manualshive.com logo in svg

VPNet VSU 2000, User Manual

Share
Download
VPNet VSU 2000 User Manual Download Page 30

Specifications

A-2

VSU-2000 User Guide

Compression 

•

Stac™ Lempel-Ziv hardware data compression 

Key Management 

•

IKE: Key updates configurable starting from 60 seconds (RFC 2409) 

•

SKIP: Keys updated every 30 seconds 

•

All packet, traffic, and authenticating keys automatically generated 

Firewall Integration 

•

Bypass mode for non-VPN traffic

•

Network (packet filtering) firewall

Network Address Translation (NAT) 

•

Supports static, dynamic, and port mapping

•

Reverse address translation for dynamic IP clients

Protocol Support 

•

IEEE 802.3, Ethernet 

•

Full IPSec compliance: RFC 2401, 2402, 2403, 2404, 2405, 2406, 2407, 2408, 2409, 
2410, 2412, 2451, IPSec Key Management using SKIP or IKE.
(Tunnel and transport modes supported.) 

Digital Certificates 

•

X.509v3 for management and IPSec communication

•

Compatible with certificates generated by VeriSign, GTE Cybertrust, Entrust, 
Frontier Technologies, Baltimore, Netscape, Microsoft, and Thawte 

System Management 

•

Configuration via Java-based VPNmanager™

•

Monitoring from any application with SNMPv1 via VSU-2000 MIB

•

Configuration traffic secured through SSL

•

Secure software download for system upgrades

•

Syslog event and usage logging 

VPNremote Client Support 

•

VPNremote Client Software for Windows 95/98/NT 

Summary of Contents for VSU 2000

Page 1: ...VSU 2000 VPNware Service Unit User Guide VPNet Technologies Inc ...

Page 2: ...o Software and documentation shall remain solely with VPNet The license is effective until terminated Customer may terminate this License at any time by destroying all copies of Software including any documentation This License will terminate immediately without notice from VPNet if Customer must destroy all copies of Software Software including technical data is subject to U S export control laws...

Page 3: ...et s or its suppliers liability to Customer whether in contract tort including negligence or otherwise exceed the price paid by Customer The foregoing limitations shall apply even if the above stated warranty fails of its essential purpose Software VPNet warrants that for a period of ninety 90 days from the date of shipment from VPNet i the media on which the Software is furnished will be free of ...

Page 4: ...t is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case users will be required to correct the interference at thei...

Page 5: ...r 1 Introduction Functional Overview 1 1 VSU 2000 Components 1 3 General Site Requirements 1 4 Chapter 2 Installing the VSU 2000 Rackmount Installation 2 1 Connecting the VSU 2000 to the Network 2 3 Chapter 3 Preparing the VSU 2000 for Configuration Preparation 3 1 Configuration 3 1 FIPS Mode 3 8 General Firmware Upgrade Information 3 8 ...

Page 6: ...VSU 2000 User Guide APPENDIX A Specifications APPENDIX B 10 100BASE T UTP Crossover Cable Pinouts Glossary VSU Acronyms ...

Page 7: ...uding placement and connection to the network Procedures for mounting the VSU 2000 in an equipment rack are also included in this chapter Chapter 3 Preparing the VSU 2000 for Configuration provides instructions for setting up VSU 2000 addressing and enabling remote connectivity for using the VPNmanager VPNet s VPN network management application Appendix A Specifications documents physical environm...

Page 8: ...upport is available to registered users of the VSU 2000 Voice 1 888 VPNET 88 within U S or 1 408 404 1400 outside U S FAX 1 408 404 1414 Email support vpnet com World Wide Web http www vpnet com Version Date Changes 09 0045 01 August 2000 Initial Release 09 0045 02 January 2001 Chapter 3 Modified VSU Quick Setup section Added FIPS Mode and General Firmware Upgrade Imformation ...

Page 9: ...e solution to quick and easy VPN deployment Figure 1 1 The VSU 2000 Like other gateways in the VPNware family the VSU 2000 adds compression encryption authentication and key management to public network data links to ensure privacy and integrity of corporate data and to enable the efficient and secure operation of virtual private networks VPNs It is designed to perform complex operations in real t...

Page 10: ... protocol guidelines additional bytes in the form of IPSec headers must be added to packets In many cases the additional packet overhead imposes a performance penalty in return for security The extra bytes tend to lengthen packets and reduce the throughput measured in packets per second Of even greater impact is the tendency for packets lengthened by IPSec headers to be fragmented by network route...

Page 11: ...ure 1 3 VSU 2000 Back Panel Ethernet Ports The VSU 2000 includes two 10 100BASE T Ethernet ports One port is designated as the public encrypted interface and the other port is designated as the private unencrypted interface NOTE The VSU 2000 is enclosed in a tamper evident case that meets U S NIST FIPS 140 1 Level Physical Security and may be replaced only by an authorized service technician Conso...

Page 12: ...tus Indicators General Site Requirements This section describes the requirements your site must meet for safe installation and operation of your system Ensure that your site is properly prepared before beginning installation Environmental Requirements The VSU 2000 is intended for use in a normal office or data room environment For more extreme conditions verify that temperature humidity and power ...

Page 13: ...tall and use the VSU 2000 in a typical network the customer must supply Router providing connectivity to a WAN such as the Internet 10 100BASE T Ethernet hub router or switch providing connectivity to a LAN Input Frequency 47 440 Hz AC input current 1 Amp Maximum Quantity Part Description 1 VSU 2000 VPN Service Unit 1 VSU 2000 VPN Service Unit User Guide 1 UTP Crossover Cable for connection to a r...

Page 14: ...icult The following information will help you plan an acceptable equipment rack configuration Enclosed racks must have adequate ventilation Ensure that the rack is not overly congested because each unit generates heat An enclosed rack should have louvered sides and a fan to provide cooling air When mounting a chassis in an open rack ensure that the rack frame does not block the ventilation grates ...

Page 15: ...ment rack Referring to Figure 2 1 perform the following procedure to install the VSU 2000 to a standard 19 inch equipment rack 1 From one side of the VSU 2000 remove the two front side screws 2 Using the flat head screws provided with the bracket attach the bracket to the VSU 2000 3 Repeat previous steps to attach the bracket on the other side of the VSU 2000 4 Install the VSU 2000 into a standard...

Page 16: ...2 2 Installing the VSU 2000 VSU 2000 User Guide Figure 2 1 Installing the Rackmount Brackets ...

Page 17: ...User Guide Connecting the VSU 2000 to the Network Figure 2 2 shows a typical network using the VSU 2000 Figure 2 2 Typical VSU 2000 Hardware Installation Public Network VSU 2000 Public Port Private Port Router Hub Switch Router Private LAN ...

Page 18: ... in Table 2 1 The two Ethernet ports are 10 100BASE T compliant host ports They accept category 5 UTP cabling terminated in an RJ 45 connector per IEEE 802 3 requirements for 10 100BASE T The Ethernet ports do not provide a cross over function therefore a cross over cable provided with the unit is required when connecting the VSU 2000 public port directly to a router Connect Cables between the VSU...

Page 19: ...e connect one of its RJ 45 connectors to the VSU 2000 private port and the second one to the hub or switch on the private LAN 3 Connect an asynchronous ASCII terminal or PC running terminal emulation software to the VSU 2000 console port using the RS 232 null modem cable that came with the VSU 2000 The terminal s communications parameters should be set to 9600 baud 8 data bits 1 stop bit no parity...

Page 20: ...2 6 Installing the VSU 2000 VSU 2000 User Guide ...

Page 21: ...e This preliminary configuration is performed using a terminal or a PC running terminal emulation software connected to the RS 232 console port The following procedure assumes that the VSU 2000 has been physically installed on the network according to the instructions provided in Chapter 2 Configuration Beginning with VPNware 3 1 the following information is configured through the VSU console Quic...

Page 22: ... is passed through the VSU All non VPN IP traffic is dropped except for the following ICMP IGMP GGP EGP IGP DGP EIGRP and OSPF NOTE This mode should be used when the VSU dedicated to VPN traffic and is the only device between the private and the public networks Deny all non VPN traffic When checked all non VPN traffic is prevented from passing through the VSU This mode blocks non IP traffic and no...

Page 23: ...0 60 a1 00 23 f9 ethernet1 MAC Address 00 60 a1 00 23 fa ethernet2 MAC Address 00 60 a1 00 16 9a ethernet3 MAC Address 00 60 a1 00 16 9b Checking Non Volatile RAM integrity OK Checking Configuration Database OK Checking Certificate Database OK Calibrating CPU performance monitor OK Power Cooling subsystems Monitor initializing Power Subsystem is Good Cooling Subsystem Good Done VPNet Technologies ...

Page 24: ...s and mask are optional 3 Enter the default route for this VSU Typically the default route is the IP address of the gateway router that provides an IP route between the VSU 2000 and the public network e g Internet VPNet Technologies VSU XXXX Main Menu 1 Configuration 2 Statistics 3 Utilities 4 Logout 5 Quick Setup Your choice 1 5 5 IP address 192 0 2 1 Mask 255 255 255 0 IP address 210 1 18 135 IP...

Page 25: ...to allow the Network Administrator to initially configure this VSU through the VPNmanager application Press Return or enter n to leave the superuser name at its default value of root or enter y to change the superuser name Both the superuser name and password may be up to 31 characters and are case sensitive The name and password will be required later when first setting up the VSU through the VPN...

