HotBrick VPN 1400/2 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of HotBrick VPN 1400/2, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of HotBrick VPN 1400/2 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of HotBrick VPN 1400/2. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of HotBrick VPN 1400/2 should contain:
- informations concerning technical data of HotBrick VPN 1400/2
- name of the manufacturer and a year of construction of the HotBrick VPN 1400/2 item
- rules of operation, control and maintenance of the HotBrick VPN 1400/2 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of HotBrick VPN 1400/2 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of HotBrick VPN 1400/2, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the HotBrick service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of HotBrick VPN 1400/2.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the HotBrick VPN 1400/2 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    [...]

  • Page 2

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 T A BLE OF CONTENTS 1: INTRODU CTION.......................................... .................................................. ............. ................... 4 Internet Fea tures........................... .......................................... ........................................[...]

  • Page 3

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Upgrade Firm ware.......................................... ........................................ ....... ........................... 60 10: DEVICE INFORMATION............ ...................................... ........................................ .................. 61 Operation.........[...]

  • Page 4

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 1:Introduction Congra tulations on the purc hase of your ne w Du al WAN VPN Firewall. The Dual WAN VPN Firewall not only provides 2 WAN ports selections – it also provides Shared B roadband Internet Access for all LAN users. Figure 1 - 1: Du al WAN VPN Firewa ll Internet Features  Dual WAN[...]

  • Page 5

    HotBrick, Tel: 305 - 398 - 0888, Fa x: 305 - 398 - 5966  Supports all common Connec tion M ethods All popular DSL and Cable Modems and connection method s are supported, including Fixed IP, Dy na mic IP, P PPoE, and PPTP.  Outbound/Inbound Tra ffic Load Balancing and Failover There are m any load - balancing method s to allow adm inistrators [...]

  • Page 6

    HotBrick, Tel: 305 - 3 98 - 0888, Fax: 305 - 398 - 5966 Other Features  16 - Port Switching Hub The Dual WAN VPN Fire wall incorporates a 16- port 10 /100BaseT switching hub that a llows you to quickly create or extend your LAN.  DHCP Serve r Support Dynamic Host Configuration Proto col provides dynamic I P addresses to PCs and o ther devices[...]

  • Page 7

    H otBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Package Contents The following items should be i ncluded :  The Dual WAN VPN Firewall Unit  Power Cord  Quick Installation Guide  CD - ROM containing t he on - line manual. Note: I f any of the above i tems a re damaged or m i ssing, please con tact your dealer immediately. Physica[...]

  • Page 8

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Some Status an d Error cond itions are ind icated by combinations of LED’s, as s ho w n below LED Action Condition Status – System & Packets flash alternativ ely. Firmware Downlo ad in progress. Status – System & Packets flash concurrently. MAC address not assigned. Status – Sys[...]

  • Page 9

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Rear Panel Figure 1 - 3: R ear Panel A C 100V ~ 240V Connect to AC100~240V / 50~60Hz with AC power cord. Default Settings When the Dual WAN VPN Firewall has f inished booting , all configuration setting s will initially be set to the factory defaults, including:  IP Address set to its defaul[...]

  • Page 10

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Note: The supplied Window s TFTP utility also allows y ou to perform three (3) a dditional opera tions:  Save the current configuration se ttings to your PC (use the "Save C onfiguration" button).  Restore a previously saved configuration file to the Dual WAN VPN Firewall (use t[...]

  • Page 11

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 2: Quick Installation Overvie w Initial Basic Setup of your Dual W AN VPN Firewall involves the following steps: 1. Attach a PC to the Dua l WAN VPN Firewall in po rt 3 ~ 16, and configure y our LAN. 2. Install your Dua l WAN VPN Firewall in y our LAN, an d connect the Broadb and Modem or Modem[...]

  • Page 12

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 No Respon se?  Is your PC using a Fixed IP address? If so, y ou must configure your PC t o use an IP address within the r ange 192.168.1.2 to 192.168.1.254, with a Network Mask of 2 55.255.255.0. See Appendix B – Windows TCP/IP Setup for details.  Check that the D ual WAN VPN Fi rewall [...]

  • Page 13

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 8. Select LAN & DHCP from the menu. You will see a screen like the exam ple below. Figure 2 - 3: LAN & DH CP Setup 9. If your LAN alre ady has a DHCP Server, a nd you wish to continue to use it, the following configuration is required.  The DHCP Server function in the Dual WAN VPN Fi[...]

  • Page 14

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Installing the Dual W AN VPN Firew all on your L AN Figure 2 - 4: In stallation Di agram 13. Ensure the Dual WAN VPN Firewall and the DSL/Cable modem are powered OFF. Leave the modem or m odems connected to their data l ine. 14. Connect the Broadb and modem or modems to the D ual WAN VPN Firewa[...]

