Manuals / TRENDnet / Computer Equipment / Network Router

TRENDnet TW100-BRV204, VPN Firewall Router manual Package Contents, VPN Gateway Features

Models: VPN Firewall Router TW100-BRV204

1 123

Download 123 pages 41.73 Kb

Page 6

VPN Gateway Features

Introduction

•Protection against DoS attacks. DoS (Denial of Service) attacks can flood your Internet connection with invalid packets and connection requests, using so much band- width and so many resources that Internet access becomes unavailable. The TW100- BRV204 incorporates protection against DoS attacks.

•Rule-based Policy Firewall. To provide additional protection against malicious pack- ets, you can define your own firewall rules. This can also be used to control the Internet services available to LAN users.

VPN Gateway Features

•IPSec.. Support for IPSec standards, including IKE and certificates.

•5 Tunnels. Up to 5 VPN tunnels can be created.

•High performance. High performance encryption engine maintains high throughput even when using 3DES.

Package Contents

The following items should be included:

•The TW100-BRV204 Unit

•Power Adapter

•Quick Installation Guide

•CD-ROM containing the on-line manual.

If any of the above items are damaged or missing, please contact your dealer immediately.

3

Image 6

TRENDnet TW100-BRV204, VPN Firewall Router manual Package Contents, VPN Gateway Features

Contents

Cable/DSL Internet Access 4-Port Switching Hub TW100-BRV204 VPN Firewall RouterUsers Guide Table of Contents P/N 9560KZ0101 Copyright  2003. All Rights Reserved Document Version Introduction TW100-BRV204 FeaturesInternet Access Features ChapterSecurity Features LAN FeaturesConfiguration & Management Advanced Internet FunctionsPackage Contents VPN Gateway FeaturesPhysical Details Front-mounted LEDsRear Panel Requirements InstallationProcedure This Chapter covers the physical installation of the TW100-BRV2044. Power Up 3. Connect WAN Cable5. Check the LEDs This Chapter provides Setup details of the TW100-BRV204 SetupOverview ChapterConfiguration Program PreparationUsing your Web Browser Figure 5 Password DialogIf you cant connect Type Setup WizardCommon Connection Types DetailsSingTel RAS Other Modems e.g. Broadband WirelessBig Pond Cable Australia TypeHome Screen Navigation & Data InputIdentification WAN Port Configuration ScreenData - WAN Port Screen IP AddressLogin Internet Options screenMAC Address MAC AddressAlso called Network Adapter Address or Physical Address. This is a TCP/IP LAN ScreenData - LAN Screen ButtonsUsing another DHCP Server DHCPUsing the TW100-BRV204 s DHCP Server To Configure your PCs to use DHCPWindows Clients PC ConfigurationTCP/IP Settings - Overview ChapterChecking TCP/IP Settings - Windows 9x/ME Using DHCPUsing Specify an IP Address PC Configuration Figure 11 Gateway Tab Win 95/98Figure 12 DNS Tab Win 95/98 Checking TCP/IP Settings - Windows NT4.0 Figure 13 Windows NT4.0 - TCP/IPTW100-BRV204 User Guide Obtain an IP address from a DHCP Server Specify an IP AddressFigure 14 Windows NT4.0 - IP Address Figure 15 - Windows NT4.0 - Add Gateway PC Configuration Figure 16 Windows NT4.0 - DNSChecking TCP/IP Settings - Windows Figure 17 Network Configuration Win1. Select Control Panel - Network and Dial-up Connection Figure 18 TCP/IP Properties Win Checking TCP/IP Settings - Windows XP Figure 19 Network Configuration Windows XP1. Select Control Panel - Network Connection Using DHCP Using a fixed IP Address Use the following IP AddressFigure 20 TCP/IP Properties Windows XP 1. Select Start Menu - Settings - Control Panel - Internet Options Internet AccessAccessing AOL 2. Select Set up or change your Internet ConnectionOther Unix Systems Macintosh ClientsLinux Clients Fixed IP AddressStatus Screen Operation and StatusOperation ChapterSystem Data - Status ScreenInternet ButtonsConnection Connection Status - PPPoEData - PPPoE Screen Connection LogConnect Connection Log MessagesButtons DisconnectConnection Connection Status - PPTPData - PPTP Screen Connection LogConnection Status - Telstra Big Pond Data - Telstra Big Pond ScreenConnection Connection Log Connection Details - SingTel RASData - SingTel RAS Screen ButtonsNetwork Mask ButtonsInternet Connection Details - Fixed/Dynamic IP AddressData - Fixed/Dynamic IP address Screen ButtonsRenew RefreshChapter Internet FeaturesAdvanced Internet Screen OverviewSpecial Applications Screen Communication ApplicationsSpecial Applications Communication ApplicationsFigure 28 Special Applications Screen Using a Special ApplicationData - Special Applications Screen CheckboxURL Filter Filter Strings URL Filter ScreenData - URL Filter Screen ButtonsDynamic DNS Domain Name Server Dynamic DNS ScreenDDNS Service User Name PasswordDDNS Data Domain NameVirtual Servers IP Address seen by Internet UsersDefining your own Virtual Servers Connecting to the Virtual ServersVirtual Servers Screen ServersOptions Backup DNSData - Options Screen Figure 34 Admin Login Screen Security ConfigurationAdmin Login ChapterFigure 35 Password Dialog Security ConfigurationIf required, you can also define your own Services Access ControlAccess Control Screen GroupCancel Internet AccessServices Members ButtonPCs not assigned to any group will be in the Default group Access Control LogGroup Members Screen PCs deleted from any other Group will be added to the Default groupFirewall Rules Firewall Rules ScreenRule List For each rule, the following data is shown Define Firewall Rule Data - Define Firewall Rule ScreenServices Dest IPAction Logs Enable LogsData - Logs Screen Timezone E-Mail LogsSyslog Server Security Options Data - Security Options ScreenSPI Firewall ICMP OptionsRespond to Allow IPsecScheduling Define Schedule ScreenAvailable Services ServicesData - Services Screen Add New ServiceNew Service area on screen Delete the selected service from the listAdd a new entry to the Service list, using the data shown in the Add Clear the Add New Service area, ready for entering data for a newIPSec ChapterOverview Remote VPN address VPN ConfigurationPolicies Traffic SelectorCommon VPN Situations VPN Pass-throughClient PC to VPN Gateway Connecting 2 LANs via VPN Figure 46 Connecting 2 VPN GatewaysVPN List VPN ConfigurationVPN Policies Screen OperationsMove Adding a New PolicyEnable/Disable CopyGeneral Settings Local IP addresses Remote IP addresses Manual Key ExchangeManually assigned Keys ESP Authenticationtion is enabled KeysIKE Phase 1 IKE SA IKE PhaseFigure 52 VPN Wizard - IKE Phase AuthenticationAH Authentication Figure 53 VPN Wizard - IKE PhaseIKE Phase 2 IPsec SA IKE SA Life TimeFor IKE, configuration is now complete Setting Example 1 Connecting 2 TW100-BRV204sExamples LAN A GateIPSec SA Parameters Setting Example 2 Windows 2000/XP Client to LANTW100-BRV204 Configuration ValueDeselect Activate the default response rule. Click Next Windows Client ConfigurationFigure 56 Windows 2000/XP - Local Security Settings IPSec SA ParametersFigure 57 Windows 2000/XP - Policy Properties Figure 58 IP Filter ListFigure 59 Filter Properties Addressing 8. Enter the Source IP address and the Destination IP addressFigure 60 New Rule Properties IP Filter List Figure 61 New Rule Properties Filter Action Figure 62 Require Security Properties12. Select Negotiate security this selects IKE, then click Add Figure 63 Modify Security Method VPN SettingWindows Setting Figure 64 Require Security PropertiesFigure 65 Tunnel Setting Figure 66 Authentication MethodFigure 67 Windows 2000/XP Client to Broadband VPN Gateway Figure 68 Windows 2000/XP Client to Broadband VPN GatewayFigure 69 Filter Properties Addressing 22. Click OK to save your changes, then CloseFigure 70 Filter List Figure 71 Filter Action Figure 72 Security MethodsFigure 74 Tunnel Setting Figure 73 Modify Security Method31. Select the General tab Figure 75 Authentication MethodFigure 76 DUT to Win2K Properties TW100-BRV204 User Guide32. Click the Advanced button to see the screen below Figure 78 Key Exchange SettingsFigure 77 Properties - General Tab 33. Click the Methods button to see the screen belowFigure 80 IKE Security Algorithms Configuration is now completeFigure 79 Key Exchange Security Methods Figure 81 Windows 2000/XP Client to Broadband VPN GatewayFigure 82 TW100-BRV204 to Windows 2000 Server Example 3 Windows 2000 Server to VPN GatewaySetting Single ClientWindows 2000 Server Configuration Figure 83 Windows 2000 Server - AddressingUsing Certificates Trusted CertificatesSelf Certificates Adding a Trusted Certificate Adding a Self CertificateSignature Algorithm Subject NameHash Algorithm Signature Key LengthCRLs To add a New CRLClick the Browse button, and locate the CRL file on your PC Figure 90 Upload CRL4. Upload the CRL file Select the file. The name will appear in the File to Upload fieldOther Features and Settings ChapterOverview Config File Data - Config File ScreenPC Database PC Database ScreenOther Features and Settings Data - PC Database ScreenButtons PC Database Admin Data - PC Database Admin ScreenPC Properties IP Address ButtonsRemote Administration Remote AdministrationData - Remote Administration Screen To connect from a remote PC via the InternetRouting Screen RoutingOverview Open Routing and Remote AccessFigure 95 Routing Screen Enable RIPData - Routing Screen Static RoutingOther Routers on the Local LAN Configuring Other Routers on your LANLocal Router ButtonsFor Router Bs Default Route Static Routing - ExampleFor Router As Default Route For the TW100-BRV204 s Routing TableUpgrade Firmware To perform the Firmware UpgradeUPnP UPNPData - UPNP Screen ertiesInternet Access TroubleshootingGeneral Problems Appendix AIt is a security risk, since the firewall is disabled TW100-BRV204 FCC StatementAppendix B Specifications CE Marking Warning FCC Radiation Exposure Statement