![Planet MH-2001 [188/297] Example](/img/pdf.png)
Planet MH-2001 [188/297] Example
![Planet MH-2001 [188/297] Example](/views2/1071681/page188/bgbc.png)
MH-2001 Multi-Homing Security Gateway User’s Manual
6.9.3 Example.3
The way to set the IPSec VPN connection between two MH-2001 appliances.
(Aggressive mode) (The IPSec algorithm, 3DES encryption, MD5 authentication).
The Deployment
Company A : WAN IP 61.11.11.11
LAN IP 192.168.10.X
Company B : WAN IP 211.22.22.22
LAN IP 192.168.20.X
We use two MH-2001 devices to be the platform. Assume that A Company 192.168.10.100 want to build the
VPN to B Company 192.168.20.100, in order to download the shared documents. (Aggressive mode)
TEST Environment
The IPSec VPN aggressive mode deployment
- 182 -
Содержание
- Mh 2001 1
- Multi homing security gateway 1
- User s manual 1
- Ce mark warning 2
- Copyright 2
- Disclaimer 2
- Federal communication commission interference statement 2
- Mh 2001 multi homing security gateway user s manual 2
- Trademarks 2
- Customer service 3
- Fcc caution 3
- Mh 2001 multi homing security gateway user s manual 3
- R tte compliance statement 3
- Revision 3
- Safety 3
- Weee caution 3
- Table of contents 4
- Chapter 1 introduction 7
- Features 7
- Mh 2001 front view 8
- Package contents 8
- Mh 2001 rear panel 9
- Specification 10
- Chapter 2 hardware installation 11
- Installation requirements 11
- Internet 12
- Operation mode 12
- Transparent mode connection example 12
- Nat mode connecting example 13
- Chapter 3 getting started 14
- Step 1 14
- Step 2 14
- Web configuration 14
- Configure wan 1 interface 15
- Configure dmz interface 17
- Configure policy 17
- Configure wan 2 interface 17
- Step 1 17
- Step 2 17
- Step 3 17
- Step 4 18
- Administration 19
- Chapter 4 system 19
- Define the required fields of administrator 19
- Adding a new sub administrator 20
- Changing the main sub administrator s password 20
- Removing a sub administrator 21
- Add permitted ips 22
- Before canceling the http selection of interface must set up the permitted ips first otherwise it would 22
- Cause the situation of cannot enter webui by appointed interface 22
- Mh 2001 that administrator enter lan wan or dmz interface 22
- Permitted ips 22
- To make permitted ips be effective it must cancel the ping and http selection in the webui of 22
- Software update 23
- Configure 24
- Entering the settings window 24
- Exporting mh 2001 settings 24
- Setting 24
- Importing mh 2001 settings 25
- Enabling e mail alert notification 26
- Restoring factory default settings 26
- System name setting 26
- Web management wan interface 27
- Dynamic routing ripv2 28
- Mtu set networking packet length 28
- Sip protocol pass through 29
- To appliance packets log 29
- Date time 30
- System reboot 30
- Multiple subnet 31
- Nat mode 31
- Add a multiple subnet with nat mode 32
- Add a multiple subnet with routing mode 32
- Multiple subnet settings 32
- Adding a multiple subnet with routing mode 33
- Adding a new static route 34
- Entering the route table screen 34
- Route table 34
- Entering the dhcp window 35
- Dynamic dns 36
- Enabling dhcp support 36
- Add dynamic dns setting 37
- Click on s 37
- Ign up then can enter the website of the 37
- Provider 37
- Host table 38
- Language 38
- Mh 2001 that is the default gateway 38
- To use host table the user pc s first dns server must be the same as the lan port or dmz port ip of 38
- Logout 39
- Step 1 39
- Step 2 39
- Chapter 5 interface 40
- Entering the interface menu 40
- Modify the interface settings 40
- Setting wan interface address 42
- Setting dmz interface address nat mode 46
- Setting dmz interface address transparent mode 47
- Address 48
- Chapter 6 policy object 48
- Definition 48
- Entering the lan window 48
- How to use address table 48
- Adding a new lan address 49
- Adding a lan group 50
- Definitions lan group 50
- Entering the lan group window 50
- Lan group 50
- Definitions 51
- Entering the wan window 51
- Adding a new wan address 52
- Definitions 52
- Entering the wan group window 52
- Wan group 52
- Adding an wan group 53
- Entering the dmz window 53
- Adding a new dmz address 54
- Definition 54
- Adding a dmz group 55
- Definitions 55
- Dmz group 55
- Entering the dmz group window 55
- Example1 57
- Under dhcp situation assign the specific ip to static users and restrict them to access ftp net service only through policy 57
- Example2 59
- Setup a policy that only allows partial users to connect with specific ip external specific ip 59
- Pre defined 62
- Service 62
- Custom 63
- Definitions 63
- Entering the custom window 63
- Icons and descriptions 63
- Adding a new service 64
- Entering the group window 64
- Adding service groups 65
- Definitions 65
- Adding a new schedule 66
- Definitions 66
- Entering the schedule window 66
- Schedule 66
- Add new qos 68
- Configuration of qos 68
- Definitions 68
- Auth setting 69
- Authentication 69
- Configuration of authentication 69
- Adding a new auth user 70
- Auth user 70
- Definitions 70
- Auth user group 73
- Radius server 76
- To plan the users connect to the wan through the authenticaton in policy to use the 76
- Wan radius server windows 2003 server built in authentication 76
- Select md5 challenge 86
