Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /home/newdedyk/domains/bkmanuals.com/public_html/includes/pages/manual_inc.php on line 26
Moxa EDR-G902 manuale d’uso - BKManuals

Moxa EDR-G902 manuale d’uso

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79

Vai alla pagina of

Un buon manuale d’uso

Le regole impongono al rivenditore l'obbligo di fornire all'acquirente, insieme alle merci, il manuale d’uso Moxa EDR-G902. La mancanza del manuale d’uso o le informazioni errate fornite al consumatore sono la base di una denuncia in caso di inosservanza del dispositivo con il contratto. Secondo la legge, l’inclusione del manuale d’uso in una forma diversa da quella cartacea è permessa, che viene spesso utilizzato recentemente, includendo una forma grafica o elettronica Moxa EDR-G902 o video didattici per gli utenti. La condizione è il suo carattere leggibile e comprensibile.

Che cosa è il manuale d’uso?

La parola deriva dal latino "instructio", cioè organizzare. Così, il manuale d’uso Moxa EDR-G902 descrive le fasi del procedimento. Lo scopo del manuale d’uso è istruire, facilitare lo avviamento, l'uso di attrezzature o l’esecuzione di determinate azioni. Il manuale è una raccolta di informazioni sull'oggetto/servizio, un suggerimento.

Purtroppo, pochi utenti prendono il tempo di leggere il manuale d’uso, e un buono manuale non solo permette di conoscere una serie di funzionalità aggiuntive del dispositivo acquistato, ma anche evitare la maggioranza dei guasti.

Quindi cosa dovrebbe contenere il manuale perfetto?

Innanzitutto, il manuale d’uso Moxa EDR-G902 dovrebbe contenere:
- informazioni sui dati tecnici del dispositivo Moxa EDR-G902
- nome del fabbricante e anno di fabbricazione Moxa EDR-G902
- istruzioni per l'uso, la regolazione e la manutenzione delle attrezzature Moxa EDR-G902
- segnaletica di sicurezza e certificati che confermano la conformità con le norme pertinenti

Perché non leggiamo i manuali d’uso?

Generalmente questo è dovuto alla mancanza di tempo e certezza per quanto riguarda la funzionalità specifica delle attrezzature acquistate. Purtroppo, la connessione e l’avvio Moxa EDR-G902 non sono sufficienti. Questo manuale contiene una serie di linee guida per funzionalità specifiche, la sicurezza, metodi di manutenzione (anche i mezzi che dovrebbero essere usati), eventuali difetti Moxa EDR-G902 e modi per risolvere i problemi più comuni durante l'uso. Infine, il manuale contiene le coordinate del servizio Moxa in assenza dell'efficacia delle soluzioni proposte. Attualmente, i manuali d’uso sotto forma di animazioni interessanti e video didattici che sono migliori che la brochure suscitano un interesse considerevole. Questo tipo di manuale permette all'utente di visualizzare tutto il video didattico senza saltare le specifiche e complicate descrizioni tecniche Moxa EDR-G902, come nel caso della versione cartacea.

Perché leggere il manuale d’uso?

Prima di tutto, contiene la risposta sulla struttura, le possibilità del dispositivo Moxa EDR-G902, l'uso di vari accessori ed una serie di informazioni per sfruttare totalmente tutte le caratteristiche e servizi.

Dopo l'acquisto di successo di attrezzature/dispositivo, prendere un momento per familiarizzare con tutte le parti del manuale d'uso Moxa EDR-G902. Attualmente, sono preparati con cura e tradotti per essere comprensibili non solo per gli utenti, ma per svolgere la loro funzione di base di informazioni e di aiuto.

Sommario del manuale d’uso

  • Pagina 1

    EDR- G9 03 /G902 Use r’s Manual Second Edition, Januar y 2011 www.moxa.com/product © 201 1 Moxa Inc . All rights reserved. Reprod uction witho ut perm ission is prohibite d.[...]

  • Pagina 2

    EDR- G9 03 /G902 Use r’s Manual The softw are described in this manual is furnished under a license agreement and may be used only in accordance with the terms of that agree ment. Copyri ght Notice Copyrig ht ©201 1 Mo xa I nc . All r ights r eserved. Reprod uction witho ut perm ission is prohibite d. Trademarks The MOXA logo is a regis tered tr[...]

  • Pagina 3

    Table of Content s 1. Int rodu ct ion ...................................................................................................................................... 1-1 Ov erv iew ........................................................................................................................................... 1-2 Packag e Checklist[...]

