DPtech FW1000 SERIES Скачать руководство пользователя страница 16

Страница: 16 / 277

xvi

Figure4-19 Address pool .................................................................................................................................... 4-155

Figure4-20 ALG configuration ........................................................................................................................... 4-156

Figure4-21 User-defined log ............................................................................................................................... 4-156

Figure4-22 Basic attack protection ..................................................................................................................... 4-156

Figure4-23 Basic attack log query ...................................................................................................................... 4-158

Figure4-24 Network action manage ................................................................................................................... 4-159

Figure4-25 Sessions Limit .................................................................................................................................. 4-159

Figure4-26 Service Limit .................................................................................................................................... 4-160

Figure4-27 IPv4 blacklist configuration ............................................................................................................. 4-160

Figure4-28 Blacklist query ................................................................................................................................. 4-161

Figure4-29 Black list query ................................................................................................................................ 4-161

Figure4-30 Blacklist log query ........................................................................................................................... 4-162

Figure4-31 MAC/IP Binding .............................................................................................................................. 4-164

Figure4-32 Auto learning ...........................................................................................................

错误

未定义书签。

Figure4-33 User MAC binding ........................................................................................................................... 4-166

Figure4-34 User/IP binding ................................................................................................................................ 4-165

Figure4-35 binding log query ............................................................................................................................. 4-168

Figure4-36 Session Management ....................................................................................................................... 4-169

Figure4-37 Session Parameter ............................................................................................................................ 4-171

Figure4-38 Session Monitoring .......................................................................................................................... 4-171

Figure4-39 Session Monitoring .......................................................................................................................... 4-172

Figure4-40 VIP bandwidth guarantee .........................................................................................

错误

未定义书签。

Figure4-41 Traffic classification ........................................................................................................................ 4-174

Figure4-42 Congestion avoidance ..............................................................................................

错误

未定义书签。

Figure4-43 Congestion management .................................................................................................................. 4-178

Figure4-44 Traffic shaping ................................................................................................................................. 4-179

Figure4-45 Anti-ARP-Spoofing ......................................................................................................................... 4-179

Figure4-46 ARP configuration ........................................................................................................................... 4-180

Figure5-1 Log management menu ...................................................................................................................... 5-182

Figure5-2 Latest log ............................................................................................................................................ 5-182

Figure5-3 System log query................................................................................................................................ 5-183

Figure5-4 System log file operation ................................................................................................................... 5-184

Figure5-5 System log configuration ................................................................................................................... 5-185

Figure5-6 Latest log ............................................................................................................................................ 5-186

Figure5-7 Operation log query ........................................................................................................................... 5-187

Figure5-8 Log file operation ............................................................................................................................... 5-188

Figure5-9 Operation log configuration ............................................................................................................... 5-189

Figure5-10 Service log configuration ................................................................................................................. 5-190

Figure6-1 Interface config .................................................................................................................................. 6-193

Figure6-2 Interface config .................................................................................................................................. 6-193

Figure6-3 ISP configuration ............................................................................................................................... 6-195

Figure7-1 Access control menu .......................................................................................................................... 7-196

Figure7-2 Rate limit ............................................................................................................................................ 7-196

Figure7-3 User group parameter ......................................................................................................................... 7-197

Figure7-4 Single user limit ................................................................................................................................. 7-198

Figure7-5 Rate limitation .................................................................................................................................... 7-198

Figure7-6 Group management ............................................................................................................................ 7-199

Содержание FW1000 SERIES

Страница 1: ...i DPtech FW1000 Series Firewall Products User Configuration Guide v1 0...

Страница 2: ...upport If you need any help please contact Hangzhou DPtech Technologies Co Ltd and its sale agent according to where you purchase their products Hangzhou DPtech Technologies Co Ltd Address 6th floor z...

Страница 3: ...duct upgrading or other reasons information in this manual is subject to change Hangzhou DPtech Technologies Co Ltd has the right to modify the content in this manual as it is a user guides Hangzhou D...

Страница 4: ...CTION TO ADMINISTRATOR 2 21 2 5 2 AUTHORITY MANAGEMENT 2 27 2 5 3 WEB ACCESS PROTOCOL 2 28 2 5 4 LIMITED INTERFACE SERVICE 2 28 2 5 5 REMOTE USER 2 29 2 6 CONFIGURATION FILE 2 30 2 7 HOT PATCHING 2 32...

Страница 5: ...66 3 4 5 MAC ADDRESS MANAGE 3 67 3 4 6 ACCOUNT 3 68 3 4 7 DOMAIN NAME 3 69 3 4 8 SERVICE 3 69 3 5 FORWARDING 3 70 3 5 1 FORWARDING 3 70 3 5 2 FORWARDING MODE 3 71 3 5 3 NEIGHBOR DISCOVER 3 71 3 6 TRAN...

Страница 6: ...CY BASED ROUTING 3 121 3 14 1 INTRODUCTION TO POLICY BASED ROUTING 3 121 3 14 2 IPV6 POLICY BASED ROUTING 3 121 3 14 3 IPV4 POLICY BASED ROUTING 3 122 3 15 MPLS 3 124 3 15 1 MPLS CONFIGURATION 3 124 3...

Страница 7: ...T 4 149 4 4 4 ONE TO ONE NAT 4 150 4 4 5 N TO N NAT 4 151 4 5 NAT64 4 152 4 5 1 NAT64 PREFIX 4 153 4 5 2 NAT64 ADDRESSS 4 153 4 5 3 ADDRESS POOL 4 153 4 6 NAT66 4 154 4 6 1 SOURCE NAT 4 154 4 6 2 DEST...

Страница 8: ...FIC SHAPING 4 179 4 17 ANTI ARP SPOOFING 4 179 4 17 1 ANTI ARP SPOOFING 4 179 4 17 2 ARP CONFIGURATION 4 180 CHAPTER 5 LOG MANAGEMENT 5 181 5 1 INTRODUCTION TO THE LOG MANAGEMENT 5 181 5 2 SYSTEM LOG...

Страница 9: ...MIZE URL CLASSIFICATION 7 208 7 3 3 ADVANCED URL FILTERING 7 209 7 3 4 URL FILTER PAGE PUSH 7 210 7 3 5 TYPICAL CONFIGURATION FOR THE RATE LIMITATION 7 211 7 4 SQL INJECTION PROTECTION 7 214 CHAPTER 8...

Страница 10: ...HAPTER 10 PORTAL AUTHENTICATION 10 239 10 1 INTRODUCTION TO THE PORTAL AUTHENTICATION 10 239 10 1 1 AUTHENTICATION CONFIG 10 239 10 1 2 WEB AUTHENTICATION NOTICE 10 243 10 1 3 WEB LISTEN 10 244 10 1 4...

Страница 11: ...stem parameter 2 15 Figure2 11 Clear database 2 15 Figure2 12 SNMP 2 16 Figure2 13 Device information 2 17 Figure2 14 SNMP version configuration 2 18 Figure2 15 IP address list 2 18 Figure2 16 Alarm 2...

Страница 12: ...55 Certificate management 2 50 Figure2 56 Key management 2 50 Figure2 57 Certificate application 2 51 Figure2 58 Certificate management 2 51 Figure2 59 CRL management 2 52 Figure2 60 Install option 2...

Страница 13: ...igure3 42 Equal cost route 3 78 Figure3 43 Configure BGP 3 78 Figure3 44 Configure BGP VPN 3 80 Figure3 45 BGP neighbor information 3 81 Figure3 46 Configure RIP 3 82 Figure3 47 Display RIP state 3 83...

Страница 14: ...114 Figure3 89 Multicast routing table 3 114 Figure3 90 PIM multicast routing table 3 115 Figure3 91 IGMP multicast routing table 3 115 Figure3 92 IGMP proxy routing table 3 115 Figure3 93 Basic conf...

Страница 15: ...3 137 Figure3 135 Basic wireless 3 137 Figure3 136 Ping 3 138 Figure3 137 Traceroute 3 139 Figure3 138 Capture 3 139 Figure3 139 Spanning tree 3 139 Figure3 140 STP 3 140 Figure3 141 RSTP 3 141 Figur...

Страница 16: ...toring 4 172 Figure4 40 VIP bandwidth guarantee Figure4 41 Traffic classification 4 174 Figure4 42 Congestion avoidance Figure4 43 Congestion management 4 178 Figure4 44 Traffic shaping 4 179 Figure4...

Страница 17: ...e8 8 L2TP user authentication 8 221 Figure8 9 L2TP IP pool 8 222 Figure8 10 L2TP online status 8 222 Figure8 11 PPTP 8 222 Figure8 12 GRE configuration 8 224 Figure8 13 SMAD 8 225 Figure8 14 SMAD blac...

Страница 18: ...244 Figure10 8 Proscenium management 10 244 Figure10 9 Online management for the hotel user 10 245 Figure10 10 Terminal management 10 246 Figure10 11 USB data leakage monitor 10 247 Figure10 12 Termin...

Страница 19: ...e configuration items 2 38 Table2 21 Software version configuration items 2 41 Table2 22 NTP server mode configuration items 2 42 Table2 23 NTP client mode 2 43 Table2 24 Virtual server setting config...

Страница 20: ...le3 35 Basic config 3 102 Table3 36 IGMP snooping 3 102 Table3 37 IGMP configuration 3 103 Table3 38 IGMP Proxy 3 105 Table3 39 IGMP status 3 106 Table3 40 Candidate BSR configuration 3 107 Table3 41...

Страница 21: ...8 Table5 7 Back up or delete operation file 5 189 Table5 8 Operation log configuration 5 189 Table5 9 Service log configuration 5 190 Table7 1 Rate limit configuration items 7 196 Table7 2 User group...

Страница 22: ...Hotel user online management 10 245 Table10 8 Microsoft patch management 10 246 Table10 9 USB data leakage monitor 10 247 Table10 10 Terminal configuration items 10 248 Table10 11 Online user 10 248...

Страница 23: ...protection integrate OSPFv3 RIP routing into source NAT and destination NAT translation which separate and restrict network communication from Intranet and Internet and other outside network to separ...

Страница 24: ...eth0_0 and the IP address is 192 168 0 1 Both of the default username and the default password are admin You can use the default username for the first login but it is strongly recommended that you sh...

Страница 25: ...all of the Web management function menus You can choose the desired function menu which is shown in the configuration area Shortcut area Shows the directory of the current page as well as the status o...

Страница 26: ...gure the related system management function including Device management SNMP configuration RMON configuration Administrator Configuration file Signature database Software version NTP configuration Vir...

Страница 27: ...current system and the device including system name system time and system time zone memory external memory serial number PCB hardware version software version default management interface information...

Страница 28: ...are version Displays the hardware PCB version information Software version Displays the version information of the system software Default management interface information Displays the name of the def...

Страница 29: ...Card utilization Displays real time CF Card utilization When it beyond the threshold the indicator light displays red light Otherwise the indicator light displays green light Fans status Displays real...

Страница 30: ...Device information settings from navigation tree as shown in Figure2 4 Figure2 4 Device information settings The system name feature allows users to customize system name which is easily to be managed...

Страница 31: ...hreshold allow user to configure the hardware utilization and temperature threshold To enter the device information settings and configure system threshold you can choose Basic System management Devic...

Страница 32: ...ree as shown in Figure2 8 Figure2 8 Enable remote diagnostics The set frame gap allows user to set the frame gap of data frames To enter the device information settings page and set frame gap you can...

Страница 33: ...rovides the function of clearing the database configuration Clear the database and then the device will be rebooted To enter the clear database page you can choose Basic System management Device manag...

Страница 34: ...naged device To enter SNMP version configuration page you can choose Basic System management SNMP configuration from navigation tree as shown in Figure2 12 Figure2 12 SNMP To configure the SNMP versio...

Страница 35: ...icate password Encryption algorithm Mixing the contents of a package to prevent it from being read by an unauthorized source You should select a kind of encryption algorithm including none DES Encrypt...

Страница 36: ...navigation tree as shown in Figure2 14 Figure2 14 SNMP version configuration To configure NAT traverse you can take the following steps Select Basic System management SNMP configuration from navigatio...

Страница 37: ...s such as statistics on a port If the sampled value of the monitored variable is bigger than or equal to the upper threshold an upper event is triggered if the sampled value of the monitored variable...

Страница 38: ...periodically collect statistics on packet at the specified interface Each statistical value is a cumulative sum of packets sent received on the interface during a sampling period To enter the RMON al...

Страница 39: ...s you to add delete and modify an administrator s password and administrator authority and to modify the administrator except the administrator itself Administrator authentication settings Allows you...

Страница 40: ...add modify and delete an administrator To enter the administrator settings interface you can choose Basic Administrator Administrator from navigation tree as shown in Figure2 22 Figure2 22 Administrat...

Страница 41: ...g steps Enter the administrator page you choose Basic Administrator Administrator from navigation tree Click Add icon In each column you type in the password confirm password and description Select th...

Страница 42: ...authentication setting The administrator authentication setting page allows user to configure the authentication method of an administrator to login to the webpage including local authentication and...

Страница 43: ...ough Tacacs Plus server Please configure the following parameters Server IP address Share key LDAP authentication To authenticate administrator s name and password through Tacacs Plus server Please co...

Страница 44: ...have designated for the administrator to be locked When the time is arrived this administrator can be unlocked automatically Permanent If an administrator has been locked this administrator unable to...

Страница 45: ...nistrator has the permission to login to the Web which can configure all modules System configuration The administrator has the permission to login to the Web which can configure system management mod...

Страница 46: ...1 WEB access protocol Item Description HTTP settings Click Enable HTTP checkbox and configure the port number HTTPS settings Click Enable HTTPS checkbox and configure the port number If digit certific...

Страница 47: ...face name Allows you to select an interface to be limited Limit services Allows you to select which kind of access protocol to be limited including Https Http telnet SSH Ping protocol Operation Click...

Страница 48: ...the administrator forcedly Caution User can enable the Telent and SSH method at the same time but only login method can be used to login to the device 2 6 Configuration file Configuration file provide...

