Manuale d’uso / di manutenzione del prodotto TW100-BRV324 del fabbricante TRENDnet
Vai alla pagina of 136
.
.
Table of Contents CHAPTER 1 INTRODUCTION ............................................................................................. 1 Broadband VPN Gateway Features ................................................................................ 1 Package Contents .
ii VPN Examples ................................................................................................................. 82 Certificates .........................................................................................................
1 Chapter 1 Introduction This Chapter provides an overview of th e Broadband VPN Gateway's features and capabilities. Congratulations on the purchase of your new Broadband VPN Gateway. The Br oadband VPN Gateway is a multi-function device providing the following servi ces: • Shared Broadband Internet Access for all LAN users.
Broadband VPN Gateway User Guide • Virtual Servers. This feature allows Internet us ers to access Internet servers on your LAN. The required se tup is quick and easy.
Introduction Security Features • Password - protected Configuration . Optional password protecti on is provided to prevent unauthorized users from m odifying the configuration data and set tings.
Broadband VPN Gateway User Guide Physical Details Front-mounted LEDs Figure 2: Front Panel Power On - Power on. Off - No power. Status (Red) On - Error condition. Off - Normal operation. Blinking - This LED blinks during start up. WAN ports (10/100BaseT) Connect the DSL or Cable Modem here.
Introduction 5 Rear Panel Figure 3: Rear Panel WAN port 1/2 (10/100BaseT) Connect the DSL or Cable Modem here. If your modem cam e with a cable, use the supplied cable. Otherwise, use a standard LAN cable. 10/100BaseT LAN connections Use standard LAN cables (RJ45 connectors) to connect y our PCs to these ports.
2 Chapter 2 Installation This Chapter covers the physical i nstallation of the Broadband VPN Gateway. Requirements • Network cables. Use standard 10/100BaseT net work (UTP) cables with RJ45 connectors. • TCP/IP protocol m ust be installed on all PCs.
Installation 7 5. Check the LEDs • The Power LED should be ON. • The Status LED should blink duri ng start up, then turn Off. If it stays on, there is a hardware error. • For each LAN (PC) connection, the LAN Link/Act LED should be ON (provided the PC i s also ON.
Chapter 3 Setup This Chapter provides Setup det ails of the Broadband VPN Gateway. Overview This chapter describes the setup procedure for: • Internet Access • LAN configuration PCs on your local LAN m ay also require configuration. For details, see Chapt er 4 - PC Configuration .
Setup Use the Microsoft VPN feature: • PPTP Server in the Broadband VPN Gateway. • User and Client setup. • Checking VPN connection Status. Chapter 9: Microsoft VPN Configure or use any of the followi ng: • Configuration File backup and restore.
Broadband VPN Gateway User Guide 3. In the Address box, enter "HTTP://" and the IP Address of the Broadband VPN Gateway, as in this example, which uses the Broadband VPN Gateway 's defaul t IP Address: HTTP://192.
Setup Home Screen After logging, you will see the Home screen. When you connect in future, you will see this screen when you connect. An example screen is shown below. Figure 6: Home Screen Navigation & Data Input • Use the menu bar on the l eft of the screen, and the "Back" button on your Browser, for navigation.
Broadband VPN Gateway User Guide WAN Port Configuration The WAN Port option is on the Setup m enu. Figure 7: WAN Port Screen Data - WAN Port Screen WAN Port Settings Connections Normally, this can be left at "Aut omatic".
Setup Gateway The address of the router or gateway, as suppli ed by your ISP. PPPoE Dial-up User Name The User Name (or account nam e) provided by your ISP.
Broadband VPN Gateway User Guide Port Options Screen Use the Port Options link on the Set up menu. An example screen is shown below. Figure 8: Port Options Screen Data - Port Options Screen Port Optio.
Setup MTU Size • MTU (Maxim um Transmission Unit) val ue should only be changed if advised to do so by Technical Support . • Enter a value between 1 and 1500. • This device will still auto-neg o tiate with the remote server, to set the MTU size.
Broadband VPN Gateway User Guide LAN Port Screen Use the LAN Port link on the main m enu to reach the LAN Port screen. An example screen is shown below. Figure 9: LAN Port Screen Data - LAN Port Screen LAN LAN IP Address IP address for the Broadband VPN Gateway, as seen from the local LAN.
Setup DHCP What DHCP Does A DHCP (Dynami c Host Configuration Protocol) Server allocates a valid IP address to a DHCP Client (PC or device) upon request . • The client request is m ade when the client device starts up (boots). • The DHCP Server provides the Gateway and DNS addresses to the client, as well as allocating an IP Add r ess.
Broadband VPN Gateway User Guide Load/Backup Screen Use the Load/Backup link on the Setup m enu. An example screen is shown below. Figure 10: Load/Back Screen Data - Load/Backup Screen Administration WAN There are 3 modes: 1. If Enable is select ed for W AN 1, then choose Backup for WAN 2.
Setup 19.
4 Chapter 4 PC Configuration This Chapter detail s the PC Configuration required on the local ( " Internal") LAN. Overview For each PC, the following may need to be configured: • TCP/IP ne.
PC Configuration Checking TCP/IP Settings - Windows 9x/ME: 1. Select Control Panel - Net work . You should see a screen like the following: Figure 11: Network Configuration 2. Select the TCP/IP protocol for your net work card. 3. Click on the Properti es button.
Broadband VPN Gateway User Guide Figure 13: Gateway Tab (Win 95/98) • On the DNS Configurati on tab, en su re Enable DNS is selected. If the DNS Server Search Order list is empty, enter the DNS address provided by your ISP in the fields besi de the Add bu tton, then click Add .
PC Configuration Checking TCP/IP Settings - Windows NT4.0 1. Select Control Panel - Net work , and, on the Protocols tab, select the TCP/ IP protocol, as shown below. Figure 15: Windows NT4.0 - TCP/ IP 2. Click the Properties button to see a screen like the one below.
Broadband VPN Gateway User Guide Obtain an IP address from a DHCP Server This is the default Windows setting. Using this is recommended . By default, the Broadband VPN Gateway will act as a DHCP Server. Restart your PC t o ensure it obtains an IP Address from the Broadband VPN Gateway.
PC Configuration Figure 18: Windows NT4.0 - DNS 25.
Broadband VPN Gateway User Guide Checking TCP/IP Settings - Windows 2000: 1. Select Control Panel - Net work and Dial-up Connection . 2. Right - click t he Local Area Connection icon and select Properties . You should see a screen like the followi ng: Figure 19: Network Configuration (Win 2000) 3.
PC Configuration Using DHCP To use DHCP, select the radio butt on Obtain an IP Address automatically . This is the default Windows setting. Using this is recom- mended . By default, the Broadband VPN Gateway will act as a DHCP Server. Restart your PC t o ensure it obtains an IP Address from the Broadband VPN Gateway.
Broadband VPN Gateway User Guide Checking TCP/IP Settings - Windows XP 1. Select Control Panel - Net work Connection . 2. Right click t he Local Area Connection and choose Properties . You should see a screen like the following: Figure 21: Network Configuration (Windows XP) 3.
PC Configuration Figure 22: TCP/IP Properties (Windows XP) 5. Ensure your TCP/IP settings are correct. Using DHCP To use DHCP, select the radio butt on Obtain an IP Address automatically . This is the default Windows setting. Using this is recom- mended .
Broadband VPN Gateway User Guide Checking TCP/IP Settings - Windows Vista 1. From the Start menu, right-click Network, then cli ck Properties. Now, the Network and Sharing Center displa ys. 2. Under Tasks located on the left-hand side of the window, click Manage network connections.
PC Configuration 31.
Broadband VPN Gateway User Guide Internet Access To configure your PCs to use the Br oadband VPN Gateway for Internet access: • Ensure that the DSL modem , Cable modem, or ot her permanent connection is functional. • Use the following procedure to configure your Browser to access the Internet via the LAN, rather than by a Dial-up connection.
PC Configuration 33 Macintosh Clients From your Macintosh, you can access th e Internet via the Broadband VPN Gate way. The procedure is as follows. 1. Open the TCP/IP Control Panel. 2. Select Ethernet from the Connect via pop-up m enu. 3. Select Using DHCP Server from the Confi gure pop-up menu.
5 Chapter 5 Operation and Status This Chapter details the operation of the Broadband VPN Gateway and the status screens. Operation Once both the Broadband VPN Gateway and the PC s are configured, operation is automatic.
Operation and Status Figure 23: General Status Screen 35.
Broadband VPN Gateway User Guide Data - General Status Screen WAN1/2 Connection Method This indicates the current connect ion method. IP Address This IP Address is allocated by the ISP (Internet Service Provid- er). Subnet Mask The Subnet Mask associated with the IP Address above.
Operation and Status Show Status Display the usage of the C PU and Memory in a sub-window. Port Status Click the "Port Stat us" button on the Status Log menu. An exampl e screen is shown below. Figure 24: Port Status Screen Data - Port Status Screen Port Status Network Flow The picture shows the current net work flow.
Broadband VPN Gateway User Guide Event Log An example screen is shown below. Figure 25: Event Log Screen Data - Event Log Screen Event Log Time It displays the time wh en the event occurred. Event It describes the details of th e event. Host It displays the IP Address of the server.
Operation and Status URL Log An example screen is shown below. Figure 26: URL Log Data - URL Log Internet Time It displays the time when the log occurred. Event It describes the address of the URL. PC It displays the IP Address of t h e PC. Buttons Refresh Update the data shown on screen.
Broadband VPN Gateway User Guide 40 System Log An example screen is shown below. Figure 27: System Log Data - System Log Screen System Log Search Type Select the desired options of sear ch type. Click the “Search” button to see the logs in th e fo llowing log table.
6 Chapter 6 Internet Features This Chapter explains when and how to use the Broadband VPN Gateway's "Internet" Features. Overview The following advanced features are provided.
Broadband VPN Gateway User Guide Address List Click the "Address List" on the Advanced m enu to access the screen. An ex ample screen is shown below. Figure 28: Address List Screen Data - Address List Screen Address List Address List This lists any existin g entries.
Internet Features PC Database The PC Database is used whenever you need to select a PC (e.g. for the "DMZ" PC). It elim inates the need to enter IP addresses. Also, you do not need to use fixed IP addresses on your LAN. PC Database Screen An example PC Dat abase screen is shown below.
Broadband VPN Gateway User Guide Data - PC Database Screen PC List This lists all current entries. Data displayed is PC Name, MAC Ad- dress, IP Address and Certify . Buttons Edit To Edit or modify an ex istin g entry, select it and click the "Ed it" button.
Internet Features URL Filter The URL Filter allows you to block access to undesirable Web site. An example screen is shown below. Figure 30: URL Filter Screen Data - URL Filter Screen Filter Strings Current Entries This lists any existing entries. If you have n o t entered any values, this list will be empty.
Broadband VPN Gateway User Guide Add Key Words To add an entry to th e list, enter it here, and click the "Ad d" button. An entry may be a Dom ain name (e.g. www.trash.com) or sim p ly a string. (e.g. ads/ ) Any URL which contains ANY entry ANYWHERE in the URL will be blocked.
Internet Features Dynamic DNS This free service is very usef ul when combined with the Virtual Server feature. It allows Internet us ers to connect to your Virtual Servers using a URL, rather than an IP Address. This also solves the problem of having a dynamic IP address.
Broadband VPN Gateway User Guide Data - Dynamic DNS Screen WAN1/2 DDNS Service Select the desired DDNS Service provider. Web Site Button Click this button t o open a new window and connect to the Web site for the selected DDNS service provider.
Internet Features Static Routing Overview • If you don't have other R outers or Gateways on your LAN, you can ignore the "Rout ing" page completely. • If the Broadband VPN Gateway is only acting as a Gateway for the local LAN segment , ignore the "Routing" page even if your LAN has other Routers.
Broadband VPN Gateway User Guide Figure 32: Static Routing Screen Data - Static Routing Screen RIP RIP Version Select the desired option from the drop-down list. Static Routing Static Routing Table Entries This list shows all entries in th e Routing Table.
Internet Features Buttons Save Save the RIP setting. This has no effect on the St atic Routing Table. Add Route Add a new entry to the Stati c Routing table, using the data shown in the "Properties" area on screen. Th e entry selected in the list is ignored, and has no effect.
Broadband VPN Gateway User Guide Static Routing - Example Figure 33: Routing Example For the Broadband VPN Gateway 's Routing Table For the LAN shown above, with 2 routers and 3 LAN segm ents , the Broadband VPN Gateway requires 2 entries as foll ows.
Internet Features Network Mask 0.0.0.0 Gateway IP Address 192.168.1.80 (Broadband VPN Gateway ' s local router) Interface LAN 53.
Broadband VPN Gateway User Guide QoS Quality of Service (QoS) ensures better serv ice to high-priority service. Figure 34: QoS Screen Data - QoS Screen QoS Setting QoS Method Select the desired option.
Internet Features 55 • QoS Queue: It displays t he queue type. • Priority: Enter the priority v alue (1~20) of th e policy. • Reliability: Select the desired optio n from the drop-do wn list. • Speed Limit: Enter the desired values for the inbound and outbound traffic li mitation.
7 Chapter 7 Security Configuration This Chapter explains the settings available via the s ecurity configuration secti on of the "Security" menu.
Security Configuration Data - Rules Screen Outbound/Inbound Connection View Rules for.. Select the desired option; the scr een will update and list any current rules. If you have not defin ed any rules, the list will be empty. Data For each rule, the following data is shown: • Name - The name you assigned t o the rule.
Broadband VPN Gateway User Guide Define Firewall Rule (Inbound/Outbound) Clicking the "Add" but ton in the Firewall Rules screen will display a screen like the example below. Figure 36: Define Firewall Rule Data - Define Firewall Rule Screen Name Enter a suitable name for this rule.
Security Configuration Dest IP These settings determ ine which traffic, based on their destination IP address, is covered by this rule . Select the desired option: • Any - All traffic from the source port is covered b y this ru le. • Single address - Enter the required IP address in t he "Start IP address" field".
Broadband VPN Gateway User Guide Schedules • Blocking will be performed during th e scheduled time (between the "Begin" and "End" times.) • Two (2) separate sessions or periods can be defined. • Times m ust be entered using a 24 hr clock.
Security Configuration Firewall -- Log The Logs record various types of activit y on the Broadband VPN Ga teway. This data is useful for troubleshooting, but enabling a ll logs will generate a large amount of data and adversely affect perform ance.
Broadband VPN Gateway User Guide Second Server Name/IP Address This is option al. System Log Enable System Log If enabled, lo g data will be sent to your system log Server. System Log Server Enter the IP address of your System Log Server. Include Select the logs you wish to be included in the data sent to the System Log Server.
Security Configuration Services Services are used in defining traffic t o be blocked or allowed by the Firewall Rules features. Many common Services are pre-defined, but you can also define your own servi ces if required. To view the Services screen, select the Services link on the Firewal l menu.
Broadband VPN Gateway User Guide if not required. 64.
Security Configuration Security This screen allows you to set Firewall and o ther security-related options. Figure 40: Security Screen Data - Security Screen Firew all Echo ICMP on LAN Port The ICMP protocol is used by the "ping" and "trace route" programs, and by network moni toring and diagnostic programs.
Broadband VPN Gateway User Guide Maximum Con- nections per PC Enter the maxim u m value for the connections of each PC. Maximum Appli- cations per host Enter the maximum value for the applications of each host. Set New Connec- tion(s) not upto: Set the value to contro l th e speed of the intern et.
Security Configuration DMZ This feature, if enabled, all ows the DMZ computer or computers on your LAN to be exposed t o all users on the Internet. • This allows almost any application to b e used on the "DMZ PC". • The "DMZ PC" will receive all "Unknown" connections and data.
Broadband VPN Gateway User Guide E-Mail Figure 42: E-Mail Screen Data - E-Mail Screen E-Mail Alert Send E-Mail alert If enabled, an E-Mail will be sen t imm ed iately if a Do S (Den ial of Service) attack is detected . If enabled, the E-mail address information m ust be provided.
Security Configuration 69 Send Select the desired option for sendi ng the log by E-mail. • When the log is full - The time is not fixed. The log will be sent when the log is full, which will d epend on the volume of traffic. • Every day, Every Monday.
8 Chapter 8 VPN (IPSec) This Chapter describes the VPN capabilities and c onfiguration required fo r common situations. Overview This section describes the VPN (Virtual Private Net w ork) support provided by your Broadband VPN Gateway.
Microsoft VPN Note that different vendors use di fferent terms. Generally, th e term s "VPN Policy", "IPSec Policy", and "IPSec Proposal" have t he same m eaning. However, some vendors separate IKE Policies (Pha se 1 param eters) from IPSec Policie s (Phase 2 parameters).
Broadband VPN Gateway User Guide Common VPN Situations VPN Pass-through Figure 43: VPN Pass-through Here, a PC on the LAN behind the Router/Gat eway is using VPN so ftware, but the Router/Gateway is NOT acting as a VPN endpoi nt. It is only all owing the VPN connection.
Microsoft VPN Connecting 2 LANs via VPN Figure 45: Connecting 2 VPN Gateways This allows two (2) LANs to be connected. PCs on each endpoint gain secure access to the remote LAN.
Broadband VPN Gateway User Guide VPN Configuration This section covers the configurati on re quired on the Broadband VPN Gateway when usi ng Manual Key Exchange (Manual Policies) or IKE (Automatic Policies). Details of using Certificates are cov ered in a later section.
Microsoft VPN Move The order in whi ch policies are listed is onl y important if you have multiple polices for the same remote site. In that case, the first matching policy is used. There are 2 ways t o change the order of policies: • Use the up and down indicators on the right t o move the selected row.
Broadband VPN Gateway User Guide Adding a New Policy To create a new VPN Policy, click the Add New Policy button on the Policies screen. 76.
Microsoft VPN Figure 47: VPN Wizard - Start Screen 77.
Broadband VPN Gateway User Guide General Settings Policy Name Enter a suitab le name. This name is not supplied to the remote VPN. It is used only to hel p you manage the policies. Enable Policy Enable or disable the policy as required. For each remote VPN, only 1 policy can be enabled at any time.
Microsoft VPN ESP Encryption ESP (Encapsulating Securit y Payload) provides security for the payload (data) sent through the VPN tunnel. Generally, you will want to enable both Encrypt ion and Authentication. Authentication Algorithm • The 3DES algorithm provi des greater security than DES, but is slower.
Broadband VPN Gateway User Guide ESP Authentication Generally, you should enable ESP Authentication. There is little difference between the availabl e algorithms.
Microsoft VPN Authentication • RSA Signature requires that both VPN endpoint s have valid Certificates issued by a CA (Certification Authority). • For Pre-shared key , enter the same key value in both end- points. The key should be at least 8 characters (maximum is 128 characters).
Broadband VPN Gateway User Guide VPN Examples This section describes som e examples of using the Broadband VPN Gateway i n common VPN situations. Example 1: Connecting 2 Broadband VPN Gateways In this example, 2 LANs are connected via VPN. Figure 48: Connecting 2 Broadband VPN Gateways Note • The LANs MUST use different IP address ranges.
Microsoft VPN IKE Authentication algorithm MD5 MD5 Must match IKE Encryption DES DES Must m atch IKE Exchange mode Main Mode Main Mode Mu st match DH Group Group 1 (768 bit) Group 1 (768 bit) Must m atch IKE SA Life tim e 28800 28800 Does not have to matc h.
Broadband VPN Gateway User Guide Example 2: Windows 2000/XP Client to LAN In this example, a Windows 2000/XP client connects to the Broadband VPN Gateway and gains access to the local LAN. Figure 49: Windows 2000/XP Client to Broadband VPN Gatew ay To use 3DES encryption on Windows 2000, you need Service Pack 3 or later installed.
Microsoft VPN period will be used. IKE PFS Disable Must match client PC IPSec SA Parameters IPSec SA Life time 28800 Do not have to match. Shorter period will be used.
Broadband VPN Gateway User Guide Figure 51: Windows 2000/XP - Policy Properties • Note that no rules are i n use. Two 2 rules are required - incoming and outgoing. • The outgoing rule will be ad d ed first. 6. Deselect the "Use Add Wizard" checkbox, then click "Add" t o view the screen below.
Microsoft VPN Figure 53: Filter Properties: Addressing 8. Enter the Source IP address and the Destination IP address . • Since this is the outgo in g filter, the Source IP address is "My IP address" and the Destinat ion IP address is the address range used on the remote LAN.
Broadband VPN Gateway User Guide Figure 55: New Rule Properties: Filter Action 11. Select Require Security , then click the "Edit" button, to view the Require Security Properties screen. Figure 56: Require Security Properties 12. Select Negotiate security (this selects IKE), then click "Add".
Microsoft VPN Figure 57: Modify Security Method 13. On the resulting screen (above), select Hi gh [ESP] then click "OK" to save your changes and return to the Require Security Properties screen.
Broadband VPN Gateway User Guide Figure 59: Tunnel Setting 16. Click the Authentication Methods tab, then click the "Edit" to see the screen like the example below. Figure 60: Authentication Method 17. Select Use this string to protect the key exchange (preshared key) , then ente r your preshared key in the field provided.
Microsoft VPN Figure 61: Windows 2000/XP Client to Broadband VPN Gatew ay 20. To add the second (incomi ng) rule, click "Add". Fo r the name, enter "To Win2K", then clic k "Add". Figure 62: Windows 2000/XP Client to Broadband VPN Gatew ay 21.
Broadband VPN Gateway User Guide Figure 63: Filter Properties: Addressing 22. Click "OK" to save your changes, then "Close". Figure 64: Filter List 23. Ensure the "To Win 2 K" filter is selected, then click the Filter Action tab.
Microsoft VPN Figure 65: Filter Action 24. Select Require Security , then click "Edit". On the Require Security Methods screen below, select Nego tiate security . Figure 66: Security Methods 25. Click the "Add" butt on. On the resulting Modify Security Method screen below, select High [ESP] .
Broadband VPN Gateway User Guide Figure 67: Modify Security Method 26. Click "OK" to save your chang es, th en click "OK" again to return to th e Filter Actio n screen. 27. Select the Tunnel Setting tab, and enter the WAN (Internet) IP address of thi s PC (172.
Microsoft VPN Figure 69: Authentication Method 29. Select Use this string to protect the key exchange (preshared key) , then ente r your preshared key in the field provided. 30. Click "OK" to save your settin g s, then "Close" to return to the DUT to Win2K Propert ies screen.
Broadband VPN Gateway User Guide Figure 71: Properties - General Tab 32. Click the "Advanced" butt on to see the screen below. Figure 72: Key Exchange Settings 33.
Microsoft VPN 34. Select the first entry, and click the "Ed it" button to see the fo llo wing screen. Figure 74: IKE Security Algorithms 35. Select "SHA1" for Integrity Algorithm , "3DES" for Encryption algorithm , and "Low(1)" for the Diffie-Hellman Group .
Broadband VPN Gateway User Guide Remote IP addresses 172.16.9.10 For a single client, this is the same as the Gateway address Subnet address: 11.5.0.0 255.
Microsoft VPN Windows 2000 Server Configuration Configuration is t he same as for Example 2: Windows 2000/XP Client to except for specifying the Source and Destinatio n addresses for the "Filter Properties". Instead, for bo th IP Filters, th e Filter Properties- Addressing should be completed as fol lows.
Broadband VPN Gateway User Guide Certificates Certificates are used to authen ticate u ser s. Certificates are issued to you by va rious CAs (Certification Autho rities). These C ertificates are called "Self Certificates". Each CA also issues a certificat e to itself.
Microsoft VPN 3. Click the "Browse" but ton, and locat e the certificate file on your PC 4. Select the file. The name will appear in the "Certificate File" field. 5. Click "Upload" to upl oad the certificate file to the Broadband VPN Gateway.
Broadband VPN Gateway User Guide Upload Button After you have received a Certificat e, use this to upload the certifi- cate to the Broadband VPN Router. You must select the correct cer tificate request , so the Broadband VPN Router can correctly match the request and the certificate.
Microsoft VPN Authentication Algo- rithm Select the desired option. R SA is recommended. Key Size Select the desired option. Norm ally, 1024 bits provides adequate security. IP address Enter your public (Internet) IP address. Domain Name This is optional.
Broadband VPN Gateway User Guide • When prompted for the request data, suppl y the data you copied and saved in step 5 above. • Submit the CA's form. • If there are no problems, the Certificate will then be issued . 8. After obtaining a new Ce rtificate, as described above , you need to upload it the Broadband VPN Gateway.
Microsoft VPN Figure 85: Upload CRL 4. Upload the CRL file: • Click the "Browse" butt on, and locate the CRL file on your PC • Select the file. The name will appear in the "Upload File" field. • Click "Upload" to upl oad the CRL file to the Broadband VPN Gateway.
Broadband VPN Gateway User Guide 9 Check Log Open a new window and view the contents of the VPN log. Chapter 9 Microsoft VPN This Chapter explains the screens and settings available for the Microsoft VPN function. Overview Microsoft VPN uses the Microsoft VPN Adapter which is provided in recent versions of W indows.
Microsoft VPN Data - VPN Adapter Screen PPTP Service Enable PPTP Use this checkbox to enable or disable this feature as required. To allow connection by rem ote Windows clients, you must enabl e this feature, and enter the clien t details (on the Clients screen) to allow them to login to this Server.
Broadband VPN Gateway User Guide Data - User Screen Existing Users User List All existing users are listed. If you have not added any users, this list will be empty.
Microsoft VPN Status Log Screen The Status Log screen is accessed by selecting the Status Log opti on on the VPN (PPTP) menu. Figure 89: Status Log Screen Data - Status Log Screen Status Log Status This indicates whether or not th e PPTP (VPN) Server is enabled.
Broadband VPN Gateway User Guide Windows Client Setup To connect to the PPTP (VPN) Server in the VPN Broadband Gateway : • The Microsoft VPN feature in the VPN Broadband Gat eway must be enabled and configured, as described in the previous sec- tion.
Microsoft VPN To force all outgoing traffic t o be sent via VPN, enable the setting This is the default Internet con nection on the Dialing tab. (Do NOT enable this setting if using Dial -up or PPPoE client software.) Windows ME VPN Dialing Properties To establish a connection: 1.
Broadband VPN Gateway User Guide Windows 2000 Ensure you have logged on with Adm inistrato r rights before attem pting this procedure. 1. Open "Network Connections", and st art the "New Connection" Wizard. Figure 92: Windows 2000 Network Connection 2.
Microsoft VPN Figure 94: Windows 2000 VPN Host 4. On the screen above, enter the Dom ain Name or Internet IP address of the Broadband VPN Gateway you wi sh to connect to. Click Next to continue. Figure 95: Windows 2000 Connection Availability 5. Choose whether to allow thi s connection for ev eryone, or only for yourself, as required.
Broadband VPN Gateway User Guide Figure 96: Windows 2000 Finish Wi zard 6. Enter a suitable name, and click "Finish" to sav e and exit. Setup is now complete. To establish a connection: 1. Right-click t he connection in "Network Connections", and select "Connect".
Microsoft VPN Windows XP Ensure you have logged on with Adm inistrato r rights before attem pting this procedure. 1. Open Network Connecti ons (Start-Settings-Network Connections), and start the New Connection Wizard. Figure 97: Windows XP Network Connection Type 2.