  • Pagina 4

    A. MIB Groups ....................................................................................................................................... A-1[...]

  • Pagina 5

    1 1. Introduction Welcome to the Moxa EtherDevice Router (EDR - G903 /G902), the Gig abit F irewall/VPN secure routers desig ned for connec ting Ethernet - enab led devic es in industrial fie ld applicatio ns. The follow ing topics are covered in this chapter:  Over view  Package C hecklist  Featu res  Indus trial Netwo rking Cap abilit[...]

  • Pagina 6

    EDR - G903/G902 Introduc tion 1-2 Overvi ew As the world ’ s network and information techno logy becomes more mature , the trend is to use Etherne t as the major communic ations interf ace in many industrial co mmunications and automation applicati ons. In fact, a whole new ind ustry has sprung up to provid e Ethernet products that c omply with t[...]

  • Pagina 7

    2 2. Getting Started This chapte r explains how to access the E therDevic e R outer for the first time . There are three ways to access the switch: (1 ) serial console , (2) Telnet console, or (3) web brow ser. The serial conso le connection method , which requir es using a short ser ial cable to connect the E therDevice R outer to a PC’s COM por[...]

  • Pagina 8

    EDR - G903/G902 Getting Started 2-2 RS - 232 Console Configurati on (115200, None, 8, 1, VT100) NOTE Connec tion C autio n! We strong ly suggest that you do NOT use more than one connectio n method at the same time. Fo llowing this advice wi ll allow you to maintain be tter control over the config uration of your E therD evice R oute r NOTE We reco[...]

  • Pagina 9

    EDR - G903/G902 Getting Started 2-3 4. Click the Ter minal tab, and select V T100 for Terminal Type. Click OK to continue. 5. Typ e 1 to select an si/VT1 00 terminal ty pe, and then press Ent er. 6. The Console login screen will appear . Use the keyboard to enter the login acco unt ( admin or use r ), and then press E nter to jump to the Passw ord [...]

  • Pagina 10

    EDR - G903/G902 Getting Started 2-4 telnet telnet (IP address) Example : telnet 1 92.168 .127 .10 Open a telnet conne ction telnet (IP address) (port number) Example : telnet 192.168 .127 .10 23 Open a telnet conne ction with por t number ssh ssh (IP ad dress) Example : ssh 19 2.168.12 7.10 Open a ssh connection Login by User account : Command Para[...]

  • Pagina 11

    EDR - G903/G902 Getting Started 2-5 Perfor m the following step s to access the console utility v ia Telnet. 1. Click Star t ( Run, and then telnet to the E therDev ice R outer ’s IP address from the Windows Run window. (You may also iss ue the telnet command from the MS - DOS pro mpt.). 2. R efer to i nstruc tion s 6 and 7 in the RS - 232 Cons o[...]

  • Pagina 12

    EDR - G903/G902 Getting Started 2-6 NOTE By defa ult, the E therDevice R outer ’ s password is not set (i.e., is blank). Y ou may need to wait a few moments for the web page to be downlo aded to your compute r. Use the menu tr ee on the left side of the wind ow to open the function pages to acce ss each of the router ’s functions.[...]

  • Pagina 13

    3 3. Features and Functio ns In this cha pter, we explain how to access the E therD evice R o uter ’s c onfigur ation op tions, pe rform mo nitoring, and use adminis tration functions . There are three ways to access thes e functions: (1) RS - 232 consol e, (2) Telnet co nsole, and (3) web browser. The web browser is the most user - friendly w ay[...]

  • Pagina 14

    EDR - G903/G902 Featur es and F unctio ns 3-2 The Overv iew page is divid ed into three major par ts: Interf ace Status, Basic f unction status , and Recent 10 Event logs , and gives u ser s a quick overview of the E therDevic e R outer ’ s current s etting s. Click More … at the top of the Interf ace Status table to see detail ed informa tion [...]

  • Pagina 15

    EDR - G903/G902 Featur es and F unctio ns 3-3 Click More … at the top of the “ Recent 10 Event Log ” table to open the Eve ntLogT abl e page . Configu ring Basic Settin gs The Basic Settings gro up includes the most commonly used settings require d by administrators to maintain and contro l the E therDevic e R outer . System Ide ntification T[...]

