Table of Contents CHAPTER 1 INTRODUCTION ............................................................................................. 1 TW100-BRV304 Features................................................................................................. 1 Package Contents .............................................................................................................. 3 Physical Details .................................................................................................................. 4 CHAPTER 2 INSTALLATION ............................................................................................... 7 Requirements ..................................................................................................................... 7 Procedure ........................................................................................................................... 7 CHAPTER 3 SETUP ................................................................................................................ 9 Overview ............................................................................................................................ 9 Configuration Program .................................................................................................. 10 Setup Wizard ................................................................................................................... 13 LAN Screen ...................................................................................................................... 16 CHAPTER 4 PC CONFIGURATION .................................................................................. 18 Overview .......................................................................................................................... 18 Windows Clients .............................................................................................................. 18 Macintosh Clients ............................................................................................................ 32 Linux Clients .................................................................................................................... 32 Other Unix Systems ......................................................................................................... 32 CHAPTER 5 OPERATION AND STATUS ......................................................................... 33 Operation ......................................................................................................................... 33 Status Screen .................................................................................................................... 33 Connection Status - PPPoE ............................................................................................ 34 Connection Status - PPTP .............................................................................................. 37 Connection Status - Telstra Big Pond............................................................................ 38 Connection Details - SingTel RAS ................................................................................. 39 Connection Details - Fixed/Dynamic IP Address ......................................................... 41 CHAPTER 6 INTERNET FEATURES ................................................................................ 43 Overview .......................................................................................................................... 43 WAN Port Configuration ............................................................................................... 44 Advanced Internet ........................................................................................................... 46 Dynamic DNS (Domain Name Server) .......................................................................... 50 Virtual Servers................................................................................................................. 52 Options ............................................................................................................................. 54 CHAPTER 7 SECURITY CONFIGURATION ................................................................... 55 Overview .......................................................................................................................... 55 Admin Login .................................................................................................................... 55 Access Control ................................................................................................................. 57 Firewall Rules .................................................................................................................. 61 Logs................................................................................................................................... 65 E-mail ............................................................................................................................... 67 Security Options .............................................................................................................. 69 Scheduling ........................................................................................................................ 71 Services ............................................................................................................................. 72 i CHAPTER 8 VPN (IPSEC).................................................................................................... 73 Overview .......................................................................................................................... 73 Common VPN Situations ................................................................................................ 75 VPN Configuration ......................................................................................................... 77 VPN Examples ................................................................................................................. 87 Certificates ..................................................................................................................... 105 CRLs ............................................................................................................................... 109 Status .............................................................................................................................. 109 CHAPTER 9 MICROSOFT VPN ....................................................................................... 111 Overview ........................................................................................................................ 111 Server Setup ................................................................................................................... 111 Client Database .............................................................................................................. 112 Status Screen .................................................................................................................. 114 Windows Client Setup ................................................................................................... 115 CHAPTER 10 OTHER FEATURES & SETTINGS ......................................................... 123 Overview ........................................................................................................................ 123 Config File ...................................................................................................................... 124 Network Diagnostics ..................................................................................................... 125 PC Database ................................................................................................................... 126 Remote Administration................................................................................................. 130 Routing ........................................................................................................................... 132 Upgrade Firmware ........................................................................................................ 137 UPnP ............................................................................................................................... 138 APPENDIX A TROUBLESHOOTING .............................................................................. 139 Overview ........................................................................................................................ 139 General Problems .......................................................................................................... 139 Internet Access............................................................................................................... 139 APPENDIX B SPECIFICATIONS...................................................................................... 141 TW100-BRV304 ............................................................................................................ 141 FCC Statement .............................................................................................................. 141 CE Marking Warning ................................................................................................... 142 P/N: 9560J20137 Copyright © 2004. All Rights Reserved. Document Version: 2.2 All trademarks and trade names are the properties of their respective owners. ii Chapter 1 Introduction This Chapter provides an overview of the TW100-BRV304's features and capabilities. 1 Congratulations on the purchase of your new TW100-BRV304. The TW100-BRV304 is a multi-function device providing the following services: · · · Shared Broadband Internet Access for all LAN users. VPN Gateway for IPSec VPN connections to remote PCs or sites. 3-Port Switching Hub for 10BaseT or 100BaseT connections. Figure 1: TW100-BRV304 TW100-BRV304 Features The TW100-BRV304 incorporates many advanced features, carefully designed to provide sophisticated functions while being easy to use. Internet Access Features · Shared Internet Access. All users on the LAN or WLAN can access the Internet through the TW100-BRV304, using only a single external IP Address. The local (invalid) IP Addresses are hidden from external sources. This process is called NAT (Network Address Translation). DSL & Cable Modem Support. The TW100-BRV304 has a 100BaseT Ethernet port for connecting a DSL or Cable Modem. All popular DSL and Cable Modems are supported. SingTel RAS and Big Pond (Australia) login support is also included. · · PPPoE, PPTP, SingTel RAS and Telstra Big Pond Support. The Internet (WAN port) connection supports PPPoE (PPP over Ethernet), PPTP (Peer-to-Peer Tunneling Protocol), SingTel RAS and Telstra Big Pond (Australia), as well as "Direct Connection" type services. 1 TW100-BRV304 User's Guide · Fixed or Dynamic IP Address. On the Internet (WAN port) connection, the TW100BRV304 supports both Dynamic IP Address (IP Address is allocated on connection) and Fixed IP Address. Advanced Internet Functions · Communication Applications. Support for Internet communication applications, such as interactive Games, Telephony, and Conferencing applications, which are often difficult to use when behind a Firewall, is included. Special Internet Applications. Applications which use non-standard connections or port numbers are normally blocked by the Firewall. The ability to define and allow such applications is provided, to enable such applications to be used normally. · · · Virtual Servers. This feature allows Internet users to access Internet servers on your LAN. The required setup is quick and easy. Multi-DMZ. For each WAN (Internet) IP address allocated to you, one (1) PC on your local LAN can be configured to allow unrestricted 2-way communication with Servers or individual users on the Internet. This provides the ability to run programs which are incompatible with Firewalls. Physical DMZ Port. PCs connected to the DMZ port are effectively isolated from your LAN, while connected to the Internet. This provides additional security for your LAN while allowing your Servers to be accessed from the Internet. URL Filter. Use the URL Filter to block access to undesirable Web sites by LAN users. Internet Access Log. See which Internet connections have been made. VPN Pass through Support. PCs with VPN (Virtual Private Networking) software using PPTP, L2TP and IPSec are transparently supported - no configuration is required. · · · · LAN Features · · 3-Port Switching Hub. The TW100-BRV304 incorporates a 3-port 10/100BaseT switching hub, making it easy to create or extend your LAN. DHCP Server Support. Dynamic Host Configuration Protocol provides a dynamic IP address to PCs and other devices upon ...