Broadband VPN Gateway User Guide Figure 99: Windows XP Connection Name 4. Enter a suitable name for this connection. Click Next to continue. Figure 100: Windows XP Public Network 5. On the screen above, select "Do not dial the initial connection".
Microsoft VPN 117 Figure 102: Windows XP Connection Availability 7. Choose whether to allow thi s connection for ev eryone, or only for yourself, as required. Click Next to continue. 8. On the final screen, click Finish to save an d exit. Setup is now complete.
10 Chapter 10 Other Features & Settings This Chapter explains the screens and se ttings available via the "Other" menu. Overview Normally, it is not necessary to use these screens, or change any settings.
Other Features and Settings Diagnostics This screen allows you to perform a "P ing" or a "DNS lookup". These activities can be useful in solving network problem s.
Broadband VPN Gateway User Guide Search Button After enterin g the Domain name/URL, click this button to start th e "DNS Search" procedure. The resu lts will be displayed in the DNS Search Result pane.
Other Features and Settings Password Screen The password screen allows you to assign a password to the Wireless R outer. Figure 104: Account Management Screen Data - Account Management Screen Passw ord User Name It displays the current existi ng user names.
Broadband VPN Gateway User Guide Web Management Web Management allows you to connect to this in terface via the Internet, using your Web browser. Figure 106: Web Management Screen Data - Web Management Screen Settings Web Management Select WAN1, WAN2 or LAN to allow administ ration/management via the Internet.
Other Features and Settings External Port Number The default value is 8080. Allow Web Login by This allows you to restrict remote access by IP address. Select the desired option. • Anyone - Remote user's IP address is not checked. • IP Address Range - Only the PCs in the selected IP address range will be allowed.
Broadband VPN Gateway User Guide Firmware Upgrade Use this screen to upgrade your Broadband VPN Gateway 's firmware. • You must download the requi red firmware file, and store it on your PC . • During the upgrade process, all existing Inte rnet connections will be terminated.
Other Features and Settings Backup/Restore This feature allows you to backup (downloa d) the current settings from the Broadband VPN Gateway, and save them to a file on yo ur PC. You can restore a previously-downloaded confi guration file to the Broadband VPN Gateway, by uploading it to the Broadband VPN Gateway.
Broadband VPN Gateway User Guide 126 Default Configu- ration Enable the Restore the default language if required. Clicki ng the Factory Defaults button will reset the Bro ad band VPN Gateway to its factory default setti ngs. WARNING ! This will delete ALL of the existin g settings.
A Appendix A Troubleshooting This Appendix covers the most likel y problems and their solutions. Overview This chapter covers some common problems t hat may be encount ered while using t he Broadband VPN Gateway and some possible solutions to them.
Broadband VPN Gateway User Guide 128 Solution 2: The Broadband VPN Gateway processes the data passi ng through it, so it is not transparent. Use the Special Applicati ons feature to allow the use of Internet applications which do not function correct ly.
B Appendix B Specifications Broadband VPN Gateway Model Broadband VPN Gateway Dimensions 235mm(W) * 147m m(D) * 33mm (H) Operating Temperature 0 ° C to 40 ° C Storage Temperature -10 ° C to 70 ° C.
Broadband VPN Gateway User Guide This transmitter must not be co-located or operating in co njunction with any o th er an tenna or transmitter. CE Marking Warning CE Standards This product compli es with the 99/5/EEC directives, including t he following safety and EMC standards: • EN301489-1/-17 • EN60950 This is a Class B product .
Appendix B - Specifications 131.
Broadband VPN Gateway User Guide 132.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il TRENDnet TW100-BRV324 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del TRENDnet TW100-BRV324 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso TRENDnet TW100-BRV324 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul TRENDnet TW100-BRV324 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il TRENDnet TW100-BRV324, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del TRENDnet TW100-BRV324.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il TRENDnet TW100-BRV324. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo TRENDnet TW100-BRV324 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
