Идти на страницу of
Похожие руководства по эксплуатации
Хорошее руководство по эксплуатации
Законодательство обязывает продавца передать покупателю, вместе с товаром, руководство по эксплуатации Moxa EDR-G902. Отсутствие инструкции либо неправильная информация, переданная потребителю, составляют основание для рекламации в связи с несоответствием устройства с договором. В законодательстве допускается предоставлении руководства в другой, чем бумажная форме, что, в последнее время, часто используется, предоставляя графическую или электронную форму инструкции Moxa EDR-G902 или обучающее видео для пользователей. Условием остается четкая и понятная форма.
Что такое руководство?
Слово происходит от латинского "instructio", тоесть привести в порядок. Следовательно в инструкции Moxa EDR-G902 можно найти описание этапов поведения. Цель инструкции заключается в облегчении запуска, использования оборудования либо выполнения определенной деятельности. Инструкция является набором информации о предмете/услуге, подсказкой.
К сожалению немного пользователей находит время для чтения инструкций Moxa EDR-G902, и хорошая инструкция позволяет не только узнать ряд дополнительных функций приобретенного устройства, но и позволяет избежать возникновения большинства поломок.
Из чего должно состоять идеальное руководство по эксплуатации?
Прежде всего в инструкции Moxa EDR-G902 должна находится:
- информация относительно технических данных устройства Moxa EDR-G902
- название производителя и год производства оборудования Moxa EDR-G902
- правила обслуживания, настройки и ухода за оборудованием Moxa EDR-G902
- знаки безопасности и сертификаты, подтверждающие соответствие стандартам
Почему мы не читаем инструкций?
Как правило из-за нехватки времени и уверенности в отдельных функциональностях приобретенных устройств. К сожалению само подсоединение и запуск Moxa EDR-G902 это слишком мало. Инструкция заключает ряд отдельных указаний, касающихся функциональности, принципов безопасности, способов ухода (даже то, какие средства стоит использовать), возможных поломок Moxa EDR-G902 и способов решения проблем, возникающих во время использования. И наконец то, в инструкции можно найти адресные данные сайта Moxa, в случае отсутствия эффективности предлагаемых решений. Сейчас очень большой популярностью пользуются инструкции в форме интересных анимаций или видео материалов, которое лучше, чем брошюра воспринимаются пользователем. Такой вид инструкции позволяет пользователю просмотреть весь фильм, не пропуская спецификацию и сложные технические описания Moxa EDR-G902, как это часто бывает в случае бумажной версии.
Почему стоит читать инструкции?
Прежде всего здесь мы найдем ответы касательно конструкции, возможностей устройства Moxa EDR-G902, использования отдельных аксессуаров и ряд информации, позволяющей вполне использовать все функции и упрощения.
После удачной покупки оборудования/устройства стоит посвятить несколько минут для ознакомления с каждой частью инструкции Moxa EDR-G902. Сейчас их старательно готовят или переводят, чтобы они были не только понятными для пользователя, но и чтобы выполняли свою основную информационно-поддерживающую функцию.
Содержание руководства
-
Страница 1
EDR- G9 03 /G902 Use r’s Manual Second Edition, Januar y 2011 www.moxa.com/product © 201 1 Moxa Inc . All rights reserved. Reprod uction witho ut perm ission is prohibite d.[...]
-
Страница 2
EDR- G9 03 /G902 Use r’s Manual The softw are described in this manual is furnished under a license agreement and may be used only in accordance with the terms of that agree ment. Copyri ght Notice Copyrig ht ©201 1 Mo xa I nc . All r ights r eserved. Reprod uction witho ut perm ission is prohibite d. Trademarks The MOXA logo is a regis tered tr[...]
-
Страница 3
Table of Content s 1. Int rodu ct ion ...................................................................................................................................... 1-1 Ov erv iew ........................................................................................................................................... 1-2 Packag e Checklist[...]
-
Страница 4
A. MIB Groups ....................................................................................................................................... A-1[...]
-
Страница 5
1 1. Introduction Welcome to the Moxa EtherDevice Router (EDR - G903 /G902), the Gig abit F irewall/VPN secure routers desig ned for connec ting Ethernet - enab led devic es in industrial fie ld applicatio ns. The follow ing topics are covered in this chapter: Over view Package C hecklist Featu res Indus trial Netwo rking Cap abilit[...]
