Allnet ALL1295VPN User Manual
Dual WAN Broadband
VPN Router
ALL1295VPN
Broadband Internet Access
4-Port Switching Hub
2 WAN Ports
User's Guide
Table of Contents
CHAPTER 1 INTRODUCTION .............................................................................................1
Dual WAN Broadband VPN Router Features................................................................1
Package Contents ..............................................................................................................3
Physical Details..................................................................................................................5
CHAPTER 2 INSTALLATION...............................................................................................7
Requirements.....................................................................................................................7
Procedure...........................................................................................................................7
CHAPTER 3 SETUP ................................................................................................................9
Overview ............................................................................................................................9
Configuration Program ..................................................................................................10
WAN Port Configuration ...............................................................................................15
Port Options Screen........................................................................................................ 17
LAN Port Screen .............................................................................................................19
Balancing/Backup Screen...............................................................................................22
CHAPTER 4 PC CONFIGURATION..................................................................................23
Overview ..........................................................................................................................23
Windows Clients..............................................................................................................23
Macintosh Clients............................................................................................................34
Linux Clients....................................................................................................................34
Other Unix Systems.........................................................................................................34
CHAPTER 5 OPERATION AND STATUS.........................................................................35
Operation......................................................................................................................... 35
Status Screen....................................................................................................................35
Port Status........................................................................................................................38
Event Log.........................................................................................................................39
URL Log...........................................................................................................................40
Syslog................................................................................................................................41
CHAPTER 6 ADVANCED FEATURES..............................................................................42
Overview ..........................................................................................................................42
Address List.....................................................................................................................42
PC Database.....................................................................................................................44
URL Filter........................................................................................................................46
Dynamic DNS...................................................................................................................48
Routing.............................................................................................................................50
QoS ...................................................................................................................................55
CHAPTER 7 SECURITY CONFIGURATION...................................................................57
Overview ..........................................................................................................................57
Rules.................................................................................................................................57
Schedule............................................................................................................................61
Firewall -- Log .................................................................................................................62
Services.............................................................................................................................64
Security.............................................................................................................................66
DMZ .................................................................................................................................68
E-Mail...............................................................................................................................69
CHAPTER 8 VPN (IPSEC)....................................................................................................71
Overview ..........................................................................................................................71
i
Common VPN Situations................................................................................................73
VPN Configuration .........................................................................................................75
VPN Examples.................................................................................................................83
Certificates.....................................................................................................................101
CRL ................................................................................................................................105
VPN Status.....................................................................................................................106
CHAPTER 9 MICROSOFT VPN .......................................................................................108
Overview ........................................................................................................................108
Server Setup................................................................................................................... 108
User.................................................................................................................................109
Status Log Screen..........................................................................................................111
Windows Client Setup...................................................................................................112
CHAPTER 10 OTHER FEATURES & SETTINGS .........................................................120
Overview ........................................................................................................................120
Diagnostics.....................................................................................................................121
Password Screen............................................................................................................123
Web Management .........................................................................................................125
Firmware Upgrade........................................................................................................127
Backup/Restore..............................................................................................................128
APPENDIX A TROUBLESHOOTING..............................................................................130
Overview ........................................................................................................................130
General Problems..........................................................................................................130
Internet Access...............................................................................................................130
APPENDIX B SPECIFICATIONS......................................................................................132
Dual WAN Broadband VPN Router ...........................................................................132
FCC Statement ..............................................................................................................132
CE Marking Warning...................................................................................................133
P/N: 956YH10030
Copyright © 2007. All Rights Reserved.
Document Version:1.0
All trademarks and trade names are the properties of their respective owners.
ii
Chapter 1
Introduction
1
This Chapter provides an overview of the Dual WAN Broadband VPN
Router's features and capabilities.
Congratulations on the purchase of your new Dual WAN Broadband VPN Router. The Dual
WAN Broadband VPN Router is a multi-function device providing the following services:
Shared Broadband Internet Access for all LAN users.
