Summary of the content on the page No. 1
Summary of the content on the page No. 2
Summary of the content on the page No. 3
Table of Contents CHAPTER 1 INTRODUCTION ............................................................................................. 1 TW100-BRV204 Features................................................................................................ 1 Package Contents .............................................................................................................. 3 Physical Details..........................................................................................
Summary of the content on the page No. 4
VPN Configuration ......................................................................................................... 73 VPN Examples................................................................................................................. 83 Certificates ..................................................................................................................... 101 CRLs....................................................................................................
Summary of the content on the page No. 5
Chapter 1 Introduction 1 This Chapter provides an overview of the TW100-BRV204 's features and capabilities. Congratulations on the purchase of your new TW100-BRV204 . The TW100-BRV204 is a multi-function device providing the following services: • Shared Broadband Internet Access for all LAN users. • VPN Gateway for IPSec VPN connections to remote PCs or sites. • 3-Port Switching Hub for 10BaseT or 100BaseT connections. Figure 1: TW100-BRV204 TW100-BRV204 Features The TW100-B
Summary of the content on the page No. 6
TW100-BRV204 User’s Guide Advanced Internet Functions • Communication Applications. Support for Internet communication applications, such as interactive Games, Telephony, and Conferencing applications, which are often difficult to use when behind a Firewall, is included. • Special Internet Applications. Applications which use non-standard connections or port numbers are normally blocked by the Firewall. The ability to define and allow such applications is provided, to enable such appli
Summary of the content on the page No. 7
Introduction Security Features • Password - protected Configuration. Optional password protection is provided to prevent unauthorized users from modifying the configuration data and settings. • NAT Protection. An intrinsic side effect of NAT (Network Address Translation) tech- nology is that by allowing all LAN users to share a single IP address, the location and even the existence of each PC is hidden. From the external viewpoint, there is no network, only a single device - the TW100-BR
Summary of the content on the page No. 8
TW100-BRV204 User’s Guide Physical Details Front-mounted LEDs Figure 2: Front Panel Power On - Power on. Off - No power. Status (Red) On - Error condition. Off - Normal operation. Blinking - This LED blinks during start up. LAN Each port has 2 LEDs • Link/Act • On - Corresponding LAN (hub) port is active. • Off - No active connection on the corresponding LAN (hub) port. • Flashing - Data is being transmitted or received via the corre- sponding LAN (hub) port. • 100 • On - Co
Summary of the content on the page No. 9
Introduction Rear Panel Figure 3: Rear Panel Reset Button This button has two (2) functions: • Reboot. When pressed and released, the TW100-BRV204 will reboot (restart). • Clear All Data. This button can also be used to clear ALL data and restore ALL settings to the factory default values. To Clear All Data and restore the factory default values: 1. Power Off. 2. Hold the Reset Button down while you Power On. 3. Keep holding the Reset Button for a few seconds, until the RED LED
Summary of the content on the page No. 10
TW100-BRV204 User’s Guide • PCs connected to the DMZ port are on the same LAN segment as PCs connected to the Hub ports. They must use the same IP address range. • PCs connected to the DMZ port are NOT visible to PCs on the hub (LAN) ports. So you cannot use Microsoft networking or other networking protocols to connect to PCs on the DMZ. The connection must be made via the Internet. • PCs connected to the DMZ port still share the WAN port IP address for Internet access. • To make PCs on
Summary of the content on the page No. 11
Chapter 2 Installation 2 This Chapter covers the physical installation of the TW100-BRV204 . Requirements • Network cables. Use standard 10/100BaseT network (UTP) cables with RJ45 connectors. • TCP/IP protocol must be installed on all PCs. • For Internet Access, an Internet Access account with an ISP, and a Broadband modem (usually, DSL or Cable modem). Procedure Figure 4: Installation Diagram 1. Choose an Installation Site Select a suitable place on the network to install the TW
Summary of the content on the page No. 12
TW100-BRV204 User’s Guide 3. Connect WAN Cable Connect the Broadband modem to the WAN port on the TW100-BRV204 . Use the cable supplied with your Broadband modem. If no cable was supplied, use a standard LAN cable. 4. Power Up • Power on the Broadband modem. • Connect the supplied power adapter to the TW100-BRV204 and power up. Use only the power adapter provided. Using a different one may cause hardware damage 5. Check the LEDs • The Power LED should be ON. • The Status LED should
Summary of the content on the page No. 13
Chapter 3 Setup 3 This Chapter provides Setup details of the TW100-BRV204 . Overview This chapter describes the setup procedure for: • Internet Access • LAN configuration PCs on your local LAN may also require configuration. For details, see Chapter 4 - PC Con- figuration. Other configuration may also be required, depending on which features and functions of the TW100-BRV204 you wish to use. Use the table below to locate detailed instructions for the required functions. To Do thi
Summary of the content on the page No. 14
TW100-BRV204 User’s Guide Use the Microsoft VPN feature: Chapter 9: Microsoft VPN • PPTP Server in the TW100-BRV204 . • User and Client setup. • Checking VPN connection Status. Configure or use any of the following: Chapter 9: Other Features and Settings • Configuration File backup and restore. • Network Diagnostic • PC Database • Remote Administration • Routing • Upgrade Firmware • UPnP Where use of a certain feature requires that PCs or other LAN devices be configured, this
Summary of the content on the page No. 15
Setup • Double - click the icon for the TW100-BRV204 (either on the Desktop, or in My Network Places) to start the configuration. Refer to the following section Setup Wizard for details of the initial configuration process. Using your Web Browser To establish a connection from your PC to the TW100-BRV204 : 1. After installing the TW100-BRV204 in your LAN, start your PC. If your PC is already running, restart it. 2. Start your WEB browser. 3. In the Address box, enter "HTTP://" and the
Summary of the content on the page No. 16
TW100-BRV204 User’s Guide • These are the default values. Both the name and password can (and should) be changed, using the Admin Login screen. Once you have changed either the name or the password, you must use the current values. 12
Summary of the content on the page No. 17
Setup Setup Wizard The first time you connect to the TW100-BRV204 , the Setup Wizard will run automatically. (The Setup Wizard will also run if the TW100-BRV204 's default setting are restored.) 1. Step through the Wizard until finished. • You need to know the type of Internet connection service used by your ISP. Check the data supplied by your ISP. • The common connection types are explained in the tables below. 2. On the final screen of the Wizard, run the test and check that an Inte
Summary of the content on the page No. 18
TW100-BRV204 User’s Guide PPTP Mainly used in Europe. • PPTP Server IP Address. • User name and password. You connect to the ISP only when required. The IP address • IP Address allocated to is usually allocated automati- you, if Static (Fixed). cally, but may be Static (Fixed). Other Modems (e.g. Broadband Wireless) Type Details ISP Data required Dynamic Your IP Address is allocated Usually, none. IP Address automatically, when you However, some ISP's may connect to you ISP.
Summary of the content on the page No. 19
Setup Home Screen After finishing or exiting the Setup Wizard, you will see the Home screen. When you connect in future, you will see this screen when you connect. An example screen is shown below. Figure 6: Home Screen Navigation & Data Input • Use the menu bar on the top of the screen, and the "Back" button on your Browser, for navigation. • Changing to another screen without clicking "Save" does NOT save any changes you may have made. You must "Save" before changing screens or your
Summary of the content on the page No. 20
TW100-BRV204 User’s Guide LAN Screen Use the LAN link on the main menu to reach the LAN screen An example screen is shown below. Figure 7: LAN Screen Data - LAN Screen TCP/IP IP Address IP address for the TW100-BRV204 , as seen from the local LAN. Use the default value unless the address is already in use or your LAN is using a different IP address range. In the latter case, enter an unused IP Address from within the range used by your LAN. Subnet Mask The default value 255.255.255
