Billion Electric Company BiGuard Series manual

BiGuard C01 BiGuard VPN Client Quick Installation Guide (BiGuard series VPN enabled devices) Secure access to Company Network[...]

Your network is constantly evolving as yo u integrate more business applications and consolidate servers. In that environment, it is becoming extremely complex to maintain total security at the edge while users be ing employees or Teleworkers on the go are working with customers and partners. You need to get access to those applications and servers[...]

Billion BiGuard VPN enabled devices – VPN Configuration After connected to your Billion BiGuard VPN enabled devices, you must select the menu: 【 Configuration 】→ 【 IPSec 】 . Click and add a new IPSec VPN setting as below. Connection Name: A user-defined name for the c onnection (e.g. “BiGuardVPN”). Tunnel: Activates or deactivates t[...]

Data: Input ID’s information, like domain name www.ipsectest.com . Network: Set the Any local addr ess, subnet or single address of the local network. ~ Any Local Address: All IP address of the local network ~ Subnet: The subnet of the local network. Fo r example, IP: 192.168.100.0 with netmask 255.255.255.0 specifies one clas s C subnet starting[...]

Perfect Forward Secrecy: Choose whether to enable PFS us ing Diffie-Hellman public-key cryptography to change encryption keys during the second phase of VPN negotiation. This function will provide better se curity, but extends the VPN negotiation time. Diffie-Hellman is a public-key cryptography protocol that allows two parties to establish a share[...]

BiGuard VPN Client Configur ation – Phase 1 Configuration “Authentication” or “Phas e 1” window will concern settings for Authentication Phase or Phas e 1. It is also called IKE Negotiation Phase. Phase 1's purpose is to negotiate IKE pol icy sets, authenticate the peers, and set up a secure channel between the peers. As part of Phas[...]

IKE key group: Diffie-Hellman key length. You must also add phase 1 IDs in “P1 Advanced” window, if the BiGuard VPN Client from a LAN. Config-Mode : If checked, the VPN Client will activate Config-Mode for this tunnel. Config-Mode allows to the VPN Client to fetch some VPN C onfiguration information from the VPN gateway like DNS/WINS server IP [...]

DPD detects non-responding remote gateways) the VPN Client immediately starts opening a new tunnel with the redundant gateway. z The exact same behaviour will apply to the redundant gateway. This means that the VPN Client will try to open prim ary and redundant gateway until the user exits software or click on 'Save & Apply'. IKE port[...]

BiGuard VPN Client Configur ation – Phase 2 Configuration “IPSec Configuration” or “Phase 2” window will concern settings for Phase 2. The purpose of Phase 2 is to negotiate the IPSec security parameters that ar e applied to the traffic going thought tunnels negotiated during Phase 1. Name: Label for IPSec Configuration only used by the V[...]

ESP mode: IPSec encapsulation mode : tunnel. PFS group: Diffie-Hellman key length. For more advanced settings, click on 'P2 Advanced'. Automatic Open Mode : The VPN Client can automatically open the specified tunnel (Phase2) on specific events such as: z Auto open this tunnel when t he VPN Client starts up. z Auto open this tunnel when US[...]

Open IPSec VPN Tunnels Once both Billion BiGuard VPN enab led devices and BiGuard VPN Client has been configured accordingly, you are ready to open VPN tunnels. First make sure you enabled your firewall with IPSec traffic. 1. Clink on to make into account all modifications we’ve made on your VPN Client Configuration. 2. Click on , or generate tra[...]

Configuration Wizard Seven easy steps Wizard BiGuard VPN client provides a Configuration Wizard that allows the creation of VPN configuration in seven easy steps. This Configuration Wizard is designed for remote computers that need to get connected to a cor porate LAN through a VPN gateway. Let take the fo llowing example: The remote computer has a[...]

Step 1 of 7 Y ou need to specify the following information: The public (network side) address of the remote gateway Address (I n IP or Domain name). (e.g. specify gateway.mydomain.com) The Preshared-key you will use for this tunnel (t his Preshared-key must be the same in the gateway). Step 2 of 7 You must specify the following information: The IP [...]

Step 3 of 7 You need to input this VPN Client IP address that will be used to identify the client in the VPN connection (e.g. specify 192.100.205.101). Step 4 of 7 The fourth step summaries your new VPN conf iguration. Other parameters may be further configured directly via the main interf ace (e.g.virtual IP address, etc..). Be sure that each clie[...]

Step 5 of 7 As for BiGuard side, please go to >Conf iguration >VPN >IPSec >IPSec Wizard And input Connection Name (BiGuardVPN as example), and PreShared Key(12345678 as example), and select LAN to Host(For BiGuard VPN Client Only), then press Next . Step 6 of 7 Input BiGuard VPN Client IP Address. (195.100.205.101 as example) and press [...]

Step 7 of 7 After all, you will see a Configuration Summary, click Done too apply this rule.[...]

Appendix A – Compatible table of Billion BiGuard VPN enabled devices & BiGuard VPN Client BiGuard 2 BiGuard 10 BiGuard 30 Hash algorithms MD5 v v v SHA1 v v v Encryption DES v v v 3DES v v v AES 128 v v v AES 192 v v v AES 256 v v v Diffie Hellman Group Support Group1: MODP 768 v v v Group2: MODP 1024 v v v Group5: MODP 1536 v v v Authenticat[...]

Appendix B – Product Support and Contact Information Referring to the Troubleshooting section in the User’s Manual can solve most problems . If you cannot resolve the problem with the Troubleshooting chapter, please contact the dealer where you purchased this product. Contact Billion WORLDWIDE http://www.billion.com[...]