®
Intel Express 8205 and
8205 with VPN Routers
Quick Start
Download from Www.Somanuals.com. All Manuals Search And Download.
Copyright © 2000, Intel® Corporation. All rights reserved.
Intel Corporation, 5200 NE Elam Young Parkway, Hillsboro OR 97124-6497
Intel Corporation assumes no responsibility for errors or omissions in this manual. Nor does Intel make any commitment to update the
information contained herein.
* Other product and corporate names may be trademarks of other companies and are used only for explanation and
to the owners’ benefit, without intent to infringe.
First Edition
October 2000
A43586-001
Download from Www.Somanuals.com. All Manuals Search And Download.
Contents
Quick Start
1
2
Install the Router Hardware ............... 2
Select a Scenario............................... 3
Scenario Descriptions....................................4
Firewall Filters and NAT ...............................10
Using the VPN Option ..................................11
Configuring a VPN Tunnel ............................12
VPN Tunnel Examples ..................................13
VPN Tunnel Worksheet.................................15
1
Download from Www.Somanuals.com. All Manuals Search And Download.
Install the Router Hardware
Install the Router
Hardware
1
LAN 1:
Connect
to local
network
1
Connect
to power
source
4
See “About
the Console
Port” below.
Connect the LAN 1 port to your
local network
1 Connect the LAN 1 port to the local
network or the Ethernet port of a PC,
using the provided blue cable.
Input
5.1VDC/2.6A
Console
Hub
II
PC
X
Recovery
Power
LAN 2
10 Mbps
LAN 1
100 Mbps
MAC
ADDRESS
CASE
00AA00D1865D
ASSY
123456 789
10
/
2 Set the HUB/PC switch to Hub when
connecting to a network hub or Ethernet
switch, and PC when connecting
directly to a PC.
user
supplied
Set switch:
2
LAN 2:
Connect
to DSL or
cable
3
Hub II for hub or
Connect the LAN 2 port to your
DSL or cable modem
switch
PC X for single
modem
computer
3 Connect the LAN 2 port to your DSL or
cable modem. Use the appropriate cable
that came with your modem.
Figure 1. Connecting the Express 8205 Router.
Connect the power
4 Connect the router to a power source
(100-250 V AC) using the provided
power supply and cord.
LAN 1 and LAN 2 LEDs
Check the LEDs
Green - port is operational.
If the Status, LAN 1, and LAN 2 LEDs are
all green, the router begins to assign a set of
pre-configured IP addresses to your local
network using its DHCP server.
Orange - port is down. Check cables.
Status LED
Green blinking - router is using factory default settings
and ready for configuration.
Red - error, router is not operational.
If any LEDs are red, orange, or off:
Figure 2. Check Status and LAN LEDs.
• Make sure the PC/Hub switch is set
correctly, as described in step 2 above.
About the Console Port
• Make sure all the cables are securely
connected to the correct devices as
described in the steps above.
You can use the console port to manage the
router with Local Management, through a
directly connected workstation. See the Online
®
Documentation on the Intel Device View CD-
ROM for information about managing the router
if you do not have a Windows-based operating
system, or if you are using Telnet to manage the
router from a remote location.
2
Download from Www.Somanuals.com. All Manuals Search And Download.
Select a Scenario
LAN 1 port connects
to the local network, and the
router’s DHCP server assigns
IP addresses to the LAN
Select a Scenario
2
PC
®
Intel Router
Intel Router
This guide describes four scenarios in
Status
LAN
100 Mbps
WAN Link
WAN Switch
WAN Control
Test Mode
®
ISP
which you can connect the router to the
Internet through a DSL or cable modem.
xDSL/cable
modem
PC
Scenario 1: Router is the DHCP
Server
LAN 2 port gets dynamic
IP address from ISP
7068
In this scenario, the LAN PCs are config-
Figure 3. Scenario 1 - LAN PCs Get IP Address from
Router’s DHCP Server. You can access the Internet
through your DSL or cable modem once you have
connected the router cables. See page 4 for information.
ured as DHCP clients, and you do not need
to do any configuration other than installing
the router and connecting cables. As long as
the PCs on your LAN request IP configura-
tion from a DHCP server, the router assigns
a preset range of IP addresses to your LAN.
