Digisol DG-LB1054UV Скачать руководство пользователя страница 73

Страница: 73 / 100

DG-LB1054UV User Manual

There is one more advanced IPSec VPN application:



Site to Site – Support Full Tunnel Application

Description: When Full Tunnel function of remote VPN gateway is enabled, all data

traffic from remote clients behind remote VPN gateway will go over the VPN tunnel.

That is, if a user is operating at a PC that is in the Intranet of remote VPN gateway, all

application packets and private data packets from the PC will be transmitted securely in

the VPN tunnel to access the resources behind local VPN gateway. As a result, every

time the user surfs the web for shopping or searching data on Internet, checking personal

emails, or accessing company servers, all are done in a secure way through local VPN

gateway.

Содержание DG-LB1054UV

Страница 1: ...054UV LOAD BALANCING ROUTER WITH 2xFE WAN 1x3G 4G ENABLED USB 3xFE LAN User Manual V1 0 2015 04 06 As our products undergo continuous development the specifications are subject to change without prior...

Страница 2: ...NG CONFIGURATIONS 14 3 1 BASIC NETWORK 18 3 1 1 WAN Setup 18 3 1 1 1 Physical Interface 19 3 1 1 2 Internet Setup 20 3 1 1 3 Load Balance 33 3 1 2 LAN VLAN Setup 36 3 1 2 1 Ethernet LAN 36 3 1 2 2 VLA...

Страница 3: ...tions 64 3 2 2 QoS Quality of Service 65 3 2 2 1 QoS Configuration 66 3 2 2 2 Rule based QoS 66 3 2 2 2 1 Creating a QoS Rule based on IP Grouping 68 3 2 3 VPN Setup 71 3 2 3 1 IPSec 72 3 2 3 1 1 IPSe...

Страница 4: ...69 86 3 2 5 2 SNMP 87 3 2 5 3 Telnet with CLI 88 3 2 5 4 UPnP 88 3 2 6 Certificate 89 3 2 6 1 My Certificates 89 3 2 6 2 Trusted Certificates 90 3 2 6 3 Issue Certificates 91 3 3 SYSTEM 91 3 3 1 Syste...

Страница 5: ...their purchase the buyer and not this company its distributor or its dealer assumes the entire cost of all necessary servicing repair and any incidental or consequential damages resulting from any de...

Страница 6: ...ful to avoid hackers attacking With embedded robust security and firewall function it s suitable for remote branch offices to access the corporate database servers located in headquarter data center t...

Страница 7: ...or higher Chrome 2 0 or higher Firefox 3 0 or higher Safari 3 0 or higher CD Installation Wizard Requirements Computer with the following Windows 7 8 Vista or XP with Service Pack 2 An installed Ethe...

Страница 8: ...DG LB1054UV User Manual 8 1 2 3 Hardware Configuration Rear View Front View Auto MDI MDIX RJ 45 Ports Receptor for Power Adapter Reset Button Power ON OFF Switch USB...

Страница 9: ...Orange in flash Device is in recovery mode or abnormal WAN Green Ethernet connection is established Green in flash data packet transferred through WAN OFF No Ethernet cable attached or Device not link...

Страница 10: ...ugh an Ethernet cable Your PC or device will get an IP address automatically after connecting to this gateway 2 2 Easy Setup by Configuring Web UI You can browse web UI to configure the device Firstly...

Страница 11: ...of this gateway is 192 168 123 254 If you change it you need to type the new IP address 2 It s strongly recommending that you change this login password from default value Select your language Select...

Страница 12: ...User Manual 12 Press Next to start the Setup Wizard You can change the password of administrator here Configure with the Setup Wizard Step 1 Step 2 Select Time Zone Step 3 Select the interface and th...

Страница 13: ...3 Step 4 Enter the WAN IP address subnet mask Gateway and the primary DNS Step 5 Enter the LAN IP address and Subnet Mask Step 6 Confirm the information as shown Step 7 Click on Apply The unit will re...

Страница 14: ...in the IP Address of the device The default IP address is 192 168 123 254 In the configuration section you may want to check the connection status of the device to do Basic or Advanced Network setup o...

