User manual SMC SMC7004WFW - SOFTWARE GUIDE

Barricade Plus Configuration Guide The Information in this guide applies to the: BarricadeTM Plus Cable/DSL Broadband Router (SMC7004FW) BarricadeTM Plus Wireless Cable/DSL Broadband Router (SMC7004WFW) q q VPN IPSEC & PPTP NEXT ­ Table of Contents BACK - Introduction NEXT ­ Installing VPN Protocols This document will guide you through configuring and implementing secure, remote connections to your LAN using the VPN functionality of your Barricade Plus Cable/DSL Broadband Router. This document is divided into the following sections: 1. Installing Virtual Private Network Protocols r r r r Windows Windows Windows Windows 95/98/98SE Me NT 2000/XP 2. 3. 4. 5. 6. Configuring your MS PPTP Client to Connect to the Barricade Plus Configuring your Barricade Plus as a PPTP Client Configuring your Barricade Plus as a PPTP Server Barricade Plus IPSec Tunnel Configuration Glossary BACK - Table of Contents NEXT ­ Windows 95/98/98SE SECTION 1: Installing VPN Protocols This section outlines the process for installing the necessary VPN protocols on the following operating systems: § § § § Windows Windows Windows Windows 95/98/98SE Me NT 2000/XP Before you begin this configuration process please verify that you have the following: § Original (Licensed) Windows CD BACK - Installing VPN Protocols Windows 95/98/98SE NEXT ­ Windows Me Step 1: Click on the [Start] button, then choose [Settings], then select [Control Panel]. Figure 1.0 Step 2: Locate and double-click the [Add/Remove Programs] icon. Figure 1.1 Step 3: Click on the [Windows Setup] tab and highlight the [Communication] component, then click on the [Details...] button. Figure 1.2 Step 4: In the [Communication] dialog box, verify that the following 2 options are selected: § § [Dial-Up Networking] [Virtual Private Networking] Figure 1.3 Figure 1.4 When you have verified or selected these 2 options, click the [OK] button to save the settings and close the [Communications] dialog box. If you already had these options selected, click the [Cancel] button to close the [Communications] dialog box, then click the [Cancel] button again to close the [Add / Remove Programs] dialog box. Skip to Section 2! Step 5: The [Communications] option should now be checked. Click the [OK] button to save this change and close the [Add/Remove Programs] dialog box. Figure 1.5 Step 6: If prompted, please insert your [Windows CD] to copy the required system files. Figure 1.6 Figure 1.7 Step 7: When prompted with the dialog box below, click the [Yes] button to reboot your computer and complete the installation process. Figure 1.8 BACK ­ Windows 95/98/98SE Windows Me NEXT ­ Windows NT Step 1: Click on the [Start] button, then choose [Settings], then select [Control Panel] Figure 1.0 Step 2: Locate and double-click the [Dial-Up Networking] icon. Figure 1.1 Step 3: Click on the [Windows Setup] tab and highlight the [Communication] component, then click on the [Details...] button. Figure 1.2 Step 4: In the [Communication] dialog box, verify that the following 2 options are selected: § § [Dial-Up Networking] [Virtual Private Networking] Figure 1.3 Figure 1.4 When you have verified or selected these 2 options, click the [OK] button to save the settings and close the [Communications] dialog box. If you already had these options selected, click the [Cancel] button to close the [Communications] dialog box, then click the [Cancel] button again to close the [Add / Remove Programs] dialog box. Skip to Section 2! Step 5: The [Communications] option should now be checked. Click the [OK] button to save this change and close the [Add/Remove Programs] dialog box. Figure 1.5 Step 6: If prompted, please insert your [Windows CD] to copy the required system files. Figure 1.6 Figure 1.7 Step 7: When prompted with the dialog box below, click the [Yes] button to reboot your computer and complete the installation process. Figure 1.8 BACK ­ Windows Me Windows NT NEXT ­ Windows 2000/XP Step 1: Click on the [Start] button, then choose [Settings], then select [Control Panel] Figure 1.0 Step 2: Double-click [Network]. Figure 1.1 Figure 1.2 Step 3: On the [Protocols] tab, click [Add] and select [Point-to-Point Tunneling Protocol]. Then press [OK]. Figure 1.3 Step 4: After the protocol is installed, Remote Access Service (RAS) will initialize. You must add at least one VPN port as a port in the RAS setup interface. Figure 1.4 Figure 1.5 Step 5: At this time, specify which protocols you want to run for that VPN port. You can install up to 256 VPN ports. Each VPN can be connected to a network. Make sure that at least one VPN is configured for dial-out. Figure 1.6 Step 6: Press [Close] and restart the machine when requested to do so. Figure 1.7 BACK - Windows NT Windows 2000/XP NEXT ­ Configuring the PPTP Client Windows 