Toshiba MAGNIA SG20 User Manual

English..........................................1

Dansk.............................. ...........21

Svenska ........... ...........................41

Norsk.................... ......................61

Suomi................................... ......81

P olski........................................104

Ελληνικά

............................. .........126

VPN Configuration and Usage for the Toshiba

Magnia

This guide contains an introduction to the Vir tual Private Network (VPN), how to use the VPN, how the VPN interacts with Magnia SG20 features, and contact information for Toshiba technical assistance.

SG20 Server

VPN enables you to create a secure connection through the Internet to the private network created by the Magnia SG20 Server. The VPN offers access to Magnia SG20 features when you:

❖

Work at ho me. VPN enab le s you to use y ou r hom e Internet connection to access the company server files, print, email, client shares, and other Magnia SG20 features.

❖

Are on the road. You can access your company’s local network and server.

❖

Are a remote user . W orkers in remote loca tions can access inf ormation and prog rams

on your company’s local network.

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Part 1 - Configuring the VPN Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Part 2 - Configuring a Client Computer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Part 3 - Connecting to the VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Appendix A - Manually Configuring a Client running Windows 95/98/Me . . . . . . . . . . 10

Appendix B - Manually Configuring a Client running Windows NT . . . . . . . . . . . . . . . 14

Appendix C - Manually Configuring a Client running Windows 2000 . . . . . . . . . . . . . 17

Appendix D - Interactions with Other Magnia SG20 Server Features . . . . . . . . . . . . . 19

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Disclaimer

The information contained in this manual, including but not limited to any instructions, descriptions and product specifications, is subject to change without notice.

TOSHIBA CORPORAT ION PROVIDES NO WARRANTY WITH REGARD TO THIS MANUAL OR ANY OTHER INFORMATION CONTAINED HEREIN AND HEREBY EXPRESSLY DISCLAIM ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE WITH REGARD TO ANY OF THE FOREGOING. TOSHIBA ASSUMES NO LIABILITY FOR ANY DAMAGES INCURRED DIRECTLY OR INDIRECTLY FROM ANY TECHNICAL OR TYPOGRAPHICAL ERRORS OR OMISSIONS CONTAINED HEREIN. IN NO EVENT SHALL TOSHIBA BE LIABLE FOR ANY INCIDENTAL, CONSEQUENTIAL, SPECIAL, OR EXEMPLARY DAMAGES, WHETHER BASED ON TORT, CONTRACT OR OTHERWISE, ARISING OUT OF OR IN CONNECTION WITH THIS MANUAL OR ANY OTHER INFORMATION CONTAINED HEREIN OR THE USE THEREOF.

VPN Software Informat ion

The Toshiba Magnia SG20 Server uses the Red Hat ® 7 distribution of Linux. Copies of the binary software packages or the source for these packages can be obtained from Red Hat FTP site at ftp://ftp.redhat.com. Further information about these packages can be obtained from the Red Hat Web site at http://www.redhat.com.

The software installed on the Toshiba Magnia SG20 is a modular operating system made up of hundreds of individual software compon en ts, each of which was written and copyrighted individuall y. Each component has i ts own applicable end user license agreement (“EULA”). Most of the software programs are licensed pursuant to a EULA that permits you to copy, modify, and redistribute the software in both source and binary code forms. All of the software and documentation developed or created by or for Toshiba are proprietary products of Toshiba and are protected by copyright laws, international treaty provisions, and other applicable laws.

The following EULAs are provided in accordance with their terms. The full text of the documents can be found at the Web sites that are listed here for ease of reference.

GNU General Public License

http://www.gnu.org/copyleft/gpl.html

THE SOFTWARE PROGRAMS THAT ARE INSTALLED OR ANY OTHER SOFTWARE DISTRIBUTED TO YOU AT ANY TIME IN CONNECTION WITH THE MAGNIA SG20 (COLLECTIVELY THE “SOFTWARE”), AND THIS MANUAL AND ANY OTHER DOCUMENTATION DISTRIBUTED TO YOU AT ANY TIME IN CONNECTION WITH THE MAGNIA SG20 AND ALL INFORMATION CONTAINED THEREIN (COLLECTIVELY “DOCUMENTATION”) ARE PROVIDED BY TOSHIBA “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, NONINFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE SOFTWARE, AND AS TO THE ACCURACY AND COMPLETENESS OF THE DOCUMENTATION, IS WITH YOU. IN NO EVENT WILL TOSHIBA BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION WITH THE DOCUMENTATION OR ANY INFORMATION CONTAINED THEREIN OR THE USE THEREOF, OR ARISING OUT OF THE USE OR INABILITY TO USE THE SOFTWARE (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE SOFTWARE TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF TOSHIBA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Magnia is a trademark of Toshiba Corporation. Ethernet is a registered trademark of Xerox, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Red Hat is a registered trademark of Red Hat, Inc. Other product names and trademarks belong to the individual companies concerned.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Introduction

The VPN software on the Toshiba Magnia SG 20 enables you to access your local area network (LAN) through the In ternet. This m ea ns th at in a ddi tio n to the dial-in capabilities of the Magnia SG20, network access is available any place a client computer has an Internet connection.

While the VPN connections utilize Internet access, they are designed to be secure. The VPN software uses P oin t-to-point Tunneling Protocol (PP TP) and Remote Access Server (RAS) protocols. These are standard Windows-based security features that enable information transmitted using the VPN to remain secure.

❖

Communications over the VPN connection are encrypted and validated to prevent

unauthorized access or tampering with data.

❖

PPTP is available and easily configurable on all Windows operating systems,

including Windows 95, Windows 98, Windows Me, Windows NT, Windows 2000, and

Windows XP. Macintosh operating systems are not supported at this time.

