Manuale d’uso / di manutenzione del prodotto VSU 5000 del fabbricante VPNet
Vai alla pagina of 42
VSU-5000 VPNwar e Service Unit User Guide VPNet T echnologies, Inc..
VSU-5000 Use r Guide Licenses, W arranties, Copyrights, and T rademarks THE SPECIFICA TIONS REGARDING T HE PRODUCTS IN THIS MANU AL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL ST A TEMENTS, INFORMA TION, AND RECOMMENDA TIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURA TE B UT ARE PRESENTED WITHOUT W ARRANT Y OF ANY KIND, EXPRESS OR IMPL IED.
VSU-5000 User Guid e Limited W arranty Hardware VPNet T echn ol ogi es, Inc . (“ VPNe t”) w arr ant s that for a period of one (1) year from the da te of shipmen t from VPNet that the Har dware wi ll be free from defects in material an d workma nship und er normal use.
VSU-5000 Use r Guide LIABILITY ARISING OUT OF THE USE OF OR INABILITY TO USE THE PRODUCT EVEN IF VPNET OR ITS SUPPLIERS HA VE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAM AGE S.
T able of Contents Preface Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . i Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 4 T r o ubles hootin g Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1 Chassis Co oling Fan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
i Pr eface This u ser guide pr ovides in stallat ion and confi guration information f or the VSU-5000 VPNware Service Units. The VSU- 5000 adds comp ression, en cryption, au thentication, and key mana.
ii VSU-5000 Use r Guide Data authenticity is assured by using MD5 ™ or SHA-1 hashing to reject altered or for ged packets. All security mechanisms employed by the VSU-5000 con form to IPSec s tandards , in orde r to provide i nteroperabi lity and bro aden the us e of VPN techno logy .
iii VSU-5000 User Guid e Chapte r 2, Inst all ing t he VS U- 50 00 , provide s VSU rack mou nting instructi ons, an overview of the back panel, and a procedure for p hysical installation, including placemen t and connection to the network.
iv VSU-5000 Use r Guide.
Preparing for I nstallation 1-1 Chapter 1 Pr eparing f or Installation This chapter includes safety , environmental, an d equipment requ irements, as well as guidance in planning the VSU-50 00 in stallat ion.
1-2 Preparing for Installati on VSU-5000 Use r Guide Configuring Equipment Racks The VSU-5000 can be placed on a desktop or mou nted in a rack. The location of the chassis and the layout of your equipme nt rack or wiring ro om are extremely important for proper system op eration.
Preparing for Install ation 1-3 VSU-5000 User Guid e Circuit B reaker (15A ) W arning WA R N I N G : This pr o d uct r elies on the buildin g 's installatio n for short-cir cuit (over curr ent) p r otection. Ensur e that a fuse o r cir cuit br eaker no lar ger than 120 V AC, 15A U.
1-4 Preparing for Installati on VSU-5000 Use r Guide Required Equipm ent The VSU- 5000 shippin g carton cont ains: T o use the VSU-5000 in a typical VPN application, the cus tomer must supply: • Rou.
Installing the VSU-500 0 2-1 Chapter 2 Installing the VSU-5000 This chapter provides instructions for the physical installation of the VSU-5000, including rack mounting, placement, and connection to the n etwork. Physic al Installati on The VSU-5000 can be placed on a d esktop or mounted in a rack.
2-2 Installing the VSU-5000 VSU-5000 Use r Guide T o attach the VSU-5000 to a s tandard 19-inch equipment rack: 1. From one s ide of the VS U-5000, remo ve the two fro nt side s crews (Figure 2-1). Figure 2-1 Removing the Rack Mount Screws 2. Using the flat-head screws provided with the bracket, attach the backet to the VSU-5000 (Figur e 2- 2).
Instal ling the VSU- 500 0 2- 3 VSU-5000 User Guid e Overview of Front Panel Figur e 2- 3 show the fro nt panel view of the V SU-5000. Figure 2-3 Front Panel of the VSU-5000 Console and Auxiliary Ports The auxili ary port on the VSU-50 00 is used for factory testing only and has no function in normal operation.
2-4 Installing the VSU-5000 VSU-5000 Use r Guide Public and Pri vate Ports The Public port pr ovides an interface to the public network, while the Priv ate port provides an interface to the private network. The Public and Private p orts are Ethernet 10/10 0BASE-T compliant host po rts.
Instal ling the VSU- 500 0 2- 5 VSU-5000 User Guid e Connecting the VS U-5000 to the Networ k Figur e 2- 4 shows a typ ical network using the VSU-500 0.
2-6 Installing the VSU-5000 VSU-5000 Use r Guide 1. Connect the gateway r outer to the VS U-5000. Using the supp lied UTP cr ossover cable conn ect one end to the p ublic port on the VSU-5000. Con nect the other end of the UTP crossover cab le to the router ’ s Ethernet port ( Figure 2 -5).
Preparing the VSU-5000 for Config uration 3-1 Chapter 3 Pr epari ng the VSU-5000 f or Configuration Preparation Before the VSU-5 000 can be incorporated in to a V irtual Private Network (VPN), it must be con figured through th e VPNmanager .
3-2 Preparing the VSU-50 00 for Configurati on VSU-5000 Use r Guide • The SuperUser nam e . This is the name th at is a uthor i zed to perfo rm any ki nd of configuration request on a VSU. This name is provided by the VPNmanager administrator the first time the VSU is added into the VPNmanager database.
Preparing the VSU-500 0 for Configu ration 3-3 VSU-5000 User Guid e Figure 3-1 Initial Power On Bootup Sc reen for VSU VPNet Service Unit Model XXXX 3DES ENCRYPTION Runtime System version x.x.xx, x/xx/2000 Copyright (C) 1996-2000 VPNet Technologies, Inc.
3-4 Preparing the VSU-50 00 for Configurati on VSU-5000 Use r Guide Preconfigure the VSU-5000 to commun icate with the VPNmanager using the Qui c k Set up m enu sele ctio n a s des cr i be d be low : 1. From the Main Menu, select 5) Quick Setup. Y ou will be promp ted for the information required to set up the VSU .
Preparing the VSU-500 0 for Configu ration 3-5 VSU-5000 User Guid e 4. T o prevent unauth orized users from acces sing the VSU-5000 through the console port, enter and confirm the new VSU console password.
3-6 Preparing the VSU-50 00 for Configurati on VSU-5000 Use r Guide 6. Select a traff ic mode from the T raff ic Configuration Menu. Permit all non-VPN traffic - When checke d (d efault), all non VPN traf fic is allowed t o pass thr ough th e VSU. Deny a ll IP n on-VPN tra ffic - When checked, all non-IP traffi c is passed thr oug h th e VSU .
Preparing the VSU-500 0 for Configu ration 3-7 VSU-5000 User Guid e 8. Enter the current date and time. This date and time sett ing are primarily used to ensure accurate timestamps when logging events. When changing either th e date or time, all thr ee parts of the date (MM-DD-YYYY) or time ( HH:MM:SS) must be en tered.
3-8 Preparing the VSU-50 00 for Configurati on VSU-5000 Use r Guide FIPS Mode FIPS (Federal Information Processing Standards) Mod e forces the VSU to operate in a FIPS 1 40-1 Level 2 co mpliant mode.
T roubleshooting 4-1 Chapter 4 T r oubleshooting This chapter includes troubleshoo ting and replacement p rocedures for the VSU-50 00 power su pply mod ule, cooli ng fan and d ual-port Et hernet modul e. Power Suppl y The st andard VSU-500 0 includes a s ingle power s upply module.
4-2 T roubleshooting VSU-5000 Use r Guide Power Supply Re moval and Replac ement Referring to Figure 4-1 , perform the following ste ps to replace the power supply module: 1. Unscrew the thumbscrew n ext to the hinged f an assembly on the back of the unit and s wing th e fan assembl y open to ex pose the power suppl y modul es.
T r oublesho oting 4-3 VSU-5000 User Guid e Alternate P ower Supply Remova l and Replaceme nt Referring to Figure 4-2 , perform the following ste ps to replace the power supply module: 1. If the power supply is defective, the green LED indicator on the po wer supply module will be OFF .
4-4 T roubleshooting VSU-5000 Use r Guide Figure 4-2 Chassis C ooling Fan Removal and Replacement Ethernet Interface Module The VSU-500 0 includes a dual-port 10/100BASE- T Ethernet card, w ith the public and pr ivate interface ports p aired on the card.
Speci fications A-1 APPENDIX A Specifications This appen dix provides physical, en vironmental and electrical specification s for the VSU-5000, as well as stand ards compliance inform ation. Physic al Specificati ons T able 1- 1 VSU-500 0 Phy sical Sp ecificat ions Parameter Specifica tion Dimens ions 17"W x 16 "D x 3.
A-2 Specification s VSU-5000 Use r Guide Environment al Speci fications Electri cal Specifi cations CAUTION : Danger of explosion if memory b ackup battery is incorr ectly r eplaced. Replace only with the s ame or equivalent type r ecommended by the manufactur er .
Specifi cations A-3 VSU-5000 User Guid e Compliance Specifi cati ons T able 1-4 Compliance Specification s Parameter Specification Saf ety Certification UL, C-UL, CE, AS3260, CB SCHEME EMI/RFI F CC Part 15, Class A EN55022 Class A EN500 82-1 AS 38548 VCCI Standa rds Compliance IEEE 80 2.
A-4 Specification s VSU-5000 Use r Guide Additional F eatures T able 1-5 Additional Features Parameter S pecificatio n Encryption DES and T rip le DES hardware en cryp tion. DE S us es a 56-bit key; T riple DES uses three 56-bit in dependent k eys for an effectiv e key le ngt h of 112 bits.
10/100BASE-T UTP Cros sover Cable Pinouts B-1 APPENDIX B 10/100BASE-T UTP Cr ossover Cable Pinouts The 10 /100BASE-T U TP Crosso ver Cable d efined bel ow is pr ovided wi th the VSU-1 10 0.
10/100BASE-T UTP Crossover Cable Pino uts B-2 VSU-5000 User Guid e.
VSU-5000 Use r Guide G-1 GLO SSAR Y VSU Acr onyms CBC – Cipher Block Ch aining encry ption DES – Data Encrypt ion Standar d encrypti on DNS – Domain Name Server ( a distribut ed database s ystem.
G-2 VSU-5000 Use r Guide PPP – Point to Point Protocol RADIUS – Remote Authentication Dial-In User Server RFC – Requ est F or Co mm ent SHA – Secure Hash Algorithm SKIP – Simple Key Manageme.
Index A authen tication specific ation A-4 auxil iary po rt 2-3 B back pa nel 2-3 auxil iary po rt 2-3 con s ol e po rt 2-3 LEDs 2-4 priva te port 2-4 publi c por t 2-4 bootup screen 3-2 C complianc e.
safety 1-1 registratio n iii required to ols 1-3 requiremen ts envir onme ntal 1-3 rout er conne c t ion s 2-6 S safety recomme nda tions 1-1 security i SHA 1 i SKIP i software u pgrade sp ecifica tio.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il VPNet VSU 5000 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del VPNet VSU 5000 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso VPNet VSU 5000 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul VPNet VSU 5000 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il VPNet VSU 5000, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del VPNet VSU 5000.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il VPNet VSU 5000. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo VPNet VSU 5000 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.