-
Страница 6
EDR - G903/G902 Introduc tion 1-2 Overvi ew As the world ’ s network and information techno logy becomes more mature , the trend is to use Etherne t as the major communic ations interf ace in many industrial co mmunications and automation applicati ons. In fact, a whole new ind ustry has sprung up to provid e Ethernet products that c omply with t[...]
-
Страница 7
2 2. Getting Started This chapte r explains how to access the E therDevic e R outer for the first time . There are three ways to access the switch: (1 ) serial console , (2) Telnet console, or (3) web brow ser. The serial conso le connection method , which requir es using a short ser ial cable to connect the E therDevice R outer to a PC’s COM por[...]
-
Страница 8
EDR - G903/G902 Getting Started 2-2 RS - 232 Console Configurati on (115200, None, 8, 1, VT100) NOTE Connec tion C autio n! We strong ly suggest that you do NOT use more than one connectio n method at the same time. Fo llowing this advice wi ll allow you to maintain be tter control over the config uration of your E therD evice R oute r NOTE We reco[...]
-
Страница 9
EDR - G903/G902 Getting Started 2-3 4. Click the Ter minal tab, and select V T100 for Terminal Type. Click OK to continue. 5. Typ e 1 to select an si/VT1 00 terminal ty pe, and then press Ent er. 6. The Console login screen will appear . Use the keyboard to enter the login acco unt ( admin or use r ), and then press E nter to jump to the Passw ord [...]
-
Страница 10
EDR - G903/G902 Getting Started 2-4 telnet telnet (IP address) Example : telnet 1 92.168 .127 .10 Open a telnet conne ction telnet (IP address) (port number) Example : telnet 192.168 .127 .10 23 Open a telnet conne ction with por t number ssh ssh (IP ad dress) Example : ssh 19 2.168.12 7.10 Open a ssh connection Login by User account : Command Para[...]
-
Страница 11
EDR - G903/G902 Getting Started 2-5 Perfor m the following step s to access the console utility v ia Telnet. 1. Click Star t ( Run, and then telnet to the E therDev ice R outer ’s IP address from the Windows Run window. (You may also iss ue the telnet command from the MS - DOS pro mpt.). 2. R efer to i nstruc tion s 6 and 7 in the RS - 232 Cons o[...]
-
Страница 12
EDR - G903/G902 Getting Started 2-6 NOTE By defa ult, the E therDevice R outer ’ s password is not set (i.e., is blank). Y ou may need to wait a few moments for the web page to be downlo aded to your compute r. Use the menu tr ee on the left side of the wind ow to open the function pages to acce ss each of the router ’s functions.[...]
-
Страница 13
3 3. Features and Functio ns In this cha pter, we explain how to access the E therD evice R o uter ’s c onfigur ation op tions, pe rform mo nitoring, and use adminis tration functions . There are three ways to access thes e functions: (1) RS - 232 consol e, (2) Telnet co nsole, and (3) web browser. The web browser is the most user - friendly w ay[...]
-
Страница 14
EDR - G903/G902 Featur es and F unctio ns 3-2 The Overv iew page is divid ed into three major par ts: Interf ace Status, Basic f unction status , and Recent 10 Event logs , and gives u ser s a quick overview of the E therDevic e R outer ’ s current s etting s. Click More … at the top of the Interf ace Status table to see detail ed informa tion [...]
-
Страница 15
EDR - G903/G902 Featur es and F unctio ns 3-3 Click More … at the top of the “ Recent 10 Event Log ” table to open the Eve ntLogT abl e page . Configu ring Basic Settin gs The Basic Settings gro up includes the most commonly used settings require d by administrators to maintain and contro l the E therDevic e R outer . System Ide ntification T[...]
-
Страница 16
EDR - G903/G902 Featur es and F unctio ns 3-4 Maintai ner Contac t Info Sett ing Descrip tion Facto ry Defa ult Max. 30 Charac ters Enter the conta ct informatio n of the person responsible for maintaining this E therDev ice R outer None Web Con fi gur ati on Sett ing Descrip tion Facto ry Defa ult http or https User s c an connect to the E therDev[...]