❖

The VPN is compatible with the firewall application. Your firewall remains active while

VPN is enabled, keeping your server and LAN safe. The VPN is engineered for reliability, ease-of-use, and total compatibility with the Magnia

SG20. Through tight int erfa ce and netw orking integ ration, the VPN provide s easy access to all of the features of the Magnia SG20 server, as well as access to all systems on the local network. Since the VPN connection enables access inside the firewall, remote users appear to be connected to the server's LAN as if they were locally connected. Because remote users can fully access the system using VPN, the firewall is active to maintain your local network security.

WARNING: In order to connect to the VPN, client systems must be running a Windows operating system.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Part 1 - Configuring the VPN Software

Setting Up VPN

During configuration, user accounts must be given access to the VPN. Then, a client setup diskette must be created to use when setting up VPN access on client computers.

Enabling the VPN Feature

Go to the Administrative Web site.

Select the Network tab and click on the VP N menu item.

Check the Enable VPN check box and click

Click on the Enable/Disable User’s hyperlink to enable specific users accounts to

access this feature.

TECHNICAL NOTE: VPN access can be enabled or disabled by the system administrator at any time without losing other VPN configuration settings.

Apply

to turn on the VPN feature.

User Access

Users do not automatically hav e access to VPN. Each user m ust be given permission. To enable VPN access for individual users follow these steps:

Go to the Administrative Web site.

Open the main VPN page and select the Enable/Disable Users hyperlink.

On the displa y ed screen , check the bo x es ne xt to the user s to which y ou ar e gran ting

VPN access. You may change these settings at any time. Click

Apply

The screen used to generate a client setup diskette displays.

Generating a Client Setup Diskette

Once your Magnia SG20 is set up to accept VPN connections from specified users, you need to configure the client computers, such as laptops or remote desktops, to access the server. The client configurat ion pro gr am must be dow nloaded from the Mag nia SG20 to a diskette.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

To create a VPN Setup Diskette:

Go to the Administrative Web site.

Open the main VPN page and select the

A page describing the client setup procedure displays. Follow the instruction on the page to create a diskette.

TECHNICAL NOTE: Additional Client Setup Diskettes can be created later. See

Generating Additional Client Setup Diskettes on page 5 for more information.

Using VPN

When a client computer is connected to the Magnia SG20 using VPN, the client is capable of accessing virtually all of the same features as a computer that is connected directly to the LAN. The following actions are available for all clients us ing VPN:

❖

File sharing - access personal and shared directories

❖

Printing - print to the shared printer

❖

Email - retr ieve and send email messages

❖

Intranet - access the built-in Intranet Web site and shared areas on local client

computers

Generate Client Setup Diskette

hyperlink.

❖

System administration - the system administr ator can acce ss the Admini stratio n W e b

site and manage the network from a remote site.

Generating Additional Client Setup Diskettes

Clients, such as laptops or remote desktops, must be configured to have access to the server using VPN. If you want to make additional Client Setup Diskettes:

Go to the Magnia SG20 Administration Web site.

Select the Network tab, then click

Click the

Click

You will be asked where to place the downloaded program. Select any location.

VPN Administration Generate Client Setup Diskette Generate Client Setup DIskette

option.

VPN

. .

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

TECHNICAL NOTE: The downloaded program is most commonly placed on a diskette so that it may be used directly on a client. The downloaded program may be placed on your hard drive for later use or it can be emailed as an attachment.

W ARNING: A downloaded program used to configure a client computer will contain the server’s current IP address. If your server’s IP address changes, or the server uses DHCP, the program used to create a Client Setup Diskette must be downloaded again so it contains the correct IP address. Any clients previously configured must be reconfigured with the new IP address.

Part 2 - Configuring a Client Computer

External computers that conne ct to the Magnia SG20 serve r thr o ugh th e V PN a re cal led "client" compu ters. Each client computer must be config ured to connect with the server.

In all Microsoft® Windows operating systems, Virtual Private Networking is implemented as a fe atu re of Dial-U p N etwo rking. In orde r to co nfig ure your computer for VPN, Dial-Up Networking mu st be inst alled on y ou r co mpute r even if you have n o in tenti on o f usi ng t he modem to dial an ISP.

In addition to Dial-Up Networking, you must have at least one working network adapter installed. This adapter can be a Dial-Up, Ethernet, or any networking adapter that has a connection to the Internet. It is not requi red that y our client compu ter be connected to the Internet for configuration. It is however, required that your client computer be connected to the Internet to actually use VPN.

TECHNICAL NOTE: The process of setting up a client for VPN takes approximately 5 minutes, and includes one restart of your computer.

Configuration Requirements

To communicat e v ia VPN wi th a M i cro soft Windows client o ver the Internet, your Magnia SG20 must have:

❖

Enabled VPN support

❖

At least one user account with VPN enabled for the client to use when connecting

❖

A static public IP address.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

WARNING: If your server’s IP address or workgroup changes, the program used to create a Client Setup Diskette must be downloaded again so it contains the correct IP address. If you are using a client se tup diskette that was conf igur ed on a Magni a SG20 using a DHCP IP address, a warning message will display during setup. At that point, you can selec t to reconfigure your server or continue with c onfiguration.

To communicate via VPN with a Microsoft Windows client over the Internet, the client computer must be:

❖

Running Windows 95/98/Me/NT/2000/XP operating system (Macintosh operating systems are not supported at this time)

❖

Connected to the Internet via a broadband or dial-up connection

❖

A computer that is not directly connected to the Magnia SG20 server.

TECHNICAL NOTE: Installing on a client system running Window 95 may require you install the Dial Up Networking 1.3 Performance and Security Update. To verify whether this upgrade is needed, see Verifying that the upgrade is needed on page

10.

Running the Client Configuration Diskette

TECHNICAL NOTE: The VPN Client Setup Wizard is designed to properly configure your client systems, and should be used under normal circumstances. If this is not possible, instr uctions on how to manually setup a client system are provided in Appendices A, B, and C. Please refer to the Appendix section which corresponds to your operating system.

Insert the client configuration diskette into the client computer.

Double-click the setup executable called SG20VPNS etup.exe (this is the program

downloaded when

Generate VPN Disk

was selected).

The Client Setup Wizard opens.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Click

The setup wizard examines your system for the proper settings and Internet connection.

When your settings are verified, the V PN Client Setup program installs and configures PPTP and RAS.

TECHNICAL NOTE: If y ou are running a client configuration diskette on a Windows NT system, additional dialog boxes not shown in this section may appear. These dialog boxes are not part of the VPN setup process. You will be unable to select them with your mouse. You can close the extra dialog boxes by simply pressing the

Enter

TECHNICAL NOTE: VPN setup may request that you insert your Windows CD so that PPTP and RAS can b e instal led an d config ured. S ee Introduction on page 3 for info rmation about thes e tech no lo gi es.

key.

to begin.

After PPTP and RAS configuration are complete, the wizard will prompt you to restart the computer.

Remove the diskette before restarting.

Click

TECHNICAL NOTE: If complete and the VPN setup wizard will resume after your next restart.

Restart Now

restart automatically.

After restarting, the VPN setup program runs again to complete the final configuration.

When configuration is complete, the client computer is ready to use the VPN.

to restart the computer. If no selection is made, the computer will

Restart Later

is selected, the VPN setup will not be

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Part 3 - Connecting to the VPN

When setup is complete, the client will have a new dial-up networking icon on the desktop and in the dial up networking window.

To connect to the Magnia SG20 server from the client using VPN:

Log on to the client computer using the same account information as you use with

your Magnia SG20 server.

TECHNICAL NOTE: If you are logged on under another account, or if you are not logged on, you may be prompte d for an additional log on.

Open your Web browser and log on to the Internet.

Once you are logged on to the Internet, double-click the VPN icon to establish the

VPN connectio n. A screen containing your current log on displays. Enter you r pa s sword.

Click

Connect

The VPN connection is established. Once connected, you can access the Magnia SG20 features using the same methods you use on locally connect computers.

Disconnecting VPN

Double-click the VPN connection icon found in the system tray.

Click

Disconnect

VPN is disconnected, but your computer is still connected to the Internet.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Appendix A - Manually Configuring a Client running Windows 95/98/Me

Windows 95 VPN Support Download

Windows 95 did not originally ship with an option for VPN support. The Dial-Up Networking 1.3 upgrade is available from the Microsoft Internet site.

WARNING: When connecting to a VPN server over a dial-up ISP connection the following error message may be displayed:

error 645: The Microsoft Dial-Up adapter is in use or not responding properly, disconnect other connections and try again.

This error is caused by a bug in Windows which may corrupt the Windows registry when a VPN adapter is configured manually. It may be resolved quickly by removing the VPN adapter from the client computer and running the Magnia SG20 VPN Client Setup program.

Verifying that the upgrade is needed

Open the Windows Start Menu on the Windows Taskbar.

Select

Double-click the

The Add/Remove Programs dialog box displays. Click the tab labeled

Select

Scroll to the bottom of the Components list and find the component named

Private Networking

already been installed on your computer. Skip the next section and proceed to Installing the VPN adapter. If the item is not in the list, following the steps in the next section to inst all the upgrade.

Settings>Control Panel

Add/Remove

Windows Setup

Communications

from the list labeled

. If this item exists, the Dial-Up Networking 1.3 upgrade has

to display the Windows Control Panel.

icon.

Components

Installing Dial-Up Networking Version 1.3.

Virtual

Download the file MSDUN13.EXE from the Microsoft Internet Web site.

Run the program MSDUN13.EXE following all instructions and prompts.

Restart your computer and proceed to the next section.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Installing the VPN adapter

Open the Windows Start Menu on the Windows Taskbar.

Select

Double-click the

The Add/Remove Programs dialog box displays. Click the tab labeled

Select

Click the

Select the component named

box. At this time you may be prompted for your Windows Setup Disk to provide some of

the drivers needed for Virtual Private Networking. If so, insert the Windows Setup Disk and follow any instructions and prompts to install the drivers.

Settings>Control Panel

Add/Remove Programs

Windows Setup

Communications

Details…

from the list labeled

button to display the Communications di alo g box.

Configuring Network Settings

Once you have a properly installed the VPN adapter, the only remaining network sett i ng that is required for your client computer to communicate with the Magnia SG20 using VPN is the workgroup name.

to display the Windows Control Panel.

icon.

Components

Virtual Private Networking

by clicking on the check

WARNING: Once you complete the setup of your network settings, you will be required to restart your computer. Be sure to exit all other applications before proceeding.

To configure your network settings:

Open the Windows Start Menu on the Windows Taskbar.

Select

Double-click the

The Network Properties dialog box displays. Click the

Verify that the computer name displayed is unique for your network. If it is not a

unique name, change it to one that will not be used by any other computer.

Settings>Control Panel

Network

Identification

icon.

tab.

to display the Windows Control Panel.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

In the field na m ed

letters to completely replace any text that was there before.

W ARNING: If y ou or y our Netw ork Administrator has changed the w orkgroup on the Magnia SG20 from the default “SAWORKGROUP”, you will need to type the new workgroup name.

Click OK to complete the setup.

Windows will now require you to restart your computer.

Workgroup

, type in the word

Dial-Up Networking Phone Book Entry

The Microsoft Windows implementation of Vir tual Private Networking is tied to the DialUp Networking feature of the operating system. You must configure a phone book entry to connect to your Magnia SG20 via VPN.

To create a phone book entry for the Magnia SG20 VPN.

Open the Windows Start Menu on the Windows Taskbar.

SAWORKGROUP

in all upper case

Select

TECHNICAL NOTE: If Dial-Up Networking is not in the menu, try opening

Computer

Dial-Up Networking icon.

The Dial-Up Networking window displays. Double-click the

The Make New Connection Wizard is displayed. Type in a name to ide ntify the VPN Phone Book Entry in the text box labeled

a name for the computer you are dialing

Select the device labeled

down list. Click the

The Wizard now needs the public IP Address of your Magnia SG20. The public IP address may be viewed on the LCD of your Magnia SG 20 by clicking the scroll button next to the LCD display. The public IP Address is labeled

Programs>Accessories>Communications>Dial-Up Networking

. Open the folder named Windows Control Panel and double-click the

icon.

from the

Select a device

Public Address

Make New Connection

Microsoft VPN Adapter

button.

Type in

drop-

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Type the public IP Address of your Magnia SG20 in the field labeled

IP Address

Host name or

Click the

The Wizard displays an information only page which allows you to cancel the process or complete the creatio n of the ph one book entry.

Click the

HINT: The icon for your newly created phone book entry can be dragged to the desktop of your computer as a quick and convenient shortcut.

button.

Finish

button to complete the creation of the phone book entry.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Appendix B - Manually Configuring a Client running Windows NT

Virtual Private Networking Adapter

When connecting a client comp uter running Wi ndo ws NT to the Magnia SG20, y ou m ust first install the Virtual Private Networking Adapter. During this installation, you will be required to use your Windows operating system setup disk.

To install your VPN Adapter:

Open the Windows Start Menu on the Windows Taskbar.

Select

Double-click the

The Networking dialog box displays. Click on the tab labeled

Click the

The Select Network Protocol dialog box displays. From the

Protocol

A dialog box asking the The text box should have the number 1 in it. Click the OK button and a confirmation dialog box displays.

Click the OK button to display the Remote Access Setup dialog box.

Click the

Settings>Control Panel

Networking

Protocols

button.

Add

Network Protocol

, then click the OK button.

Number of Virtual Private Networks

button to display the Add RAS Device dialog box.

Add

to display the Windows Control Panel.

icon.

list, select the item named

Point To Point Tunneling

displays.

Select the item labeled

Capable Devices

After configuration is complete, Windows NT will restart.

VPN-RASPPTPM

, then click the OK button.

in the drop-down list labe led

RAS

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Configuring Network Settings

Once you have a properly installed the VPN adapter, the only remaining network sett i ng that is required for your client computer to communicate with the Magnia SG20 using VPN is the workgroup name.

WARNING: Once you complete the setup of your network settings, you will be required to restart your computer. Be sure to exit all other applications before proceeding.

To configure your network settings:

Open the Windows Start Menu on the Windows Taskbar.

Select

Double-click the

Click the

Verify that the computer name displayed is unique for your network. If it is not a

unique name, change it to one that will not be used by any other computer. In the field na m ed

letters to completely replace any text that was there before.

W ARNING: If y ou or y our Netw ork Administrator has changed the w orkgroup on the Magnia SG20 from the default “SAWORKGROUP”, you will need to type the new workgroup name.

Click OK to complete the setup.

Windows will now require you to restart your computer.The Network Properties dialog box displays.

Settings>Control Panel

Networking

Identification

tab.

Workgroup

to display the Windows Control Panel.

icon.

, type in the word

SAWORKGROUP

in all upper case

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Dial-Up Networking Phone Book Entry

To create a phone book entry for the Magnia SG20 VPN:

On the Windows Desktop, double-click the

The My Computer window opens. Double-click the

The Dial-Up Networking dialog b ox displays. Click the

The New Phonebook Entry Wizard displays. In the te xt bo x l abele d

Magnia SG20 VPN phonebook entry, then click the When the Server page displays, check the box labeled

then click the When the Modem or Ad apter pa ge displays, select the list item labeled

(VPN1)

New

, then click the

Dial-Up Networking

button.

Name the new phonebook entry

button.

My Computer

icon.

, type a name to identify the

button.

I am calling the Internet

RASPPTPM

Public Address

Type the public IP Address of your Magnia SG20 in the field labeled

then click the

button to complete the wizard.

Phone number

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Appendix C - Manually Configuring a Client running Windows 2000

Configuring Network Settings

Once you have a properly installed the VPN adapter, the only remaining network sett i ng that is required for your client computer to communicate with the Magnia SG20 using VPN is the workgroup name.

WARNING: Once you complete the setup of your network settings, you will be required to restart your computer. Be sure to exit all other applications before proceeding.

To configure your network settings:

Open the Windows Start Menu on the Windows Taskbar.

Select

Double-click the Network and Dial-Up Connections icon.

The Network and Dial-Up Connections dialog box displays. Click the

Click the button labeled

The Identification Changes dialog box displays. In the text box labeled

case letters to completely replace any text that was there before.

W ARNING: If y ou or y our Netw ork Administrator has changed the w orkgroup on the Magnia SG20 from the default “SAWORKGROUP”, you will need to type the new workgroup name.

Click OK to close the Identification Changes dialog box.

Click OK to close the System Properties dialog box.

Settings>Control Panel

Advanced

menu, then click

Properties

Workgroup

to display the Windows Control Panel.

Network Identification

, type in the word

SAWORKGROUP

in all upper

Windows will now require you to restart your computer.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Dial-Up Networking Phone Book Entry

To create a phone book entry for the Magnia SG20 VPN:

Open the Windows Start Menu on the Windows Taskbar.

Select

The Dial-Up Networking window displays. Double-click the

When the Make New Connection Wizard displays, click the

Identify the connection type as VPN b y selectin g the

through the Internet

Type the public IP Address of your Magnia SG20 in the field labeled

IP address

Windows 2000 will need to know if you intend this connection to be used by all users or keep it for your own use.

Select the appropriate choice then click the

Settings>Dial-Up Networking

Make New Connection

option, then click the

, then click the

button.

icon.

button to begin.

Connect to a private network

button.

Public Address

Host name of

button.

In the text box provided, type a name to identify the VPN Phone Book Entry.

Click the

HINT: The icon for your newly created phone book entry can be dragged to the desktop of your computer as a quick and convenient shortcut.

Finish

button to complete the creation of the phone book entry.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Appendix D - Interactions with Other Magnia SG20 Server Features

There are limitations an d conditions f or certain Magnia SG20 server fea tures when using the following:

❖

Modem connections

❖

Firewall

❖

Backup/Restore

❖

Account Management

Modem Connections

VPN is a feature designed for use with broadband Internet connections. As a result, it is incompatibl e with con figuration s where the Magnia SG20 uses a dial-ou t ISP connect ion. If you attempt to enable VPN on a Magnia SG20 configured to use a modem-based dialout ISP, you will receive a message indicating that the VPN cannot be enabled with the current Internet connection. If you enable the VPN with a broadband Internet connection, and then decide to change the Magnia SG20 Internet configuration to use a dial-out ISP connection, the VPN will be disabled.

Firewall

The VPN feature does not require any manual changes to your firewall. When you use the VPN, your firewall remains enabled, protecting your local network and server. Enabling the VPN opens a communication port in the firewall that is used only by the VPN software. This opening is secure because the VPN software is the only system software that responds to activity transmitted through this port. The por t is automatically closed when the VPN is disabled.

Backup/Restore

The backup and restore features are fully operational when using the VPN. You can access thes e features, modify schedul es, and start manual backups from a client accessing the server thro ugh a VPN co nnection . Ho w ever, the Magnia SG20 cannot see shared drives on a client computer accessing the network through the VPN. This prevents backups from being configured on shared drives which are located on a client computer accessing the server through the VPN.

VPN Configuration and Usage for the Toshiba Magnia® SG20 Se rver

Account Management

When connecting to the Magnia SG20 using the VPN feature, it is possible to gain access to the Magnia SG20 local network using one account while retaining access rights based on another account. This happens when a user attempts to log on to the VPN using a different account than used when normally lo gging o n to Windo ws . To avoi d this confusion, always connect to the VPN using the same Windows account.

Toshiba Technical Support

❖

The latest support bulletins, software upgrades, detailed installation instructions and the latest Magnia SG20 Server information can be downloaded from your Toshiba website.

❖

For hotline support, please contact your local Toshiba representative.

VPN-konfiguration og anvendelse af Toshiba

Magnia

Denne vejled ni ng ind eh olde r en præsentation af VPN (Virtuelt privat netværk), anvendelsen af VPN, hvordan VPN fungerer med funktionerne i Magnia SG20 samt kontaktoplysninger til Toshibas tekniske assistance.

SG20-serveren

Med VPN kan du oprette en sikker forbindelse via Internettet til det private netværk, der er oprettet med Magnia SG20-serveren. VPN giver adgang til funktionerne i Magnia SG20, når du:

❖

arbejder hjemme. Med VPN kan du bruge din Internetforbindelse i hjemmet til at få adgang til firmaets server med filer, udskrivning, e-mail, klientsharepunkter og andre funktioner i Magn ia SG 20.

❖

er på vejen. Du kan få adgang til firmaets lokale netværk og server.

❖

er en fjernbruger . Med ar be jder e på fjernplaceringer kan få adgang til oplysninger og

programmer på firmaets lokale netværk.

Introduktion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Del 1 - Konfigurering af VPN-softwaren . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Del 2 - Konfigurering af en klientcomputer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Del 3 – Tilslutning til VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Appendiks A - Manuel konfigurering af en klient, der kører Windows 95/98/Me . . . . . 30

Appendiks B - Manuel konfigurering af en klient, der kører Windows NT . . . . . . . . . . 34

Appendiks C - Manuel konfigurering af en klient, der kører Windows 2000 . . . . . . . . 37

Appendiks D - Samarbejde med andre funktioner på Magnia SG20 serveren . . . . . . 39

VPN-konfiguration og anvendelse af Toshiba Magnia® SG20-serveren

Ansvarsfralæggelse

Informationen i denne håndbog, inklusive men ikke begrænset til alle anvisninger, beskrivelser og produktspecifikationer, kan ændres uden forudgående varsel.

TOSHIBA CORPORATION GIVER INGEN GARANTI MED HENSYN TIL DENNE HÅNDBOG ELLER NOGEN ANDEN INFORMATION I DENNE, OG FRALÆGGER SIG HERVED UDTRYKKELIGT NOGEN SOM HELST IMPLICEREDE GARANTIER OM SALGBARHED ELLER EGNETHED FOR NOGET SPECIELT FORMÅL MED HENSYN TIL OVENNÆVNTE. TOSHIBA PÅTAGER SIG INTET ANSVAR FOR SKADER, DER MÅTTE OPSTÅ DIREKTE ELLER INDIREKTE PÅ GRUND AF TEKNISKE ELLER TYPOGRAFISKE FEJL ELLER UDELADELSER I HÅNDBOGEN. TOSHIBA KAN UNDER INGEN OMSTÆNDIGHEDER GØRES ANSVARLIG FOR NOGEN TILFÆLDIGE SKADER, DRIFTSSKADER, SPECIELLE SKADER ELLER FØLGESKADER, HVAD ENTEN DE SKYLDES FORVOLDT SKADE, KO NTRAKT ELLER ANDET SOM FØLGE AF ELLER I FORBINDELSE MED DENNE HÅNDBOG ELLER EVENTUELLE ANDRE OPLYSNINGER HÅNDBOGEN MÅTTE INDEHOLDE, ELLER ANVENDELSEN AF HÅNDBOGEN.

VPN softwareoplysninger

Toshiba Magnia SG20 anvender Red Hat ® 7 distribution af Linux. Kopier af de binære softwarepakker eller kilden til disse pakker ka n fås på Red Hat’s FTP-sted på ftp://ftp.redhat.com. Yde rligere oplysn inger om disse pakker k an fås på Red Hat’s Web-sted på http://www.redhat.com.

Softwaren, der er installeret på Toshiba Magnia SG20, er et modulopbygget operativsystem bestående af hundredvis af individuelle softwarekomponenter, der hver især er individuelt skrevet og ophavsretligt beskyttet. Hver komponent har sin egen gældende slutbrugerlicensaftale (også benævnt “EULA”-End User License Agreement). De fleste softwareprogrammer gives i licens i overensstemmelse med en slutbrugerlicensaftale, der tillader, at du kopierer, ændrer og videredistribuerer softwaren som både kildekode og binær kode. Al software og dokumentation, der er udviklet af eller for Toshiba, er ophavsretligt beskyttede produkter tilhørende Toshiba og er under beskyttelse af lovgivningen om copyright, internationale traktatbestemmelser samt andre gældende love.

Følgende slutbrugerlicensaftaler foreligger i overensstemmelse med deres vilkår. Dokumenternes fulde tekst kan findes på følgende Web-steder, der vises her for at lette opslaget.

GNU General Public License

http://www.gnu.org/copyleft/gpl.html

SOFTWAREPROGRAMMERNE, DER ER INSTALLERET ELLER EVENTUEL ANDEN SOFTWARE, DER TIL ENHVER TID ER DISTRIBUERET TIL DIG I FORBINDELSE MED MAGNIA SG20 (SAMLET BETEGNET SOM “SOFTWAREN”), SAMT DENNE VEJLEDNING OG ANDEN DOKUMENTATION, DER TIL ENHVER TID DISTRIBUERES TIL DIG I FORBINDELSE MED MAGNIA SG20 OG ALLE OPLYSNINGER, DERI (SAMLET BETEGNET SOM “DOKUMENTATIONEN”) LEVERES AF TOSHIBA “SOM FOREFUNDET” UDEN NOGEN FORM FOR GARANTI, ERKLÆRET ELLER UNDERFORSTÅET, HERUNDER MEN IKKE BEGRÆNSET TIL UNDERFORSTÅEDE GARANTIER OM SALGBARHED, KONFLIKTFRIHED, OG EGNETHED TIL ET BESTEMT FORMÅL. HELE RISIKOEN MED HENSYN TIL SOFTWARENS KVALITET OG YDEEVNE OG DOKUMENTATIONENS NØJAGTIGHED OG FULDSTÆNDIGHED BEROR HOS DIG. TOSHIBA HÆFTER UNDER INGEN OMSTÆNDIGHEDER OVER FOR DIG FOR SKADER, HERUNDER ALLE GENERELLE, SPECIELLE, TILFÆLDIGE ELLER FØLGESKADER, DER OPSTÅR SOM FØLGE AF ELLER I FORBINDELSE MED DOKUMENTATIONEN ELLER EVENTUELLE ANDRE OPLYSNINGER, DER ER INDEHOLDT HERI, ELLER BRUGEN DERAF, ELLER SOM FØLGE AF ANVENDELSE AF ELLER MANGLENDE EVNE TIL AT ANVENDE SOFTWAREN (HERUNDER MEN IKKE BEGRÆNSET TIL TAB AF DATA ELLER DATA, DER GENGIVES UNØJA GTI GT, ELLER TAB, DER OPPEBÆRES AF DIG ELLER TREDJEPART, ELLER MANGLENDE EVNE HOS SOFTW AREN TIL AT FUNGERE MED EVENTUELLE ANDRE PROGRAMMER), HELLER IKKE HVIS TOSHIB A ER BLEVET UNDERRETTET OM RISIKOEN FOR SÅDANNE SKADER.

Magnia er et varemærke tilhørende Toshiba Corporation. Ethernet er et registreret varemærke tilhørende Xerox, Inc. Microsoft, Windows og Windows NT er registrerede varemærker tilhørende Microsoft Corporation. Red Hat er et registreret varemærke tilhørende Red Hat, Inc. Andre produktnavne og varemærker tilhører de respektive indiv idu ell e firmaer.

VPN-konfiguration og anvendelse af Toshiba Magnia® SG20-serveren

Introduktion

Med VPN softwar e på Toshiba Magnia SG20 kan du gå på lokal netværket med (LAN) via Internettet. Det betyder, at foruden de interne opkaldsfunktioner i Magnia SG20, er der netværksadgang overalt, hvor en klientcomputer har Internetadgang.

Selvom VPN-forbindelserne benytter Internetadgang, er de konstrueret som sikre. VPN softwaren anvender protokollerne PPTP (Point-to-point Tunneling Protocol) og RAS (Remote Access Server). Disse er Windows-baserede standardsikkerhedsfunktioner, hvor oplysninger kan sendes ved hjælp af VPN og sikkerheden dermed bevares.

❖

Kommunikationen over VPN-forbindelsen er krypteret og valideret for at forhindre

uautoriseret adgang, eller uvedkommende eller fjendtlige indgreb på dataene.

❖

PPTP er tilgængelig og nem at konfigurere på alle Windows operativsystemer,

herunder Windows 95, Windows 98, Win dows Me, Win dows NT, Windows 2000 og

Windows XP. Operativsystemerne i Macintosh understøttes ikke i øjeblikket.

❖

VPN er kompatibel med firewall-programmet. Firewall-programmet forbliver aktivt,

mens VPN er aktiveret, og opretholder dermed sikkerheden på server og

lokalnetværk.

VPN er konstrueret til at være driftssikker, brugervenlig og fuldt kompatibel med Magnia SG20. Via den tætte grænseflade og netværksintegration giver VPN nem adgang til alle funktioner i Magnia SG20-ser veren samt adgang til alle systemer på lokalnetværk. Da VPN-forbindelsen giver adgang inden for firewall’en, oplever fjernbr ugeren det som at være forbundet med serverens LAN, som på en lokal forbindelse. Da fjernbrugere har fuld adgang til systemet med VPN, er firewall’en aktiv for at opretholde sikkerheden på lokalnetværket.

ADVARSEL: For at kunne få forbindelse til VPN skal klientsystemerne køre et Windows operativsystem.

VPN-konfiguration og anvendelse af Toshiba Magnia® SG20-serveren

Del 1 - Konfigurering af VPN-softwaren

Installation af VPN

Under konfigureringen skal brugerkontiene have adgang til VPN. Derefter skal der oprettes en klientinstallationsdiskette, der skal anvendes v e d installation af VPN-adgang på klient computerne.

Aktivering af VPN-funktionen

Gå til Web-stedet til administration.

Vælg fanen Network [Ne tv ærk], og klik på menupunktet VPN.

Marker afkrydsningsfeltet Enable VPN [Aktiver VPN], og klik på

at slå VPN-funktio nen til. Klik på hyperlinket Enable/Disable Users [Aktiver/Deaktiver brugere] for at aktivere

bestemte brugerkonti, så de har adgang til denne funktion.

TEKNISK BEMÆRKNING: VPN-adgangen kan til enhver tid aktiveres eller deaktiveres af systemadministratoren, uden at andre VPN konfigurationsindstillinger mistes.

Apply [An v end]

for

Brugeradgang

Brugerne har ikke automat isk adg ang ti l VPN. Hver enkelt bruger skal have en tilladelse. De enkelte brugere får adgang til VPN ved at følge disse trin:

Gå til Web-stedet til administration.

Åbn hovedsiden for VPN, og vælg hyperlinket Enable/Disable Users [Aktiver/

deaktiver brugere]. Marker felterne ved siden af de brugere, du vil give VPN-adgang, på den viste

skærm. Du kan ændre disse inds tillinger til enhver tid. Klik på

Skærmbilledet til generering af en klientin stal lati o nsd iskette vises.

Apply [Anvend]

VPN-konfiguration og anvendelse af Toshiba Magnia® SG20-serveren

Generering af en klientinstallationsdiskette

Når Magnia SG20 er indstillet til at acceptere VPN-forbindelser fra de angivne brugere, skal du konfigurere klientcomputerne som f.eks. bærbare eller stationære fjerncomputere, så de ka n gå ind på serveren. Klientkonfigurationsprogrammet skal kopieres fra Magnia SG20 til en diskette.

Sådan oprettes en VPN-insta lla tion s diskette:

Gå til Web-stedet til administration.

Åbn hovedsiden for VPN, og vælg hyperlinket

[Generer klientinstallationsdiskette]

Der vises en side, der beskriver fremgangsmåden ved klientinstallation. Følg instruktionerne på siden for at oprette en diskette.

TEKNISK BEMÆRKNING: Ekstra klientinstallationsdisketter kan oprettes senere. For yderligere oplysninger se Generering af ekstra klientinstallationsdisketter på side 25.

Generate Client Setup Diskette

Anvendelse af VPN

Når en klientcomputer forbindes med Magnia SG 20 ved hjælp af VPN, kan klienten få adgang til praktisk taget alle de samme funktioner som en computer, der er forbundet direkte til lokalnetværket. Følgende handlinger er tilgængelige for alle klienter, der anvender VPN:

❖

Fildeling – adgang til personlig e og fælles biblioteker

❖

Udskrivning – udskrive til de n fæll e s printer

❖

Email – hente og sende e-mail

❖

Intranet – adgang til det indbyggede Intranet-Web-sted og fælles områder på lokale

klientcomputere

❖

Systemadministration – systemadministratoren kan gå ind på Web-stedet til

administration og styr e netværket fra en fjernplacering.

Generering af ekstra klientinstallationsdisketter

Klienter som f .eks. bærbare compute re eller station ære fjerncomputere skal k onfigurer es for at have adgang til serveren ved hjælp af VPN. Hvis du vil lave ekstra klientinstallationsdisketter:

VPN-konfiguration og anvendelse af Toshiba Magnia® SG20-serveren

Gå til Web-stedet til administrati on af Magnia SG20.

Vælg fanen Network [Netværk], og klik derefter på

Klik på indstillingen

Klik på

Du bliver spurgt om hvor det kopierede program skal placeres. Vælg en placering.

TEKNISK BEMÆRKNING: Det k opiere de progr am placeres no rmalt på en diskette , så det kan anvendes direkte på en klient. Det kopierede program kan placeres på harddisken til senere brug, eller det kan e-mailes som en vedhæftet fil.

ADVARSEL: Et kopieret pr ogr am, der an v endes ti l at k onfi gurere en klie ntcomputer, indeholder serveren s akt uell e IP- a dresse. Hvis serverens IP-adr esse æn dr es, eller serveren anvender DHCP, skal programmet til opretning af en klientinstallation sdisk e tte kopieres igen, så det indeho lder de n korrekte IP-adresse . Alle klientmaskin er, der tidligere er k o nfigureret, skal genkonfigureres med den nye IP-adresse.

Generate Client Setup Diskette [Generer klientinstallationsdiskette] Generate Client Setup DIskette [Generer klientinstallationsdiskette]

VPN Administration

VPN

. .

Del 2 - Konfigurering af en klientcomputer

Eksterne computere med forbindelse til Magnia SG20-serveren via VPN kaldes "klient"computere. Hver enkelt klientcomputer skal konfigureres til forbindelsen med s erveren.

I alle Microsoft® Windows operativsystemer er VPN (Virtuelt privat netværk) implementeret som en funktion i Dial-Up Networking [Netværk via modem]. For at konfigurere computeren til VPN, skal Dial-Up Networking [Netværk via modem] være installeret på co mputeren, også selvom du ikke vil bruge modemet til at kalde op til en Internetudbyder.

Foruden Dial-Up Networking [Netværk via modem] skal du have installeret mindst et fungerende netværkskort. Dette netværkskort kan være af Dial-Up-typen, Ethernet eller andre netværkskort med forbindelse til Internettet. Det er ikke nødvendigt, at klientcomputeren er forbundet med Internettet ved konfiguratio nen. For at kunne bruge VPN er det dog nødvendigt, at klientcomputeren er forbundet med Internettet.

TEKNISK BEMÆRKNING: Proceduren fo r installa tion af en klient til VPN tager ca. 5 minutter og kræver, at computeren genstartes.

VPN-konfiguration og anvendelse af Toshiba Magnia® SG20-serveren

Konfigurationskrav

For at kunne kommunikere via VPN med en Microsoft Windows-klient over Internettet skal Magnia SG20 have:

❖

Aktiveret VPN-understøttelse

❖

Mindst en brugerkont o med VPN, der e r aktiv eret til brug f or klienten v ed opre ttelse af

forbindelse

❖

En fast offentlig IP-adresse.

ADVARSEL: Hvis serverens IP-adresse eller arbejdsgruppe ændres, skal programmet til opretnin g af en klientinsta llationsdiskette kopieres igen, så det indeholder den k orrekte IP- adresse. H vis du an v ender en klie ntinstallat ionsdisk ette , der er konfigureret på en Magnia SG20 med en DHCP IP-adresse, vises der en advarsel under installationen. På dette tidspunkt kan du vælge at genkonfigurere serveren eller fortsætte konfigurationen.

For at kunne kommunikere via VPN med en Microsoft Windows-klient over Internettet skal klientcomputeren have:

❖

- Windows 95/98/Me/NT/2000/XP kørende som operativsystem (Macintosh

operativsystemer understøttes ikke på dette tidspunkt)

❖

- forbindelse til Internettet via en bredbånds- eller opkaldsforbindelse

❖

- En computer, der ikke er direkte forbundet med Magnia SG20-serveren.

TEKNISK BEMÆRKNING: Installering på et klientsystem, der kører Windows 95, kan kræve , at du in sta ll e re r opgraderingen Dial Up Netwo rking 1.3 Performance and Security Update. Du kan kontrollere, om denne opgradering er nødvendig, ved at læse Undersøgelse af, om opgraderingen er nødvendig på side 30.

Kørsel af klientkonfigurationsdisketten

TEKNISK BEMÆRKNING: Guiden VPN Client Setup er beregnet til at kunne konfigurere klientsystemerne og skal anvendes under normale omstændigheder. Hvis dette ikke er muligt, findes der en vejledning i manuel installation af et klientsystem i Appendiks A, B og C. Se det afsnit i Appendiks, der svarer til dit operativsystem.

VPN-konfiguration og anvendelse af Toshiba Magnia® SG20-serveren

Indsæt klientkonfigurationsdisketten i klientcomputeren.

Dobbeltklik på den installationsprogramfil, der hedder SG20VPNSetup.exe (det

program, der blev downloaded, da du valgte

disk]

Guiden Client Setup [Klientinstallation] åbnes.

Generate VPN Disk [Generer VPN-

Klik på

Installationsguiden undersøger systemet for de korrekte instillinger og Internetforbindelse.

Når dine indstillinger er kontrolleret, installeres og konfigureres protokollerne PPTP og RAS af programmet VPN Client Setup.

TEKNISK BEMÆRKNING: Hvis du kører en klientkonfigurationsdiskette på et Windows NT-system, kan der vises dialogbokse , der ikk e er vist i de tte af snit. Disse dialogbokse er ikke en del af VPN-installationsproceduren. Du kan ikke vælge dem med musen. Du kan lukke de ekstra dialogbokse ved at trykke på

TEKNISK BEMÆRKNING: VPN-installationen kan kræve, at du isætter din cd-rom med Windows, så PPTP og RAS kan ins talleres og konfigureres. Se efter oplysninger om disse teknologier i Introduktion på side 23.

Next [Næste]

for at begynde.

Enter

-tasten.

Når PPTP og RAS-konfigurationerne er færdige, beder guiden dig om at genstarte computeren.

Fjern disketten, før du genstarter.

Klik på

træffes noget valg, genstartes computeren automatisk.

TEKNISK BEMÆRKNING: Hvis færdiggøres VPN-installationen ikke, og VPN installationsguiden fortsætter efter genstart.

Efter genstart kø rer VPN i nstalla tion sprog r amm et ige n f o r at genn emføre den sidste konfiguration.

Når konfigurationen er gennemført, er klientcomputeren klar til at bruge VPN.

Restart Now [Genstart nu]

Restart Later [Genstart senere]

for at genstarte computeren. Hvis der ikke

vælges,

VPN-konfiguration og anvendelse af Toshiba Magnia® SG20-serveren

Del 3 – Tilslutning til VPN

Når installation en er færdig, får k lienten et nyt Netværk via modem-ikon på skrivebordet og i vinduet Netværk via modem.

Sådan forbindes til SG20-serveren fra klienten ved hjælp af VPN:

Log på klientcomputeren med de samme kontooplysninger, som du bruger på

Magnia SG20-serveren.

TEKNISK BEMÆRKNING: Hvis du har logget dig på via en anden konto, eller hvis du ikke er logget på, kan du blive bedt om at logge dig på.

Åbn Web-browseren, og log dig på Internettet.

Når du er logget på Internettet, skal du dobbeltklikke på VPN-ikonet for at etablere

VPN-forbindelsen. Der vises et skærmbillede, der indeholder det aktuelle logon. Indtast adgangskoden.

Klik på

VPN-forbindelsen er etableret. Når du er forbundet, har du adgang til funktionerne på Magnia SG20 med de samme metoder, du anvender på de lokalt forbundne computere.

Connect [Tilslut]

Afbrydelse af VPN

Dobbeltklik på ikonet til VPN-forbindelsen, der findes i systembakken.

Klik på

VPN-forbindelsen afbrydes, men co mputeren er sta digvæk tilsluttet Internettet.

Disconnect [Afbryd tilslutning]

+ 118 hidden pages