Manuale d’uso / di manutenzione del prodotto ALL-VPN10 del fabbricante Allnet
Vai alla pagina of 175
ALL -VPN10 VPN/Firewall WLAN -N W AN Router User´s Manual.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d II Conten t I. Introd uction ...........................................................................................................................
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d III 9.1.2 QoS ................................................................................................................................ .........
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d IV 13.3 T raffic St atistic ............................................................................................................................
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 5 I. Introduction IPSec VPN QoS Router (ref erred as VPN Router hereby) is a business level security route r th at ef ficiently integr ate s ne w gener ation multiple W AN -port device s.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 6 It helps to fr ee enterprises from incre asing hack er intrusion. W ith an e xclusive indepen dent oper ation platf or m, users are able to set u p and use a firewall without prof essional netw ork kno wle dge.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 7 II. Multi- WAN VPN Router Installation In this chapter we are going to introduce h ar dware in s tallation.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 8 # Setting Conten t Purpose 1 Hardwar e installation Configure the network to meet user ’ s d emand. Install the device hardware based on user p hy sical requiremen ts.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 9 9 VPN V irtual Priva te Network Configure VPN tunnels Configure diff erent type s of V PN to meet diff erent application envir onment. 10 Logout Close configur ation window .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 10 III. Hardware Installation In this chapter we are going to introduce hardw are interf ace as well as physic al in st allation .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 11 Specifications Model Name ALL-VPN 10 CPU MTK 6856-700MHz Flash/DRAM 16M/ 128M W AN Port 1~2 (10/ 1 00) L AN Port 3~4 (10/ 1 00) USB P ort 2 W ireless Ante nn a 5dBi *2 Opera ting Frequency 2.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 12 3.2 VPN R outer Network Connecti on W AN connection : A W AN port can be connecte d with xD SL Mo dem, F i ber Mod em, Switching Hub, or through an external route r to connect to the Internet.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 13 IV. Login This chapter is mainly introducing W eb - based UI afte r conneting the device. F irs t, check up the device ’s IP addre ss by connecting to DOS through the L AN PC und er the device.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 14 Then, open webpage brows er , IE for example, and ke y in 1 92.168.1.1 in the website column. The login window will appear as below: The device ’s def ault usernam e and passwor d are both “admin” .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 15 V. V. Device Spec Verification, Status Display and Login Password and Time Setting This chap ter introduces the device specification and status after login as well as ch ange password and sy stem time settings f or security .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 16 5.1.2 Phy sical Port Status The status of all sy stem ports, including each connected and enabled port, will be shown on th is Home page (see above table).
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 17 5.1.3 Sys tem Informa tion LAN IP /Subnet Mask : Identifies the curren t device IP ad dre ss. The default is 192.168.1.1. W orking Mode : Indicate s the current working mode.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 18 Remote Man agement: Indicat es if remote managem ent is activate d (on or off). Click th e hyperlink to ente r an d manage the configura tion. Th e def ault configuration is “O ff ” .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 19 5.2 Change and Set Login Pas sword and T ime 5.2.1 Pa ssword Setting When you login t he device setting window every time, you mu st en ter the password.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 20 5.2.2 T i me The device can adjust ti me setting. Users can know the exact time of even t occurrences that ar e r ecorded in the Sys tem Lo g, and the time of c losing or openin g a ccess for I nternet res ources.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 21 A fter the changes are completed, click “ Apply ” to save the configur ation . Click “Cance l" to le ave without making any change. This action will b e ef fective bef ore ” Apply ” to sav e the configuration.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 22 VI. Network This Netw ork p age contains the ba sic settings. For most users, c o mpleting this g enera l setting is enou gh f or connecting w ith the Internet.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 23 most en vironments, some ISPs in some countries may r equire it. 6.1.2 L AN Setting This is configur ation information for the device curren t L AN IP addre ss.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 24 segment configur ation; the Internet will then b e directly accessible. In other words, if there are alr eady diff erent IP segment groups in the Intr anet, th e Inte rnet is still accessi ble without making any changes t o internal PCs.