Asus TV Box Manuale utente

Internet Security

Router

User’s Manual

Revision 1.1

Oct. 30, 2003

ii

Copyright Information

No part of this manual, including the products and software described in it, may be reproduced, transmitted,

transcribed, stored in a retrieval system, or translated into any language in any form or by any means, except

documentation kept by the purchaser for backup purposes, without the express written permission of

ASUSTeK COMPUTER INC. (“ASUS”).

ASUS PROVIDES THIS MANUAL “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR

IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OR CONDITIONS OF

MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL ASUS, ITS

DIRECTORS, OFFICERS, EMPLOYEES OR AGENTS BE LIABLE FOR ANY INDIRECT, SPECIAL,

INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING DAMAGES FOR LOSS OF PROFITS, LOSS

OF BUSINESS, LOSS OF USE OR DATA, INTERRUPTION OF BUSINESS AND THE LIKE), EVEN IF

ASUS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES ARISING FROM ANY DEFECT

OR ERROR IN THIS MANUAL OR PRODUCT.

Product warranty or service will not be extended if: (1) the product is repaired, modified or altered, unless such

repair, modification of alteration is authorized in writing by ASUS; or (2) the serial number of the product is

defaced or missing.

Products and corporate names appearing in this manual may or may not be registered trademarks or

copyrights of their respective companies, and are used only for identification or explanation and to the owners’

benefit, without intent to infringe.

SPECIFICATIONS AND INFORMATION CONTAINED IN THIS MANUAL ARE FURNISHED FOR

INFORMATIONAL USE ONLY, AND ARE SUBJECT TO CHANGE AT ANY TIME WITHOUT NOTICE, AND

SHOULD NOT BE CONSTRUED AS A COMMITMENT BY ASUS. ASUS ASSUMES NO RESPONSIBILITY

OR LIABILITY FOR ANY ERRORS OR INACCURACIES THAT MAY APPEAR IN THIS MANUAL,

INCLUDING THE PRODUCTS AND SOFTWARE DESCRIBED IN IT.

iii

Table of Contents

1 Introduction...............................................1

1.1 Features..................................................................................................................1

1.2 System Requirements............................................................................................1

1.3 Using this Document..............................................................................................1

1.3.1 Notational conventions................................................................................1

1.3.2 Typographical conventions.........................................................................1

1.3.3 Special messages........................................................................................1

2 Getting to Know the Internet Security

Router.......................................................3

2.1 Parts List.................................................................................................................3

2.2 Front Panel..............................................................................................................3

2.3 Rear Panel..............................................................................................................3

2.4 Major Features........................................................................................................4

2.4.1 Firewall Features.........................................................................................4

2.4.1.1 Address Sharing and Management...............................................4

2.4.1.1 ACL (Access Control List)..............................................................5

2.4.1.2 Stateful Packet Inspection..............................................................5

2.4.1.3 Defense against DoS Attacks........................................................5

2.4.1.4 Application Command Filtering......................................................6

2.4.1.5 Application Level Gateway (ALG)..................................................6

2.4.1.6 URL Filtering....................................................................................6

2.4.1.7 Log and Alerts.................................................................................6

2.4.1.8 Remote Access...............................................................................7

2.4.2 VPN...............................................................................................................7

3 Quick Start Guide.....................................9

3.1 Part 1 — Connecting the Hardware......................................................................9

3.1.1 Step 1. Connect an ADSL or a cable modem...........................................9

3.1.2 Step 2. Connect computers or a LAN........................................................9

3.1.3 Step 3. Attach the power adapter...............................................................9

iv

3.1.4 Step 4. Turn on the Internet Security Router, the ADSL or cable modem

and power up your computers..................................................................10

