Secure Computing SG550 Manuel d'utilisateur Page 229
- Page / 297
- Table des matières
- DEPANNAGE
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
Virtual Private Networking
225
Setup an IPSec tunnel between the primary Internet IP Addresses (192.168.1.0/24 -
209.0.0.1 <-> 210.0.0.1 – 192.168.2.0/24). Default values are used in the configuration
unless otherwise specified below:
Headquarters SG configuration:
Tunnel name: PrimaryLink
Local interface: Internet port
Keying: Aggressive mode (IKE)
Local address: Static IP address
Remote address: Dynamic IP address
Route to remote endpoint: Internet port's gateway
Remote required endpoint ID: primary@branch
Local network: 192.168.1.0/255.255.255.0
Remote network: 192.168.2.0/255.255.255.0
Branch office SG configuration:
Tunnel name: PrimaryLink
Enable this tunnel: Unchecked
Local interface: Default gateway interface
Keying: Aggressive mode (IKE)
Local optional endpoint ID: primary@branch
The remote party's IP address: 209.0.0.1
Local network: 192.168.2.0/255.255.255.0
Remote network: 192.168.1.0/255.255.255.0
- Secure Computing SG 1
- User Manual 1
- Contents 2
- 1. Introduction 5
- Front panel LEDs 6
- Rear panel 7
- Front panel 9
- Specifications 10
- Bridged mode 11
- Secure by default 12
- Document Conventions 14
- 2. Getting Started 15
- Unpack the SG unit 16
- Set up the SG unit’s switch 23
- Set up the PCs on your LAN 33
- SG PCI Appliance Quick Setup 37
- Automatic configuration 40
- Manual configuration 41
- The SG Management Console 44
- 3. Network Setup 45
- Direct Connection 48
- Firewall class 49
- Ethernet configuration 49
- Interface aliases 50
- Manually assign settings 54
- Connection (dial on demand) 55
- Cable Modem 56
- Dialout and ISDN 57
- Port settings 58
- Static addresses 58
- Aliases 58
- Dialin setup 58
- Connecting a dialin client 60
- Internet Failover 65
- Edit connection parameters 66
- Internet Load Balancing 69
- Enabling load balancing 70
- High Availability 72
- Enabling high availability 73
- Advanced configurations 74
- DMZ Network 75
- Guest Network 76
- Wireless 79
- Basic wireless settings 80
- Wireless security 81
- WEP security method 82
- ACL (Access Control List) 83
- Connecting wireless clients 87
- Bridging 90
- Adding a bridge interface 91
- Edit bridge configuration 92
- Adding VLANs 95
- Editing VLANs 95
- Port Based VLANs 96
- Adding port based VLANs 98
- GRE Tunnels 100
- GRE over IPSec 101
- GRE troubleshooting 104
- Static routes 104
- Route management 105
- Hostname 112
- Workgroup/domain 113
- Administrative contact 113
- Device location 113
- DNS proxy 113
- Dynamic DNS 114
- DHCP Server 115
- DHCP addresses 116
- Address list 116
- Reserving IP addresses 118
- DHCP status 118
- Web Cache 119
- Enabling the web cache 120
- Selecting a cache size 120
- Storage 120
- Local storage 121
- Network storage share 121
- ICAP client 124
- Advanced 125
- QoS Traffic Shaping 127
- ToS traffic shaping 128
- Configuring the SIP proxy 130
- 4. Firewall 131
- Administration services 132
- Web Server 133
- SSL/HTTPS (Secure HTTP) 134
- Customizing the Firewall 135
- Definitions 136
- Addresses 137
- Interfaces 138
- Packet Filtering 139
- Rate limiting 142
- Custom firewall rules 143
- Port forwarding 144
- Source NAT 149
- 1-to-1 NAT 151
- Masquerading 152
- Configuring the UPnP gateway 153
- Connection Tracking 155
- Intrusion Detection 156
- The benefits of using an IDS 157
- IDB Configuration 158
- Dummy services 159
- Snort and IPS configuration 160
- Enabling access control 164
- User authentication 165
- Browser setup 167
- Web lists 169
- Content filtering 170
- Content or Webwasher? 171
- Content 172
- Webwasher 173
- ZoneAlarm 174
- Antivirus 175
- Enable antivirus 176
- Network storage 177
- POP email 180
- Scan all POP email 180
- SMTP email 182
- PPTP and L2TP 187
- PPTP VPN Server 187
- Add a PPTP user account 189
- Setup the remote PPTP client 189
- Windows XP PPTP client setup 192
- L2TP VPN Server 195
- Add an IPSec tunnel 197
- Add an L2TP user account 199
- PPTP and L2TP VPN Client 202
- SG unit to SG unit 204
- Set Up the Branch Office 205
- Tunnel settings page 206
- Local endpoint settings 209
- Other options 210
- Phase 1 settings 214
- Phase 2 settings page 216
- Enable IPSec 217
- Local endpoint settings page 218
- Phase 1 settings page 219
- Tunnel List 220
- NAT Traversal Support 223
- Dynamic DNS Support 223
- Certificate Management 223
- The OpenSSL application 224
- Extracting certificates 224
- Create a CA certificate 225
- Creating certificates 225
- Add certificates 227
- IPSec Failover 228
- IPSec Troubleshooting 238
- Port Tunnels 241
- Tunnel client 242
- 6. USB 244
- Share the storage device 245
- Set access permissions 245
- Join a Windows workgroup 247
- USB Printers 251
- Set up the print spool 252
- Printer Troubleshooting 257
- 7. System 259
- Backup/Restore Configuration 260
- Local backup/restore 261
- Text save/restore 262
- Administrative users 263
- Local Users 265
- TACACS+ 266
- Management 267
- Diagnostics 270
- System log 271
- Local syslog 271
- Remote syslog 271
- Email delivery 272
- Reboot and Reset 273
- Reboot device 274
- Erase configuration 274
- Reset button 274
- Flash upgrade 275
- Netflash 276
- Flash upgrade via HTTP 276
- Flash upgrade via TFTP 276
- Configuration Files 277
- Support 278
- Appendix A – Terminology 279
- Appendix B – System Log 285
- Creating Custom Log Rules 287
- Rate Limiting 290
- Boot Log Messages 291
- Practices and Precautions 292
- Failed Upgrade 294
© 2020, manymanuals.fr. Tous droits réservés | 0.147 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels