HotBrick Dual WAN Firewall VPN 1400/2 Скачать руководство пользователя

Страница: 74 / 76

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966

Appendix D : IPSec Tunnel Examples

VPN Configuration – Examples

Tunnel to HotBrick Unit

The HotBrick units in the following example use registered IP addresses. You have to replace these

addresses with IP addresses that are available t

you. These settings are only possible if you have a static IP

address available on one or both of your WAN ports.

This example takes a tunnel between a VPN 1400/2 and a

LB-2

VPN. This example applies to the

HotBrick

401VPN X2, LB-2 VPN a

nd 1400/2 series, you can use either unit at both sides. You can use the IP

addresses from the network diagram above.

This type of tunnel is named a LAN to LAN IPSec tunnels.

Содержание Dual WAN Firewall VPN 1400/2

Страница 1: ......

Страница 2: ...IGURATION 24 Host IP 24 Routing 26 Virtual Server 28 Special Application 32 Dynamic DNS 33 Multi DMZ 35 UPnP Setup 36 NAT Setting 37 Advanced Feature 38 6 SECURITY MANAGEMENT 40 Block URL 40 Access Filter 41 Session Limit 42 SysFilter Exception 43 7 VPN Configuration 44 Tunnel to HotBrick Unit 45 Tunnel to HotBrick client 45 Advanced settings 46 IPSec policy options 49 VPN preset 50 SA List 51 VPN...

Страница 3: ...CIFICATIONS 66 APPENDIX B WINDOWS TCP IP SETUP 67 Overview 67 TCP IP Settings 69 APPENDIX C TROUBLESHOOTING 74 Overview 73 General Problems 73 Internet Access 73 APPENDIX D IPSEC TUNNEL EXAMPLES 74 Tunnel to HotBrick Unit 74 Copyright HotBrick 2006 All Rights Reserved Document Version 1 0 All trademarks and trade names are the properties of their respective owners 3 ...

Страница 4: ...ion for load balancing and failover Shared Broadband Internet Access All LAN users can access the Internet through the Dual WAN VPN Firewall by sharing two Broadband modems and connections High Performance multi ADSL Modem Support The Dual WAN VPN Firewall has two WAN ports allowing the connection of up to two broadband modems at the same time This can provide a greater increase in bandwidth than ...

Страница 5: ... A DMZ PC will receive incoming connection requests that would normally be blocked For each IP address allocated by your ISP a separate DMZ PC can be specified So if your ISP has provided multiple IP addresses you can have multiple DMZ PCs Each DMZ PC has unrestricted 2 way Internet access This allows you to run programs that are otherwise incompatible with NAT routers like the Multi WAN VPN Link ...

Страница 6: ...ed to prevent unauthorized users from modifying the configuration data and settings HTTP Firmware Upgrade and backup The web management feature allows you to use HTTP to upgrade new firmware and backup the system configuration from the local or even from the remote site as long as you enable Remote Upgrade and Remote web based setup from the Advanced Feature web page Email Alert A warning email ca...

Страница 7: ...ation Status System Blinking Normal Operation ON OFF Error Packets Blinking Packets Active ON OFF No Packet Ethernet Green ON 100M Linked Yellow ON 10M Linked Blinking Data Transmit Receive OFF Not Linked Ethernet Ports and Reset Bottom Ethernet Ports WAN ports 2 are available for WAN connections LAN ports the remaining ports are for LAN device or hub usage Note Use an Ethernet cable to connect to...

Страница 8: ...D Action Condition Status System Packets flash alternatively Firmware Download in progress Status System Packets flash concurrently MAC address not assigned Status System Solid Off Packets Solid On SDRAM error Status System Solid Off Packets Flash once Timer Interrupt error Status System Solid Off Packets Flash twice LAN WAN error 8 ...

Страница 9: ...l interface can t be accessed and you wish to restore it by uploading new firmware In that case use the following procedure 1 Power on the Dual WAN VPN Firewall 2 Use the supplied Windows utility or a TFTP client program to apply the new firmware If you are using the supplied Windows TFTP program the screen will look like the following example Figure 1 4 Windows TFTP utility Enter the name of the ...

Страница 10: ...m three 3 additional operations Save the current configuration settings to your PC use the Save Configuration button Restore a previously saved configuration file to the Dual WAN VPN Firewall use the Upgrade Firmware button Set the Dual WAN VPN Firewall to its default values use the Set to Default button 10 ...

