Levelone FBR-1430 User Manual

LevelOne
FBR-1430
VPN Broadband Router, 1W 4L
User Manual
V1.0.0-0702
CHAPTER 1 INTRODUCTION ...................................................................................................................................................... 1
VPN BROADBAND ROUTER FEATURES............................................................................................................................................ 1
Internet Access Features............................................................................................................................................................. 1
Advanced Internet Functions ...................................................................................................................................................... 1
LAN Features .............................................................................................................................................................................. 2
Configuration & Management.................................................................................................................................................... 2
Security Features......................................................................................................................................................................... 2
IPSec VPN Gateway Features..................................................................................................................................................... 2
Microsoft VPN Gateway Support................................................................................................................................................2
PACKAGE CONTENTS ....................................................................................................................................................................... 3
PHYSICAL DETAILS .......................................................................................................................................................................... 4
Front-mounted LEDs .................................................................................................................................................................. 4
Rear Panel................................................................................................................................................................................... 5
CHAPTER 2 INSTALLATION........................................................................................................................................................6
REQUIREMENTS................................................................................................................................................................................ 6
PROCEDURE .....................................................................................................................................................................................6
CHAPTER 3 SETUP........................................................................................................................................................................ 8
OVERVIEW ....................................................................................................................................................................................... 8
CONFIGURATION PROGRAM ............................................................................................................................................................. 9
Preparation................................................................................................................................................................................. 9
SETUP WIZARD ..............................................................................................................................................................................11
Common Connection Types....................................................................................................................................................... 11
Home Screen .............................................................................................................................................................................13
LAN SCREEN ................................................................................................................................................................................. 14
DHCP........................................................................................................................................................................................15
PASSWORD.....................................................................................................................................................................................15
CHAPTER 4 PC CONFIGURATION........................................................................................................................................... 17
OVERVIEW ..................................................................................................................................................................................... 17
WINDOWS CLIENTS........................................................................................................................................................................17
TCP/IP Settings - Overview ...................................................................................................................................................... 17
Checking TCP/IP Settings - Windows 9x/ME:.......................................................................................................................... 18
Checking TCP/IP Settings - Windows 2000:............................................................................................................................. 20
Checking TCP/IP Settings - Windows XP................................................................................................................................. 22
Internet Access .......................................................................................................................................................................... 24
MACINTOSH CLIENTS.....................................................................................................................................................................25
LINUX CLIENTS.............................................................................................................................................................................. 25
OTHER UNIX SYSTEMS................................................................................................................................................................... 25
CHAPTER 5 OPERATION AND STATUS................................................................................................................................. 26
OPERATION .................................................................................................................................................................................... 26
STATUS SCREEN.............................................................................................................................................................................26
CONNECTION STATUS - PPPOE...................................................................................................................................................... 27
CONNECTION STATUS - PPTP ........................................................................................................................................................ 30
CONNECTION STATUS - TELSTRA BIG POND .................................................................................................................................. 31
CONNECTION DETAILS - SINGTEL RAS ......................................................................................................................................... 32
CONNECTION DETAILS - FIXED/DYNAMIC IP ADDRESS ................................................................................................................. 34
CHAPTER 6 INTERNET FEATURES......................................................................................................................................... 36
OVERVIEW ..................................................................................................................................................................................... 36
WAN PORT CONFIGURATION ........................................................................................................................................................ 37
ADVANCED SETUP ......................................................................................................................................................................... 39
Communication Applications....................................................................................................................................................40
Special Applications.................................................................................................................................................................. 40
Multi-DMZ ................................................................................................................................................................................ 41
URL Filter................................................................................................................................................................................. 42
URL Filter Screen .....................................................................................................................................................................42
DYNAMIC DNS (DOMAIN NAME SERVER)..................................................................................................................................... 43
Dynamic DNS Screen................................................................................................................................................................43
VIRTUAL SERVERS......................................................................................................................................................................... 45
IP Address seen by Internet Users ............................................................................................................................................45
Virtual Servers Screen............................................................................................................................................................... 45
Defining your own Virtual Servers............................................................................................................................................ 46
Connecting to the Virtual Servers............................................................................................................................................. 46
OPTIONS......................................................................................................................................................................................... 47
CHAPTER 7 SECURITY CONFIGURATION............................................................................................................................ 48
OVERVIEW ..................................................................................................................................................................................... 48
ACCESS CONTROL..........................................................................................................................................................................49
Access Control Screen............................................................................................................................................................... 49
Group Members Screen............................................................................................................................................................. 51
Access Control Log ................................................................................................................................................................... 51
FIREWALL RULES...........................................................................................................................................................................52
Firewall Rules Screen ............................................................................................................................................................... 52
Define Firewall Rule................................................................................................................................................................. 54
LOGS..............................................................................................................................................................................................56
E-MAIL...........................................................................................................................................................................................58
SECURITY OPTIONS........................................................................................................................................................................ 60
SCHEDULING.................................................................................................................................................................................. 62
Define Schedule Screen.............................................................................................................................................................62
SERVICES ....................................................................................................................................................................................... 63
CHAPTER 8 VPN (IPSEC)........................................................................................................................................................... 64
OVERVIEW ..................................................................................................................................................................................... 64
IPSec ......................................................................................................................................................................................... 64
IKE ............................................................................................................................................................................................ 64
Policies......................................................................................................................................................................................64
VPN Configuration.................................................................................................................................................................... 65
COMMON VPN SITUATIONS...........................................................................................................................................................65
VPN Pass-through..................................................................................................................................................................... 65
Client PC to VPN Gateway....................................................................................................................................................... 66
Connecting 2 LANs via VPN..................................................................................................................................................... 66
VPN CONFIGURATION ...................................................................................................................................................................67
VPN Policies Screen.................................................................................................................................................................. 67
Adding a New Policy.................................................................................................................................................................68
VPN EXAMPLES............................................................................................................................................................................. 77
Example 1: Connecting 2 VPN Broadband Routers................................................................................................................. 77
Example 2: Windows 2000/XP Client to LAN.......................................................................................................................... 79
Example 3: Windows 2000 Server to VPN Gateway................................................................................................................. 92
CERTIFICATES ................................................................................................................................................................................ 95
Trusted Certificates................................................................................................................................................................... 95
Requesting a Trusted Certificate............................................................................................................................................... 95
Self Certificates ......................................................................................................................................................................... 96
Requesting a Self Certificate ..................................................................................................................................................... 97
CRLS ............................................................................................................................................................................................. 99
STATUS ........................................................................................................................................................................................ 100
CHAPTER 9 MICROSOFT VPN................................................................................................................................................102
OVERVIEW ................................................................................................................................................................................... 102
SERVER SETUP ............................................................................................................................................................................. 102
CLIENT DATABASE....................................................................................................................................................................... 103
STATUS SCREEN...........................................................................................................................................................................105
WINDOWS CLIENT SETUP............................................................................................................................................................. 106
Windows 98/ME...................................................................................................................................................................... 106
Windows 2000......................................................................................................................................................................... 108
Windows XP............................................................................................................................................................................ 111
CHAPTER 10 OTHER FEATURES & SETTINGS .................................................................................................................114
ii
OVERVIEW ................................................................................................................................................................................... 114
CONFIG FILE ................................................................................................................................................................................ 115
NETWORK DIAGNOSTICS.............................................................................................................................................................. 116
PC DATABASE.............................................................................................................................................................................. 117
PC Database Screen................................................................................................................................................................ 117
PC Database (Admin) ............................................................................................................................................................. 119
REMOTE ADMINISTRATION ..........................................................................................................................................................121
ROUTING...................................................................................................................................................................................... 123
Overview ................................................................................................................................................................................. 123
Routing Screen........................................................................................................................................................................ 123
Configuring Other Routers on your LAN................................................................................................................................ 125
Static Routing - Example......................................................................................................................................................... 126
UPGRADE FIRMWARE................................................................................................................................................................... 128
UPNP........................................................................................................................................................................................... 129
APPENDIX A TROUBLESHOOTING....................................................................................................................................... 130
OVERVIEW ................................................................................................................................................................................... 130
GENERAL PROBLEMS ...................................................................................................................................................................130
INTERNET ACCESS........................................................................................................................................................................ 130
APPENDIX B SPECIFICATIONS.............................................................................................................................................. 132
VPN BROADBAND ROUTER ......................................................................................................................................................... 132
FCC STATEMENT ......................................................................................................................................................................... 132
FCC Radiation Exposure Statement........................................................................................................................................132
CE MARKING WARNING .............................................................................................................................................................. 133
iii
Chapter 1
Introduction
Introduction
This Chapter provides an overview of the VPN Broadband Router's features and capabilities.
Congratulations on the purchase of your new VPN Broadband Router. The VPN Broadband Router is a multi-function device providing the following services:
Shared Broadband Internet Access for all LAN users.
VPN Gateway for IPSec, PPTP VPN connections to remote PCs or sites.
4-Port Switching Hub for 10BaseT or 100BaseT connections.
Figure 1: VPN Broadband Router
1

VPN Broadband Router Features

The VPN Broadband Router incorporates many advanced features, carefully designed to provide sophisticated func­tions while being easy to use.

Internet Access Features

Shared Internet Access. All users on the LAN can access the Internet through the VPN Broadband Router,
using only a single external IP Address. The local (invalid) IP Addresses are hidden from external sources. This process is called NAT (Network Address Translation).
DSL & Cable Modem Support. The VPN Broadband Router has a 100BaseT Ethernet port for connecting a
DSL or Cable Modem. All popular DSL and Cable Modems are supported. SingTel RAS and Big Pond (Australia) login support is also included.
PPPoE, PPTP, SingTel RAS and Telstra Big Pond Support. The Internet (WAN port) connection sup-
ports PPPoE (PPP over Ethernet), PPTP (Peer-to-Peer Tunneling Protocol), SingTel RAS and Telstra Big Pond (Australia), as well as "Direct Connection" type services.
Fixed or Dynamic IP Address. On the Internet (WAN port) connection, the VPN Broadband Router supports
both Dynamic IP Address (IP Address is allocated on connection) and Fixed IP Address.

Advanced Internet Functions

Communication Applications. Support for Internet communication applications, such as interactive Games, Telephony, and Conferencing applications, which are often difficult to use when behind a Firewall, is included.
Special Internet Applications. Applications which use non-standard connections or port numbers are nor-
mally blocked by the Firewall. The ability to define and allow such applications is provided, to enable such applications to be used normally.
Virtual Servers. This feature allows Internet users to access Internet servers on your LAN. The required setup
is quick and easy.
1
VPN Broadband Router User Manual
Multi-DMZ. For each WAN (Internet) IP address allocated to you, one (1) PC on your local LAN can be config-
ured to allow unrestricted 2-way communication with Servers or individual users on the Internet. This provides the ability to run programs which are incompatible with Firewalls.
URL Filter. Use the URL Filter to block access to undesirable Web sites by LAN users.
Internet Access Log. See which Internet connections have been made.
VPN Pass through Support. PCs with VPN (Virtual Private Networking) software using PPTP, L2TP and
IPSec are transparently supported - no configuration is required.

LAN Features

4-Port Switching Hub. The VPN Broadband Router incorporates a 4-port 10/100BaseT switching hub, making it easy to create or extend your LAN.
DHCP Server Support. Dynamic Host Configuration Protocol provides a dynamic IP address to PCs and other
devices upon request. The VPN Broadband Router can act as a DHCP Server for devices on your local LAN and WLAN.
Multi Segment LAN Support. LANs containing one or more segments are supported; via the VPN Broadband
Router's RIP (Routing Information Protocol) support and built-in static routing table.

Configuration & Management

Easy Setup. Use your WEB browser from anywhere on the LAN or WLAN for configuration.
Remote Management. The VPN Broadband Router can be managed from any PC on your LAN. And, if the
Internet connection exists, it can also (optionally) be configured via the Internet.
UPnP Support. UPnP (Universal Plug and Play) allows automatic discovery and configuration of the VPN
Broadband Router. UPnP is by supported by Windows ME, XP, or later.
Configuration File Backup & Restore. You can backup (download) the VPN Broadband Router's configura-
tion file to your PC, and restore (upload) a previously-saved configuration file to the VPN Broadband Router.

Security Features

Password - protected Configuration. Optional password protection is provided to prevent unauthorized users from modifying the configuration data and settings.
NAT Protection. An intrinsic side effect of NAT (Network Address Translation) technology is that by allowing all
LAN users to share a single IP address, the location and even the existence of each PC is hidden. From the ex­ternal viewpoint, there is no network, only a single device - the VPN Broadband Router.
Stateful Inspection Firewall. All incoming data packets are monitored and all incoming server requests are
filtered, thus protecting your network from malicious attacks from external sources.
Protection against DoS attacks. DoS (Denial of Service) attacks can flood your Internet connection with
invalid packets and connection requests, using so much bandwidth and so many resources that Internet access becomes unavailable. The VPN Broadband Router incorporates protection against DoS attacks.
Rule-based Policy Firewall. To provide additional protection against malicious packets, you can define your
own firewall rules. This can also be used to control the Internet services available to LAN users.

IPSec VPN Gateway Features

IPSec. Support for IPSec standards, including IKE and certificates.
10 Tunnels. Up to 10 VPN tunnels can be created.
High performance. High performance encryption engine maintains high throughput even when using 3DES.