2000 and Windows XP already have the required VPN communication components installed. Please verify that you can connect to the Internet either through a dial-up connection or through a LAN. If you can connect to the Internet, please go to the Section 2. BACK - Windows 2000/XP NEXT ­ Windows 95/98/98SE SECTION 2: Configuring your MS PPTP Client This section outlines the process for configuring a PPTP client on the following operating systems: § § § § § Windows Windows Windows Windows Windows 95/98/98SE Me NT 2000 XP Before you begin this configuration process please verify that you have the following: § IP Address of the Barricade Plus Router you are connecting to BACK - Configuring the PPTP Client Windows 95/98/98SE Step 1: Double-click the [My Computer] icon on your Desktop. NEXT ­ Windows Me Step 2: In the [My Computer] window, locate and double-click the [Dial-Up Networking] icon to launch the [Welcome to Dial-Up Networking] wizard Figure 1.0 NOTE: If the network wizard does not prompt you, locate and click on the [Make a New Connection] icon to launch it. Step 3: Click [Next >] to start the Wizard Figure 1.1 Step 4: In the dialog box show below: § Enter a name for this VPN connection and § Verify that you have the [Microsoft VPN Adapter] selected under the [Select a device:] drop down menu Then click the [Next >] button to continue. Figure 1.2 Step 5: In the [Host name or IP Address:] text box, enter the WAN IP address of the Barricade Plus that you are connecting to and then click the [Next] button to continue. Figure 1.3 Step 6: Once you have completed the [Make New Connection] wizard, click the [Finish] button to save this configuration. Step 7: Double-click the [My Computer] icon on your Desktop. Step 8: Locate and double-click the [Dial-Up Networking] icon. Figure 1.4 Step 9: In the [Dial-Up Networking] window you will see the new VPN connection that you created. To access this connection, double-click the connection icon. Figure 1.5 Step 10: When prompted with the [Connect To] dialog box shown below, please provide and verify the following information: § Username § Password § The [VPN server:] text box has WAN IP address of the Barricade Plus you are connecting to To connect to the Barricade Plus VPN server, click the [Connect] button to initialize the VPN connection. Figure 1.6 Step 11: To verify your VPN connection, locate and double-click the connection icon that is displayed in the system tray. Once you are connected you should see two new monitor icons in the system tray, and you will be able to access the computers on the remote network as if they were on your local LAN. You can double-click on the two linked monitors to view properties of the VPN tunnel. Figure 1.7 BACK - Windows 95/98/98SE Windows Me NEXT ­ Windows NT Step 1: Double-click the [My Computer] icon on your desktop and then click the [DialUp Networking] link on the bottom left hand corner of the window. Figure 1.0 Step 2: A Welcome window should appear. Click [Next >] to continue. Figure 1.1 Step 3: If this is your first time configuring a VPN session, you will be asked to enter your area code. Please do so and press [Close] to continue. Figure 1.2 Step 4: Enter a name for the VPN connection you wish to establish and click [Next >]. (i.e. ­ Barricade VPN) Figure 1.3 Step 5: Enter the WAN IP address of the Barricade Plus you wish to connect to and click [Next >]. Figure 1.4 Step 6: You have completed the VPN client setup. Click [Finish] to exit. Step 7: Go back into [My Computer] and click on the [Dial-Up Networking] link again. You should now see the new VPN connection that you just configured. Go ahead and double-click on the name of the connection. Figure 1.5 Step 8: Enter the username and password that the Administrator of the remote network has given you. Verify that the VPN Server field has the correct WAN IP address. Then press the [Connect] button. (Note: Be sure to enter this correctly as you will NOT be able to connect without the correct login data) Once you are connected you should see two new monitor icons in the system tray, and you will be able to access the computers on the remote network as if they were on your local LAN. You can double-click on the two linked monitors to view properties of the VPN tunnel. Figure 1.6 Figure 1.7 BACK - Windows Me Windows NT NEXT ­ Windows 2000 Step 1: Double-click on the [My Computer] icon on your Desktop. Then double-click the [Dial-up Networking] icon. Figure 1.0 Step 2: If this is your first time configuring a VPN session, you will be asked to enter your area code. Please do so and press [Close] to continue. Figure 1.1 Step 3: You will also be asked to make an entry in the Phonebook. Press [OK] to continue. Figure 1.2 Step 4: Enter a name for this entry and click the [Next >] button. (i.e. ­ Barricade VPN) Figure 1.3 Step 5: Enter the WAN IP Address of the Barricade Plus that you are connecting to and click [Next >] Figure 1.4 Step 6: Press [Finish] to exit the wizard. Figure 1.5 Step 7: Now you can review the settings you configured and choose to [Dial] the PPTP Server. The [Phone number preview:] section should show the WAN IP address of the Barricade Plus you are connecting to. Press [Dial] to continue and connect. Figure 1.6 Step 8: Enter the username and password that the Administrator of the remote network has given you. Verify that the VPN Server field has the correct WAN IP address. Then press the [OK] button. (Note: Be sure to enter this correctly as you will NOT be able to connect without the correct login data) Figure 1.7 Once you are connected you should see two new monitor icons in the system tray, and you will be able to access the computers on the remote network as if they were on your local LAN. You can double-click on the two linked monitors to view properties of the VPN tunnel. Figure 1.8 BACK - Windows NT Windows 2000 NEXT ­ Windows XP Step 1: Right-click the [My Network Places] icon on your desktop and click [Properties]. Figure 1.0 Step 2: Double-click [Make New Connection]. Figure 1.1 Step 3: If this is your first time configuring a VPN session, you may be asked to enter your area code. Please do so and press [OK] to continue. Figure 1.2 Step 4: A wizard will appear. Please click [Next >] to continue. Figure 1.3 Step 5: Select the [Connect to a private network through the Internet] option and click [Next >]. Figure 1.4 Step 6: Enter the WAN IP address of the Barricade Plus that you wish to establish a connection with. Then click [Next >]. Figure 1.5 Step 7: If you would like to give other users access to this VPN, select [For all users]. Otherwise, select [Only for myself] and click [Next >] to continue. Figure 1.6 Step 8: You have completed the VPN client setup. Click [Finish] to exit. Step 9: Enter the username and password that the Administrator of the remote network has given you. Verify that the VPN Server field has the correct WAN IP address. Then press the [Connect] button. (Note: Be sure to enter this correctly as you will NOT be able to connect without the correct login data) Figure 1.7 Once you are connected you should see two new monitor icons in the system tray, and you will be able to access the computers on the remote network as if they were on your local LAN. You can double-click on the two linked monitors to view properties of the VPN tunnel. Figure 1.8 Figure 1.9 BACK - Windows 2000 Windows XP Step 1: Go into the Control Panel. NEXT ­ Barricade Plus PPTP Client Figure 1.0 Step 2: Click the [Network and Internet Connections] link. Figure 1.1 Step 3: Click the [Create a connection to the network at your workplace] link. Figure 1.2 Step 4: Select the [Virtual Private Network connection] option and click [Next >] to continue. Figure 1.3 Step 5: Enter a name for the VPN connection you wish to establish and click [Next >]. (i.e. ­ Barricade VPN) Figure 1.4 Step 6: Enter the WAN IP address of the Barricade Plus that you wish to establish a connection with. Then click [Next >]. Figure 1.5 Step 7: You have completed the VPN client setup. Click [Finish] to exit. Step 8: Go back into the [Network and Internet Connections] (see Step 2) window and click the [Network Connections] link. Figure 1.6 Step 9: You should now see the new VPN connection that you just created. Double-click on this connection. Figure 1.7 Step 10: Enter the username and password that the Administrator of the remote network has given you. Verify that the VPN Server field has the correct WAN IP address. Then press the [Connect] button. (Note: Be sure to enter this correctly as you will NOT be able to connect without the correct login data) Once you are connected you should see two new monitor icons in the system tray, and you will be able to access the computers on the remote network as if they were on your local LAN. You can double-click on the two linked monitors to view properties of the VPN tunnel. Figure 1.8 Figure 1.9 BACK - Windows XP NEXT ­ Barricade Plus PPTP Server SECTION 3: Configuring the Barricade Plus as a PPTP Client IMPORTANT NOTE: When setting up a VPN connection, your local LAN and the remote network must be on different subnets (i.e. ­ If the remote gateway/router has a LAN IP of 192.168.1.1, your Barricade Plus should be set to 192.168.x.1 where X is equal to a number between 2 and 254) Step 1: Open up your web browser and type in the IP Address of your Barricade Plus. Step 2: Enter your password to log into the router and then go into the Advanced Setup. Step 3: Click on the link for VPN on the left. Then click PPTP. Step 4: The router allows you to configure up to 20 different PPTP VPN accounts. Click the [Edit] link for the first account and then you will be able to configure the appropriate IP Addresses. Figure 1.0 Step 5: Enter the necessary data. This information is used to establish a Point-to-Point Tunnel from the Barricade Plus to another Barricade Plus or a Windows-based PPTP Server. Figure 1.1 User name: Used by the server to identify the PPTP Client Password: Used by the server to authorize the PPTP Client's request for a Tunnel Idle Time Out: When there is no activity for this amount of Idle Time, the Tunnel will be broken IP: Enter the LAN subnet of the remote network you are connecting to. (i.e. ­ If the IP's of clients on the remote network are 192.168.123.xxx, type in 192.168.123.0. The last octet must always be zero because the PPTP Client is connecting to the entire LAN subnet.) Subnet Mask: Enter the subnet mask used on the remote network (i.e. ­ 255.255.255.0) Gateway IP: Enter the WAN IP of the remote network (i.e. ­ 24.106.10.54). The last octet should not be zero in this case. Enter the full WAN IP address. Client Setting ­ PPTP Client: Check this box to enable the Barricade's PPTP Client Host: Check this box only if you are connecting to a Windows-based PPTP server (Figure 1.1 shows Host as checked. Leave this unchecked if you are simply connecting to another Barricade Plus or another VPN gateway) Auto Reconnect: Check this box if you would like the PPTP Tunnel to be automatically reestablished if the connection is broken Step 6: Once all the required fields have been filled in, press the [OK] button to continue. Then check the [Accept to Connect] box. Step 7: Scroll down to the section labeled [IP Address Pool]. Change the IP scheme to match that of the PPTP server's internal network. (i.e. ­ If the PPTP server's LAN is using an IP scheme of 192.168.2.xxx, change the IP Pool to be 192.168.2.xxx ­ 192.168.2.xxx) Also make sure that this range does not conflict with the ranges of other DHCP servers in the network. Figure 1.2 Then press the [Apply] button and your settings will be saved. Figure 1.3 Step 8: Now click the [Status] link on the left navigation bar and you should see a [Connect] and [Disconnect] button pertaining to the PPTP Client under the GATEWAY column. Figure 1.4 Step 9: Press [Connect] and the router will begin to establish a connection using the settings previously configured in the VPN | PPTP section. Once the connection is established, the information will be displayed on the STATUS page and in the SECURITY LOG as well. Figure 1.5 Once you are connected you will be able to access the computers on the remote network as if they were on your local LAN. BACK - Barricade Plus PPTP Client NEXT ­ Barricade Plus IPSec Tunnels SECTION 4: Configuring the Barricade Plus as a PPTP Server IMPORTANT NOTE: When setting up a VPN connection, your local LAN and the remote network must be on different subnets (i.e. ­ If the remote gateway/router has a LAN IP of 192.168.1.1, your Barricade Plus should be set to 192.168.x.1 where X is equal to a number between 2 and 254) Step 1: Open up your web browser and type in the IP Address of your Barricade Plus. Step 2: Enter your password to log into the router and then go into the Advanced Setup. Step 3: Click on the link for VPN on the left. Then click PPTP. Step 4: The router allows you to configure up to 20 different PPTP VPN accounts. Click the [Edit] link for the first account and then you will be able to configure the appropriate IP Addresses. Figure 1.0 Step 5: Enter the necessary data. This information is used to establish a Point-to-Point Tunnel from the Barricade Plus to another Barricade Plus or a Windows-based PPTP Client. Figure 1.1 User name: The name you want to use to identify a particular PPTP Client Password: The password you wish to use to authorize a particular PPTP Client Idle Time Out: When there is no activity for this amount of Idle Time, the Tunnel will be broken IP: Enter the LAN subnet of the remote network that will connect to this router. (i.e. ­ If the IP's of clients on the remote network are 192.168.123.xxx, type in 192.168.123.0. The last octet must always be zero because the PPTP Client is connecting to the entire LAN subnet.) Subnet Mask: Enter the subnet mask used on the remote network (i.e. ­ 255.255.255.0) Gateway IP: This value must be 0.0.0.0 when configuring the Barricade Plus as a PPTP Server Client Setting ­ PPTP Client: Leave this box unchecked when configuring a PPTP Server Host: Check this box only if you will be using a Windows-based PPTP client to connect to the Barricade Plus PPTP Server (Figure 1.1 shows Host as unchecked. Leave this unchecked if you plan to have Barricade Plus PPTP Clients connect to this server) Auto Reconnect: Check this box if you would like the PPTP Tunnel to be automatically reestablished if the connection is broken