Страница 11: ...nectors TCP IP network protocol must be installed on all PCs Procedure 1 Configuring the Dual WAN VPN Firewall for your LAN 1 Use a standard LAN cable to connect your PC to any LAN port 3 16 on the Dual WAN VPN Firewall Default 2 WAN ports from port 1 2 2 Connect the power cord into a power outlet on the rear panel of Dual WAN VPN Firewall 3 Start your PC If your PC is already running restart it I...

Страница 12: ... 168 1 254 with a Network Mask of 255 255 255 0 See Appendix B Windows TCP IP Setup for details Check that the Dual WAN VPN Firewall is properly installed LAN connection is OK and it is powered ON 7 After the login you will see the Admin Password screen as shown below Assign a password by entering it in the Password and Verify Password Fields Figure 2 2 Home Screen Admin Setup 12 ...

Страница 13: ... Dual WAN VPN Firewall must be disabled This setting is on the LAN DHCP screen Your DHCP Server must be configured to provide the Dual WAN VPN Firewall LAN IP address as the Default Gateway Your DHCP Server must provide correct DNS addresses to the PCs 10 Ensure these settings are suitable for your LAN 11 The default settings are suitable for many situations 12 See the following table for details ...

Страница 14: ...0BaseT connections can be used simultaneously If you need to connect the Dual WAN VPN Firewall to another Hub use a standard LAN cable to connect any LAN port on the Dual WAN VPN Firewall to a standard port on another hub Any LAN port on the Dual WAN VPN Firewall will automatically act as an Uplink port when required If a device is set to 2 WAN ports from port 1 to 2 the others are LAN ports from ...

Страница 15: ...llation LAN DHCP Select LAN DHCP from the menu You will see a screen like the example below Figure 3 1 LAN DHCP Ensure these settings are suitable for your LAN The default settings are suitable for most networks See the following table for setting details 15 ...

Страница 16: ...a DHCP Server the DHCP Server setting must be disabled and the existing DHCP server must be set to provide the IP address of the VPN Dual WAN VPN Firewall as the Default Gateway Client Lease Time This is the period of time that a DHCP server leases an IP address to a DHCP client DHCP IP address range Offered Range fields set the values used by the DHCP server when allocating IP Addresses to DHCP c...

Страница 17: ...wing information is displayed Name The hostname of the PC In some cases this may not be known MAC Address The physical address network adapter address of the PC IP Address The IP address allocated to this PC Type Indicates IP address to be dynamic or static Status If leased the IP address was allocated by this DHCP Server Time Left The time left before the lease expires 17 ...

Страница 18: ...tware This software is no longer required and should not be used When this method is selected you must complete the PPPoE dialup fields Note If using the PPTP connection method select Static IP or Dynamic IP as appropriate according to the IP address method used by your ISP Address Info This is for Static IP users only Enter the address information provided by your ISP If your ISP provided multipl...

Страница 19: ... by Packets Sessions established Traffic is measured by Sessions IP Address Traffic is measured by IP Address Loading Share on WAN 1 Enter the percentage of traffic to be sent over WAN 1 If one WAN port connection has greater bandwidth than the other the one with the greater bandwidth should be given a higher percentage of traffic than the other NAT statistics This section displays the current dat...

Страница 20: ...t box or or the gateway of the WAN interface used if Alive Indicator input box is blank Alive Indicator This is the IP address used to check if the WAN connection is operating The Dual WAN VPN Firewall will contact this system to check if the WAN connection is working Change this address if you wish Default is the gateway IP Note This is not used for PPPoE connections MTU The Maximum Transmission ...

Страница 21: ...bridge hosts eg transparent to WAN 1 can go thru the alternative WAN eg WAN 2 interface when bind interface eg WAN 1 is down it acts like a fail over mechanism for transparent bridge mode Load Balancing Traffic from bridge hosts eg transparent to WAN 1 can go thru either WAN eg WAN 1 or WAN 2 interface based on loading mechanism specified in the load balance section it s acting like as a load bala...

Страница 22: ...ltiple floating real IPs for PPPoE Each WAN port can have up to 8 PPPoE sessions with different IP addresses if your WAN port is using a PPPoE connection PPPoE Session MTU The Maximum Transfer Unit for PPPoE packet data Leave it at the default unless the ISP specifies a different PPPoE packet data size The default value of MTU is 1492 bytes WAN IP Account User Name Enter the PPPoE user name assign...

Страница 23: ... User Name The PPTP user name login name assigned by your ISP Password The PPTP password associated with the User Name above This is assigned by your ISP and used to login to the PPTP Server Verify Password Re enter the PPTP password assigned by your ISP Server IP Address Enter the IP address of the PPTP Server as provided by your ISP Static IP Adress If you have a fixed IP address enter it here O...

Страница 24: ...ture to apply the same Block URL settings to all PCs You wish to reserve a particular LAN IP address for a particular PC on your LAN This allows the PC to use DHCP Windows calls this Obtain an IP address automatically while gaining the benefits of a fixed IP address The PC s IP address will never change so it can be accessed by other people and applications Host IP Host Network Identity Host netwo...

Страница 25: ...now you are selecting Strict Binding If WAN1 port is disconnected your packets cannot go out through the other WAN port if it is still alive If you select Loose Binding then when the WAN1 port is disconnected your packets will automatically go to the other WAN port if it is active Select WAN Port Select PPPoE session If the setting above is Enable select the desired Port and Session Otherwise igno...

Страница 26: ...the Routing table with an Index of zero 0 these are System entries You cannot modify or delete these entries Dynamic routing RIP v2 This acts as a master switch If enabled the selected WAN or LAN will run RIPv1 v2 Otherwise theRIP function is not available Interface LAN WAN1 n is enabled any WAN or LAN can execute the RIP function Static routing Network Address The network address of the remote LA...

Страница 27: ...N VPN Firewall so that they can be forwarded to the Internet This is done by configuring other Routers to use the Dual WAN VPN Firewall as the Default Route or Default Gateway as illustrated by the example below Static Routing example Segment 1 192 168 2 xx 192 168 2 80 192 168 1 100 Segment 0 Router A 192 168 1 xx 192 168 1 1 Router B 192 168 2 90 192 168 3 70 Segment 2 192 168 3 xx The Dual WAN ...

Страница 28: ...ace LAN Metric 3 Virtual Server This feature allows you to make Servers on your LAN accessible to Internet users Normally Internet users are not able to access a server on your LAN because Your Server s IP address is only valid on your LAN not on the Internet Attempts to connect to devices on your LAN are blocked by the firewall in the Dual WAN VPN Firewall The Virtual Server feature solves these ...

Страница 29: ...ed anyone on the Internet can connect to your Virtual Servers They must use the Dual WAN VPN Firewall Internet IP Address the IP Address allocated by your ISP e g http 205 20 45 34 ftp 205 20 45 34 To Internet users all virtual Servers on your LAN have the same IP Address This IP Address is allocated by your ISP This address should be static rather than dynamic to make it easier for Internet users...

Страница 30: ... section earlier in this Chapter for details on reserving an IP address Each Host server must be running the appropriate Server software WAN This selection allows this server to bind to any selected WAN port or to bind all WAN ports together LAN Port Range Enter the range of port numbers used for outgoing traffic from this Server If only a single port is required enter it in both fields WAN Port R...

Страница 31: ...de to the current entry Cancel Cancel any changes you have made since the last save operation Virtual Server List This table shows the detail for all Custom Virtual Server configuration data You can modify this configuration data by clicking the specific row you want to change 31 ...

Страница 32: ...Special Application Outgoing Protocol Select the protocol used by this application when sending data to the remote server or PC Outgoing Port Range Enter the beginning and end of the range of port numbers used by the application server for data you send If the application uses a single port number enter it in both fields Incoming Protocol Select the protocol used by this application when receiving...

Страница 33: ...ervers using a URL rather than an IP Address This also solves the problem of having a dynamic IP address on your WAN port With a dynamic IP address your IP address may change whenever you connect to your ISP which makes it difficult for visitors to connect to your web site You must register for the Dynamic DNS service The Dual WAN VPN Firewall supports 3 types of service providers Standard client ...

Страница 34: ...service is available in China It is similar to DynDNS User Defined DDNS Server This is the user defined DDNS server If the DDNS is not TZO dyndns org and 3322 Additional settings These options are available if using the standard client Enable Wildcard If selected traffic sent to sub domains of your Domain name will also be forwarded to you Enable backup MX If enabled you must enter the Mail Exchan...

Страница 35: ...or disable the DMZ setting as required WAN there is 1 WAN port Its connection type may change based on your WAN connection type Static DHCP PPPoE Name Enter a name for this setting This name has no effect on the functionality Private IP Address LAN Enter the IP address of the PC you wish to associate with this WAN port IP address This IP address should be fixed or reserved See the Host IP section ...