Microsoft VPN Gateway Support

PPTP Server. The VPN Broadband Router emulates a Microsoft PPTP VPN Server, allowing clients to use the Microsoft VPN client provided in Windows.
Windows Client Support. Remote users can use the Microsoft VPN client (VPN Adapter) provided in recent
versions of Windows.
Easy Setup. For both the Administrator and remote users, the Microsoft VPN is much easier to configure than
IPSec VPN.
2

Package Contents

The following items should be included:
FBR-1430
Power Adapter
Quick Installation Guide
CD Manual
If any of the above items are damaged or missing, please contact your dealer immediately.
Introduction
3
VPN Broadband Router User Manual

Physical Details

Front-mounted LEDs

Power On - Power on.
Status (Red) On - Error condition.
Figure 2: Front Panel
Off - No power.
Off - Normal operation. Blinking - This LED blinks during start up.
LAN
WAN On - Connection to the modem attached to the WAN (Internet) port
Each port has 2 LEDs
Link/Act
On - Corresponding LAN (hub) port is active.
Off - No active connection on the corresponding LAN (hub)
port.
Flashing - Data is being transmitted or received via the corresponding LAN (hub) port.
100
On - Corresponding LAN (hub) port is using 100BaseT.
Off - Corresponding LAN (hub) port connection is using
10BaseT, or no active connection.
is established.
Off - No connection to a modem on the WAN (Internet) port. Flashing - Data is being transmitted or received via the WAN port.
4

Rear Panel

Introduction
Figure 3: Rear Panel
Reset Button
WAN port (10/100BaseT)
10/100BaseT LAN connec­tions
This button has two (2) functions:
Reboot. When pressed and released, the VPN Broad- band Router will reboot (restart).
Clear All Data. This button can also be used to clear ALL data and restore ALL settings to the factory default values.
To Clear All Data and restore the factory default values:
1. Power Off.
2. Hold the Reset Button down while you Power On.
3. Keep holding the Reset Button for a few seconds, until the RED LED has flashed TWICE.
4. Release the Reset Button. The VPN Broadband Router is now using the factory default values.
Connect the DSL or Cable Modem here. If your modem came with a cable, use the supplied cable. Otherwise, use a stan­dard LAN cable.
Use standard LAN cables (RJ45 connectors) to connect your PCs to these ports.
Note:
Any LAN port on the VPN Broadband Router will automatically function as an "Uplink" port when required. Just connect any port to a normal port on the other hub, using a standard LAN cable.
Power port
Connect the supplied power adapter here.
5
VPN Broadband Router User Manual
Chapter 2
Installation
This Chapter covers the physical installation of the VPN Broadband Router.
2

Requirements

Network cables. Use standard 10/100BaseT network (UTP) cables with RJ45 connectors.
TCP/IP protocol must be installed on all PCs.
For Internet Access, an Internet Access account with an ISP, and a Broadband modem (usually, DSL or Cable
modem).

Procedure

Figure 4: Installation Diagram
1. Choose an Installation Site
Select a suitable place on the network to install the VPN Broadband Router. Ensure the VPN Broadband Router and the DSL/Cable modem are powered OFF.
2. Connect LAN Cables
Use standard LAN cables to connect PCs to the Switching Hub ports on the VPN Broadband Router. Both 10BaseT and 100BaseT connections can be used simultaneously.
If required, you can connect any LAN port to another Hub. Any LAN port on the VPN Broadband Router will auto- matically function as an "Uplink" port when required. Just connect any LAN port to a normal port on the other hub, using a standard LAN cable.
3. Connect WAN Cable
Connect the Broadband modem to the WAN port on the VPN Broadband Router. Use the cable supplied with your Broadband modem. If no cable was supplied, use a standard LAN cable.
4. Power Up
Power on the Broadband modem.
Connect the supplied power adapter to the VPN Broadband Router and power up.
Use only the power adapter provided. Using a different one may cause hardware damage
6
5. Check the LEDs
The Power LED should be ON.
The Status LED should blink during start up, then turn Off. If it stays on, there is a hardware error.
For each LAN (PC) connection, the LAN Link/Act LED should be ON (provided the PC is also ON.)
The WAN LED should be ON.
For more information, refer to Front-mounted LEDs in Chapter 1.
Installation
7
VPN Broadband Router User Manual
Chapter 3
Setup
This Chapter provides Setup details of the VPN Broadband Router.
3

Overview

This chapter describes the setup procedure for:
Internet Access
LAN configuration
PCs on your local LAN may also require configuration. For details, see Chapter 4 - PC Configuration. Other configuration may also be required, depending on which features and functions of the VPN Broadband Router
you wish to use. Use the table below to locate detailed instructions for the required functions.
To Do this: Refer to:
Configure PCs on your LAN. Chapter 4:
PC Configuration
Check VPN Broadband Router operation and Status. Chapter 5:
Operation and Status
Use any of the following Internet features:
WAN Port
Advanced Setup
Dynamic DNS
Virtual Servers
Options
Chapter 6: Internet Features
Change any of the following Security-related settings:
Admin Login
Access Control
Firewall Rules
Logs
E-mail
Security Options
Scheduling
Services
Use the IPSec VPN features:
VPN Policies
Certificates
CRLs
VPN Status
Use the Microsoft VPN feature:
PPTP Server in the VPN Broadband Router.
User and Client setup.
Checking VPN connection Status.
Chapter 7: Security Configuration
Chapter 8: VPN (IPSec)
Chapter 9: Microsoft VPN
8
Setup
Configure or use any of the following:
Configuration File backup and restore.
Network Diagnostic
PC Database
Remote Administration
Routing
Upgrade Firmware
UPnP
Where use of a certain feature requires that PCs or other LAN devices be configured, this is also explained in the relevant chapter.
Chapter 9: Other Features and Set­tings

Configuration Program

The VPN Broadband Router contains an HTTP server. This enables you to connect to it, and configure it, using your Web Browser. Your Browser must support JavaScript. The configuration program has been tested on the following browsers:
Netscape V4.08 or later
Internet Explorer V4 or later

Preparation

Before attempting to configure the VPN Broadband Router, please ensure that:
Your PC can establish a physical connection to the VPN Broadband Router. The PC and the VPN Broadband Router must be directly connected (using the Hub ports on the VPN Broadband Router) or on the same LAN seg­ment.
The VPN Broadband Router must be installed and powered ON.
If the VPN Broadband Router's default IP Address (192.168.0.1) is already used by another device, the other
device must be turned OFF until the VPN Broadband Router is allocated a new IP Address during configuration.
Using UPnP
If your Windows system supports UPnP, an icon for the VPN Broadband Router will appear in the system tray, notify­ing you that a new network device has been found, and offering to create a new desktop shortcut to the newly­discovered device.
Unless you intend to change the IP Address of the VPN Broadband Router, you can accept the desktop shortcut.
Whether you accept the desktop shortcut or not, you can always find UPnP devices in My Network Places (previ-
ously called Network Neighborhood).
Double - click the icon for the VPN Broadband Router (either on the Desktop, or in My Network Places) to start the configuration. Refer to the following section Setup Wizard for details of the initial configuration process.
Using your Web Browser
To establish a connection from your PC to the VPN Broadband Router:
1. After installing the VPN Broadband Router in your LAN, start your PC. If your PC is already running, restart it.
2. Start your WEB browser.
3. In the Address box, enter "HTTP://" and the IP Address of the VPN Broadband Router, as in this example, which uses the VPN Broadband Router 's default IP Address:
HTTP://192.168.0.1
9
VPN Broadband Router User Manual
If you can't connect
If the VPN Broadband Router does not respond, check the following:
The VPN Broadband Router is properly installed, LAN connection is OK, and it is powered ON. You can test the connection by using the "Ping" command:
Open the MS-DOS window or command prompt window.
Enter the command:
ping 192.168.0.1 If no response is received, either the connection is not working, or your PC's IP address is not compatible with the VPN Broadband Router s IP Address. (See next item.)
If your PC is using a fixed IP Address, its IP Address must be within the range 192.168.0.2 to 192.168.0.254 to be compatible with the VPN Broadband Router's default IP Address of 192.168.0.1. Also, the Net-
work Mask must be set to 255.255.255.0. See Chapter 4 - PC Configuration for details on checking your PC's TCP/IP settings.
Ensure that your PC and the VPN Broadband Router are on the same network segment. (If you don't have a router, this must be the case.)
4. You will be prompted for a username and password, as shown below.
Figure 5: Password Dialog
Enter admin for the User Name, and password for Password
These are the default values. Both the name and password can (and should) be changed, using the Admin Login
screen. Once you have changed either the name or the password, you must use the current values.
10

Setup Wizard

The first time you connect to the VPN Broadband Router, you should click the WAN Wizard to begin initial setup.
1. Step through the Wizard until finished.
You need to know the type of Internet connection service used by your ISP. Check the data supplied by your ISP.
The common connection types are explained in the tables below.
2. On the final screen of the Wizard, run the test and check that an Internet connection can be established.
3. If the connection test fails:
Check your data, the Cable/DSL modem, and all connections.
Check that you have entered all data correctly.
If using a Cable modem, your ISP may have recorded the MAC (physical) address of your PC. Run the Wiz-
ard, and on the Cable Modem screen, use the "Clone MAC address" button to copy the MAC address from your PC to the VPN Broadband Router.