3.2 Part 2 — Configuring Your Computers...............................................................11

3.2.1 Before you begin........................................................................................11

3.2.2 Windows® XP PCs:...................................................................................11

3.2.3 Windows® 2000 PCs:...............................................................................11

3.2.4 Windows® 95, 98, and Me PCs...............................................................12

3.2.5 Windows® NT 4.0 workstations:...............................................................12

3.2.6 Assigning static IP addresses to your PCs..............................................13

3.3 Part 3 — Quick Configuration of the Internet Security Router..........................14

3.3.1 Buttons Used in Setup Wizard..................................................................14

3.3.2 Setting Up the Internet Security Router....................................................14

3.3.3 Testing Your Setup....................................................................................20

3.3.4 Default Router Settings.............................................................................20

4 Getting Started with the Configuration

Manager.................................................21

4.1 Log into Configuration Manager..........................................................................21

4.2 Functional Layout.................................................................................................22

4.2.1 Setup Menu Navigation Tips.....................................................................22

4.2.2 Commonly Used Buttons and Icons.........................................................22

4.3 The Home Page of Configuration Manager.......................................................23

4.4 Overview of System Configuration......................................................................23

5 Configuring LAN Settings......................25

5.1 LAN IP Address....................................................................................................25

5.1.1 LAN IP Configuration Parameters............................................................25

5.1.2 Configuring the LAN IP Address...............................................................25

5.2 DHCP (Dynamic Host Control Protocol).............................................................26

5.2.1 What is DHCP?..........................................................................................26

5.2.2 Why use DHCP?........................................................................................27

5.2.3 Configuring DHCP Server.........................................................................27

5.2.4 Viewing Current DHCP Address Assignments........................................28

5.3 DNS.......................................................................................................................29

5.3.1 About DNS.................................................................................................29

v

5.3.2 Assigning DNS Addresses........................................................................29

5.3.3 Configuring DNS Relay.............................................................................29

5.4 Viewing LAN Statistics.........................................................................................30

6 Configuring WAN Settings.....................31

6.1 WAN Connection Mode.......................................................................................31

6.2 PPPoE...................................................................................................................31

6.2.1 WAN PPPoE Configuration Parameters..................................................31

6.2.2 Configuring PPPoE for WAN....................................................................32

6.3 Dynamic IP............................................................................................................32

6.3.1 WAN Dynamic IP Configuration Parameters...........................................32

6.3.2 Configuring Dynamic IP for WAN.............................................................33

6.4 Static IP.................................................................................................................34

6.4.1 WAN Static IP Configuration Parameters................................................34

6.4.2 Configuring Static IP for WAN...................................................................34

6.5 Viewing WAN Statistics........................................................................................35

7 Configuring Routes................................37

7.1 Overview of IP Routes.........................................................................................37

7.1.1 Do I need to define IP routes?..................................................................37

7.2 Dynamic Routing using RIP (Routing Information Protocol).............................38

7.2.1 Enabling/Disabling RIP..............................................................................38

7.3 Static Routing........................................................................................................38

7.3.1 Static Route Configuration Parameters....................................................38

7.3.2 Adding Static Routes.................................................................................38

7.3.3 Deleting Static Routes...............................................................................38

7.3.4 Viewing the Static Routing Table..............................................................39

8 Configuring DDNS..................................41

8.1 DDNS Configuration Parameters........................................................................42

8.2 Access DDNS Configuration Page.....................................................................43

8.3 Configuring RFC-2136 DDNS Client..................................................................43

8.4 Configuring HTTP DDNS Client..........................................................................44

vi

9 Configuring Firewall/NAT Settings.........45

9.1 Firewall Overview.................................................................................................45

9.1.1 Stateful Packet Inspection.........................................................................45

9.1.2 DoS (Denial of Service) Protection...........................................................45

9.1.3 Firewall and Access Control List (ACL)....................................................45

9.1.3.1 Priority Order of ACL Rule............................................................45

9.1.3.2 Tracking Connection State...........................................................46

9.1.4 Default ACL Rules.....................................................................................46

9.2 NAT Overview.......................................................................................................46

9.2.1 Static (One to One) NAT...........................................................................46

9.2.2 Dynamic NAT.............................................................................................47

9.2.3 NAPT (Network Address and Port Translation) or PAT (Port Address

Translation).................................................................................................48

9.2.4 Reverse Static NAT...................................................................................49

9.2.5 Reverse NAPT / Virtual Server.................................................................49

9.3 Configuring Inbound ACL Rules..........................................................................49

9.3.1 Inbound ACL Rule Configuration Parameters.........................................49

9.3.2 Access Inbound ACL Rule Configuration Page – (Firewall è Inbound

ACL)............................................................................................................52

9.3.3 Add Inbound ACL Rules............................................................................52

9.3.4 Modify Inbound ACL Rules.......................................................................53

9.3.5 Delete Inbound ACL Rules.......................................................................53

9.3.6 Display Inbound ACL Rules......................................................................53

9.4 Configuring Outbound ACL Rules.......................................................................53

9.4.1 Outbound ACL Rule Configuration Parameters......................................54

9.4.2 Access Outbound ACL Rule Configuration Page – (Firewall è

Outbound ACL)..........................................................................................56

