Multitech RouteFinder RF560VPN Bedienungsanleitung

RF760VPN

RF660VPN

RF600VPN

VPN Tunnel Configured for Manual Mode Examples

IP Sec Pass-Through in Manual Mode Examples

Reference Guide

Multi-Tech Systems, Inc. RF760/660/600VPN Tunnel Examples Reference Guide (S000308D) 2

RF760VPN / RF660VPN / RF600VPN

Tunnel Examples in Manual Mode

This publication may not be reproduced, in whole or in part, without prior expressed written permission from Multi-

to the contents hereof and specifically disclaims any implied warranties of merchantability or fitness for any particular

purpose. Furthermore, Multi-Tech Systems, Inc. reserves the right to revise this publication and to make changes

from time to time in the content hereof without obligation of Multi-Tech Systems, Inc. to notify any person or

organization of such revisions or changes.

Reference Guide Number: S000308D

Revision Date Description

A 07/02/03 Initial release

B 08/19/03 Added RF560VPN

C 03/19/04 Changed to document the RF760VPN/RF660VPN/RF600VPN only

D 11/17/04 & 01/25/05 Changes for software 3.20 and 3.21

The examples on the following pages illustrate:

1. RF760VPN / RF660VPN / RF600VPN connected to another RF760VPN / RF660VPN / RF600VPN

through a VPN tunnel configured for Manual Mode.

2. RF760VPN / RF660VPN / RF600VPN, behind a NAT box, doing IPSec Pass-Through in Manual Mode

to another RF760VPN / RF660VPN / RF600VPN.

The RouteFinder software is pre-installed on the RF760VPN, RF660VPN, and RF600VPN RouteFinders. The

RouteFinders use the same software, version 3.21. Initial configuration is required in order for you to run the

RouteFinder software and begin operation.

The browser-based interface eases VPN configuration and management. The VPN functionality is based on IPSec

and PPTP protocols and uses 168-bit Triple DES encryption to ensure that your information remains private.

IMPORTANT:

Caution: Use a safe Password! Your first name spelled backwards is not a sufficiently safe password; a password

such as xfT35$4 is better.

Example 1 –Overview

Multi-Tech Systems, Inc. RF760/660/600VPN Tunnel Examples Reference Guide (S000308D) 3

Example 1

This example provides a sample RouteFinder configuration and related address scheme for an application employing

LAN-to-LAN VPN communication. It shows how to configure an RF660VPN at Site A and an RF660VPN at Site B so

that Site A and Site B communicate through a secure connection over the Internet using a VPN tunnel in Manual

Mode. This example assumes both VPN gateways have fixed IP addresses.

RF760VPN, RF660VPN or RF600VPN LAN-to-LAN Configuration Diagram:

Example 1 –Site A

Multi-Tech Systems, Inc. RF760/660/600VPN Tunnel Examples Reference Guide (S000308D) 4

Example 1 – LAN-to-LAN Configuration Chart

Site A - Static IP Addresses (Input These Parameters

For the RF660VPN in the Home Office).

Site B - Static IP Addresses (Input These Parameters

For the RF660VPN in the Branch Office).

1. Domain name = site-A.com

2. Public Class C = 204.26.122.x

1. Domain name = site-B.com

2. Public Class C = 204.26.122.x

3. Networks & Services > Networks

LAN: 192.168.2.0 – 255.255.255.0

RemoteLAN: 192.168.10.0 – 255.255.255.0

RemoteWAN_IP: 204.26.122.3 – 255.255.255.255

. Networks & Services > Networks

LAN: 192.168.10.0 – 255.255.255.0

RemoteLAN: 192.168.2.0 – 255.255.255.0

RemoteWAN_IP: 204.26.122.103 – 255.255.255.255

. Network Setup > Interface

Default gateway = 204.26.122.1

Host name = RF660VPN.site-A.com

Eth0 = LAN, 192,168.2.1, 255.255.255.0

Eth1 = WAN, 204.26.122.103, 255.255.255.0

Eth2 = DMZ (don’t care)