Страница 15: ...User Manual 15 Afterwards you can go to Wizard Status Basic Network Advanced Network or System respectively on left hand side of web page Note You can see the Network Status screen below after you hav...

Страница 16: ...You can also check status of wired clients at LAN Client List page other advanced function status at Firewall Status page VPN Status page or System Management Status page as shown below LAN Client St...

Страница 17: ...DG LB1054UV User Manual 17 VPN Status System Management Status...

Страница 18: ...th two or three WAN Interfaces to support different WAN types of connections You can configure one by one to get proper internet connection setup USB 3G 4G WAN The product has one USB port for 3G 4G a...

Страница 19: ...e WAN 2 WAN 3 are disabled 1 Physical Interface Select the WAN interface from the available list For this device there are Ethernet 1 Ethernet 2 and 3G 4G items If you would like the Ethernet WAN1 por...

Страница 20: ...ction 4 VLAN Tagging If your ISP required a VLAN tag been inserted into the WAN packets you can enable this setting and enter the specified tag value Afterwards click on Save to store your settings or...

Страница 21: ...connection In this case you need to enter the registered MAC address here or simply press Clone button to copy MAC address of your PC to this field 3 Connection Control Select your connection control...

Страница 22: ...5 NAT disable If you enable this option it will act with a non NAT function 6 IGMP Snooping Enable or disable IGMP snooping function If you enable the IGMP snooping function this device will detect a...

Страница 23: ...SP offers MTU value to users The default value is 0 auto 4 NAT If you enable this option it will act with a non NAT function 5 IGMP Snooping Enable or disable IGMP snooping function If you enable the...

Страница 24: ...ISP will assign DNS server automatically after PPPoE connection is established Input the IP address of primary and secondary DNS server manually if required 4 Connection Control Select your connection...

Страница 25: ...sers The default MTU value is 0 auto 7 NAT If you enable this option there will be no NAT mechanism between LAN side and WAN side 8 IGMP Snooping Enable or disable IGMP snooping function If you enable...

Страница 26: ...password This WAN type is typically used for DSL services 1 WAN Type Choose PPTP from the drop list 2 IP Mode Please check the IP mode your ISP assigned and select Static IP Address or Dynamic IP Addr...

Страница 27: ...ways on Dial on Demand or Manually If selecting Auto Reconnect always on this gateway will start to establish Internet connection automatically since it s powered on It s recommended to choose this sc...

Страница 28: ...le or disable IGMP snooping function If you enable the IGMP snooping function this device will detect all IGMP messages exchanged on the link and will maintain a table indicating to each of the interf...

Страница 29: ...ith a username and password This option is typically used for DSL services 1 IP Mode Please check the IP mode your ISP assigned and select Static IP Address or Dynamic IP Address accordingly If you se...

Страница 30: ...t always on this gateway will start to establish Internet connection automatically since it s powered on It s recommended to choose this scheme if for mission critical applications to ensure Internet...

Страница 31: ...nction this device will detect all IGMP messages exchanged on the link and will maintain a table indicating for each of the interfaces what multicast groups should be forwarded This simple solution ea...

Страница 32: ...list 2 Dial up Profile After you subscribe 3G 4G data service your operator will provide some information for you to setup connection such as APN dialed number account or password If you know this inf...

Страница 33: ...Always available or By Schedule for connection method If you choose By Schedule rule you need to add a new schedule at System Scheduling menu 10 MTU MTU refers to Maximum Transmit Unit Different WAN t...

Страница 34: ...the outbound traffics to each WAN interface By Smart Weight By Priority 1 Priority If you choose the By Priority strategy you have to further specify the outbound traffic percentage for each WAN inter...

Страница 35: ...ss and or the Port number for the load balance policy It can be Any Subnet IP Range Single IP or Domain Name Just choose one type of the destination IP address and specify its value as well If you don...

Страница 36: ...ust use the LAN IP address of this device as their Default Gateway You can change it if necessary It s also the IP address of web UI If you change it you need to type new IP address in the browser to...

Страница 37: ...twork under a certain switch or router device The ports of a VLAN form an independent traffic domain in which the traffic generated by the nodes remains within the VLAN The VLAN function allows you to...

