BaseWall Dual WAN VPN Firewall VPN 2000 Betriebsanweisung

Dual WAN VPN Firewall VPN 2000 User’s Guide Vers

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 10 • Enter the name of the firmware upgrade file on your PC, or click the "Browse"

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 11 2: Quick Installation Overview Basic Setup of your Dual WAN VPN Firewall involves the follo

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 12 7 After the login, you will then see the Admin Password screen, as shown below. Assign

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 13 Figure 2-3: LAN & DHCP Setup 9. If your LAN already has a DHCP Server, and you wish

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 142. Installing the Dual WAN VPN Firewall in your LAN 13. Ensure the Dual WAN VPN Firewall a

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 153. Quick Installation - LAN & DHCP Select LAN & DHCP from the menu. You will see a

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 16 Quick installation – LAN & DHCP LAN IP Configuration: • IP address - for the Dual WA

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 17 DHCP Client List This table shows the IP addresses which have been allocated by the DHCP

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 18 Quick installation - Primary setup Connection mode • Enable Select this if you have c

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 19 3 : Loadbalancing This screen is only operational if using Internet connections on both W

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 2TABLE OF CONTENTS 1: INTRODUCTION...

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 20 4 : Advanced WAN Port options Connection validation • Health Check – Disable will not

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 21 Transparant bridge option • Bridge Mode – If set to Enable, this WAN port does not use N

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 22 PPPoE The screen is required in order to use multiple PPPoE sessions on the same WAN port.

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 23 Advanced WAN PPTP Advanced WAN WAN Port - Select the desired WAN port (click desired WA

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 24 5 : Advanced Configuration Advanced configuration – Host IP This feature is used in t

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 25• Select Group – Select the group you wish to put this host into. • Reserve in DHCP – Sele

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 26 Advanced configuration – Routing Routing This section is only relevant if your LAN has

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 27• Netmask –The Network Mask for the remote LAN segment. For class "C" networks, t

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 28Metric 3 For Router A's Default Route Destination IP Address 0.0.0.0 Network Mask 0.0

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 29 Note that, in this illustration, both Internet users are connecting to the same IP Address,

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 3 Upgrade Firmware...

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 30 Advanced configuration – virtual server Virtual Server Configuration • Enable – The en

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 31• Delete – Delete the selected entry. • Update – Save any changes you have made to the cur

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 32Advanced configuration - Special Application If you use Internet applications which have non

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 33 Special Application List - This shows the details of all Special Applications which are c

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 34 Dynamic DNS Service This pull-down menu can Enable/Disable the Dynamic DNS feature, and

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 35• The "Force Update" button will update your record on the Dynamic DNS Server imm

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 36Advanced Configuration - Multi DMZ This feature allows each WAN port IP address to be associ

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 37Advanced Configuration - UpnP Setup With UPnP (Universal Plug & Play) function, it can e

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 38 Advanced Configuration – NAT Setting NAT Configuration • NAT Routing – You can enable

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 39NAT alias list - NAT Alias List shows the list of all NAT alias configuration data which are

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 4 1:Introduction Congratulations on the purchase of your new Dual WAN VPN Firewall. The Dual

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 40 Advanced Configuration – Advanced Feature External Filters Configuration • IDENT Port

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 41 Interface Binding - SMTP (Simple Mail Transport Protocol) Binding Unless you are using E-m

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 426 – Security Management Security Management – Block URL This feature allows you to block

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 43Security Management – Access Filter The network Administrator can use the Access Filter t

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 44 Port Blocking – There are two possible settings : • No Filtering - all ports are open •

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 45Security Management – System Filter Exeption Sysfilter exeption - System Filter Exception

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 46 7 : VPN Configuration Virtual Private Network (VPN) uses encryption and authentication to

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 47 Tunnel to BaseWall Unit - This describes how to setup an IPSec tunnel to a BaseWall VPN 10

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 48• Action Connect – this button will initiate the tunnel Submit Query – this button will a

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 49 VPN Configuration – Advanced settings When you use the tunnel to BaseWall unit or tunnel t

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 5• High-Performance multi ADSL Modem Support The Dual WAN VPN Firewall has two WAN ports, all

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 50Security level • Encryption Method – It specifies the encryption mechanism to use. Data en

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 51 IPSec policy options • Tunnel Attribute – The attributes for the tunnel that you ju

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 52 • Set DF Flag- If this DF (Do not Fragment) flag is set, it means the fragmentation of th

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 53 VPN Configuration – SA List VPN configuration – SA list The list will display the d

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 54 VPN Configuration – VPN Log You can monitor the VPN status through the VPN log web page. T

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 55 8: QoS Configuration QoS Configuration – QoS Setup The Dual WAN VPN Firewall provides QoS,

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 56QoS Configuration – QoS Setup QoS Setup QoS Feature • Enable QoS – This will allow users

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 57 Policy Priority : • Policy Name List – When adding a new Policy, ignore this list. To edi

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 589 : Management Assistant Management assistant – Admin Password Enter the desired passwor

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 59 Management Assistant – Email Alert This feature will send a warning Email, inform syst

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 6• System Filter Exception It will reject every packet with an unrecognized port to avoid por

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 60• Ping Attack Notification - By default this feature is Disabled. • Ping Before Notificat

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 61 Management Asssistant – Syslog This feature can send real time system information on the

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 62 Management Asssistant - Upgrade Firmware This Upgrade Firmware Screen allows you to upgra

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 63 10: Device Status Once both the Dual WAN VPN Firewall and the PCs are configured, operation

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 64 Device Status - WAN status NAT Statistics This section displays data for each WAN port

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 65 Active WAN IP Info – There is one (1) row for each active connection, for each connection t

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 66 Device information – Device Information Device Information • Firmware Version – Versio

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 67 If the "Restore Default Value" button on this screen is clicked: • ALL

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 68 Appendix A Specifications Model BaseWall VPN 2000 Dual WAN Firewall Dimensions 246mm (

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 69 Appendix B Windows TCP/IP Setup Overview TCP/IP Settings If using the default Load Balance

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 7• UPnP To “Enable” UPnP (Universal Plug & Play), the Dual WAN VPN Firewall will become o

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 70 Ensure your TCP/IP settings are correct, as follows: Using DHCP To use DHCP, select the

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 71 • On the DNS Configuration tab, ensure Enable DNS is selected. If the DNS Server Search Ord

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 72 Figure B-6: TCP/IP Properties (Win 2000) • Ensure your TCP/IP settings

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 73Checking TCP/IP Settings - Windows XP: 7. Select Control Panel - Network Connection. • Righ

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 74 Figure B-8: TCP/IP Properties (

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 75 Appendix C Troubleshooting Overview This chapter covers some common problems that may be e

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 76 Appendix D : IPSec Tunnel Examples VPN Configuration – Examples Tunnel to BaseWall Unit V

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 77 First we will make settings in the VPN 3000 Next we will make settings for the VPN 2000

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 78

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 8Package Contents The following items should be included: • The Dual WAN VPN Firewall Unit •

BaseWall, Tel: +31-74-2491004, Fax: +31-74-2593934 9 Some Status and Error conditions are indicated by combinations of LED’s, as shown below LE