Manuals / TRENDnet / Computer Equipment / Network Router

TRENDnet VPN Firewall Router manual Internet Features, Advanced Internet Screen, Chapter, Overview

Models: VPN Firewall Router TW100-BRV204

1 123

Page 45

Chapter 6	6
Chapter 6
Internet Features

This Chapter explains when and how to use the TW100-BRV204's "Internet" Features.

Overview

The following advanced features are covered in this Chapter:

•Advanced Internet

•Communication Applications

•Special Applications

•DMZ

•URL filter

•Dynamic DNS

•Virtual Servers

•Options

Advanced Internet Screen

Figure 27: Internet Screen

This screen allows configuration of all advanced features relating to Internet access.

•Communication Applications

•Special Applications

•DMZ

•URL filter

Page 45

Image 45

TRENDnet VPN Firewall Router, TW100-BRV204 manual Internet Features, Advanced Internet Screen, Chapter, Overview

Contents

Cable/DSL Internet Access 4-Port Switching Hub TW100-BRV204 VPN Firewall RouterUsers Guide Table of Contents P/N 9560KZ0101 Copyright  2003. All Rights Reserved Document Version Internet Access Features TW100-BRV204 FeaturesIntroduction ChapterConfiguration & Management LAN FeaturesSecurity Features Advanced Internet FunctionsVPN Gateway Features Package ContentsFront-mounted LEDs Physical DetailsRear Panel Procedure InstallationRequirements This Chapter covers the physical installation of the TW100-BRV2044. Power Up 3. Connect WAN Cable5. Check the LEDs Overview SetupThis Chapter provides Setup details of the TW100-BRV204 ChapterPreparation Configuration ProgramUsing your Web Browser Figure 5 Password DialogIf you cant connect Common Connection Types Setup WizardType DetailsBig Pond Cable Australia Other Modems e.g. Broadband WirelessSingTel RAS TypeNavigation & Data Input Home ScreenData - WAN Port Screen WAN Port Configuration ScreenIdentification IP AddressInternet Options screen LoginMAC Address MAC AddressAlso called Network Adapter Address or Physical Address. This is a Data - LAN Screen LAN ScreenTCP/IP ButtonsUsing the TW100-BRV204 s DHCP Server DHCPUsing another DHCP Server To Configure your PCs to use DHCPTCP/IP Settings - Overview PC ConfigurationWindows Clients ChapterChecking TCP/IP Settings - Windows 9x/ME Using DHCPUsing Specify an IP Address PC Configuration Figure 11 Gateway Tab Win 95/98Figure 12 DNS Tab Win 95/98 Checking TCP/IP Settings - Windows NT4.0 Figure 13 Windows NT4.0 - TCP/IPTW100-BRV204 User Guide Obtain an IP address from a DHCP Server Specify an IP AddressFigure 14 Windows NT4.0 - IP Address Figure 15 - Windows NT4.0 - Add Gateway Figure 16 Windows NT4.0 - DNS PC ConfigurationChecking TCP/IP Settings - Windows Figure 17 Network Configuration Win1. Select Control Panel - Network and Dial-up Connection Figure 18 TCP/IP Properties Win Checking TCP/IP Settings - Windows XP Figure 19 Network Configuration Windows XP1. Select Control Panel - Network Connection Using DHCP Using a fixed IP Address Use the following IP AddressFigure 20 TCP/IP Properties Windows XP Accessing AOL Internet Access1. Select Start Menu - Settings - Control Panel - Internet Options 2. Select Set up or change your Internet ConnectionLinux Clients Macintosh ClientsOther Unix Systems Fixed IP AddressOperation Operation and StatusStatus Screen ChapterInternet Data - Status ScreenSystem ButtonsData - PPPoE Screen Connection Status - PPPoEConnection Connection LogButtons Connection Log MessagesConnect DisconnectData - PPTP Screen Connection Status - PPTPConnection Connection LogConnection Status - Telstra Big Pond Data - Telstra Big Pond ScreenConnection Data - SingTel RAS Screen Connection Details - SingTel RASConnection Log ButtonsButtons Network MaskData - Fixed/Dynamic IP address Screen Connection Details - Fixed/Dynamic IP AddressInternet ButtonsRefresh RenewAdvanced Internet Screen Internet FeaturesChapter OverviewSpecial Applications Communication ApplicationsSpecial Applications Screen Communication ApplicationsData - Special Applications Screen Using a Special ApplicationFigure 28 Special Applications Screen CheckboxURL Filter Data - URL Filter Screen URL Filter ScreenFilter Strings ButtonsDynamic DNS Domain Name Server Dynamic DNS ScreenDDNS Service DDNS Data PasswordUser Name Domain NameIP Address seen by Internet Users Virtual ServersVirtual Servers Screen Connecting to the Virtual ServersDefining your own Virtual Servers ServersOptions Backup DNSData - Options Screen Admin Login Security ConfigurationFigure 34 Admin Login Screen ChapterSecurity Configuration Figure 35 Password DialogAccess Control Screen Access ControlIf required, you can also define your own Services