tainy hmod-v3-io, tainy hmod-l3-io - Dr. Neuhaus ...

More documents

Recommendations

Info

VPN connections Local net address Here enter the IP address (e.g. 123.123.123.123) of the local network. The local network can also be only a single computer. Local subnet mask Activate 1-to-1 NAT for the local network Firewall rules for VPN tunnel Here enter the subnet mask (e.g. 255.255.255.0) of the local network. The local network can also be only a single computer. In TAINY xMOD-V3-IO, the address range of the local network on the VPN connection is defined by the - address of the local network and the - network mask of the local network If 1-to-1 NAT is disabled, the addresses of local application must be within this address range, that they can be addressed via the VPN connection by the remote stations within the remote network. If 1-to-1 NAT is activated, a locally used address range fort he local network can be defined, which may differ from the address range used at the VPN connection. The 1-to-1 NAT function of the TAINY xMOD-V3-IO maps the local address range of the local network into the address range of the VPN connection. The locally used address range of the local network is defined by the - address of the 1-to-1-NAT within the local network and the - network mask of the local network Example: Address range: 123.123.123.xyz Traget address: 123.123.123.101 Locally used address range of the local network at 1-to-1 NAT Local network Translation of target address Translation of originator address Page 68 of 111 TAINY xMOD TAINY Example Address range: 234.234.234.xyz Target address: 234.234.234.101 Address range of the local network at the VPN connection VPN connection to the Remote network Yes The TAINY xMOD-V3-IO uses 1-to-1-NAT to the local network.. Enter as the address for 1-zu-1-NAT in the local nework the locally used target address. No The TAINY xMOD-V3-IO uses no 1-to-1-NAT to the local network. See Chapter 7.5.
VPN Standard Mode Edit IKE VPN connections Function Here you can define the properties of the VPN connection according to your requirements and what you have agreed with the system administrator of the remote station. ISAKMP-SA encryption IPsec-SA encryption ISAKMP-SA hash IPsec-SA hash Agree with the administrator of the remote station which encryption method will be used for the ISAKMP-SA and the IPsec-SA. The TAINY xMOD-V3-IO supports the following methods: � 3DES-192 � AES-128 � AES-192 � AES-256 AES-128 is the most frequently used method, and is therefore set as the default. The method can be defined differently for ISAKMP-SA and IPsec-SA. Note: The more bits in the encryption algorithm - indicated by the appended number - the more secure it is. The method AES-256 is therefore considered the most secure. However, the longer the key, the more time the encryption process takes and the more computing power is required. Agree with the administrator of the remote station which method will be used for computing checksums/hashes during the ISAKMP phase and the IPsec phase. The following selections are available: � MD5 or SHA-1 (automatic detection) � MD5 � SHA-1 The method can be defined differently for ISAKMP-SA and IPsec-SA. ISAKMP-SA mode Agree with the administrator of the remote station which method will be used for negotiating the ISAKMP-SA. The following selections are available: � Main mode � Aggressive mode DH/PFS group Agree with the administrator of the remote station the DH group for the key exchange. TAINY xMOD Page 69 of 111
Page 1 and 2:
User Manual TAINY HMOD-V3-IO, TAINY
Page 3 and 4:
Products ! Safety instructions The
Page 5 and 6:
Firmware with open source GPL/LGPL
Page 7 and 8:
Contents Contents 1 Introduction ..
Page 9 and 10:
1 Introduction Introduction Product
Page 11 and 12:
Introduction Local applications cou
Page 13 and 14:
Terms Here are definitions of terms
Page 15 and 16:
2 Setup 2.1 Step by step Set up the
Page 17 and 18: 2.3 Overview 2.4 Service button Set
Page 19 and 20: TAINY EMOD Lamp Status Meaning S (S
Page 21 and 22: 2.6 Connections LAN0, LAN1 (10/100
Page 23 and 24: 24V / 0V power supply The TAINY xMO
Page 25 and 26: 3 Configuration 3.1 Overview Remote
Page 27 and 28: Preferred DNS server Configuration
Page 29 and 30: The start page is not displayed If
Page 31 and 32: Signal (CSQ Level) Indicates the st
Page 33 and 34: Carrying out configuration ONLY TAI
Page 35 and 36: Function Access to the TAINY xMOD i
Page 37 and 38: 4 Local interface 4.1 IP addresses
Page 39 and 40: 4.3 DNS to local network Local Netw
Page 41 and 42: Poll interval Serve system time to
Page 43 and 44: Provider selection mode - Manual Pr
Page 45 and 46: Provider selection mode - Automatic
Page 47 and 48: Activity on faulty connection Renew
Page 49 and 50: Remote host 0.0.0.0 Group group Use
Page 51 and 52: 5.7 Volume supervision External net
Page 53 and 54: Security functions Protocol Select
Page 55 and 56: 6.2 Port Forwarding Security > Port
Page 57 and 58: 6.4 Firewall Log Security > Firewal
Page 59 and 60: Requirements for the remote network
Page 61 and 62: VPN connections CA certificate The
Page 63 and 64: VPN connections ISAKMP-SA mode Agre
Page 65 and 66: VPN Standard Mode Edit Settings Con
Page 67: VPN connections Remote net address
Page 71 and 72: 7.4 Loading VPN certificates IPsec
Page 73 and 74: 7.6 Supervision of VPN connections
Page 75 and 76: Number of connect attempts until re
Page 77 and 78: Action Define how access to the spe
Page 79 and 80: Factory setting The factory setting
Page 81 and 82: 9 Status, log and diagnosis 9.1 Log
Page 83 and 84: Status, log and diagnosis Function
Page 85 and 86: Status, log and diagnosis Function
Page 87 and 88: Additional functions Text Here ente
Page 89 and 90: Port number 26864 Firewall Rules No
Page 91 and 92: The following parameters of the TAI
Page 93 and 94: Target host NONE Target port 162 Ta
Page 95 and 96: Asymmetric encryption CIDR Small le
Page 97 and 98: Small lexicon of routers CSQ / RSSI
Page 99 and 100: Small lexicon of routers EGPRS EGPR
Page 101 and 102: IPsec MIB See SNMP Small lexicon of
Page 103 and 104: Protocol, Transfer protocol Small l
Page 105 and 106: X.509 certificate A type of "seal"
Page 107 and 108: Network B Computer B1 B2 B3 B4 Addi
Page 109 and 110: Conformity CE Conforms to Directive
Page 111: Protection class IP20 Dimensions 11
show all

tainy hmod-v3-io, tainy hmod-l3-io - Dr. Neuhaus ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?