![Planet MH-2001 Инструкция по эксплуатации онлайн [204/297] 66185](/img/pdf.png)
Planet MH-2001 Инструкция по эксплуатации онлайн [204/297] 66185
![Planet MH-2001 Инструкция по эксплуатации онлайн [204/297] 66185](/views2/1071681/page204/bgcc.png)
MH-2001 Multi-Homing Security Gateway User’s Manual
STEP 7 . In Perfect Forward Secrecy (NO-PFS/ GROUP 1, 2, 5), select GROUP 1. In ISKMP Lifetime,
enter 3600 seconds. In IPSec Lifetime, enter 28800 seconds. In Mode, select main mode.
The IPSec Perfect Forward Secrecy setting
STEP 8 . In GRE/IPSec Æ GRE Local IP, enter 192.168.50.100. In GRE Remote IP, enter 192.168.50.200
(The local IP and remote IP must be in the same subnet of C class).
The GRE/IPSec setting
STEP 9 . Complete the VPN_A setting in IPSec Autokey.
Complete the IPSec Autokey setting
- 198 -
Содержание
- Mh 2001 1
- Multi homing security gateway 1
- User s manual 1
- Ce mark warning 2
- Copyright 2
- Disclaimer 2
- Federal communication commission interference statement 2
- Mh 2001 multi homing security gateway user s manual 2
- Trademarks 2
- Customer service 3
- Fcc caution 3
- Mh 2001 multi homing security gateway user s manual 3
- R tte compliance statement 3
- Revision 3
- Safety 3
- Weee caution 3
- Table of contents 4
- Chapter 1 introduction 7
- Features 7
- Mh 2001 front view 8
- Package contents 8
- Mh 2001 rear panel 9
- Specification 10
- Chapter 2 hardware installation 11
- Installation requirements 11
- Internet 12
- Operation mode 12
- Transparent mode connection example 12
- Nat mode connecting example 13
- Chapter 3 getting started 14
- Step 1 14
- Step 2 14
- Web configuration 14
- Configure wan 1 interface 15
- Configure dmz interface 17
- Configure policy 17
- Configure wan 2 interface 17
- Step 1 17
- Step 2 17
- Step 3 17
- Step 4 18
- Administration 19
- Chapter 4 system 19
- Define the required fields of administrator 19
- Adding a new sub administrator 20
- Changing the main sub administrator s password 20
- Removing a sub administrator 21
- Add permitted ips 22
- Before canceling the http selection of interface must set up the permitted ips first otherwise it would 22
- Cause the situation of cannot enter webui by appointed interface 22
- Mh 2001 that administrator enter lan wan or dmz interface 22
- Permitted ips 22
- To make permitted ips be effective it must cancel the ping and http selection in the webui of 22
- Software update 23
- Configure 24
- Entering the settings window 24
- Exporting mh 2001 settings 24
- Setting 24
- Importing mh 2001 settings 25
- Enabling e mail alert notification 26
- Restoring factory default settings 26
- System name setting 26
- Web management wan interface 27
- Dynamic routing ripv2 28
- Mtu set networking packet length 28
- Sip protocol pass through 29
- To appliance packets log 29
- Date time 30
- System reboot 30
- Multiple subnet 31
- Nat mode 31
- Add a multiple subnet with nat mode 32
- Add a multiple subnet with routing mode 32
- Multiple subnet settings 32
- Adding a multiple subnet with routing mode 33
- Adding a new static route 34
- Entering the route table screen 34
- Route table 34
- Entering the dhcp window 35
- Dynamic dns 36
- Enabling dhcp support 36
- Add dynamic dns setting 37
- Click on s 37
- Ign up then can enter the website of the 37
- Provider 37
- Host table 38
- Language 38
- Mh 2001 that is the default gateway 38
- To use host table the user pc s first dns server must be the same as the lan port or dmz port ip of 38
- Logout 39
- Step 1 39
- Step 2 39
- Chapter 5 interface 40
- Entering the interface menu 40
- Modify the interface settings 40
- Setting wan interface address 42
- Setting dmz interface address nat mode 46
- Setting dmz interface address transparent mode 47
- Address 48
- Chapter 6 policy object 48
- Definition 48
- Entering the lan window 48
- How to use address table 48
- Adding a new lan address 49
- Adding a lan group 50
- Definitions lan group 50
- Entering the lan group window 50
- Lan group 50
- Definitions 51
- Entering the wan window 51
- Adding a new wan address 52
- Definitions 52
- Entering the wan group window 52
- Wan group 52
- Adding an wan group 53
- Entering the dmz window 53
- Adding a new dmz address 54
- Definition 54
- Adding a dmz group 55
- Definitions 55
- Dmz group 55
- Entering the dmz group window 55
- Example1 57
- Under dhcp situation assign the specific ip to static users and restrict them to access ftp net service only through policy 57
- Example2 59
- Setup a policy that only allows partial users to connect with specific ip external specific ip 59
- Pre defined 62
- Service 62
- Custom 63
- Definitions 63
- Entering the custom window 63
- Icons and descriptions 63
- Adding a new service 64
- Entering the group window 64
- Adding service groups 65
- Definitions 65
- Adding a new schedule 66
- Definitions 66
- Entering the schedule window 66
- Schedule 66
- Add new qos 68
- Configuration of qos 68
- Definitions 68
- Auth setting 69
- Authentication 69
- Configuration of authentication 69
- Adding a new auth user 70
- Auth user 70
- Definitions 70
- Auth user group 73
- Radius server 76
- To plan the users connect to the wan through the authenticaton in policy to use the 76
- Wan radius server windows 2003 server built in authentication 76
- Select md5 challenge 86
- To plan the users connect to the wan through the authentication by policy to use the wan pop3 server authentication 96
- Content blocking 98
- Url blocking 98
- Script blocking 100
- Download blocking 101
- Upload blocking 102
- Im p2p blocking 103
- Virtual server 104
- Make a single server that provides several services such as ftp web and mail to provide service by policy 105
- Mapped ip 105
- Make several servers that provide a single service to provide service through policy by virtual server take web service for example 108
- Virtual server 1 4 108
- Example 117
- To access the static subnet resources via the ipsec vpn connection between two mh 2001 appliances 117
- Vpn test environment 117
- The default gateway of company a is the mh 2001 lan ip 192 68 0 follow the steps 118
- The default gateway of company b is the lan ip of the mh 2001 192 68 0 follow the steps below 124
- Example 130
- Test environment 130
- The deployment 130
- The way to set the mh 2001 appliance ipsec vpn connection in windows 2000 130
- Following settings 131
- The a company s default gateway is the lan ip 192 68 0 in the mh 2001 add the 131
- The b company s real ip is 211 2 2 2 add the following settings 137
- Example 188
- Test environment 188
- The way to set the ipsec vpn connection between two mh 2001 appliances aggressive mode the ipsec algorithm 3des encryption md5 authentication 188
- Settings 189
- The a company s default gateway is the mh 2001 lan ip 192 68 0 make the following 189
- Settings 195
- The b company s default gateway is the mh 2001 s lan ip 192 68 0 add the following 195
- Example 201
- Test environment 201
- The deployment 201
- The way to set the ipsec vpn connection between two mh 2001 appliances the gre packets the ipsec algorithm 3des encryption md5 authentication 201
- The a company s default gateway is the lan ip 192 68 0 in mh 2001 202
- The b company s default gateway is the lan ip 192 68 0 of mh 2001 add the following settings 208
- Example 214
- Setting pptp vpn connection between two mh 2001 214
- Test environment 214
- The deployment 214
- The default gateway of company a is the lan ip of the mh 2001 192 68 0 follow the steps below 215
- The default gateway of company b is the lan ip of the mh 2001 192 68 0 follow the steps below 220
- Example 224
- Test environment 224
- The deployment 224
- The way to set the mh 2001 appliance pptp vpn connection in windows 2000 224
- The a company s default gateway is the lan ip 192 68 0 in mh 2001 add the following settings 225
- The b company s pc use the real ip 211 2 2 2 add the following settings 230
- Chapter 7 policy 241
- Define the required fields of policy 241
- Outgoing 244
- Enabled monitoring function 245
- Set up the policy that can monitor the internal users take logging statistics and alarm 245
- Threshold for example 245
- For example 248
- Incoming 248
- The external user control the internal pc through remote control software take pcanywhere 248
- Wan to dmz lan to dmz 250
- Adding a dmz to wan and dmz to lan policy 253
- Dmz to wan dmz to lan 253
- Example set a mail server to allow the internal and external users to receive and send e mail 253
- Under dmz transparent mode 253
- Chapter 8 anomaly flow ip 259
- In this chapter we will make the introduction and settings of anomaly flow ip 259
- To alert and block the external or internal anomalous data packets 262
- Chapter 9 monitor 267
- Traffic log 268
- Connection log 272
- Definition 272
- Download connection logs 272
- Clear connection logs 273
- Enable log mail support syslog setting 274
- Enter to the log backup window 274
- Log backup 274
- Accounting report 276
- Accounting report can be divided into three parts setting outbound accounting report and 276
- Accounting report setting 276
- Define the required fields of accounting report 276
- Enable accounting report setting 276
- Outbound accounting report 276
- Setting 276
- The inbound accounting report 276
- Inbound accounting report 278
- Outbound 279
- Inbound 283
- Statistics 286
- Define the required fields of statistics 287
- Wan statistics 287
- Policy statistics 290
- Remote monitor the internal pc 292
- Wake on lan 292
- Interface status 293
- Status 293
- Authentication 295
- Arp table 296
- Dhcp clients 297
Похожие устройства
- Singer HEAVY DUTY 4411 Инструкция по эксплуатации
- Alienware x51-4903 Инструкция по эксплуатации
- Planet CS-1000 Инструкция по эксплуатации
- Singer BRILLIANCE 6160 Инструкция по эксплуатации
- Planet CS-2000 Инструкция по эксплуатации
- Alienware x51-4910 Инструкция по эксплуатации
- Singer FASHION MATE 7256 Инструкция по эксплуатации
- Planet DKVM-1700 Инструкция по эксплуатации
- HP Omni 27-1000er H1F63EA Инструкция по эксплуатации
- Singer LIMITED EDITION 160 Инструкция по эксплуатации
- Planet IKVM-8000 Инструкция по эксплуатации
- Samsung S24B300BL Инструкция по эксплуатации
- Singer PROMISE 1408 Инструкция по эксплуатации
- Planet KVM-201 Инструкция по эксплуатации
- Samsung GT-P3100 8Gb Silver Инструкция по эксплуатации
- Singer TRADITION 2250 Инструкция по эксплуатации
- Planet KVM-401 Инструкция по эксплуатации
- Samsung GT-P3100 8Gb White Инструкция по эксплуатации
- Singer SIMPLE 3223 Инструкция по эксплуатации
- Planet KVM-210 Инструкция по эксплуатации
Скачать
Случайные обсуждения