background image

Chapter 2 - Basic Configuration Guide

6

Configuring the Server for IP and IPX Client Tunnels

To configure the IntraPort Carrier for IP and IPX client tunnels,  each user must be entered into 
the VPN user database (or into a RADIUS server database) and assigned a tunnel configura-
tion. 

Required for Client Tunnel Configurations

These are the basic parameters for a tunnel configuration:

Name of configuration

Bind To port

Local IP Net and/or Local IPX Network

Reachable IP networks 

VPN Group DLCI

CV:  Use the VPN Group Configuration Dialog Box to create and name a tunnel configura-

tion. Use the General tab to set the Bind To port. Use the IP Connection tab to set the 
Local IP Net and add IP network numbers and masks which will be reachable via the 
tunnel configuration. Use the IPX Connection tab to set the Local IPX Network. The 
VPN Group DLCI can only be set via text-based configuration.

TB: Use 

the 

configure command and create and name a VPN Group Name section. Then 

set the BindToLocalIPNetIPNet and/or LocalIPXNet, and VPNGroupDLCI 
keywords in that section.

Suggested for Client Tunnel Configurations

You may want to add or change protection suites, set up filters for the tunnel, set a backup 
device, etc.

CV:  Use the IKE Configuration, IPX Filters, IP Filters and/or Rollover tabs in the VPN 

Group Configuration Dialog Box.

TB: Use 

the 

configure command and set keywords in the VPN Group Name section.

VPN User Database

If you are using a RADIUS server for user authentication, you will need to set up VPN users 
on that server. If not, then you must enter each user into the VPN user database.

CV:   Use the VPN User Dialog Box.

TB: Use 

the 

edit config command and set parameters in the VPN Users section.

Содержание 10/100 Ethernet DES I/O Card

Страница 1: ...10 100 Ethernet DES I O Card Administrator s Guide Compatible Systems Corporation 4730 Walnut Street Suite 102 Boulder Colorado 80301 303 444 9532 800 356 0283 http www compatible com ...

Страница 2: ...c Includes one or more U S Patent Nos 4 701 745 5 003 307 5 016 009 5 126 739 5 146 221 5 414 425 5 414 850 5 463 390 5 506 580 5 532 694 Other Patents Pending FCC Notice This product has been certified to comply with the limits for a Class A computing device pursuant to Subpart J of Part 15 of FCC Rules It is designed to provide reasonable pro tection against radio or television communication int...

Страница 3: ...ired for Client Tunnel Configurations 6 Suggested for Client Tunnel Configurations 6 VPN User Database 6 SETTING UP RADIUS AUTHENTICATION 7 Setting the IntraPort for a RADIUS Server 7 RADIUS Server User Authentication Settings 7 SAVING A CONFIGURATION FILE TO FLASH ROM 8 Chapter 3 Shipping Defaults 9 DEFAULT PASSWORD 9 ETHERNET INTERFACES 9 IP Defaults 9 IPX Defaults 9 AppleTalk Defaults 9 Chapter...

Страница 4: ...ed into the following sections Chapter 1 Network Installation This part of the manual includes step by step instructions on how to physically install the 10 100 Ethernet DES and connect it to your network Chapter 2 Basic Configuration Guide This part of the manual provides a minimal list of parameters that must be entered into a server for proper operation Chapter 3 Shipping Defaults This part of ...

Страница 5: ...0BaseT twisted pair Ethernet To connect the Ethernet interface to twisted pair Ethernet cabling you will need an unshielded twisted pair station cable that is connected to a 10BaseT compatible twisted pair hub for a transmit speed of 10 Mbps or a 100Mbps Fast Ethernet hub for a transmit speed of 100 Mbps v Note Ethernet cables and cable connectors are not supplied with the IPC Category 5 cabling i...

Страница 6: ...o Flow Control v Note The 10 100 Ethernet DES I O card also has an AUX interface This is a modem connection which should only be used in consultation with Compatible Systems Technical Support staff who will provide instruction on its use v Note If you want to use Telnet as a management method you must first configure an IP address into the server using an out of band console or reconfigure the IP ...

Страница 7: ...h I O card for configuration guidelines Detailed information on the meaning of the server s parameters is provided in the Compati View Management Software Reference Guide and the Text Based Configuration and Command Line Management Reference Guide You should use this list as a starting point to look up more specific information in the other documents There are a number of parameter settings which ...

Страница 8: ...o set additional parameters for OSPF or to configure BGP refer to the Text Based Configuration and Command Line Management Reference Guide Use the edit config command and set an IP gateway in the IP Static section v Note The gateway address would typically be an interface on a firewall It must be on the same TCP IP network as Ethernet 0 0 With this setup you must configure the firewall to allow UD...

Страница 9: ...tunnel configuration Use the IPX Connection tab to set the Local IPX Network The VPN Group DLCI can only be set via text based configuration TB Use the configure command and create and name a VPN Group Name section Then set the BindTo LocalIPNet IPNet and or LocalIPXNet and VPNGroupDLCI keywords in that section Suggested for Client Tunnel Configurations You may want to add or change protection sui...

Страница 10: ...n is kept in attribute number 77 of the RADIUS database and the tunnel secret is kept in attribute number 69 These two attribute numbers must be configured in the RADIUS server s dictionary file The RADIUS server will also log the real IP address of the client and the IP address assigned to the client by the IPC as it begins to account for the client To use this feature the two attribute numbers f...

Страница 11: ...tch the settings for each user in the User Properties window of the VPN Client The group configuration must match one of the VPN group configurations in the IntraPort s config uration Saving a Configuration File to Flash ROM Once a configuration is complete you can save it to the server s Flash ROM Until saved all changes are made in a separate buffer and the server continues to run as before the ...

Страница 12: ...etmein Ethernet Interfaces IP Defaults Address 198 41 12 1 Subnet mask 255 255 255 0 Broadcast address 198 41 12 255 Mode Routed IPX Defaults Mode Routed 802 3 on autoseeding 802 2 on autoseeding Type II off 802 2 SNAP off AppleTalk Defaults Mode Routed Phase II on autoseeding ...

Страница 13: ...perature The filter needs changing See the appendices in the IPC Chassis manual for instructions Sys Ready The server booted properly without detecting any failures General Indicators Ethernet Traffic Indicators TX Ethernet transmit packet RX Ethernet receive packet Load Indicators These lights indicate the load on the DES card Ethernet Lights Load Lights Indication 5 flashing 20 flashing Server s...

Отзывы: