Manuali utente per Avaya 3.7

Avaya

Manuale Utente (English)

Manuale Utente

Sommario

VPNmanager® Configuration Guide Release 3.7
1
Contents
5
Preface
15
Chapter 1: Overview of implementation
21
- Components of the Avaya security solution
  21
  - Security gateways
    21
  - VPNremote Client software
    22
  - VPNmanager software
    22
- Overview of the VPN management hierarchy
  23
- Preparing to configure your network
  24
  - Security gateway
    24
    - Static Routes
      26
  - IP groups
    26
  - Remote users and user groups
    26
  - VPN
    26
  - Security policies
    27
    - Firewall policies
      27
    - Denial of Service
      27
    - QoS
      28
  - VoIP
    28
  - Additional features
    29
    - NAT
      29
    - SNMP
      29
    - Syslog
      30
    - Client IP address pooling
      30
    - SSL for Directory Server
      30
- Sequence to configure your VPN
  30
Chapter 2: Using VPNmanager
33
- About VPNmanager administrators
  33
  - Role Based Management
    33
- Log into the VPNmanager console
  35
  - Add a policy server
    35
  - Open Domain
    36
- Navigating the main window
  36
  - File menu
    37
  - Edit menu
    39
  - View menu
    39
  - Tools menu
    40
  - Help menu
    40
  - Toolbar
    40
  - VPN view pane
    42
    - Network Diagram View
      42
    - Tiled View
      43
    - Tree View
      43
  - Alarm monitoring pane
    44
- Configuration Console window
  44
  - Configuration Console Menu bar
    45
    - File menu
      45
    - Edit menu
      45
    - View menu
      46
    - Tools menu
      46
    - Toolbar
      47
    - Contents pane
      47
    - Details pane
      47
- Update Devices
  47
- Preferences
  48
  - General tab
    48
  - Dyna Policy Defaults (User)
    49
  - Dyna Policy Defaults (Global)
    49
  - Dyna Policy Authentication
    50
  - Advanced
    51
  - Remote Client
    51
  - Alarm/Monitoring
    52
  - TEP Policy
    52
Chapter 3: Setting up the network
55
Chapter 4: Configuring IP Groups
97
- About IP Groups
  97
  - Creating a New IP Group
    97
- New IP Group
  98
- IP Group - General tab
  98
- Add IP Group member
  100
- Memo
  104
Chapter 5: Configuring remote access users
105
- Default client configuration
  105
- Using dyna-policy
  106
- Configuring a global dyna-policy
  107
- Configure a default CCD with global dyna-policy
  113
- Creating new user object
  114
  - Default user
    115
- About creating individual dynamic-policy
  115
  - User - General tab
    115
  - Memo tab
    116
  - Dyna-Policy tab
    116
  - Actions tab
    117
- Configuring a remote user object
  118
- Information for VPNremote Client users
  119
- Using Policy Manager for user configuration
  120
  - Client IP address pool configuration
    120
    - Add Client IP address pool
      121
    - Add Client DNS
      121
    - Add Client WINS
      122
    - To configure the Client IP configuration
      122
  - Configuring client attributes
    122
    - Creating a message
      122
    - Enforce brand name
      123
- RADIUS/ACE Services
  124
  - Enable RADIUS/ACE
    124
  - Settings
    125
  - RADIUS concepts
    125
  - The RADIUS protocol
    126
  - Add (RADIUS/ACE server)
    126
    - Authenticating (secret) password
      126
    - RADIUS server data
      126
    - To add a RADIUS server:
      127
Chapter 6: Configuring user groups
129
- New user group
  129
- User Group - General tab
  130
- User Group - Memo tab
  130
- User Group - Actions tab
  131
- Configuring a user group
  131
Chapter 7: Configuring VPN objects
133
- Types of VPN objects
  133
  - SKIP VPNs
    133
  - IKE VPNs
    134
  - VPN packet processing modes
    134
- Default VPN policy
  135
- Creating a new VPN object
  136
- Creating a default VPN
  136
- Creating a designated VPN
  137
- Using the VPN tabs
  138
  - General tab
    138
    - General tab with IKE
      138
    - General tab with SKIP
      139
  - Memo tab
    139
  - Members-Users tab
    140
  - Members-IP Groups tab
    140
  - Security (IKE) tab
    141
    - Pre-Shared Secret
      144
  - Security (IPSec)
    144
    - IPSec Proposals
      145
  - Add IPSec proposal
    146
  - Actions tab
    148
  - VPN configuration
    148
    - Export
      148
  - Rekey site-to-site VPN
    149
    - Rekey
      149
- Advanced VPN tab
  149
- Configuring a SKIP VPN
  150
- Configuring an IKE VPN
  152
- Enabling CRL checking
  156
- Exporting a VPN object to an extranet
  158
  - VPN Object export checklist
    159
  - Export procedure
    160
- Importing a VPN object from an extranet
  161
- Rekeying a VPN object
  162
Chapter 8: Establishing security
163
- Firewall rules set up
  163
  - Levels of firewall policy management
    163
  - Firewall rules
    164
  - Firewall templates
    169
    - Predefined templates
      170
    - User defined templates
      170
- Services
  172
- Device Group
  173
- Denial of Service
  173
- Voice Over IP
  175
  - Using the IP Trunking Call Model
    175
    - Using the LRQ Required checkbox of the IP Trunking Call Model
      176
  - Using the Gatekeeper Routed Call Model
    178
    - Add gatekeeper settings
      179
- QoS policy and QoS mapping
  180
  - QoS Policy
    180
  - QoS mapping
    184
- Packet Filtering
  184
  - What can be filtered
    185
  - Packet Filtering and NAT
    185
  - Advanced
    186
  - Marking packets for differentiated services (QoS)
    192
  - Packet filtering firewall
    196
    - Add firewall policy
      197
Chapter 9: Using advanced features
199
- Device Advanced
  199
  - ARP
    200
  - Path MTU Discovery
    201
  - NAT Traversal
    203
  - Port for dyna-policy download
    204
  - Port for Secure Authentication
    204
  - Private IP Address (VPNos 3.x)
    204
  - Send Device Names
    205
  - SuperUser Password (VPNos 3.x)
    206
  - Tunnel Persistence
    207
- TEP Policy
  209
- Servers
  210
  - Add servers
    210
  - Managing the server list
    211
- Resilient Tunnel
  212
  - Tunnel Switching
    213
  - Creating a resilient tunnel
    214
  - Add resilient tunnel
    215
    - Prerequisites
      215
  - Managing the resilient tunnel list
    216
  - Stopping and starting resilient tunnel services
    217
    - Primary end-point service
      217
    - Secondary end-point service
      217
- Failover TEP
  218
  - Configuring failover TEP
    219
- Advanced Action
  219
  - Switch Flash
    220
  - Reset password
    220
  - Disable FIPS
    220
- High Availability
  221
- Failover
  226
  - Failover reconnect
    229
- Converged Network Analyzer Test Plug
  230
- Keep Alive
  232
- Policy Manager - My Certificates
  234
Chapter 10: Monitoring your network
245
- Using SNMP to monitor the device
  245
  - Adding Admin Users for SNMPv3
    247
  - VPN active sessions
    247
- Syslog Services
  248
  - Add Syslog Policy
    249
- Using Monitor
  250
  - Enterprise MIB
    250
  - Monitoring wizard
    250
    - Define Custom
      267
  - Monitoring wizard (Presentation)
    268
    - Presentation
      268
- Monitoring alarms
  268
  - Alarm Types
    269
- Report Wizard
  270
  - Generating the report
    272
- Device diagnostics
  273
Chapter 11: Device management
275
- Using the Management tab
  275
  - Setting Up SSH and Telnet
    275
  - Changing device administrator’s passwords
    276
- Using the Connectivity tab
  277
  - Check connectivity by ping
    278
  - Check Connectivity by Proxy Ping
    279
- Using the Device Actions tab
  279
  - Update Configuration
    280
  - Reset Device Time
    280
  - Reboot Device
    280
  - Re-setup Device
    281
  - Import Device Configuration
    281
  - Ethernet Speed
    282
  - Redundancy
    283
    - Network Interface Status
      283
    - Switching
      284
- Importing and exporting VPN configurations to a device
  284
  - Export VPN
    284
  - Exporting RADIUS
    285
Chapter 12: Upgrading firmware and licenses
287
- Centralized firmware management
  287
- Device - Upgrade tab
  288
  - Upgrading a security gateway’s firmware
    289
  - License
    290
  - Encryption Strength
    291
  - Remote Access (VSU-100 Only)
    291
Appendix A: Using SSL with Directory Server
293
Appendix B: Firewall rules template
297
- General
  297
- Public zone firewall templates
  298
- Private zone firewall templates
  303
- Semi-private zone firewall templates
  305
- DMZ zone firewall templates
  309
- Management zone security
  311
- Converged Network Anaylyzer template
  311
Glossary
313
- A
  313
- B
  313
- C
  313
- D
  314
- E
  315
- F
  315
- H
  315
- L
  316
- M
  316
- N
  316
- O
  317
- P
  317
- R
  317
- S
  317
- Syslog
  318
- T
  318
- U
  318
- V
  318
Index
319
- Numerical
  319
- A
  319
- B
  319
- C
  319
- D
  320
- E
  320
- F
  321
- G
  321
- H
  321
- I
  321
- K
  322
- L
  322
- M
  322
- N
  322
- P
  322
- Q
  323
- R
  323
- S
  324
- T
  324
- U
  325
- V
  325
- W
  325
- X
  326
- Z
  326

Dimensioni:

2,99 MB
Pagine:

326
Language:

English

Apri il manuale