  • Pagina 16

    EDR - G903/G902 Featur es and F unctio ns 3-4 Maintai ner Contac t Info Sett ing Descrip tion Facto ry Defa ult Max. 30 Charac ters Enter the conta ct informatio n of the person responsible for maintaining this E therDev ice R outer None Web Con fi gur ati on Sett ing Descrip tion Facto ry Defa ult http or https User s c an connect to the E therDev[...]

  • Pagina 17

    EDR - G903/G902 Featur es and F unctio ns 3-5 The follow ing table shows additional c onfig uration example s: Allowable Hosts In put For mat Ay hos t Disabl e 192.1 68.1.120 192.1 68.1.120 / 255. 255. 255.255 192.1 68.1.1 t o 192.16 8.1.25 4 192.1 68.1.0 / 25 5.255.25 5.0 192.1 68.0.1 t o 192.16 8.255. 254 192.1 68.0.0 / 25 5.255.0. 0 192.1 68.1.1[...]

  • Pagina 18

    EDR - G903/G902 Featur es and F unctio ns 3-6 • ATTE NTION ! • By d efault , the Pa ssw ord f ield is blank . If a Password is already set, the n you will be requir ed to type the Passwor d when logging into the RS - 232 conso le, Telnet console , or web browser interf ace. Account Sett ing Descrip tion Facto ry Defa ult Admin “admin” privi[...]

  • Pagina 19

    EDR - G903/G902 Featur es and F unctio ns 3-7 NOTE The E therDe vice R outer has a real time clock so the user does not need to update the Current Time and Current D ate to set the initia l time fo r the E therDevic e R outer after each re b oot . This is especially use ful wh en the network does not have an Internet connec tion for an NTP se rve r[...]

  • Pagina 20

    EDR - G903/G902 Featur es and F unctio ns 3-8 Time S erver I P/Name Sett ing Descrip tion Facto ry Defa ult 1s t Tim e Serv er IP/Name IP or Domain addre ss (e.g., 192.168 .1.1, time.s tdtime.gov .tw, or time.nist.g ov). None 2nd Tim e Serv er IP/Name The E therDevice R outer will try to locate the 2nd NTP Server if the 1st NTP Server fails to conn[...]

  • Pagina 21

    EDR - G903/G902 Featur es and F unctio ns 3-9 If the user en able s the SettingCheck functio n with the Accessible IP l ist and the confirmer Timer is set to 15 seconds, then whe n the user cl ick s the Activ ate button o n the access ible IP list page, the E therDevice Ro ute r will exe cute the config uration change and the web brows er will try [...]

  • Pagina 22

    EDR - G903/G902 Featur es and F unctio ns 3- 10 System File Update — b y Remote TFTP The E therDe vice R outer s upports saving your config uration file to a remote TF TP server or local host to allow other E the rDevic e R outer r o ute r s to use the same config uration at a later time, or sav ing the Log file for future reference. L oading pre[...]

  • Pagina 23

    EDR - G903/G902 Featur es and F unctio ns 3- 11 Log File C lick Ex por t t o export the Log file of th e E therDevic e R oute r to the local hos t. NOTE Some operating syste ms will open the configur ation file and log file directly in the web page. In such cases, right clic k the Expo rt b utton and then s ave as a file. Upgrade Firmwar e To impor[...]

  • Pagina 24

    EDR - G903/G902 Featur es and F unctio ns 3- 12 Networ k Setting s Mode C onfiguration Network M ode E therDevic e R outer pr ovid es Rou ter Mode and Bridge Mo de op eration for differ ent applications : Route r Mode In this mode , E therD evice R outer operates as a gateway between differe nt networks. • Each interf ace (WAN1, WAN2 and LAN) has[...]

  • Pagina 25

    EDR - G903/G902 Featur es and F unctio ns 3- 13 WAN1 Configuration Connect ion Note that there are t here are thre e diffe rent connec tion types fo r the WAN1 interface: D ynamic I P, Static I P , and PPPoE. A detaile d explanation o f the configuratio n settings for each type is give n below. Connection M ode Sett ing Descrip tion Facto ry Defa u[...]

  • Pagina 26

    EDR - G903/G902 Featur es and F unctio ns 3- 14 E xample : S uppose a remote user (IP: 1 0.10.10.10 ) wants to connect to the internal se rver (pr ivate IP: 30.30. 30.10) vi a the PPTP protocol. The IP addre ss for the PPTP server is 20.20.20.1. T he necessar y c onfig uration settings are sho w n in the fo llowing fig ure. DNS (Dom an Name Ser ver[...]

