tainy hmod-v3-io, tainy hmod-l3-io - Dr. Neuhaus ...

More documents

Recommendations

Info

VPN connections Remote ID Local ID Wait for remote connection Pre-shared secret key (PSK) This method is primarily supported by older IPsec implementations. Here authentication is performed with a character string agreed on beforehand. In order to obtain high security, the character string should consist of about randomly-selected 30 lower-case and upper-case letters and numerals. The following characters are permitted: ! $ % & ' ( ) * + , . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ ` a b c d e f g h I j k l m n o p q r s t u v w x y z { | } # The entry is concealed. The Local ID and the Remote ID are used by IPsec to identify the remote stations uniquely when establishing the VPN connection. For authentication with X.509 certificate or CA certificate: � If you keep the factory setting NONE, then the Distinguished Names from the own certificate and from the certificate communicated by the remote station are automatically applied and used as the Local ID and Remote ID. � If you manually change the entry for the Local ID or the Remote ID, then the corresponding entries must be adapted at the remote station. The own Local ID must be the same as the Remote ID of the remote station and vice versa. The entries for Local or Remote IDs must be made in the ASN.1 format, e.g. "C=XY/O=XY Org/CN=xy.org.org" For authentication with pre-shared secret key (PSK): � If you keep the factory setting NONE, then the own IP address is automatically used as the Local ID, and the IP address of the remote station is used as the Remote ID: � If you manually change the entry for the Local ID or for the Remote ID, then the entries must have the format of a hostname (e.g. RemoteStation.de) or the format of an e-mail address (remote@station.de). The own Local ID must be the same as the Remote ID of the remote station and vice versa. Note: If with pre-shared secret key (PSK) the IP address is not used as the Remote ID, then the Aggressive Mode has to be set as the ISAKMP-SA mode. Yes The TAINY xMOD-V3-IO waits for the VPN gateway of the remote network to initiate establishment of the VPN connection. No The TAINY xMOD-V3-IO initiates establishment of the connection. Page 66 of 111 TAINY xMOD
VPN connections Remote net address Here enter the IP address (e.g. 123.123.123.123) of the remote network. The remote network can also be only a single computer. Remote subnet mask Activate 1-to-1 NAT for the remote network Local network Gegenüberliegendes Netz Admin PC Local applikation Local application TAINY Address of the local network HSPA+, UMTS (E-)GPRS TAINY xMOD Page 67 of 111 APN VPN tunnel INTERNET Address of the remote network VPN gateway Admin PC External remote stations Note: HSPA+ and UMTS are supported by the TAINY HMOD only. Here enter the subnet mask (e.g. 255.255.255.0) of the remote network. The remote network can also be only a single computer. The TAINY xMOD-V3-IO has a 1-to-1 NAT function for the remote network. In TAINY xMOD-V3-IO, the address range of the remote network on the VPN connection is defined by the - address of the remote network and the - network mask of the remote network If 1-to-1 NAT is switched off, local applications must use this address range for the addressing of remote locations in the remote network. A locally used address range through which the local applications can address the remote locations in the remote network can be defined when 1to-1 NAT is activated. The 1-to-1 NAT function in TAINY xMOD-V3-IO then maps the locally defined address range of the remote network on the address range of the remote network on the VPN connection. The locally used address range of the remote network is defined by the - address for 1-to-1 NAT for the remote network and the - network mask of the remote network Example: Address range: 123.123.123.xyz Target address: 123.123.123.101 Address range for 1-zu-1 NAT to the remote network Local network Translation of target address Translation of originator address TAINY Example: Address range: 234.234.234.xyz Target address: 234.234.234.101 Address range of the remote network VPN connection to the remote network Yes The TAINY xMOD-V3-IO uses 1-to-1 NAT for the remote network. Enter the locally used target address as the address for 1-to-1 NAT for the remote network. No The TAINY xMOD-V3-IO does not use 1-to-1 NAT for the remote network.
Page 1 and 2:
User Manual TAINY HMOD-V3-IO, TAINY
Page 3 and 4:
Products ! Safety instructions The
Page 5 and 6:
Firmware with open source GPL/LGPL
Page 7 and 8:
Contents Contents 1 Introduction ..
Page 9 and 10:
1 Introduction Introduction Product
Page 11 and 12:
Introduction Local applications cou
Page 13 and 14:
Terms Here are definitions of terms
Page 15 and 16: 2 Setup 2.1 Step by step Set up the
Page 17 and 18: 2.3 Overview 2.4 Service button Set
Page 19 and 20: TAINY EMOD Lamp Status Meaning S (S
Page 21 and 22: 2.6 Connections LAN0, LAN1 (10/100
Page 23 and 24: 24V / 0V power supply The TAINY xMO
Page 25 and 26: 3 Configuration 3.1 Overview Remote
Page 27 and 28: Preferred DNS server Configuration
Page 29 and 30: The start page is not displayed If
Page 31 and 32: Signal (CSQ Level) Indicates the st
Page 33 and 34: Carrying out configuration ONLY TAI
Page 35 and 36: Function Access to the TAINY xMOD i
Page 37 and 38: 4 Local interface 4.1 IP addresses
Page 39 and 40: 4.3 DNS to local network Local Netw
Page 41 and 42: Poll interval Serve system time to
Page 43 and 44: Provider selection mode - Manual Pr
Page 45 and 46: Provider selection mode - Automatic
Page 47 and 48: Activity on faulty connection Renew
Page 49 and 50: Remote host 0.0.0.0 Group group Use
Page 51 and 52: 5.7 Volume supervision External net
Page 53 and 54: Security functions Protocol Select
Page 55 and 56: 6.2 Port Forwarding Security > Port
Page 57 and 58: 6.4 Firewall Log Security > Firewal
Page 59 and 60: Requirements for the remote network
Page 61 and 62: VPN connections CA certificate The
Page 63 and 64: VPN connections ISAKMP-SA mode Agre
Page 65: VPN Standard Mode Edit Settings Con
Page 69 and 70: VPN Standard Mode Edit IKE VPN conn
Page 71 and 72: 7.4 Loading VPN certificates IPsec
Page 73 and 74: 7.6 Supervision of VPN connections
Page 75 and 76: Number of connect attempts until re
Page 77 and 78: Action Define how access to the spe
Page 79 and 80: Factory setting The factory setting
Page 81 and 82: 9 Status, log and diagnosis 9.1 Log
Page 83 and 84: Status, log and diagnosis Function
Page 85 and 86: Status, log and diagnosis Function
Page 87 and 88: Additional functions Text Here ente
Page 89 and 90: Port number 26864 Firewall Rules No
Page 91 and 92: The following parameters of the TAI
Page 93 and 94: Target host NONE Target port 162 Ta
Page 95 and 96: Asymmetric encryption CIDR Small le
Page 97 and 98: Small lexicon of routers CSQ / RSSI
Page 99 and 100: Small lexicon of routers EGPRS EGPR
Page 101 and 102: IPsec MIB See SNMP Small lexicon of
Page 103 and 104: Protocol, Transfer protocol Small l
Page 105 and 106: X.509 certificate A type of "seal"
Page 107 and 108: Network B Computer B1 B2 B3 B4 Addi
Page 109 and 110: Conformity CE Conforms to Directive
Page 111: Protection class IP20 Dimensions 11
show all

tainy hmod-v3-io, tainy hmod-l3-io - Dr. Neuhaus ...

Create successful ePaper yourself

Delete template?

Save as template?