Manuals / TRENDnet / Computer Equipment / Network Router

TRENDnet VPN Firewall Router manual Virtual Servers Screen, Defining your own Virtual Servers

Models: VPN Firewall Router TW100-BRV204

1 123

Download 123 pages 41.73 Kb

Page 53

Virtual Servers Screen

TW100-BRV204 User Guide

Virtual Servers Screen

The Virtual Servers screen is reached by the Virtual Servers link on the Internet menu. An example screen is shown below.

Figure 32: Virtual Servers Screen

This screen lists a number of pre-defined Servers,. providing a quick and convenient method to set up the common server types.

Data - Virtual Servers Screen

Servers

Servers	This lists a number of pre-defined Servers, plus any Servers you
	have defined. Details of the selected Server are shown in the
	"Properties" area.

Properties
Enable	Use this to Enable or Disable support for this Server, as required.
	• If Enabled, any incoming connections will be forwarded to the
	selected PC.
	• If Disabled, any incoming connection attempts will be blocked.

PC (Server)	Select the PC for this Server. The PC must be running the appro-
	priate Server software.

Defining your own Virtual Servers

If the type of Server you wish to use is not listed on the Virtual Servers screen, you can use the Firewall Rules to allow particular incoming traffic and forward it to a specified PC (Server).

Connecting to the Virtual Servers

Once configured, anyone on the Internet can connect to your Virtual Servers. They must use the Internet IP Address (the IP Address allocated to you by your ISP).

e.g.

http://203.70.212.52

ftp://203.70.212.52

50

Image 53

TRENDnet VPN Firewall Router Virtual Servers Screen, Defining your own Virtual Servers, Connecting to the Virtual Servers

