Manuals / TRENDnet / Computer Equipment / Network Router

TRENDnet VPN Firewall Router, TW100-BRV204 manual PC Database Screen

Models: VPN Firewall Router TW100-BRV204

1 123

Download 123 pages 41.73 Kb

Page 109

Image 109

TW100-BRV204 User Guide

PC Database

The PC Database is used whenever you need to select a PC (e.g. for the "DMZ" PC). It elimi- nates the need to enter IP addresses. Also, you do not need to use fixed IP addresses on your LAN.

PC Database Screen

An example PC Database screen is shown below.

Figure 92: PC Database

•PCs which are "DHCP Clients" are automatically added to the database, and updated as required.

•By default, non-Server versions of Windows act as "DHCP Clients"; this setting is called "Obtain an IP Address automatically".

•The TW100-BRV204 uses the "Hardware Address" to identify each PC, not the name or IP address. The "Hardware Address" can only change if you change the PC's network card or adapter.

•This system means you do NOT need to use Fixed (static) IP addresses on your LAN. However, you can add PCs using Fixed (static) IP Addresses to the PC database if re- quired.

106

Page 109

Image 109

TRENDnet VPN Firewall Router, TW100-BRV204 manual PC Database Screen

Contents

TW100-BRV204 VPN Firewall Router Cable/DSL Internet Access 4-Port Switching HubUsers Guide Table of Contents P/N 9560KZ0101 Copyright  2003. All Rights Reserved Document Version Internet Access Features TW100-BRV204 FeaturesIntroduction ChapterConfiguration & Management LAN FeaturesSecurity Features Advanced Internet FunctionsVPN Gateway Features Package ContentsFront-mounted LEDs Physical DetailsRear Panel Procedure InstallationRequirements This Chapter covers the physical installation of the TW100-BRV2043. Connect WAN Cable 4. Power Up5. Check the LEDs Overview SetupThis Chapter provides Setup details of the TW100-BRV204 ChapterPreparation Configuration ProgramFigure 5 Password Dialog Using your Web BrowserIf you cant connect Common Connection Types Setup WizardType DetailsBig Pond Cable Australia Other Modems e.g. Broadband WirelessSingTel RAS TypeNavigation & Data Input Home ScreenData - WAN Port Screen WAN Port Configuration ScreenIdentification IP AddressInternet Options screen LoginMAC Address MAC AddressAlso called Network Adapter Address or Physical Address. This is a Data - LAN Screen LAN ScreenTCP/IP ButtonsUsing the TW100-BRV204 s DHCP Server DHCPUsing another DHCP Server To Configure your PCs to use DHCPTCP/IP Settings - Overview PC ConfigurationWindows Clients ChapterUsing DHCP Checking TCP/IP Settings - Windows 9x/MEUsing Specify an IP Address Figure 11 Gateway Tab Win 95/98 PC ConfigurationFigure 12 DNS Tab Win 95/98 Figure 13 Windows NT4.0 - TCP/IP Checking TCP/IP Settings - Windows NT4.0TW100-BRV204 User Guide Specify an IP Address Obtain an IP address from a DHCP ServerFigure 14 Windows NT4.0 - IP Address Figure 15 - Windows NT4.0 - Add Gateway Figure 16 Windows NT4.0 - DNS PC ConfigurationFigure 17 Network Configuration Win Checking TCP/IP Settings - Windows1. Select Control Panel - Network and Dial-up Connection Figure 18 TCP/IP Properties Win Figure 19 Network Configuration Windows XP Checking TCP/IP Settings - Windows XP1. Select Control Panel - Network Connection Using a fixed IP Address Use the following IP Address Using DHCPFigure 20 TCP/IP Properties Windows XP Accessing AOL Internet Access1. Select Start Menu - Settings - Control Panel - Internet Options 2. Select Set up or change your Internet ConnectionLinux Clients Macintosh ClientsOther Unix Systems Fixed IP AddressOperation Operation and StatusStatus Screen ChapterInternet Data - Status ScreenSystem ButtonsData - PPPoE Screen Connection Status - PPPoEConnection Connection LogButtons Connection Log MessagesConnect DisconnectData - PPTP Screen Connection Status - PPTPConnection Connection LogData - Telstra Big Pond Screen Connection Status - Telstra Big PondConnection Data - SingTel RAS Screen Connection Details - SingTel RASConnection Log ButtonsButtons Network MaskData - Fixed/Dynamic IP address Screen Connection Details - Fixed/Dynamic IP AddressInternet ButtonsRefresh RenewAdvanced Internet Screen Internet FeaturesChapter OverviewSpecial Applications Communication ApplicationsSpecial Applications Screen Communication ApplicationsData - Special Applications Screen Using a Special ApplicationFigure 28 Special Applications Screen CheckboxURL Filter Data - URL Filter Screen URL Filter ScreenFilter Strings ButtonsDynamic DNS Screen Dynamic DNS Domain Name ServerDDNS Service DDNS Data PasswordUser Name Domain NameIP Address seen by Internet Users Virtual ServersVirtual Servers Screen Connecting to the Virtual ServersDefining your own Virtual Servers ServersBackup DNS OptionsData - Options Screen Admin Login Security ConfigurationFigure 34 Admin Login Screen ChapterSecurity Configuration Figure 35 Password DialogAccess Control Screen Access ControlIf required, you can also define your own Services GroupServices Internet AccessCancel Members ButtonGroup Members Screen Access Control LogPCs not assigned to any group will be in the Default group PCs deleted from any other Group will be added to the Default groupFirewall Rules Screen Firewall RulesRule List For each rule, the following data is shown Data - Define Firewall Rule Screen Define Firewall RuleDest IP ServicesAction Enable Logs LogsData - Logs Screen E-Mail Logs TimezoneSyslog Server Data - Security Options Screen Security OptionsSPI Firewall Respond to OptionsICMP Allow IPsecDefine Schedule Screen SchedulingData - Services Screen ServicesAvailable Services Add New ServiceAdd a new entry to the Service list, using the data shown in the Add Delete the selected service from the listNew Service area on screen Clear the Add New Service area, ready for entering data for a newChapter IPSecOverview Policies VPN ConfigurationRemote VPN address Traffic SelectorVPN Pass-through Common VPN SituationsClient PC to VPN Gateway Figure 46 Connecting 2 VPN Gateways Connecting 2 LANs via VPNVPN Policies Screen VPN ConfigurationVPN List OperationsEnable/Disable Adding a New PolicyMove CopyGeneral Settings Local IP addresses Manual Key Exchange Remote IP addressestion is enabled ESP AuthenticationManually assigned Keys KeysFigure 52 VPN Wizard - IKE Phase IKE PhaseIKE Phase 1 IKE SA AuthenticationIKE Phase 2 IPsec SA Figure 53 VPN Wizard - IKE PhaseAH Authentication IKE SA Life TimeFor IKE, configuration is now complete Examples Example 1 Connecting 2 TW100-BRV204sSetting LAN A GateIPSec SA Parameters TW100-BRV204 Configuration Example 2 Windows 2000/XP Client to LANSetting ValueFigure 56 Windows 2000/XP - Local Security Settings Windows Client ConfigurationDeselect Activate the default response rule. Click Next IPSec SA ParametersFigure 58 IP Filter List Figure 57 Windows 2000/XP - Policy Properties8. Enter the Source IP address and the Destination IP address Figure 59 Filter Properties AddressingFigure 60 New Rule Properties IP Filter List Figure 62 Require Security Properties Figure 61 New Rule Properties Filter Action12. Select Negotiate security this selects IKE, then click Add Windows Setting VPN SettingFigure 63 Modify Security Method Figure 64 Require Security PropertiesFigure 66 Authentication Method Figure 65 Tunnel SettingFigure 68 Windows 2000/XP Client to Broadband VPN Gateway Figure 67 Windows 2000/XP Client to Broadband VPN Gateway22. Click OK to save your changes, then Close Figure 69 Filter Properties AddressingFigure 70 Filter List Figure 72 Security Methods Figure 71 Filter ActionFigure 73 Modify Security Method Figure 74 Tunnel SettingFigure 76 DUT to Win2K Properties Figure 75 Authentication Method31. Select the General tab TW100-BRV204 User GuideFigure 77 Properties - General Tab Figure 78 Key Exchange Settings32. Click the Advanced button to see the screen below 33. Click the Methods button to see the screen belowFigure 79 Key Exchange Security Methods Configuration is now completeFigure 80 IKE Security Algorithms Figure 81 Windows 2000/XP Client to Broadband VPN GatewaySetting Example 3 Windows 2000 Server to VPN GatewayFigure 82 TW100-BRV204 to Windows 2000 Server Single ClientFigure 83 Windows 2000 Server - Addressing Windows 2000 Server ConfigurationTrusted Certificates Using CertificatesSelf Certificates Adding a Self Certificate Adding a Trusted CertificateHash Algorithm Subject NameSignature Algorithm Signature Key LengthTo add a New CRL CRLs4. Upload the CRL file Figure 90 Upload CRLClick the Browse button, and locate the CRL file on your PC Select the file. The name will appear in the File to Upload fieldChapter Other Features and SettingsOverview Data - Config File Screen Config FilePC Database Screen PC DatabaseData - PC Database Screen Other Features and SettingsButtons Data - PC Database Admin Screen PC Database AdminPC Properties Buttons IP AddressData - Remote Administration Screen Remote AdministrationRemote Administration To connect from a remote PC via the InternetOverview RoutingRouting Screen Open Routing and Remote AccessData - Routing Screen Enable RIPFigure 95 Routing Screen Static RoutingLocal Router Configuring Other Routers on your LANOther Routers on the Local LAN ButtonsFor Router As Default Route Static Routing - ExampleFor Router Bs Default Route For the TW100-BRV204 s Routing TableTo perform the Firmware Upgrade Upgrade FirmwareData - UPNP Screen UPNPUPnP ertiesGeneral Problems TroubleshootingInternet Access Appendix AIt is a security risk, since the firewall is disabled FCC Statement TW100-BRV204Appendix B Specifications FCC Radiation Exposure Statement CE Marking Warning