9.4.3 Add an Outbound ACL Rule.....................................................................57

9.4.4 Modify Outbound ACL Rules....................................................................57

9.4.5 Delete Outbound ACL Rules....................................................................58

9.4.6 Display Outbound ACL Rules...................................................................58

9.5 Configuring URL Filters........................................................................................58

9.5.1 URL Filter Configuration Parameters.......................................................58

9.5.2 Access URL Filter Configuration Page – (Firewall è URL Filter)..........58

9.5.3 Add an URL Filter Rule..............................................................................59

9.5.4 Modify an URL Filter Rule.........................................................................59

vii

9.5.5 Delete an URL Filter Rule.........................................................................59

9.5.6 View Configured URL Filter Rules............................................................59

9.5.7 URL Filter Rule Example...........................................................................59

9.6 Configuring Advanced Firewall Features – (Firewall è Advanced).................60

9.6.1 Configuring Self Access Rules.................................................................60

9.6.1.1 Self Access Configuration Parameters........................................61

9.6.1.2 Access Self Access Rule Configuration Page – (Firewall è

Advanced è Self Access)............................................................61

9.6.1.3 Add a Self Access Rule................................................................61

9.6.1.4 Modify a Self Access Rule............................................................62

9.6.1.5 Delete a Self Access Rule............................................................62

9.6.1.6 View Configured Self Access Rules............................................62

9.6.2 Configuring Service List.............................................................................62

9.6.2.1 Service List Configuration Parameters........................................63

9.6.2.2 Access Service List Configuration Page – (Firewall è Advanced

è Service).....................................................................................63

9.6.2.3 Add a Service................................................................................63

9.6.2.4 Modify a Service............................................................................64

9.6.2.5 Delete a Service............................................................................64

9.6.2.6 View Configured Services............................................................64

9.6.3 Configuring DoS Settings..........................................................................64

9.6.3.1 DoS Protection Configuration Parameters..................................64

9.6.3.2 Access DoS Configuration Page – (Firewall è Advanced è

DoS)...............................................................................................66

9.6.3.3 Configuring DoS Settings.............................................................66

9.7 Firewall Policy List – (Firewall è Policy List).....................................................66

9.7.1 Configuring Application Filter....................................................................67

9.7.1.1 Application Filter Configuration Parameters................................67

9.7.1.2 Access Application Filter Configuration Page – (Firewall è

Policy List è Application Filter)....................................................68

9.7.1.3 Add an Application Filter...............................................................69

9.7.1.3.1 FTP Example: Add a FTP Filter Rule to Block FTP DELETE

Command......................................................................................69

9.7.1.3.2 HTTP Example: Add a HTTP Filter Rule to Block JAVA Applets

and Java Archives.........................................................................71

9.7.1.4 Modify an Application Filter..........................................................72

9.7.1.5 Delete an Application Filter...........................................................73

9.7.2 Configuring IP Pool....................................................................................73

9.7.2.1 IP Pool Configuration Parameters...............................................73

viii

9.7.2.2 Access IP Pool Configuration Page – (Firewall è Policy List è

IP Pool)..........................................................................................74

9.7.2.3 Add an IP Pool..............................................................................74

9.7.2.4 Modify an IP Pool..........................................................................74

9.7.2.5 Delete an IP Pool..........................................................................75

9.7.2.6 IP Pool Example............................................................................75

9.7.3 Configuring NAT Pool................................................................................76

9.7.3.1 NAT Pool Configuration Parameters...........................................76

9.7.3.2 Access NAT Pool Configuration Page – (Firewall è Policy List

è NAT Pool).................................................................................77

9.7.3.3 Add a NAT Pool.............................................................................78

9.7.3.4 Modify a NAT Pool........................................................................78

9.7.3.5 Delete a NAT Pool........................................................................78

9.7.3.6 NAT Pool Example........................................................................78

9.7.4 Configuring Time Range...........................................................................80

9.7.4.1 Time Range Configuration Parameters.......................................80

9.7.4.2 Access Time Range Configuration Page – (Firewall è Policy

List è Time Range)......................................................................81

9.7.4.3 Add a Time Range........................................................................81

9.7.4.4 Modify a Time Range....................................................................81

9.7.4.5 Delete a Time Range....................................................................82

9.7.4.6 Delete a Schedule in a Time Range............................................82

9.7.4.7 Time Range Example...................................................................82

9.8 Firewall Statistics – Firewall è Statistics...........................................................83

10 Configuring VPN....................................85

10.1 Default Parameters..............................................................................................85

10.2 VPN Tunnel Configuration Parameters..............................................................87

10.3 Establish VPN Connection Using Automatic Keying.........................................90

10.3.1 Add a Rule for VPN Connection Using Pre-shared Key.........................91

10.3.2 Modify VPN Rules......................................................................................92

10.3.3 Delete VPN Rules......................................................................................92

10.3.4 Display VPN Rules....................................................................................92

10.4 Establish VPN Connection Using Manual Keys.................................................93

10.4.1 Add a Rule for VPN Connection Using Manual Key...............................93

10.4.2 Modify VPN Rules......................................................................................94

10.4.3 Delete VPN Rules......................................................................................94

ix

10.4.4 Display VPN Rules....................................................................................94

10.5 VPN Statistics.......................................................................................................95

10.6 VPN Connection Examples.................................................................................96

10.6.1 Intranet Scenario – firewall + VPN and no NAT for VPN traffic..............96

10.6.1.1 Configure Rules on Internet Security Router 1 (ISR1)...............97

10.6.1.2 Configure Rules on Internet Security Router 2 (ISR2)...............98

10.6.1.3 Establish Tunnel and Verify........................................................100

10.6.2 Extranet Scenario – firewall + static NAT + VPN for VPN traffic..........100

10.6.2.1 Setup the Internet Security Routers...........................................101

10.6.2.2 Configure VPN Rules on ISR1...................................................102

10.6.2.3 Configure VPN Rules on ISR2...................................................104

10.6.2.4 Establish Tunnel and Verify........................................................107

11 Configuring Remote Access................109

11.1 Remote Access..................................................................................................109

11.2 Manage User Groups and Users......................................................................109

11.2.1 User Group Configuration Parameters...................................................109

11.2.2 Access User Group Configuration Page – (Remote Access è User

Group).......................................................................................................110

11.2.3 Add a User Group and/or a User............................................................110

11.2.4 Modify a User Group or a User...............................................................111

11.2.5 Delete a User Group or a User...............................................................111

11.2.6 User Group and Users Configuration Example.....................................112

11.3 Configure Group ACL Rules..............................................................................112

11.3.1 Group ACL Specific Configuration Parameters.....................................112

11.3.2 Access Group ACL Configuration Page – (Remote Access è Group

ACL)..........................................................................................................113

11.3.3 Add/Modify/Delete Group ACL Rules.....................................................113

11.4 Remote User Login Process.............................................................................113

11.5 Configure Firewall for Remote Access.............................................................115

11.6 Virtual IP Address Configuration for Remote Access VPN.............................116

11.6.1 Access VPN Virtual IP Configuration Page – (Remote Access è VPN

Virtual IP)..................................................................................................116

11.6.2 Assign VPN Virtual IP Address for Remote Access Users...................116

11.6.3 Change Virtual IP Assignments for Remote Access Users..................117

11.6.4 Delete Virtual IP Address for Remote Access Users............................117

11.7 Configure VPN for Remote Access..................................................................118

x

11.7.1 Main Mode Remote Access....................................................................118

11.7.2 Aggressive Mode Remote Access.........................................................120

12 System Management...........................123

12.1 Configure System Services...............................................................................123

12.2 Change the Login Password.............................................................................124

12.3 Modify System Information................................................................................124

12.4 Setup Date and Time.........................................................................................125

12.4.1 View the System Date and Time............................................................126

12.5 System Configuration Management.................................................................126

12.5.1 Reset System Configuration...................................................................126

12.5.2 Backup System Configuration................................................................127

12.5.3 Restore System Configuration................................................................127

12.6 Upgrade Firmware..............................................................................................128

12.7 Reset the Internet Security Router....................................................................129

12.8 Logout Configuration Manager..........................................................................130

13 ALG Configuration................................131

14 IP Addresses, Network Masks, and

Subnets................................................135

14.1 IP Addresses......................................................................................................135

14.1.1 Structure of an IP address.......................................................................135

14.2 Network classes.................................................................................................135

14.3 Subnet masks.....................................................................................................136

15 Troubleshooting....................................139

15.1 Diagnosing Problem using IP Utilities...............................................................140

15.1.1 ping...........................................................................................................140

15.1.2 nslookup...................................................................................................141

16 Glossary...............................................143

xi

17 Index.....................................................149

List of Figures

Figure 2.1. Front Panel LEDs.....................................................................................................................................3

Figure 2.2. Rear Panel Connections..........................................................................................................................3

Figure 3.1. Overview of Hardware Connections.....................................................................................................10

Figure 3.2. Login Screen...........................................................................................................................................14

Figure 3.3. Setup Wizard Home Page.....................................................................................................................15

Figure 3.4. Setup Wizard – Password Configuration Page....................................................................................15

Figure 3.5. Setup Wizard – System Identity Configuration Page..........................................................................16

Figure 3.6. Setup Wizard – Date/Time Configuration Page...................................................................................16

Figure 3.7. Setup Wizard – LAN IP Configuration Page........................................................................................17

Figure 3.8. Setup Wizard – DHCP Server Configuration Page.............................................................................17

Figure 3.9. Setup Wizard – WAN PPPoE Configuration Page..............................................................................18

Figure 3.10. Setup Wizard – WAN Dynamic IP Configuration Page.....................................................................18

Figure 3.11. Setup Wizard – WAN Static IP Configuration Page..........................................................................19

Figure 4.1. Configuration Manager Login Screen...................................................................................................21

Figure 4.2. Typical Configuration Manager Page...................................................................................................22

Figure 4.3. Setup Wizard Home Page.....................................................................................................................23

Figure 4.4. System Information Page......................................................................................................................24

Figure 5.1. LAN IP Address Configuration Page....................................................................................................26

Figure 5.2. DHCP Configuration Page....................................................................................................................27

Figure 5.3. LAN Statistics Page...............................................................................................................................30

Figure 6.1. WAN PPPoE Configuration Page.........................................................................................................31

Figure 6.2. WAN Dynamic IP (DHCP client) Configuration Page..........................................................................33

Figure 6.3. WAN Static IP Configuration Page.......................................................................................................34

Figure 6.4. WAN Statistics Page..............................................................................................................................35

Figure 7.1. Routing Configuration Page.................................................................................................................37

Figure 8.1. Network Diagram for RFC-2136 DDNS...............................................................................................41

Figure 8.2. Network Diagram for HTTP DDNS.......................................................................................................42

Figure 8.3. RFC-2136 DDNS Configuration Page..................................................................................................43

Figure 8.4. HTTP DDNS Configuration Page.........................................................................................................44

Figure 9.1 Static NAT – Mapping Four Private IP Addresses to Four Globally Valid IP Addresses...................47

Figure 9.2 Dynamic NAT – Four Private IP addresses Mapped to Three Valid IP Addresses...........................47

Figure 9.3 Dynamic NAT – PC-A can get an NAT association after PC-B is disconnected................................47

xii

Figure 9.4 NAPT – Map Any Internal PCs to a Single Global IP Address............................................................48

Figure 9.5 Reverse Static NAT – Map a Global IP Address to An Internal PC....................................................48

Figure 9.6 Reverse NAPT – Relayed Incoming Packets to the Internal Host Base on the Protocol, Port

Number or IP Address......................................................................................................................................48

Figure 9.7. Inbound ACL Configuration Page.........................................................................................................49

Figure 9.8. Inbound ACL configuration example....................................................................................................52

Figure 9.9. Outbound ACL Configuration Page......................................................................................................54

Figure 9.10. Outbound ACL Configuration Example..............................................................................................57

Figure 9.11. URL Filter Configuration Page............................................................................................................59

Figure 9.12. URL Filter Rule Example.....................................................................................................................60

Figure 9.13. Self Access Rule Configuration Page.................................................................................................61

Figure 9.14. Service List Configuration Page..........................................................................................................63

Figure 9.15. DoS Configuration Page......................................................................................................................66

Figure 9.16. Application Filter Configuration Page.................................................................................................69

Figure 9.17 Network Diagram for FTP Filter Example – Blocking FTP Delete Command..................................69

Figure 9.18. FTP Filter Example – Configuring FTP Filter Rule............................................................................70

Figure 9.19 FTP Filter Example – Firewall Configuration Assistant......................................................................70

Figure 9.20 FTP Filter Example – Add an FTP Filter to Deny FTP Delete Command........................................70

Figure 9.21. FTP Filter Example – Associate FTP Filter Rule to an ACL Rule....................................................71

Figure 9.22. HTTP Filter Example – Configuring HTTP Filter Rule.......................................................................71

Figure 9.23. HTTP Filter Example – Associate HTTP Filter Rule to an ACL Rule...............................................72

Figure 9.24. Modify an Application Filter.................................................................................................................73

Figure 9.25 IP Pool Configuration Page..................................................................................................................74

Figure 9.26. Network Diagram for IP Pool Configuration.......................................................................................75