Страница 49: ...version Displays the software version of the configuration file which you saved the last time Operation Allows you to save export switch or deleted configuration file by clicking such icons the save...

Страница 50: ...side the file name To download a configuration file you can take the following steps Select TFTP or FTP protocol which will be used if you download a configuration file from the server Configure the s...

Страница 51: ...n information and allows user to upgrade APP signature database automatically or manually To enter the APP signature page you can choose Basic System management Signature APP Signature from navigation...

Страница 52: ...steps Click Downgrade button in the upper right corner the system prompt you that signature database will be downgraded to a history version continue Click Confirm button After you downgrade the signa...

Страница 53: ...u to upgrade signature database when you need it And user can export specific signature database file from your local system and manual upgrade the signature database To enter the manual upgrade inter...

Страница 54: ...allows user to upgrade URL classification filtering signature database automatically or manually To enter the URL classification filtering signature page you can choose Basic System management Signat...

Страница 55: ...re database to the previous version To downgrade a signature database version you can take the following steps Click Downgrade button in the upper right corner the system prompt you that signature dat...

Страница 56: ...erval for the auto upgrade settings After you finish the above steps click the Save button 2 8 2 4 Manual upgrade Manual upgrade allows you to upgrade signature database when you need it And user can...

Страница 57: ...cess the interface will skip to the upgrade process interface Figure2 40 Upgrade progress interface 2 8 3 AV signature To enter AV signature page you can choose Basic System Management Signature datab...

Страница 58: ...base License management from navigation tree as shown in Figure2 43 Figure2 43 License management To export license file to your local system Click the Export File button and then system prompt you a...

Страница 59: ...use and others Operation Click save or delete icon to do the operations In use software version can t be deleted The software for the next boot Select a software version for the next boot which will b...

Страница 60: ...tion tree as shown in Figure2 45 Figure2 45 NTP configuration Table2 22 describes the configuration items of NTP server mode Table2 22 NTP server mode configuration items Item Description NTP server a...

Страница 61: ...e following diagram is NTP client configuration as shown in Figure2 46 Figure2 46 NTP client configuration Table2 23 describes the configuration items of the NTP client mode Table2 23 NTP client mode...

Страница 62: ...tem from navigation tree as shown in Figure2 47 Figure2 47 Virtual management system 2 11 2 Virtual management system parameter settings To enter the virtual management system parameter settings page...

Страница 63: ...table to co exist within the same router at the same time Because the routing instances are independent the same or overlapping IP addresses can be used without conflicting with each other To enter t...

Страница 64: ...s your credentials when doing business or other transactions on the Web It is issued by a certification authority CA It contains your name a serial number expiration dates a copy of the certificate ho...

Страница 65: ...Country Select a country for the device State Configure the state for the device City Configure the city for the device Company Configure the company name for the device Department Configure the depa...

Страница 66: ...gorithm Root certificate fingerprint Set the root certificate fingerprint To configure the CA server configuration you can take the following steps Configure CA ID Configure certificate application UR...

Страница 67: ...ke the following steps Select a method of how to get the URL If you the select manual configuration option you should configure the obtain CRL URL item After you finished the above steps you can click...

Страница 68: ...igure2 56 Key management Note Factory default for the certificate key is that the device does not have certificate key Click the Hide key information button that you can view or hide RSA publick key i...

Страница 69: ...s the details of certification management Table2 29 Certification Management Item Description Certificate file name Displays the name of the certificate file Certificate issuer Displays the certificat...

Страница 70: ...ement Table2 30 describes the details of the CRL management Table2 30 CRL management Item Description CRL file name Displays the name of the CRL file CRL issuer Displays the CRL issuer Current CRL upd...

Страница 71: ...d management is a method of the firewall using an interface to manage several firewalls in the network As simple as you using a remote control to manage all electrical appliances in your home the cent...

Страница 72: ...elated function about device network management Interface management 3G Dial up Network object Forwarding IPv6_Tunnel IPv6 autoconfig IPv4 unicast routing IPv4 multicast routing IPv6 multicast routing...

Страница 73: ...2 1 Networking configuration User can configure the FW device s interface working mode according to their requirement for the network mode and select the interface type If you select Layer 2 interfac...

Страница 74: ...de interface for users 3 2 2 1 VLAN Interface Configuration To enter the VLAN interface configuration page you can choose Basic Network Interface management VLAN interface configuration from navigatio...

Страница 75: ...ew and modify the interface status of the device To enter the interface configuration page you can choose Basic Network Interface management Interface configuration as shown in Figure3 5 Figure3 5 Int...

Страница 76: ...nwhile those bound together links can dynamically backup with each other which enhance the link reliability To enter the port aggregation configuration page you can choose Basic Network Interface mana...

Страница 77: ...oring from navigation tree as shown in Figure3 10 Figure3 10 Remote source mirroring 3 2 5 3 Remote destination mirroring To enter the remote destination mirroring page you can choose Basic Network In...

Страница 78: ...sic Network Interface management Logic interface Loopback interface as shown in Figure3 13 Figure3 13 Loopback interface configuration 3 2 6 3 PPP interface configuration To enter the PPP interface co...

Страница 79: ...page you can choose Basic Network Interface management GRE from navigation tree as shown in Figure3 17 Figure3 17 GRE 3 3 3G Dial up 3G dial up allows you to dial up the Internet by using of 3G User c...

Страница 80: ...on security zones A security zone is an abstract conception It can include physical interfaces and logical interfaces and also Trunk interface VLAN Interfaces added to the same security zone have cons...

Страница 81: ...the operations 3 4 1 3 Typical configuration for security zone 1 Network requirement Figure3 20 Network diagram for configuring security zones 2 A company uses Device as the network border firewall d...

Страница 82: ...efault the system has created the Trust DMZ and Untrust zones defined the priority of these zones 1 Deploy the Trustzone Select Basic Network Network object Security zone from navigation tree to enter...

Страница 83: ...pecify a name Displays the IP range of the IP address object and exceptional IP address Description Allows you to specify the description of the IP address object Policy reference Whether the IP addre...

Страница 84: ...reference Displays which policy can be referenced to the IP address object group Operation Click copy icon or delete icon to do the operations 3 4 3 IPv6 address 3 4 3 1 Introduction to IPv6 Address T...

Страница 85: ...re3 25 MAC address group Table3 3 describes the details of the IP address object group Table3 4 IP address object group Item Description Mac address Displays the user group created in the MAC address...

Страница 86: ...3 4 6 1 Account user To enter the account user page you can choose Basic Network Network object Account Account user from navigation tree as shown in Figure3 27 Figure3 27 Account user Table3 4 descri...

Страница 87: ...he IP address after domain name is configured To enter the domain name page you can choose Basic Network Network object Domain name from navigation tree as shown in Figure3 28 Figure3 28 Domain name 3...

Страница 88: ...navigation tree as shown in Figure3 30 Figure3 30 User defined service object 3 4 8 3 Service object group To enter the service object group page you can choose Basic Network Network object Service S...

Страница 89: ...you can choose Basic Network Network object Forwarding Forwarding mode from navigation tree as shown in Figure3 33 Figure3 33 Forwarding mode 3 5 3 Neighbor discover To enter the neighbor discover pag...