See page 4.
LAN 1 port connects
to the local network
PC
®
Intel Router
About scenarios 2, 3, and 4
Intel Router
Status
LAN
100 Mbps
WAN Link
WAN Switch
WAN Control
Test Mode
ISP
xDSL/cable
modem
Before configuring the router for these
scenarios, you must install Intel® Device
View as described on page 5.
PC
LAN 2 port gets dynamic
IP address from ISP
7069
DHCP Server
Scenario 2: Cable Modem
Existing DHCP
server assigns
In this scenario, as shown in Figure 8 on
page 6, you connect the LAN 2 port to a
cable modem. Your ISP (Internet service
provider) provides a dynamic IP address
and a name to identify the router, which you
must configure. See page 6.
LAN IP addresses
Figure 4. Scenario 3 - Existing DHCP Server on
LAN. For instructions on setting up this scenario,
see page 7.
LAN 1 port connects
to the local network
Scenario 3: Existing DHCP Server
In this scenario, your LAN uses an existing
DHCP server. You must change the router’s
default LAN 1 IP address and disable the
router’s DHCP server. See page 7.
PC
®
Intel Router
Intel Router
Status
LAN
100 Mbps
WAN Link
WAN Switch
WAN Control
Test Mode
ISP/
Internet
xDSL/cable
modem
PC
LAN 2 port gets static
IP address from ISP
Scenario 4: Static IP from ISP
In this scenario, the LAN 2 port uses a static
(permanent) IP address assigned by the ISP
each time the modem connects to the
E-mail Server
Internet users must be
able to access this internal
e-mail server
7071
Internet. You can also configure the router
to allow access to internal servers on the
local network from the Internet (such as an
e-mail or Web server). See page 9.
Figure 5. Scenario 4 - Static IP Address on
LAN 2. For instructions on setting up this scenario,
see page 9.
3
Download from Www.Somanuals.com. All Manuals Search And Download.
Scenario Descriptions
Scenario 1
LAN 2 port
Dynamic IP address
from ISP
LAN 1 port
192.168.1.1
LAN PCs Get IP Address from
DHCP Server on Router
PC
192.168.1.2
®
Intel Router
Intel Router
Status
LAN
100 Mbps
WAN Link
WAN Switch
WAN Control
Test Mode
ISP
• The default IP address on the router’s LAN 1
port is 192.168.1.1. The router automatically
assigns IP addresses sequentially to the hosts
(PCs and servers, for example) on your LAN,
using the address range from 192.168.1.2 to
192.168.1.254.
xDSL/cable
modem
PC
192.168.1.3
Router’s DHCP
server configures
LAN
7076
Figure 6. This scenario does not require any
configuration on the router.
• The LAN 2 port accepts an IP address from the
ISP, and the router automatically configures
your LAN. As long as your DSL or cable
modem is working properly and has a connec-
tion to the Internet, you are finished with
setting up this scenario. The PCs on your LAN
can now access the Internet.
Parameter
Setting
LAN 1 IP Address
192.168.1.1
Enabled
DHCP Server
Start of Address Range
Last Address in Range
Network Address Translation
192.168.1.2
192.168.1.254
Enabled
Network address translation (NAT) and
security
Table 1. Router’s factory default settings. The
settings shown in this table allow the router to work in
this scenario with no further configuration.
In this scenario, the router automatically maps the
dynamic IP address you receive from the ISP to the
internal IP addresses it assigns to the LAN.
The NAT mappings provide adequate security to
prevent access to your network from the Internet.
However, you can set up firewall filters to limit
access to the Internet from the internal LAN (for
example, to allow LAN users access to only e-mail
and WWW traffic through the Internet connection).
See page 10 for more information.
To reset the router to factory defaults:
1 Press the Recovery button located on the
back of the router. After a few seconds the
Status LED blinks orange.
2 Press and hold the Recovery button until the
LEDs begin to blink in sequence. When the
Status LED blinks green, the router is set to
factory default.
4
Download from Www.Somanuals.com. All Manuals Search And Download.
Scenario Descriptions
Install Intel® Device View for
Scenarios 2, 3, and 4
®
We recommend using Intel Device View (manage-
ment software provided with the router) to configure
the router for scenarios 2, 3, and 4. Intel Device
View manages and configures the router from a PC
running Microsoft Windows* 95, 98, 2000, or
Windows NT* 4.0.
Install Intel Device View
Figure 7. Intel Device View Installation. Choose Install
for Windows, then follow the screen instructions in the
installation wizard.
1 Insert the Intel Device View CD-ROM in your
computer’s CD-ROM drive.
If the installation screen does not appear within 10
seconds, run the autoplay.exe file on the CD-
ROM.
2 Click Install for Windows.
The other installation options do not apply to the
scenarios described in this guide. See the Online
Documentation for more information about the
Install for Web and Install as Plug-in options.
For non-Windows* operating systems:
Consult the Online Documentation on the Intel
Device View CD for information on configuring
the router through Local Management. You can
access Local Management through Telnet or
directly through the console port on the router.
3 Follow the screen instructions to complete the
installation.
4 Select Launch Intel Device View on the final
wizard dialog box, and then continue with the
instructions for your scenario.
Scenario 2 - Connecting to a Cable Modem
See page 6
To view the Online Documentation:
• In Intel Device View, select Online
Documentation from the Help menu
Scenario 3 -Existing DHCP Server on LAN
See page 7
• If you are not using Intel Device View, open the
Index.htm file located in the \Manuals\Router
User Guide folder on the Intel Device View
CD-ROM.
Scenario 4 - Static IPAddress from ISP
See page 9
Firewall Filters and NAT for Scenarios 2, 3, and 4
See page 10
5
Download from Www.Somanuals.com. All Manuals Search And Download.
Scenario Descriptions
Scenario 2
LAN 1 port connects
to the local network
using this IP address:
ISP uses a name to
identify the router on the
cable modem connection
Connecting to a Cable
192.168.1.1
Modem
PC
®
Intel Router
Intel Router
If you are connecting the LAN 2 port to a cable
modem for Internet access, some ISPs require that
you configure a name to identify the router. Check
your Internet subscription to see if your ISP requires
this setting. The name of this setting depends on
your ISP, but alternative names include Device
Name, System Name, Host Name, or Account
Name.
Status
LAN
100 Mbps
WAN Link
WAN Switch
WAN Control
T
est Mode
ISP/
Internet
Cable
PC
modem
LAN 2 port gets dynamic
IP address from ISP
Server
7077
Figure 8. Cable modem with name to identify
Enter the router name provided in your
Internet subscription
router. Some ISPs might require you to enter a
name that identifies the router each time the cable
modem connects to the Internet.
1 From the Configuration menu, select Connection
Setup.
2 Double-click the LAN 2 port in the
Ports/Connections list.
3 On the first wizard screen, click “Connect to the
Internet through a DSL modem”, and then click
Next.
5 Click Dynamic IPAddress from ISP (using
DHCP).
6 Type the Router Name provided by your ISP.
Some ISPs might call this the Device Name,
System Name, Host Name, or Account Name.
Contact your ISP if you are not sure about this
setting.
Figure 9. Enter the Router Name. Select Dynamic
IP Address and type the name assigned by your
ISP.
7 Click Next.
Firewall filtering and local servers
To increase security to your local LAN, or to
manage the types of traffic allowed on the LAN,
you can set up firewall filters. If you have any
servers on your local LAN that must be accessible
from the Internet, you need to set up the LAN 2 port
to translate the internal server address to the
external address received from the ISP. See page 10.
6
Download from Www.Somanuals.com. All Manuals Search And Download.
Scenario Descriptions
Scenario 3
Internet
Existing DHCP Server on the
LAN
PC
If your LAN uses an existing DHCP server, complete
the following steps to get Internet access through the
DSL/cable modem
DSL or cable modem.
Input
5.1VDC/2.6A
Console
Hub
II
PC
X
Connect a PC directly to the Router
Recovery
Power
WAN
LAN
1
LAN
2
MAC
CASE
ADDRESS
00AA00D1865D
ASSY
123456 789
10 Mbps
10
/ 100 Mbps
1 Use the provided blue cable to connect a PC to the
router’s LAN 1 port. You must temporarily
remove this PC from the network.
7070
Set this switch to “PC”
Figure 10. Connect a PC directly to the router.
2 On the back of the router, set the Hub/PC switch
to “PC”.
3 Configure the PC to obtain an IP address from a
DHCP server. See the documentation that came
with your PC for instructions on this setting.
4 Restart your PC; otherwise you will not be able to
contact the router.
Disable the DHCP server on the router
®
1 If it is not already open, start Intel Device View.
Figure 11. Open the router for management.
2 In the Discovered Device Tree, expand the Subnet
192.168.1 (see Figure 11).
3 Double-click on 192.168.1.1 (the default IP
address for LAN 1).
4 From the Configuration menu, select DHCP
Server Setup.
5 Clear the Enable DHCP Server check box.
6 Click OK.
Figure 12. Disable the router’s DHCP server.
7
Download from Www.Somanuals.com. All Manuals Search And Download.
Scenario Descriptions
Change the LAN 1 IP address
1 From the Configuration menu, select Connection
Setup.
2 Double-click the LAN 1 port in the
Ports/Connections list.
3 Type a new IP address for the router, which must
be within the range of IP addresses your DHCP
server assigns (and on the same subnet as your
LAN).
4 Click OK.
5 On the Connection Setup dialog, click Accept.
Figure 13. Change the LAN 1 IP address. Type an IP
address on the same subnet as your local network.
6 From the Configuration menu, select Save to Flash
Memory.
7 Click Yes when asked if you want to proceed.
Restore your network connections
1 Disconnect the PC from the router (and reconnect
it to the normal network).
WWW server must
be accessible
from the Internet
2 On the back of the router, set the Hub/PC switch
to “Hub”.
3 Connect the LAN 1 port on the router to the local
network (to an Ethernet hub or switch, for
example).
Firewall filtering and local servers
To increase security to your local LAN, or to manage
the types of traffic allowed on the LAN, you can set
up firewall filters. If you have any servers on your
local LAN that must be accessible from the Internet,
you need to set up the LAN 2 port to translate the
internal server address to the external address
DSL modem
Intel Router
Status
LAN
100 Mbps
WAN Link
WAN Switch
WAN Control
Test Mode
Internet
Intel® Router
provides firewall
filters
7075
Figure 14. Firewall filtering and access to servers
on your LAN from the Internet.
received from the ISP. See page 10.
8
Download from Www.Somanuals.com. All Manuals Search And Download.
Scenario Descriptions
LAN 1 port connects
Scenario 4
to the local network
using this IP address:
192.168.1.1
Static IP Address from ISP
and Server Access on LAN 1
In this scenario, you get a permanent (static) IP
address from your ISP. The following section
describes how to configure the static IP address. This
section also describes how to set up firewall filters
on the LAN 2 port, and allow access to local servers
(such as WWW or e-mail) from the Internet.
PC
®
Intel Router
Intel Router
Status
LAN
100 Mbps
WAN Link
WAN Switch
WAN Control
Test Mode
ISP/
Internet
xDSL/Cable
modem
PC
LAN 2 port gets static
IP address from ISP
E-mail Server
192.168.1.10
Internet users must be
able to access this internal
e-mail server
7072
Figure 15. Scenario using a static IP address and
internal servers accessible from the Internet.
Configure a static IP address on LAN 2
1 From the Configuration menu, select Connection
Setup.
2 Double-click the LAN 2 port in the
Ports/Connections list.
3 On the first wizard screen, click “Connect to the
Internet through a DSL modem”, and then click
Next.
5 Click Static IP Address.
6 Type the IPAddress and Network Mask assigned
by your ISP.
7 Type the ISP Gateway Address (the IP address of
the ISP’s gateway router). Contact your ISP if you
are not sure about this setting.
Figure 16. Configure a static IP address on the
LAN 2 port.
8 Click Next. See the next page of this guide for
instructions on the following wizard dialog boxes,
if applicable.
9
Download from Www.Somanuals.com. All Manuals Search And Download.
Firewall Filters and NAT
Firewall Filtering and NAT for
Servers on the LAN
This section describes how to set up firewall filters
and NAT (network address translation) for servers on
your LAN, using the LAN 2 port setup wizard.
Create firewall filters for LAN users
For added security, you can enable firewall filtering
on the LAN 2 port. If you enable the firewall, then
you must choose which types of traffic to allow
through the firewall on the Internet connection. For
example, in order for LAN users to browse the Web,
you must enable the WWW firewall filter.
Figure 17. Set up a firewall and filters.
1 From Connection Setup dialog box, double-click
the LAN 2 port.
2 On the first wizard screen, click “Connect to the
Internet through a DSL modem”, and then click
Next.
3 Fill out the IP Address dialog box as appropriate
for your scenario, and then click Next.
4 Select the Enable Firewall Filters check box.
5 Select the check box corresponding to the types of
traffic to allow from the LAN to the Internet, and
then click Next.
Access internal servers from the Internet
Figure 18. Allow access to internal servers from the
If you have servers on the internal LAN that must be
accessible from the Internet (such as a mail server or
a WWW server), configure the LAN 2 port to
Internet.
recognize these servers. The router automatically
creates NAT (Network Address Translation) map-
pings between the IP address the router receives from
the ISP and the internal address used for the servers.
1 Click the type of server to which the router should
allow access from the Internet.
2 Type the server IP address, which must be on the
same subnet as the address range assigned by your
DHCP server.
3 Click Next and follow the screen instructions.
10
Download from Www.Somanuals.com. All Manuals Search And Download.
Using the VPN Option
Setting up a VPN Tunnel
A VPN (virtual private network) tunnel is a connec-
tion to a remote site over the public Internet. VPN
tunnels are a cost effective solution for sending and
receiving secure business data between two sites.
®
If you ordered an Intel 8205 VPN router or
®
purchased one of the VPN Options for Intel
Express Routers separately, you can create a VPN
over the Internet.
A VPN provides the security of a private network
without the costs associated with a wide area
network (WAN). The costs for a VPN consist of only
the subscription to an Internet service provider (ISP)
and local calls to your ISP.
Figure 19. Configuring a VPN Tunnel. Select
Connection Setup from the Configuration menu.
Note: You must have a working connection to the
Internet (through the DSL or cable modem connected
to the LAN 2 port) before you can add a VPN tunnel.
To add a VPN tunnel
1 Complete the VPN Tunnel Worksheet on
page 15.
2 If it is not already open, start Intel® Device View.
3 From the Configuration menu, select Connection
Figure 20. Connection Setup. To create a VPN tunnel,
select Add Tunnel from the Port/Connection list and click
Add Tunnel.
Setup.
4 Select Add Tunnel from the Port / Connection list
in the Connection Setup dialog box, and then click
the Add Tunnel button.
5 Click Next in the Start dialog box of the wizard.
For more information about VPN tunnels:
The VPN Tunnel Wizard configures tunnels using
default settings that work for most situations. You
can modify the configuration using Advanced
Setup, if necessary. Consult the Online Documen-
tation on the Intel Device View CD for more
information.
6 On the Tunnel Identification dialog box:
- type a Tunnel Name
- type the Remote IP Address for the peer device
- select LAN 2 as the Connection for Tunnel
7 Follow the screen instructions throughout the rest
of the wizard.
11
Download from Www.Somanuals.com. All Manuals Search And Download.
VPN Tunnel Example 1
VPN Tunnel From More Than
One 8205 Router to the Same
Branch office 1
Subnet 192.168.1.0
Remote Peer Device
Central Site
Subnet 10.3.4.0
192.168.1.1
I
n
t
e
l
R
o
u
t
e
r
Status
LAN
1
0
0
M
b
p
s
W
A
N
L
i
n
k
W
A
N
S
w
i
t
c
h
W
A
N
C
o
n
t
r
o
l
T
e
s
t
M
o
d
e
®
If you are configuring tunnels to a central site from
more than one 8205 router, the tunnels will not work
with the router’s factory default configuration. When
more than one 8205 router establishes a tunnel to the
same remote device, you must change the default IP
configuration on the additional 8205 routers.
®
Intel 8205
Router
xDSL/cable
modem
VPN Peer
(gateway
or router)
10.3.4.1
Internet
(ISP)
Branch office 2
Subnet 192.168.2.0
192.168.2.1
I
n
t
e
l
R
o
u
t
e
r
Status
LAN
1
0
0
M
b
p
s
W
A
N
L
i
n
k
W
A
N
S
w
i
t
c
h
W
A
N
C
o
n
t
r
o
l
T
e
s
t
M
o
d
e
®
Intel 8205 xDSL/cable
Router
modem
7074
V
P
N
l
e
n
Tu
n
The central site VPN device will not be able to
recognize the difference between the local network at
each remote site with the default configuration. The
default IP subnet assigned to the LAN by the router
is 192.168.1.0. You cannot have more than one
tunnel configured to the same subnet.
Figure 21. Example VPN Tunnels. Two tunnels to the
same central site VPN device from more than one 8205
router.
Complete these basic steps:
1 Change the default IP address of the router’s
LAN 1 port.
2 Change the range of addresses assigned by the
router’s DHCP server.
3 Start the VPN Tunnel wizard.
Change the default IP address on LAN 1
®
1 If it is not already open, start Intel Device View
and open the router for management.
2 From the Configuration menu, select Connection
Setup.
3 Double-click the LAN 1 port in the Ports/
Connections list.
4 Type the new IP address and network mask. Get
this from the system administrator at the central
site who configures the remote VPN peer device.
Figure 22. Change the LAN 1 IP address. Type an IP
address on the same subnet as your local network.
5 Click OK.
6 On the Connection Setup dialog, click Accept.
7 From the Configuration menu, select Save to
Flash Memory.
Important! The PC you use to configure the router
from now on must have an IP address on the same
subnet as the router’s new IP address.
12
Download from Www.Somanuals.com. All Manuals Search And Download.
VPN Tunnel Example 1
Change the range of IP addresses used
by the DHCP server
Once you change the IP address of the router, you
must change the range of IP addresses assigned by
the DHCP server in the router. The range should be
on the same subnet as the new IP address for the
LAN 1 port. Find out what range to use from the
system administrator of the remote peer device on
the tunnel.
Figure 23. Example VPN Tunnels. Two tunnels to the
same central site from more than one 8205 router.
1 From the Configuration menu, select DHCP
Server Setup.
2 Select the Enable DHCP Server check box.
3 Click the first entry in the IP Addresses dialog
box, and then click Edit.
Branch Office 1
Setting
4 Type a new First IP Address and Last Address,
and make sure the Network Mask matches the
new address range.
Remote IP Address
Local User ID
10.3.4.1
remoteoffice1
192.168.1.0
255.255.255.0
Local Network Address
Local Network Mask
5 Click OK, then click OK again.
Remote Network Address 10.3.4.0
Start the VPN Tunnel Wizard
Remote Network Mask
Encryption Algorithm
255.255.255.0
DES
1 From the Configuration menu, select Connection
Setup.
Authentication Algorithm MD5
Re-keying Interval
1 Day
2 Select Add Tunnel from the Port / Connection list
in the Connection Setup dialog box, and then
click the Add Tunnel button.
Branch Office 2
Setting
Remote IP Address
Local User ID
10.3.4.1
3 Fill in the parameters in each wizard dialog box,
as appropriate for your setup. Table 2 shows the
settings used for this example.
remoteoffice2
192.168.2.0
255.255.255.0
Local Network Address
Local Network Mask
Note: The values for the parameters in Table 2 are
examples only; you must enter the values specific to
your network.
Remote Network Address 10.3.4.0
Remote Network Mask
Encryption Algorithm
255.255.255.0
DES
Authentication Algorithm MD5
Re-keying Interval 1 Day
Table 2. Configuration Parameters. Settings used for
this example when configuring the VPN tunnel using the
VPN Tunnel Wizard.
13
Download from Www.Somanuals.com. All Manuals Search And Download.
VPN Tunnel Example 2
Connecting Two Branch
Offices
Branch Office 1
Local Network Address 192.168.1.0
Two sites can use a VPN tunnel to send and receive
secure business data over the Internet. The two sites
could be two branch offices, a remote worker and a
central office, a branch office and a central office, or
your site and a business partner’s site. For more
information, see the online documentation on the
®
Intel 8205 Router
Intel Router
Status
LAN
100 Mbps
WAN Link
WAN Switch
WAN Control
Test Mode
Connection to
Internet with dynamic
IP address
xDSL/cable
modem
®
Intel Device View CD-ROM.
Internet
(ISP)
Permanent
connection to Internet with
a fixed IP address
Connecting two branch offices with a VPN tunnel
enables both offices to share each other’s resources
securely. Using a VPN tunnel saves the cost of
dialing into a distant site; the only cost is that of
connecting to the local Internet service provider
(ISP).
Fixed
IP address
®
Intel Router
Status
Intel Router
LAN
1
0
0
M
b
p
s
W
A
N
L
i
n
k
WAN Switch
WAN Control
T
e
s
t
M
o
d
e
175.123.45.1
In this example, the IP address on the local side is
dynamically assigned. Therefore, the Local User ID
identifies the branch office, rather than a permanent
external IP address. If the local router had a perma-
nent IP address, then you would not have to enter a
Local User ID. The IP address would identify the
branch office.
Branch Office 2
Remote Network Address 175.123.45.0
7073
Figure 24. Example Branch Office to Branch Office
VPN Tunnel. A VPN tunnel between two remote offices.
Table 3 shows the configuration parameters used in
the VPN Tunnel Wizard to create a tunnel for the
Branch Office to Branch Office example.
Parameter
Setting
Remote IP Address
Local User ID
175.123.45.1
aradomsk23
192.168.1.0
255.255.255.0
Note: The values for the parameters in Table 3 are
examples only; you must enter the values specific to
your network.
Local Network Address
Local Network Mask
Remote Network Address 175.123.45.0
Remote Network Mask
Encryption Algorithm
255.255.255.0
DES
Firewalls and network address translation
If you are using firewall filters or network address
translation (NAT) on the LAN 2 port, the VPN
Tunnel Wizard modifies your settings to enable the
tunnel.
Authentication Algorithm MD5
Re-keying Interval 1 Day
Table 3. Configuration Parameters. Settings used for
the Branch Office to Branch Office example when
configuring the VPN tunnel using the VPN Tunnel Wizard.
14
Download from Www.Somanuals.com. All Manuals Search And Download.
VPN Tunnel Worksheet
These pages help you gather needed information to
create a VPN Internet tunnel using the VPN Tunnel
Networks and Security Profile
Wizard.
Local network address:
VPN tunnels created with the VPN Tunnel Wizard
use default settings for a number of parameters. If
necessary, you can modify these parameters using
Advanced Setup. Advanced Setup is accessible from
Intel® Device View and from Local Management.
For more information on configuring a VPN tunnel
using Advanced Setup, see the Online
(The network IP address for the local network sending
and receiving data on this end of the tunnel.)
Local network mask:
(The network mask for the local network.)
Documentation on the Intel Device View CD-ROM.
Remote network address:
Tunnel Identification
Tunnel name:
(The network IP address for the remote network
sending and receiving data on the other end of the
tunnel.)
Remote network mask:
(A name to identify the tunnel. The name can be
up to 31 characters.)
(The network mask for the remote network.)
Remote IP address:
Encryption Algorithm:
(The IP address for the VPN device at the other
end of the tunnel; the remote peer device.)
(The type of encryption to use on the tunnel. The
encryption algorithms supported on your device vary,
depending on the VPN option that you purchased.)
Connection for tunnel:
LAN 2
Authentication Algorithm
(The connection to the ISP that the router uses to
establish the VPN tunnel; select LAN 2 from the list for
the 8205 router)
m MD5
m SHA-1
m None
(The type of authentication to use on the tunnel. SHA-1
offers higher security, but also takes longer to process.
MD5 is the standard used on most devices supporting
IPSec.)
Local user ID:
(The user ID that identifies this router. Only required
when using dynamically assigned IP addresses for the
Internet.)
p Re-keying Interval based on time
Days:____Hours:____Minutes:____
p Re-keying Interval based on traffic
Traffic amount: ____ MB
Shared Key
(How often the device generates a new encryption key,
based on time, traffic, or both. The interval must be at
least 5 minutes, or at least 1 MB, and no greater than
4194303 MB.)
(The key is between 8 and 63 characters. For maximum
security, enter a key that is as long as possible using a
combination of numbers, letters, and symbols.)
15
Download from Www.Somanuals.com. All Manuals Search And Download.
|