Figure 9.27. IP Pool Example – Add Two IP Pools – MISgroup1 and MISgroup2..............................................76

Figure 9.28. IP Pool Example – Deny QUAKE-II Connection for MISgroup1......................................................76

Figure 9.29. NAT Pool configuration page..............................................................................................................77

Figure 9.30. Network Diagram for NAT Pool Example...........................................................................................79

Figure 9.31. NAT Pool Example – Create a Static NAT Pool................................................................................79

Figure 9.32. NAT Pool Example – Associate a NAT Pool to an ACL Rule...........................................................80

Figure 9.33. Time Range Configuration Page........................................................................................................81

Figure 9.34. Time Range Example – Create a Time Range..................................................................................82

Figure 9.35. Time Range Example – Deny FTP Access for MISgroup1 During OfficeHours.............................82

Figure 9.36. Firewall active connections statistics..................................................................................................83

Figure 10.1. VPN Tunnel Configuration Page – Pre-shared Key Mode...............................................................91

Figure 10.2. VPN Tunnel Configuration Page – Manual Key Mode......................................................................93

Figure 10.3. VPN Statistics Page.............................................................................................................................96

xiii

Figure 10.4. Typical Intranet Network Diagram......................................................................................................97

Figure 10.5. Intranet VPN Policy Configuration on ISR1........................................................................................98

Figure 10.6. Intranet VPN Policy Configuration on ISR2........................................................................................99

Figure 10.7. Typical Extranet Network Diagram...................................................................................................101

Figure 10.8. Extranet Example –VPN Policy Configuration on ISR1..................................................................102

Figure 10.9. Extranet Example – Outgoing NAT Pool Configuration on ISR1...................................................103

Figure 10.10. Extranet Example – Incoming NAT Pool Configuration on ISR1.................................................103

Figure 10.11. Extranet Example – Outbound ACL Rule on ISR1........................................................................104

Figure 10.12. Extranet Example – Inbound ACL Rule on ISR1...........................................................................104

Figure 10.13. Extranet Example –VPN Policy Configuration on ISR2................................................................105

Figure 10.14. Extranet Example – Outgoing NAT Pool Configuration on ISR2.................................................105

Figure 10.15. Extranet Example – Incoming NAT Pool Configuration on ISR2.................................................106

Figure 10.16. Extranet Example – Outbound ACL Rule on ISR2........................................................................106

Figure 10.17. Extranet Example – Inbound ACL Rule on ISR2...........................................................................107

Figure 11.1. User Group Configuration Page........................................................................................................110

Figure 11.2. User Group and Users Configuration Example...............................................................................112

Figure 11.3. Goup ACL Configuration Page.........................................................................................................113

Figure 11.4. Login Console.....................................................................................................................................114

Figure 11.5. Login Status Screen...........................................................................................................................114

Figure 11.6. Network Diagram for Inbound Remote Access...............................................................................114

Figure 11.7. User and User Group Configuration Example.................................................................................115

Figure 11.8. Group ACL Configuration Example..................................................................................................115

Figure 11.9. VPN Virtual IP Configuration Page...................................................................................................116

Figure 11.10. Network Diagram for VPN Remote Access...................................................................................117

Figure 11.11. Main Mode Remote Access Example – Create a User Group and Add Two Users into the Group

..........................................................................................................................................................................118

Figure 11.12. Main Mode Remote Access Example – Configure the Virtual IP address..................................119

Figure 11.13. Main Mode Remote Access Example – Remote VPN Connection Setup for “RoadWarrior”

Group................................................................................................................................................................119

Figure 11.14. Aggressive Mode Remote Access Example – Create a User Group and Add Two Users into the

Group................................................................................................................................................................120

Figure 11.15. Aggressive Mode Remote Access Example – Configure the Virtual IP address........................120

Figure 11.16. Aggressive Mode Remote Access Example – Remote VPN Connection Setup for “RoadWarrior”

Group................................................................................................................................................................121

Figure 12.1. System Services Configuration Page...............................................................................................123

Figure 12.2. Password Configuration Page..........................................................................................................124

Figure 12.3. System Information Configuration Page...........................................................................................125

Figure 12.4. Date and Time Configuration Page..................................................................................................125

xiv

Figure 12.5. Default Setting Configuration Page..................................................................................................126

Figure 12.6. Backup System Configuration Page.................................................................................................127

Figure 12.7. Restore System Configuration Page................................................................................................128

Figure 12.8. Windows File Browser.......................................................................................................................128

Figure 12.9. Firmware Upgrade Page...................................................................................................................129