-
Страница 17
EDR - G903/G902 Featur es and F unctio ns 3-5 The follow ing table shows additional c onfig uration example s: Allowable Hosts In put For mat Ay hos t Disabl e 192.1 68.1.120 192.1 68.1.120 / 255. 255. 255.255 192.1 68.1.1 t o 192.16 8.1.25 4 192.1 68.1.0 / 25 5.255.25 5.0 192.1 68.0.1 t o 192.16 8.255. 254 192.1 68.0.0 / 25 5.255.0. 0 192.1 68.1.1[...]
-
Страница 18
EDR - G903/G902 Featur es and F unctio ns 3-6 • ATTE NTION ! • By d efault , the Pa ssw ord f ield is blank . If a Password is already set, the n you will be requir ed to type the Passwor d when logging into the RS - 232 conso le, Telnet console , or web browser interf ace. Account Sett ing Descrip tion Facto ry Defa ult Admin “admin” privi[...]
-
Страница 19
EDR - G903/G902 Featur es and F unctio ns 3-7 NOTE The E therDe vice R outer has a real time clock so the user does not need to update the Current Time and Current D ate to set the initia l time fo r the E therDevic e R outer after each re b oot . This is especially use ful wh en the network does not have an Internet connec tion for an NTP se rve r[...]
-
Страница 20
EDR - G903/G902 Featur es and F unctio ns 3-8 Time S erver I P/Name Sett ing Descrip tion Facto ry Defa ult 1s t Tim e Serv er IP/Name IP or Domain addre ss (e.g., 192.168 .1.1, time.s tdtime.gov .tw, or time.nist.g ov). None 2nd Tim e Serv er IP/Name The E therDevice R outer will try to locate the 2nd NTP Server if the 1st NTP Server fails to conn[...]
-
Страница 21
EDR - G903/G902 Featur es and F unctio ns 3-9 If the user en able s the SettingCheck functio n with the Accessible IP l ist and the confirmer Timer is set to 15 seconds, then whe n the user cl ick s the Activ ate button o n the access ible IP list page, the E therDevice Ro ute r will exe cute the config uration change and the web brows er will try [...]
-
Страница 22
EDR - G903/G902 Featur es and F unctio ns 3- 10 System File Update — b y Remote TFTP The E therDe vice R outer s upports saving your config uration file to a remote TF TP server or local host to allow other E the rDevic e R outer r o ute r s to use the same config uration at a later time, or sav ing the Log file for future reference. L oading pre[...]
-
Страница 23
EDR - G903/G902 Featur es and F unctio ns 3- 11 Log File C lick Ex por t t o export the Log file of th e E therDevic e R oute r to the local hos t. NOTE Some operating syste ms will open the configur ation file and log file directly in the web page. In such cases, right clic k the Expo rt b utton and then s ave as a file. Upgrade Firmwar e To impor[...]
-
Страница 24
EDR - G903/G902 Featur es and F unctio ns 3- 12 Networ k Setting s Mode C onfiguration Network M ode E therDevic e R outer pr ovid es Rou ter Mode and Bridge Mo de op eration for differ ent applications : Route r Mode In this mode , E therD evice R outer operates as a gateway between differe nt networks. • Each interf ace (WAN1, WAN2 and LAN) has[...]
-
Страница 25
EDR - G903/G902 Featur es and F unctio ns 3- 13 WAN1 Configuration Connect ion Note that there are t here are thre e diffe rent connec tion types fo r the WAN1 interface: D ynamic I P, Static I P , and PPPoE. A detaile d explanation o f the configuratio n settings for each type is give n below. Connection M ode Sett ing Descrip tion Facto ry Defa u[...]
-
Страница 26
EDR - G903/G902 Featur es and F unctio ns 3- 14 E xample : S uppose a remote user (IP: 1 0.10.10.10 ) wants to connect to the internal se rver (pr ivate IP: 30.30. 30.10) vi a the PPTP protocol. The IP addre ss for the PPTP server is 20.20.20.1. T he necessar y c onfig uration settings are sho w n in the fo llowing fig ure. DNS (Dom an Name Ser ver[...]
-
Страница 27
EDR - G903/G902 Featur es and F unctio ns 3- 15 Gat eway Sett ing Descrip tion Facto ry Defa ult IP Add res s The Gatewa y IP address None Detaile d Ex pla nation o f PPPoE Type PPPoE Dialup User Na me Sett ing Descrip tion Facto ry Defa ult Max. 30 characters The User Name for logging in to the PPPoE server None Host Nam e Sett ing Descrip tion Fa[...]
-
Страница 28
EDR - G903/G902 Featur es and F unctio ns 3- 16 Connec tion T ype Sett ing Descrip tion Facto ry Defa ult Static IP, Dynamic IP, PPPoE Conf igure the connectio n type Dynamic I P Detaile d Ex pla nation o f Dyna mic IP Type PPTP Dialup Point - to - Point Tunnel ing Pr otocol is used for Vir tual Private Networ ks (VPN). Remote users can use PPTP to[...]
-
Страница 29
EDR - G903/G902 Featur es and F unctio ns 3- 17 DNS (Dom an Name Ser ver; option al set ting for Dynamic IP and PPPoE t y pes) Server 1/ 2/3 Sett ing Descrip tion Facto ry Defa ult IP Add res s The DNS I P Addr ess None NOTE The prior ity of a manual ly c onfigured DNS will higher than the DNS from the PPPo E or DHCP s erver. Detaile d Ex pla natio[...]
-
Страница 30
EDR - G903/G902 Featur es and F unctio ns 3- 18 Subn et Ma sk Sett ing Descrip tion Facto ry Defa ult IP Add res s The sub net mask None Gat eway Sett ing Descrip tion Facto ry Defa ult IP Add res s The Gatewa y IP address None Detaile d Ex pla nation o f PPPoE Type PPPoE Dialup User Na me Sett ing Descrip tion Facto ry Defa ult Max. 30 characters [...]
-
Страница 31
EDR - G903/G902 Featur es and F unctio ns 3- 19 Using DMZ M ode A DMZ ( d emilitarize d z one) is an isolated netw ork for de vices — such as d ata, FTP, w eb , and m ail server s connec ted to a LAN n etwo r k — that need to frequently co nnect with externa l network s . The deploy ment of an FTP server in a D MZ is illustrated in the follo wi[...]
-
Страница 32
EDR - G903/G902 Featur es and F unctio ns 3- 20 LAN IP Co nfig urat ion IP Addre ss Sett ing Descrip tion Facto ry Defa ult IP Add res s The LAN interf ace IP address 192.1 68.127.2 54 Subn et Ma sk Sett ing Descrip tion Facto ry Defa ult IP Add res s The sub net mask 255. 255. 255.0 DHCP Server The E therDe vice R outer prov ides a DHCP (Dynamic H[...]
-
Страница 33
EDR - G903/G902 Featur es and F unctio ns 3- 21 Static DHCP List Use the Static DHC P list to ensure that device s connected to the E therDev ice R outer alw ays use the same IP address. The static DHCP list matches I P add re ss es to MAC a ddress es . In the abo v e exam ple , a device named “ D evic e - 01 ” w as added to the Static DHCP lis[...]
-
Страница 34
EDR - G903/G902 Featur es and F unctio ns 3- 22 DHCP Leas ed List Use the DHCP Leased List to view the current DHCP clients. Dynamic DNS Dynamic DNS ( Do main Name S erv er ) al l o ws you to use a domain name (e .g. , moxa .edr - g903) t o conne ct to the E therDev ice R outer . The E therDev ice R outer c an connect to 4 free DNS servers and regi[...]
-
Страница 35
EDR - G903/G902 Featur es and F unctio ns 3- 23 Network Redundancy Moxa EtherDev ice Router provide s 2 types of network redundanc y functions : WAN backup (EDR - G903 o nly) and V RRP . The E the rDevic e R outer has two WAN interfaces : WAN 1 is the pr imary WAN interface and WA N2 is the backup interf ace . When t he E therDevic e R outer detect[...]
-
Страница 36
EDR - G903/G902 Featur es and F unctio ns 3- 24 Link Ch eck Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Activate Backup function by checking the link status of WAN1 Disabl ed Ping Che ck Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Activate s the Backup functio n if unable to ping from the E therDevic e R outer to a spe[...]
-
Страница 37
EDR - G903/G902 Featur es and F unctio ns 3- 25 Virtual Router R edundancy P rotocol (VRRP ) VRRP Setting s The Virtual Router Redund ancy Protocol (VRR P) feature can solv e the problem with static configur ation . VR RP enables a group of routers to form a single virtual route r w ith a virtual IP addr ess . The LAN clients can then be config ure[...]