Common Connection Types

Cable Modems
Type Details ISP Data required
Setup
DSL Modems
Dynamic IP Address
Static (Fixed) IP Address
Type Details ISP Data required
Dynamic IP Address
Static (Fixed) IP Address
Your IP Address is allo­cated automatically, when you connect to you ISP.
Your ISP allocates a per­manent IP Address to you.
Your IP Address is allo­cated automatically, when you connect to you ISP.
Your ISP allocates a per­manent IP Address to you.
Usually, none. However, some ISP's may
require you to use a particu­lar Hostname, Domain name, or MAC (physical) address.
IP Address allocated to you, mask and gateway (if pro­vided), and DNS address.
Some ISP's may also require you to use a particular Host­name, Domain name, or MAC (physical) address.
None.
IP Address allocated to you, mask and gateway (if pro­vided), and DNS address.
PPPoE You connect to the ISP only
when required. The IP address is usually allocated automatically.
PPTP Mainly used in Europe.
You connect to the ISP only when required. The IP address is usually allocated automatically, but may be Static (Fixed).
11
User name and password.
PPTP Server IP Address.
User name and pass-
word.
IP Address allocated to you, if Static (Fixed).
VPN Broadband Router User Manual
Other Modems (e.g. Broadband Wireless)
Type Details ISP Data required
Dynamic IP Address
Static (Fixed) IP Address
Your IP Address is allo­cated automatically, when you connect to you ISP.
Your ISP allocates a per­manent IP Address to you.
Big Pond Cable (Australia)
For this connection method, the following data is required:
User Name
Password
Big Pond Server IP address
SingTel RAS
For this connection method, the following data is required:
User Name
Password
RAS Plan
Usually, none. However, some ISP's may
require you to use a particu­lar Hostname, Domain name, or MAC (physical) address.
IP Address allocated to you, mask and gateway (if pro­vided), and DNS address.
12
Setup

Home Screen

After finishing or exiting the WAN Wizard setup, you will see the Home screen. When you connect in future, you will see this screen when you connect. An example screen is shown below.
Figure 6: Home Screen
Navigation & Data Input
Use the menu bar on the top of the screen, and the "Back" button on your Browser, for navigation.
Changing to another screen without clicking "Save" does NOT save any changes you may have made. You must
"Save" before changing screens or your data will be ignored.
On each screen, clicking the "Help" button will display help for that screen.
From any help screen, you can access the list of all help files (help index).
13
VPN Broadband Router User Manual

LAN Screen

Use the LAN link on the main menu to reach the LAN screen an example screen is shown below.
Figure 7: LAN Screen

Data - LAN Screen

TCP/IP IP Address
Subnet Mask
DHCP Server
IP address for the VPN Broadband Router, as seen from the local LAN. Use the default value unless the address is already in use or your LAN is using a different IP address range. In the latter case, enter an unused IP Address from within the range used by your LAN.
The default value 255.255.255.0 is standard for small (class "C") networks. For other networks, use the Subnet Mask for the LAN segment to which the VPN Broadband Router is attached (the same value as the PCs on that LAN segment).
If Enabled, the VPN Broadband Router will allocate IP Addresses to PCs (DHCP clients) on your LAN when they start up. The default (and recommended) value is Enabled.
If you are already using a DHCP Server, this setting must be Disabled, and the existing DHCP server must be re­configured to treat the VPN Broadband Router as the default Gateway. See the following section for further details.
The Start IP Address and Finish IP Address fields set the values used by the DHCP server when allocating IP Ad­dresses to DHCP clients. This range also determines the number of DHCP clients supported.
See the following section for further details on using DHCP.
Buttons Save Cancel
Save the data on screen. The "Cancel" button will discard any data you have entered and
reload the file from the VPN Broadband Router.
14
Setup

DHCP

What DHCP Does
A DHCP (Dynamic Host Configuration Protocol) Server allocates a valid IP address to a DHCP Client (PC or device) upon request.
The client request is made when the client device starts up (boots).
The DHCP Server provides the Gateway and DNS addresses to the client, as well as allocating an IP Address.
The VPN Broadband Router can act as a DHCP server.
Windows 98SE/ME and other non-Server versions of Windows will act as a DHCP client. This is the default
Windows setting for the TCP/IP network protocol. However, Windows uses the term Obtain an IP Address auto­matically instead of "DHCP Client".
You must NOT have two (2) or more DHCP Servers on the same LAN segment. (If your LAN does not have other Routers, this means there must only be one (1) DHCP Server on your LAN.)
Using the VPN Broadband Router's DHCP Server
This is the default setting. The DHCP Server settings are on the LAN screen. On this screen, you can:
Enable or Disable the VPN Broadband Router's DHCP Server function.
Set the range of IP Addresses allocated to PCs by the DHCP Server function.
You can assign Fixed IP Addresses to some devices while using DHCP, provided that the Fixed IP Addresses are NOT within the range used by the DHCP Server.
Using another DHCP Server
You can only use one (1) DHCP Server per LAN segment. If you wish to use another DHCP Server, rather than the VPN Broadband Router's, the following procedure is required.
1. Disable the DHCP Server feature in the VPN Broadband Router. This setting is on the LAN screen.
2. Configure the DHCP Server to provide the VPN Broadband Router's IP Address as the Default Gateway.
To Configure your PCs to use DHCP
This is the default setting for TCP/IP under Windows 98SE/ME. See Chapter 4 - Client Configuration for the procedure to check these settings.

Password

From the menu, select Password. This screen allows you to assign a user name and password to the VPN Broadband Router.
15
VPN Broadband Router User Manual
Figure 8: Password Screen
1. The default login name is "admin". Change this to the desired value.
2. The default password is “password”. Enter the desired password in the New Password and Verify Password fields.
3. Save your changes.
You will see a login prompt when you connect to the VPN Broadband Router, as shown below.
Figure 9: Password Dialog
Enter the "User Name" and "Password" you set on the Admin Login screen above.
16
Chapter 4
PC Configuration
PC Configuration
This Chapter details the PC Configuration required on the local ("Internal") LAN.
4

Overview

For each PC, the following may need to be configured:
TCP/IP network settings
Internet Access configuration

Windows Clients

This section describes how to configure Windows clients for Internet access via the VPN Broadband Router. The first step is to check the PC's TCP/IP settings. The VPN Broadband Router uses the TCP/IP network protocol for all functions, so it is essential that the TCP/IP
protocol be installed and configured on each PC.

TCP/IP Settings - Overview

If using the default VPN Broadband Router settings and the default Windows TCP/IP settings, no changes need to be made.
By default, the VPN Broadband Router will act as a DHCP Server, automatically providing a suitable IP Address (and related information) to each PC when the PC boots.
For all non-Server versions of Windows, the default TCP/IP setting is to act as a DHCP client.
If using a Fixed (specified) IP address, the following changes are required:
The Gateway must be set to the IP address of the VPN Broadband Router
The DNS should be set to the address provided by your ISP.
If your LAN has a Router, the LAN Administrator must re­configure the Router itself. Refer to Chapter 8 - Other Features and Operations for details.
17
VPN Broadband Router User Manual

Checking TCP/IP Settings - Windows 9x/ME:

1. Select Control Panel - Network. You should see a screen like the following:
Figure 10: Network Configuration
2. Select the TCP/IP protocol for your network card.
3. Click on the Properties button. You should then see a screen like the following.
Figure 11: IP Address (Win 95)
Ensure your TCP/IP settings are correct, as follows:
Using DHCP
To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. Using this is recommended. By default, the VPN Broadband Router will act as a DHCP Server.
Restart your PC to ensure it obtains an IP Address from the VPN Broadband Router.
Using "Specify an IP Address"
If your PC is already configured, check with your network administrator before making the following changes:
On the Gateway tab, enter the VPN Broadband Router's IP address in the New Gateway field and click Add, as shown below. Your LAN administrator can advise you of the IP Address they assigned to the VPN Broadband Router.
18
PC Configuration
Figure 12: Gateway Tab (Win 95/98)
On the DNS Configuration tab, ensure Enable DNS is selected. If the DNS Server Search Order list is empty, enter the DNS address provided by your ISP in the fields beside the Add button, then click Add.
Figure 13: DNS Tab (Win 95/98)
19
VPN Broadband Router User Manual

Checking TCP/IP Settings - Windows 2000:

1. Select Control Panel - Network and Dial-up Connection.
2. Right - click the Local Area Connection icon and select Properties. You should see a screen like the following:
Figure 14: Network Configuration (Win 2000)
3. Select the TCP/IP protocol for your network card.
4. Click on the Properties button. You should then see a screen like the following.
Figure 15: TCP/IP Properties (Win 2000)
5. Ensure your TCP/IP settings are correct, as described below.
Using DHCP
To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. Using this is recommended. By default, the VPN Broadband Router will act as a DHCP Server.
Restart your PC to ensure it obtains an IP Address from the VPN Broadband Router.
20
PC Configuration
Using a fixed IP Address ("Use the following IP Address")
If your PC is already configured, check with your network administrator before making the following changes.
Enter the VPN Broadband Router 's IP address in the Default gateway field and click OK. (Your LAN administrator can advise you of the IP Address they assigned to the VPN Broadband Router.)
If the DNS Server fields are empty, select Use the following DNS server addresses, and enter the DNS address or addresses provided by your ISP, then click OK.
21
VPN Broadband Router User Manual

Checking TCP/IP Settings - Windows XP

1. Select Control Panel - Network Connection.
2. Right click the Local Area Connection and choose Properties. You should see a screen like the following:
Figure 16: Network Configuration (Windows XP)
3. Select the TCP/IP protocol for your network card.
4. Click on the Properties button. You should then see a screen like the following.
Figure 17: TCP/IP Properties (Windows XP)
5. Ensure your TCP/IP settings are correct.
22
PC Configuration
Using DHCP
To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. Using this is recommended. By default, the VPN Broadband Router will act as a DHCP Server.
Restart your PC to ensure it obtains an IP Address from the VPN Broadband Router.
Using a fixed IP Address ("Use the following IP Address")
If your PC is already configured, check with your network administrator before making the following changes.
In the Default gateway field, enter the VPN Broadband Router 's IP address and click OK. Your LAN administrator can advise you of the IP Address they assigned to the VPN Broadband Router.
If the DNS Server fields are empty, select Use the following DNS server addresses, and enter the DNS address or addresses provided by your ISP, then click OK.
23
VPN Broadband Router User Manual

Internet Access

To configure your PCs to use the VPN Broadband Router for Internet access:
Ensure that the DSL modem, Cable modem, or other permanent connection is functional.
Use the following procedure to configure your Browser to access the Internet via the LAN, rather than by a Dial-up
connection.
For Windows 9x/ME/2000
1. Select Start Menu - Settings - Control Panel - Internet Options.
2. Select the Connection tab, and click the Setup button.
3. Select "I want to set up my Internet connection manually, or I want to connect through a local area network (LAN)" and click Next.
4. Select "I connect through a local area network (LAN)" and click Next.
5. Ensure all of the boxes on the following Local area network Internet Configuration screen are unchecked.
6. Check the "No" option when prompted "Do you want to set up an Internet mail account now?".
7. Click Finish to close the Internet Connection Wizard. Setup is now completed.
For Windows XP
1. Select Start Menu - Control Panel - Network and Internet Connections.
2. Select Set up or change your Internet Connection.
3. Select the Connection tab, and click the Setup button.
4. Cancel the pop-up "Location Information" screen.
5. Click Next on the "New Connection Wizard" screen.
6. Select "Connect to the Internet" and click Next.
7. Select "Set up my connection manually" and click Next.
8. Check "Connect using a broadband connection that is always on" and click Next.
9. Click Finish to close the New Connection Wizard. Setup is now completed.
Accessing AOL
To access AOL (America On Line) through the VPN Broadband Router, the AOL for Windows software must be configured to use TCP/IP network access, rather than a dial-up connection. The configuration process is as follows:
Start the AOL for Windows communication software. Ensure that it is Version 2.5, 3.0 or later. This procedure will not work with earlier versions.
Click the Setup button.
Select Create Location, and change the location name from "New Locality" to "VPN Broadband Router ".
Click Edit Location. Select TCP/IP for the Network field. (Leave the Phone Number blank.)
Click Save, then OK.
Configuration is now complete.
Before clicking "Sign On", always ensure that you are using the "VPN Broadband Router " location.
24
PC Configuration

Macintosh Clients

From your Macintosh, you can access the Internet via the VPN Broadband Router. The procedure is as follows.
1. Open the TCP/IP Control Panel.
2. Select Ethernet from the Connect via pop-up menu.
3. Select Using DHCP Server from the Configure pop-up menu. The DHCP Client ID field can be left blank.
4. Close the TCP/IP panel, saving your settings.
Note:
If using manually assigned IP addresses instead of DHCP, the required changes are:
Set the Router Address field to the VPN Broadband Router 's IP Address.
Ensure your DNS settings are correct.

Linux Clients

To access the Internet via the VPN Broadband Router, it is only necessary to set the VPN Broadband Router as the "Gateway".
Ensure you are logged in as "root" before attempting any changes.
Fixed IP Address
By default, most Unix installations use a fixed IP Address. If you wish to continue using a fixed IP Address, make the following changes to your configuration.
Set your "Default Gateway" to the IP Address of the VPN Broadband Router.
Ensure your DNS (Name server) settings are correct.
To act as a DHCP Client (recommended)
The procedure below may vary according to your version of Linux and X -windows shell.
1. Start your X Windows client.
2. Select Control Panel - Network
3. Select the "Interface" entry for your Network card. Normally, this will be called "eth0".
4. Click the Edit button, set the "protocol" to "DHCP", and save this data.
5. To apply your changes
Use the "Deactivate" and "Activate" buttons, if available.
OR, restart your system.

Other Unix Systems

To access the Internet via the VPN Broadband Router:
Ensure the "Gateway" field for your network card is set to the IP Address of the VPN Broadband Router.
Ensure your DNS (Name Server) settings are correct.
25
Loading...
+ 108 hidden pages