Table of Contents CHAPTER 1 INTRODUCTION ............................................................................................. 1 Broadband VPN Gateway Features ................................................................................ 1 Package Contents .............................................................................................................. 3 Physical Details .................................................................................................................. 4 CHAPTER 2 INSTALLATION ............................................................................................... 6 Requirements ..................................................................................................................... 6 Procedure ........................................................................................................................... 6 CHAPTER 3 SETUP ................................................................................................................ 8 Overview ............................................................................................................................ 8 Configuration Program .................................................................................................... 9 WAN Port Configuration ............................................................................................... 12 Port Options Screen ........................................................................................................ 14 LAN Port Screen ............................................................................................................. 16 Load/Backup Screen ....................................................................................................... 18 CHAPTER 4 PC CONFIGURATION .................................................................................. 20 Overview .......................................................................................................................... 20 Windows Clients .............................................................................................................. 20 Macintosh Clients ............................................................................................................ 33 Linux Clients .................................................................................................................... 33 Other Unix Systems ......................................................................................................... 33 CHAPTER 5 OPERATION AND STATUS ......................................................................... 34 Operation ......................................................................................................................... 34 Status Screen .................................................................................................................... 34 Port Status........................................................................................................................ 37 Event Log ......................................................................................................................... 38 URL Log ........................................................................................................................... 39 System Log ....................................................................................................................... 40 CHAPTER 6 INTERNET FEATURES ................................................................................ 41 Overview .......................................................................................................................... 41 Address List ..................................................................................................................... 42 PC Database ..................................................................................................................... 43 URL Filter ........................................................................................................................ 45 Dynamic DNS................................................................................................................... 47 Static Routing .................................................................................................................. 49 QoS ................................................................................................................................... 54 CHAPTER 7 SECURITY CONFIGURATION ................................................................... 56 Overview .......................................................................................................................... 56 Rules ................................................................................................................................. 56 Schedules .......................................................................................................................... 60 Firewall -- Log ................................................................................................................. 61 Services ............................................................................................................................. 63 Security............................................................................................................................. 64 DMZ ................................................................................................................................. 66 E-Mail ............................................................................................................................... 67 CHAPTER 8 VPN (IPSEC).................................................................................................... 69 Overview .......................................................................................................................... 69 Common VPN Situations ................................................................................................ 71 VPN Configuration ......................................................................................................... 73 i VPN Examples ................................................................................................................. 81 Certificates ....................................................................................................................... 99 CRL ................................................................................................................................ 103 VPN Status ..................................................................................................................... 104 Add Certificate .................................................................... Error! Bookmark not defined. Get Certificate ID ................................................................ Error! Bookmark not defined. CHAPTER 9 MICROSOFT VPN ....................................................................................... 105 Overview ........................................................................................................................ 105 Server Setup ................................................................................................................... 105 User ................................................................................................................................. 106 Status Log Screen .......................................................................................................... 108 Windows Client Setup ................................................................................................... 109 CHAPTER 10 OTHER FEATURES & SETTINGS ......................................................... 117 Overview ........................................................................................................................ 117 Diagnostics ..................................................................................................................... 118 Password Screen ............................................................................................................ 120 Web Management ......................................................................................................... 121 Firmware Upgrade ........................................................................................................ 123 Backup/Restore.............................................................................................................. 124 APPENDIX A TROUBLESHOOTING .............................................................................. 126 Overview ........................................................................................................................ 126 General Problems .......................................................................................................... 126 Internet Access............................................................................................................... 126 APPENDIX B SPECIFICATIONS...................................................................................... 128 Broadband VPN Gateway ............................................................................................ 128 FCC Statement .............................................................................................................. 128 CE Marking Warning ................................................................................................... 129 P/N: 956YH10001 Copyright © 2007. All Rights Reserved. Document Version:1.0 All trademarks and trade names are the properties of their respective owners. ii Chapter 1 Introduction This Chapter provides an overview of the Broadband VPN Gateway's features and capabilities. 1 Congratulations on the purchase of your new Broadband VPN Gateway. The Broadband VPN Gateway is a multi-function device providing the following services: · · · Shared Broadband Internet Access for all LAN users. VPN Gateway for IPSec VPN connections to remote PCs or sites. 4-Port Switching Hub for 10BaseT or 100BaseT connections. Figure 1: Broadband VPN Gateway Broadband VPN Gateway Features The Broadband VPN Gateway incorporates many advanced features, carefully designed to provide sophisticated functions while being easy to use. Internet Access Features · Shared Internet Access. All users on the LAN or WAN can access the Internet through the Broadband VPN Gateway, using only a single external IP Address. The local (invalid) IP Addresses are hidden from external sources. This process is called NAT (Network Address Translation). · Dual WAN Support. Dual 10/100 WAN ports let you have a second link to your ISP, providing failover protection. You can use both WAN ports simultaneously, and let the router balance the requirements between them for maximum bandwidth efficiency. · Fixed or Dynamic IP Address. On the Internet (WAN port) connection, the Broadband VPN Gateway supports both Dynamic IP Address (IP Address is allocated on connection) and Fixed IP Address. Advanced Internet Functions · · Communication Applications. Support for Internet communication applications, such as interactive Games, Telephony, and Conferencing applications, which are often difficult to use when behind a Firewall, is included. Special Internet Applications. Applications which use non-standard connections or port numbers are normally blocked by the Firewall. The ability to define and allow such applications is provided, to enable such applications to be used normally. 1 Broadband VPN Gateway User Guide · · Virtual Servers. This feature allows Internet users to access Internet servers on your LAN. The required setup is quick and easy. Multi-DMZ. For each WAN (Internet) IP address allocated to you, one (1) PC on your local LAN can be configured to allow unrestricted 2-way communication with Servers or individual users on the Internet. This provides the ability to run programs which are incompatible with Firewalls. Address List. Use address list to block access to undesirable Web sites by LAN users. Up to 40 addresses can be listed. IM/P2P Control. The IM/P2P control allows you to better manage your employees' network activities and prevent possible misuse of IM and P2P applications. · · · · · · URL Filter. Use the URL Filter to block access to undesirable Web sites by LAN users. Internet Access Log. See which Internet connections have been made. VPN Pass through Support. PCs with VPN (Virtual Private Networking) software using PPTP, L2TP and IPSec are transparently supported - no configuration is required. QoS Support Quality of Service can be used to handle packets so that more important connections receive priority over less important one. LAN Features · · 4-Port Switching Hub. The Broadband VPN ...