checking TCP/IP Settings - WindowsFigure 17 Network Configuration Win Figure 18 TCP/IP Properties Win 1. Select Control Panel - Network Connection Checking TCP/IP Settings - Windows XPFigure 19 Network Configuration Windows XP Figure 20 TCP/IP Properties Windows XP Using DHCPUsing a fixed IP Address Use the following IP Address 2. Select Set up or change your Internet Connection Internet AccessAccessing AOL 1. Select Start Menu - Settings - Control Panel - Internet OptionsFixed IP Address Macintosh ClientsLinux Clients Other Unix SystemsChapter Operation and StatusOperation Status ScreenButtons Data - Status ScreenInternet SystemConnection Log Connection Status - PPPoEData - PPPoE Screen ConnectionDisconnect Connection Log MessagesButtons ConnectConnection Log Connection Status - PPTPData - PPTP Screen ConnectionConnection Connection Status - Telstra Big PondData - Telstra Big Pond Screen Buttons Connection Details - SingTel RASData - SingTel RAS Screen Connection LogButtons Network MaskButtons Connection Details - Fixed/Dynamic IP AddressData - Fixed/Dynamic IP address Screen InternetRefresh RenewOverview Internet FeaturesAdvanced Internet Screen ChapterCommunication Applications Communication ApplicationsSpecial Applications Special Applications ScreenCheckbox Using a Special ApplicationData - Special Applications Screen Figure 28 Special Applications ScreenURL Filter Buttons URL Filter ScreenData - URL Filter Screen Filter StringsDDNS Service Dynamic DNS Domain Name ServerDynamic DNS Screen Domain Name PasswordDDNS Data User NameIP Address seen by Internet Users Virtual ServersServers Connecting to the Virtual ServersVirtual Servers Screen Defining your own Virtual ServersData - Options Screen OptionsBackup DNS Chapter Security ConfigurationAdmin Login Figure 34 Admin Login ScreenSecurity Configuration Figure 35 Password DialogGroup Access ControlAccess Control Screen If required, you can also define your own ServicesMembers Button Internet AccessServices CancelPCs deleted from any other Group will be added to the Default group Access Control LogGroup Members Screen PCs not assigned to any group will be in the Default groupRule List Firewall RulesFirewall Rules Screen For each rule, the following data is shown Data - Define Firewall Rule Screen Define Firewall RuleAction ServicesDest IP Data - Logs Screen LogsEnable Logs Syslog Server TimezoneE-Mail Logs SPI Firewall Security OptionsData - Security Options Screen Allow IPsec OptionsRespond to ICMPDefine Schedule Screen SchedulingAdd New Service ServicesData - Services Screen Available ServicesClear the Add New Service area, ready for entering data for a new Delete the selected service from the listAdd a new entry to the Service list, using the data shown in the Add New Service area on screenOverview IPSecChapter Traffic Selector VPN ConfigurationPolicies Remote VPN addressClient PC to VPN Gateway Common VPN SituationsVPN Pass-through Figure 46 Connecting 2 VPN Gateways Connecting 2 LANs via VPNOperations VPN ConfigurationVPN Policies Screen VPN ListCopy Adding a New PolicyEnable/Disable MoveGeneral Settings Local IP addresses Manual Key Exchange Remote IP addressesKeys ESP Authenticationtion is enabled Manually assigned KeysAuthentication IKE PhaseFigure 52 VPN Wizard - IKE Phase IKE Phase 1 IKE SAIKE SA Life Time Figure 53 VPN Wizard - IKE PhaseIKE Phase 2 IPsec SA AH AuthenticationFor IKE, configuration is now complete LAN A Gate Example 1 Connecting 2 TW100-BRV204sExamples SettingIPSec SA Parameters Value Example 2 Windows 2000/XP Client to LANTW100-BRV204 Configuration SettingIPSec SA Parameters Windows Client ConfigurationFigure 56 Windows 2000/XP - Local Security Settings Deselect Activate the default response rule. Click NextFigure 58 IP Filter List Figure 57 Windows 2000/XP - Policy PropertiesFigure 60 New Rule Properties IP Filter List Figure 59 Filter Properties Addressing8. Enter the Source IP address and the Destination IP address 12. Select Negotiate security this selects IKE, then click Add Figure 61 New Rule Properties Filter ActionFigure 62 Require Security Properties Figure 64 Require Security Properties VPN SettingWindows Setting Figure 63 Modify Security MethodFigure 66 Authentication Method Figure 65 Tunnel SettingFigure 68 Windows 2000/XP Client to Broadband VPN Gateway Figure 67 Windows 2000/XP Client to Broadband VPN GatewayFigure 70 Filter List Figure 69 Filter Properties Addressing22. Click OK to save your changes, then Close Figure 72 Security Methods Figure 71 Filter ActionFigure 73 Modify Security Method Figure 74 Tunnel SettingTW100-BRV204 User Guide Figure 75 Authentication MethodFigure 76 DUT to Win2K Properties 31. Select the General tab33. Click the Methods button to see the screen below Figure 78 Key Exchange SettingsFigure 77 Properties - General Tab 32. Click the Advanced button to see the screen belowFigure 81 Windows 2000/XP Client to Broadband VPN Gateway Configuration is now completeFigure 79 Key Exchange Security Methods Figure 80 IKE Security AlgorithmsSingle Client Example 3 Windows 2000 Server to VPN GatewaySetting Figure 82 TW100-BRV204 to Windows 2000 ServerFigure 83 Windows 2000 Server - Addressing Windows 2000 Server ConfigurationSelf Certificates Using CertificatesTrusted Certificates Adding a Self Certificate Adding a Trusted CertificateSignature Key Length Subject NameHash Algorithm Signature AlgorithmTo add a New CRL CRLsSelect the file. The name will appear in the File to Upload field Figure 90 Upload CRL4. Upload the CRL file Click the Browse button, and locate the CRL file on your PCOverview Other Features and SettingsChapter Data - Config File Screen Config FilePC Database Screen PC DatabaseButtons Other Features and SettingsData - PC Database Screen PC Properties PC Database AdminData - PC Database Admin Screen Buttons IP AddressTo connect from a remote PC via the Internet Remote AdministrationData - Remote Administration Screen Remote AdministrationOpen Routing and Remote Access RoutingOverview Routing ScreenStatic Routing Enable RIPData - Routing Screen Figure 95 Routing ScreenButtons Configuring Other Routers on your LANLocal Router Other Routers on the Local LANFor the TW100-BRV204 s Routing Table Static Routing - ExampleFor Router As Default Route For Router Bs Default RouteTo perform the Firmware Upgrade Upgrade Firmwareerties UPNPData - UPNP Screen UPnPAppendix A TroubleshootingGeneral Problems Internet AccessIt is a security risk, since the firewall is disabled Appendix B Specifications TW100-BRV204FCC Statement FCC Radiation Exposure Statement CE Marking Warning