. Network Setup > Interface

Default gateway = 204.26.122.1

Host name = RF660VPN.site-B.com

Eth0 = LAN, 192.168.10.1, 255.255.255.0

Eth1 = WAN, 204.26.122.3, 255.255.255.0

Eth2 = DMZ (don’t care)

5. Packet Filters > Packet Filter Rules

LAN – Any – Any – Accept

RemoteLAN – Any – Any – Accept

. Packet Filters > Packet Filter Rules

LAN – Any – Any – Accept

RemoteLAN – Any – Any – Accept

6. VPN > IPSec

Check and Save VPN Status

Add a Manual connection:

Connection name = SiteA

Authentication Method = ESP3-DES(MD5-96)

SPI Base = 0x201

ESP Encryption Key (must be the same at both sites)

Authentication Key (must be the same at both sites)

Local WAN IP = WAN

Local LAN = LAN

Remote Gateway IP = RemoteWAN_IP

Remote LAN = RemoteLAN

6. VPN > IPSec

Check and Save VPN Status

Add a Manual connection:

Connection name = SiteB

Authentication Method = ESP3-DES(MD5-96)

SPI Base = 0x201

ESP Encryption Key (must be the same at both sites)

Authentication Key (must be the same at both sites)

Local WAN IP = WAN

Local LAN = LAN

Remote Gateway IP = RemoteWAN_IP

Remote LAN = RemoteLAN

For LAN-to-LAN connectivity, the RouteFinders utilize the IPSec protocol to provide up to 100 tunnels with strong

168-bit 3DES encryption using IKE and PSK key management.

In addition, they provide very high performance up to 50Mbps of 3DES encryption throughput.

Example 1 –Site A

Multi-Tech Systems, Inc. RF760/660/600VPN Tunnel Examples Reference Guide (S000308D) 5

Example 1 –Address Table

Enter the configuration information (e.g., the Default Gateway and other IP addresses used) into the appropriate field

of the Address Table below. Please print this page and use it to fill in your specific RouteFinder information and keep

for future reference. (Example information below is shown to match with the diagram pictured above.)

IP Address Net Mask Default Gateway

Network Port connected to the internal

network (LAN on eth0) Site A.

___.___._._

192.168.2.1

___ ___.___._

255.255.255.0

Network Port connected to the external

network (WAN on eth1) Site A

___.__.___.___

204.26.122.103

___.___.___._

255.255.255.0

___.__.___._

204.26.122.1

Network Port connected to the internal

network (LAN on eth0) Site B

___.___.__._

192.168.10.1

___.___.___._

255.255.255.0

Network Port connected to the external

network (WAN on eth1) Site B

___.__.___._

205.26.122.3

___.___.___._

255.255.255.0

___.__.___._

204.26.122.1

LAN-to-LAN Application – Site A: LAN-to-LAN Application – Site B:

1. Domain name = __________

2. Public Class C = ___.___.___.X

1. Domain name = __________

2. Public Class C = ___.___.___.X

3. Networks & Services > Networks

LAN: ___.___.___.0, 255.255.255.0

RemoteLAN: ___.___.___.0, 255.255.255.0

RemoteWAN_IP: ___.___.___.___, 255.255.255.255

3. Networks & Services > Networks

LAN: ___.___.___.0, 255.255.255.0

RemoteLAN: ___.___.___.0, 255.255.255.0

RemoteWAN_IP: ___.___.___.___, 255.255.255.255

4. Network Setup > Interfaces

Default gateway = ___.___.___.___

Host name = _____________

Eth0 = LAN, ___.___.___.___, 255.255.255.0

Eth1 = WAN, ___.___.___.___, 255.255.255.___

Eth2 = DMZ (don’t care)

4. Network Setup > Interfaces

Default gateway = ___.___.___.___

Host name = _____________

Eth0 = LAN, ___.___.___.___, 255.255.255.0

Eth1 = WAN, ___.___.___.___, 255.255.255.___

Eth2 = DMZ (don’t care)

Example 1 –Site A

Multi-Tech Systems, Inc. RF760/660/600VPN Tunnel Examples Reference Guide (S000308D) 6

Example 1 Site A Configuration

1. Connect a workstation to the RF660VPN’s LAN port via Ethernet for Site A. In this example, the RouteFinder will

be referenced as RF660VPN, but the RF760VPN and RF600VPN can be configured in the same way.

