Resumen del contenido incluido en la página 1
Twin WAN VPN Gateway
� � � � � � � � � �
CUTTING EDGE INNOVATIONS.
� � � � � � � � � � � � � � �
Resumen del contenido incluido en la página 2
Table of Contents Introduction 4 Features 5 Physical Details 7 Basic Setup 9 Configuring your LAN 10 Connecting Broadband Modems 12 XC-DPG503 Configuring for Interent Access 13 Twin WAN VPN Gateway Configuring your LAN PCs 14 Advanced Port 16 Port Options 17 Load Balance 18 Advanced PPPoE 19 Advanced PPTP 20 Advanced Setup 21 Host IP Setup 22 Virtual Server 23 Custom Virtual Server 24 Special Applications 25 Dynamic DNS 26 Multi DMZ 27 UPnP 27 Advanced Features 28 Security Management 30 Block URL 3
Resumen del contenido incluido en la página 3
Table of Contents QoS Configuration 33 VPN Configuration 34 IPSec Global Setting 35 Policy Setup 36 Management Assistant 38 SNMP 38 Email Alert 38 Syslog 39 Upgrade Firmware 40 Operation & Status 42 System Status 42 Restore Factory Defaults 43 WAN Status 43 LAN Status 43 Advanced LAN Configuration 44 Existing DHCP Server 44 Static Routing 45 Appendices 47 Appendix A 47 Appendix B 48 Appendix C 51 3
Resumen del contenido incluido en la página 4
Chapter 1 - Introduction XiNCOM XC-DPG503 is a VPN capable Dual WAN Gateway with the industry standard IPsec encryption. It XC-DPG503 provides extremely secure LAN-to-LAN connectivity over the Internet. The 503 supports VPN by encryption, Twin WAN VPN Gateway encapsulation, and authentication using the following methods: DES/3DES/AES, MD5, SHA-1 and SHA-2; up to 50 IPsec tunnels are permitted. Use TWO ISPs for expanded bandwidth and redundancy Chapter Contents Using two separate ISPs provide
Resumen del contenido incluido en la página 5
Features Figure 1. How it works Built-in VPN Endpoint Full VPN Endpoint with support for up to 50 VPN tunnels using the IPsec encryption protocol. Solid VPN Security Full VPN Endpoint with Multiple Connection Methods support for up to 50 VPN All popular DSL and Cable Modems and connection methods are supported, including Fixed IP, Dynamic tunnels using the IPSec IP, PPPoE, even multiple-session PPPoE. encryption protocol. 2 x 10/100 WAN Ports The XC-DPG503 incorporates dual 10/100 WAN ports
Resumen del contenido incluido en la página 6
Features Other Features: Map Host URL DHCP Server Support In addition to the DNS configuration, Map Host URL allows for users to select a URL to Dynamic Host Configuration Protocol provides a dynamic IP address to PCs and other map to the IP address of a local host. devices upon request. The XC-DPG503 can act as a DHCP Server for devices on your local LAN. QoS Configuration You will be able to schedual and direct your network traffic to take advantage of your Multi Segment LAN Support available
Resumen del contenido incluido en la página 7
Physical Details Front Panel: Twin WAN VPN Gateway X C - D P G 5 0 3 Operation of the Front Panel LEDs is as follows: System: Power OFF - No Power. ON - Normal Operation Status OFF - Normal Operation ON - Firmware not loaded or Hardware Error Blinking - Data in/out WAN: LINK/ACT ON - Physical connection to the Broadband modem on WAN port 1/2 established. OFF - No physical connection on WAN port 1/2. 10M/100M ON - Physical connection using 100BaseT on WAN port 1/2 established. OFF - 10BaseT conne
Resumen del contenido incluido en la página 8
Physical Details Front Panel Status and Error conditions LED Action Condition WAN1 LINK/ACT & 10M/100M LEDs flash alternatively. Firmware Download in progress. WAN1 LINK/ACT & 10M/100M LEDs flash concurrently. MAC address not assigned. WAN1 LINK/ACT & 10M/100M LEDs solid On SDRAM error WAN2 LINK/ACT & 10M/100M LEDs solid On Timer/Interrupt error LAN1 LINK/ACT & 10M/100M LEDs solid On LAN/WAN error Rear Panel: DC 5V WAN2 Reset LAN Ports WAN1 LAN Ports Connect the PCs to these ports. Both 10BaseT an
Resumen del contenido incluido en la página 9
Chapter 2 - Basic Setup XC-DPG503 Twin WAN VPN Gateway Chapter Contents Overview • Overview Basic setup of your XC-DPG503 wil involve the following steps: • Procedure 1. Configuring your LAN 1. Connect the XC-DPG503 to one (1) PC and configure it to your existing LAN. 2. Connecting Broadband Modems 2. Connecting one or two Broadband Modems to your XC-DPG503. 3. Configuring for Internet Access 3. Configuring the XC-DPG503 for Interent Access. 4. Configuring your LAN PCs 4. Configuring all PCs on your L
Resumen del contenido incluido en la página 10
Configuring the XC-DPG503 for your LAN Figure 1. Password Dialog a Procedure 1. Use a standard LAN cable to connect your PC to any LAN port on the XC-DPG503. 2. Connect the power adapter and power up the XC-DPG503. Only use the power adapter provided with the product; using a different one may cause hardware damage. 3. Start your PC or restart your PC if it is already running. Once restarted, the PC will then obtain an IP address from the XC-DPG503. 4. Start your WEB browser. 5. In the Address
Resumen del contenido incluido en la página 11
Configuring the XC-DPG503 for your LAN Figure 3. LAN & DHCP Ensure these settings are suitable for your LAN: • The default settings are suitable for many situations. • See the following table for details of each setting. 11
Resumen del contenido incluido en la página 12
Connecting two broadband modems Figure 4. Installation Diagram for XC-DPG503 a Procedure DC 5V WAN2 Reset LAN Ports WAN1 1. Ensure the XC-DPG503 and the DSL/Cable modem are powered OFF. Leave the modem or modems connected to their data line. 2. Connect the Broadband modem(s) to the XC-DPG503. If using only one (1) Broadband modem, connect it to the “WAN 1” port. Broadband Modem Broadband Modem 3. Use standard LAN cables to connect PCs to the LAN ports on the XC-DPG503. Both 10BaseT and 100BaseT
Resumen del contenido incluido en la página 13
Configuring for Internet Access Figure 5. Primary Setup Screen Select Primary Setup from the menu. 1. Configure WAN 1 and/or WAN 2 as required. 2. For any of the following situations, refer to Chapter 3: Advanced Port Setup for any further configuration which may be required such as: • Using both ports • Multiple IP addresses on either port • Multiple PPPoE sessions • PPTP connection method Settings - Primary Setup Connection Mode Select the appropriate setting: • Enable – Select this if you have
Resumen del contenido incluido en la página 14
Configure PCs on your LAN Overview For Windows XP 1. Select Start Menu > Control Panel > Network and Internet Connections. For each PC, the following may need to be configured: 2. Select Set up or change your Internet Connection. TCP/IP network settings 3. Select the Connection tab, and click the Setup button. Internet Access configuration 4. Cancel the pop-up Location Information screen. 5. Click Next on the New Connection Wizard screen. TCP/IP Settings 6. Select Connect to the Internet and click
Resumen del contenido incluido en la página 15
Configure PCs on your LAN For Apple Clients 1. Open the TCP/IP Control Panel. 2. Select Ethernet from the Connect via pop-up menu. 3. Select Using DHCP Server from the Configure pop-up menu. The DHCP Client ID field can be left blank. 4. Close the TCP/IP panel, saving your settings. Note: If using manually assigned IP addresses instead of DHCP, the required changes are: • Set the Router Address field to the XC-DPG02’s IP Address. • Ensure your DNS settings are correct. For Linux Clients To acces
Resumen del contenido incluido en la página 16
Chapter 3 - Advanced Port XC-DPG503 Twin WAN VPN Gateway Chapter Contents • Overview • Port Options Overview • Load Balance • Advanced PPPoE Port Options contains some options which can be set on either or both WAN ports. For most situations, the • Advanced PPTP default values are satisfactory.Virtual Server Load Balance screen is only functional if you are using both WAN ports. It allows you to determine the proportion of WAN traffic sent through each port. Advanced PPPoE setup is require
Resumen del contenido incluido en la página 17
Port Options Figure 6. Port Options Connection Validation PPPoE / PPtP Connection Options Transparent Bridge Mode Health Check Auto Dialup Bridge Mode Use this field to select the type of connection validation When set to Enable a connection will be established When set to Enable, this WAN port does not use NAT & to perform. When set to ICMP, the XC-DPG503 sends whenever outgoing WAN traffic is detected. If not Load Balance function when LAN/WAN IP have the real out ICMP echo requests. When se
Resumen del contenido incluido en la página 18
Load Balance Figure 7. Load Balance Console Configuring Load Balancing The Twin WAN line of products uses a session based Load Balancing algorithm by allowing you to manage sessions using several different options: Bytes rx+tx By monitoring real time speed of both WAN connections, the XC-DPG503 will establish new sessions on the WAN port with the lower speed. Use this if there is a fairly even speed on both lines and would like to benefit the most from the speed available. Packets rx+tx Same
Resumen del contenido incluido en la página 19
Advanced PPPoE Figure 8. Advanced PPPoE The screen is required in order to use multiple PPPoE sessions on the same WAN port. It can also be used to manually connect or disconnect a PPPoE session. Settings - Advanced PPPoE WAN Port Select the desired Port and Session, then click the “Select” button. The data for the selected Port/Session will then be displayed in the PPPoE Session WAN IP Account section. WAN IP Account • User Name – Enter the PPPoE user name assigned by your ISP. • Password
Resumen del contenido incluido en la página 20
Advanced PPTP Figure 9. Advanced PPTP Settings - Advanced PPTP WAN Port Select the desired Port and click the “Select” button. The data for the selected Port will then be displayed in the WAN IP Account section. WAN IP Account • User Name – The PPTP user name (login name) assigned by your ISP. • Password – This field is associated with the User Name above. This is assigned by your ISP and used to login to the PPTP Server. • Verify Password – Re-enter the PPTP password assigned by your ISP. • IP