  • Page 15

    HotBrick, Tel: 305 - 398 - 0888 , Fax: 305 - 398 - 5966 3. Quick Installation - L AN & DHCP Select LAN & DHC P from the menu. You will see a screen like the example below. Figure 3 - 1: LAN & DH CP Ensure these settings are suit able for your LAN .  The default settings are suit able for most networks.  See the following t able fo[...]

  • Page 16

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 LAN IP Configuration:  IP address - for the Dual WAN VPN Firewall, as seen from the l ocal LAN. Use the default value unless the address is al read y in use or your LAN is using a different IP address range. In the latter case, enter an unused IP Address from within the range used by your LA[...]

  • Page 17

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 DHCP Client List This table shows the I P addresses that have been allocated b y the DHCP Server. For each allocated address, the following information is displayed.  Name – The ""hostname"" of the PC. In some cases, this ma y not be known.  MAC Address – The p hys[...]

  • Page 18

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Quick installation - Primary setup Connection mode  Enable Select this i f you have connected a b roadband modem to this port.  Disable – Select this if t here is no broadband m odem connected to this port.  Backup – Use this if yo u have a broadband m odem on each port, and wish t[...]

  • Page 19

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 3 : Loadbalancing This screen is only operational if using Internet connections on both WAN ports Figure 3 - 2: Load Balan ce Load balancing – Lo ad Balancing  Enable – Use this to enable your Load Balance setting s. Unless this is checked, the other settings on this scre en have no effe[...]

  • Page 20

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 4 : Advan ced W AN Port options Connec tion validation  Health Check – If disa bled, the Alive I ndicat or C heck is not perform ed. The default is enabled. Health checking is performed by ICMP echo request and HTTP packets to the specified destination that could be eithe r: the Nam e or I[...]

  • Page 21

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Transparant b ridge option  Bridge Mode – If set to Enable, this W AN port does not use NAT or the Load Balance function when both the LAN and W AN have real IP addresses on the sam e network segment.  NetBIOS Broadcast – T his function a llows you to access files throug h Microsoft N[...]

  • Page 22

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 The screen is required in order to use multiple PPPoE sessions on the same WAN port. I t can also be used to manually conn ect or disconn ect a P PPoE session. Adv a nced W A N – PPPo E Select WAN port & Session WAN Port – Selected W AN port using t he PPPoE connection PPPoE Session –[...]

  • Page 23

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Adv a nced WAN PPTP A d vanced W AN WAN Port - Select the desired WAN port (click desired WAN on Connection Status). The data of the selected port will then be displayed in the W AN IP Account se ction. PPTP MTU – Max imum transfer unit for PP TP. The default valu e is 1 460 WAN IP Account ?[...]

  • Page 24

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 5 : A d va n ced Configuration Adv a nced configuration – Host IP This feature is used in the foll owing situations:  You have Multi- Session PPPoE, and wish to bind e ach session to a pa rticular PC on y our LAN.  You wish to use the Access Fi lter feature. This requires that each PC i[...]

  • Page 25

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966  Reserve in DHCP – Select Enable to reserve a particular (LAN) IP address for a particular PC on your LAN. This allows the PC to use D HCP (Wi ndows calls this " obtain an IP address automatically") while having an IP address that never changes.  Reserved IP A d dress – Ente[...]

  • Page 26

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Adv a nced configuration – Routing Routing This section is only relevant if your LAN has other R out ers or Gat eways.  If you don't have othe r Routers or Gateways on your LAN, y ou can ignor e the Static Routing page completely .  If your LAN has other Gateways and Routers, you m[...]

  • Page 27

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966  Gateway – Th e IP Address of the G ateway or Router that t he Dual WAN VPN Firewall must use to communicate with t he destination above. (NOT the router attached to the remote segment.)  Interface – Select the correct int erface, usually "LAN". The "WAN" interface[...]

  • Page 28

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 For Router A 's Default Route Destination I P 0.0.0.0 Address Network Mask 0.0.0.0 Gateway IP Address 192.168.1.1 Metric 2 For Router B's Defaul t Route Destination I P 0.0.0.0 Address Network Mask 0.0.0.0 Gateway IP 192.168.2.80 Address Interface LAN Metric 3 Virtual Server This feat[...]

  • Page 29

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Web Server (192.168.1.45) PC using FT P Server (ftp://205.20.45.34) FTP Server (192.168.1.20) 205.20 .45.34 (W AN) 192.168.1.1 (L AN) PC using Web Se rver (http://205.20.45.34) Multi- W A N V PN Link Balancer Note that, in this illustration, both Internet users are con nectin g to the same IP A[...]