•
VPN Gateway for IPSec VPN connections to remote PCs or sites.
•
4-Port Switching Hub for 10BaseT or 100BaseT connections.
•
Figure 1: Dual WAN Broadband VPN Router
Dual WAN Broadband VPN Router Features
The Dual WAN Broadband VPN Router incorporates many advanced features, carefully
designed to provide sophisticated functions while being easy to use.
Internet Access Features
• Shared Internet Access. All users on the LAN or WLAN can access the Internet
through the Dual WAN Broadband VPN Router, using only a single external IP Address.
The local (invalid) IP Addresses are hidden from external sources. This process is called
NAT (Network Address Translation).
Dual WAN Support. Dual 10/100 WAN ports let you have a second link to your ISP,
•
providing failover protection. You can use both WAN ports simultaneously, and let the
router balance the requirements between them for maximum bandwidth efficiency.
• Fixed or Dynamic IP Address. On the Internet (WAN port) connection, the Dual
WAN Broadband VPN Router supports both Dynamic IP Address (IP Address is allocated
on connection) and Fixed IP Address.
1
Broadband VPN Gateway User Guide
Advanced Internet Functions
• Communication Applications. Support for Internet communication applications, such
as interactive Games, Telephony, and Conferencing applications, which are often difficult
to use when behind a Firewall, is included.
Special Internet Applications. Applications which use non-standard connections or
•
port numbers are normally blocked by the Firewall. The ability to define and allow such
applications is provided, to enable such applications to be used normally.
•
Virtual Servers. This feature allows Internet users to access Internet servers on your
LAN. The required setup is quick and easy.
•
Multi-DMZ. For each WAN (Internet) IP address allocated to you, one (1) PC on your
local LAN can be configured to allow unrestricted 2-way communication with Servers or
individual users on the Internet. This provides the ability to ru n programs which are incompatible with Firewalls.
• Address List. Use address list to block access to undesirable Web sites by LAN users. Up
to 40 addresses can be listed.
•
IM/P2P Control. The IM/P2P control allows you to better manage your employees’
network activities and prevent possible misuse of IM and P2P applications.
• URL Filter. Use the URL Filter to block access to undesirable Web sites by LAN users.
Internet Access Log. See which Internet connections have been made.
•
VPN Pass through Support. PCs with VPN (Virtual Private Networking) software
•
using PPTP, L2TP and IPSec are transparently supported - no configuration is required.
•
QoS Support Quality of Service can be used to handle packets so that more important
connections receive priority over less important one.
LAN Features
• 4-Port Switching Hub. The Dual WAN Broadband VPN Router incorporates a 4-port
10/100BaseT switching hub, making it easy to create or extend your LAN.
•
DHCP Server Support. Dynamic Host Configuration Protocol provides a dynamic IP
address to PCs and other devices upon request. The Dual WAN Broadband VPN Router
can act as a DHCP Server for devices on your local LAN and WLAN.
Configuration & Management
• Easy Setup. Use your WEB browser from anywhere on the LAN or WLAN for configu-
ration.
•
Remote Management. The Dual WAN Broadband VPN Router can be managed from
any PC on your LAN. And, if the Internet connection exists, it can also (optionally) be
configured via the Internet.
• UPnP Support. UPnP (Universal Plug and Play) allows automatic discovery and con-
figuration of the Dual WAN Broadband VPN Router. UPnP is by supported by Windows
ME, XP, or later.
• Multi-Language Support. Multi-Language Pack facilitates the process of creating
multi-language applications. Add support for as many languages as you like.
• Configuration File Backup & Restore. You can backup (download) the Dual WAN
Broadband VPN Router's configuration file to your PC, and restore (upload) a previouslysaved configuration file to the Dual WAN Broadband VPN Router.
2
Introduction
Security Features
• Password - protected Configuration. Optional password protection is provided to
prevent unauthorized users from modifying the configuration data and settings.