Страница 38: ...or Bridge to identify if the packets are directly bridged to the WAN port or processed by NAT mechanism 2 VLANID Specify a VLAN identifier for this port The ports with the same VID are in the same VL...

Страница 39: ...ID If you want to configure your own tag based VLANs click on the Edit checkbox on a new VLAN ID row 1 VLAN ID Specify a VLAN tag for this VLAN group The ports with the same VID are in the same VLAN 2...

Страница 40: ...to configuration network renumbering and router announcements when changing Internet connectivity providers This router supports various types of IPv6 connection Static IPv6 DHCPv6 PPPoE 6 to 4 IPv6 i...

Страница 41: ...to IPv6 and sharing the existing IPv4 addresses among its customer base Unlike other migration strategies DS Lite combines both tunneling and network address translation technologies and decouples th...

Страница 42: ...t up or that were not discovered because of packet loss or temporary link partitioning are eventually discovered by reception of their periodic unsolicited advertisements 3 1 3 2 DHCP v6 When DHCPv6 i...

Страница 43: ...e Hosts discover the addresses of their neighboring routers simply by listening for advertisements When a host attached to a multicast link starts up it may multicast a Router Solicitation to ask for...

Страница 44: ...ation setting Address auto configuration settings 9 Auto configuration type You may set stateless or stateful Dynamic IPv6 10 Router advertisement Lifetime You can set the time for the period that the...

Страница 45: ...et DNS address manually for Primary DNS address and secondary DNS address 2 LAN IPv6 address settings Enter LAN IPv6 address and LAN IPv6 Link Local address 3 Address auto configuration settings Disab...

Страница 46: ...dress and local IPv6 address then set DNS address manually for Primary DNS address and secondary DNS address 2 LAN IPv6 address setting LAN IPv6 address and LAN IPv6 Link Local address 3 Address auto...

Страница 47: ...or go out This is useful when you run a server inside your network 3 1 4 2 Virtual Server This device s NAT firewall filters out unrecognized packets to protect your Intranet so all hosts behind this...

Страница 48: ...virtual server mapping table Service Port Private Port Server IP Enable 21 192 168 123 1 V 80 192 168 123 2 V 8080 80 192 168 123 3 v 1723 192 168 123 6 V Afterwards click on Save to store your setti...

Страница 49: ...ism of Special Applications fails to make an application work try setting your computer as the DMZ host instead This device provides some predefined settings Select your application and click Copy to...

Страница 50: ...mputer to be exposed to unrestricted 2 way communication for Internet games Video conferencing Internet telephony and other special applications Otherwise if specific application is blocked by NAT mec...

Страница 51: ...ysical interface addresses are utilized for outgoing IP datagrams You can enter the destination IP address subnet mask gateway and hop for each routing rule and then enable or disable the rule by chec...

Страница 52: ...ng protocol such as RIPv1 RIPv2 OSPF BGP for you to establish routing table automatically The feature of dynamic routing will be very useful when there are lots of subnets in your network Generally sp...

Страница 53: ...on the Setting button and fill in the corresponding setting for your OSPF routing configuration When you finished setting click on Save to store your settings or click Undo to give up the changes 3 B...

Страница 54: ...ys the routing table maintained by this device It is generated according to your network configuration 3 1 6 Client Server Proxy 3 1 6 1 Dynamic DNS How does user access your server if your WAN IP add...

Страница 55: ...provider you select 5 Password Key Input password or key based on the DDNS provider you select Afterwards click on Save to store your settings or click Undo to give up the changes 3 1 6 2 DHCP Server...

Страница 56: ...dress of the IP address pool Please note the number of IP addresses in this IP pool must be less than the maximum number of subnet network as per the subnet mask you set 5 Lease Time DHCP lease time t...

Страница 57: ...can specify a certain IP address for designated local device MAC address so that the DHCP Server will reserve the special IP for designated devices For internal servers you can use this feature to ens...

Страница 58: ...advanced network features such as Firewall QoS VPN Security Redundancy and Management You can finish those configurations in this section 3 2 1 Firewall The firewall functions include Packet Filters U...

Страница 59: ...events that are blocked by these rules 4 Source IP Specify the source IP range for the rule You can define a single IP address 4 3 2 1 or a range of IP addresses 4 3 2 20 30 An empty implies all IP a...

Страница 60: ...defined key words This feature can both filter domain input suffix like com or org etc and a keyword bct or mpe 1 URL Blocking Check if you want to enable URL Blocking 2 Black List White List Select...

Страница 61: ...r more details please refer to the System Scheduling menu Afterwards click on Save to store your settings or click Undo to give up the changes 3 2 1 3 Web Content Filter Web Content filter can block f...

Страница 62: ...the specified rules 3 Log Alert Enable Log Alert will record events that are blocked by these rules 4 Known MAC from LAN PC List You can see all of connected clients from this list and copy their MAC...

Страница 63: ...DG LB1054UV User Manual 63 3 2 1 5 Application Filters Application Filters can categorize Internet Protocol packets based on their application layer data...

Страница 64: ...3 2 1 7 Options 1 Stealth Mode Enable this feature this device will not respond to port scans from the WAN so that makes it less susceptible to discovery and attacks on the Internet 2 SPI When this f...

Страница 65: ...S is ensuring that prioritizing one data flow doesn t interfere with other data flows QoS helps to prioritize data as it enters your router By attaching special identification marks or headers to inco...

Страница 66: ...es lots of flexible rules for you to set QoS policies Basically you need to know three parts of information before you create your own policies First who needs to be managed Second what kind of servic...

Страница 67: ...nce you saved a QoS rule it will be displayed in the Rule Lists area as below Besides you can move up or down the priority of all rules by clicking on the or icon if you want to change the priority of...

Страница 68: ...ss from 192 168 123 10 to 192 168 123 20 3 Service Define what kinds of service need to be managed There are four options for service recognition They are DSCP TOS User Defined service and well known...

Страница 69: ...in Service field The maximum number of session is 20000 5 QoS Direction Select the traffic direction to be applied for this rule Direction IN For In bond data OUT For Out bond data BOTH In bond and O...

Страница 70: ...default value of 0 Always as it is This rule means IP packets from WAN interface to LAN IP address 192 168 12 10 192 168 12 40 which with DiffServ value of IP Precedence 4 CS4 will be modified with D...

Страница 71: ...puter to send and receive data across shared or public networks as if it were directly connected to the private network while benefitting from the functionality security and management policies of the...

Страница 72: ...te to Site Description The unit establishes IPSec VPN tunnels with security gateway in head quarter or branch offices Either local or remote DG LB1054UV gateway which can be recognized by a static IP...

Страница 73: ...o over the VPN tunnel That is if a user is operating at a PC that is in the Intranet of remote VPN gateway all application packets and private data packets from the PC will be transmitted securely in...

Страница 74: ...gateway 4 Max Concurrent IPSecTunnels The device supports up to 32 IPSec tunnels but you can specify it with the number of maximum current activated IPSec tunnels that is smaller or equal to 32 You ca...

Страница 75: ...and other options depend on product models Input the IP address of remote host that exist in the opposite side of the VPN tunnel Ex You can input the LAN IP address of remote VPN gateway The Interval...

Страница 76: ...192 and AES 256 2 Authentication There are five algorithms that can be selected None MD5 SHA1 SHA2 256 and SHA2 512 3 PFS Group There are nine groups which can be selected None Group 1 MODP768 Group...

Страница 77: ...ys the PPTP server role it will allow remote hosts to access LAN servers behind the PPTP server The device can support upto four authentication methods PAP CHAP MSCHAP v1 and MSCHAP v2 Users can also...

Страница 78: ...uthentication method You can choose encryption length of MPPE encryption 7 PPTP Server Status The connected PPTP user connection information will be shown in this table 8 User Account List You can inp...

Страница 79: ...y remote PPTP server 9 Default Gateway Remote Subnet You can check the Enable checkbox to set this tunnel as the default gateway for WAN connection 10 Authentication Protocol You can choose authentica...