Figure 12.10. Configuration Manager Reset Page...............................................................................................129

Figure 12.11. Configuration Manager Logout Page.............................................................................................130

Figure 12.12. Confirmation for Closing Browser (IE)............................................................................................130

Figure 15.1. Using the ping Utility..........................................................................................................................141

Figure 15.2. Using the nslookup Utility..................................................................................................................142

List of Tables

Table 2.1. Front Panel Label and LEDs....................................................................................................................3

Table 2.2. Rear Panel Labels and LEDs...................................................................................................................4

Table 2.3. DoS Attacks...............................................................................................................................................5

Table 2.4. VPN Features of the Internet Security Router.........................................................................................7

Table 3.1. LED Indicators.........................................................................................................................................10

Table 3.2. Default Settings Summary......................................................................................................................20

Table 4.1. Description of Commonly Used Buttons and Icons..............................................................................22

Table 5.1. LAN IP Configuration Parameters..........................................................................................................25

Table 5.2. DHCP Configuration Parameters...........................................................................................................28

Table 5.3. DHCP Address Assignment...................................................................................................................28

Table 6.1. WAN PPPoE Configuration Parameters...............................................................................................32

Table 6.2. WAN Dynamic IP Configuration Parameters........................................................................................32

Table 6.3. WAN Static IP Configuration Parameters..............................................................................................34

Table 7.1. Static Route Configuration Parameters.................................................................................................38

Table 8.1. DDNS Configuration Parameters...........................................................................................................42

Table 9.1. Inbound ACL Rule Configuration Parameters.......................................................................................49

Table 9.2. Outbound ACL Rule Configuration Parameters....................................................................................54

Table 9.3. URL Filter Configuration Parameters.....................................................................................................58

Table 9.4. Self Access Configuration Parameters..................................................................................................61

Table 9.5. Service List configuration parameters....................................................................................................63

Table 9.6. DoS Protection Configuration Parameters............................................................................................64

Table 9.7. Application Filter Configuration Parameters..........................................................................................67

Table 9.8. IP Pool Configuration Parameters..........................................................................................................73

Table 9.9. NAT Pool Configuration Parameters......................................................................................................76

xv

Table 9.10. Time Range Configuration Parameters...............................................................................................80

Table 10.1. Default Connections in the Internet Security Router...........................................................................85

Table 10.2. Pre-configured IKE proposals in the Internet Security Router...........................................................85

Table 10.3. Pre-configured IPSec proposals in the Internet Security Router.......................................................86

Table 10.4. VPNTtunnel Configuration Parameter.................................................................................................87

Table 10.5. VPN Statistics........................................................................................................................................95

Table 10.6. Outbound Un-translated Firewall Rule for VPN Packets on ISR1.....................................................98

Table 10.7. Inbound Un-translated Firewall Rule for VPN Packets on ISR1........................................................98

Table 10.8. Outbound Un-translated Firewall Rule for VPN Packets on ISR1.....................................................99

Table 10.9. Inbound Un-translated Firewall Rule for VPN Packets on ISR1......................................................100

Table 11.1. User Group Configuration Parameters..............................................................................................109

Table 11.2. Group ACL Specific Configuration Parameters................................................................................112

Table 13.1. Supported ALG....................................................................................................................................131

Table 14.1. IP Address structure............................................................................................................................135

Internet Security Router User’s Manual Chapter 1. Introduction

1 Introduction

Congratulations on becoming the owner of the Internet Security Router. Your LAN (local area network) will

now be able to access the Internet using your high-speed broadband connection such as those with ADSL or

cable modem.

This User Manual will show you how to set up the Internet Security Router, and how to customize its

configuration to get the most out of this product.

1.1 Features

„ 10/100Base-T Ethernet router to provide Internet connectivity to all computers on your LAN

„ Firewall, NAT (Network Address Translation), and IPSec VPN functions to provide secure Internet

access for your LAN

„ Automatic network address assignment through DHCP Server

„ Services including IP route, DNS and DDNS configuration, RIP, and IP performance monitoring

„ Configuration program accessible via a web browser, such as Microsoft Internet Explorer 5.5,

Netscape 7.0.2 or later.

1.2 System Requirements

In order to use the Internet Security Router for Internet access, you must have the following:

„ ADSL or cable modem and the corresponding service up and running, with at least one public Internet

address assigned to your WAN

„ One or more computers each containing an Ethernet 10Base-T/100Base-T network interface card

(NIC)

„ (Optional) An Ethernet hub/switch, if you are connecting the device to more than four computers on an

Ethernet network.

