![Planet SG-1000 Инструкция по эксплуатации онлайн [140/262] 66175](/img/pdf.png)
Planet SG-1000 Инструкция по эксплуатации онлайн [140/262] 66175
![Planet SG-1000 Инструкция по эксплуатации онлайн [140/262] 66175](/views2/1071671/page140/bg8c.png)
１３９
We set up four Virtual Server examples in this chapter:
No. Suitable
Situation
Example
Ex1
Mapped IP
Make a single server that provides several services
such as FTP, Web, and Mail, to provide service by
policy.
Ex2
Virtual Server
Make several servers that provide a single service,
to provide service through policy by Virtual Server.
(Take Web service for example)
Ex3
Virtual Server
The external user use VoIP to connect with VoIP of
LAN. (VoIP Port: TCP 1720, TCP 15328-15333,
UDP 15328-15333)
Ex4
Virtual Server
Make several servers that provide several same
services, to provide service through policy by
Virtual Server. (Take HTTP, POP3, SMTP, and
DNS Group for example)
Preparation
Apply for two ADSL that have static IP
(WAN1 static IP is 61.11.11.10~ 61.11.11.14)
(WAN2 static IP is 211.22.22.18~ 211.22.22.30)
Содержание
- Ce mark warning 2
- Copyright 2
- Disclaimer 2
- Trademarks 2
- Customer service 3
- Revision 3
- Table of contents 4
- Chapter 1 7
- Chapter 1 introduction 7
- Introduction 7
- Administration 11
- Chapter 2 11
- Chapter 2 administration 11
- Define the required fields of administrator 12
- Adding a new sub administrator 13
- Modify the administrator s password 14
- Add permitted ips 15
- Logout 16
- Software update 18
- Chapter 3 19
- Chapter 3 configure 19
- Configure 19
- Define the required fields of settings 20
- Define the required fields of multiple subnet 21
- Define the required fields of time settings 21
- Define the required fields of ddns 23
- Define the required fields of dhcp 23
- Define the required fields of host table 23
- System settings exporting 24
- System settings importing 25
- Restoring factory default settings 26
- Enabling e mail alert notification 27
- Reboot sg 1000 28
- Date time settings 29
- Multiple subnet 30
- Adding multiple subnet 31
- Route table 34
- Route table 35
- Dynamic dns settings 40
- Host table 42
- Language 43
- Chapter 4 44
- Chapter 4 interface 44
- Interface 44
- Define the required fields of interface 45
- Modify lan interface settings 49
- Setting wan interface address 50
- Setting dmz interface address nat mode 58
- Setting dmz interface address transparent mode 59
- Address 60
- Chapter 5 60
- Chapter 5 address 60
- Define the required fields of address 61
- Under dhcp situation assign the specific ip to static users and restrict them to access ftp net service only through policy 63
- Setup a policy that only allows partial users to connect with specific ip external specific ip 66
- Chapter 6 70
- Chapter 6 service 70
- Service 70
- Define the required fields of service 71
- Allow external user to communicate with internal user by voip through policy voip port tcp 1720 tcp 15328 15333 udp 15328 15333 73
- Setting service group and restrict the specific users only can access to service resource that provided by this group through policy group http pop3 smtp dns 77
- If you want to remove the service you choose from selected service choose the service 78
- You want to delete and click remove 78
- ７７ 78
- Chapter 7 80
- Chapter 7 schedule 80
- Schedule 80
- To configure the valid time periods for lan users to access to internet in a day 81
- Chapter 8 83
- Chapter 8 qos 83
- ８３ 84
- Define the required fields of qos 85
- Setting a policy that can restrict the user s downstream and upstream bandwidth 86
- Step 2 use the qos that set by step1 in outgoing policy 87
- Authentication 88
- Chapter 9 88
- Chapter 9 authentication 88
- Define the required fields of authentication 89
- Setting a specific user to connect with external network only before passing the authentication of policy adopt the built in auth user and group function 94
- Setting the users to connect with external network only before passing the authentication of policy adopt external radius server built in windows 2003 server authentication 98
- Setting the users to connect with external network only before passing the authentication of policy adopt the external pop3 server authentication 119
- Chapter 10 122
- Chapter 10 content blocking 122
- Content filtering 122
- Define the required fields of content blocking 123
- Restrict the internal users only can access to some specific website 126
- Url blocking 126
- Restrict the internal users to access to script file of website 129
- Restrict the internal users to access to the file on internet by p2p 131
- Restrict the internal users to send message files video and audio by instant messaging 133
- Restrict the internal users to access to video audio and some specific sub name file from http or ftp protocol directly 135
- Chapter 11 137
- Chapter11 virtual server 137
- Virtual server 137
- Define the required fields of virtual server 139
- Make a single server that provides several services such as ftp web and mail to provide service by policy 141
- Step 7 complete the setting of providing several services by mapped ip 143
- Make several servers that provide a single service to provide service through policy by virtual server take web service for example 144
- The external user use voip to connect with voip of lan voip port tcp 1720 tcp 15328 15333 udp 15328 15333 147
- Make several servers that provide several same services to provide service through policy by virtual server take http pop3 smtp and dns group for example 151
- Step 7 complete the setting of providing several services by virtual server 155
- １５４ 155
- Chapter 12 156
- Chapter12 vpn 156
- Define the required fields of vpn 157
- Define the required fields of ipsec function 159
- Define the required fields of pptp server function 160
- Define the required fields of pptp client function 161
- Define the required fields of trunk function 162
- Setting ipsec vpn connection between two sg 1000 164
- Step 12 complete ipsec vpn connection 176
- Setting pptp vpn connection between two sg 1000 177
- Chapter 13 188
- Chapter13 policy 188
- Policy 188
- Define the required fields of policy 190
- Set up the policy that can monitor the internal users take logging statistics and alarm threshold for example 194
- Forbid the users to access to specific network take specific wan ip and content blocking for example 197
- Only allow the users who pass authentication to access to internet in particular time 202
- The external user control the internal pc through remote control software take pcanywhere for example 204
- Set a mail server to allow the internal and external users to receive and send e mail under dmz transparent mode 206
- Chapter 14 210
- Chapter14 web vpn ssl vpn 210
- Web vpn ssl vpn 210
- Define the required fields of setting 211
- Define the required fields of vpn 211
- Define the required fields of status 212
- Setting web vpn ssl vpn connection between external client and sg 1000 213
- Alert setting 223
- Chapter 15 223
- Chapter15 alert setting 223
- Define the required fields of hacker alert 224
- Destination addresses the same source port and destination port and when syn on the tcp header is marked enable this function to detect such abnormal packets 227
- Detect land attack some systems may shut down when receiving packets with the same source and 227
- Sg 1000 alarm and to prevent the computer which being attacked to send ddos packets to lan network 228
- Attack alarm 232
- Chapter 16 232
- Chapter16 atack alarm 232
- To record the ddos attack alarm from internal pc 234
- To record the attack alarm about hacker attacks the sg 1000 and intranet 235
- Chapter 17 237
- Chapter17 log 237
- To detect the information and protocol port that users use to access to internet or intranet by sg 1000 239
- To record the detailed management events such as interface and event description of sg 1000 of the administrator 243
- To detect event description of wan connection 246
- To save or receive the records that sent by the sg 1000 249
- Chapter 18 251
- Chapter18 statistics 251
- Statistics 251
- Define the required fields of statistics 252
- Wan statistics 253
- Policy statistics 255
- Chapter 19 257
- Chapter19 status 257
- Status 257
- Interface 258
- Authentication 260
- Arp table 261
- Dhcp clients 262
Похожие устройства
- HP Pavilion dv6-7050er Инструкция по эксплуатации
- Singer PROMISE 1409 Инструкция по эксплуатации
- Planet SG-500 Инструкция по эксплуатации
- HP Pavilion g7-2003er Инструкция по эксплуатации
- Singer CURVY 8770 Инструкция по эксплуатации
- HP Pavilion dv6-7060er Инструкция по эксплуатации
- Planet IM-1000 Инструкция по эксплуатации
- Singer TALENT 3221 Инструкция по эксплуатации
- Alienware x51-4897 Инструкция по эксплуатации
- Planet MH-2001 Инструкция по эксплуатации
- Singer HEAVY DUTY 4411 Инструкция по эксплуатации
- Alienware x51-4903 Инструкция по эксплуатации
- Planet CS-1000 Инструкция по эксплуатации
- Singer BRILLIANCE 6160 Инструкция по эксплуатации
- Planet CS-2000 Инструкция по эксплуатации
- Alienware x51-4910 Инструкция по эксплуатации
- Singer FASHION MATE 7256 Инструкция по эксплуатации
- Planet DKVM-1700 Инструкция по эксплуатации
- HP Omni 27-1000er H1F63EA Инструкция по эксплуатации
- Singer LIMITED EDITION 160 Инструкция по эксплуатации