Hotbrick VPN 800/8 F User Manual

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Note:The supplied Windows TFTP utility also allows you to perform three (3) additional operations:Save

HotBrick, Tel: 305-398-0888, Fax: 305-398-59662: Quick InstallationOverviewInitial Basic Setup of your VPN800/8 F Firewall involves the following step

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966No Response? Is your PC using a Fixed IP address?If so, you must configure your PC to use an IP address

HotBrick, Tel: 305-398-0888, Fax: 305-398-59668. Select LAN & DHCP from the menu. You will see a screen like the example below.Figure 2-3: LAN &am

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Installing the Dual WAN VPN Firewall on your LANFigure 2-4: Installation Diagram13. Ensure the VPN800/8

HotBrick, Tel: 305-398-0888, Fax: 305-398

HotBrick, Tel: 305-398-0888, Fax: 305-398-59663. Quick Installation - LAN & DHCPSelect LAN & DHCP from the menu. You will see a screen like th

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966LAN IP Configuration:IP address - for the VPN800/8 F Firewall, as seen from the local LAN. Use thedefau

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966DHCP Client ListThis table shows the IP addresses that have been allocated by the DHCP Server.For each a

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Quick installation - Primary setupConnection modeEnable Select this if you have connected a broadband m

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966

3 : LoadbalancingThis screen is only operational if using Internet connections on both WAN portsFigure 3-2: Load BalanceLoad balancing – Load Balancin

HotBrick, Tel: 305-398-0888, Fax: 305-398-59664 : Advanced WANPort optionsConnection validationHealth Check – If disabled, the Alive Indicator Check

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Transparant bridge optionBridge Mode – If set to Enable, this WAN port does not use NAT or the Load Bal

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966The screen is required in order to use multiple PPPoE sessions on the same WAN port. Itcan also be used

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Advanced WAN PPTPAdvanced WANWAN Port - Select the desired WAN port (click desired WAN on Connection Sta

HotBrick, Tel: 305-398-0888, Fax: 305-398-59665 : Advanced ConfigurationAdvanced configuration – Host IPThis feature is used in the following situatio

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Reserve in DHCP – Select Enable to reserve a particular (LAN) IP address for aparticular PC on your LAN

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Advanced configuration – RoutingRoutingThis section is only relevant if your LAN has other Routers or Ga

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Gateway – The IP Address of the Gateway or Router that the VPN800/8 FFirewall must use to communicate w

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966For Router A's Default RouteDestination IP 0.0.0.0AddressNetwork MaskNetwork Mask0.0.0.0Gateway IP

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Web Server(192.168.1.45)PC using FTP Server(ftp://205.20.45.34)FTP Server(192.168.1.20)205.20.45.34 (WAN

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Advanced configurati on – virtual serverVirtual Server Configuration Enable – The enable checkbox enabl

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Update – Save any changes you have made to the current entry. Cancel – Cancel any changes you have mad

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Advanced confi gurati on - Special ApplicationIf you use Internet applications that use non-standard con

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Special Application List - This list shows the details for all currently defined Special Applications.Yo

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Dynamic DNS ServiceThis pull-down menu can Enable/Disable the Dynamic DNS feature, and select the requir

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Advanced Configuration - Multi DMZThis feature allows each WAN port IP address to be associated with one

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Advanced Configuration - UPnP SetupWith the UPnP (Universal Plug & Play) function, it is easy to set

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Advanced Configuration – NAT SettingNAT ConfigurationNAT Routing – You can enable or disable NAT by usi

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Advanced Configuration – Advanced FeatureExternal Filters ConfigurationIDENT Port – Port 113 is associa

HotBrick, Tel: 305-398-0888, Fax: 305-398-59661:IntroductionCongratulations on the purchase of your new VPN 800/8 F Firewall. The VPN 800/8 FFirewall

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966settings to correct the problem.Enable - If enabled, the WAN port you specify will be used for all outg

6 – Security ManagementSecurity Management – Block URLThis feature allows you to block access to undesirable Web sites. You can block by URL, IPaddres

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Security Management – Access FilterThe network administrator can use the Access Filter to control the In

HotBrick, Tel: 305-398-0888,Fax: 305-398-5966Port Blocking – There are two possible settings :No Filtering - all ports are openBlock All Access – Al

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Security Management – System Filter Exepti on Sysfilter exception - System Filter Exception – will r

HotBrick, Tel: 305-398-0888, Fax: 305-398-59667 : VPN ConfigurationVirtual Private Network (VPN) uses encryption and authentication to create the conn

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966VPN Configuration – Tunnel to HotBrick Unit VPN Tunnel List– here you can add a new tunnel or change an

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Tunnel to HotBrick Client – This describes an IPSec tunnel from a the VPN 800/8 F to the HotBrickClient

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966 Tunnel Name– In order to distinguish the tunnel, you have to give the “Tunnel” a unique name. PPPoE S

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Key managementKey – Key Type: there are two key types (manual key and auto key) available for keyexchan

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966There are many load-balancing methods like Outbound load balance by least load(byte/packet/session/IP),

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966IPSec policy optionsTunnel Attribute – The defined attributes for the tunnel.Dead Peer Detection - Thi

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Set DF Flag - If this DF (Do not Fragment) flag is set, it means the fragmentation of this packet atthe

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966VPN Configuration–SAListVPN configuration–SAThe list will display the details of all Policy Setup config

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966VPN Configuration – VPN LogYou can monitor the VPN status through the VPN log web page. The log level (p

HotBrick, Tel: 305-398-0888, Fax: 305-398-59668: QoS ConfigurationQoS Configuration – overviewTheVPN800/8 F Firewall provides QoS, which supports high

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966QoS Configuration – QoS SetupQoS SetupQoS FeatureEnable QoS – This will allow users to enable the QoS f

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966 Policy Name List – When adding a new Policy, ignore this list. To edit an existing entry, select it fr

HotBrick, Tel: 305-398-0888, Fax: 305-398-59669 : Management AssistantManagement assistant – Admin PasswordEnter the desired password, re-enter it in

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Management Assistant – Email AlertThis feature will send a warning Email to inform the system administra

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Other FeaturesDHCP Server SupportDynamic Host Configuration Protocol provides dynamic IP addresses to

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Ping Before Notification - A threshold valuefor the maximum Pings allowed to eachinterface on thisdevic

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Management Asssistant – SyslogThis feature can send real time system information on the web page or to t

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Management Assistant - Upgrade Firmware62

HotBrick, Tel: 305-398-0888, Fax: 305-398-596610: Device StatusOnce both the VPN800/8 F Firewall and the PCs are configured, operation isautomatic. Ho

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966DHCP Server – The status of the DHCP Server function - either "Enabled" or "Disabled&quo

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Data – NAT StatusLAN IP infoIP Address – The LAN IP Address of the VPN800/8 F Firewall.Mask Address –

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Device information – Device InformationDevice InformationFirmware Version – Version of the Firmware cur

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966If the "Restore Default Value" button on this screen is clicked:All your current settings wil

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Appendix ASpecificationsModel HotBrick VPN 800/8 F FirewallDimensions 120mm (W) x 427mm (D) x 43.4mm (H)

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Appendix BWindows TCP/IP SetupOverviewTCP/IP SettingsIf using the default Load Balancer settings, and th

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Package ContentsThe following items should be included:The VPN800/8 F Firewall Unit Power CordQuick I

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Ensure your TCP/IP settings are correct, as follows:Using DHCPTo use DHCP, select the radio button Obtai

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966 On the DNS Configuration tab, ensure Enable DNS is selected. If the DNS Server Search Order listis emp

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Figure B-6: TCP/IP Properties (Win 2000) Ensure your TCP/IP settings are correct.Using DHCPTo use DHCP,

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Checking TCP/IP Settings - Windows XP:7. Select Control Panel - Network Connection. Right click the Loc

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Figure B-8: TCP/IP Properties (Windows XP) Ensure your TCP/IP settings are correct.Using DHCPTo use DHC

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Appendix CTroubleshootingOverviewThis chapter covers some common problems that may be encountered while

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Appendix D : IPSec Tunnel ExamplesVPN Configuration – ExamplesTunnel to HotBrick UnitThe HotBrick units

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966First we will make settings in the VPN 800/8 F Next we will make settings for the LB-2 VPNNote : you n

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Some Statu s and Error conditions are indicated by combinati ons ofLED’s, as shown belowLED Action Condi

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966Rear PanelFigure 1-3: Rear PanelAC 100V ~ 240V Connect to AC100~240V / 50~60Hz with AC power cord.Defaul