Страница 90: ...page you can choose Basic Network 6 to4 tunnel from navigation tree as shown in Figure3 37 Figure3 36 6to4 tunnel Table3 6 State Item Description Tunnel ID Configure the tunnel ID number Tunnel IP Con...

Страница 91: ...ally After static route is configured data packets go to the specific destination will be forwarded to the paths designated by administrator In a simple network network communication can be realized o...

Страница 92: ...ferent priority then route back up can be realized To enter the configure static route page you can choose Basic Network IPv4 unicast routing Configure static route from navigation tree as shown in Fi...

Страница 93: ...port static route in batch Click Export CSV File button and then select a file path then click Ok button 2 Configure static route manually Configure the destination address 0 0 0 0 subnet mask 0 0 0 0...

Страница 94: ...ateway Next hop Allows you to view the network gateway Next hop address Outbound interface Allows you to view the static route outbound interface 3 10 2 Detailed routing table Detailed routing table p...

Страница 95: ...tate of the route Protocol Allows you to view the method that the route is generated including Static Connect RIP OSPF BGP Guard protocol Priority Allows you to view the static route priority Cost All...

Страница 96: ...y running at a series of routes under the same technology management department There are three early BGP versions BGP 1 RFC1105 BGP 2 RFC1163 and BGP 3 RFC1267 The current version in use is BGP 4 RFC...

Страница 97: ...lick the checkbox of enable BGP enter the local AS number Configure the neighbor configuration Click Ok button in the upper right corner on the webpage Table3 11 describes the details of BGP advanced...

Страница 98: ...take the following steps Configure each item of route aggregation Click Ok button in the upper right corner on the webpage 3 10 4 3 Configure BGP VPN To enter the configure BGP VPN neighbor informati...

Страница 99: ...irtual system configuration Select Basic System VRF from navigation tree to enter the VRF interface and create a new VRF such as VRF_A select a virtual system and an interface for the VRF Select Basic...

Страница 100: ...unt as a routing metric RIP prevents routing loops by implementing a limit on the number of hops allowed in a path from the source to a destination The maximum number of hops allowed for RIP is 15 Thi...

Страница 101: ...anced configuration Table3 16 RIP advanced configuration Item Description Route priority Allows you to configure the route priority Router update timer Allows you to configure the time intervals for r...

Страница 102: ...states so no route loops are generated Area partition Allows an AS to be split into different areas for ease of management and routing information transmitted between areas is summarized to reduce ne...

Страница 103: ...uld take the following steps Click advanced configuration And then configure route priority Set route device ID number The auto is the maximum IP address of device interfaces Add NBMA neighbor Select...

Страница 104: ...ct authentication mode Advanced configuration Allows you to configure the OSPF advanced configurations To configure OSPF interface configuration you should Configure time interval for the interface to...

Страница 105: ...isplays the interface status COST Displays the interface COST value DR Displays the DR of the interface in the area BDR Displays the BDR of interface in the area Neighbor number Displays the neighbor...

Страница 106: ...area belongs Displays the interface to which area belongs Interface name Displays the name of the interface DR Displays the DR of the interface in the area BDR Displays the BDR of interface in the ar...

Страница 107: ...le3 23 describes the details of IS IS interface configuration Table3 23 IS IS interface configuration Item Description Interface name Displays interface name Enabling status Allows you to configure th...

Страница 108: ...S from navigation tree as shown in Figure3 52 Figure3 52 IS IS neighbor Table3 24 describes the details of IS IS neighbor Table3 24 IS IS neighbor Item Description Sys ID Displays system ID number Typ...

Страница 109: ...the remaining lifetime Operation Click to view the detailed information 3 10 8 Guard route The Guard route should be used with BGP BGP protocol imports guard route to the BGP route table and advertis...

Страница 110: ...ct a configuration file from local disk Click Ok button and then static route configuration file is imported immediately Click Export button to export all static routes To manually configure the IPv6...

Страница 111: ...ask Allows you to view the destination subnet IP address and subnet mask Gateway Next hop Allows you to view the gateway Next hop address Outbound interface Allows you to view the outbound interface o...

Страница 112: ...ew the method that the route is generated including Static Connect RIP OSPF BGP Guard protocol Priority Allows you to view the static route priority Cost Allows you to view the route cost Type Allows...

Страница 113: ...nterface configuration Item Description Interface name Displays all interfaces of the device Enabling status Specify whether to enable RIP protocol for the interface Advanced configuration Specify the...

Страница 114: ...Redistribute a route Specify the RIPng redistributed route To configure the RIPng advanced configuration Click advanced configuration Set update timer By default it is 30 Set route aging timer By def...

Страница 115: ...re3 60 Figure3 60 OSPFv3 area configuration Table3 30 describes the details of OSPFv3 area configuration Table3 30 OSPFv3 area configuration Item Description Create an area Create an OSPFv3 area Area...

Страница 116: ...terval for an interface Dead time interval Displays the dead time interval of an unreceived interface Instance ID Specify the Instance ID Advanced configuration Specify interface OSPFv3 protocol and a...

Страница 117: ...te Click Ok button in the upper right corner 3 11 3 2 OSPFv3 neighbor information To access the OSPFv3 interface information you can click Basic Network Unicast IPv6 routing OSPFv3 OSPFv3 neighbor inf...

Страница 118: ...the details of OSPFv3 neighbor information Table3 34 OSPFv3 neighbor information Item Description Query item Select an item which you want to query Keyword Displays neighbor information which contain...

Страница 119: ...que effectively addresses the issue of point to multipoint data transmission By allowing high efficiency point to multipoint data transmission over an IP network multicast greatly saves network bandwi...

Страница 120: ...et mask Click Ok button in the upper right corner 3 12 2 IGMP snooping 3 12 2 1 IGMP snooping Internet Group Management Protocol Snooping IGMP Snooping is a multicast constraining mechanism that runs...

Страница 121: ...uter port Displays static configuration Router port 3 12 2 2 IGMP snooping proxy To enter the IGMP page you can choose Basic Network IPv4 multicast routing IGMP snooping proxy as shown in Figure3 67 F...

Страница 122: ...igure3 68 IGMP snooping routing 3 12 3 IGMP IGMP proxy 3 12 3 1 IGMP To enter the IGMP page you can choose Basic Network IPv4 multicast routing IGMP IGMP Proxy IGMP from navigation tree as shown in Fi...

Страница 123: ...to enable IGMP proxy on the host interface Route interface configuration Select whether to enable IGMP proxy on each interface To configure IGMP proxy configuration you should take the following step...

Страница 124: ...3 12 4 1 PIM Protocol Independent Multicast PIM provides IP multicast forwarding by leveraging static routes or unicast routing tables generated by any unicast routing protocol such as Routing Inform...

Страница 125: ...ce Candidate BSR hash mask length Configure the candidate BSR hash mask length Candidate BSR priority Configure the candidate BSR priority To configure static RP configuration you can choose Basic Net...

Страница 126: ...nterfaces of the device Candidate RP enabling status Allows you to enable or disable candidate RP Candidate RP advertisement interval Set the candidate RP advertisement interval Candidate RP priority...

