tainy hmod-v3-io, tainy hmod-l3-io - Dr. Neuhaus ...

More documents

Recommendations

Info

VPN connections DPD – maximum failures Number of failed attempts permitted before the IPsec connection is considered to be interrupted. Factory setting The factory settings for the TAINY xMOD-V3-IO are as follows: 7.3 VPN IPsec Standard Mode IPsec VPN > Connections ONLY TAINY HMOD-V3-IO ONLY TAINY EMOD-V3-IO Name Roadwarrier Enabled No (switched off) Authentication method CA certificate Remote ID NONE Local ID NONE Remote certificate - ISAKMP-SA encryption AES-128 IPsec-SA encryption AES-128 ISAKMP-SA hash MD5 IPsec-SA hash MD5 ISAKMP-SA mode Main ISAKMP-SA lifetime (seconds) 86400 IPsec-SA lifetime (seconds) 86400 NAT-T On Enable dead peer detection Yes DPD - delay (seconds) 150 DPD – timeout (seconds) 60 DPD – maximum failures 5 Function The VPN connections already created are shown. You can enable (Enabled = Yes) or disable (Enabled = No) each individual connection. You can use New to add additional VPN connections, Edit Settings and Advanced Settings to set them up, and Delete to remove a connection. Page 64 of 111 TAINY xMOD
VPN Standard Mode Edit Settings Connection name Give the new connection a connection name here. VPN connections Remote host Specify the address of the remote station here, either as a hostname (e.g. myadress.com) or as an IP address. Local network Remote network Admin PC Local application Local application TAINY HSPA+, UMTS (E-)GPRS X.509 certificate, CA certificate TAINY xMOD Page 65 of 111 APN VPN tunnel Address of the remote network INTERNET VPN gateway Admin PC External remote stations Note: HSPA+ and UMTS are supported by the TAINY HMOD only. In the authentication methods X.509 certificate and CA certificate, the keys used for authentication have first been signed by a Certification Authority (CA). This method is considered especially secure. A CA can be a service provider, but also, for example, the system administrator for your project, provided that he has the necessary software tools. The CA creates a certificate file (PKCS12) with the file extension *p12 for each of the two remote stations. This certificate file contains the public and private keys for the own station, the signed certificate from the CA, and the public key of the CA. For the authentication method X.509 there is additionally a key file (*.pem or *.crt) for each of the two remote stations with the public key of the own station. X.509 certificate The public keys (files with extension *.pem or *.crt) are exchanged between the TAINY xMOD-V3-IO and the remote station's VPN gateway takes place manually, for example on a CD-ROM or via e-mail. To load the certificate, proceed as described in Chapter 7.4. CA certificate The public keys are exchanged between the TAINY xMOD-V3-IO and the remote station's VPN gateway via the data connection when the VPN connection is established. Manual exchange of the key files is not necessary.
Page 1 and 2:
User Manual TAINY HMOD-V3-IO, TAINY
Page 3 and 4:
Products ! Safety instructions The
Page 5 and 6:
Firmware with open source GPL/LGPL
Page 7 and 8:
Contents Contents 1 Introduction ..
Page 9 and 10:
1 Introduction Introduction Product
Page 11 and 12:
Introduction Local applications cou
Page 13 and 14: Terms Here are definitions of terms
Page 15 and 16: 2 Setup 2.1 Step by step Set up the
Page 17 and 18: 2.3 Overview 2.4 Service button Set
Page 19 and 20: TAINY EMOD Lamp Status Meaning S (S
Page 21 and 22: 2.6 Connections LAN0, LAN1 (10/100
Page 23 and 24: 24V / 0V power supply The TAINY xMO
Page 25 and 26: 3 Configuration 3.1 Overview Remote
Page 27 and 28: Preferred DNS server Configuration
Page 29 and 30: The start page is not displayed If
Page 31 and 32: Signal (CSQ Level) Indicates the st
Page 33 and 34: Carrying out configuration ONLY TAI
Page 35 and 36: Function Access to the TAINY xMOD i
Page 37 and 38: 4 Local interface 4.1 IP addresses
Page 39 and 40: 4.3 DNS to local network Local Netw
Page 41 and 42: Poll interval Serve system time to
Page 43 and 44: Provider selection mode - Manual Pr
Page 45 and 46: Provider selection mode - Automatic
Page 47 and 48: Activity on faulty connection Renew
Page 49 and 50: Remote host 0.0.0.0 Group group Use
Page 51 and 52: 5.7 Volume supervision External net
Page 53 and 54: Security functions Protocol Select
Page 55 and 56: 6.2 Port Forwarding Security > Port
Page 57 and 58: 6.4 Firewall Log Security > Firewal
Page 59 and 60: Requirements for the remote network
Page 61 and 62: VPN connections CA certificate The
Page 63: VPN connections ISAKMP-SA mode Agre
Page 67 and 68: VPN connections Remote net address
Page 69 and 70: VPN Standard Mode Edit IKE VPN conn
Page 71 and 72: 7.4 Loading VPN certificates IPsec
Page 73 and 74: 7.6 Supervision of VPN connections
Page 75 and 76: Number of connect attempts until re
Page 77 and 78: Action Define how access to the spe
Page 79 and 80: Factory setting The factory setting
Page 81 and 82: 9 Status, log and diagnosis 9.1 Log
Page 83 and 84: Status, log and diagnosis Function
Page 85 and 86: Status, log and diagnosis Function
Page 87 and 88: Additional functions Text Here ente
Page 89 and 90: Port number 26864 Firewall Rules No
Page 91 and 92: The following parameters of the TAI
Page 93 and 94: Target host NONE Target port 162 Ta
Page 95 and 96: Asymmetric encryption CIDR Small le
Page 97 and 98: Small lexicon of routers CSQ / RSSI
Page 99 and 100: Small lexicon of routers EGPRS EGPR
Page 101 and 102: IPsec MIB See SNMP Small lexicon of
Page 103 and 104: Protocol, Transfer protocol Small l
Page 105 and 106: X.509 certificate A type of "seal"
Page 107 and 108: Network B Computer B1 B2 B3 B4 Addi
Page 109 and 110: Conformity CE Conforms to Directive
Page 111: Protection class IP20 Dimensions 11
show all

tainy hmod-v3-io, tainy hmod-l3-io - Dr. Neuhaus ...

Create successful ePaper yourself

Delete template?

Save as template?