Страница 36: ...ces and services UPnP Option If UPnP is enabled then this device will become one of the local network devices You can then find an icon for it in Network Neighborhood on a Windows XP computer on your LAN Every time you add a new service with port mapping the new service will appear on the mapping list UPnP Port Mapping List With UPnP enabled the table shows the details of all Custom Virtual Server...

Страница 37: ...ave port numbers that cannot be translated for special applications you must set the status to Enable and input the value in port range Otherwise its port cannot be translated in the specified time period so you must set Enable and specify seconds in Timeout NAT alias For each alias entry the WAN IP acts as an alias IP for the host with the Local LAN IP for the Internet via the specified WAN port ...

Страница 38: ...requests received from the WAN port If Checked the selected packet types are blocked Otherwise they are accepted DNS Loopback When you have some servers on the LAN and their domain names have already been registered on a public DNS you can avoid a DNS loop back problem by entering the following fields Domain Name Enter the domain name specified by you for local server Private IP Enter the private ...

Страница 39: ...the source sending the packets Destination IP IP address of the destination receiving the packets Subnet Mask With a subnet mask other than 255 255 255 255 you can make an IP subnetwork your destination Protocol Select protocol type used by the traffic you wish to configure Port Range Enter the beginning and end of the port range used by the traffic you wish to configure If only a single port is u...

Страница 40: ...ss Group This allows you to have different blocking rules for different Groups of PCs All PCs users are in the Default Group unless moved to another group on the Host IP screen If you want the same restrictions to apply to everyone select Default for the Group In this case there is no need to enter any Hosts on the Host IP screen If you wish to apply different restrictions to different Groups sele...

Страница 41: ...group on the Host IP screen Access Group This allows you to create different access rights for different Groups of PCs If you want the same restrictions to apply to everyone select Default for the Group In this case there is no need to enter any Hosts on the Host IP screen If you wish to apply different restrictions to different Groups select the desired Group The update will apply to the selected...

Страница 42: ...ted in the sampling time to check The default is 400 mil sec Maximum total of new sessions The maximum number of new sessions in the system that is acceptable in the sampling time Any new incoming sessions will be dropped after the number of new sessions exceeds it Default 65535 session sec Maximum new Sessions for Host The maximum number of new sessions from the host that is acceptable in the sam...

Страница 43: ...AN any WAN port or ALL interfaces through which a packet passes Protocol The packet type that will be processed via the above interface by this device Foreign Port Range Enter the beginning and end of the foreign port range used for the traffic you are configuring If a single port is used instead of a range enter the port number in both fields Device Port Range Enter the beginning and end of the d...

Страница 44: ...g your VPN you must make following choices first 1 If the remote end is a network the two endpoint networks must have different LAN IP address ranges If the remote endpoint is a single PC running a VPN client its destination address must be a single IP address with a subnet mask of 255 255 255 255 2 You can use the Internet Key Exchange IKE setup or Manual Keying that requires you to specify each ...

Страница 45: ...he Network hosts can use the LAN to LAN connection You can choose a single IP address the subnet or a selected IP range to make a VPN LAN to LAN connection Remote Security Network These entries identify the private network on the remote peer VPN router whose hosts can use the LAN to LAN connection You can choose a single IP address the subnet or a selected IP range to make a VPN connection Remote ...

Страница 46: ...work These entries identify the private network on this VPN router The Network hosts can use the LAN to LAN connection You can choose a single IP address the subnet or a selected IP range to make VPN LAN to LAN connection Distinguished name remote client this is an email format address For example pete HotBrick com Preshared key Choose a shared secret for this entry They must be the same on both u...

Страница 47: ... AES Phase 1 Authentication Method There are two authentication methods available MD5 and SHA1 Secure Hash Algorithm Phase 1 SA Life Time By default the Security Association lifetime is 3600 Sec Force Deletion after Expiring Once SA expires tunnel will be removed and related resources will be released to the system Security level Encryption Method specifies the encryption mechanism to use Data enc...

Страница 48: ...channel Aggressive Mode is another way of accomplishing a phase one exchange It is faster and simpler than main mode but does not provide identity protection for the negotiating nodes Perfect Forward Secrecy PFS If PFS is enabled IKE phase 2 negotiation will generate new key values for IP traffic encryption authentication Preshared Key This field authenticates the remote IKE peer Key Lifetime This...

Страница 49: ... Anti Replay This keeps IP packet level security in order Passive mode This means that your PC establishes the data connection if you enable passive mode Check ESP Pad If enabled ESP Encapsulating Security Payload it will check ESP padding Allow Full ECN Enable will allow full Explicit Congestion Notification ECN ECN is a standard proposed by the IETF that will cut down on network congestion and r...