•
NAT Protection. An intrinsic side effect of NAT (Network Address Translation) tech-
nology is that by allowing all LAN users to share a single IP address, the location and
even the existence of each PC is hidden. From the external viewpoint, there is no network,
only a single device - the Dual WAN Broadband VPN Router.
NATT (NAT-Traversal). NAT Traversal is a method to allow IPSec to work through
•
NAT devices. It is encapsulating IPsec ESP packets into UDP packets for passing through
routers or firewalls employing Network Address Translation (NAT).
Stateful Inspection Firewall. All incoming data packets are monitored and all incom-
•
ing server requests are filtered, thus protecting your network from malicious attacks from
external sources.
• IP/MAC Binding. Users cannot change the IP address unless they have the permission
of the IT manager.
•
Protection against DoS attacks. DoS (Denial of Service) attacks can flood your
Internet connection with invalid packets and connection requests, using so much bandwidth and so many resources that Internet access becomes unavailable. The Dual WAN
Broadband VPN Router incorporates protection against DoS attacks.
Rule-based Policy Firewall. To provide additional protection against malicious pack-
•
ets, you can define your own firewall rules. This can also be used to control the Internet
services available to LAN users.
IPSec VPN Gateway Features
• IPSec. Support for IPSec standards, including IKE and certificates.
100 Tunnels. Up to 100 VPN tunnels can be created.
•
High performance. High performance encryption engine maintains high throughput
•
even when using 3DES.
•
DPD Support Dead Peer Detection is a method of detecting a dead Internet Key Ex-
change (IKE) peer. The method uses IPSec traffic patterns to minimize the number of
messages required to confirm the liveness of a peer. DPD is used to reclaim the lost resources in case a peer is found dead.
Microsoft VPN Gateway Support
• PPTP Server. The Dual WAN Broadband VPN Router emulates a Microsoft PPTP
VPN Server, allowing clients to use the Microsoft VPN client provided in Windows.
•
Windows Client Support. Remote users can use the Microsoft VPN client (VPN
Adapter) provided in recent versions of Windows.
•
Easy Setup. For both the Administrator and remote users, the Microsoft VPN is much
easier to configure than IPSec VPN.
Package Contents
The following items should be included:
• The Dual WAN Broadband VPN Router Unit
• Power Adapter
• Quick Installation Guide
3
Broadband VPN Gateway User Guide
• CD-ROM containing the on-line manual.
If any of the above items are damaged or missing, please contact your dealer immediately.
4
Physical Details
Front-mounted LEDs
Figure 2: Front Panel
Power On - Power on.
Off - No power.
Status (Red) On - Error condition.
Off - Normal operation.
Blinking - This LED blinks during start up.
Introduction
WAN ports
(10/100BaseT)
LAN
Connect the DSL or Cable Modem here. If your modem came with a
cable, use the supplied cable. Otherwise, use a standard LAN cable.
Each port has 2 LEDs
• Link/Act
• On - Corresponding LAN (hub) port is active.
• Off - No active connection on the corresponding LAN (hub)
port.
• Flashing - Data is being transmitted or received via the corre-
sponding LAN (hub) port.
• 100
• On - Corresponding LAN (hub) port is using 100BaseT.
• Off - Corresponding LAN (hub) port connection is using
10BaseT, or no active connection.
5
Broadband VPN Gateway User Guide
Rear Panel
Figure 3: Rear Panel
WAN port 1/2
(10/100BaseT)
10/100BaseT
LAN connections
Console Port
Reset Button
Connect the DSL or Cable Modem here. If your modem came with a
cable, use the supplied cable. Otherwise, use a standard LAN cable.
Use standard LAN cables (RJ45 connectors) to connect your PCs to
these ports.
Note:
Any LAN port on the Dual WAN Broadband VPN Router will
automatically function as an "Uplink" port when required. Just
connect any port to a normal port on the other hub, using a standard
LAN cable.
Use the supplied cable to connect the router to a terminal or PC.
This button has two (2) functions:
• Reboot. When pressed and released, the Dual WAN Broadband
VPN Router will reboot (restart).
• Clear All Data. This button can also be used to clear ALL data
and restore ALL settings to the factory default values.
To Clear All Data and restore the factory default values:
1. Power Off.
2. Hold the Reset Button down while you Power On.
3. Keep holding the Reset Button for a few seconds, until the RED
LED has flashed TWICE.
4. Release the Reset Button. The Dual WAN Broadband VPN
Router is now using the factory default values.
Power port
Connect the supplied power adapter here.
6
Chapter 2
Installation
2
This Chapter covers the physical installation of the Dual WAN Broadband
VPN Router.
Requirements
• Network cables. Use standard 10/100BaseT network (UTP) cables with RJ45 connectors.
• TCP/IP protocol must be installed on all PCs.
• For Internet Access, an Internet Access account with an ISP, and a Broadband modem
(usually, DSL or Cable modem).
Procedure
Figure 4: Installation Diagram
1. Choose an Installation Site
Select a suitable place on the network to install the Dual WAN Broadband VPN Router.
Ensure the Dual WAN Broadband VPN Router and the DSL/Cable modem are powered
OFF.
2. Connect LAN Cables
• Use standard LAN cables to connect PCs to the Switching Hub ports on the Dual WAN
Broadband VPN Router. Both 10BaseT and 100BaseT connections can be used simultaneously.
• If required, you can connect any LAN port to another Hub. Any LAN port on the Dual
WAN Broadband VPN Router will automatically function as an "Uplink" port when required. Just connect any LAN port to a normal port on the other hub, using a standard
LAN cable.
7
Broadband VPN Gateway User Guide
3. Connect WAN Cable
Connect the Broadband modem to the WAN port on the Dual WAN Broadband VPN
Router. Use the cable supplied with your Broadband modem. If no cable was supplied, use
a standard LAN cable.
4. Power Up
• Power on the Broadband modem.
• Connect the supplied power adapter to the Dual WAN Broadband VPN Router and power
up.
Use only the power adapter provided. Using a different one may cause hardware damage.
5. Check the LEDs
• The Power LED should be ON.
• The Status LED should blink during start up, then turn Off. If it stays on, there is a hard-
ware error.
• For each LAN (PC) connection, the LAN Link/Act LED should be ON (provided the PC is
also ON.)
• The WAN1 or WAN2 LED should be ON.
For more information, refer to Front-mounted LEDs in Chapter 1.
8
Chapter 3
Setup
3
This Chapter provides Setup details of the Dual WAN Broadband VPN Router.
Overview
This chapter describes the setup procedure for:
• Internet Access
• LAN configuration
PCs on your local LAN may also require configuration. For details, see Chapter 4 - PC Configuration.
Other configuration may also be required, depending on which features and functions of the
Dual WAN Broadband VPN Router you wish to use. Use the table below to locate detailed
instructions for the required functions.
To Do this: Refer to:
Configure PCs on your LAN. Chapter 4:
PC Configuration
Check Dual WAN Broadband VPN Router operation and
Status.
Chapter 5:
Operation and Status
Use any of the following Internet features:
• WAN Port
• Advanced Setup
• Dynamic DNS
• Virtual Servers
• Options
Change any of the following Security-related settings:
• Admin Login
• Access Control
• Firewall Rules
• Logs
• E-mail
• Security Options
• Scheduling
• Services
Chapter 6:
Internet Features
Chapter 7:
Security Configuration
9
Broadband VPN Gateway User Guide
Use the IPSec VPN features:
• VPN Policies
• Certificates
• CRLs
• VPN Status
Use the Microsoft VPN feature:
• PPTP Server in the Dual WAN Broadband VPN
Router.
• User and Client setup.
• Checking VPN connection Status.
Configure or use any of the following:
• Configuration File backup and restore.
• Network Diagnostic
• PC Database
• Remote Administration
• Routing
• Upgrade Firmware
• UPnP
Chapter 8:
VPN (IPSec)
Chapter 9:
Microsoft VPN
Chapter 9:
Other Features and Settings
Where use of a certain feature requires that
PCs or other LAN devices be configured, this
is also explained in the relevant chapter.
Configuration Program
The Dual WAN Broadband VPN Router contains an HTTP server. This enables you to connect to it, and configure it, using your Web Browser. Your Browser must support
JavaScript. The configuration program has been tested on the following browsers:
• Netscape V4.08 or later
• Internet Explorer V4 or later
Preparation
Before attempting to configure the Dual WAN Broadband VPN Router, please ensure that:
• Your PC can establish a physical connection to the Dual WAN Broadband VPN Router.
The PC and the Dual WAN Broadband VPN Router must be directly connected (using the
Hub ports on the Dual WAN Broadband VPN Router) or on the same LAN segment.
• The Dual WAN Broadband VPN Router must be installed and powered ON.
• If the Dual WAN Broadband VPN Router 's default IP Address (192.168.0.1) is already
used by another device, the other device must be turned OFF until the Dual WAN Broadband VPN Router is allocated a new IP Address during configuration.
10
Setup
Using UPnP
If your Windows system supports UPnP, an icon for the Dual WAN Broadband VPN Router
will appear in the system tray, notifying you that a new network device has been found, and
offering to create a new desktop shortcut to the newly-discovered device.
• Unless you intend to change the IP Address of the Dual WAN Broadband VPN Router,
you can accept the desktop shortcut.
• Whether you accept the desktop shortcut or not, you can always find UPnP devices in My
Network Places (previously called Network Neighborhood).
• Double - click the icon for the Dual WAN Broadband VPN Router (either on the Desktop,
or in My Network Places) to start the configuration.
Using your Web Browser
To establish a connection from your PC to the Dual WAN Broadband VPN Router:
1. After installing the Dual WAN Broadband VPN Router in your LAN, start your PC. If
your PC is already running, restart it.
2. Start your WEB browser.
3. In the Address box, enter "HTTP://" and the IP Address of the Dual WAN Broadband
VPN Router, as in this example, which uses the Dual WAN Broadband VPN Router's default IP Address:
HTTP://192.168.0.1
If you can't connect
If the Dual WAN Broadband VPN Router does not respond, check the following:
• The Dual WAN Broadband VPN Router is properly installed, LAN connection
is OK, and it is powered ON. You can test the connection by using the "Ping"
command:
• Open the MS-DOS window or command prompt window.
• Enter the command:
ping 192.168.0.1
If no response is received, either the connection is not working, or your
PC's IP address is not compatible with the Dual WAN Broadband VPN
Router's IP Address. (See next item.)
• If your PC is using a fixed IP Address, its IP Address must be within the range
192.168.0.2 to 192.168.0.254 to be compatible with the Dual WAN Broadband
VPN Router's default IP Address of 192.168.0.1. Also, the Network Mask must
be set to 255.255.255.0. See Chapter 4 - PC Configuration for details on
checking your PC's TCP/IP settings.
• Ensure that your PC and the Dual WAN Broadband VPN Router are on the
same network segment. (If you don't have a router, this must be the case.)
4. You will be prompted for a username and password, as shown below.
11
Broadband VPN Gateway User Guide
Figure 5: Password Dialog
• Enter admin for the User Name, and password for the Password.
• These are the default values. Both the name and password can (and should) be changed,
using the Admin Login screen. Once you have changed either the name or the password,
you must use the current values.
12
Home Screen
After logging, you will see the Home screen. When you connect in future, you will see this
screen when you connect. An example screen is shown below.
Setup
Figure 6: Home Screen
13
Broadband VPN Gateway User Guide
Navigation & Data Input
• Use the menu bar on the left of the screen, and the "Back" button on your Browser, for
navigation.
• Changing to another screen without clicking "Save" does NOT save any changes you may
have made. You must "Save" before changing screens or your data will be ignored.
14
WAN Port Configuration
The WAN Port option is on the Setup menu.
Setup
Data - WAN Port Screen
WAN Port Settings
Connections
Connection Type
Static IP Settings
IP Address
Normally, this can be left at "Automatic". If the device attached to
the WAN Port has problems making a connection, you can select the
setting required or preferred by the other device.
Select the login method used, and enter the required data.
• Static IP - Select this if your ISP has allocated you a fixed IP
Address. If this option is selected, you must enter the data in the
Static IP Settings section.
• Dynamic IP - This is the default, and the most common. Leave
this selected if your ISP allocates an IP Address to the Dual
WAN Broadband VPN Router upon connection.
• PPPoE - This is the most common login method, widely used
with DSL modems. Normally, your ISP will have provided some
software to connect and login. This software is no longer required, and should not be used.
The IP Address allocated by the ISP.
Figure 7: WAN Port Screen
Subnet Mask
Gateway
This is also supplied by your ISP. It must be compatible with the IP
Address above.
The address of the router or gateway, as supplied by your ISP.
15
Broadband VPN Gateway User Guide
PPPoE Dial-up
User Name
Password
Hostname
DNS
DNS 1
DNS 2
Buttons
Save
Cancel
The User Name (or account name) provided by your ISP.
Enter the password for the login name above.
Normally, there is no need to change the default name, but if your
ISP requests that you use a particular Hostname, enter it here.
Enter the IP address of the DNS (Domain Name Server) you wish to
use.
DNS 2 will be used if the DNS 1 is not available.
Save your changes to the Dual WAN Broadband VPN Router.
Reverse any changes made since the last "Save".
16
Port Options Screen
Use the Port Options link on the Setup menu. An example screen is shown below.
Setup
Figure 8: Port Options Screen
Data - Port Options Screen
Port Options
Symmetric NAT
Compatible NAT
Hostname
Domain Name
MAC Address
If Enabled, all requests from the same internal IP address and port to
a specific destination IP address and port are mapped to a unique
external source IP address and port.
The default value is Disabled.
Normally, there is no need to change the default name, but if your
ISP requests that you use a particular Hostname, enter it here.
If your ISP provided a domain name, enter it here. Otherwise, this
may be left blank.
Also called Network Adapter Address or Physical Address. This is a
low-level identifier, as seen from the WAN port.
Normally there is no need to change this, but some ISPs require a
particular value, often that of the PC initially used for Internet access.
You can use the Clone button to copy your PC's address into this
field, the Default button to insert the default value, or enter a value
directly.
17
Broadband VPN Gateway User Guide
MTU Size
PPPoE Connection
Automatic Dial-up
Disconnect After
Idling
Bind Service
IPSec Pass
Through
VPN (PPTP)
Network Card
Speed
• MTU (Maximum Transmission Unit) value should only be
changed if advised to do so by Technical Support.
• Enter a value between 1 and 1500.
• This device will still auto-negotiate with the remote server, to set
the MTU size. The smaller of the 2 values (auto-negotiated, or
entered here) will be used.
An Internet connection is automatically made when required, and
disconnected when idle for the time period specified by the "Disconnect after Idling".
This field has no effect unless using the Automatic Dial-up setting.
If using this setting, enter the desired idle time-out period (in minutes). After the connection to your ISP has been idle for this time
period, the connection will be terminated.
IPSec protocol is used to establish a secure connection, and is widely
used by VPN (Virtual Private Networking) programs.
PPTP (Point to Point Tunneling Protocol) is widely used by VPN
(Virtual Private Networking) programs.
Select the desired option from the drop-down list.
18
Setup
LAN Port Screen
Use the LAN Port link on the main menu to reach the LAN Port screen. An example screen is
shown below.
Figure 9: LAN Port Screen
Data - LAN Port Screen
LAN
LAN IP Address
Subnet Mask
DHCP Server
IP address for the Dual WAN Broadband VPN Router, as seen from
the local LAN. Use the default value unless the address is already in
use or your LAN is using a different IP address range. In the latter
case, enter an unused IP Address from within the range used by your
LAN.
The default value 255.255.255.0 is standard for small (class "C")
networks. For other networks, use the Subnet Mask for the LAN
segment to which the Dual WAN Broadband VPN Router is attached
(the same value as the PCs on that LAN segment).
• If Enabled, the Dual WAN Broadband VPN Router will allocate
IP Addresses to PCs (DHCP clients) on your LAN when they start
up. The default (and recommended) value is Enabled.
• If you are already using a DHCP Server, this setting must be
Disabled, and the existing DHCP server must be re-configured to
treat the Dual WAN Broadband VPN Router as the default Gateway. See the following section for further details.
• The Start IP Address, Number of IP Address Pool, Client Side
DNS and DHCP Lease Time fields set the values used by the
DHCP server when allocating IP Addresses to DHCP clients. This
range also determines the number of DHCP clients supported.
See the following section for further details on using DHCP.
Buttons
Save
Save the data on screen.
19
Broadband VPN Gateway User Guide
Cancel
The "Cancel" button will discard any data you have entered and reload
the file from the Dual WAN Broadband VPN Router.
20
Setup
DHCP
What DHCP Does
A DHCP (Dynamic Host Configuration Protocol) Server allocates a valid IP address to a
DHCP Client (PC or device) upon request.
• The client request is made when the client device starts up (boots).
• The DHCP Server provides the Gateway and DNS addresses to the client, as well as
allocating an IP Address.
• The Dual WAN Broadband VPN Router can act as a DHCP server.
• Windows 95/98/ME and other non-Server versions of Windows will act as a DHCP client.
This is the default Windows setting for the TCP/IP network protocol. However, Windows
uses the term Obtain an IP Address automatically instead of "DHCP Client".
• You must NOT have two (2) or more DHCP Servers on the same LAN segment. (If your
LAN does not have other Routers, this means there must only be one (1) DHCP Server on
your LAN.)
Using the Dual WAN Broadband VPN Router 's DHCP Server
This is the default setting. The DHCP Server settings are on the LAN screen. On this screen,
you can:
• Enable or Disable the Dual WAN Broadband VPN Router's DHCP Server function.
• Set the range of IP Addresses allocated to PCs by the DHCP Server function.
You can assign Fixed IP Addresses to some devices
while using DHCP, provided that the Fixed IP Addresses
are NOT within the range used by the DHCP Server.
Using another DHCP Server
You can only use one (1) DHCP Server per LAN segment. If you wish to use another DHCP
Server, rather than the Dual WAN Broadband VPN Router's, the following procedure is
required.
1. Disable the DHCP Server feature in the Dual WAN Broadband VPN Router. This setting
is on the LAN screen.
2. Configure the DHCP Server to provide the Dual WAN Broadband VPN Router's IP
Address as the Default Gateway.
To Configure your PCs to use DHCP
This is the default setting for TCP/IP under Windows 95/98/ME.
See Chapter 4 - Client Configuration for the procedure to check these settings.
21
Broadband VPN Gateway User Guide
Balancing/Backup Screen
Use the Balancing/Backup link on the Setup menu. An example screen is shown below.
Figure 10: Balancing/Backup Screen
Data - Balancing/Backup Screen
Balancing/Backup
WAN
Rule
Exceptions
There are 3 modes:
1. If Enable is selected for WAN 1, then choose Backup for WAN 2.
2. If Load Balance is selected for WAN 1, then choose Load Bal-
ance for WAN 2.
3. If Backup is selected for WAN 1, then choose Enable for WAN 2.
Balancing Mode has 2 options:
• Bandwidth: If selected, enter the desired values of WAN1 and
WAN2 Bandwidth.
• Connection: Enter the percentage in the Primary Port Proportion
field.
Set up "Local IP Range", "Remote IP Range" or "Remote Port" to
direct the connection through secondary port.
22
Chapter 4
PC Configuration
4
This Chapter details the PC Configuration required on the local ("Internal")
LAN.
Overview
For each PC, the following may need to be configured:
• TCP/IP network settings
• Internet Access configuration
Windows Clients
This section describes how to configure Windows clients for Internet access via the Dual
WAN Broadband VPN Router.