  • Pagina 27

    EDR - G903/G902 Featur es and F unctio ns 3- 15 Gat eway Sett ing Descrip tion Facto ry Defa ult IP Add res s The Gatewa y IP address None Detaile d Ex pla nation o f PPPoE Type PPPoE Dialup User Na me Sett ing Descrip tion Facto ry Defa ult Max. 30 characters The User Name for logging in to the PPPoE server None Host Nam e Sett ing Descrip tion Fa[...]

  • Pagina 28

    EDR - G903/G902 Featur es and F unctio ns 3- 16 Connec tion T ype Sett ing Descrip tion Facto ry Defa ult Static IP, Dynamic IP, PPPoE Conf igure the connectio n type Dynamic I P Detaile d Ex pla nation o f Dyna mic IP Type PPTP Dialup Point - to - Point Tunnel ing Pr otocol is used for Vir tual Private Networ ks (VPN). Remote users can use PPTP to[...]

  • Pagina 29

    EDR - G903/G902 Featur es and F unctio ns 3- 17 DNS (Dom an Name Ser ver; option al set ting for Dynamic IP and PPPoE t y pes) Server 1/ 2/3 Sett ing Descrip tion Facto ry Defa ult IP Add res s The DNS I P Addr ess None NOTE The prior ity of a manual ly c onfigured DNS will higher than the DNS from the PPPo E or DHCP s erver. Detaile d Ex pla natio[...]

  • Pagina 30

    EDR - G903/G902 Featur es and F unctio ns 3- 18 Subn et Ma sk Sett ing Descrip tion Facto ry Defa ult IP Add res s The sub net mask None Gat eway Sett ing Descrip tion Facto ry Defa ult IP Add res s The Gatewa y IP address None Detaile d Ex pla nation o f PPPoE Type PPPoE Dialup User Na me Sett ing Descrip tion Facto ry Defa ult Max. 30 characters [...]

  • Pagina 31

    EDR - G903/G902 Featur es and F unctio ns 3- 19 Using DMZ M ode A DMZ ( d emilitarize d z one) is an isolated netw ork for de vices — such as d ata, FTP, w eb , and m ail server s connec ted to a LAN n etwo r k — that need to frequently co nnect with externa l network s . The deploy ment of an FTP server in a D MZ is illustrated in the follo wi[...]

  • Pagina 32

    EDR - G903/G902 Featur es and F unctio ns 3- 20 LAN IP Co nfig urat ion IP Addre ss Sett ing Descrip tion Facto ry Defa ult IP Add res s The LAN interf ace IP address 192.1 68.127.2 54 Subn et Ma sk Sett ing Descrip tion Facto ry Defa ult IP Add res s The sub net mask 255. 255. 255.0 DHCP Server The E therDe vice R outer prov ides a DHCP (Dynamic H[...]

  • Pagina 33

    EDR - G903/G902 Featur es and F unctio ns 3- 21 Static DHCP List Use the Static DHC P list to ensure that device s connected to the E therDev ice R outer alw ays use the same IP address. The static DHCP list matches I P add re ss es to MAC a ddress es . In the abo v e exam ple , a device named “ D evic e - 01 ” w as added to the Static DHCP lis[...]

  • Pagina 34

    EDR - G903/G902 Featur es and F unctio ns 3- 22 DHCP Leas ed List Use the DHCP Leased List to view the current DHCP clients. Dynamic DNS Dynamic DNS ( Do main Name S erv er ) al l o ws you to use a domain name (e .g. , moxa .edr - g903) t o conne ct to the E therDev ice R outer . The E therDev ice R outer c an connect to 4 free DNS servers and regi[...]

  • Pagina 35

    EDR - G903/G902 Featur es and F unctio ns 3- 23 Network Redundancy Moxa EtherDev ice Router provide s 2 types of network redundanc y functions : WAN backup (EDR - G903 o nly) and V RRP . The E the rDevic e R outer has two WAN interfaces : WAN 1 is the pr imary WAN interface and WA N2 is the backup interf ace . When t he E therDevic e R outer detect[...]

  • Pagina 36

    EDR - G903/G902 Featur es and F unctio ns 3- 24 Link Ch eck Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Activate Backup function by checking the link status of WAN1 Disabl ed Ping Che ck Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Activate s the Backup functio n if unable to ping from the E therDevic e R outer to a spe[...]

  • Pagina 37

    EDR - G903/G902 Featur es and F unctio ns 3- 25 Virtual Router R edundancy P rotocol (VRRP ) VRRP Setting s The Virtual Router Redund ancy Protocol (VRR P) feature can solv e the problem with static configur ation . VR RP enables a group of routers to form a single virtual route r w ith a virtual IP addr ess . The LAN clients can then be config ure[...]