Страница 50: ... log once it is expired Retry Interval It is the time period between two consecutive retries Maxtime to complete Phase 1 It indicates the maximum time allowed to be negotiated in Phase 1 If it expires often it s recommended to increase the Maxtime period or reduce DH group level Default value is 30 sec Maxtime to complete Phase 2 It indicates the maximum time allowed to be negotiated in Phase 2 If...

Страница 51: ...398 0888 Fax 305 398 5966 VPN Configuration SA List VPN configuration SA list The list will display the details of all Policy Setup configuration data that you have setup You can modify it by mouse clicking each row 51 ...

Страница 52: ...PN IKE Global Setting web page Message Status Time This indicates when this message is created using the system time Priority It This indicates the severity level of a message for analysis Undefined messages Module The module that is responsible for the message being sent in IPSec architecture Messages The message displays information describing the event that occurred 52 ...

Страница 53: ...the QoS function Queuing Method Theses methods determine how to manage your queue Priority Queuing is one of the first queuing variations to be widely implemented IP TOS Type of Service Feature Process TOS Field An 8 bit field in the IP Packet header designed to contain values indicating how each packet should be handled in the network If you choose enable it will enable this function to process t...

Страница 54: ...tions to be widely implemented IP TOS Process TOS Field An 8 bits field in the IP packet header designed to contain values indicating how each packet should be processed in the network Enable this function to process the IP Type of Service field Overwrite policy priority Choose yes to set the priority of the TOS field in IP the packet to overwrite the priority defined in the policy configuration Q...

Страница 55: ...source address of packets here It has two types IP address or MAC address If you select IP address you can define the IP address range otherwise you can define up to four MAC addresses Destination Address Define the destination address of packets here The explanation is as the same as above Protocol Type The field defines traffic packet type i e IP TCP and UDP Source Port Define the source port of...

Страница 56: ...d password re enter it in the Verify Password field then save it When you connect to the Load Balancer with your Browser you will be prompted for the password as shown below Enter Admin for the User Name Enter the password for the Dual WAN VPN Firewall as set on the Admin Password screen above The default is blanks 56 ...

Страница 57: ...SMTP Server Address This is the email server a warning email will be sent to If the setting is enabled For example mail domain com Email SMTP Server User Name This is the user name of the email sender for authentication optional Email SMTP Server Password This is the user password Email Recipient Address This is the email recipient address ex admin yourdomain com If one of the WAN port disconnects...

Страница 58: ...P software you can use a standard MIB 2 file with the VPN 1400 2 System Information Contact Person The contact information for the person responsible for this device Device name The name of the Dual WAN VPN Firewall Physical Location The location of the Dual WAN VPN Firewall Community A relationship between an SNMP agent and a set of SNMP managers that defines authentication access control and pro...

Страница 59: ...to 3 syslog servers can be used Enable You can enable or disable each server temporarily Port If your syslog does not use the default port change it here Log Priority for modules The messages are grouped into 8 priority levels from Emergency to Debug The lower the level the fewer messages will be generated Emergency is the lowest priority level and Debug is the highest Setting the priority to Debu...

Страница 60: ...HotBrick Tel 305 398 0888 Fax 305 398 5966 Management Assistant Upgrade Firmware ...

Страница 61: ...s this button will perform a DHCP Renew transaction with the ISP s DHCP server This will extend the allocation period for your current WAN IP IP Address The public WAN address of the Dual WAN VPN Firewall as seen from the Internet This IP Address is allocated by the ISP Internet Service Provider Subnet Mask The Network Mask Subnet Mask for the above IP Address Gateway The default gateway for this ...

Страница 62: ...will display either Connected or Not Connected Default Loading Share The default traffic loading between the WAN ports Current Loading Share The current traffic loading between the WAN ports Current Loading The number of sessions Bytes and Packets currently being processed on each port Current Bandwidth The current Download and Upload speeds on each WAN port Check NAT Detail will display the NAT S...

Страница 63: ...t timeout values for TCP and UDP connections TCP Prosperity This displays the MSS Maximum Segment Size and Maximum Windows size for TCP packets NAT Traffic This section displays statistics for both outgoing LAN to Internet and incoming Internet to local traffic NAT Connections This displays the current number of active connections For further details click the View Connection list button Errors St...

Страница 64: ...ure either Enable or Disable DMZ Status of the DMZ feature either Enable or Disable Block URL Status of the Block URL feature either Enable or Disable Hardware ID The manufacturer s ID for this specific device Device Statistics System UpTime The time since the system of a device was last initialized CPU Usage The current CPU usage percentage Memory Usage The current usage percentage of Memory Heap...

Страница 65: ...ings will be erased The default IP address password and ALL other settings will be restored to the factory default values The DCHP server function will be enabled These changes mean that your prior configuration is invalid and you will have to re connect to the Dual WAN VPN Firewall using its default IP address 192 168 1 1 65 ...

Страница 66: ... 10 100BaseT RJ45 for WAN LEDs 14 LAN 2 WAN 2 Status 1 Power Power Input AC 110V 230V 0 5A FCC Statement This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference 2 This device must accept any interference received including interference that may cause improper operation CE Marking Warning This is a Clas...

Страница 67: ...on to each PC when the PC boots For all non Server versions of Windows the default TCP IP setting is to act as a DHCP client If you wish to check your TCP IP settings the procedure is described in the following sections If your LAN has a Router the LAN Administrator must re configure the Router itself Checking TCP IP Settings Windows 9x ME 1 Select Control Panel Network You should see a screen lik...

Страница 68: ...Specify an IP Address If your PC is already configured check with your network administrator before making the following changes If the DNS Server fields are empty select Use the following DNS server addresses and enter the DNS address or addresses provided by your ISP then click OK On the Gateway tab enter Dual WAN VPN Firewall IP address in the New Gateway field and click Add as shown below Your...

Страница 69: ...side the Add button then click Add Checking TCP IP Settings Windows 2000 6 Select Control Panel Network and Dial up Connection Right click the Local Area Connection icon and select Properties You should see a screen like the following Figure B 5 Network Configuration Win 2000 Select the TCP IP protocol for your network card Click on the Properties button You should then see a screen like the follo...

Страница 70: ...Firewall Using a fixed IP Address Use the following IP Address If your PC is already configured check with your network administrator before making the following changes Enter Dual WAN VPN Firewall IP address in the Default gateway field and click OK Your LAN administrator can advise you of the IP Address they assigned to the Multi WAN VPN Link Balancer If the DNS Server fields are empty select Us...

Страница 71: ...nel Network Connection Right click the Local Area Connection and choose Properties You should see a screen like the following Figure B 7 Network Configuration Windows XP Select the TCP IP protocol for your network card Click on the Properties button You should then see a screen like the following 71 ...

Страница 72: ...Link Balancer Using a fixed IP Address Use the following IP Address If your PC is already configured check with your network administrator before making the following changes Enter the Dual WAN VPN Firewall IP address in the Default gateway field and click OK Your LAN administrator can advise you of the IP Address they assigned to the Dual WAN VPN Firewall If the DNS Server fields are empty select...

Страница 73: ...0 2 Mask Internet Access Problem When I try to reach an URL or IP address I get a time out error Solution A number of things could be causing this Try the following troubleshooting steps Check if other PCs work If they do ensure that your PCs IP settings are correct If using a Fixed Static IP Address check the Network Mask Default gateway and DNS as well as the IP Address If the PCs are configured...

Страница 74: ...IP addresses that are available to you These settings are only possible if you have a static IP address available on one or both of your WAN ports This example takes a tunnel between a VPN 1400 2 and a LB 2 VPN This example applies to the HotBrick 401VPN X2 LB 2 VPN and 1400 2 series you can use either unit at both sides You can use the IP addresses from the network diagram above This type of tunn...

Страница 75: ... so they need to be different in order to avoid IP address conflicts These are all the settings you need to setup the tunnel You can push the connect buttons at one of the locations this unit will be initiator of the tunnel the other unit will be the responder You can check the tunnel status in the SA list Information about key lifetimes and these kind of things you can find by pushing the tunnel ...

Страница 76: ...HotBrick Tel 305 398 0888 Fax 305 398 5966 76 ...

Результаты поиска

Содержание Dual WAN Firewall VPN 1400/2

Отзывы:

Похожие инструкции для Dual WAN Firewall VPN 1400/2

Бренды по названию

Популярные бренды

HotBrick Dual WAN Firewall VPN 1400/2, Руководство пользователя

Результаты поиска

Содержание Dual WAN Firewall VPN 1400/2

Отзывы:

Похожие инструкции для Dual WAN Firewall VPN 1400/2

Бренды по названию

Популярные бренды