Waters Network Systems ProSwitch-Quad Series Dokumentacja Strona 367
- Strona / 469
- Spis treści
- ROZWIĄZYWANIE PROBLEMÓW
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
Monitor System Access and Performance
367
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
How to Send Syslogs over a VPN Tunnel between Sites
To send syslogs from one site to another over a gateway-to-gateway VPN tunnel:
1. At Site 1, set up a syslog server that is connected to Gateway 1.
2. Set up a VPN tunnel between Gateway 1 at Site 1 and Gateway 2 at Site 2.
3. Change the remote IP address in the VPN policy on Gateway 1 to the W
AN IP address of
Gateway 2.
4. Change the local IP address in the VPN policy on Gateway 2 to the WAN IP address of
Gateway 2.
5. At Site 2, specify that Gateway 2 should send the syslogs to the syslog server at Site 1.
The following sections describe steps 2 through 4, using the topology that is described in the
following table:
Configure Gateway 1 at Site 1
To create a gateway-to-gateway VPN tunnel to Gateway 2, using the IPSec VPN wizard:
1. Select VPN > IPSec VPN > VPN Wizard
. The VPN Wizard screen displays.
2. Configure a gateway-to-gateway VPN tunnel using the following information:
• Connection name. Any name of your choice
• Pre-shared key.
Any key of your choice
• Remote WAN IP address. 10.0.0.2
• Local WAN IP address. 10.0.0.1
• Remote LAN IP Address. 192.168.20.0
• Remote LAN subnet mask. 255.255.255.0
3. Click Apply
to save the settings.
To change the remote IP address in the VPN policy:
1. Select VPN > IPSec VPN > VPN Policies. The VPN
Policy screen displays.
2. Next to the policy name for the Gateway 1–to–Gateway 2 autopolicy, click Edit
. The Edit
VPN Policy screen displays.
3. In the General section of the screen, clear the Enable NetBIOS check box.
Type of Address Gateway 1 at Site 1 Gateway 2 at Site 2
WAN IP address 10.0.0.1 10.0.0.2
LAN IP address 192.168.10.0
192.168.20.0
LAN subnet mask 255.255.255.0 255.255.255.0
LAN IP address syslog server 192.168.10.2 Not applicable
- ProSAFE Gigabit Quad WAN SSL 1
- VPN Firewall SRX5308 1
- Trademarks 2
- Revision History 2
- Contents 4
- Chapter 3 LAN Configuration 5
- Chapter 10 Troubleshooting 8
- Introduction 11
- Firewall SRX5308? 12
- Key Features and Capabilities 12
- Balancing 13
- Security Features 15
- Extensive Protocol Support 15
- Maintenance and Support 17
- Package Contents 17
- Hardware Features 17
- Figure 1 18
- Table 1. LED descriptions 18
- Rear Panel 19
- Figure 3 20
- Log In to the VPN Firewall 21
- Figure 5 22
- Figure 8 24
- Figure 9 25
- Settings 26
- Complete these tasks: 27
- Classical Routing 30
- Figure 11 31
- Figure 12 32
- Figure 13 34
- Figure 14 34
- Figure 15 35
- Figure 16 36
- Figure 17 37
- Figure 18 38
- Figure 19 39
- Interfaces 40
- IPv4 Interfaces 41
- Figure 21 42
- Figure 22 43
- To edit a protocol binding: 44
- Figure 24 46
- Configure Dynamic DNS 49
- To configure DDNS: 50
- Figure 26 51
- Figure 27 51
- Figure 28 54
- Connection 55
- Figure 30 56
- Figure 31 57
- Figure 32 58
- Figure 33 59
- Figure 34 60
- Figure 35 61
- Figure 36 62
- Figure 37 65
- Figure 38 66
- Figure 39 66
- To edit an ISATAP tunnel: 67
- Figure 40 67
- To configure SIIT: 68
- Figure 41 68
- Figure 42 69
- Figure 43 70
- Figure 44 71
- Figure 45 72
- Figure 46 73
- Configure WAN QoS Profiles 76
- Figure 47 77
- Figure 48 78
- Figure 49 80
- What to Do Next 82
- Port-Based VLANs 85
- Figure 50 86
- VLAN DHCP Options 87
- Configure a VLAN Profile 88
- Figure 52 89
- Figure 54 95
- Manage the Network Database 97
- Figure 56 100
- Figure 57 101
- Manage the IPv6 LAN 102
- DHCPv6 Server Options 103
- Configure the IPv6 LAN 104
- LAN Configuration 105
- IPv6 LAN Address Pools 106
- Figure 59 107
- To add an IPv6 prefix: 108
- Figure 60 108
- To edit a prefix: 108
- Figure 61 110
- Figure 62 112
- Default VLAN 113
- DMZ Port for IPv4 Traffic 115
- Figure 64 116
- DMZ Port for IPv6 Traffic 118
- Figure 65 119
- IPv6 DMZ Address Pools 121
- Figure 67 124
- Figure 68 126
- Manage Static IPv4 Routing 127
- Figure 70 128
- Figure 71 129
- IPv4 Static Route Example 131
- Manage Static IPv6 Routing 132
- Firewall Protection 134
- About Firewall Protection 135
- Order of Precedence for Rules 144
- Configure LAN WAN Rules 145
- Figure 76 146
- IPv4 LAN WAN Outbound Rules 147
- IPv6 LAN WAN Outbound Rules 148
- Figure 78 149
- Figure 79 150
- IPv6 LAN WAN Inbound Rules 151
- Configure DMZ WAN Rules 152
- Figure 82 153
- Figure 83 154
- Figure 84 155
- Figure 85 156
- Figure 86 157
- Configure LAN DMZ Rules 158
- Figure 88 159
- Figure 89 160
- Figure 90 161
- Figure 91 162
- Figure 92 163
- Examples of Firewall Rules 164
- Figure 94 165
- Figure 95 166
- Figure 96 167
- Figure 97 168
- FTP Site on the Internet 169
- Attack Checks 170
- IPv6 Attack Checks 172
- Set Limits for IPv4 Sessions 173
- Figure 103 175
- To enable ALG for SIP: 176
- Figure 104 176
- Add Customized Services 177
- Figure 105 178
- To edit a service: 178
- Create IP Groups 179
- Figure 108 180
- To edit an IP group: 180
- Create Bandwidth Profiles 181
- Profile screen displays: 182
- To create a QoS profile: 184
- Figure 111 184
- Figure 112 185
- Configure Content Filtering 186
- Figure 113 188
- Enable Source MAC Filtering 190
- Figure 115 191
- Set Up IP/MAC Bindings 192
- IPv4/MAC Bindings 193
- To edit an IP/MAC binding: 194
- Figure 117 194
- IPv6/MAC Bindings 195
- Figure 119 196
- Configure Port Triggering 197
- Figure 120 198
- Figure 122 199
- Figure 121 199
- To configure UPnP: 199
- IPSec and L2TP Connections 201
- Configurations 203
- Figure 125 204
- Figure 126 204
- Figure 127 205
- Figure 128 207
- Figure 129 207
- Figure 130 208
- Figure 131 208
- Figure 132 209
- Figure 133 211
- Figure 134 211
- Figure 135 212
- Figure 136 213
- Figure 137 215
- Figure 138 216
- Figure 139 217
- Figure 140 217
- Figure 141 218
- Figure 142 218
- Figure 143 220
- Figure 144 221
- Figure 145 221
- Figure 146 222
- The Advanced pane displays: 223
- Figure 148 225
- Figure 149 226
- Information 227
- Figure 151 228
- Figure 152 228
- Figure 153 228
- Figure 154 228
- Figure 155 229
- Figure 156 229
- Figure 157 230
- Manage IPSec VPN Policies 231
- Figure 158 232
- Figure 159 233
- To edit an IKE policy: 237
- Manage VPN Policies 238
- Figure 160 239
- Setting Description 241
- To edit a VPN policy: 245
- User Database Configuration 247
- Figure 163 248
- Mode Config Operation 250
- Figure 164 251
- Figure 165 251
- Figure 166 254
- Operation 257
- Figure 167 258
- Figure 168 258
- Figure 169 259
- Figure 171 262
- Figure 172 263
- Figure 173 264
- Figure 174 264
- Figure 175 265
- Configure Keep-Alives 266
- Configure Dead Peer Detection 267
- Figure 177 268
- Configure the PPTP Server 269
- Figure 179 270
- View the Active PPTP Users 271
- Configure the L2TP Server 272
- View the Active L2TP Users 273
- Item Description 274
- SSL Connections 275
- SSL VPN Portal Options 276
- Create the Portal Layout 277
- Figure 185 279
- To edit a portal layout: 281
- Add Servers and Port Numbers 282
- Add a New Host Name 283
- Configure the SSL VPN Client 284
- Add New Network Resources 288
- Figure 189 289
- To edit network resources: 289
- Figure 190 290
- View Policies 292
- To add an SSL VPN policy: 293
- To edit an SSL VPN policy: 296
- Figure 196 298
- Figure 197 298
- Figure 198 299
- Figure 199 300
- To display the SSL VPN log: 300
- Figure 200 300
- VPN Certificates 301
- Configure Domains 303
- Create Domains 304
- Figure 202 305
- Configure Groups 307
- Create Groups 308
- Figure 204 309
- Configure User Accounts 310
- To create a user account: 311
- Figure 205 311
- Figure 206 312
- Set User Login Policies 313
- Figure 208 314
- Figure 209 316
- Figure 210 317
- Figure 211 319
- VPN Certificates Screen 321
- Manage VPN CA Certificates 322
- Figure 213 323
- Figure 215 325
- To delete one or more SCRs: 326
- To delete one or more CRLs: 327
- Network and System Management 328
- Performance Management 329
- Features That Reduce Traffic 330
- Content Filtering 331
- Source MAC Filtering 332
- Port Triggering 334
- DMZ Port 334
- Exposed Hosts 334
- VPN, L2TP, and PPTP Tunnels 335
- Set QoS Priorities 335
- Assign Bandwidth Profiles 335
- System Management 336
- Figure 217 337
- Figure 218 337
- About Remote Access 341
- To access the CLI: 342
- Figure 221 343
- Figure 222 345
- Figure 223 345
- