Multitech RF500S Uživatelský manuál stáhnout pdf (Strana 31)

host on the corporate network the VPN authentication box pops up, once authenticated the VPN encrypts

data flowing between the user’s computer and the corporate firewall. The VPN client is selective, it knows

which IP addresses reside on the corporate LAN it ignores other addresses so they operate normally

Getting this to work required updating the firmware in the SOHO router. Installing later VPN software at

the office and client. User authentication was changed to a NAT friendly version. Now that the VPN is up

and running it works without a hitch. The only minor inconvenience is on machines configured for dialup

networking. When the VPN is activate it also pops up the dialer even when connected to a LAN.

For more information refer to RFC 2709 Security model with tunnel-mode IPsec for NAT domains.

VPN Installation tips:

Verify VPN software is compatible with NAT

Verify broadband router firmware is compatible with your VPN software

Make sure your IT department has configured the VPN to be NAT friendly

If both the home network and work network use private IP addresses make sure no conflicts exist.

The same addresses cannot be used in both locations.

It is possible to bind VPN clients to a specific remote IP address. If your DSL provider offers a

static IP address this is not a problem, inform your VPN administer of your address. If not your

administrator will not be able to bind your account to a specific address.

VPN’s extend the trust environment to the employees PC. If this computer is compromised so is

the corporate LAN. Employees and family members need to understand safe computing practices.

7.7 Logging

The router creates several logs. It maintains statistics on the amount of traffic generated and received by

each device, logs sites accessed by each PC, and logs intrusion attempts. This information can be copied to

a file for additional analysis.

8 Debug -- When Things Go Wrong

Unfortunately networks occasionally fail. When a failure occurs it is often difficult to determine the

underlying cause. Luckily, Windows includes a number of built in diagnostic tools.

Test

Result

Ping by IP address

Two machines can successfully connect

Ping by Name

DNS is working, Two machines can connect

WinIPcfg

Network adapter settings

Net View

DOS version of Network Neighborhood

Netstat -a

Active Ports

Trace Route

Host to host path

Modem Test

Modem vendors self test

In addition to the built in Windows tools DSL Reports has a number of tuning and diagnostics test on the

tool page http://www.dslreports.com/tools.

1 2 ... 26 27 28 29 30 31 32 33 34 35 36 ... 48 49

Komentáře k této Příručce

Žádné komentáře

Multitech RF500S Uživatelský manuál Strana 31

Komentáře k této Příručce

Související produkty a manuály pro Síťové přepínače Multitech RF500S