„ For system configuration using the supplied web-based program: a web browser such as Internet

Explorer v5.5 or later.

1.3 Using this Document

1.3.1 Notational conventions

„ Acronyms are defined the first time they appear in text and in the glossary (Appendix 16).

„ For brevity, the Internet Security Router is sometimes referred to as “the router.”

„ The terms LAN and network are used interchangeably to refer to a group of Ethernet-connected

computers at one site.

1.3.2 Typographical conventions

„ Italics are used to identify terms that are defined in the glossary (Chapter 16).

„ Boldface type text is used for items you select from menus and drop-down lists, and text strings you

type when prompted by the program.

1.3.3 Special messages

This document uses the following icons to call your attention to specific instructions or explanations.

Chapter 1. Introduction Internet Security Router User’s Manual

2

Note

Provides clarification or non-essential information on the current

topic.

Definition

Explains terms or acronyms that may be unfamiliar to many

readers. These terms are also included in the Glossary.

WARNING

Provides messages of high importance, including messages

relating to personal safety or system integrity.

Internet Security Router User’s Manual Chapter 2. Getting to Know the Internet Security Router

3

2 Getting to Know the Internet Security Router

2.1 Parts List

In addition to this document, your Internet Security Router should come with the following:

„ The Internet Security Router

„ Power adapter

„ Ethernet cable (“straight-through” type)

„ Optional console port cable (RJ-45)

2.2 Front Panel

The front panel contains LED indicators that show the status of the unit.

Figure 2.1. Front Panel LEDs

Table 2.1. Front Panel Label and LEDs

Label Color Function

POWER

green On: Unit is powered on

Off: Unit is powered off

ALARM

green (For factory testing only)

WAN green On: WAN link established and active

Flashing: Data is transmitted via WAN connection

Off: No WAN link

LAN1 –

LAN4

green On: LAN link is established

Flashing: Data is transmitted via LAN connection

Off: No LAN link

2.3 Rear Panel

The rear panel contains the ports for the unit's data and power connections.

Figure 2.2. Rear Panel Connections

Chapter 2. Getting to Know the Internet Security Router Internet Security Router User’s Manual

4

Table 2.2. Rear Panel Labels and LEDs

Label Function

Switches the unit on and off

POWER Connects to the supplied power adapter

Reset Resets the device

CONSOLE RJ-45 serial port for console management

WAN Connects to your WAN device, such as ADSL or

cable modem.

P1 – P4 Connects the device to your PC's Ethernet port,

or to the uplink port on your LAN's hub/switch,

using the cable provided

2.4 Major Features

2.4.1 Firewall Features

The Firewall as implemented in the Internet Security Router provides the following features to protect your

network from being attacked and to prevent your network from being used as the springboard for attacks.

„ Address Sharing and Management

„ Packet Filtering

„ Stateful Packet Inspection

„ Defense against Denial of Service Attacks

„ Application Content Filtering

„ Log and Alert

„ Remote Access

„ Keyword based URL Filtering

2.4.1.1 Address Sharing and Management

The Internet Security Router Firewall provides NAT to share a single high-speed Internet connection and to

save the cost of multiple connections required for the hosts on the LAN segments connected to the Internet

Security Router. This feature conceals network address and prevents them from becoming public. It maps

unregistered IP addresses of hosts connected to the LAN with valid ones for Internet access. The Internet

Security Router Firewall also provides reverse NAT capability, which enables SOHO users to host various

services such as e-mail servers, web servers, etc. The NAT rules drive the translation mechanism at the NAT

router. The following types of NAT are supported by the Internet Security Router.

„ Static NAT – Maps an internal host address to a globally valid Internet address (one-to-one). All

packets are directly translated with the information contained in the map.

„ Dynamic NAT – Maps an internal host address dynamically to a globally valid Internet address (m-to-

n). The map usually contains a pool of internal IP addresses (m) and a pool of globally valid Internet IP

addresses (n) with m usually greater than n. Each internal IP address is mapped to one external IP

address on a first come first serve basis.

„ NAPT (Network Address and Port Translation) – Also called IP Masquerading. Maps many internal

hosts to only one globally valid Internet address. The map usually contains a pool of network ports to

be used for translation. Every packet is translated with the globally valid Internet address; the port

number is translated with a free pool from the pool of network ports.

La pagina sta caricando ...

Asus TV Box Manuale utente

Asus TV Box Manuale utente

in altre lingue

Documenti correlati

Altri documenti