Страница 127: ...ork IPv4 multicast routing PIM Admin scope zone as shown in Figure3 77 Figure3 77 Admin scope zone Table3 44 describes the configuration item of Global zone configuration Table3 44 Global zone configu...

Страница 128: ...ld take the following steps Configure scope and set the hash mask length Click Ok button in the upper right corner on the webpage Note After you enable the global zone configuration global zone config...

Страница 129: ...on tree as shown in Figure3 80 Figure3 80 RP Mapping 3 12 5 MSDP Multicast Source Discovery Protocol MSDP establishes MSDP peer relationships among RPs of different PIM SM domains source active SA mes...

Страница 130: ...page you can choose Basic Network IPv4 multicast routing MSDP Peer status from navigation tree as shown in Figure3 82 Figure3 82 Peer status 3 12 5 3 Cache status To enter cache status page you can ch...

Страница 131: ...hoose Basic Network IPv4 multicast routing Multicast source proxy as shown in Figure3 85 Figure3 85 Multicast source proxy 3 12 8 Multicast source NAT To enter the multicast source NAT page you can ch...

Страница 132: ...igure3 88 Multicast static routing 3 12 11 Multicast routing table 3 12 11 1 Multicast routing table To enter the multicast routing table page you can choose Basic Network IPv4 multicast routing Multi...

Страница 133: ...le page you can choose Basic Network IPv4 multicast routing IGMP multicast routing table as shown in Figure3 91 Figure3 91 IGMP multicast routing table 3 12 11 4 IGMP proxy routing table To enter the...

Страница 134: ...disable To configure the basic config you should take the following steps Select an interface will be enabled and then select the Enable status for the interface Configure the multicast address and s...

Страница 135: ...tree as shown in Figure3 95 Figure3 95 MLD 3 13 2 3 MLD status To enter the MLD status page you can choose Basic Network IPv6 multicast routing MLD status as shown in Figure3 96 Figure3 96 MLD status...

Страница 136: ...cope zone To enter the admin scope zone page you can choose Basic Network IPv6 multicast routing PIM Admin scope zone from navigation tree as shown in Figure3 98 Figure3 98 Admin scope zone Table3 47...

Страница 137: ...ion SCOPE Configure SCOPE Hash mask length Set the hash mask length Priority Set the priority Operation Click insert or delete icon to do the operations To configure global zone configuration you shou...

Страница 138: ...re3 100 BSR status 3 13 3 5 RP Mapping To enter the RP Mapping page you can choose Basic Network IPv6 multicast routing PIM RP Mapping as shown in Figure3 101 Figure3 101 RP Mapping 3 13 4 PIM multica...

Страница 139: ...ech is a technology that recognize different network packets thus forward these packets as the policy created in advance PBR can classify the network packets according different key field and decide w...

Страница 140: ...of service ToS Inbound interface Allows you to select which interface enabled the PBR policy Protocol Allows you to select which protocol should be used by the PBR policy Nexthop Allows you to config...

Страница 141: ...estination subnet Allows you to configure the destination IP address of the PBR policy ToS Allows you to configure the type of service ToS Inbound interface Allows you to select which interface enable...

Страница 142: ...t with the help of labels 3 15 1 MPLS configuration 3 15 1 1 Global configuration To enter the MPLS configuration page you can choose Basic Network MPLS Global configuration from navigation tree as sh...

Страница 143: ...n choose Basic Network MPLS LDP LDP configuration from navigation tree as shown in Figure3 110 Figure3 110 LDP configuration 3 15 3 2 Display LDP neighbor To enter the display LDP neighbor page you ca...

Страница 144: ...lish Layer 2 connections between nodes 3 15 4 1 L2VPN configuration To enter the L2VPN configuration you can choose Basic Network MPLS L2VPN configuration L2VPN configuration from navigation tree as s...

Страница 145: ...ARTINI mode from navigation tree as shown in Figure3 117 Figure3 117 MARTINI mode 3 15 4 5 VPLS mode VPLS provides Layer 2 VPN services However it supports multipoint services rather than the point to...

Страница 146: ...dress is not enough because IP data packets runs encapsulated by line protocol so that the sender must know the receiver s physical IP address and needs the IP address and physical address mapping rel...

Страница 147: ...set to the IP of the machine issuing the packet and the destination MAC is the broadcast address ff ff ff ff ff ff Ordinarily no reply packet will occur To enter the gratuitous page you can choose Ba...

Страница 148: ...se Basic Network ARP ARP configuration from navigation tree as shown in Figure3 124 Figure3 124 ARP configuration 3 16 2 3 ARP log To enter the ARP log page you can choose Basic Network ARP ARP log as...

Страница 149: ...eps Enter the DNS server address and click the check box of DNS proxy Click Ok button in the upper right corner on the webpage 3 19 DHCP Configuration 3 19 1 Introduction to DHCP DHCP allows administr...

Страница 150: ...on Table3 51 Dynamic DHCP server configuration Item Description Start IP address Specify start IP address from the IP address pool End IP address Specify end IP address from the IP address pool Subnet...

Страница 151: ...the following steps Click copy icon And then enter the starting and ending IP address which will be distributed by DHCP server Enter IP address subnet mask of the distributed address and enter the DH...

Страница 152: ...ter the DHCP relay agent page you can choose Basic Network DHCP DHCP relay agent as shown in Figure3 130 Figure3 130 DHCP relay agent Table3 53 describes the details of DHCP relay configuration Table3...

Страница 153: ...ress table interface you can choose Basic Network DHCP DHCP IP address table from navigation tree as shown in Figure3 131 Figure3 131 DHCP IP address table Table3 54 describes the details of DHCP IP a...

Страница 154: ...each other If one system receives no packets consecutively the system considers the BFD session Down Passive mode If multiple BFD sessions exist in a system periodically sending costs of BFD control...

Страница 155: ...asic wireless To enter the basic wireless address table interface you can choose Basic Network Wireless from navigation tree as shown in Figure3 135 Figure3 135 Basic wireless To configure basic wirel...

Страница 156: ...iagnose tool Ping from navigation tree as shown in Figure3 136 Figure3 136 Ping To use Ping diagnose tool Enter the PING destination IP address Click the Test button on the bottom right The PING test...

Страница 157: ...ure page you can choose Basic Network Diagnose tool Capture from navigation tree as shown in Figure3 138 Figure3 138 Capture 3 23 LAN Switch 3 23 1 Spanning tree 3 23 1 1 Select STP To enter the selec...

Страница 158: ...s that it is connected with a legacy STP device the port connecting with the legacy STP device will automatically migrate to STP compatible mode MSTP mode All ports of the device send out MSTP BPDUs I...

Страница 159: ...layer 2 loop it also can backup links To enter the MSTP interface you can Basic Network LAN Switch Spanning tree MSTP from navigation tree as shown in Figure3 142 Figure3 142 MSTP Table3 57 describes...

Страница 160: ...rotection Select whether to enable the global BPDU protection function BPDU protection function can prevent the device from malicious attack by fabricate configuration information so that it can avoid...

