Manuals / TRENDnet / Computer Equipment / Network Router

TRENDnet VPN Firewall Router, TW100-BRV204 Security Configuration, Admin Login, Chapter, Overview

Models: VPN Firewall Router TW100-BRV204

1 123

Page 55

Chapter 7	7
Chapter 7
Security Configuration

This Chapter explains the settings available via the security configuration section of the "Security" menu.

Overview

The following advanced configurations are provided.

•Admin Login

•Access Control

•Firewall Rules

•Logs

•Security Options

•Scheduling

•Services

Admin Login

The Admin Login screen allows you to assign a user name and password to the TW100- BRV204.

Figure 34: Admin Login Screen

1.The default login name is "admin". Change this to the desired value.

2.The default password is blank (no password). Enter the desired password in the New Password and Verify Password fields.

3.Save your changes.

You will see a login prompt when you connect to the TW100-BRV204, as shown below.

Page 55

Image 55

TRENDnet VPN Firewall Router, TW100-BRV204 manual Security Configuration, Chapter, Overview, Admin Login Screen

Contents

TW100-BRV204 VPN Firewall Router Cable/DSL Internet Access 4-Port Switching HubUsers Guide Table of Contents P/N 9560KZ0101 Copyright  2003. All Rights Reserved Document Version Chapter TW100-BRV204 FeaturesInternet Access Features IntroductionAdvanced Internet Functions LAN FeaturesConfiguration & Management Security FeaturesVPN Gateway Features Package ContentsFront-mounted LEDs Physical DetailsRear Panel This Chapter covers the physical installation of the TW100-BRV204 InstallationProcedure Requirements3. Connect WAN Cable 4. Power Up5. Check the LEDs Chapter SetupOverview This Chapter provides Setup details of the TW100-BRV204Preparation Configuration ProgramFigure 5 Password Dialog Using your Web BrowserIf you cant connect Details Setup WizardCommon Connection Types TypeType Other Modems e.g. Broadband WirelessBig Pond Cable Australia SingTel RASNavigation & Data Input Home ScreenIP Address WAN Port Configuration ScreenData - WAN Port Screen IdentificationInternet Options screen LoginMAC Address MAC AddressAlso called Network Adapter Address or Physical Address. This is a Buttons LAN ScreenData - LAN Screen TCP/IPTo Configure your PCs to use DHCP DHCPUsing the TW100-BRV204 s DHCP Server Using another DHCP ServerChapter PC ConfigurationTCP/IP Settings - Overview Windows ClientsUsing DHCP Checking TCP/IP Settings - Windows 9x/MEUsing Specify an IP Address Figure 11 Gateway Tab Win 95/98 PC ConfigurationFigure 12 DNS Tab Win 95/98 Figure 13 Windows NT4.0 - TCP/IP Checking TCP/IP Settings - Windows NT4.0TW100-BRV204 User Guide Specify an IP Address Obtain an IP address from a DHCP ServerFigure 14 Windows NT4.0 - IP Address Figure 15 - Windows NT4.0 - Add Gateway Figure 16 Windows NT4.0 - DNS PC ConfigurationFigure 17 Network Configuration Win Checking TCP/IP Settings - Windows1. Select Control Panel - Network and Dial-up Connection Figure 18 TCP/IP Properties Win Figure 19 Network Configuration Windows XP Checking TCP/IP Settings - Windows XP1. Select Control Panel - Network Connection Using a fixed IP Address Use the following IP Address Using DHCPFigure 20 TCP/IP Properties Windows XP 2. Select Set up or change your Internet Connection Internet AccessAccessing AOL 1. Select Start Menu - Settings - Control Panel - Internet OptionsFixed IP Address Macintosh ClientsLinux Clients Other Unix SystemsChapter Operation and StatusOperation Status ScreenButtons Data - Status ScreenInternet SystemConnection Log Connection Status - PPPoEData - PPPoE Screen ConnectionDisconnect Connection Log MessagesButtons ConnectConnection Log Connection Status - PPTPData - PPTP Screen ConnectionData - Telstra Big Pond Screen Connection Status - Telstra Big PondConnection Buttons Connection Details - SingTel RASData - SingTel RAS Screen Connection LogButtons Network MaskButtons Connection Details - Fixed/Dynamic IP AddressData - Fixed/Dynamic IP address Screen InternetRefresh RenewOverview Internet FeaturesAdvanced Internet Screen ChapterCommunication Applications Communication ApplicationsSpecial Applications Special Applications ScreenCheckbox Using a Special ApplicationData - Special Applications Screen Figure 28 Special Applications ScreenURL Filter Buttons URL Filter ScreenData - URL Filter Screen Filter StringsDynamic DNS Screen Dynamic DNS Domain Name ServerDDNS Service Domain Name PasswordDDNS Data User NameIP Address seen by Internet Users Virtual ServersServers Connecting to the Virtual ServersVirtual Servers Screen Defining your own Virtual ServersBackup DNS OptionsData - Options Screen Chapter Security ConfigurationAdmin Login Figure 34 Admin Login ScreenSecurity Configuration Figure 35 