Billion s100n Guida All'Installazione Rapida

Pagina di 2
7
8
9
10
11
802.11n SSL/IPSec VPN Security Gateway
S100
BiGuard S100N  v 1.00
  Billion Electric Co., Ltd.
C
A
.
A
.
B
.
C
.
B
.
C
.
Selecting  LAN  to  Host  (Mobile 
Client)
 and clicking Next displays 
the Remote Information screen:
Type  the  remote  identifier  of  the 
remote  gateway  in  the  Remote 
Identifier
 field. Depending on
the input value, the ID type is 
autodefined 
as 
IP  Address, 
FQDN(DNS) or FQUN(E-mail).
Click  Back  to  return  to  the 
Connection  Information  screen  or 
click  Next  to  proceed  to  the 
Configuration Summary screen.
LAN to Host (for BiGuard VPN Client)
LAN to Host (for BiGuard VPN Client) uses an IPSec VPN tunnel to securely establish 
a connection to a computer that has BiGuard VPN Client installed.
Selecting LAN to Host (for 
BiGuard  VPN  Client)
  and  clicking 
Next displays the Remote 
Information screen:
Type the VPN Client IP Address for 
the BiGuard VPN Client. This value 
is  applied  on  both  remote  ID  and 
Remote  Network  as  a  single 
address.  (Note:  Ensure  that  each 
client  uses  a  different  VPN  Client 
Address).
Click Back to return to the 
Connection  Information  screen  or 
click Next to proceed to the 
Configuration Summary screen.
A.
B.
A.
A
.
The IPSec Configuration Summary screen
The Configuration Summary screen displays the data input on the selected Connection 
Type screens.
Review the connection information 
on the screen. To make any 
necessary amendments, click Back 
to return to the Connection Type 
screen. To complete the IPSec 
Configuration, click Done.
A.
B.
A.
A.
Billion Product Registration
Billion is committed to before and after sales customer services.
You will get the most out of your Billion's products after registration.
Please register online at http://www.biguard.com/register/ to receive 
valuable services and support from us.
Support
For additional information, please
refer to the User's Guide in the
software CD. For technical support,
please email to support@billion.com.    
Configuring Wireless
This section describes how to configure the BiGuard S100N with basic settings so that 
users can use wireless connection to connect to the router. Before a user can access 
through wireless, the WLAN service must be enabled.
Click Quick Start 
Wireless in 
the Menu bar. The IPSec Wizard
screen appears.
Select  Enable  to  enable  the 
WLAN service.
Type an unique ESSID to identify 
the router to wireless clients.
Select  whether  or  not  to  Enable 
(hide  ESSID)  or  Disable  (show 
ESSID).
Depending  on  where  you  are  in 
the world, please select the 
Regulation Domain which shows 
your location. Difference in 
Regulation  Domain  which  give  a 
different option for Channel ID.
Select  the  Channel  ID.  Different 
Channel  ID  communicates  on 
different  frequency  and  certain 
frequency  might  have  less 
interference  which  can  let  user 
gain better quality connection.
B.
A.
C.
D.
E.
F.
G.
H.
CONFIGURING WIRELESS
5
Select  the  Security  Mode:  Disable, 
WPA  Pre-Shared  Key,  WEP
  and 
WPA2  Pre-Shared  Key  to  enhance 
security to the wireless connection.
Click  Apply  to  confirm  the  settings 
and your wireless service will be open 
for users to connect.
Configuring IPSec
This section describes how to set up an BiGuard S100N IPSec connection using the 
IPSec Wizard. Refer to the following to configure an IPSec connection:
CONFIGURING IPSEC
6
B.
A.
C.
Click Quick Start
IPSec in the 
Menu bar. The IPSec Wizard screen 
appears.
Type a connection name in the 
Connection Name field.
LAN to LAN
LAN to LAN uses an IPSec VPN tunnel to securely establish a connection to a remote 
router.
B.
C.
D.
A.
D.
E.
Selecting LAN to LAN and clicking 
Next displays the Remote
Information screen.
Type the IP address or Hostname of 
the remote VPN gateway in the 
Remote Secure Gateway Address 
(or Hostname)
 field.
Type the IP Address and Netmask of 
the Remote Network in the supplied 
fields.
Click Back to return to the 
Connection Information screen or 
click Next to proceed to the 
Configuration Summary screen.
Select a connection type from the 
Connection Type buttons and click 
Next.
Enter a preshared key in the 
Preshared Key field. The preshared 
key is used by the Internet Key 
The following steps depend on the 
choice of connection made.
B.
A.
C.
A.
B.
C.
LAN to LAN (Mobile LAN)
LAN to LAN (Mobile LAN) uses an IPSec VPN tunnel to securely establish a connection to 
a remote router that is using Dynamic Internet IP.
LAN to Host (Mobile Client)
LAN to Host (Mobile Client) uses an IPSec VPN tunnel to securely establish a connection 
to a computer that uses Dynamic Internet IP.
Selecting  LAN  to  LAN  (Mobile 
LAN)
  and  clicking  Next  displays 
the Remote Information screen:
Type  the  remote  identifier  of  the 
remote  gateway  in  the  Remote 
Identifier
 field. Depending on the 
input value, the ID type is 
auto-defined  as  IP  Address, 
FQDN(DNS) or FQUN(E-mail).
Click  Back  to  return  to  the 
Connection  Information  screen  or 
click  Next  to  proceed  to  the 
Configuration Summary screen.
LAN to Host
LAN to Host uses an IPSec VPN tunnel to securely establish a connection to a computer.
B.
A.
B.
A.
Selecting LAN to Host and clicking 
Next displays the Remote 
Informa-tion screen:
Type the IP address or hostname of 
the  remote  VPN  device  in  the 
Remote  Secure  Gateway Address 
(or Hostname)
 field to allow a VPN 
tunnel to be established.
Click Back to return to the 
Connection  Information  screen  or 
click Next to proceed to the 
Configuration Summary screen.
Click  Add  to  add  the  account. 
Once  the  account  is  added,  the 
newly  added  account  will  be 
displayed  in  the  Account  Table 
below 
(Note:  Account  Table 
displays all the accounts under the 
chosen Group)
E.
F.
Click  Apply  to  confirm  the  settings 
and  you  will  be  directed  to  the 
Account Table page displaying all the 
created accounts.
B.
A.
Exchange protocol (IKE) to establish a shared security policy and authenticated
 keys. Each router must be able to identify its counterpart using the preshared key 
before any IPSec traffic can be passed.