  • Pagina 38

    EDR - G903/G902 Featur es and F unctio ns 3- 26 Static Ro uting a nd Dynam ic Routin g The E therDe vice R outer s upports two routing methods : static routing and dynamic routing. Dy namic routing makes use of RIP V1/V1c /V2. You can either choose o ne routing method, or combine the two method s to establis h you r routing tab le. A routing entry [...]

  • Pagina 39

    EDR - G903/G902 Featur es and F unctio ns 3- 27 Clickable B uttons Add For add ing an entry to the Static Ro uting Table . Delet e For re mov ing selected entries f rom the Static Ro uting Table. Modify For mo dif y ing the content of a selec ted entry in the Static Routing Ta ble . NOTE The entrie s in the Static Routing Tab le will not be added t[...]

  • Pagina 40

    EDR - G903/G902 Featur es and F unctio ns 3- 28 Routing T able The Routing Table page show s all r outing entr ies. All Routi n g Entr y List Sett ing Descrip tion Fac tory Defau lt All S how all routing e ntries N/A Connec ted S how connected routing entr ies N/A Static S how Sta tic routing entries N/A RIP S how RIP routing entr ies N/A Others S [...]

  • Pagina 41

    EDR - G903/G902 Featur es and F unctio ns 3- 29 Enable/D isable NAT Policy Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the selected NA T policy Enabled NAT Mo de Sett ing Descrip tion Facto ry Defa ult N-1 1-1 Port F orwarding Select the NA T types N-1 Interfa ce (N - 1 mode) Sett ing Descrip tion Facto ry Defa ult[...]

  • Pagina 42

    EDR - G903/G902 Featur es and F unctio ns 3- 30 Enable/D isable NAT policy Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the selected NA T policy Enabled NAT Mo de Sett ing Descrip tion Facto ry Defa ult N-1 1-1 Port Fo rward Select the NA T types N-1 Interface (Port Forward mode) Sett ing Descrip tion Facto ry Defa [...]

  • Pagina 43

    EDR - G903/G902 Featur es and F unctio ns 3- 31 1- to - 1 NAT If the internal d evice and external device need to communicate w ith each other, choose 1- to - 1 NAT , which offe rs bi - directio n al communicatio n (N- to - 1 and Port forw arding are b oth single - direction al communica tion NAT func tions ). 1- to - 1 N A T is us ually use d when[...]

  • Pagina 44

    EDR - G903/G902 Featur es and F unctio ns 3- 32 Enable/D isable NAT policy Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the selected NA T policy None NAT Mo de Sett ing Descrip tion Facto ry Defa ult N-1 1-1 Port Fo rward Select the NA T types None Interfa ce (1 - 1 N AT typ e) Sett ing Descrip tion Facto ry Defa ul[...]

  • Pagina 45

    EDR - G903/G902 Featur es and F unctio ns 3- 33 Fire wall Settin gs Firewall Policy Concept A f irewall dev ice is common ly used to pr ovi de secu r e traffic control o ver an Ethernet n etwo rk , as illustr ated in the f ollowing f igure . F irewa ll device s are depl oy ed at critical point s be tween an e xter nal network ( the non - secure p a[...]

  • Pagina 46

    EDR - G903/G902 Featur es and F unctio ns 3- 34 Firewall P olic y Config uration The E therD evice R oute r ’s F irewall polic y prov id es secur e traffic c ontrol , allo wing u ser s to control network traffic based on the fo llowing par ameters . Interface From/To Sett ing Descrip tion Facto ry Defa ult All (WAN1 /WAN2/LAN) Sel ect the From In[...]

  • Pagina 47

    EDR - G903/G902 Featur es and F unctio ns 3- 35 Destin at ion IP Sett ing Descrip tion Facto ry Defa ult All (I P Addres s) This Firewall Polic y will check all Destination IP addresses in the packet All Single (IP Ad dress) This Fir ewall Po licy will chec k single Des tination IP addr esses in the packet Range (IP Address) This F irewall Polic y [...]

  • Pagina 48

    EDR - G903/G902 Featur es and F unctio ns 3- 36 Ether Type Sett ing Descrip tion Fac tory Defa ult 0x060 0 to 0x FFFF When Protoc ol is set to “ Manual ” you can set up Ether T ype manually None Ta r get Sett ing Descrip tion Fac tory Defa ult Accept The packet will pass the Firewall w hen it match es this Fi rewall policy None Drop The p acket[...]

  • Pagina 49

    EDR - G903/G902 Featur es and F unctio ns 3- 37 Quick Automa tion Profile Ethernet Fieldbus prot ocol s are p opular in i ndustrial auto mation applica tion s. I n fact, many Fieldbus p rotocols (e.g., EtheNe t/IP and Modbus TCP/I P) can operate on an industrial Ether net network , with the Ethernet port number defined b y IANA (Internet Assigne d [...]

  • Pagina 50

    EDR - G903/G902 Featur es and F unctio ns 3- 38 Modbus TC P/IP (UDP) 502 PROFInet RT U nicast (TCP) 34962 PROFInet RT U nicast (UDP) 34962 PROFInet R T Multicast (TCP) 34963 PROFInet RT Multic ast (UDP) 34963 PROFInet Co ntext Manager (TCP) 34964 PROFInet Co ntext Manager (UDP) 34964 IEC 608 70 -5- 104 (TCP) 2404 IEC 608 70 -5- 104 (UDP) 2404 DNP ([...]

  • Pagina 51

    EDR - G903/G902 Featur es and F unctio ns 3- 39 Mask : Po licy [ X ] is m asked by P olicy [Y ] The Source/De stination I P r ang e or Source/Destinati on port number of policy [X] is smaller or e qual to policy [Y ] but the actio n target (Accep t/Drop) is d ifferent . For ex ample, t wo f irewall policies are show n belo w: In d ex In put Outp ut[...]

  • Pagina 52

    EDR - G903/G902 Featur es and F unctio ns 3- 40 Suppos e the user ne xt ad d s a new policy with the f ollowing c onfig uration : In d ex In put Outp ut Protocol Source IP Destin at ion IP T ar get 3 WAN2 LAN All 20.20. 20.25 192.1 68.127.2 0 to 192 .168.1 27.30 DROP The sou rce I P r a nge in policy 3 is smaller than po licy 2, but the destinatio [...]

  • Pagina 53

    EDR - G903/G902 Featur es and F unctio ns 3- 41 SYN/R ST Scan Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the SYN/RST Scan No ne ICMP - D eath Sett ing Descrip tion Facto ry Defa ult Enable or Disa ble Enable or disa ble the I CMP - Death defense None Packet/S econd The lim it value to activ ate ICMP - Death defens[...]

  • Pagina 54

    EDR - G903/G902 Featur es and F unctio ns 3- 42 IPSec C onfiguration IP Sec configuratio n includes 5 parts: • Global Setting: Enable / Disable all I PSec Tunnels and N AT - Traver sal functio n • Tunnel Setting : Set up the VPN Connectio n type and VPN net wo r k plan • Key Exchange: Authe ntication for 2 VPN g ateways • Data Exc hange: Da[...]

  • Pagina 55

    EDR - G903/G902 Featur es and F unctio ns 3- 43 Tunnel Setting Enable or Di sable VPN T unnel Sett ing Descrip tion Fac tory Defa ult Enable or Disab le Enable or Disa ble this VPN Tunnel Disable Name o f VP N Tunne l Sett ing Descrip tion Fac tory Defa ult Max. of 16 c ha ra cter s User defined name of this VPN Tunnel. None NOTE T he first charac [...]

  • Pagina 56

    EDR - G903/G902 Featur es and F unctio ns 3- 44 Local Ne twork / Ne tmask / ID Setting Descrip tion Fac tory Defa ult IP Add res s IP address of loc al VPN network IP addres s of LAN interf ace S ubnet Mask Subnet Mask of lo cal VPN network Netmask of LAN interf ace ID ID for indentify ing the VPN tunnel conne ction. T he Local ID must be equal to [...]

  • Pagina 57

    EDR - G903/G902 Featur es and F unctio ns 3- 45 In X .50 9 Mod e , the use r needs to up load the Local and Remote certif ications first , and then sele ct the certif ications fro m the drop - down li st . S ee the X.509 C ertifica tion sectio n in this chapter for details. Encry ption Alg orithm Setting Descrip tion Fac tory Defa ult DES 3DES AES [...]

  • Pagina 58

    EDR - G903/G902 Featur es and F unctio ns 3- 46 Data Exchange (IPSec phase II) Perfect Fo rward Secrecy Sett ing Descrip tion Fac tory Defa ult Enable or Disab le Us es different secur ity key for differe nt IPSec phases to enhance secur ity Disabl e SA Lifetime Setting Descrip tion Fac tory Defaul t SA lifetime (minutes) Lifetime for SA in Phase 2[...]

  • Pagina 59

    EDR - G903/G902 Featur es and F unctio ns 3- 47 IPSec Status The user can check the VPN tunnel status in the I PSec Conn ection L ist . This list sho ws the Name of the IPSec tunnel, IP address of Local and Remote Subnet/Gatew ay , and the establis h ed status of the Key exchang e phase and Data exchange phase. X.509 Certificat ion X.509 is a digit[...]

  • Pagina 60

    EDR - G903/G902 Featur es and F unctio ns 3- 48 Certificat e Generat ion The user must fill in the fo llowing inform ation to generate the Root c ertificatio n: • Countr y name (2 Letter code) • Certif icate Days • State or Provinc e Name • Locality Name • Organizatio n Name • Organizatio n Unit Name • Co mmo n N ame • Email Addr es[...]

  • Pagina 61

    EDR - G903/G902 Featur es and F unctio ns 3- 49 Local Cert ificat e Uploa d Upload the .p12 loc al certific ate on this pa ge. The Password must be the sam e as the .p12 cer tificate file. If the password is not correct, the certific ate import proce ss will fail. Lab el : Us er d efi ne d name for this local ce rtific ate Name/S ubject : Show the [...]

  • Pagina 62

    EDR - G903/G902 Featur es and F unctio ns 3- 50 L2TP Configurat ion L2TP S erver Mod e Sett ing Descrip tion Fac tory Defaul t Enable / Disabl e Enable or Disab le the L2TP functio n on the WAN1 or WAN 2 interf ace Disabl e Local IP Sett ing Descrip tion Fac tory Defau lt IP Add res s The IP ad dress of the Lo c al S ubn et 0.0.0.0 Offered IP Range[...]

  • Pagina 63

    EDR - G903/G902 Featur es and F unctio ns 3- 51 Examples for T ypical VPN App lications Site to Sit e IPSec VPN t unnel with P er - shar ed Key The follo wing example show s how to create a secure LAN to LAN VPN tunnel between the C entral site and Remote si te via an Intr anet network . VPN Plan: • A ll co mmunication f rom the Central s ite net[...]

  • Pagina 64

    EDR - G903/G902 Featur es and F unctio ns 3- 52 L2TP for Remo te User Ma intenance The follow ing example show s how a Roaming user use s L2TP over IPSec to connec t to theremote site networ k. VPN Plan: • A ll communicatio n from the Roaming us er ( n o f ixed IP) to the Remote site Network (100 .100.3.0/24 ) need s to pass throug h the VPN tunn[...]

  • Pagina 65

    EDR - G903/G902 Featur es and F unctio ns 3- 53 How Traffic Prioritization W orks The E therDe vice R outer provides fo ur diff erent prior ities levels ( 0- 3 , h igh to l ow) for incoming and outgoing traff ic. The fo llowing fig ur e illustr ates i nco ming traffic , whi ch refers t o the traff ic transmitted fr om WA N1 to LA N or WAN2 to LA N [...]

  • Pagina 66

    EDR - G903/G902 Featur es and F unctio ns 3- 54 Max . Ban dwid th Sett ing Descrip tion Facto ry Defa ult 1 to 1,0 00,000 KBytes/s The maximum b andwidth f or total inco ming or outgo ing traffic 100 KByt es/s Default Priority Sett ing Descrip tion Facto ry Defa ult Prior ity 0/1/2/3 A packet without matching any incoming /outgo ing policy will adh[...]

  • Pagina 67

    EDR - G903/G902 Featur es and F unctio ns 3- 55 Priority Sett ing Descrip tion Facto ry Defa ult Prior ity 0/1/2/3 Sel ect the prior ity for this policy Prior ity 0 Source IP Sett ing Descrip tion Facto ry Defa ult All (I P Addres s) Select the Sourc e IP address for this policy All Single (IP Ad dress) Range (IP Address) Source Por t Sett ing Desc[...]

  • Pagina 68

    EDR - G903/G902 Featur es and F unctio ns 3- 56 The E therDe vice R outer will manag e the bandwi dth for outgoing packet s . Base d o n the fou r o utgo ing po licies below , when the source IP of the Ethernet tr affic matches the outgo ing policies, the m ax im um b andwidth for a packet sent from these source IP addresses wil l be reserv ed by i[...]