Password DialogGroup Access ControlAccess Control Screen If required, you can also define your own ServicesMembers Button Internet AccessServices CancelPCs deleted from any other Group will be added to the Default group Access Control LogGroup Members Screen PCs not assigned to any group will be in the Default groupFirewall Rules Screen Firewall RulesRule List For each rule, the following data is shown Data - Define Firewall Rule Screen Define Firewall RuleDest IP ServicesAction Enable Logs LogsData - Logs Screen E-Mail Logs TimezoneSyslog Server Data - Security Options Screen Security OptionsSPI Firewall Allow IPsec OptionsRespond to ICMPDefine Schedule Screen SchedulingAdd New Service ServicesData - Services Screen Available ServicesClear the Add New Service area, ready for entering data for a new Delete the selected service from the listAdd a new entry to the Service list, using the data shown in the Add New Service area on screenChapter IPSecOverview Traffic Selector VPN ConfigurationPolicies Remote VPN addressVPN Pass-through Common VPN SituationsClient PC to VPN Gateway Figure 46 Connecting 2 VPN Gateways Connecting 2 LANs via VPNOperations VPN ConfigurationVPN Policies Screen VPN ListCopy Adding a New PolicyEnable/Disable MoveGeneral Settings Local IP addresses Manual Key Exchange Remote IP addressesKeys ESP Authenticationtion is enabled Manually assigned KeysAuthentication IKE PhaseFigure 52 VPN Wizard - IKE Phase IKE Phase 1 IKE SAIKE SA Life Time Figure 53 VPN Wizard - IKE PhaseIKE Phase 2 IPsec SA AH AuthenticationFor IKE, configuration is now complete LAN A Gate Example 1 Connecting 2 TW100-BRV204sExamples SettingIPSec SA Parameters Value Example 2 Windows 2000/XP Client to LANTW100-BRV204 Configuration SettingIPSec SA Parameters Windows Client ConfigurationFigure 56 Windows 2000/XP - Local Security Settings Deselect Activate the default response rule. Click NextFigure 58 IP Filter List Figure 57 Windows 2000/XP - Policy Properties8. Enter the Source IP address and the Destination IP address Figure 59 Filter Properties AddressingFigure 60 New Rule Properties IP Filter List Figure 62 Require Security Properties Figure 61 New Rule Properties Filter Action12. Select Negotiate security this selects IKE, then click Add Figure 64 Require Security Properties VPN SettingWindows Setting Figure 63 Modify Security MethodFigure 66 Authentication Method Figure 65 Tunnel SettingFigure 68 Windows 2000/XP Client to Broadband VPN Gateway Figure 67 Windows 2000/XP Client to Broadband VPN Gateway22. Click OK to save your changes, then Close Figure 69 Filter Properties AddressingFigure 70 Filter List Figure 72 Security Methods Figure 71 Filter ActionFigure 73 Modify Security Method Figure 74 Tunnel SettingTW100-BRV204 User Guide Figure 75 Authentication MethodFigure 76 DUT to Win2K Properties 31. Select the General tab33. Click the Methods button to see the screen below Figure 78 Key Exchange SettingsFigure 77 Properties - General Tab 32. Click the Advanced button to see the screen belowFigure 81 Windows 2000/XP Client to Broadband VPN Gateway Configuration is now completeFigure 79 Key Exchange Security Methods Figure 80 IKE Security AlgorithmsSingle Client Example 3 Windows 2000 Server to VPN GatewaySetting Figure 82 TW100-BRV204 to Windows 2000 ServerFigure 83 Windows 2000 Server - Addressing Windows 2000 Server ConfigurationTrusted Certificates Using CertificatesSelf Certificates Adding a Self Certificate Adding a Trusted CertificateSignature Key Length Subject NameHash Algorithm Signature AlgorithmTo add a New CRL CRLsSelect the file. The name will appear in the File to Upload field Figure 90 Upload CRL4. Upload the CRL file Click the Browse button, and locate the CRL file on your PCChapter Other Features and SettingsOverview Data - Config File Screen Config FilePC Database Screen PC DatabaseData - PC Database Screen Other Features and SettingsButtons Data - PC Database Admin Screen PC Database AdminPC Properties Buttons IP AddressTo connect from a remote PC via the Internet Remote AdministrationData - Remote Administration Screen Remote AdministrationOpen Routing and Remote Access RoutingOverview Routing ScreenStatic Routing Enable RIPData - Routing Screen Figure 95 Routing ScreenButtons Configuring Other Routers on your LANLocal Router Other Routers on the Local LANFor the TW100-BRV204 s Routing Table Static Routing - ExampleFor Router As Default Route For Router Bs Default RouteTo perform the Firmware Upgrade Upgrade Firmwareerties UPNPData - UPNP Screen UPnPAppendix A TroubleshootingGeneral Problems Internet AccessIt is a security risk, since the firewall is disabled FCC Statement TW100-BRV204Appendix B Specifications FCC Radiation Exposure Statement CE Marking Warning