-
Страница 38
EDR - G903/G902 Featur es and F unctio ns 3- 26 Static Ro uting a nd Dynam ic Routin g The E therDe vice R outer s upports two routing methods : static routing and dynamic routing. Dy namic routing makes use of RIP V1/V1c /V2. You can either choose o ne routing method, or combine the two method s to establis h you r routing tab le. A routing entry [...]
-
Страница 39
EDR - G903/G902 Featur es and F unctio ns 3- 27 Clickable B uttons Add For add ing an entry to the Static Ro uting Table . Delet e For re mov ing selected entries f rom the Static Ro uting Table. Modify For mo dif y ing the content of a selec ted entry in the Static Routing Ta ble . NOTE The entrie s in the Static Routing Tab le will not be added t[...]
-
Страница 40
EDR - G903/G902 Featur es and F unctio ns 3- 28 Routing T able The Routing Table page show s all r outing entr ies. All Routi n g Entr y List Sett ing Descrip tion Fac tory Defau lt All S how all routing e ntries N/A Connec ted S how connected routing entr ies N/A Static S how Sta tic routing entries N/A RIP S how RIP routing entr ies N/A Others S [...]
-
Страница 41
EDR - G903/G902 Featur es and F unctio ns 3- 29 Enable/D isable NAT Policy Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the selected NA T policy Enabled NAT Mo de Sett ing Descrip tion Facto ry Defa ult N-1 1-1 Port F orwarding Select the NA T types N-1 Interfa ce (N - 1 mode) Sett ing Descrip tion Facto ry Defa ult[...]
-
Страница 42
EDR - G903/G902 Featur es and F unctio ns 3- 30 Enable/D isable NAT policy Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the selected NA T policy Enabled NAT Mo de Sett ing Descrip tion Facto ry Defa ult N-1 1-1 Port Fo rward Select the NA T types N-1 Interface (Port Forward mode) Sett ing Descrip tion Facto ry Defa [...]
-
Страница 43
EDR - G903/G902 Featur es and F unctio ns 3- 31 1- to - 1 NAT If the internal d evice and external device need to communicate w ith each other, choose 1- to - 1 NAT , which offe rs bi - directio n al communicatio n (N- to - 1 and Port forw arding are b oth single - direction al communica tion NAT func tions ). 1- to - 1 N A T is us ually use d when[...]
-
Страница 44
EDR - G903/G902 Featur es and F unctio ns 3- 32 Enable/D isable NAT policy Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the selected NA T policy None NAT Mo de Sett ing Descrip tion Facto ry Defa ult N-1 1-1 Port Fo rward Select the NA T types None Interfa ce (1 - 1 N AT typ e) Sett ing Descrip tion Facto ry Defa ul[...]
-
Страница 45
EDR - G903/G902 Featur es and F unctio ns 3- 33 Fire wall Settin gs Firewall Policy Concept A f irewall dev ice is common ly used to pr ovi de secu r e traffic control o ver an Ethernet n etwo rk , as illustr ated in the f ollowing f igure . F irewa ll device s are depl oy ed at critical point s be tween an e xter nal network ( the non - secure p a[...]
-
Страница 46
EDR - G903/G902 Featur es and F unctio ns 3- 34 Firewall P olic y Config uration The E therD evice R oute r ’s F irewall polic y prov id es secur e traffic c ontrol , allo wing u ser s to control network traffic based on the fo llowing par ameters . Interface From/To Sett ing Descrip tion Facto ry Defa ult All (WAN1 /WAN2/LAN) Sel ect the From In[...]
-
Страница 47
EDR - G903/G902 Featur es and F unctio ns 3- 35 Destin at ion IP Sett ing Descrip tion Facto ry Defa ult All (I P Addres s) This Firewall Polic y will check all Destination IP addresses in the packet All Single (IP Ad dress) This Fir ewall Po licy will chec k single Des tination IP addr esses in the packet Range (IP Address) This F irewall Polic y [...]
-
Страница 48
EDR - G903/G902 Featur es and F unctio ns 3- 36 Ether Type Sett ing Descrip tion Fac tory Defa ult 0x060 0 to 0x FFFF When Protoc ol is set to “ Manual ” you can set up Ether T ype manually None Ta r get Sett ing Descrip tion Fac tory Defa ult Accept The packet will pass the Firewall w hen it match es this Fi rewall policy None Drop The p acket[...]
-
Страница 49
EDR - G903/G902 Featur es and F unctio ns 3- 37 Quick Automa tion Profile Ethernet Fieldbus prot ocol s are p opular in i ndustrial auto mation applica tion s. I n fact, many Fieldbus p rotocols (e.g., EtheNe t/IP and Modbus TCP/I P) can operate on an industrial Ether net network , with the Ethernet port number defined b y IANA (Internet Assigne d [...]
-
Страница 50
EDR - G903/G902 Featur es and F unctio ns 3- 38 Modbus TC P/IP (UDP) 502 PROFInet RT U nicast (TCP) 34962 PROFInet RT U nicast (UDP) 34962 PROFInet R T Multicast (TCP) 34963 PROFInet RT Multic ast (UDP) 34963 PROFInet Co ntext Manager (TCP) 34964 PROFInet Co ntext Manager (UDP) 34964 IEC 608 70 -5- 104 (TCP) 2404 IEC 608 70 -5- 104 (UDP) 2404 DNP ([...]
-
Страница 51
EDR - G903/G902 Featur es and F unctio ns 3- 39 Mask : Po licy [ X ] is m asked by P olicy [Y ] The Source/De stination I P r ang e or Source/Destinati on port number of policy [X] is smaller or e qual to policy [Y ] but the actio n target (Accep t/Drop) is d ifferent . For ex ample, t wo f irewall policies are show n belo w: In d ex In put Outp ut[...]
-
Страница 52
EDR - G903/G902 Featur es and F unctio ns 3- 40 Suppos e the user ne xt ad d s a new policy with the f ollowing c onfig uration : In d ex In put Outp ut Protocol Source IP Destin at ion IP T ar get 3 WAN2 LAN All 20.20. 20.25 192.1 68.127.2 0 to 192 .168.1 27.30 DROP The sou rce I P r a nge in policy 3 is smaller than po licy 2, but the destinatio [...]
-
Страница 53
EDR - G903/G902 Featur es and F unctio ns 3- 41 SYN/R ST Scan Sett ing Descrip tion Facto ry Defa ult Enable or Disab le Enable or disa ble the SYN/RST Scan No ne ICMP - D eath Sett ing Descrip tion Facto ry Defa ult Enable or Disa ble Enable or disa ble the I CMP - Death defense None Packet/S econd The lim it value to activ ate ICMP - Death defens[...]
-
Страница 54
EDR - G903/G902 Featur es and F unctio ns 3- 42 IPSec C onfiguration IP Sec configuratio n includes 5 parts: • Global Setting: Enable / Disable all I PSec Tunnels and N AT - Traver sal functio n • Tunnel Setting : Set up the VPN Connectio n type and VPN net wo r k plan • Key Exchange: Authe ntication for 2 VPN g ateways • Data Exc hange: Da[...]
-
Страница 55
EDR - G903/G902 Featur es and F unctio ns 3- 43 Tunnel Setting Enable or Di sable VPN T unnel Sett ing Descrip tion Fac tory Defa ult Enable or Disab le Enable or Disa ble this VPN Tunnel Disable Name o f VP N Tunne l Sett ing Descrip tion Fac tory Defa ult Max. of 16 c ha ra cter s User defined name of this VPN Tunnel. None NOTE T he first charac [...]
-
Страница 56
EDR - G903/G902 Featur es and F unctio ns 3- 44 Local Ne twork / Ne tmask / ID Setting Descrip tion Fac tory Defa ult IP Add res s IP address of loc al VPN network IP addres s of LAN interf ace S ubnet Mask Subnet Mask of lo cal VPN network Netmask of LAN interf ace ID ID for indentify ing the VPN tunnel conne ction. T he Local ID must be equal to [...]
-
Страница 57
EDR - G903/G902 Featur es and F unctio ns 3- 45 In X .50 9 Mod e , the use r needs to up load the Local and Remote certif ications first , and then sele ct the certif ications fro m the drop - down li st . S ee the X.509 C ertifica tion sectio n in this chapter for details. Encry ption Alg orithm Setting Descrip tion Fac tory Defa ult DES 3DES AES [...]
-
Страница 58
EDR - G903/G902 Featur es and F unctio ns 3- 46 Data Exchange (IPSec phase II) Perfect Fo rward Secrecy Sett ing Descrip tion Fac tory Defa ult Enable or Disab le Us es different secur ity key for differe nt IPSec phases to enhance secur ity Disabl e SA Lifetime Setting Descrip tion Fac tory Defaul t SA lifetime (minutes) Lifetime for SA in Phase 2[...]
-
Страница 59
EDR - G903/G902 Featur es and F unctio ns 3- 47 IPSec Status The user can check the VPN tunnel status in the I PSec Conn ection L ist . This list sho ws the Name of the IPSec tunnel, IP address of Local and Remote Subnet/Gatew ay , and the establis h ed status of the Key exchang e phase and Data exchange phase. X.509 Certificat ion X.509 is a digit[...]
-
Страница 60
EDR - G903/G902 Featur es and F unctio ns 3- 48 Certificat e Generat ion The user must fill in the fo llowing inform ation to generate the Root c ertificatio n: • Countr y name (2 Letter code) • Certif icate Days • State or Provinc e Name • Locality Name • Organizatio n Name • Organizatio n Unit Name • Co mmo n N ame • Email Addr es[...]
-
Страница 61
EDR - G903/G902 Featur es and F unctio ns 3- 49 Local Cert ificat e Uploa d Upload the .p12 loc al certific ate on this pa ge. The Password must be the sam e as the .p12 cer tificate file. If the password is not correct, the certific ate import proce ss will fail. Lab el : Us er d efi ne d name for this local ce rtific ate Name/S ubject : Show the [...]
-
Страница 62
EDR - G903/G902 Featur es and F unctio ns 3- 50 L2TP Configurat ion L2TP S erver Mod e Sett ing Descrip tion Fac tory Defaul t Enable / Disabl e Enable or Disab le the L2TP functio n on the WAN1 or WAN 2 interf ace Disabl e Local IP Sett ing Descrip tion Fac tory Defau lt IP Add res s The IP ad dress of the Lo c al S ubn et 0.0.0.0 Offered IP Range[...]
-
Страница 63
EDR - G903/G902 Featur es and F unctio ns 3- 51 Examples for T ypical VPN App lications Site to Sit e IPSec VPN t unnel with P er - shar ed Key The follo wing example show s how to create a secure LAN to LAN VPN tunnel between the C entral site and Remote si te via an Intr anet network . VPN Plan: • A ll co mmunication f rom the Central s ite net[...]
-
Страница 64
EDR - G903/G902 Featur es and F unctio ns 3- 52 L2TP for Remo te User Ma intenance The follow ing example show s how a Roaming user use s L2TP over IPSec to connec t to theremote site networ k. VPN Plan: • A ll communicatio n from the Roaming us er ( n o f ixed IP) to the Remote site Network (100 .100.3.0/24 ) need s to pass throug h the VPN tunn[...]
-
Страница 65
EDR - G903/G902 Featur es and F unctio ns 3- 53 How Traffic Prioritization W orks The E therDe vice R outer provides fo ur diff erent prior ities levels ( 0- 3 , h igh to l ow) for incoming and outgoing traff ic. The fo llowing fig ur e illustr ates i nco ming traffic , whi ch refers t o the traff ic transmitted fr om WA N1 to LA N or WAN2 to LA N [...]
-
Страница 66
EDR - G903/G902 Featur es and F unctio ns 3- 54 Max . Ban dwid th Sett ing Descrip tion Facto ry Defa ult 1 to 1,0 00,000 KBytes/s The maximum b andwidth f or total inco ming or outgo ing traffic 100 KByt es/s Default Priority Sett ing Descrip tion Facto ry Defa ult Prior ity 0/1/2/3 A packet without matching any incoming /outgo ing policy will adh[...]
-
Страница 67
EDR - G903/G902 Featur es and F unctio ns 3- 55 Priority Sett ing Descrip tion Facto ry Defa ult Prior ity 0/1/2/3 Sel ect the prior ity for this policy Prior ity 0 Source IP Sett ing Descrip tion Facto ry Defa ult All (I P Addres s) Select the Sourc e IP address for this policy All Single (IP Ad dress) Range (IP Address) Source Por t Sett ing Desc[...]
-
Страница 68
EDR - G903/G902 Featur es and F unctio ns 3- 56 The E therDe vice R outer will manag e the bandwi dth for outgoing packet s . Base d o n the fou r o utgo ing po licies below , when the source IP of the Ethernet tr affic matches the outgo ing policies, the m ax im um b andwidth for a packet sent from these source IP addresses wil l be reserv ed by i[...]
-
Страница 69
EDR - G903/G902 Featur es and F unctio ns 3- 57 SNMP Re ad Settings SN MP Versi ons Sett ing Descrip tion Facto ry Defa ult Disabl e V1, V2c , V3, or V1, V 2c, or V3 only Select the SN MP protocol version use d to manage the secu re router . Disabl e Contact Person Sett ing Descrip tion Facto ry Defa ult Admin o r user Admin priv ilege allows acc e[...]
-
Страница 70
EDR - G903/G902 Featur es and F unctio ns 3- 58 Access Co ntrol Sett ing Descrip tion Facto ry Defa ult Read only (Pub lic MIB only) A ccess contro l type after match ing the community string Re ad only No Access Target IP Address Sett ing Descrip tion Facto ry Defa ult IP Add res s Enter the IP addre ss of the Trap Server used by your network. Rea[...]
-
Страница 71
EDR - G903/G902 Featur es and F unctio ns 3- 59 1. Co nfig ure Em ail Ev ent Ty pes Select the desir ed Event types fro m the Web B ro wse r Event t ype pa ge (a descrip tion of each event type is given later in the Email Alarm Events se tting subsecti on). 2. Confi gur e Email Set t ings To config ure the E therDevice R outer ’ s email setup fro[...]
-
Страница 72
EDR - G903/G902 Featur es and F unctio ns 3- 60 E- mail Setup Main S erver I P/Name Sett ing Descrip tion Facto ry Defa ult IP add re ss The I P Address of your email server. None Port Sett ing Descrip tion Facto ry Defa ult Port number The por t number of your email server. None Acco unt Name Sett ing Descrip tion Facto ry Defa ult Max. 30 Charact[...]
-
Страница 73
EDR - G903/G902 Featur es and F unctio ns 3- 61 Configur ing R elay Warning The Auto Relay Warning functio n uses relay output to alert the user when certain user - configured events take place. Ther e are two basic steps requir ed to set up the Relay Warni ng f unction: 1. Confi guring Re lay Eve nt Typ es Select the desir ed Event t y pes fro m t[...]
-
Страница 74
EDR - G903/G902 Featur es and F unctio ns 3- 62 Using Diagnosis The E therDe vice R outer provides P ing tools a nd LLD P for adminis trator s to diagnose network sys tems. Ping The Ping functio n uses the ping comma nd to gi ve users a simple but powerful tool for troubles hooting network proble ms. The f unction ’ s most unique fe ature is that[...]
-
Страница 75
EDR - G903/G902 Featur es and F unctio ns 3- 63 Neighbor Por t D escrip t ion: A tex tual descrip tion of the neighbor device ’ s inter face. Neighbor Sy s tem: Hostname of the neighbor dev ice. Using Monitor You can monito r statistics in real time from the E therDevice R outer ’ s web conso le. Monitor by S ystem Access the Monitor by selecti[...]
-
Страница 76
EDR - G903/G902 Featur es and F unctio ns 3- 64 Using Syst em Log The E th erDevice R outer provi des Event L og and Sys l og functions to record impor tant events . Using Ev ent Log Field Desc riptio n Bootup This field shows how many times the ED R- G509 has been rebooted or cold started. Date The d ate is updated b ased on how the c urrent date [...]
-
Страница 77
EDR - G903/G902 Featur es and F unctio ns 3- 65 DI trans ition (On - > O ff) Cold star t Factory def ault Warm start System restart Warm start Firm ware U pgrade War m start Conf iguration Upgrade Warm start NOTE The m aximum numb er of e vent e ntr ies is 1000. Usi ng Sysl og This functio n provides the event logs for the syslog server. The fun[...]
-
Страница 78
EDR - G903/G902 Featur es and F unctio ns 3- 66 2. A w arning mess age will appe ar to warn the user that the security c ertificate was issued by a company they have no t chosen to t rust. 3. Select Yes to enter the E therDev ice R outer ’ s web br owser i nterface and acc ess the web browse r interf ace secured via HTTPS/SS L.[...]
-
Страница 79
A A. MIB Groups The E therD evice R outer come s with built - in SNMP (Simple Network Management Protoco l) agent software that suppor ts cold start trap, line up/d own trap, and RFC 1213 MIB - II. The standard MIB groups that the E therDevic e R outer series suppo rt are: MIB I I.1 – Sy ste m Gr oup sysORTable MIB I I.2 – Interfaces Group ifTa[...]