- To plan the users connect to the wan through the authentication by policy to use the wan pop3 server authentication 96
- Content blocking 98
- Url blocking 98
- Script blocking 100
- Download blocking 101
- Upload blocking 102
- Im p2p blocking 103
- Virtual server 104
- Make a single server that provides several services such as ftp web and mail to provide service by policy 105
- Mapped ip 105
- Make several servers that provide a single service to provide service through policy by virtual server take web service for example 108
- Virtual server 1 4 108
- Example 117
- To access the static subnet resources via the ipsec vpn connection between two mh 2001 appliances 117
- Vpn test environment 117
- The default gateway of company a is the mh 2001 lan ip 192 68 0 follow the steps 118
- The default gateway of company b is the lan ip of the mh 2001 192 68 0 follow the steps below 124
- Example 130
- Test environment 130
- The deployment 130
- The way to set the mh 2001 appliance ipsec vpn connection in windows 2000 130
- Following settings 131
- The a company s default gateway is the lan ip 192 68 0 in the mh 2001 add the 131
- The b company s real ip is 211 2 2 2 add the following settings 137
- Example 188
- Test environment 188
- The way to set the ipsec vpn connection between two mh 2001 appliances aggressive mode the ipsec algorithm 3des encryption md5 authentication 188
- Settings 189
- The a company s default gateway is the mh 2001 lan ip 192 68 0 make the following 189
- Settings 195
- The b company s default gateway is the mh 2001 s lan ip 192 68 0 add the following 195
- Example 201
- Test environment 201
- The deployment 201
- The way to set the ipsec vpn connection between two mh 2001 appliances the gre packets the ipsec algorithm 3des encryption md5 authentication 201
- The a company s default gateway is the lan ip 192 68 0 in mh 2001 202
- The b company s default gateway is the lan ip 192 68 0 of mh 2001 add the following settings 208
- Example 214
- Setting pptp vpn connection between two mh 2001 214
- Test environment 214
- The deployment 214
- The default gateway of company a is the lan ip of the mh 2001 192 68 0 follow the steps below 215
- The default gateway of company b is the lan ip of the mh 2001 192 68 0 follow the steps below 220
- Example 224
- Test environment 224
- The deployment 224
- The way to set the mh 2001 appliance pptp vpn connection in windows 2000 224
- The a company s default gateway is the lan ip 192 68 0 in mh 2001 add the following settings 225
- The b company s pc use the real ip 211 2 2 2 add the following settings 230
- Chapter 7 policy 241
- Define the required fields of policy 241
- Outgoing 244
- Enabled monitoring function 245
- Set up the policy that can monitor the internal users take logging statistics and alarm 245
- Threshold for example 245
- For example 248
- Incoming 248
- The external user control the internal pc through remote control software take pcanywhere 248
- Wan to dmz lan to dmz 250
- Adding a dmz to wan and dmz to lan policy 253
- Dmz to wan dmz to lan 253
- Example set a mail server to allow the internal and external users to receive and send e mail 253
- Under dmz transparent mode 253
- Chapter 8 anomaly flow ip 259
- In this chapter we will make the introduction and settings of anomaly flow ip 259
- To alert and block the external or internal anomalous data packets 262
- Chapter 9 monitor 267
- Traffic log 268
- Connection log 272
- Definition 272
- Download connection logs 272
- Clear connection logs 273
- Enable log mail support syslog setting 274
- Enter to the log backup window 274
- Log backup 274
- Accounting report 276
- Accounting report can be divided into three parts setting outbound accounting report and 276
- Accounting report setting 276
- Define the required fields of accounting report 276
- Enable accounting report setting 276
- Outbound accounting report 276
- Setting 276
- The inbound accounting report 276
- Inbound accounting report 278
- Outbound 279
- Inbound 283
- Statistics 286
- Define the required fields of statistics 287
- Wan statistics 287
- Policy statistics 290
- Remote monitor the internal pc 292
- Wake on lan 292
- Interface status 293
- Status 293
- Authentication 295
- Arp table 296
- Dhcp clients 297
Похожие устройства
- Singer HEAVY DUTY 4411 Инструкция по эксплуатации
- Alienware x51-4903 Инструкция по эксплуатации
- Planet CS-1000 Инструкция по эксплуатации
- Singer BRILLIANCE 6160 Инструкция по эксплуатации
- Planet CS-2000 Инструкция по эксплуатации
- Alienware x51-4910 Инструкция по эксплуатации
- Singer FASHION MATE 7256 Инструкция по эксплуатации
- Planet DKVM-1700 Инструкция по эксплуатации
- HP Omni 27-1000er H1F63EA Инструкция по эксплуатации
- Singer LIMITED EDITION 160 Инструкция по эксплуатации
- Planet IKVM-8000 Инструкция по эксплуатации
- Samsung S24B300BL Инструкция по эксплуатации
- Singer PROMISE 1408 Инструкция по эксплуатации
- Planet KVM-201 Инструкция по эксплуатации
- Samsung GT-P3100 8Gb Silver Инструкция по эксплуатации
- Singer TRADITION 2250 Инструкция по эксплуатации
- Planet KVM-401 Инструкция по эксплуатации
- Samsung GT-P3100 8Gb White Инструкция по эксплуатации
- Singer SIMPLE 3223 Инструкция по эксплуатации
- Planet KVM-210 Инструкция по эксплуатации
Скачать
Случайные обсуждения