Страница 161: ...on from outside network the followings are provided by firewall including Packet filtering policy IPv6 packet filtering NAT NAT_PT Basic attack protection Session limit Service limit IPV4 Basic DDOS B...

Страница 162: ...originator source IP originator destination IP originator source MAC originator destination MAC service IP fragment flow re mark action for every data packet To enter the packet filtering policy inte...

Страница 163: ...C Specify the range of packet source MAC Originator destination MAC Specify the range of packet destination MAC Service Select a service for the packet filtering policy IP fragment Select whether to p...

Страница 164: ...ol rule which will apply to the packet filtering policy URL filtering Select URL filtering rule which will apply to the packet filtering policy Advanced filtering Select advanced filtering rule which...

Страница 165: ...acket filtering policy log Packet filtering policy log query function is to query specific log in the database but the premise is you should click the select box before packet filtering policy To ente...

Страница 166: ...Network Address Translation NAT provides a way of translating the IP address in an IP packet header to another IP address Originally NAT is used to allow users using private IP addresses to access pub...

Страница 167: ...enter the destination NAT page you can choose Basic Network Firewall Destination NAT from navigation tree as shown in Figure4 9 Figure4 9 Destination NAT Table4 3 describes the details of destination...

Страница 168: ...e destination NAT server After you finished the above steps you can click Ok button in the upper right corner on the webpage Note If you configure the server inner port in the advanced configuration i...

Страница 169: ...ake the following steps Click icon of the one to one NAT policy Select public interface Configure the inner address of one to one NAT policy Configure the public address of one to one NAT policy After...

Страница 170: ...the following steps Click button of the address pool Configure ID number Configure start IP Configure end IP After you finished the above steps you can click Ok button in the upper right corner on th...

Страница 171: ...as shown in Figure4 12 Figure4 12 NAT64 prefix 4 5 2 NAT64 addresss To enter the NAT64 transfer page you can choose Basic Network Firewall NAT64 address from navigation tree as shown in Figure4 13 Fi...

Страница 172: ...hown in Figure4 15 Figure4 15 Source NAT 4 6 2 Destination NAT To enter the NAT66 destination NAT page you can choose Basic Network Firewall NAT Destination NAT from navigation tree as shown in Figure...

Страница 173: ...navigation tree as shown in Figure4 18 Figure4 18 DS_LITE_NAT 4 7 2 Address pool To enter the address pool page you can choose Basic Network Firewall Address pool from navigation tree as shown in Figu...

Страница 174: ...all User defined log from navigation tree as shown in Figure4 21 Figure4 21 User defined log 4 9 Basic attack protection 4 9 1 Basic attack protection Sometimes normal packets transmitted in the netwo...

Страница 175: ...nable the relevant protocol attack protection Send log Click the select box and then you can view the log while attack packet transmitted through the device interface Number of attacks Statistics of t...

Страница 176: ...on Serial number Displays serial number of the attack Time Displays when the attack log is created Attack type Displays the type of the attack Protocol Displays the protocol of the attack Source IP Di...

Страница 177: ...ny session entries on the device these entries occupy large amount of internal memory and influence other service to be performed User can configure session limit to limit the new created session on t...

Страница 178: ...fast To enter the IPv4 blacklist configuration page you can choose Basic Firewall Blacklist from navigation tree as shown in Figure4 27 Figure4 27 IPv4 blacklist configuration Table4 8 describes the d...

Страница 179: ...er the IPv6 black list configuration page you can choose Basic Firewall Blacklist query from navigation tree as shown in Figure4 28 Figure4 28 Blacklist query 4 13 3 Black list query To enter the blac...

Страница 180: ...egins IP address Displays the blacklisted IP address Lifecycle Displays the lifecycle in blacklist log query Add reasons Displays the IP address is added including Manual and Dynamic To query the blac...

Страница 181: ...s including not bind and already bind To each Layer 2 network mode auto learning you should take the following steps Click the Layer 2 mode network radio box click Auto learn button Click Check curren...

Страница 182: ...able MAC IP binding Enable MAC IP binding function Enabled interface Select an interface to be enabled MAC IP binding MAC IP binding only appointed address pass Click the MAC IP binding only appointed...

Страница 183: ...packet is identical If so it forwards the packet otherwise it discards the packet To enter the User IP binding page you can choose Basic Firewall MAC IP binding User IP binding from navigation tree as...

Страница 184: ...binding file from your local system click import button If you want to export username and IP address to a CSV file you can click export button then select a file path to store your use IP binding fil...

Страница 185: ...al configuration Enter user name and IP address Click Ok button in the upper right corner on the webpage If you want to import username and IP address in batch click Browse button and select the user...

Страница 186: ...the IP address of the unmatched MAC address Displays the MAC address that unmatched with MAC IP binding list Detailed information Displays the detailed information about MAC IP binding log To query MA...

Страница 187: ...own in Figure4 36 Figure4 36 Session management Table4 17 describes the details of binding log query Table4 17 Binding log query Item Description No Displays the sequence number of the session list Pr...

Страница 188: ...nagement Session zone from navigation tree as shown in Figure4 37 Figure4 37 Session zone 4 15 3 Session forwarding After you enable this function response packets will be forwarded by using of origin...

Страница 189: ...session monitoring displays as a trend chart To enter the session monitoring page you can choose Basic Firewall Session Management Session Monitoring from navigation tree as shown in Figure4 40 Figure...

Страница 190: ...syslog format Normal sending log as normal format Third party sending log as third part log format Log option If you select the stream format option you can configure the inbound interface of packet o...

Страница 191: ...ver port Allows you to configure the log server port The port number is 9505 4 16 QoS QoS is a kind of network mechanism which is used for resolving the problem of network delay and network congestion...

Страница 192: ...2 User group bandwidth reservation User group bandwidth reservation allocates service stream according to the importance of service stream and delay sensibility thus can make the most use of available...

Страница 193: ...u can choose Basic Firewall QOS Single user bandwidth reservation as shown in Figure4 44 Single user bandwidth reservation To configure single user bandwidth reservation Enter a name for this entry of...

Страница 194: ...ng relationship respectively Under normal condition the device looks up default priority mapping for data packets If default priority mapping table cannot satisfied with users user can modify mapping...

Страница 195: ...increase it drops packets actively and adjusts network traffic to eliminate network overload problem To enter the congestion avoidance page you can choose Basic Firewall QoS Congestion avoidance as s...

Страница 196: ...can choose Basic Firewall QoS Congestion management as shown in Figure4 47 Figure4 47 Congestion management Table4 22 describes the details of congestion management Table4 22 Congestion management Ite...

Страница 197: ...er the traffic shaping page you can choose Basic Firewall QOS Traffic shaping as shown in Figure4 48 Figure4 48 Traffic shaping 4 18 Anti ARP Spoofing 4 18 1 Anti ARP Spoofing To enter the Anti ARP Sp...

Страница 198: ...ays the obtaining method of anti arp spoofing 4 18 2 ARP Configuration The Address Resolution Protocol ARP is used to resolve an IP address into a physical address Ethernet MAC address for example In...

Страница 199: ...e ARP configuration interface Chapter 5 Log Management 5 1 Introduction to the Log Management Log management provides log management function for users including System log Operation log Business log...