2. Set the workstation IP address to 192.168.2.100 subnet.

3. Turn on power to the RF660VPN RouteFinder and wait until you hear 5 beeps.

4. Bring up your Web browser on the workstation. At the Web browser’s address line, type the default Gateway

address of https://192.168.2.1 and press the Enter key. In some environments, one or more Security Alert

screen(s) display.

Note: Make sure your PC’s IP address is in the same network as the router’s IP Address. WINIPCFG and

IPCONFIG are tools for finding a computer’s default gateway and MAC address. In Windows 98/ME you can type

WINIPCFG. In Windows 2000/NT, you can type IPCONFIG.

At the initial Security Alert screen, click Yes and follow any additional on-screen prompts. (This step is

eliminated when you have generated a CA certificate at Administration >Site Certificate)

5. The Login screen is displayed. Type the default User name of admin (all lower-case), tab to the Password

entry and type the default Password of admin (all lower-case), and click on Login. The User and Password

entries are case-sensitive (both must be all lower-case). The password can be up to 12 characters. You will want

to change User and Password entries from the default (admin) to something else. (If Windows displays the

AutoComplete screen, for security reasons, you may want to click No to tell the Windows OS to not remember

the Password.)

Example 1 –Site A

Multi-Tech Systems, Inc. RF760/660/600VPN Tunnel Examples Reference Guide (S000308D) 7

6. If someone else is already logged in to the RouteFinder, or you were logged in recently, the message below is

displayed.

Click the Yes button. The Login screen displays. Repeat step 5.

7. The Web Management Home screen is displayed.

Example 1 –Site A

Multi-Tech Systems, Inc. RF760/660/600VPN Tunnel Examples Reference Guide (S000308D) 8

8. Click on Administration > System Setup to set the correct zone, date and time for your location.

Administration

System Setup

System Time

Example 1 –Site A

Multi-Tech Systems, Inc. RF760/660/600VPN Tunnel Examples Reference Guide (S000308D) 9

9. Click on Wizard Setup. Enter information for Site A of this example.

a) Enter the Administrator Email Address (can be anything). (Example: [email protected])

b) Enter the Host name for the RouteFinder (can be anything). (Example: RF660VPN.Site-A.com)

c) LAN IP Address and Subnet Mask are set at the defaults. This should be acceptable for Site A.

d) Enter the WAN IP Address. This is the PUBLIC STATIC IP address. (Example: 204.26.122.103)

e) Change the Gateway IP address; this is the IP address of the router that connects to the Internet. (Example:

204.26.122.1)

f) Place a checkmark in the Packet Filter Rule: LAN-ANY-ANY-ALLOW box. This enables the rule.

g) Specify any changes to the passwords that you feel are necessary.

h) Click Save to save the settings you just entered.

i) The following screen displays prompting you to save your changes. Click OK.

j) The following screen displays. Saving your settings will take several minutes. Since you kept the LAN IP

address the same, it is not necessary to change this system to a new IP address.

Example 1 –Site A

Multi-Tech Systems, Inc. RF760/660/600VPN Tunnel Examples Reference Guide (S000308D) 10

10. Click on Networks & Services > Network. The LAN IP network should already be defined. This is the private

LAN on eth0 at Site A (not shown in this example).

a) Define the IP network that is configured on the remote LAN port (the private LAN on eth0 at Site B) by

entering the following information. After this information is entered, it is added to the Network/Host list on

this screen.

For example: Name = RemoteLAN

IP address = 192.168.10.0

Subnet mask = 255.255.255.0

b) Define the IP address that is configured on the remote WAN port (the public WAN on eth1 at Site B) by

entering the following information. After this information is entered, it is added to the Network/Host list on

this screen.

