Planet Networking & Communication VRT-311 Bedienungsanleitung

Broadband VPN Router

VRT-311 / VRT-311S

User s Manual

The products and programs described in this User sManual are licensed products of PLANET

Technology, This User sManual contains proprietary information protected by copyright, and

this User sManual and all accompanying hardware, software, and documentation are copy-

righted.

No part of this User sManual may be copied, photocopied, reproduced, translated, or reduced

to any electronic medium or machine-readable form by any means by electronic or mechanical.

Including photocopying, recording, or information storage and retrieval systems, for any pur-

pose other than the purchaser's personal use, and without the prior express written permission

of PLANET Technology.

Disclaimer

PLANET Technology does not warrant that the hardware will work properly in all environments

and applications, and makes no warranty and representation, either implied or expressed, with

respect to the quality, performance, merchantability, or fitness for a particular purpose.

PLANET has made every effort to ensure that this User sManual is accurate; PLANET dis-

claims liability for any inaccuracies or omissions that may have occurred.

Information in this User sManual is subject to change without notice and does not represent a

commitment on the part of PLANET. PLANET assumes no responsibility for any inaccuracies

that may be contained in this User s Manual. PLANET makes no commitment to update or keep

current the information in this User sManual, and reserves the right to make improvements to

this User sManual and/or to the products described in this User sManual, at any time without

notice.

If you find information in this manual that is incorrect, misleading, or incomplete, wewould

appreciate your comments and suggestions.

CE mark Warning

This is aclass Bdevice, In adomestic environment, this product may cause radio interference,

in which case the user may be required to take adequate measures.

Trademarks

The PLANET logo is atrademark of PLANET Technology. This documentation may refer to

numerous hardware and software products by their trade names. In most, if not all cases, these

designations are claimed as trademarks or registered trademarks by their respective compa-

nies.

Revision

User s Manual for PLANET Broadband VPN Router:

Model: VRT-311 / VRT-311S

Rev: 1.0 (May. 2004)

Part No. EM-VRT311V1

Table of Contents

CHAPTER 1INTRODUCTION..........................................................................1

VRT-311 /VRT-311S Features...............................................................................1

Package Contents.................................................................................................3

Physical Details.....................................................................................................4

CHAPTER 2INSTALLATION...........................................................................8

Requirements........................................................................................................8

Procedure..............................................................................................................8

CHAPTER 3SETUP........................................................................................10

Overview..............................................................................................................10

Configuration Program.......................................................................................11

Setup Wizard.......................................................................................................14

LAN Screen..........................................................................................................17

CHAPTER 4PC CONFIGURATION...............................................................19

Overview..............................................................................................................19

Windows Clients.................................................................................................19

Macintosh Clients...............................................................................................30

Linux Clients........................................................................................................30

Other Unix Systems............................................................................................30

CHAPTER 5OPERATION AND STATUS......................................................31

Operation.............................................................................................................31

Status Screen......................................................................................................31

Connection Status - PPPoE...............................................................................33

Connection Status - PPTP..................................................................................35

Connection Status - Telstra Big Pond..............................................................36

Connection Details - SingTel RAS.....................................................................37

Connection Details - Fixed/Dynamic IP Address.............................................39

CHAPTER 6INTERNETFEATURES.............................................................41

Overview..............................................................................................................41

WAN Port Configuration.....................................................................................42

Advanced Internet...............................................................................................45

Dynamic DNS (Domain Name Server)...............................................................49

Virtual Servers.....................................................................................................51

Options.................................................................................................................53

CHAPTER 7SECURITY CONFIGURATION..................................................54

Overview..............................................................................................................54

Admin Login........................................................................................................54

Access Control....................................................................................................56

Firewall Rules......................................................................................................60

Logs......................................................................................................................64

E-mail...................................................................................................................67

SecurityOptions.................................................................................................69

Scheduling...........................................................................................................71

Services...............................................................................................................72

CHAPTER 8VPN (IPSEC)..............................................................................73

Overview..............................................................................................................73

Common VPN Situations....................................................................................75

VPN Configuration..............................................................................................77

VPN Examples.....................................................................................................87

Certificates.........................................................................................................105

CRLs...................................................................................................................109

Status.................................................................................................................110

CHAPTER 9MICROSOFTVPN....................................................................112

Overview............................................................................................................112

Server Setup......................................................................................................112

Client Database.................................................................................................113

Status Screen....................................................................................................115

Windows Client Setup......................................................................................116

CHAPTER 10OTHER FEATURES & SETTINGS.......................................124

Overview............................................................................................................124

Config File..........................................................................................................125

Network Diagnostics........................................................................................126

PC Database......................................................................................................127

Remote Administration.....................................................................................131

Routing...............................................................................................................133

Upgrade Firmware.............................................................................................138

UPnP...................................................................................................................139

APPENDIX ATROUBLESHOOTING...........................................................140

Overview............................................................................................................140

General Problems.............................................................................................140

Internet Access..................................................................................................140

APPENDIX BSPECIFICATIONS.................................................................142

VRT-311 / VRT-311S..........................................................................................142

FCC Statement..................................................................................................142

CE Marking Warning.........................................................................................143

Chapter1

Introduction

This Chapter provides an overview of VRT-311 / VRT-311S's features and ca-

pabilities.

Congratulations on the purchase of your newVRT-311 / VRT-311S . VRT-311 / VRT-311S is

a multi-function device providing the following services:

• Shared Broadband Internet Access for all LAN users.

• VPN Gateway for IPSec VPN connections to remote PCs or sites.

• 3-Port Switching Hub for 10BaseTor 100BaseTconnections.

Figure 1: VRT-311 / VRT-311S

VRT-311 / VRT-311S Features

VRT-311 / VRT-311S incorporates manyadvanced features, carefullydesigned to provide

sophisticated functions while being easyto use.

Internet Access Features

• Shared Internet Access. All users on the LAN or WLAN can access the Internet

through VRT-311 / VRT-311S, using onlya single external IPAddress. The local (invalid)

IPAddresses are hidden fromexternal sources. This process is called NAT(Network Ad-

dress Translation).

• DSL & Cable ModemSupport. VRT-311 / VRT-311S has a 100BaseTEthernet port

for connecting a DSL or Cable Modem. All popular DSL and Cable Modems are sup-

ported. SingTel RAS and Big Pond (Australia) login support is also included.

• PPPoE, PPTP, SingTel RAS and Telstra Big Pond Support. The Internet (WAN

port) connection supports PPPoE (PPP over Ethernet), PPTP (Peer-to-Peer Tunneling Pro-

tocol), SingTel RAS and Telstra Big Pond (Australia), as well as "Direct Connection"type

services.

VRT-311 User Guide

• Fixed or Dynamic IP Address. On the Internet (WAN port) connection, VRT-311 /

VRT-311S supports both Dynamic IPAddress (IPAddress is allocated on connection) and

Fixed IPAddress.

Advanced Internet Functions

• Communication Applications. Support for Internet communication applications, such

as interactive Games, Telephony, and Conferencing applications, which are often difficult

to use when behind a Firewall, is included.

• Special Internet Applications. Applications which use non-standard connections or

port numbers are normallyblocked bythe Firewall. The abilityto define and allowsuch

applications is provided, to enable such applications to be used normally.

• Virtual Servers. This feature allows Internet users to access Internet servers on your

LAN. The required setup is quick and easy.

• Multi-DMZ. For each WAN (Internet) IPaddress allocated to you, one (1) PC on your

local LAN can be configured to allowunrestricted 2-waycommunication with Servers or

individual users on the Internet. This provides the abilityto run programs which are in-

compatible with Firewalls.

• Physical DMZ Port. PCs connected to the DMZ port are effectivelyisolated fromyour

LAN, while connected to the Internet. This provides additional securityfor your LAN

while allowing your Servers to be accessed fromthe Internet.

• URL Filter. Use the URL Filter to block access to undesirable Web sites byLAN users.

• Internet Access Log. See which Internet connections have been made.

• VPN Pass through Support. PCs with VPN (Virtual Private Networking) software

using PPTP, L2TP and IPSec are transparentlysupported - no configuration is required.

LAN Features

• 3-Port Switching Hub. VRT-311 / VRT-311S incorporates a 3-port 10/100BaseT

switching hub, making it easyto create or extend your LAN.

• DHCP Server Support. Dynamic Host Configuration Protocol provides a dynamic IP

address to PCs and other devices upon request. VRT-311 / VRT-311S can act as a DHCP

Server for devices on your local LAN and WLAN.

• Multi Segment LAN Support. LANs containing one or more segments are supported,

via VRT-311's / VRT-311S RIP(Routing Information Protocol) support and built-in static

routing table.

• DMZ Port. Used when allowing Servers on your LAN to be accessed fromthe Internet,

the DMZ port provides additional protection for both your Servers and your LAN.

Configuration & Management

• Easy Setup. Use your WEB browser fromanywhere on the LAN or WLAN for configu-

ration.

• Remote Management. VRT-311 / VRT-311S can be managed fromanyPC on your

LAN. And, if the Internet connection exists, it can also (optionally) be configured via the

Internet.

• UPnP Support. UPnP(Universal Plug and Play) allows automatic discoveryand con-

figuration of VRT-311 / VRT-311S. UPnPis bysupported byWindows ME, XP, or later.

• Configuration File Backup & Restore. You can backup (download) VRT-311 /

VRT-311S 's configuration file to your PC, and restore (upload) a previously-saved con-

figuration file to VRT-311 / VRT-311S.