GroupServices Internet AccessCancel Members ButtonGroup Members Screen Access Control LogPCs not assigned to any group will be in the Default group PCs deleted from any other Group will be added to the Default groupFirewall Rules Firewall Rules ScreenRule List For each rule, the following data is shown Data - Define Firewall Rule Screen Define Firewall RuleServices Dest IPAction Logs Enable LogsData - Logs Screen Timezone E-Mail LogsSyslog Server Security Options Data - Security Options ScreenSPI Firewall Respond to OptionsICMP Allow IPsecDefine Schedule Screen SchedulingData - Services Screen ServicesAvailable Services Add New ServiceAdd a new entry to the Service list, using the data shown in the Add Delete the selected service from the listNew Service area on screen Clear the Add New Service area, ready for entering data for a newIPSec ChapterOverview Policies VPN ConfigurationRemote VPN address Traffic SelectorCommon VPN Situations VPN Pass-throughClient PC to VPN Gateway Figure 46 Connecting 2 VPN Gateways Connecting 2 LANs via VPNVPN Policies Screen VPN ConfigurationVPN List OperationsEnable/Disable Adding a New PolicyMove CopyGeneral Settings Local IP addresses Manual Key Exchange Remote IP addressestion is enabled ESP AuthenticationManually assigned Keys KeysFigure 52 VPN Wizard - IKE Phase IKE PhaseIKE Phase 1 IKE SA AuthenticationIKE Phase 2 IPsec SA Figure 53 VPN Wizard - IKE PhaseAH Authentication IKE SA Life TimeFor IKE, configuration is now complete Examples Example 1 Connecting 2 TW100-BRV204sSetting LAN A GateIPSec SA Parameters TW100-BRV204 Configuration Example 2 Windows 2000/XP Client to LANSetting ValueFigure 56 Windows 2000/XP - Local Security Settings Windows Client ConfigurationDeselect Activate the default response rule. Click Next IPSec SA ParametersFigure 58 IP Filter List Figure 57 Windows 2000/XP - Policy PropertiesFigure 59 Filter Properties Addressing 8. Enter the Source IP address and the Destination IP addressFigure 60 New Rule Properties IP Filter List Figure 61 New Rule Properties Filter Action Figure 62 Require Security Properties12. Select Negotiate security this selects IKE, then click Add Windows Setting VPN SettingFigure 63 Modify Security Method Figure 64 Require Security PropertiesFigure 66 Authentication Method Figure 65 Tunnel SettingFigure 68 Windows 2000/XP Client to Broadband VPN Gateway Figure 67 Windows 2000/XP Client to Broadband VPN GatewayFigure 69 Filter Properties Addressing 22. Click OK to save your changes, then CloseFigure 70 Filter List Figure 72 Security Methods Figure 71 Filter ActionFigure 73 Modify Security Method Figure 74 Tunnel SettingFigure 76 DUT to Win2K Properties Figure 75 Authentication Method31. Select the General tab TW100-BRV204 User GuideFigure 77 Properties - General Tab Figure 78 Key Exchange Settings32. Click the Advanced button to see the screen below 33. Click the Methods button to see the screen belowFigure 79 Key Exchange Security Methods Configuration is now completeFigure 80 IKE Security Algorithms Figure 81 Windows 2000/XP Client to Broadband VPN GatewaySetting Example 3 Windows 2000 Server to VPN GatewayFigure 82 TW100-BRV204 to Windows 2000 Server Single ClientFigure 83 Windows 2000 Server - Addressing Windows 2000 Server ConfigurationUsing Certificates Trusted CertificatesSelf Certificates Adding a Self Certificate Adding a Trusted CertificateHash Algorithm Subject NameSignature Algorithm Signature Key LengthTo add a New CRL CRLs4. Upload the CRL file Figure 90 Upload CRLClick the Browse button, and locate the CRL file on your PC Select the file. The name will appear in the File to Upload fieldOther Features and Settings ChapterOverview Data - Config File Screen Config FilePC Database Screen PC DatabaseOther Features and Settings Data - PC Database ScreenButtons PC Database Admin Data - PC Database Admin ScreenPC Properties Buttons IP AddressData - Remote Administration Screen Remote AdministrationRemote Administration To connect from a remote PC via the InternetOverview RoutingRouting Screen Open Routing and Remote AccessData - Routing Screen Enable RIPFigure 95 Routing Screen Static RoutingLocal Router Configuring Other Routers on your LANOther Routers on the Local LAN ButtonsFor Router As Default Route Static Routing - ExampleFor Router Bs Default Route For the TW100-BRV204 s Routing TableTo perform the Firmware Upgrade Upgrade FirmwareData - UPNP Screen UPNPUPnP ertiesGeneral Problems TroubleshootingInternet Access Appendix AIt is a security risk, since the firewall is disabled TW100-BRV204 FCC StatementAppendix B Specifications FCC Radiation Exposure Statement CE Marking Warning