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 25 Use the following DNS Server Addresse s : Select a user-def ined DNS server IP addre ss. DNS Server : Input the DNS IP addre ss set by ISP . A t least one IP group should be input.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 26 Static IP If an ISP is sues a st atic IP (such as one IP or eight IP addresse s, etc.), pl ea se select t his connection mode an d f ollow the st eps below to inpu t the IP numbers issued by an ISP into the re levant box es.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 27 Enable Line-Dropped Scheduling The W AN disconnection schedule wi ll be activat ed by checking th is option. In some area s, there is a time limitation for W AN connection service .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 28 User Name Input the u ser name issue d b y IS P. P assword Input the passwor d issued by ISP . Connect on Deman d This function enables the auto -dialing function to be used in a PPPoE dial connection.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 29 Enable Line-Dropped Scheduling The W AN disconnection schedule wi ll be activat ed by checking this option . In some areas, ther e is a time li mita tion for W AN connection ser vice.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 30 W AN IP Address This option is to configure a s tatic IP address . The IP addre ss to be configured could be one issued by ISP . (The IP addre ss is usually provided by the ISP when the PC is installe d.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 31 Connect on Deman d This function enables the auto -dialing function to be used f o r a PPTP dial connection.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 32 If there are t wo W ANs configured, users sti ll can select T r a nsparen t Brid ge mode for W A N connection mo de, and load balancing will b e achieved as usual.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 33 Enable Line-Dropped Scheduling The W AN disconnection schedule wi ll be activat ed by checking th is option. In some areas , th ere is a time limitation f or W AN connectio n service.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 34 6.2 Multi- W AN Setting When you hav e multiple W AN gatew ays, you can use T raffic Management and Prot ocol Bind ing function to fulfill W AN road balancing, so that we can have highest network band width ef ficiency .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 35 6.2.1 Load Balance Mode Auto Load Balance Mode When Auto Load Balance mode is selected, th e device wi ll u se sessions or IP a nd the W AN ban dwidth automatic ally allo cate connec tions to achieve loa d bala ncing for external connection s.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 36 Please ref er to the explanations in 6.2.3 Co nfiguring Pro tocol Binding f or setting up Prot ocol Binding and f or examples of colloca ting router modes with Protocol Binding.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 37 Set W AN Grouping: If more than one W AN is connected with Netcom, t o ap ply a simi lar d ivision of traf fic p olicy to these W ANs, a combination f or th e W AN s must be made.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 38 will b e d isplay ed accordingly . A policy document is an editable text document.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 39 (or W AN group) under China N etc om stra tegy . 6.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 40 W AN2 is not to support these destinations, users should select th is option. When the W AN1 connection i s disconnected, pack ets f or 10.0.0.1~10.254.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 41 In the load balance mode for Assigned R outin g, the first WAN port (W AN1) will be saved for the traf fic of the IP addre sses or the application service ports that are no t assigned to other W ANs (W A N2).
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 42 connections. In other words, the firs t W AN (W AN1) cannot be configure d with th e Pr otocol Bindi ng ru le.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 43 Class B Network Segment of 210.11.x.x will b e res tricted to a specific W AN . If only specific Service Ports need to be designa ted, while a sp ecific IP destination assignment is not require d, inpu t “0” in to the IP b o xes .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 44 Show Priority : Click the “Show T able” button. A dialogue b o x as shown in t he f ollowing figure will be disp la yed. Us ers can choose to sort the list by priorities or by interf ace.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 45 Apply: Click the “ Apply ” button to sav e the modification. Cancel: Click the “Cancel” button to cancel the modification. This o nly works bef ore “ Apply” is clicke d.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 46 Example 2 : How do I set up Auto Load Balance Mode to k eep Intranet IP 192.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 47 all Int ernet IP address es). Select W AN1 from the pull- down option lis t “Interf ace” , and then cli ck “Enable” . F inally , click “ Add New” and the rule will be adde d to th e mode.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 48 Configuring “ Assigned R outing Mode” for load Balance : IP Group: This function allows u se.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 49 Example 2 : Ho w do I configure Protocol Bindin g to k eep traffic from all Intranet IP addresse s from going through W AN2 when the destinations are IP 211.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 50.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 51 VII. Intranet Con figuration This chapter introduce s how to configure ports and understand how to configur e intranet IP addre sses.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 52 7.2 IP / DHCP W ith an embe dded DHCP serv er , it supports automatic IP a ssignation f or L AN computers. (This function is similar to the DHCP service in NT servers.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 53 Dynamic IP : Client lease T ime : Check the option to activate the DHCP server automatic IP lease function. If the fu nction is activated, all PCs will be able to acquire IP automatically .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 54 7.3 DHCP Sta tus This is an indication list of the current s tatus and setup record of the DH CP server . The indi ca tions are for the administr ator ’ s refe rence when a network modific ation i s neede d.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 55 IP Addre ss : The IP addre ss acqu ire d by t he curre nt computer . MAC Addr ess : The actual MAC network location of the current computer . Client Lease T ime : The lease time of the IP rele ased by DH CP .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 56 7.4 IP & MAC Bindin g Adminis trators can apply IP & MAC Binding function to make sure that users can not add extr a PC s f or Internet access or change privat e IP add re sses.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 57 There ar e t wo me tho ds for set ting u p th is function : (1) 、 Block MAC address not on the list This method only a llows MAC addresse s on t he list to receive IP addre sses from DHCP and have Int ernet access.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 58 ( 2) 、 IP & MAC Binding Static IP : There ar e t wo wa ys to input static IP: 1. If users wan t to set up a MAC address to acquire IP from DHCP , but the IP need not be a specific assigned IP , in put 0.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 59 Add : Add new binding. Block M AC address on th e list with wrong IP addre ss : When this option is act ivat ed, MA C addre sses which are not included in the list will not be able to connect with the I nte rnet.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 60 VIII. Wireless Network Wireless function is enabled b y default. The WLAN L ED will be on after syst em booting. Client device can find SSID as _AP_1.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 61 8.1 Basic Configura tion Enable W ir eless Netwrk Check the box to enable wireless function. Network Mode The def ault value is “11bgn Mixe d Mode” .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 62 This function will greatly improve the data tr ansfer r ate betw een W MM -enabled wirele ss devices. WMM AP Parame ter Setting T x Power The def ault value is 100 %.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 63 8.2 Security Setting.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 64 8.2.1 Select SSID No. The number of this SSID. Status Indicate if thi s SSID is enabled. SSID The name of wireless network. SSID is also called ESSID , which is for recognizing and es tablishing a wireless netw ork.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 65 If “WEP auto” is checke d, clie nt users can choos e any security mode. Def ault Key Select one of following 4 sets to be security k ey . 64 -bit (10 hex digits) Input 10 hex digits (0~9, a~f , A ~F) as WEP ke y .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 66 WP A Algorithms There ar e TKIP , AES and Auto can be chosen. At tention! Only AES can achieve 802.11n r ate. ReK ey Interval WP A/WP A2-PSK will rek ey in a fixed int erval.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 67 RADIUS Port Input RADIUS ser vice port. Shared Secr et Input initial shared k ey . Session T imeout Input a maximum idle ti me. If the link id les ov er time, t he connection will be terminated.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 68 T wo devices should be set in the same subn et as figure abov e. Configura tions of two devices should be the same. Basic Setting ※ Under WDS mode, ch annel ban dwidth should be “20” .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 69 ※ If WEP mode is enabled, s ystem will arrange 4 sets of k ey for those MACs. Mak e sure the order is correct. (2) Or check “Scanning ” to select existing AP and then click “Submit ” .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 70 8.2.5 Acce ss F i lte r For additional security of wireless acces s, the Access Control f aci lity allows you to re strict the network access right by contr olling th e wir eless L AN MAC address of clien t.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 71 8.3 Station Lis t Station Lis t provides the knowledge of c onnecting wireless clients . MAC Addr ess The MAC addre ss of client device. DHCP IP The IP addre ss allocate d from s ystem.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 72 IX. QoS (Quality of Service) QoS is an abbrevia tion for Quality of Service.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 73 9.1 Bandwidth Management.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 74 9.1.1 The Maximum Bandwidth p rov ided by ISP In the boxe s f or W AN1 and W AN2 bandwidth, input the upstre am and downs tream ban dwidth which users ap plied for from bandwidth supplier .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 75 Interf ace : Select on which W AN the Qo S rule should be execut ed. It can be a single s election or multiple selections. Service Port : Select what bandwidth control is to be configur ed in the Qo S rule.