Page 26: ...want the VSU to run in FIPs compliant mode If you answer n the code skips to the date and time configuration Go to Step 7 Enter y if you want the VSU to run in FIPs compliant mode If you answer y answer the following configuration questions For more information regarding FIPS see FIPS Mode on page 3 8 Non VPN traffic mode non VPN traffic is currently forwarded Non VPN Traffic Configuration Menu 1 ...

Page 27: ... 00 00 is equivalent to 1 00 PM 9 Reboot the VSU 2000 Your VSU 2000 is now prepared for configuration by using the VPNmanager The VSU initially passes all traffic between its Public and Private ports This would be a good time to verify connectivity by pinging the VSU from public and private machines and by passing traffic between public and private machines Proceed to the VPNmanager Administrator ...

Page 28: ...an SHA 1 General Firmware Upgrade Information Configuration Items Left to the VPNmanager The following items are likely to be configured by most administrators but are left to VPNmanager or other VSU console menu items to keep the Quick Setup menu minimal LDAP servers used to authenticate VPNmanager console users Disable a VSU s SuperUser account Flushing the configuration on VPNware 3 1 In the ev...

Page 29: ...are automatically discarded Packet Authentication Keyed MD5 AH Message Digest Algorithm RFC 1321 HMAC MD5 and HMAC SHA 1 RFC 2104 User Authentication RADIUS servers Ascend Access Control Security Dynamics ACE Server Access Manager BaySecure Access Control Funk Steel Belted RADIUS Server CHAP and PAP SecurID tokens x 509v3 digital certificates Smart Cards LDAP ...

Page 30: ...ort IEEE 802 3 Ethernet Full IPSec compliance RFC 2401 2402 2403 2404 2405 2406 2407 2408 2409 2410 2412 2451 IPSec Key Management using SKIP or IKE Tunnel and transport modes supported Digital Certificates X 509v3 for management and IPSec communication Compatible with certificates generated by VeriSign GTE Cybertrust Entrust Frontier Technologies Baltimore Netscape Microsoft and Thawte System Man...

Page 31: ...ty Tamper evident enclosure FIPS 140 1 Level 2 compliant LAN Interface Two 10 100BASE T Ethernet ports Management Interfaces RS 232 and Ethernet Software Upgrade Via built in flash RAM Power Requirements 100 240 VAC Input frequency 50 to 60 Hz AC input current 1 Amp Internal Battery End user non serviceable part CAUTION Danger of explosion if memory backup battery is incorrectly replaced Replace o...

Page 32: ...User Guide Operating Environment Temperature 32 to 104 F 0 to 40 C Relative Humidity 5 to 90 non condensing Altitude 0 12 000 feet 3660 meters Safety Certification UL CSA CE CB Scheme EMI RFI FCC Part 15 Class A CISPR 22 85A VCCI ...

Page 33: ... User Guide B 1 APPENDIX B 10 100BASE T UTP Crossover Cable Pinouts The 10 100BASE T UTP Crossover Cable defined below is provided with the VSU 2000 Signal Name Male RJ 45 Male RJ 45 TX 1 3 TX 2 6 RX 3 1 RX 6 2 ...

Page 34: ...VSU 2000 User Guide B 2 10 100BASE T UTP Crossover Cable Pinouts ...

Page 35: ...base system used to map host names to IP addresses and vice versa DCE Data Communication Equipment DSU CSU Data Service Unit Channel Service Unit DTE Data Terminal Equipment ECB Electronic Code Book encryption HDLC High level Data Link Control ISAKMP Internet Security Association Key Management Protocol IPSEC Internet Protocol SECurity MD5 Message Digest Algorithm ...

Page 36: ...t For Comment SHA Secure Hash Algorithm SKIP Simple Key Management for Internet Protocol SNMP Simple Network Management Protocol SSL Secure Socket Layer TCP IP Transmission Control Protocol Internet Protocol URL Uniform Resource Locator UTP Unshielded Twisted Pair VPN Virtual Private Network VSU VPN Service Unit ...

Page 37: ...stallation desktop 2 1 rackmount 2 1 IP address 3 4 IPSec standards 1 2 L LAN connections 2 5 N netmask 3 4 P password VSU console 3 5 performance 1 2 phone support 1 ii plug and play installation 1 2 power on bootup screen 3 2 product registration 1 ii Q quick setup menu 3 4 R reboot 3 7 registration 1 ii requirements environmental 1 4 router connections 2 5 S security 1 2 SHA1 1 2 SKIP 1 2 speci...

Reviews:

No comments

Brands by name

Popular brands

Load more brands