Introduction

SecurityFeatures

• Password - protected Configuration. Optional password protection is provided to

prevent unauthorized users frommodifying the configuration data and settings.

• NAT Protection. An intrinsic side effect of NAT(Network Address Translation) tech-

nologyis that byallowing all LAN users to share a single IPaddress, the location and even

the existence of each PC is hidden. Fromthe external viewpoint, there is no network, only

a single device - VRT-311 / VRT-311S.

• Stateful Inspection Firewall. All incoming data packets are monitored and all incom-

ing server requests are filtered, thus protecting your network frommalicious attacks from

external sources.

• Protection against DoS attacks. DoS (Denial of Service) attacks can flood your

Internet connection with invalid packets and connection requests, using so much bandwidth

and so manyresources that Internet access becomes unavailable. VRT-311 / VRT-311S in-

corporates protection against DoS attacks.

• Rule-based Policy Firewall. To provide additional protection against malicious pack-

ets, you can define your own firewall rules. This can also be used to control the Internet

services available to LAN users.

IPSec VPN GatewayFeatures

• IPSec.. Support for IPSec standards, including IKE and certificates.

• Tunnels. Up to 100 VPN tunnels can be created for VRT-311, and up to 10 VPN tunnels

can be created for VRT-311S..

• High performance. High performance encryption engine maintains high throughput

even when using 3DES.

Microsoft VPN GatewaySupport

• PPTP Server. VRT-311 / VRT-311S emulates a Microsoft PPTP VPN Server, allowing

clients to use the Microsoft VPN client provided in Windows.

• Windows Client Support. Remote users can use the Microsoft VPN client (VPN

Adapter) provided in recent versions of Windows.

• Easy Setup. For both the Administrator and remote users, the Microsoft VPN is much

easier to configure than IPSec VPN.

Package Contents

The following items should be included:

• VRT-311 / VRT-311S Unit

• Power Adapter

• Quick Installation Guide

• CD-ROM containing the on-line manual.

If anyof the above items are damaged or missing, please contact your dealer immediately.

VRT-311 User Guide

Physical Details

Front-mounted LEDs

Figure 2: VRT-311 s Front Panel

Figure 3: VRT-311S s Front Panel

Power On - Power on.

Off - No power.

Status (Red) On - Error condition.

Off - Normal operation.

Blinking - This LED blinks during start up.

LAN Each port has 2 LEDs

• LNK/ACT

• On - Corresponding LAN (hub) port is active.

• Off - No active connection on the corresponding LAN (hub) port.

• Flashing - Data is being transmitted or received via the corre-

sponding LAN (hub) port.

• 100

• On - Corresponding LAN (hub) port is using 100BaseT.

• Off - Corresponding LAN (hub) port connection is using

10BaseT, or no active connection.

DMZ • LNK/ACT

• On - DMZ port is active.

• Off - No active connection to the DMZ port.

• Flashing - Data is being transmitted or received via the DMZ

port.

• 100

• On - DMZ port is using 100BaseT.

• Off - DMZ port connection is using 10BaseT, or no active con-

nection.

WAN On - Connection to the modemattached to the WAN (Internet) port is

established.

Introduction

Off - No connection to a modemon the WAN (Internet) port.

Flashing - Data is being transmitted or received via the WAN port.

PPPoE

(For VRT-311

only)

On - PPPoE connection established.

Off - No PPPoE connection.

VRT-311 User Guide

Rear Panel

Figure 4: VRT-311 Rear Panel

Figure 5: VRT-311S Rear Panel

Reset Button This button has two (2) functions:

• Reboot. When pressed and released, VRT-311 / VRT-311S will

reboot (restart).

• Clear All Data. This button can also be used to clear ALL data

and restore ALL settings to the factorydefault values.

To Clear All Data and restore the factory default values:

1. Power Off.

2. Hold the Reset Button down while you Power On.

3. Keep holding the Reset Button for a fewseconds, until the RED

LED has flashed TWICE.

4. Release the Reset Button. VRT-311 / VRT-311S is nowusing

the factorydefault values.

WAN port

(10/100BaseT) Connect the DSL or Cable Modemhere. If your modemcame with a

cable, use the supplied cable. Otherwise, use a standard LAN cable.

DMZport

PCs or devices connected to the DMZ port are isolated fromthe

LAN.

If you have a server you wish to make available to the public, you can

connect it here. To use multiple servers, use a standard LAN cable to

connect the DMZ port to a normal port on another hub, and connect

your servers to the hub.

10/100BaseT

LAN connections Use standard LAN cables (RJ45 connectors) to connect your PCs to

these ports.

Note:

AnyLAN port on VRT-311 / VRT-311S will automaticallyfunction

as an "Uplink"port when required. Just connect anyport to a normal

port on the other hub, using a standard LAN cable.

Power port Connect the supplied power adapter here.

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Planet Networking & Communication Netzwerk-Router Handbücher