HotBrick VPN 6000, User Manual

Page 1: ...HotBrick VPN 6000 user manual version 193 2005 01 20 ...

Page 2: ...ieval system or transmitted in any form or by any means electronic mechanical photocopying recording or otherwise without the prior written consent of the publisher Microsoft and Windows are trademarks of Microsoft Corporation in the United States and other countries Apple and Mac OS are trademarks of Apple Computer Inc registered in the U S and other countries ...

Page 3: ......

Page 4: ...Running the Quick install wizard 18 1 6 1 Setting up your LAN connection 18 1 6 2 Setting up your default internet connection 21 Setting up WAN1 using DHCP 22 Setting up WAN1 using a Static Nat connection 22 Setting up WAN1 using a PPTP or PPPoE connection 23 1 6 3 Setting up your fallback internet connection 23 1 6 4 Confirming and applying results 24 1 6 5 Connecting to the firewall s management...

Page 5: ... your HotBrick VPN 6000 1 2 1 Front 1 2 2 Back 1 3 Hardware installation Use the power cord to connect the HotBrick VPN 6000 s power socket 15 to a standard wall power outlet Switch the firewall on using the power switch 16 on the back of the device Booting the hardware for the first time may take up to 1 minute When the firewall is switched on and ready you should hear 3 short beeps If you have n...

Page 6: ... interface However because the device is not set up to connect with a local network or Internet connection it must first be configured using a single PC or notebook 1 4 1 Configure a notebook or PC to use DHCP If you are to use the firewall s management interface from your notebook or PC then both are to be connected and using a common network setup The fastest way to effect this is to have your P...

Page 7: ...ntrol panel double click the Network and Dial up Connections icon The window Network and Dial up Connections should open In the Network and Dial up Connections window double click the Local Area Connection icon page 7 33 version 193 05 01 20 ...

Page 8: ...ld open In the Local Area Connection Status window click the Properties button The Local Area Connection Properties window should open In this window select Internet Protocol TCP IP the blue line in the example below Click the Properties button revision 193 05 01 20 page 8 33 ...

Page 9: ...ample above check Obtain an IP address automatically and Obtain DNS server address automatically Click the OK button to confirm your changes To verify your settings open a Command Prompt From the Start menu through Programs in the Accessories sub menu In the command prompt type ipconfig The output should look like this page 9 33 version 193 05 01 20 ...

Page 10: ...quest a new network address If you still fail to get an IP Address in the correct range please refer to section 1 12 Errors and recovery Enabling DHCP using Windows XP Using the Windows Start menu and Settings sub menu open the Control Panel In the Control Panel double click the Network Connections icon The Network Connections window should open revision 193 05 01 20 page 10 33 ...

Page 11: ...nnection icon The Local Area Connection Properties window should open In the Local Area Connection Properties window select Internet Protocol TCP IP the blue line in the above example Then press Properties The Internet Protocol TCP IP Properties window should open page 11 33 version 193 05 01 20 ...

Page 12: ...settings open a Command Prompt From the Start menu through All Programs in the Accessories sub menu In the command prompt type ipconfig The output should look like this If the IP Address line does not list an address starting with 192 168 99 please try typing ipconfig renew This should force the PC or Notebook to request a new network address If you still fail to get an IP Address in the correct r...

Page 13: ...le menu choose System Preferences then Network The Network window should open In the Network window make sure the Show box is set to show Active Network Ports Drag Built in Ethernet to the top of the list Set the Show box to Built in Ethernet page 13 33 version 193 05 01 20 ...

Page 14: ... to confirm your changes 1 4 2 Log in on the firewall management interface Open a web browser on the PC or Notebook you have just configured Enter the address https 192 168 99 99 12000 into the address bar When prompted for a user name and password enter admin user name and password as password Click OK If you get a timeout not found or permission denied error please refer to section 1 12 Errors a...

Page 15: ...icates we are looking at the Current Status 1 of the firewall Tabs labeled Control 2 HotView 3 Logs 4 and Statistics 4 provide access to other screens in the Current Status context The red warning message at the top of the screen 5 indicates the current lack of a valid license key The system status on the left hand side of the screen about half way to the bottom displays some statistics concerning...

Page 16: ...se key correctly the next window should allow you to confirm the changes and return to the firewall management interface If you have incorrectly entered a license key you will be asked to enter the license key again If the license key should fail repeatedly the license key may not match your hardware Please refer to section 1 12 Errors and recovery revision 193 05 01 20 page 16 33 ...

Page 17: ...uration context to make changes to it s intended behavior The Configuration context has a number of wizards available that can be used to provide assistance performing common tasks The list of wizards is found on the left hand side of the screen right below the red Configuration text They are Internet Connections Local Area Networks Port forwarders PNAT VPN IPSec tunnels VPN L2TP PPTP users and DM...

Page 18: ... install wizard by pressing the red Quick install text in the left hand side of the screen between Current Status and Configuration Start the Quick install wizard When you start the Quick install wizard a warning screen signals the start of this wizard The screen is there to prevent you from inadvertently starting the Quick install wizard at a later time thereby deleting all your current network s...

Page 19: ...en this network address should have a predefined value if uncertain contact your network administrator In this case please note that HotBrick VPN 6000 displays the net mask as a number of bits not in the 255 255 255 0 format If you do not have a local network then you need to pick an address for your local network first There are a number of possible network addresses set aside for use in a local ...

Page 20: ...ual We will set the firewall s internal IP address to 192 168 0 1 and the net mask value to 24 as befits a 192 168 x 0 network Enter a firewall IP address Enter the corresponding net mask Write down the IP address and net mask values for later reference Click next to continue revision 193 05 01 20 page 20 33 ...

Page 21: ...ple MyISP DSL or AOL dial in This way it will be easier to tell two separate Internet connections apart in the future Enter a Connection name for your default Internet connection The type of Internet connection to choose is slightly more complicated Different types of Internet connections will require different values As a consequence the next screen in the Quick install wizard will look slightly ...

Page 22: ...etting up WAN1 using DHCP The easiest way to connect WAN1 to the Internet is using DHCP Generally when choosing DHCP no further settings are required for an Internet connection After pressing next you will directly be offered the opportunity to set up your WAN2 interface fall back Internet connection Setting up WAN1 using a Static Nat connection When using a single static IP address or a routed su...

Page 23: ...est a specific IP address of gateway If such is the case you can put these values in the optional IP address and gateway fields Most users may simply leave these fields empty If required fill in the new IP address and new gateway fields Press next to continue 1 6 3 Setting up your fall back Internet connection Next you will be asked to set up your fall back Internet connection WAN2 Setting up a fa...

Page 24: ...ctions the Quick Install wizard is done In the final confirmation screen click done to close the wizard The top left hand corner of the screen of our firewall s management interface should now show the text Apply changes Changes made in the Quick install wizard are only made permanent once you click this text revision 193 05 01 20 page 24 33 ...

Page 25: ...gement interface because according to the firewall s new local network settings our PC or notebook is no longer on the same local network as the firewall is If such is the case then we have to make a new connection to the firewall before we can proceed The first step towards this is to obtain a new network address which is valid according to the firewall s local network settings A good way to do t...

Page 26: ...f the screen to enter the Configuration context Activate the Config tab by clicking it once Under the heading Edit the backup sets you will find the stored backup sets as well as buttons for possible operations on the backup sets At the moment we have one stored backup set applied config 1105532939 5 in the above example Pressing Delete before the name of the backup set on the left will delete the...

Page 27: ...nload a copy of the backup set we ve just made to your computer Whenever you contact support personnel about a problem with your configuration they may ask you to send a backup set containing your current firewall settings page 27 33 version 193 05 01 20 ...

Page 28: ...in the know Think up a good administrator password It is essential that you not forget this password You will not be able to manage your firewall without it It is strongly recommended you file at least one copy of your password in a sealed envelope to a safe or to your direct superior We change the administrator s password from the Configuration context Click on the red text Configuration on the l...

Page 29: ...rd your own login based on the previous administrator password will also expire It will therefore be necessary to provide a user name and password again before continuing Log in with the user name admin and the password you have just entered page 29 33 version 193 05 01 20 ...

Page 30: ...to enter the Current Status context Once in the Current Status context find the current time on the left hand side about half way to the bottom Press the globe and magic wand icon right of the time indicator The Setup TimeZone and NTP servers window will open From the Timezone menu choose your timezone Enter at least one valid NTP server under NTP servers for example us pool ntp org Click next to ...

Page 31: ...DHCP server make sure you disable any other DHCP servers in your local network If you wish to keep your existing DHCP server active we must deactivate the HotBrick VPN 6000 s built in DHCP server before connecting the firewall to your local network If you need to disable the HotBrick VPN 6000 s built in DHCP server Click on the red text Current Status on the left hand side of the screen to enter t...

Page 32: ...onnection If you make use of a secondary fall back Internet connection connect the WAN2 interface to the modem or router used for your secondary fall back Internet connection Using one of the bundled RJ45 UTP cables connect the FLEX1 interface on the firewall to the switch router or hub you will use for your local network Power up the firewall using the power switch on the back of the device Check...

Page 33: ...n the connection between the firewall and your PC notebook may be at fault Check the connection LED for the FLEX1 port to insure that the device is properly connected If the address you obtain starts with anything BUT 169 254 then you may have connected you PC or notebook and probably the firewall too to an existing network Please connect the notebook PC directly to the firewall s FLEX1 port My li...