For example: Name = RemoteWAN_IP

IP address = 204.26.122.3

Subnet mask = 255.255.255.255

After this information is entered, it displays at the bottom of the screen.

RemoteLAN 192.168.10.0 255.255.255.0

RemoteWAN_IP 204.26.122.3 255.255.255.255

11. Click on Packet Filters > Packet Filters Rules.

The rule for LAN should already be present. Add the rule RemoteLAN – Any – Any – ACCEPT.

This allows the Remote LAN at Site B to access the RouteFinder and LAN at Site A.

After the rule is entered, it displays under User Defined Packet Filter Rules.

1 RemoteLAN Any Any ACCEPT

Andere Handbücher für RouteFinder RF560VPN

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Multitech Netzwerk-Router Handbücher

Multitech

Multitech RoteFinder RF500S Bedienungsanleitung

Multitech

Multitech RouteFinder RF102S Bedienungsanleitung

Multitech

Multitech MultiConnect rCell MTR-H6 Bedienungsanleitung

Multitech

Multitech MultiConnect rCell100 Cat M1/NB-IoT Series Montageanleitung

Multitech

Multitech MultiVOIP 100 (MVP110 Bedienungsanleitung

Multitech

Multitech RouteFinder MTASR1-100 Technisches Handbuch

Multitech

Multitech MultiConnect rCell MTR-H6 Bedienungsanleitung

Multitech

Multitech MultiConnect rCell 100 Series Bedienungsanleitung

Multitech

Multitech RouteFinder MTASR1-100 Bedienungsanleitung

Multitech

Multitech MultiConnect rCell 100 Series Bedienungsanleitung

Multitech

Multitech RouteFinder MTASR2-201 Bedienungsanleitung

Multitech

Multitech RouteFinder MTASR1-100 Bedienungsanleitung

Multitech

Multitech RouteFinder MTASR3 Bedienungsanleitung

Multitech

Multitech MultiFrad FR3100 Bedienungsanleitung

Multitech

Multitech MultiConnect rCell 100 Series Bedienungsanleitung

Multitech

Multitech RouteFinder MTASR2-203 Bedienungsanleitung

Multitech

Multitech MultiConnect rCell 100 MTR-H5 Bedienungsanleitung

Multitech

Multitech MultiConnect rCell 100 Series Montageanleitung

Multitech

Multitech MultiFRAD FR220 Bedienungsanleitung

Multitech

Multitech RouteFinder RF550VPN Bedienungsanleitung

Multitech

Multitech MultiConnect rCell 100 Series Bedienungsanleitung

Multitech

Multitech RouteFinder RF825-C-Nx Bedienungsanleitung

Multitech

Multitech MultiConnect rCell 100 Series Bedienungsanleitung

Multitech

Multitech RouteFinder RF560VPN Bedienungsanleitung

Beliebte Netzwerk-Router Handbücher anderer Marken

Allnet

Allnet ALL0333AU Bedienungsanleitung

HomeSeer

HomeSeer HT-SEL Bedienungsanleitung

Sercomm

Sercomm Genesis OC3505D Bedienungsanleitung

Billion

Billion BIPAC 5102 Series Bedienungsanleitung

TP-Link

TP-Link TD-8817 Bedienungsanleitung

Motorola

Motorola MR1900 Bedienungsanleitung

Digi

Digi IX14 Bedienungsanleitung

Cisco

Cisco NCS 540 Handbuch

XAVi

XAVi X8821e Bedienungsanleitung

BEC

BEC 6200WZL Bedienungsanleitung

MikroTik

MikroTik hAP ac3 Series Bedienungsanleitung

Korenix

Korenix JetNet 5428G Series Bedienungsanleitung

NETGEAR

NETGEAR FS526T - Switch Bedienungsanleitung

Korenix

Korenix JetNet 5710G Series Bedienungsanleitung

Automated Logic

Automated Logic ZN551 Betriebsanleitung

Cisco

Cisco ASR 1000 Series Bedienerhandbuch

EnGenius

EnGenius ESR-9710 Bedienungsanleitung

Cisco

Cisco 805 Series Bedienungs- und Sicherheitshinweise