Страница 200: ...em log to the local system click Export button and then you can made a choice from the pop up window that you can view the system log as CSV file or save it to the local system Table5 1 describes the...

Страница 201: ...also can be refreshed as if you click the refresh button Shading color is used in warning user and represent the severity of system log Red color stands for fatal error emergency and serverity Orange...

Страница 202: ...as its beginning time End time Search system log as its finish time 5 2 3 System Log File Operation System log file operation provides users with system save and delete as today and the desired day To...

Страница 203: ...tion you can click Basic Log management System log configuration as shown in Figure5 5 Figure5 5 System log configuration Table5 4 describes the details of system log configuration You can save log fi...

Страница 204: ...og as shown in Figure5 6 Figure5 6 Latest log Single click Export button on the bottom and then you can make a choice from the system prompt window that you can view the system log as CSV format or ex...

Страница 205: ...ation log Operation result Shows the result of operation log including success and fail success means your operation is successful fail means your operation is fail Log content Shows the content of op...

Страница 206: ...tion log query function Table5 6 Operation log query Item Description Administrator Shows the administer who did the operation log IP address Shows the IP address of operation log Time scope Select op...

Страница 207: ...t operation log as your configuration To enter operation log configuration interface you can click Basic Log management Operation log Log file operation as shown in Figure5 9 Figure5 9 Operation log c...

Страница 208: ...m Table5 9 Service log configuration Item Description Days for saving The system will delete the expired service log by your selection which includes one week two week and three week 30 days or custom...

Страница 209: ...h FW1000 Series Firewall Products User Configuration Guide 6 191 Item Description The number of emails sent out every minute Configuring the e mail sent frequency Domain name Set domain name of email...

Страница 210: ...s which will not cause network resources waste and better services enterprises Traditional routing strategy can solve the problem in some extent but the inconvenient and inflexible configurations can...

Страница 211: ...fig 6 1 2 2 Interface config Click Add configuration button you can view the basic configuration of the ISP as shown in Figure6 2 Figure6 2 Interface config 6 1 3 Link health check To enter the interf...

Страница 212: ...DPtech FW1000 Series Firewall Products User Configuration Guide 6 194 6 1 4 ISP To enter the ISP interface you can click Service Load balancing ISP as shown in Figure6 3...

Страница 213: ...uction to the Rate Limitation Network traffic can be divided into several service types according to different network protocols such as HTTP service FTP service E mail service that can be implemented...

Страница 214: ...ame for the user group limitation Limit parameter Configure the user group limitation parameter Time Select a time scope User group limitation takes effect as your selection Disable Click the option t...

Страница 215: ...able7 2 User group parameter Item Description NetUserGroup Configure a name for the user group parameter Up Configure the rate speed for the uplink Unit bps Select a unit for the uplink rate limit Dow...

Страница 216: ...then configure upstream and downstream parameter for the service Disable Click the option that user group limitation will be disabled Operation Click copy delete insert icon to do the operations To cr...

Страница 217: ...Select a unit for the downlink rate limit Operation Click copy or delete to do the operations Caution Rate limitation is to limit user communiation between inside network and outside while it can t l...

Страница 218: ...e firewall device you can configure rate limitation working mode of the network configuration is layer 3 interface and then you can configure marketing department IP segment is 192 168 3 2 192 168 3 1...

Страница 219: ...e name and password provided by ISP LAN interface eth0 0 IP address 192 168 3 0 subnet mask 24 eth0 5 IP address 192 168 4 subnet mask 24 and then click the Ok button Choose Basic Network management N...

Страница 220: ...ate a rule of the rate limitation per IP address bandwidth2 Configure a name for the rate limitation bandwidth2 Select the Enable status Configure rate limitation parameter select a type of service HT...

Страница 221: ...the rule of access control Send log Select whether to enable the send log function Operation Click copy or delete icon to do the operations To create the rule of the access control you can take the f...

Страница 222: ...n In the right box the user defined application group box double click the node of application group and configure a name for it Click add button that you can add entry of the user defined application...

Страница 223: ...al configuration for the Access Control 7 2 4 1 Network requirement On the firewall device you can configure the access control for the marketing department IP segment is 192 168 3 2 192 168 3 10 excl...

Страница 224: ...e name and password provided by ISP LAN interface eth0 0 IP address 192 168 3 0 subnet mask 24 eth0 5 IP address 192 168 4 subnet mask 24 and then click the Ok button Choose Basic Network management N...

Страница 225: ...tor there refer to URL hereinafter is a kind of webpage filtering function support HTTP request packet filtering according to IP address host name regular expression The realization of URL filtering f...

Страница 226: ...icon to delete an entry of the access control rule 7 3 2 Customize URL Classification To access the customize URL classification interface you can choose Service Access control URL filtering Customize...

Страница 227: ...the IP address Host name filtering according to the host name Regular expression filtering according to the content restricted by regular expression Black white list Select an action for the advanced...

Страница 228: ...column you should configure the filter parameter IP address filtering according to the IP address Host name filtering according to the host name Regular expression filtering according to the content...

Страница 229: ...configure rate limitation working mode of the network configuration is layer 3 interface and then you can configure marketing department IP segment is 192 168 3 2 192 168 3 10 exclude the IP address1...

Страница 230: ...guration procedures Choose Basic Network management Network user group IP user group WAN interface eth0 3 access method PPPoE type the name and password provided by ISP LAN interface eth0 0 IP address...

Страница 231: ...log option Click the Ok button in the upper right corner on the webpage Create a rule for the advanced URL configuration URL2 Configure a name for the advanced URL configuration URL2 Configure the fi...

Страница 232: ...able7 10 SQL injection protection configuration items Item Description Name Configure a name for the SQL injection protection rule Exceptional interface Configure the exceptional interface Exceptional...

Страница 233: ...ludes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session 8 1 2 IPsec sysConfig To enter...

Страница 234: ...s Displays the remote IP address for the IPSec rule Local Device ID Auto The system auto select the local IP address as the local device ID Host Name Required when NAT traverse is configured IP Addres...

Страница 235: ...nd then from the four options you should select the obtaining method as your requirement example auto Configure client ID and then from the four options you should select the obtaining method as your...

Страница 236: ...gure authentication method and then from the two options you should select an authentication as your requirement example pre shared key 1234 After you finished the above steps click Ok button in the u...

Страница 237: ...ou can choose Service VPN IPsec IPsec interface as shown in Figure8 6 Figure8 6 IPsec interface 8 2 L2TP 8 2 1 Introduction to L2TP L2TP is a standard Internet tunnel protocol similar to the PPTP prot...

Страница 238: ...P authentication mode Select an option from PPP authentication mode drop down list such as CHAP PAP MSCHAP and MSCHAPV2 Client IP address range Configure the client IP address range and from the addre...

Страница 239: ...click Browse button and then select file a path on the pop up window for the configuration file and click Import To export the configuration click Export and then click Save as button select file path...

Страница 240: ...ce VPN L2TP online status as shown in Figure8 10 Figure8 10 L2TP online status 8 3 PPTP Point to Point Tunneling Protocol PPTP is a kind of technology support multiple protocol VPN working at layer 2...

Страница 241: ...for the customer information Password Configure the corresponding password for the username Confirm password Configure the configuration password Operation Click the copy icon that you can copy an en...

Страница 242: ...figuration Configure the advanced configuration including MTU discovery and checksum checkout and tunnel key Operation Allows you to copy or delete the GRE rule Operation Click the copy icon that you...

Страница 243: ...Service VPN SMAD as shown in Figure8 13 Figure8 13 SMAD 8 5 2 SMAD blacklist To enter the SMAD blacklist interface you can click Service VPN SMAD blacklist as shown in Figure8 14 Figure8 14 SMAD blac...

Страница 244: ...every host like traditional IPsec VPN 8 6 2 SSL VPN 8 6 2 1 Basic configuration To enter the basic configuration interface you can choose Service VPN SSL VPN as shown in Figure8 16 Figure8 16 SSL VPN...

Страница 245: ...tion To enter the domain configuration interface you can choose Service VPN SSL VPN Domain configuration as shown in Figure8 18 Figure8 18 Domain configuration 8 6 2 4 License management To enter the...

Страница 246: ...figuration To enter the resources interface and configure the IP resource configuration you can choose Service VPN SSL VPN Resource as shown in Figure8 21 Figure8 21 Resource configuration 8 6 3 2 Sha...

Страница 247: ...Share space as shown in Figure8 23 Figure8 23 User configuration 8 6 4 2 User status To enter the user status interface you can choose Service VPN SSL VPN User status as shown in Figure8 24 Figure8 24...

Страница 248: ...To enter the security rule interface you can choose Service VPN SSL VPN Security rule as shown in Figure8 27 Figure8 27 Security rule 8 6 6 3 Security rule group To enter the security rule group inter...

Страница 249: ...Service VPN SSL VPN Log query as shown in Figure8 30 Figure8 30 Log query 8 6 7 2 Log configuration To enter the log configuration interface you can choose Service VPN SSL VPN Log configuration as sho...

Страница 250: ...x stat form interface you can choose Service VPN SSL VPN Flux stat form as shown in Figure8 34 Figure8 34 Flux stat form 8 6 8 3 Statistical offline users To enter the statistical offline users interf...

Страница 251: ...onfiguration Guide 9 233 Figure8 36 Online time ranking form 8 6 8 5 Resource access form To enter the resource access form interface you can choose Service VPN SSL VPN Resource access form as shown i...

Страница 252: ...he following features Traffic analysis Behavior analysis Keyword filtering To view the online behavior management menu you can choose Service Behavior Traffic analysis as shown in Figure9 1 Figure9 1...

Страница 253: ...ion To enter the policy configuration interface you can choose Service Behavior Behavior analysis Policy configuration as shown in Figure9 3 Figure9 3 Policy configuration Table9 2 describes the detai...

Страница 254: ...inish the above steps you can click the Ok button in the upper right corner 9 3 2 Advanced configuration To enter the policy configuration interface you can choose Service Behavior Behavior analysis A...

Страница 255: ...block Operation Click the copy icon that you can copy an entry of the keyword filtering rule Click the delete icon that you delete an entry of the keyword filtering rule To create a keyword filtering...

Страница 256: ...n Select an action for the keyword filtering rule including warning or block Operation Click copy icon that you can copy an entry of the keyword filtering rule Click delete icon that you delete an ent...

Страница 257: ...Internet Authentication Config Web Auth Notice Behavior Listen Proscenium Management Terminal Management Online User Local User To view the user authentication menu you can choose Service User authen...

Страница 258: ...Allows you to set the free authentication IP address User group Allows you to select a user group Auth mode Allows you to select and configure authentication mode Unique authentication Allows you to...

Страница 259: ...uth notice and URL address option for web authentication Enable proxy authentication Allows you to use proxy server to authenticate web users and allows you to configure the proxy server IP address HT...

Страница 260: ...tion items Item Description Management server IP address Configure an IP address for the management server Client download URL Type client download URL for the TAC configuration MAC match Select wheth...

Страница 261: ...e Select an option that the login page will skip to the specific page Default Upload the return page URL address http www baidu com Customize web authentication interface Allows you to customize the w...

Страница 262: ...ce Click the delete icon that you can delete an entry of the notice 10 1 3 Web Listen If the web authentication function isn t enabled you can enable the web listen function for user authentication To...

Страница 263: ...ing steps In the operation column you can click the copy icon And then configure the proscenium administrator Configure the proscenium administrator s password Configure the access address of the pros...

Страница 264: ...tel user Configure real name for the hotel user Configure identification number of the hotel user After you finished the above steps Click Ok button in the upper right corner on the webpage 10 1 5 Ter...

Страница 265: ...e configuration items of the USB data leakage monitor Table10 9 USB data leakage monitor Item Description USB data leakage monitor Click the Enable option that you can enable the USB data leakage moni...

Страница 266: ...terminal configuration 10 1 6 Online User After the user is authenticated the user s authentication information will be displayed on the online user interface To enter the online user interface you ca...

Страница 267: ...the local authentication user Password Configure a password for the local authentication user Repeat password Configure the confirm password for the local authentication user User account group Select...

Страница 268: ...from your local system Click Import button To query local authentication users in batch you can Enter the username or description you want to query Click Search button 10 1 8 Blackname list To enter...

Страница 269: ...the user name of the User account group Displays the user account group of the Description Displays the description of the local user authentication Select Allow you to select the local user authentic...

Страница 270: ...ooperation log interface you can choose Service IDS integration Display IDS cooperation log as shown in Figure11 1 Figure11 1 Display IDS cooperation log Table11 1 describes the configuration items of...

Страница 271: ...tocol VRRP technology using back up solution when communication line or device failure so that it ensure data communication smoothly and enhance network robustness and availability Enhancing local net...

Страница 272: ...authentication keys are the same the received VRRP packet is considered valid otherwise the received packet is considered an invalid one MD5 authentication You can adopt MD5 authentication in a networ...

Страница 273: ...In the advanced configuration column configure master elect priority announce packet sending interval master preempt mode and master preempt delay configuration example master elect priority 20 annou...

Страница 274: ...edundant backup links Devices need to quickly detect communication failures and restore communication through backup links as soon as possible On some links such as POS links devices detect link failu...

Страница 275: ...ic software constructs high availability system for any reason result in system failure and service disconnection will trigger software process to predicate and isolate the failure and execute disconn...

Страница 276: ...ows you to configure the synchronous IP address IP Type in back up device interface IP address Port Type in back up device port number Heartbeat interface Select back up device interface Hot standby m...

Страница 277: ...group Table12 4 describes the configuration items of the interface synchronization group Table12 4 Interface synchronization group Item Description Synchronization group name Configure a name for the...

Результаты поиска

Содержание FW1000 SERIES

Отзывы:

Похожие инструкции для FW1000 SERIES

Бренды по названию

Популярные бренды

DPtech FW1000 SERIES, Руководство по настройке пользователя

Результаты поиска

Содержание FW1000 SERIES

Отзывы:

Похожие инструкции для FW1000 SERIES

Бренды по названию

Популярные бренды