SnapGear VPN Router Bedienungsanleitung

SnapGearVPN Router Family

User Manual

Rev: May 30, 2002

7984 South Welby Park Drive #101

Salt Lake City, Utah 84084

Tel: 801-282-8492

Fax: 801-282-8496

1. Introduction...............................................................................................1

Terminology............................................................................................................. 2

Document Style ....................................................................................................... 5

Installing and configuring the SnapGear VPN Router ............................................ 6

The SnapGear VPN Router .................................................................................... 7

SnapGear VPN Router features ............................................................................. 9

2. Getting Started........................................................................................11

New Networks ....................................................................................................... 12

Setup Wizard ......................................................................................................... 13

System requirements ............................................................................................ 13

Configuring the SnapGear VPN Router on your network..................................... 13

Initial setup using Linux......................................................................................... 16

SnapGear Quick Setup Wizard............................................................................. 18

Configuring the PCs on your network ................................................................... 22

3. Connect to the Internet ..........................................................................24

Physically connect modem device........................................................................ 24

Select Internet connection..................................................................................... 25

Configure PCs to use SnapGear VPN Router Internet gateway.......................... 28

iii

Establishing the connection .................................................................................. 28

4. Dial-in server configuration ...................................................................30

Dial-in setup........................................................................................................... 31

Dial-in user accounts............................................................................................. 34

Remote user configuration .................................................................................... 38

5. Network Configuration ...........................................................................48

IP Configuration..................................................................................................... 48

Advanced IP Configuration ................................................................................... 51

DHCP Server......................................................................................................... 53

Advanced Networking ........................................................................................... 54

6. Firewall ....................................................................................................56

Incoming Access ................................................................................................... 56

Outgoing Access ................................................................................................... 59

Firewall Rules........................................................................................................ 61

Intruder Detection and Blocking............................................................................ 62

7. Virtual Private Networking .....................................................................64

PPTP client setup.................................................................................................. 66

PPTP server setup ................................................................................................ 68

IPSec Setup........................................................................................................... 82

IPSec Interoperability ............................................................................................ 87

8. System.....................................................................................................88

Time Server ........................................................................................................... 88

Password............................................................................................................... 88

Diagnostics ............................................................................................................ 88

Advanced............................................................................................................... 89

RESET button........................................................................................................ 89

9. Technical Support.......................................................................................90

Appendix A – LED Status Patterns................................................................91

Introduction

1. Introduction

This chapter provides an overview of the SnapGear VPN Router’s features and capabilities, and previews

how to install and configure your SnapGear VPN Router.

The SnapGear VPN Router enables small to medium-sized businesses to securely interconnect computers

on the office network to the Internet. The SnapGear VPN Router has all the features a business needs to

take full advantage of the Internet. Whether you are connecting to the Internet for the first time or looking

for a cost-effective and safe VPN solution, the SnapGear VPN Router will meet your needs.

The SnapGear VPN Router simply and securely interconnects your network to the Internet through a

robust embedded firewall. Shielded behind a NAT gateway, your office computers are protected from

outside threats. The SnapGear VPN Router filters and inspects packets of data to prevent unauthorized

Internet applications from accessing your network.

The SnapGear VPN Router provides your network with a virtual private network (VPN) server. A VPN

enables remote workers or branch offices to securely access your company network to send and receive

data at a very low cost. With the SnapGear VPN Router, you can now remotely access your office network

securely through the Internet. Additionally, the SnapGear VPN Router is able to connect as a client to

external VPNs.

With the SnapGear VPN Router, everyone on your office LAN can access the Internet through the one

connection. Your entire network can log on to the Internet using only one ISP account through the one

analog modem, DSL, or ISDN line, eliminating the need for a separate connection and ISP charge for each

individual user. With a dial-in modem connected to your SnapGear VPN Router, your remote staff can

also securely direct-dial into your office network.

This manual details how to take advantage of the features of your SnapGear VPN Router – including

setting up a VPN, a secure firewall and an Internet connection. It also details how to set up the SnapGear

VPN Router on your existing or new network. This is done through the web configuration interface.

Installing your SnapGear VPN Router into a well-planned network is quick and easy. However, network

planning and design is outside the scope of this manual. Please take some time to plan your network prior

to installing your SnapGear VPN Router.

Introduction

Terminology

Some commonly used terms that you will find in this document are as follows:

ADSL Asymmetric Digital Subscriber Line. A technology that allows for high-speed

data transfer over existing telephone lines. ADSL supports data rates between

1.5 and 9 Mb/s when receiving data and between 16 and 640 Kb/s when sending

data.

BOOTP Bootstrap Protocol is a protocol that lets a network user automatically receive an

IP address and have an operating system boot without user involvement. BOOTP

is the basis for the more advanced DHCP.

DHCP Dynamic Host Configuration Protocol. A communications protocol that assigns

IP addresses to computers when they are connected to the network.

DNS Domain Name System. This system allocates Internet domain names and

translates them into IP addresses. A domain name is a meaningful and easy to

remember name for an IP address.

DUN Dial Up Networking.

Ethernet A physical layer protocol based upon IEEE standards.

Extranet A private network that uses the public Internet to securely share part of a

business's information or operations with suppliers, vendors, partners, customers,

or other businesses. Extranets add external parties to a company’s intranet.

Firewall A network gateway device that protects a private network from users on other

networks. Typically, a firewall is installed to allow users on an intranet access to

the public Internet without allowing all public Internet users access to the

intranet.

Gateway A machine that provides a route (or pathway) to the outside world.

Hub A network device that allows more than one computer to be connected as a

LAN, usually using UTP cabling.

Introduction

IDB Intruder Detection and Blocking. A feature of your SnapGear VPN Router that

detects connection attempts from intruders and optionally blocks all further

connection attempts from the intruders’ machine.

Internet A worldwide system of computer networks - a public, cooperative, and self-

sustaining network of networks accessible to hundreds of millions of people

worldwide. Technically, what distinguishes the Internet is its use of a set of

protocols called TCP/IP.

Intranet A private TCP/IP network contained within an enterprise.

IPSec Internet Protocol Security. IPSec provides interoperable, high quality,

cryptographically based security at the IP layer, thus offering protection for all

network communications.

LAN Local Area Network.

LED Light-Emitting Diode.

MAC Address An Ethernet address set by the manufacturer.

Masquerade The process by which a gateway on the local network modifies outgoing packets

to replace the source address of these packets with its own IP address. In this

way, all IP traffic originating from the local network appears to come from the

gateway itself and not the machines on the local network.

NAT Network Address Translation. The translation of an IP address used on one

network to another IP address known on another network.

Net Mask The way that computers know which part of a TCP/IP address refers to the

network, and which part refers to the host range.

NTP Network Time Protocol (NTP) is used to synchronize clock times in a network

of computers.

PAT Port Address Translation. The translation of a port number used on one network

to another port number known on another network.

Introduction

PPP Point-to-Point Protocol. A networking protocol designed for simple links

between two peers.

PPPoE Point to Point Protocol over Ethernet. A protocol for connecting the users on an

Ethernet to the Internet through a common broadband medium, such as a single

DSL line, wireless device or cable modem.

PPTP Point-To-Point-Tunneling-Protocol. This is a protocol developed by Microsoft™

that is now popular for VPN applications. While generally not considered as

secure as IPSec it is considered “good enough” technology, especially since

Microsoft responded to a number of flaws in the original implementations.

Road Warrior A remote machine that does not have a fixed IP address.

Router A network device that moves packets of data. Differs from a hub or switch in

that a router usually is “intelligent” enough to know where final destinations

should be and how to get the packets there.

Subnet Mask See “Net Mask”.

Switch A network device that is like a hub, but much smarter. Although not a full router,

a switch understands, to some degree, the routing of Ethernet packets and adds

efficiency to a LAN by utilizing bandwidth more effectively.

TCP/IP Transmission Control Protocol / Internet Protocol – the basis of Internet

communications!

TCP/IP Address An address of the form nnn.nnn.nnn.nnn is the fundamental addressing form of

the Internet.

UTC Coordinated Universal Time.

UTP Unshielded Twisted Pair cabling. Most commonly known as Category 5 or CAT

5, representing a type of Ethernet cable that can operate up to 100Mb/s.

Introduction

VPN Virtual Private Networking is the concept of having two locations able to

communicate securely and effectively, usually across a public network such as

the Internet. Three key traits of VPN technology are: privacy (nobody else can

see what you are communicating), authentication (you know who you are

communicating with), and integrity (nobody else can tamper with your

messages/data).

WAN Wide Area Network.

WINS Windows Internet Naming Service (WINS) manages the association of

workstation names and locations with Internet Protocol addresses.

Document Style

Warnings: Where there is something that you should take particular note of, warning text like

this will appear.

Bold text in procedures indicates text that you type or the name of a screen object (such as a menu

or button).

Introduction

Installing and configuring the SnapGear VPN Router

Instructions for installing and configuring your new SnapGear VPN Router on your network are

contained in this manual. The basic steps and related chapters are as follows:

Step See chapter:

1. Interconnect the SnapGear VPN Router

and PCs on a local area network.

Chapter 2, Getting Started

2. Connect the telecommunications

hardware/modem (for dial in/dial out

internet access).

Chapter 3, Connect to the Internet

3. Set up the network IP addresses and

firewall.

Chapter 2, Configuring the SnapGear VPN

Router on your network

4. Set up Internet hardware and Internet

account and connect to the Internet.

Chapter 3, Connect to the Internet

5. Set up users’ security dial-in/dial

out/VPN.

Chapter 4, Dial-in server configuration

Chapter 7, Virtual Private Networking

Chapter 6, Filtering and Security Groups

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere SnapGear Netzwerk-Router Handbücher

SnapGear

SnapGear VPN appliance Family 1.7.8 Bedienungsanleitung

Beliebte Netzwerk-Router Handbücher anderer Marken

Allnet

Allnet ALL0333AU Bedienungsanleitung

HomeSeer

HomeSeer HT-SEL Bedienungsanleitung

Sercomm

Sercomm Genesis OC3505D Bedienungsanleitung

Billion

Billion BIPAC 5102 Series Bedienungsanleitung

TP-Link

TP-Link TD-8817 Bedienungsanleitung

Motorola

Motorola MR1900 Bedienungsanleitung

Digi

Digi IX14 Bedienungsanleitung

Cisco

Cisco NCS 540 Handbuch

XAVi

XAVi X8821e Bedienungsanleitung

BEC

BEC 6200WZL Bedienungsanleitung

MikroTik

MikroTik hAP ac3 Series Bedienungsanleitung

Korenix

Korenix JetNet 5428G Series Bedienungsanleitung

NETGEAR

NETGEAR FS526T - Switch Bedienungsanleitung

Korenix

Korenix JetNet 5710G Series Bedienungsanleitung

Automated Logic

Automated Logic ZN551 Betriebsanleitung

Cisco

Cisco ASR 1000 Series Bedienerhandbuch

EnGenius

EnGenius ESR-9710 Bedienungsanleitung

Cisco

Cisco 805 Series Bedienungs- und Sicherheitshinweise