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 76 Direction : Upstr eam: Means the upload b andwidth for Intr anet IP .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 77 Move up & Move down : QoS rules will be ex ecu te d from the bottom of the lis t to the top of the list. In other wor ds, th e lower down the list, the higher the priority of exe cution .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 78.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 79 Example 2. How to set up the maximum download speed of each W AN to 512Kbit/Sec for each L AN user? One b y one IP to set up? No nee d to set up one by one.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 80 9.2 Se ssion control Session managem ent controls the ac ceptable m aximum simultaneous sessions of Intranet PCs.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 81 When single IP excee d __ : If this function is selected, when the user ’ s port session re a ch the limit, this user will not b e able to mak e a new session for fiv e minutes.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 82 Source IP : Input the IP ad dress range or IP group. Enabled : Activ ate the rule. Add to lis t : Add this rule to the list. Delete selete d item : Remove the rules selecte d from the Ser vice List.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 83 9.3 Smart QoS The smart QoS function enables th e adminis t r ators to constrain th e bandwidth occupied automatically without any configuring. Enabled QoS : Choose to apply QoS function .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 84 Scheduling : If “ Alwa ys” is selected, the rule will be execute d around the clock. If “From…” is selected, the rule will be exe cuted according to the configure d time rang e.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 85 X. Fire wall This chapter introduce s firewall gener al policy , access rule, and conten t fi lter set tings to e nsure n etwork security . 10.1 G eneral Policy The firewall is enable d by default.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 86 Remot e Management : T o ente r th e device web- based UI by connecting to the remote Inte rnet, this f eature must b e activat ed.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 87 10.2 A ccess Rule Users ma y turn on /o ff the set ting t o permit or f orbid any p ack et to access internet. Users ma y select to set diff erent network access rules: from internal to external or from external to internal.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 88 Delete : Remove the item. Add New Rule : Cre ate a new network access rule Re store to Default Rule : Re store all settings t o the d ef ault v alues and delete all the self-defined settings.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 89 addre ss within a session. Des t. IP : Select the destination IP r ange (such as Any , Single, Range, o r pre set I P group name) If Single or Range is selecte d; p lease en ter a singl e IP addre ss or an IP addre ss within a session.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 90 Example 2. : How to f orbid in tranet IP r ange from 192.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 91 10.3 Con tent F ilter The device supports two webpage restriction modes: one is to block certain forbidden domains, and the other is to give access to certain web pages.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 92 Add : Enter the we bsites to be controlle d such as www .playboy .com Add to lis t : Click ” Add to list ” to cre ate a new website to be contr olled.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 93 Accept Allow ed Domains In some companies o r schools, employees and st udents are only allowe d to access som e specific websites. This is the purpose of the func tion.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 94 Exception IP Here IP /IP ranges ar e exempt ed from “ Accept Allowe d Doma in” through this method.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 95 XI. L7 Management 11.1 L7 F i lter (1) Rule list:.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 96 (2) Add new rule: click.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 97 Below are the st eps for rule setting with an exmple in the enterprise: Step 1: Name the rule The name of the rule will b e shown on t he list, so a dministrat or could name th e rule by users or usages.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 98 Step 4: Set ex ceptaional users (IP or QQ num ber) A dministr ator can set IP address or QQ numbers (if QQ is blocke d) in the exceptional user setting.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 99 11.2 L7 VIP Priority Chan nel (1) Rule List: (2) Add New Rule: Click.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 100 Step1: Basic Set ting The name of the rule will b e shown on the list, so adminis trator c ould name th e rule by users or usages. Select one W AN as VIP .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 101 Step2: Set Applica t ion or IP as VIP Set applic ation as VIP . For instance, [Webpag e] is select ed. When the sys tem rec ogni zes the IP is u sing webpage s ervice, the sys tem will gi ve VIP priority .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 102 T ake a community for an ex ample: The community will ensure VIP authority when internal user s b row se webpage, the administra tor shou ld check [VIP Application] and [webpage] at It em column.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 103 Step 4: Click to sav e the r ules..