Страница 80: ...TP server role it will allow remote hosts to access LAN servers behind the L2TP server The device can support four authentication methods PAP CHAP MSCHAP v1 and MSCHAP v2 Users can also enable MPPE en...

Страница 81: ...eckbox to enable MPPE encryption Please note that MPPE needs to work with MSCHAP v1 or MSCHAP v2 authentication method You can choose encryption length of MPPE encryption 8 Service Port Enter the serv...

Страница 82: ...mote L2TP server 7 Password The password which is provided by remote L2TP server 8 Tunneling Password Enter the tunneling password 9 Default Gateway Remote Subnet You can check the Enable checkbox to...

Страница 83: ...onnection 3 2 3 4 2 GRE Tunnel Definitions 1 Add You can add one new IPSec tunnel with Site to Site scenario by clicking the Add button 2 Delete Delete selected tunnels by checking the Select box at t...

Страница 84: ...is within 1 to 255 If a packet passes number of TTL routers and still can t reach the destination then this packet will be dropped 8 Keep alive Enter the ping IP and the interval 9 Default Gateway Rem...

Страница 85: ...ault gateway selections on an IP network The protocol achieves this by creation of virtual routers which are an abstract representation of multiple routers i e master and backup routers acting as a gr...

Страница 86: ...254 and a larger value has higher priority 4 Virtual Server IPAddress Specify the IP address of the virtual server Click on Save to store what you just select or Undo to give up 3 2 5 System Manageme...

Страница 87: ...t that this device will respond This is a text password mechanism that is used to weakly authenticate queries to agents of managed network devices 4 Set Community The community of SetRequest that this...

Страница 88: ...on protocol of automatically configuring port forwarding Applications using peer to peer networks multiplayer gaming and remote assistance programs need a way to communicate through home and business...

Страница 89: ...DG LB1054UV User Manual 89 3 2 6 Certificate 3 2 6 1 My Certificates Root CA Certificate Configuration Local Certificate Configuration...

Страница 90: ...DG LB1054UV User Manual 90 3 2 6 2 Trusted Certificates Import trusted CA Certificate Import Trusted Client Certificate...

Страница 91: ...V User Manual 91 3 2 6 3 Issue Certificates 3 3 System In this section you can see system information system logs use system tools for system update and do service scheduling and system administration...

Страница 92: ...e the system password for security reasons Click on Save to store your settings or click Undo to give up the changes System Information You can view the System Information in this page It includes the...

Страница 93: ...Click on system tools to refer to the system time perform the firmware upgrade do the ping test tracert test reboot from the web reset to default settings and take a back up of the config file The Wa...

Страница 94: ...rules will be listed 1 Enable Enable or disable the scheduling function 2 Add To create a schedule rule click the Add button When the next dialog popped out you can edit the Rule Name Policy and set...

Страница 95: ...uping Except for user group the device also provides you to group some kinds of objects to be several groups including host grouping extension file grouping and L7 application grouping Configuration H...

Страница 96: ...tions in the device system Whatever one application needs an external server like a RADIUS server the external server object can be defined in this sub section These server objects include Email Serve...

Страница 97: ...DG LB1054UV User Manual 97 Click on Add Whatever one application needs an external server like a RADIUS server the external server object can be defined in this sub section...

Страница 98: ...Machine Interface it means the Web based GUI User can set the administrator timeout of Web UI surfing during configuring the device by the administrator You can set UI administration time out duratio...

Страница 99: ...alancing Router is responding Go to Start Run 1 Type cmd 2 Press OK 3 Type ipconfig to get the IP of default gateway 4 Type ping 192 168 123 254 Assure that you ping the correct IP Address assigned to...

Страница 100: ...he setting on your Network Interface Card adapter is Enabled 3 If settings are correct ensure that you are not using a crossover Ethernet cable not all Network Interface Cards are MDI MDIX compatible...

Результаты поиска

Содержание DG-LB1054UV

Отзывы:

Бренды по названию

Популярные бренды

Digisol DG-LB1054UV, Руководство пользователя

Результаты поиска

Содержание DG-LB1054UV

Отзывы:

Бренды по названию

Популярные бренды