Allnet ALL1295VPN Manuel utilisateur
Dual WAN Broadband
VPN Router
ALL1295VPN
Broadband Internet Access
4-Port Switching Hub
2 WAN Ports
User's Guide
Table of Contents
CHAPTER 1 INTRODUCTION .............................................................................................1
Dual WAN Broadband VPN Router Features................................................................1
Package Contents ..............................................................................................................3
Physical Details..................................................................................................................5
CHAPTER 2 INSTALLATION...............................................................................................7
Requirements.....................................................................................................................7
Procedure...........................................................................................................................7
CHAPTER 3 SETUP ................................................................................................................9
Overview ............................................................................................................................9
Configuration Program ..................................................................................................10
WAN Port Configuration ...............................................................................................15
Port Options Screen........................................................................................................17
LAN Port Screen .............................................................................................................19
Balancing/Backup Screen...............................................................................................22
CHAPTER 4 PC CONFIGURATION..................................................................................23
Overview ..........................................................................................................................23
Windows Clients..............................................................................................................23
Macintosh Clients............................................................................................................34
Linux Clients....................................................................................................................34
Other Unix Systems.........................................................................................................34
CHAPTER 5 OPERATION AND STATUS.........................................................................35
Operation.........................................................................................................................35
Status Screen....................................................................................................................35
Port Status........................................................................................................................38
Event Log.........................................................................................................................39
URL Log...........................................................................................................................40
Syslog................................................................................................................................41
CHAPTER 6 ADVANCED FEATURES..............................................................................42
Overview ..........................................................................................................................42
Address List.....................................................................................................................42
PC Database.....................................................................................................................44
URL Filter........................................................................................................................46
Dynamic DNS...................................................................................................................48
Routing.............................................................................................................................50
QoS ...................................................................................................................................55
CHAPTER 7 SECURITY CONFIGURATION...................................................................57
Overview ..........................................................................................................................57
Rules.................................................................................................................................57
Schedule............................................................................................................................61
Firewall -- Log .................................................................................................................62
Services.............................................................................................................................64
Security.............................................................................................................................66
DMZ .................................................................................................................................68
E-Mail...............................................................................................................................69
CHAPTER 8 VPN (IPSEC)....................................................................................................71
Overview ..........................................................................................................................71
i
Common VPN Situations................................................................................................73
VPN Configuration .........................................................................................................75
VPN Examples.................................................................................................................83
Certificates.....................................................................................................................101
CRL ................................................................................................................................105
VPN Status.....................................................................................................................106
CHAPTER 9 MICROSOFT VPN .......................................................................................108
Overview ........................................................................................................................108
Server Setup...................................................................................................................108
User.................................................................................................................................109
Status Log Screen..........................................................................................................111
Windows Client Setup...................................................................................................112
CHAPTER 10 OTHER FEATURES & SETTINGS .........................................................120
Overview ........................................................................................................................120
Diagnostics.....................................................................................................................121
Password Screen............................................................................................................123
Web Management .........................................................................................................125
Firmware Upgrade........................................................................................................127
Backup/Restore..............................................................................................................128
APPENDIX A TROUBLESHOOTING..............................................................................130
Overview ........................................................................................................................130
General Problems..........................................................................................................130
Internet Access...............................................................................................................130
APPENDIX B SPECIFICATIONS......................................................................................132
Dual WAN Broadband VPN Router ...........................................................................132
FCC Statement ..............................................................................................................132
CE Marking Warning...................................................................................................133
P/N: 956YH10030
Copyright ©2007. All Rights Reserved.
Document Version:1.0
All trademarks and trade names are the properties of their respective owners.
ii
1
Chapter 1
Introduction
This Chapter provides an overview of the Dual WAN Broadband VPN
Router's features and capabilities.
Congratulations on the purchase of your new Dual WAN Broadband VPN Router. The Dual
WAN Broadband VPN Router is a multi-function device providing the following services:
• Shared Broadband Internet Access for all LAN users.
• VPN Gateway for IPSec VPN connections to remote PCs or sites.
• 4-Port Switching Hub for 10BaseT or 100BaseT connections.
Figure 1: Dual WAN Broadband VPN Router
Dual WAN Broadband VPN Router Features
The Dual WAN Broadband VPN Router incorporates many advanced features, carefully
designed to provide sophisticated functions while being easy to use.
Internet Access Features
• Shared Internet Access. All users on the LAN or WLAN can access the Internet
through the Dual WAN Broadband VPN Router, using only a single external IP Address.
The local (invalid) IP Addresses are hidden from external sources. This process is called
NAT (Network Address Translation).
• Dual WAN Support. Dual 10/100 WAN ports let you have a second link to your ISP,
providing failover protection. You can use both WAN ports simultaneously, and let the
router balance the requirements between them for maximum bandwidth efficiency.
• Fixed or Dynamic IP Address. On the Internet (WAN port) connection, the Dual
WAN Broadband VPN Router supports both Dynamic IP Address (IP Address is allocated
on connection) and Fixed IP Address.
1
Broadband VPN Gateway User Guide
Advanced Internet Functions
• Communication Applications. Support for Internet communication applications, such
as interactive Games, Telephony, and Conferencing applications, which are often difficult
to use when behind a Firewall, is included.
• Special Internet Applications. Applications which use non-standard connections or
port numbers are normally blocked by the Firewall. The ability to define and allow such
applications is provided, to enable such applications to be used normally.
• Virtual Servers. This feature allows Internet users to access Internet servers on your
LAN. The required setup is quick and easy.
• Multi-DMZ. For each WAN (Internet) IP address allocated to you, one (1) PC on your
local LAN can be configured to allow unrestricted 2-way communication with Servers or
individual users on the Internet. This provides the ability to run programs which are in-
compatible with Firewalls.
• Address List. Use address list to block access to undesirable Web sites by LAN users. Up
to 40 addresses can be listed.
• IM/P2P Control. The IM/P2P control allows you to better manage your employees’
network activities and prevent possible misuse of IM and P2P applications.
• URL Filter. Use the URL Filter to block access to undesirable Web sites by LAN users.
• Internet Access Log. See which Internet connections have been made.
• VPN Pass through Support. PCs with VPN (Virtual Private Networking) software
using PPTP, L2TP and IPSec are transparently supported - no configuration is required.
• QoS Support Quality of Service can be used to handle packets so that more important
connections receive priority over less important one.
LAN Features
• 4-Port Switching Hub. The Dual WAN Broadband VPN Router incorporates a 4-port
10/100BaseT switching hub, making it easy to create or extend your LAN.
• DHCP Server Support. Dynamic Host Configuration Protocol provides a dynamic IP
address to PCs and other devices upon request. The Dual WAN Broadband VPN Router
can act as a DHCP Server for devices on your local LAN and WLAN.
Configuration & Management
• Easy Setup. Use your WEB browser from anywhere on the LAN or WLAN for configu-
ration.
• Remote Management. The Dual WAN Broadband VPN Router can be managed from
any PC on your LAN. And, if the Internet connection exists, it can also (optionally) be
configured via the Internet.
• UPnP Support. UPnP (Universal Plug and Play) allows automatic discovery and con-
figuration of the Dual WAN Broadband VPN Router. UPnP is by supported by Windows
ME, XP, or later.
• Multi-Language Support. Multi-Language Pack facilitates the process of creating
multi-language applications. Add support for as many languages as you like.
• Configuration File Backup & Restore. You can backup (download) the Dual WAN
Broadband VPN Router's configuration file to your PC, and restore (upload) a previously-
saved configuration file to the Dual WAN Broadband VPN Router.
2
Introduction
Security Features
• Password - protected Configuration. Optional password protection is provided to
prevent unauthorized users from modifying the configuration data and settings.
• NAT Protection. An intrinsic side effect of NAT (Network Address Translation) tech-
nology is that by allowing all LAN users to share a single IP address, the location and
even the existence of each PC is hidden. From the external viewpoint, there is no network,
only a single device - the Dual WAN Broadband VPN Router.
• NATT (NAT-Traversal). NAT Traversal is a method to allow IPSec to work through
NAT devices. It is encapsulating IPsec ESP packets into UDP packets for passing through
routers or firewalls employing Network Address Translation (NAT).
• Stateful Inspection Firewall. All incoming data packets are monitored and all incom-
ing server requests are filtered, thus protecting your network from malicious attacks from
external sources.
• IP/MAC Binding. Users cannot change the IP address unless they have the permission
of the IT manager.
• Protection against DoS attacks. DoS (Denial of Service) attacks can flood your
Internet connection with invalid packets and connection requests, using so much band-
width and so many resources that Internet access becomes unavailable. The Dual WAN
Broadband VPN Router incorporates protection against DoS attacks.
• Rule-based Policy Firewall. To provide additional protection against malicious pack-
ets, you can define your own firewall rules. This can also be used to control the Internet
services available to LAN users.
IPSec VPN Gateway Features
• IPSec. Support for IPSec standards, including IKE and certificates.
• 100 Tunnels. Up to 100 VPN tunnels can be created.
• High performance. High performance encryption engine maintains high throughput
even when using 3DES.
• DPD Support Dead Peer Detection is a method of detecting a dead Internet Key Ex-
change (IKE) peer. The method uses IPSec traffic patterns to minimize the number of
messages required to confirm the liveness of a peer. DPD is used to reclaim the lost re-
sources in case a peer is found dead.
Microsoft VPN Gateway Support
• PPTP Server. The Dual WAN Broadband VPN Router emulates a Microsoft PPTP
VPN Server, allowing clients to use the Microsoft VPN client provided in Windows.
• Windows Client Support. Remote users can use the Microsoft VPN client (VPN
Adapter) provided in recent versions of Windows.
• Easy Setup. For both the Administrator and remote users, the Microsoft VPN is much
easier to configure than IPSec VPN.
Package Contents
The following items should be included:
• The Dual WAN Broadband VPN Router Unit
• Power Adapter
• Quick Installation Guide
3
Broadband VPN Gateway User Guide
• CD-ROM containing the on-line manual.
If any of the above items are damaged or missing, please contact your dealer immediately.
4
Introduction
Physical Details
Front-mounted LEDs
Figure 2: Front Panel
Power On - Power on.
Off - No power.
Status (Red) On - Error condition.
Off - Normal operation.
Blinking - This LED blinks during start up.
WAN ports
(10/100BaseT) Connect the DSL or Cable Modem here. If your modem came with a
cable, use the supplied cable. Otherwise, use a standard LAN cable.
LAN Each port has 2 LEDs
• Link/Act
• On - Corresponding LAN (hub) port is active.
• Off - No active connection on the corresponding LAN (hub)
port.
• Flashing - Data is being transmitted or received via the corre-
sponding LAN (hub) port.
• 100
• On - Corresponding LAN (hub) port is using 100BaseT.
• Off - Corresponding LAN (hub) port connection is using
10BaseT, or no active connection.
5
Broadband VPN Gateway User Guide
Rear Panel
Figure 3: Rear Panel
WAN port 1/2
(10/100BaseT) Connect the DSL or Cable Modem here. If your modem came with a
cable, use the supplied cable. Otherwise, use a standard LAN cable.
10/100BaseT
LAN connections Use standard LAN cables (RJ45 connectors) to connect your PCs to
these ports.
Note:
Any LAN port on the Dual WAN Broadband VPN Router will
automatically function as an "Uplink" port when required. Just
connect any port to a normal port on the other hub, using a standard
LAN cable.
Console Port Use the supplied cable to connect the router to a terminal or PC.
Reset Button This button has two (2) functions:
• Reboot. When pressed and released, the Dual WAN Broadband
VPN Router will reboot (restart).
• Clear All Data. This button can also be used to clear ALL data
and restore ALL settings to the factory default values.
To Clear All Data and restore the factory default values:
1. Power Off.
2. Hold the Reset Button down while you Power On.
3. Keep holding the Reset Button for a few seconds, until the RED
LED has flashed TWICE.
4. Release the Reset Button. The Dual WAN Broadband VPN
Router is now using the factory default values.
Power port Connect the supplied power adapter here.
6
2
Chapter 2
Installation
This Chapter covers the physical installation of the Dual WAN Broadband
VPN Router.
Requirements
• Network cables. Use standard 10/100BaseT network (UTP) cables with RJ45 connectors.
• TCP/IP protocol must be installed on all PCs.
• For Internet Access, an Internet Access account with an ISP, and a Broadband modem
(usually, DSL or Cable modem).
Procedure
Figure 4: Installation Diagram
1. Choose an Installation Site
Select a suitable place on the network to install the Dual WAN Broadband VPN Router.
Ensure the Dual WAN Broadband VPN Router and the DSL/Cable modem are powered
OFF.
2. Connect LAN Cables
• Use standard LAN cables to connect PCs to the Switching Hub ports on the Dual WAN
Broadband VPN Router. Both 10BaseT and 100BaseT connections can be used simulta-
neously.
• If required, you can connect any LAN port to another Hub. Any LAN port on the Dual
WAN Broadband VPN Router will automatically function as an "Uplink" port when re-
quired. Just connect any LAN port to a normal port on the other hub, using a standard
LAN cable.
7
Table des matières
Autres manuels Allnet Routeur sans fil