  • Pagina 69

    EDR - G903/G902 Featur es and F unctio ns 3- 57 SNMP Re ad Settings SN MP Versi ons Sett ing Descrip tion Facto ry Defa ult Disabl e V1, V2c , V3, or V1, V 2c, or V3 only Select the SN MP protocol version use d to manage the secu re router . Disabl e Contact Person Sett ing Descrip tion Facto ry Defa ult Admin o r user Admin priv ilege allows acc e[...]

  • Pagina 70

    EDR - G903/G902 Featur es and F unctio ns 3- 58 Access Co ntrol Sett ing Descrip tion Facto ry Defa ult Read only (Pub lic MIB only) A ccess contro l type after match ing the community string Re ad only No Access Target IP Address Sett ing Descrip tion Facto ry Defa ult IP Add res s Enter the IP addre ss of the Trap Server used by your network. Rea[...]

  • Pagina 71

    EDR - G903/G902 Featur es and F unctio ns 3- 59 1. Co nfig ure Em ail Ev ent Ty pes Select the desir ed Event types fro m the Web B ro wse r Event t ype pa ge (a descrip tion of each event type is given later in the Email Alarm Events se tting subsecti on). 2. Confi gur e Email Set t ings To config ure the E therDevice R outer ’ s email setup fro[...]

  • Pagina 72

    EDR - G903/G902 Featur es and F unctio ns 3- 60 E- mail Setup Main S erver I P/Name Sett ing Descrip tion Facto ry Defa ult IP add re ss The I P Address of your email server. None Port Sett ing Descrip tion Facto ry Defa ult Port number The por t number of your email server. None Acco unt Name Sett ing Descrip tion Facto ry Defa ult Max. 30 Charact[...]

  • Pagina 73

    EDR - G903/G902 Featur es and F unctio ns 3- 61 Configur ing R elay Warning The Auto Relay Warning functio n uses relay output to alert the user when certain user - configured events take place. Ther e are two basic steps requir ed to set up the Relay Warni ng f unction: 1. Confi guring Re lay Eve nt Typ es Select the desir ed Event t y pes fro m t[...]

  • Pagina 74

    EDR - G903/G902 Featur es and F unctio ns 3- 62 Using Diagnosis The E therDe vice R outer provides P ing tools a nd LLD P for adminis trator s to diagnose network sys tems. Ping The Ping functio n uses the ping comma nd to gi ve users a simple but powerful tool for troubles hooting network proble ms. The f unction ’ s most unique fe ature is that[...]

  • Pagina 75

    EDR - G903/G902 Featur es and F unctio ns 3- 63 Neighbor Por t D escrip t ion: A tex tual descrip tion of the neighbor device ’ s inter face. Neighbor Sy s tem: Hostname of the neighbor dev ice. Using Monitor You can monito r statistics in real time from the E therDevice R outer ’ s web conso le. Monitor by S ystem Access the Monitor by selecti[...]

  • Pagina 76

    EDR - G903/G902 Featur es and F unctio ns 3- 64 Using Syst em Log The E th erDevice R outer provi des Event L og and Sys l og functions to record impor tant events . Using Ev ent Log Field Desc riptio n Bootup This field shows how many times the ED R- G509 has been rebooted or cold started. Date The d ate is updated b ased on how the c urrent date [...]

  • Pagina 77

    EDR - G903/G902 Featur es and F unctio ns 3- 65 DI trans ition (On - > O ff) Cold star t Factory def ault Warm start System restart Warm start Firm ware U pgrade War m start Conf iguration Upgrade Warm start NOTE The m aximum numb er of e vent e ntr ies is 1000. Usi ng Sysl og This functio n provides the event logs for the syslog server. The fun[...]

  • Pagina 78

    EDR - G903/G902 Featur es and F unctio ns 3- 66 2. A w arning mess age will appe ar to warn the user that the security c ertificate was issued by a company they have no t chosen to t rust. 3. Select Yes to enter the E therDev ice R outer ’ s web br owser i nterface and acc ess the web browse r interf ace secured via HTTPS/SS L.[...]

  • Pagina 79

    A A. MIB Groups The E therD evice R outer come s with built - in SNMP (Simple Network Management Protoco l) agent software that suppor ts cold start trap, line up/d own trap, and RFC 1213 MIB - II. The standard MIB groups that the E therDevic e R outer series suppo rt are: MIB I I.1 – Sy ste m Gr oup sysORTable MIB I I.2 – Interfaces Group ifTa[...]