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 104 11.3 L7 QoS (1) Rule List :.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 105 The Maximum Bandwidth p rov ided by ISP : This table is relative t o general QoS function.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 106 (2) Add New Rule : Click Step 1: Name the rule The name of the rule wi ll be shown o n the list, so adminis trator c ould n ame the rule by users or usages.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 107 ※ F igures are us ed f or ref erence. Please visit the official website f or the actual application support list. A fter choosing [Category], the [Item] column wil l show the crosponding list.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 108 Step 3: QoS Configuration Interf ace Select on which W AN the Qo S rule should be execut ed. It can be a single s election or multiple selections. Source IP /Group This is to select which user is to b e contr olled.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 109 Step 4: Make sure the time se tting is correct to make the rule in eff ective only dur ing the set time. All time is set as the default. The time frame c ould b e modified in the following settings.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 1 10 11.4 Application Define When you set up the L7 Man ag ement rules, not on ly you can select the application t hat is define d b y , but also you can add your own L7 applications by the URL, destination IP addre ss or the port nu mber .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 111 Application Define-Add New Rule Step 1 : Name the Application Step 2 : Define the application by th e URL, destination or the port number . The definable par ameter as below : Des t.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 1 12 The Administra tor can check t he whole applied app lica tion s from the Application Status function, including the ID of the policies. ※ F igures are us ed f or ref erence.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 1 13 XII. VPN (Virtual Private Ne twork) 10.1. VPN.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 1 14 10.1.1 . Add a New VPN T un nel The device supports Gatewa y to Gatewa y tunn el or Client to Gatew ay tunnel. The VPN tu nnel c onnections are don e by 2 VPN device s via the Internet.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 1 15 10.1.1.1. Gatewa y to Gate wa y Setting The f ollowin g instructions will guide users t o set a VPN t unnel between two devices. T unnel No. : Set the embedded VPN f eature, please select the T unnel nu mber .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 1 16 IP + E-mail Addr . (USER FQDN) Authentication Dynamic IP + Domain Nam e (FQDN) Authentication Dynamic IP + E-mai l Addr . (USER FQDN) Authentication.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 1 17 re spond to this VPN tunnel connection; if user s s elect this option to link t o VPN, please ent er th e domain name. (5) Dynamic IP + E -mai l Addr .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 1 18 Remot e Group Setup : This remote gatew ay authentication type (Rem ote Secu rity Gatew ay T ype) must be identical to the remot ely-connected loc al s ecurity gat ewa y au thentication type (Local Security Gatew ay T ype).
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 1 19 name to be verifie d. FQDN re fers to th e combination of host n ame and domain name. Users may enter any name that corresponds to the domain name of F QDN.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 120 name. (5) Dynamic IP + E -mai l Addr . (USER FQDN) Authentication. If user s use d ynamic IP address to connect with the device, user s may select this type to link to VPN.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 121 IPSec Setup If there is any encryption mechanism, the encryption mechan ism of these two VPN tu nnels must be identical in order to creat e connection.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 122 Pha se 1 / Phase 2 Encryption: This optio n allows u ser s to s et th is VPN tunnel to use any encryptio n mode.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 123 ● Aggr essive Mo de: This mode is mostly adop te d by remot e devices. The IP connection is designed to enhance the security control if dynamic IP is used for connection.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 124 Heart Beat is still failure ov er t he retry def ault. The VPN Heart Beat detection and DPD fe atures are b oth used to provide a stabil e VPN solution f o r customer s.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 125 10.1.1.2. Client to Gatewa y Setting The following describes how an a dministra tor bu ilds a VPN tun nel between devices. U sers can set this VPN tunnel to be used by one cli ent at the client end.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 126 Local Group Setup This local g atew ay au thentication type (Loc al Security G atewa y T ype) mus t be identical with that of the remot e type (Remote Security Gatewa y T ype).
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 127 settings. (4) Dynamic IP + Domain Na me(FQDN) Authentication: If users use dynamic IP address to connect to the device, us ers may select this option to link to VPN.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 128 addre ss of 192.168.1.0 can establish c onn ection. 2. Subnet This option allows local computers in t his subnet to be connecte d to the VPN tunnel.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 129 Remot e Group Setup : This remote gatew ay authentication type (Rem ote Secu rity Gatew ay T ype) must be identical to the remot ely-connected loc al s ecurity gat ewa y au thentication type (Local Security Gatewa y Type).
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 130 (3) IP + E-mail Addr . (USER FQDN) Authentication . If user s select IP address an d E-mail, ent er the IP addres s and E-mail addre ss t o gain access t o this tunnel and the W AN IP a dd re ss will be automatic ally filled into this space.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 131 IPSec Setup If there is any encryption mechanism, th e encryption mechanism of th ese two VPN tunnels must be identical in order to cre ate con nection.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 132 Pha se 1 / Phase 2 DH Group: This option allows u ser s to select Diffie-Hellman groups: Group 1 / Group 2 / Group 5. Pha se 1 / Phase 2 Encryption: This optio n allows u ser s to s et th is VPN tunnel to use any encryptio n mode.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 133 The advance d settings include Main Mod e and Aggressive mode. For the Main mode, the def ault setting is se t to VPN operation mode. The connection is the same to most of the VPN devices.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 134 es tablished. Retry The d ef ault retry times are 5. The sy stem will t erminate the VPN tunnel if th e Heart Beat is still failure ov er t he retry def ault.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 135 Enabled PPTP Server : When this option is selected, the point- to -point tunnel protocol PPTP server can be enabled.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 136 Pa ssword : Confirm Passw ord : Enter the pas sword and confirm again by ente ring the n ew passw ord. Add to lis t : Add a new account and passwor d.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 137 10.2. QVM VPN Function Setu p The QVM-series device provides three major convenient functions: 1. Smart Link IPSec VPN: Eas y VPN setup r eplaces the conventional complic ated VPN setup process by entering Server IP , User Name , and Pa ssword .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 138 Acc ount ID : Must be identical to that of the ser ver account ID . Pa ssword : Confirm Passw ord : Must be identical to that of the ser ver pas sword.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 139 XIII. Advanced Function 11.1 DMZ Host/ Port Range Forwarding 11 .1.1 DMZ Ho st When the NA T mode i s activate d, sometime s users ma y nee d to use app lica tions that do not support virtual IP addresses such as network games.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 140 with Port 80 (the service po rt of WW W is P ort 80) to access the internal server directly . In the configur ation page, if a web ser ver address such as 1 92.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 141 is not in the list, we r ecomm end that users use “Service Port Management ” to add or remov e ports, as follows : Service Name : Input the n ame of the se r vice port users want to activ ate on the list, such as E-donk ey , etc.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 142 11.2 UPnP UPnP (Universal Plug and Play) is a protocol set by Microsoft. If the virtual host supp orts UPnP sys tem (such as W indows XP), users could also a ctiva te the PC UPnP functi on to work with the device.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 143 11 .3 Routing In this chapter we introduce th e Dy namic Routing Information Protocol and Static Routing Informa tion Protoc ol.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 144 Des t. IP : Subnet Mask : Input the remote network IP loca tions and subnet that is to be route d. For ex ample, the IP /subnet is 192.168.2.0/ 255.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 145 11 .4 One to One N A T As b oth the device and A TU-R need on ly o ne act ual IP , if ISP is sued.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 146 Enabled One to One NA T : T o a ctiva te or close the On e- to -One NA T function. (Check to activa te the function). Priva te IP Ran ge Begin : Input the Private IP addr ess for the Intr anet One - to -On e NA T function.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 147 described F irew all. 10.5 DDNS- Dynamic Do main Name Ser vice DDNS supports the dynamic web addr ess transf er for NOIP DDN S 、 DynDNS.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 148 * The UI might vary from model to model, depending on differ ent product lines. Interf ace This is an indication of the W AN port th e user has selecte d.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 149 11 .6 MAC Clone Some ISP will reque st f or a fixed MAC address (network card p hysical address) for distributing IP ad dre ss, which is mostly suitable for cable mode users.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 150 11.7 USB Storag e By using FTP Client software o r SAMBA, users ar e able to access the fil es s tored in the USB Stor age device (F A T32 /N TFS) aft er be ing inserted to the USB port on the router .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 151 User name : User nam e of the account f or both FTP an d SAMBA Services. Pa ssword : Passwor d of the account f or both FTP and SAMBA Services.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 152 (3) A dv anced Set tings Simultaneous FTP Connection : T o tal number of client c onnections th e FTP Server can accept at the same time. FTP Service Charset : FTP Ser ver Charact er set, the selections are UFT8, GB2312 and BIG5.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 153 11 -7-2 SAMB A SAMBA Service functionality is enab led by def ault, o nly the setup of an user account is required to use the se r vice. (1) User Acc ount Setup User name : User nam e of the account f or both FTP an d SAMBA Services.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 154 re ad only : Users c an on ly re ad from the stor age device. re ad-write : Users can add, rea d, o r delete the files s tore d i n the device.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 155 XIV. System T ool This chapter introduce s the m anagement tool f or controlling the device and tes ting n etwork connection. For security conside r ation, we s trongly sugges t to change the password.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 156 Ping This item informs users of the status quo of the ou t bound session and allow s th e user to kn ow the existe nce of computer s online. On this tes t screen, please enter the ho st IP th at users want to test such as 192.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 157 12 .2 F irmware Upgra de Users ma y directly upgrade the device firmwar e on t he F irmware Upg r ade page. Please confirm all inform ation abo ut the softw a re ve rsion in advance.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 158 12 .3 Configuration Backup Import Configuration F ile : This fea ture allo ws users to integra te all b ackup conten t of par ameter settings into the device.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 159 12 .4 SNMP Simple Network Management Protoc ol (SNMP ) re fer s to network management commu nications protocol and it is also an important network management item.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 160 Enabled : Activ ate SNMP fea ture. The default is activate d. Sys tem Name : Set the name of the device su ch as . Sys tem Contact : Set the name of the person who manages the de vice (i.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 161 12 .5 Syst em Recover Users c an restart the device with Sys tem Recove r button.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 162 Return to F actory Def ault Setting If clicking “Return to F actory Def ault Setting, the dialog block will pop out, if the device will return to factory def ault.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 163 XV. Log From th e log management and look up, w e can see th e relevant operation sta tus, whi ch is convenient f or us to f acil itat e the setup and opera tion.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 164 Sys tem Log Enable : If this option is selected, the Sys tem Log fea ture wi ll be enabled. Sysl og S erver : The device provides external syst em log ser vers with log collection f eature.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 165 General Log The device provides the f ollo wing warning message. Click to activate the fe ature. System error message, block ed regula tions, regulation of passage permission, sys tem configura tion chan ge and regis tration verifica tion .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 166 13 .2 Syst em Statistic The device has the real-time surv ei llance ma nagement feature th at pro.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 167.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 168 13 .3 T raffic Sta tistic Six messages will be displaye d on t he T raffi c Statistic page to provide better traf fic management and control.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 169 Specific IP Status : Enter the IP addre ss that users want to inquire, and then the entir e des tination IP connected to remote devices as well as the number of ports will be displayed.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 170 XVI. Log o ut On the top right corner of the web- base d UI, there is a L ogout butt on. Click on it to log out of the web - base d UI. T o enter next time, open the Web browser and enter the IP address, user name an d passw ord to log in.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 171 Appendix I : Technical Support Information O fficial Websit e http: // www .
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 172 Appendix II Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 173 This device complies with the essential r equirements of the R&TTE Directi ve 1999/ 5 /EC.
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 174 ALLNET GPL Code S tatement This ALL NET product includes software cod e developed b y third parties, including software code subject to the GNU General Public License ("GPL") or GNU Lesser General Public License (" LGPL").
ALL-VPN10 VPN/F irewall WLAN -N W AN Router © ALLNET GmbH Mün chen 2013 - All rights res er ve d 175 CE -Declaration of Conformity For the following eq uipment: Germering, 11 th of O ctober , 2013 VPN/Fire w all WLA N-N W AN Rou ter A L L-VPN10 The safet y ad vice in the documentation accom panying the products shall be obeyed.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Allnet ALL-VPN10 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Allnet ALL-VPN10 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Allnet ALL-VPN10 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Allnet ALL-VPN10 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Allnet ALL-VPN10, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Allnet ALL-VPN10.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Allnet ALL-VPN10. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Allnet ALL-VPN10 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.