The first step is to check the PC's TCP/IP settings.
The Dual WAN Broadband VPN Router uses the TCP/IP network protocol for all functions, so
it is essential that the TCP/IP protocol be installed and configured on each PC.
TCP/IP Settings - Overview
If using the default Dual WAN Broadband VPN Router settings, and the
default Windows TCP/IP settings, no changes need to be made.
• By default, the Dual WAN Broadband VPN Router will act as a DHCP Server, automatically providing a suitable IP Address (and related information) to each PC when the PC
boots.
• For all non-Server versions of Windows, the default TCP/IP setting is to act as a DHCP
client.
If using a Fixed (specified) IP address, the following changes are required:
• The Gateway must be set to the IP address of the Dual WAN Broadband VPN Router
• The DNS should be set to the address provided by your ISP.
If your LAN has a Router, the LAN Administrator must reconfigure the Router itself. Refer to Chapter 8 - Other
Features and Operations for details.
23
Broadband VPN Gateway User Guide
Checking TCP/IP Settings - Windows 9x/ME:
1. Select Control Panel - Network. You should see a screen like the following:
Figure 11: Network Configuration
2. Select the TCP/IP protocol for your network card.
3. Click on the Properties button. You should then see a screen like the following.
Figure 12: IP Address (Win 95)
Ensure your TCP/IP settings are correct, as follows:
Using DHCP
To use DHCP, select the radio button Obtain an IP Address automatically. This is the default
Windows setting. Using this is recommended. By default, the Dual WAN Broadband VPN
Router will act as a DHCP Server.
Restart your PC to ensure it obtains an IP Address from the Dual WAN Broadband VPN
Router.
Using "Specify an IP Address"
If your PC is already configured, check with your network administrator before making the
following changes:
24
PC Configuration
• On the Gateway tab, enter the Dual WAN Broadband VPN Router's IP address in the New
Gateway field and click Add, as shown below. Your LAN administrator can advise you of
the IP Address they assigned to the Dual WAN Broadband VPN Router.
Figure 13: Gateway Tab (Win 95/98)
• On the DNS Configuration tab, ensure Enable DNS is selected. If the DNS Server Search
Order list is empty, enter the DNS address provided by your ISP in the fields beside the
Add button, then click Add.
Figure 14: DNS Tab (Win 95/98)
25
Broadband VPN Gateway User Guide
Checking TCP/IP Settings - Windows NT4.0
1. Select Control Panel - Network, and, on the Protocols tab, select the TCP/IP protocol, as
shown below.
Figure 15: Windows NT4.0 - TCP/IP
2. Click the Properties button to see a screen like the one below.
Figure 16: Windows NT4.0 - IP Address
3. Select the network card for your LAN.
26
PC Configuration
4. Select the appropriate radio button - Obtain an IP address from a DHCP Server or Specify
an IP Address, as explained below.
Obtain an IP address from a DHCP Server
This is the default Windows setting. Using this is recommended. By default, the Dual WAN
Broadband VPN Router will act as a DHCP Server.
Restart your PC to ensure it obtains an IP Address from the Dual WAN Broadband VPN
Router.
Specify an IP Address
If your PC is already configured, check with your network administrator before making the
following changes.
1. The Default Gateway must be set to the IP address of the Dual WAN Broadband VPN
Router. To set this:
• Click the Advanced button on the screen above.
• On the following screen, click the Add button in the Gateways panel, and enter the
Dual WAN Broadband VPN Router's IP address, as shown in Figure 17 below.
• If necessary, use the Up button to make the Dual WAN Broadband VPN Router the
first entry in the Gateways list.
Figure 17 - Windows NT4.0 - Add Gateway
2. The DNS should be set to the address provided by your ISP, as follows:
• Click the DNS tab.
• On the DNS screen, shown below, click the Add button (under DNS Service Search
Order), and enter the DNS provided by your ISP.
27
Loading...