Home
Главная
Planet
Межсетевые Экраны
MH-2001
Инструкция по эксплуатации Страница: 56

Planet MH-2001 Инструкция по эксплуатации онлайн [56/297] 66185

MH-2001 Multi-Homing Security Gateway User’s Manual

- 50 -

Содержание

Mh 2001 1
Multi homing security gateway 1
User s manual 1
Ce mark warning 2
Copyright 2
Disclaimer 2
Federal communication commission interference statement 2
Mh 2001 multi homing security gateway user s manual 2
Trademarks 2
Customer service 3
Fcc caution 3
Mh 2001 multi homing security gateway user s manual 3
R tte compliance statement 3
Revision 3
Safety 3
Weee caution 3
Table of contents 4
Chapter 1 introduction 7
Features 7
Mh 2001 front view 8
Package contents 8
Mh 2001 rear panel 9
Specification 10
Chapter 2 hardware installation 11
Installation requirements 11
Internet 12
Operation mode 12
Transparent mode connection example 12
Nat mode connecting example 13
Chapter 3 getting started 14
Step 1 14
Step 2 14
Web configuration 14
Configure wan 1 interface 15
Configure dmz interface 17
Configure policy 17
Configure wan 2 interface 17
Step 1 17
Step 2 17
Step 3 17
Step 4 18
Administration 19
Chapter 4 system 19
Define the required fields of administrator 19
Adding a new sub administrator 20
Changing the main sub administrator s password 20
Removing a sub administrator 21
Add permitted ips 22
Before canceling the http selection of interface must set up the permitted ips first otherwise it would 22
Cause the situation of cannot enter webui by appointed interface 22
Mh 2001 that administrator enter lan wan or dmz interface 22
Permitted ips 22
To make permitted ips be effective it must cancel the ping and http selection in the webui of 22
Software update 23
Configure 24
Entering the settings window 24
Exporting mh 2001 settings 24
Setting 24
Importing mh 2001 settings 25
Enabling e mail alert notification 26
Restoring factory default settings 26
System name setting 26
Web management wan interface 27
Dynamic routing ripv2 28
Mtu set networking packet length 28
Sip protocol pass through 29
To appliance packets log 29
Date time 30
System reboot 30
Multiple subnet 31
Nat mode 31
Add a multiple subnet with nat mode 32
Add a multiple subnet with routing mode 32
Multiple subnet settings 32
Adding a multiple subnet with routing mode 33
Adding a new static route 34
Entering the route table screen 34
Route table 34
Entering the dhcp window 35
Dynamic dns 36
Enabling dhcp support 36
Add dynamic dns setting 37
Click on s 37
Ign up then can enter the website of the 37
Provider 37
Host table 38
Language 38
Mh 2001 that is the default gateway 38
To use host table the user pc s first dns server must be the same as the lan port or dmz port ip of 38
Logout 39
Step 1 39
Step 2 39
Chapter 5 interface 40
Entering the interface menu 40
Modify the interface settings 40
Setting wan interface address 42
Setting dmz interface address nat mode 46
Setting dmz interface address transparent mode 47
Address 48
Chapter 6 policy object 48
Definition 48
Entering the lan window 48
How to use address table 48
Adding a new lan address 49
Adding a lan group 50
Definitions lan group 50
Entering the lan group window 50
Lan group 50
Definitions 51
Entering the wan window 51
Adding a new wan address 52
Definitions 52
Entering the wan group window 52
Wan group 52
Adding an wan group 53
Entering the dmz window 53
Adding a new dmz address 54
Definition 54
Adding a dmz group 55
Definitions 55
Dmz group 55
Entering the dmz group window 55
Example1 57
Under dhcp situation assign the specific ip to static users and restrict them to access ftp net service only through policy 57
Example2 59
Setup a policy that only allows partial users to connect with specific ip external specific ip 59
Pre defined 62
Service 62
Custom 63
Definitions 63
Entering the custom window 63
Icons and descriptions 63
Adding a new service 64
Entering the group window 64
Adding service groups 65
Definitions 65
Adding a new schedule 66
Definitions 66
Entering the schedule window 66
Schedule 66
Add new qos 68
Configuration of qos 68
Definitions 68
Auth setting 69
Authentication 69
Configuration of authentication 69
Adding a new auth user 70
Auth user 70
Definitions 70
Auth user group 73
Radius server 76
To plan the users connect to the wan through the authenticaton in policy to use the 76
Wan radius server windows 2003 server built in authentication 76
Select md5 challenge 86
To plan the users connect to the wan through the authentication by policy to use the wan pop3 server authentication 96
Content blocking 98
Url blocking 98
Script blocking 100
Download blocking 101
Upload blocking 102
Im p2p blocking 103
Virtual server 104
Make a single server that provides several services such as ftp web and mail to provide service by policy 105
Mapped ip 105
Make several servers that provide a single service to provide service through policy by virtual server take web service for example 108
Virtual server 1 4 108
Example 117
To access the static subnet resources via the ipsec vpn connection between two mh 2001 appliances 117
Vpn test environment 117
The default gateway of company a is the mh 2001 lan ip 192 68 0 follow the steps 118
The default gateway of company b is the lan ip of the mh 2001 192 68 0 follow the steps below 124
Example 130
Test environment 130
The deployment 130
The way to set the mh 2001 appliance ipsec vpn connection in windows 2000 130
Following settings 131
The a company s default gateway is the lan ip 192 68 0 in the mh 2001 add the 131
The b company s real ip is 211 2 2 2 add the following settings 137
Example 188
Test environment 188
The way to set the ipsec vpn connection between two mh 2001 appliances aggressive mode the ipsec algorithm 3des encryption md5 authentication 188
Settings 189
The a company s default gateway is the mh 2001 lan ip 192 68 0 make the following 189
Settings 195
The b company s default gateway is the mh 2001 s lan ip 192 68 0 add the following 195
Example 201
Test environment 201
The deployment 201
The way to set the ipsec vpn connection between two mh 2001 appliances the gre packets the ipsec algorithm 3des encryption md5 authentication 201
The a company s default gateway is the lan ip 192 68 0 in mh 2001 202
The b company s default gateway is the lan ip 192 68 0 of mh 2001 add the following settings 208
Example 214
Setting pptp vpn connection between two mh 2001 214
Test environment 214
The deployment 214
The default gateway of company a is the lan ip of the mh 2001 192 68 0 follow the steps below 215
The default gateway of company b is the lan ip of the mh 2001 192 68 0 follow the steps below 220
Example 224
Test environment 224
The deployment 224
The way to set the mh 2001 appliance pptp vpn connection in windows 2000 224
The a company s default gateway is the lan ip 192 68 0 in mh 2001 add the following settings 225
The b company s pc use the real ip 211 2 2 2 add the following settings 230
Chapter 7 policy 241
Define the required fields of policy 241
Outgoing 244
Enabled monitoring function 245
Set up the policy that can monitor the internal users take logging statistics and alarm 245
Threshold for example 245
For example 248
Incoming 248
The external user control the internal pc through remote control software take pcanywhere 248
Wan to dmz lan to dmz 250
Adding a dmz to wan and dmz to lan policy 253
Dmz to wan dmz to lan 253
Example set a mail server to allow the internal and external users to receive and send e mail 253
Under dmz transparent mode 253
Chapter 8 anomaly flow ip 259
In this chapter we will make the introduction and settings of anomaly flow ip 259
To alert and block the external or internal anomalous data packets 262
Chapter 9 monitor 267
Traffic log 268
Connection log 272
Definition 272
Download connection logs 272
Clear connection logs 273
Enable log mail support syslog setting 274
Enter to the log backup window 274
Log backup 274
Accounting report 276
Accounting report can be divided into three parts setting outbound accounting report and 276
Accounting report setting 276
Define the required fields of accounting report 276
Enable accounting report setting 276
Outbound accounting report 276
Setting 276
The inbound accounting report 276
Inbound accounting report 278
Outbound 279
Inbound 283
Statistics 286
Define the required fields of statistics 287
Wan statistics 287
Policy statistics 290
Remote monitor the internal pc 292
Wake on lan 292
Interface status 293
Status 293
Authentication 295
Arp table 296
Dhcp clients 297

Planet MH-2001 Инструкция по эксплуатации онлайн [56/297] 66185

Содержание

Похожие устройства