  • Page 30

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Adv a nced configuration – virtual server Virtual Serve r Configuration  Enable – The enable check box enables or disables each Virtual server as required.  Server Name – Enter a nam e for t h is server. (By default, t here are 12 well - known virtual servers on th e Custom Virtual [...]

  • Page 31

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966  Update – Save any chang es you hav e made to the current ent ry.  Cancel – Cancel any chang es you have made since the la st save operation. Virtual Server List - This table shows the d etail for all Cu stom Virtual Serv er configuration data. You can modify this configuration data b[...]

  • Page 32

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Adv a nced configuration - Special Ap plication If you use Internet applications that use non -standard connections or port numbers, you may find that the y do not function correctl y because the y are bl ocked b y the Dual WAN VPN Firewall. In this case, you must define the application as a &q[...]

  • Page 33

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Special A pplicati on List - T his list shows the detail s for all currently def in ed Special Applica tions. You can modify its configu ration data by m ouse clicking the appropriate row. Using a Spec ial A pplication on yo ur PC  When the Spe cial Applications screen is configured correctl[...]

  • Page 34

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Dynamic DNS Service This pull -down menu can Enable/Disable the Dynamic DNS feature, and select the r equired service provider.  Dis able – Dynamic DNS is not used.  TZO – Select this to use the TZO service (www.tzo.com). You must configure the TZO section of this screen.  DynDNS ?[...]

  • Page 35

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Adv a nced Configuration - M ulti DMZ This feature allows each WAN port I P address to be associated with one (1) computer on your LAN. All outgoing traff ic from that PC will be asso ciated with that W AN port I P address. Any traffic sent to that I P address will be forwarded to the specified[...]

  • Page 36

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Advanced Configuration - UPnP Setup With the UPnP ( Univ ersal Plug & Play) function, it is e asy to setup and configure an entire network to enable discovery and control of networked devices an d services. UPnP Option - I f UPnP is enabled, then this device will become one of the local net[...]

  • Page 37

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Adv a nced Co nfiguration – NA T Setting NAT Conf iguration  NAT Routing – You can enable or disabl e NAT by using the checkbox. If you disable the NAT checkbox, it will act as a brid ge or Static Router. Most fea t ures will be unavailable.  TCP Timeout – Enter the desired value to[...]

  • Page 38

    H otBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Adv a nced Con figuration – Advanced F eature External Filters Conf iguration  IDENT Port – Por t 113 is associated with the Internet's (Identification / Authentication) service. When a cl ient program in y our computer contacts a rem ote server for services such as POP, IMAP, SMTP[...]

  • Page 39

    HotBrick, T el: 305 - 398 - 0888, Fax: 305 - 398 - 5966 settings to correct the problem.  Enable - If enabled, the WAN port you specify will be used for all outgoing SMTP traffic. If disabled, either WAN port will be used.  WAN – Select the desired WAN por t to be bound. Protocol and P ort Bindings - Use these setti ngs if you wish to ensur[...]

  • Page 40

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 6 – Security Management Security Management – Block URL This feature allows you to block access to undesirable Web sites. You can block by URL, IP address, or Keyword. You can also have different blocking setti ngs for di fferent groups of PCs.  Every URL is searched to see if it matches[...]

  • Page 41

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Securit y Manag ement – A cc ess Filter The network administrator can use the A ccess Filter to control the I nternet access and applications available to LAN users.  Five (5) user g roups are available, and each g roup can have different acc ess rights.  All PCs (users) are in t he Def[...]

  • Page 42

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Port Blocking – T here are two possible settings :  No Filtering - all ports are open  Block A l l Ac cess – All ports are closed. When you m a ke a new rule, the po rt will be opened for that entry (m aximum number of rules you enter are 50 ).  Filter Name – Ente r a m eaningful[...]

  • Page 43

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Security M anagement – Sy stem Filter Exeption Sysfilter exception - Sy stem Filter Exception – will reject ever y packet with an unrecognized port to avoid port s can programs run by hackers but this also incurs problems when servers (e.g. SMTP server port 113) or clients from the WAN need[...]

  • Page 44

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 7 : VPN Configuration Virtual Private Network (VPN) uses encr yption and authentication to create the connection between two end points (computers or networks). It a ll ows private data to b e sent securely over a public network or Internet without the risk of unauthorized access from outside i[...]

  • Page 45

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 VPN Configuration – Tunnel to HotBrick Unit  VPN Tunnel List – here y ou can add a new tunnel or change an existing one from t he list. T he router allows a maxim um of 50 tunnels.  Tunnel Name– I n order to distinguish the tunnels, y ou have to give the “ Tunnel ” a unique name[...]

  • Page 46

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Tunnel to HotBr ick Cli ent – This describes an I PSec tunnel from a th e VPN 1400/2 to t he H ot Brick Client Software.  VPN Tunnel List– allows you to add a new tunnel or change an e xisting one on the list . The router can suppo rt a m aximum of 50 tunnels .  Tunnel Name– I n ord[...]

  • Page 47

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 596 6  Tunnel Name– I n order to distinguish the tunnel, you hav e to give the “ T unnel ” a unique name.  PPPoE Session – If you are using PPPoE to m ake the connection, and your ISP offers multiple PPPoE session s , you can select these PPPoE sessions to constru ct V PN tunnels.  [...]

  • Page 48

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Key management  Key – Key Typ e: there are two k ey types (manual key and auto key ) available for key exchange manag ement.  Manual Key: I f manua l key is selected, no key negotiation is needed.  A ut oKey (IKE)- There are two types of op eration modes that can be used.  Main mo[...]

  • Page 49

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 IPSec policy options  Tunnel Attribute – T he defined attributes for t he tunnel.  Dead Peer Detection - T his setting allows you t o use a WAN port fo r backup or for W AN failover in the event of a connection failure.  Check Method – You can choose ICMP, Heartbeat or DPD protocol[...]

  • Page 50

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966  Set DF Flag - If this DF ( Do not Fragm ent) f lag is set, it m eans the fragmentation of this pack et at the IP level is not permitted. VPN configuration – VP N preset  ISAkmp Port– Internet Security Association and Key P rotoc ol Managem ent (ISAkm p) is designed t o negotiate, est[...]

  • Page 51

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 VPN Configuration – SA List VPN configuration – SA list The list will display the details of all Po licy Setup configuration d ata that you have setup. Y ou can modify it by mouse - clicking each row . 51[...]

  • Page 52

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 VPN Configuration – VPN Log You can monitor the VPN status through the VPN log web page. The log le vel (priority) can be chosen from VPN IKE Global Setting web page. Message Status  Time – This indicates when this message i s created using the system ti me.  Priority – It This indi[...]

  • Page 53

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 8: QoS Configuration QoS Configuration – overview The Dual WAN VPN Firew all provides QoS, which supports high quality network service. B y prioritizing outgoing packets based on user - defi ned policies, the Quality of Service feature can result in real - time applications achieving better r[...]

  • Page 54

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 QoS Configuration – QoS Setup QoS Setup QoS Feature  Enable QoS – This will allow users to enable the QoS function.  Queuing Method - The m ethod used to manage your queue. Pr iority queuing is one o f the first queuing solution s to be wi de ly i mplem ented. IP TOS  Process TOS F[...]

  • Page 55

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966  Policy Name List – When adding a new Policy, ignore this list. T o edit an existing entry, se lect it from the list and then click the "Select" button. The data fields will be updated with data for the selected entry.  Policy Nam e – Enter a suitable name. Generally, you sh[...]

  • Page 56

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 9 : M anagement Assistant Management ass istant – Admin Pass w ord Enter the desired password, re-enter it in the Verify Passwo rd field, then sa ve it. When you connect to the Load Balancer with your Browser, you will be prompted for the password as shown below.  Enter "Admin" f[...]

  • Page 57

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Management A ssi stant – Email A lert This feature will send a warning Email to inform the s ystem administrator that one of the WAN port s is disconnected. Enable/Disable E mail Alert  Enable – This enables E mail Alert t o send a warning email when a WAN port disconne ct s.  Disable[...]

  • Page 58

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966  Ping Before Notification - A threshold value for the maximum Ping s allowed to each interface on this device in a minute. The valid v alues range from 0 to 9999. Management A ssistant – SNMP This section is only us eful if you have SNMP(Simple Network Managem ent Protocol) software on a P[...]

  • Page 59

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Management A sssi stant – Sy slog This feature can send real time system information on the web page or to t he specified PC. Syslog Delivery  Sending out – Check this, if y ou want to send syslog messa ges to an other machine.  Keep Sen t messages – Check this i f y ou want to keep[...]

  • Page 60

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Management Assistant - U pgrade Firmware  [...]

  • Page 61

    HotBrick, Tel: 305 - 398 - 0888, Fax: 30 5 - 398 - 5966 10: Device Status Once both the Dual WAN VPN Firewall and the PCs are configured, operation is automatic. However, some additional Internet configuration may be required for your specific network . Refer to Chapter 6 - Advan ced Features for further details. Device status – Sy stem status ?[...]

  • Page 62

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966  DHCP Server – The status of the DHCP Server function - either "Enabled" or "Disable d ". Device Status - WA N status NAT Statistics This section displays data for each WAN port.  Connection status – This wil l di splay either Co nnected or Not Connected.  Defau[...]

  • Page 63

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Data – NA T Status LAN IP info  IP A ddre ss – The LAN IP Address of the Dual WAN VPN Firewall.  Mask A ddress – The Network Mask (Subnet Mask) for the IP Address above. A c tive W AN IP Info – There is one (1) row for each active connection. The following data is displayed for ea[...]

  • Page 64

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Device informatio n – Device Information Device Information  Firmware V ersion – Version of the Firmware currentl y installed.  NAT – Status of the NAT feature – either “ Enab le ” or “ Disable ” .  Load Balance – Status of the Load B alance feature –either “ Enab[...]

  • Page 65

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 If the "Restore Default V alue" button on this screen is clicked:  A ll your current s ettings will be erased.  The default I P address, password and A LL other settings will be restored to the factory default values.  The DCHP se rver function will b e e nabled. These change[...]

  • Page 66

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Appen dix A Specifications Model HotBrick VPN 1400/2 Dual WAN Firewall Dimensions 120mm (W) x 427mm (D ) x 43.4mm (H) Operating 0° C to 40 ° C Temperature Storage -10° C to 70 ° C Temperature Network protocol TCP/IP Protocol: Network Interfaces 16 Ethernet: 14 * 10/100BaseT (RJ45) a uto -Sw[...]

  • Page 67

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Appen dix B Window s TCP/IP Setup Overvie w TCP/IP Settings If using the default Load Balancer s ettings, and the d efault Windows 95/98 /ME/2000 settings, no c hanges need to be made.  By default, the Dual WA N VPN Firewall will act as a DHCP Server, auto matically providing a suitable IP A[...]

  • Page 68

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Ensure your TCP/IP settings are correct, as follows: Using DHCP To use DHCP, select the radio button Obtain a n IP Address auto matically. This is the default Windows settings. Restart your PC to e nsure it obtains an I P Address from the VPN 1400/2 Firewall Router. Using "Specify an IP Ad[...]

  • Page 69

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966  On the DNS Configuration tab, ensure Enabl e DNS is select ed. If th e DNS Server Search Order list is empty, enter t he DNS address provid ed by your I SP in the fields beside the A dd button, then click Add. Checking TCP/IP S ettings - Window s 2000: 6. Select Control Panel - Network and [...]

  • Page 70

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Figure B - 6: TC P/IP Propert ies (Win 2000 )  Ensure your TCP/IP settings are correct. Using DHCP To use DHCP, select the radio button Obtain an IP A ddress automatically. This is the default Windows setting. Restart your PC to ensure it obtains an I P Addres s from the Dual WAN VPN Firewal[...]

  • Page 71

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Checking TCP/IP S ettings - Window s XP: 7. Sel ect Control Pane l - Network Connection.  Right click the Local Area Connection and choose Properties. You shoul d see a screen like the following: Figure B - 7: N etwork Conf iguration (Windows XP)  Select the TCP/IP protocol for your netwo[...]

  • Page 72

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Figure B -8 : TC P/IP Proper ties (Windows XP)  Ensure your TCP/IP settings are correct. Using DHCP To use DHCP, select the radio button obtain an IP A ddress automatically. This is the default Windows setting. Restart your PC to ensure it obtains an IP Address from the Multi -WAN VPN Link B[...]

  • Page 73

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Appen dix C Troubleshooting Overvie w T his chap ter covers some com mon problems that may be encount ered while using the Dual WAN VPN Firewall and some possible s olutions for t hem . If you follow the suggested steps and the Dual WAN VPN Firewall still does not function properly , contact yo[...]

  • Page 74

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 Appen dix D : IPSec Tunnel Examples VPN Configurat ion – Examples Tunnel to HotB rick Unit The HotBrick units in the fol lowing example use registered IP addresses. You have to r eplace these addresses with I P addresses that are av ailable t o you. These setting s ar e only possible if you h[...]

  • Page 75

    HotBrick, Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 First we will m ake settings in the VPN 1400/2 Next we will m ake settings for the LB-2 VPN Note : you need d ifferent subnets a t both ends of the t unnel. This is because th e IPSec tun nel will c onnect the two subnets so t hey need to be different in order to avoid IP address conflicts. The[...]

  • Page 76

    HotBrick , Tel: 305 - 398 - 0888, Fax: 305 - 398 - 5966 76[...]