Contents

Users Guide Cable/DSL Internet Access 4-Port Switching HubTW100-BRV204 VPN Firewall Router Table of Contents P/N 9560KZ0101 Copyright  2003. All Rights Reserved Document Version Internet Access Features TW100-BRV204 FeaturesIntroduction ChapterConfiguration & Management LAN FeaturesSecurity Features Advanced Internet FunctionsVPN Gateway Features Package ContentsFront-mounted LEDs Physical DetailsRear Panel Procedure InstallationRequirements This Chapter covers the physical installation of the TW100-BRV2045. Check the LEDs 4. Power Up3. Connect WAN Cable Overview SetupThis Chapter provides Setup details of the TW100-BRV204 ChapterPreparation Configuration ProgramIf you cant connect Using your Web BrowserFigure 5 Password Dialog Common Connection Types Setup WizardType DetailsBig Pond Cable Australia Other Modems e.g. Broadband WirelessSingTel RAS TypeNavigation & Data Input Home ScreenData - WAN Port Screen WAN Port Configuration ScreenIdentification IP AddressInternet Options screen LoginAlso called Network Adapter Address or Physical Address. This is a MAC AddressMAC Address Data - LAN Screen LAN ScreenTCP/IP ButtonsUsing the TW100-BRV204 s DHCP Server DHCPUsing another DHCP Server To Configure your PCs to use DHCPTCP/IP Settings - Overview PC ConfigurationWindows Clients ChapterUsing Specify an IP Address Checking TCP/IP Settings - Windows 9x/MEUsing DHCP Figure 12 DNS Tab Win 95/98 PC ConfigurationFigure 11 Gateway Tab Win 95/98 TW100-BRV204 User Guide Checking TCP/IP Settings - Windows NT4.0Figure 13 Windows NT4.0 - TCP/IP Figure 14 Windows NT4.0 - IP Address Obtain an IP address from a DHCP ServerSpecify an IP Address Figure 15 - Windows NT4.0 - Add Gateway Figure 16 Windows NT4.0 - DNS PC Configuration1. Select Control Panel - Network and Dial-up Connection Checking TCP/IP Settings - WindowsFigure 17 Network Configuration Win Figure 18 TCP/IP Properties Win 1. Select Control Panel - Network Connection Checking TCP/IP Settings - Windows XPFigure 19 Network Configuration Windows XP Figure 20 TCP/IP Properties Windows XP Using DHCPUsing a fixed IP Address Use the following IP Address Accessing AOL Internet Access1. Select Start Menu - Settings - Control Panel - Internet Options 2. Select Set up or change your Internet ConnectionLinux Clients Macintosh ClientsOther Unix Systems Fixed IP AddressOperation Operation and StatusStatus Screen ChapterInternet Data - Status ScreenSystem ButtonsData - PPPoE Screen Connection Status - PPPoEConnection Connection LogButtons Connection Log MessagesConnect DisconnectData - PPTP Screen Connection Status - PPTPConnection Connection LogConnection Connection Status - Telstra Big PondData - Telstra Big Pond Screen Data - SingTel RAS Screen Connection Details - SingTel RASConnection Log ButtonsButtons Network MaskData - Fixed/Dynamic IP address Screen Connection Details - Fixed/Dynamic IP AddressInternet ButtonsRefresh RenewAdvanced Internet Screen Internet FeaturesChapter OverviewSpecial Applications Communication ApplicationsSpecial Applications Screen Communication ApplicationsData - Special Applications Screen Using a Special ApplicationFigure 28 Special Applications Screen CheckboxURL Filter Data - URL Filter Screen URL Filter ScreenFilter Strings ButtonsDDNS Service Dynamic DNS Domain Name ServerDynamic DNS Screen DDNS Data PasswordUser Name Domain NameIP Address seen by Internet Users Virtual ServersVirtual Servers Screen Connecting to the Virtual ServersDefining your own Virtual Servers ServersData - Options Screen OptionsBackup DNS Admin Login Security ConfigurationFigure 34 Admin Login Screen ChapterSecurity Configuration Figure 35 Password DialogAccess Control Screen Access ControlIf required, you can also define your own Services GroupServices Internet AccessCancel Members ButtonGroup Members Screen Access Control LogPCs not assigned to any group will be in the Default group PCs deleted from any other Group will be added to the Default groupRule List Firewall RulesFirewall Rules Screen For each rule, the following data is shown Data - Define Firewall Rule Screen Define Firewall RuleAction ServicesDest IP Data - Logs Screen LogsEnable Logs Syslog Server TimezoneE-Mail Logs SPI Firewall Security OptionsData - Security Options Screen Respond to OptionsICMP Allow IPsecDefine Schedule Screen SchedulingData - Services Screen ServicesAvailable Services Add New ServiceAdd a new entry to the Service list, using the data shown in the Add Delete the selected service from the listNew Service area on screen Clear the Add New Service area, ready for entering data for a newOverview IPSecChapter Policies VPN ConfigurationRemote VPN address Traffic SelectorClient PC to VPN Gateway Common VPN SituationsVPN Pass-through Figure 46 Connecting 2 VPN Gateways Connecting 2 LANs via VPNVPN Policies Screen VPN ConfigurationVPN List OperationsEnable/Disable Adding a New PolicyMove CopyGeneral Settings Local IP addresses Manual Key Exchange Remote IP addressestion is enabled ESP AuthenticationManually assigned Keys KeysFigure 52 VPN Wizard - IKE Phase IKE PhaseIKE Phase 1 IKE SA AuthenticationIKE Phase 2 IPsec SA Figure 53 VPN Wizard - IKE PhaseAH Authentication IKE SA Life TimeFor IKE, configuration is now complete Examples Example 1 Connecting 2 TW100-BRV204sSetting LAN A GateIPSec SA Parameters TW100-BRV204 Configuration Example 2 Windows 2000/XP Client to LANSetting ValueFigure 56 Windows 2000/XP - Local Security Settings Windows Client ConfigurationDeselect Activate the default response rule. Click Next IPSec SA ParametersFigure 58 IP Filter List Figure 57 Windows 2000/XP - Policy PropertiesFigure 60 New Rule Properties IP Filter List Figure 59 Filter Properties Addressing8. Enter the Source IP address and the Destination IP address 12. Select Negotiate security this selects IKE, then click Add Figure 61 New Rule Properties Filter ActionFigure 62 Require Security Properties Windows Setting VPN SettingFigure 63 Modify Security Method Figure 64 Require Security PropertiesFigure 66 Authentication Method Figure 65 Tunnel SettingFigure 68 Windows 2000/XP Client to Broadband VPN Gateway Figure 67 Windows 2000/XP Client to Broadband VPN GatewayFigure 70 Filter List Figure 69 Filter Properties Addressing22. Click OK to save your changes, then Close Figure 72 Security Methods Figure 71 Filter ActionFigure 73 Modify Security Method Figure 74 Tunnel SettingFigure 76 DUT to Win2K Properties Figure 75 Authentication Method31. Select the General tab TW100-BRV204 User GuideFigure 77 Properties - General Tab Figure 78 Key Exchange Settings32. Click the Advanced button to see the screen below 33. Click the Methods button to see the screen belowFigure 79 Key Exchange Security Methods Configuration is now completeFigure 80 IKE Security Algorithms Figure 81 Windows 2000/XP Client to Broadband VPN GatewaySetting Example 3 Windows 2000 Server to VPN GatewayFigure 82 TW100-BRV204 to Windows 2000 Server Single ClientFigure 83 Windows 2000 Server - Addressing Windows 2000 Server ConfigurationSelf Certificates Using CertificatesTrusted Certificates Adding a Self Certificate Adding a Trusted CertificateHash Algorithm Subject NameSignature Algorithm Signature Key LengthTo add a New CRL CRLs4. Upload the CRL file Figure 90 Upload CRLClick the Browse button, and locate the CRL file on your PC Select the file. The name will appear in the File to Upload fieldOverview Other Features and SettingsChapter Data - Config File Screen Config FilePC Database Screen PC DatabaseButtons Other Features and SettingsData - PC Database Screen PC Properties PC Database AdminData - PC Database Admin Screen Buttons IP AddressData - Remote Administration Screen Remote AdministrationRemote Administration To connect from a remote PC via the InternetOverview RoutingRouting Screen Open Routing and Remote AccessData - Routing Screen Enable RIPFigure 95 Routing Screen Static RoutingLocal Router Configuring Other Routers on your LANOther Routers on the Local LAN ButtonsFor Router As Default Route Static Routing - ExampleFor Router Bs Default Route For the TW100-BRV204 s Routing TableTo perform the Firmware Upgrade Upgrade FirmwareData - UPNP Screen UPNPUPnP ertiesGeneral Problems TroubleshootingInternet Access Appendix AIt is a security risk, since the firewall is disabled Appendix B Specifications TW100-BRV204FCC Statement FCC Radiation Exposure Statement CE Marking Warning