LevelOne WHG-505, Руководство пользователя

Страница: 209 / 314

203
Success Page” after the page being brought up successfully. The ActiveX component helps set up individual
IPSec VPN tunnels between clients and WHG-505 and check the validity of IPSec VPN tunnels between them.
If the connection is down, the ActiveX component will detect the broken link and decompose the IPSec tunnel.
Once the IPSec VPN tunnel was built, all sent packets will be encrypted. Without connecting to the original
IPSec VPN tunnel, a client has no alternative way to gain network connection beyond this. IPSec VPN feature
supported by WHG-505 directly solves possible data security leak problem between clients and the system via
either wireless or wired connections without extra hardware or client software installed.
•
Limitations
The limitation on the client side due to ActiveX and Windows OS includes:
Internet Connection Firewall of Windows XP or Windows XP SP1 is not compatible with IPSec protocol. It
shall be turned off to allow IPSec packets to pass through.
Without patch, ICMP (Ping) and PORT command of FTP can not work in Windows XP SP2.
The forced termination (through CTRL+ALT+DEL, Task Manager) of the Internet Explorer will stop the
running of ActiveX. It causes that IPSec tunnel cannot be cleared properly at client device. A reboot of
client device is needed to clear the IPSec tunnel.
The crash of Windows Internet Explorer may cause the same result.
•
Internet Connection Firewall
In Windows XP and Windows XP SP1, the Internet Connection Firewall is not compatible with IPSec. Internet
Connection Firewall will drop packets from tunneling of IPSec VPN. Please TURN OFF Internet Connection
Firewall feature or upgrade the Windows OS into Windows XP SP2.
•
ICMP and Active Mode FTP
In Windows XP SP2 without patching by KB889527, it will drop ICMP packets from IPSec tunnel. This problem
can be fixed by upgrading patch KB889527. Before enabling IPSec VPN function on client devices, please