Multitech RouteFinder RF550VPN Manuel utilisateur

RF550VPN and RF560VPN

FQDN & DDNS Examples

Reference Guide

Multi-Tech Systems, Inc.

RF550VPN/RF560VPN Reference Guide – FQDN and DDNS Examples 2

How-To: RF550VPN/RF560VPN FQDN & DDNS

Examples

This publication may not be reproduced, in whole or in part, without prior expressed written permission

warranty with respect to the contents hereof and specifically disclaims any implied warranties of

merchantability or fitness for any particular purpose. Furthermore, Multi-Tech Systems, Inc. reserves the

right to revise this publication and to make changes from time to time in the content hereof without

obligation of Multi-Tech Systems, Inc. to notify any person or organization of such revisions or changes.

Product Number: S000313B

Revision Date Description

A 05/19/03 Initial release

B 08/06/03 Add RF560VPN.

Example 1: Explains how to setup and use Dynamic DNS on the RF550VPN/RF560VPN.

Example 2: A LAN-to-LAN VPN configuration between Two RF550VPN/RF560VPNs. One at Site A and

one at Site B. Both RouteFinders use Fully Qualified Domain Names (FQDN) and dynamic

DNS at each WAN port gateway to create the tunnel. Two versions of this example are

explained by setting the secure association to IKE or Manual mode.

The RouteFinder software is pre-installed on the RF550VPN/RF560VPN RouteFinder. Initial

configuration is required in order for you to run the RouteFinder software and begin operation. The

browser-based interface eases VPN configuration and management. The VPN functionality is based on

IPSec and PPTP protocols and uses 168-bit Triple DES encryption to ensure that your information

remains private. This example uses firmware version 4.64 on the RF550VPN/RF560VPNs.

Caution: Use a safe Password! Your first name spelled backwards is not a sufficiently safe password; a

password such as xfT35$4 is better.

Multi-Tech Systems, Inc.

RF550VPN/RF560VPN Reference Guide – FQDN and DDNS Examples 3

Example 1

Dynamic DNS

This example explains how to setup and use Dynamic DNS on the RF550VPN/RF560VPN. DNS

(Domain Name Service) is the “middleman” that translates domain names such as multitech.com or

yahoo.com into numbers. The Dynamic DNS service allows you to alias a dynamic IP address to a static

host name such as yourname.dyndns.org or any other name in one of many domains offered by the

service.

In order to use this Dynamic DNS Settings option, you must sign up with a DNS service provider like

www.dyndns.org or www.orgdns.org. This example will use dyndns.org as the service provider. The

account created at dyndns.org for this example is jmeyerdns. The Dynamic DNS created is

jcmeyer.dyndns.org with an IP address of 204.26.122.103 (RF550VPN/RF560VPN WAN port). No

Wildcards or Backup MX was specified.

1. To setup the RF550VPN/RF560VPN to support a Dynamic DNS, click the Dynamic DNS Settings

button on the left side of the Advanced Settings screen.

2. Place a check in the box for Use a dynamic DNS service.

3. Enter the name of your organization with the new DNS indicator. (Ex: members.dyndns.org)

4. Enter the name of the Host Name in the DNS provider. This is the name you want the world to know

on the Internet. (Ex: jcmeyer)

Note: Older versions of RF550VPN/RF560VPN firmware show the examples for NOTE2 on the Dynamic

DNS Settings screen incorrectly. Version 4.62 firmware and above shows the notes for this screen

correctly.

5. Enter the Domain Name for the DNS provider. (Ex: dyndns.org)

6. Enter the user’s name and password, which is the account login name and password that was

created to login to the dyndns.org service. (Ex: jmeyerdns)

7. If wildcards were specified when the Dynamic DNS was created, place a check in the box for Use

Wildcards. For this example wildcards is not enabled.

8. Once the information has been entered, click on Submit. Then Save and Restart the

RF550VPN/RF560VPN.

Multi-Tech Systems, Inc.

RF550VPN/RF560VPN Reference Guide – FQDN and DDNS Examples 4

9. Once the RF550VPN/RF560VPN has restarted, test the Dynamic DNS by doing a PING to the

dynamic DNS from a computer on the Internet.

ping jcmeyer.dyndns.org

This ping should show a response from the IP address assigned to the created dynamic DNS.

Multi-Tech Systems, Inc.

RF550VPN/RF560VPN Reference Guide – FQDN and DDNS Examples 5

Example 2

This example provides a sample RouteFinder configuration and related address scheme for an

application employing LAN-to-LAN IPSec VPN communication. This is an example on how to configure

an RF550VPN/RF560VPN at Site A and an RF550VPN/RF560VPN at Site B so Site A and B can

communicate through a secure connection over the Internet. This example assumes both VPN gateways

have fully qualified domain names and use dynamic DNS. This example does explain setting Secure

Association in the VPN Settings as IKE or Manual mode.

LAN-to-LAN FQDN & DDNS Configuration Diagram:

Note: The illustration labels the RouteFinder as the RF550VPN, but it stands for the RF560VPN also.

Multi-Tech Systems, Inc.

RF550VPN/RF560VPN Reference Guide – FQDN and DDNS Examples 6

LAN-to-LAN Configuration Chart

LAN-to-LAN Application – Site A:

RF550VPN/RF560VPN

LAN-to-LAN Application – Site B:

RF550VPN/RF560VPN

1. Domain name = Site-A.com

2. FQDN Hostname = jcmeyer.dyndns.org

1. Domain name = Site-B.com

2. FQDN Hostname = musky.dyndns.org

3. SETUP WIZARD > DEVICE IP SETTINGS

IP Address: 192.168.2.1

IP Subnet Mask: 255.255.255.0

3. SETUP WIZARD > DEVICE IP SETTINGS

IP Address: 192.168.10.1

IP Subnet Mask: 255.255.255.0

4. SETUP WIZARD > ISP SETTINGS

Select ‘Static IP Settings

IP assigned by your ISP: 204.26.122.103

IP Subnet Mask: 255.255.255.0

ISP Gateway Address: 204.26.122.1

4. SETUP WIZARD > ISP SETTINGS

Select ‘Static IP Settings

IP assigned by your ISP: 204.26.122.104

IP Subnet Mask: 255.255.255.0

ISP Gateway Address: 204.26.122.1

5. SETUP WIZARD > VPN SETTINGS

Connection Name = SiteAtoB_FQDN

Check ‘Disable UID’

Check ‘Enable Keep Alive’

Do not check ‘Enabled NetBIOS Broadcast’

Remote Site = LAN

Remote IP Network = 192.168.10.0

Remote IP Netmask = 255.255.255.0

Remote Gateway IP/FQDN = musky.dyndns.org

Network Interface = WAN ETHERNET

Secure Association = check IKE (RF550)

Secure Association = check Main Mode (RF560)

Perfect Forward Secure = check enabled

Encryption Protocol = select 3DES

Preshared Key = (must match key code at Site B)

Key Life = set to default

IKE Life Time = set to default

5. SETUP WIZARD > VPN SETTINGS

Connection Name = SiteBtoA_FQDN

Check ‘Disable UID’

Check ‘Enable Keep Alive’

Do not check ‘Enabled NetBIOS Broadcast’

Remote Site = LAN

Remote IP Network = 192.168.2.0

Remote IP Netmask = 255.255.255.0

Remote Gateway IP/FQDN = jcmeyer.dyndns.org

Network Interface = WAN ETHERNET

Secure Association = check IKE (RF550)

Secure Association = check Main Mode (RF560)

Perfect Forward Secure = check enabled

Encryption Protocol = select 3DES

Preshared Key = (must match key code at Site A)

Key Life = set to default

IKE Life Time = set to default

Multi-Tech Systems, Inc.

RF550VPN/RF560VPN Reference Guide – FQDN and DDNS Examples 7

Address Table

Enter the configuration information (e.g., the Default Gateway and other IP addresses used) into the

appropriate field of the Address Table below. Please print this page and use it to fill in your specific

RF550VPN/RF560VPN information and keep for future reference. (Example information below is shown

to match with the earlier diagram.)

IP Address Net Mask Default Gateway

Network Port connected

to the internal network ___.___.___.___ ___.___.___.___

(LAN ports) Site A 192.168.2.1 255.255.255.0

Network Port connected

to the external network ___.___.___.___ ___.___.___.___ ___.___.___.___

(WAN port) Site A 204.26.122.103 255.255.255.0 204.26.122.1

Network Port connected

to the internal network ___.___.___.___ ___.___.___.___

(LAN ports) Site B 192.168.10.1 255.255.255.0

Network Port connected

to the external network ___.___.___.___ ___.___.___.___ ___.___.___.___

(WAN port) Site B 204.26.122.104 255.255.255.0 204.26.122.1

LAN-to-LAN Application – Site A:

RF550VPN/RF560VPN

LAN-to-LAN Application – Site B:

RF550VPN/RF560VPN

1. Domain name = __________

2. Public Class C = ___.___.___.X

1. Domain name = __________

2. Public Class C = ___.___.___.X

3. SETUP WIZARD > DEVICE IP SETTINGS

IP Address: ___.___.___.___

IP Subnet Mask: ___.___.___.___

3. SETUP WIZARD > DEVICE IP SETTINGS

IP Address: ___.___.___.___

IP Subnet Mask: ___.___.___.___

4. SETUP WIZARD > ISP SETTINGS

IP assigned by your ISP: ___.___.___.___

IP Subnet Mask: 255.255.255.___

ISP Gateway Address: ___.___.___.___

4. SETUP WIZARD > ISP SETTINGS

IP assigned by your ISP: ___.___.___.___

IP Subnet Mask: 255.255.255.___

ISP Gateway Address: ___.___.___.___

5. SETUP WIZARD > VPN SETTINGS

Remote IP Network = ___.___.___.0

Remote IP Netmask = 255.255.255.0

Remote Gateway IP = ___.___.___.___

5. SETUP WIZARD > VPN SETTINGS

Remote IP Network = ___.___.___.0

Remote IP Netmask = 255.255.255.0

Remote Gateway IP = ___.___.___.___

Multi-Tech Systems, Inc.

RF550VPN/RF560VPN Reference Guide – FQDN and DDNS Examples 8

Software Configuration

Example 2: Configuration Procedure at Site A

1. Connect a workstation to one of the RF550VPN/RF560VPN’s LAN ports via Ethernet at Site A.

2. Set the workstation IP address to 192.168.2.x subnet.

3. Apply power to the RF550VPN/RF560VPN RouteFinder and allow the LEDs to stabilize on the unit.

4. Bring up your web browser on the workstation. At the Web browser’s address line, type the Gateway

address http://192.168.2.1 and press the Enter key.

Note: Make sure your workstation’s IP address is in the same network as the router’s address.

WINIPCFG and IPCONFIG are tools for finding a computer’s default gateway and MAC address. In

Windows 98/Me you can type WINIPCFG. In Windows 2000/NT, you can type IPCONFIG.

5. After typing the IP Address in the Web browser, the RF550VPN/RF560VPN main menu displays.

Multi-Tech Systems, Inc.

RF550VPN/RF560VPN Reference Guide – FQDN and DDNS Examples 9

6. On the Main Menu, click the Setup Wizard button. The Password dialog box displays.

7. Type admin (admin is the default user name) in the user name box and leave the password box

empty.

Note: To change your password after logging in, select the Advanced Settings button and

Administrative Settings.

8. Click OK. The Setup Wizard screen displays a step-by-step process that lets you input all of the

basic settings to configure your RF550VPN/RF560VPN.

9. Select the Time Zone, and then click the Next button to continue.

Multi-Tech Systems, Inc.

RF550VPN/RF560VPN Reference Guide – FQDN and DDNS Examples 10

10. For Device IP Settings enter the internal LAN IP address and subnet mask that you want assigned

to the LAN ports of the RF550VPN/RF560VPN. This is not the IP address from your ISP but the local

internal LAN IP address. The default IP address is 192.168.2.1 and will be used for our example.

Device IP Address: 192.168.2.1.

Device IP Subnet Mask: 255.255.255.0

Click the Next button.

Autres manuels pour RouteFinder RF550VPN

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Multitech Routeur réseau

Multitech

Multitech MultiFrad FR3100 Manuel utilisateur

Multitech

Multitech MULTIFRAD FR3060 Manuel utilisateur

Multitech

Multitech RouteFinder MTASR2-201 Manuel utilisateur

Multitech

Multitech RouteFinder MTASR1-100 Manuel utilisateur

Multitech

Multitech MultiFRAD FR2201 Manuel utilisateur

Multitech

Multitech RouteFinder MTASR1-100 Manuel technique

Multitech

Multitech RoteFinder RF500S Manuel utilisateur

Multitech

Multitech MultiConnect rCell 100 Series Manuel utilisateur

Multitech

Multitech RouteFinder RF102S Manuel utilisateur

Multitech

Multitech RouteFinder RF825-C-Nx Manuel utilisateur

Multitech

Multitech MultiConnect rCell MTR-LAT1-B07 Manuel utilisateur

Multitech

Multitech RouteFinder MTASR3 Manuel utilisateur

Multitech

Multitech MultiConnect rCell 100 Series Instructions d'installation

Multitech

Multitech MultiConnect rCell 100 MTR-H5 Manuel utilisateur

Multitech

Multitech MultiConnect rCell 100 Series Instructions d'installation

Multitech

Multitech MultiConnect rCell 100 Series Manuel utilisateur

Multitech

Multitech ROUTE FINDER RFIPSC-10 Manuel utilisateur

Multitech

Multitech MultiConnect rCell MTR-H5 Mode d’emploi

Multitech

Multitech MultiFrad FR3060 Manuel utilisateur

Multitech

Multitech RouteFinder RF850 Manuel utilisateur

Multitech

Multitech MultiConnect rCell MTR-H6 Manuel utilisateur

Multitech

Multitech RouteFinder MTASR1-100 Manuel utilisateur

Multitech

Multitech RouteFinder RF600VPN Manuel utilisateur

Multitech

Multitech RouteFinder RF102S Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité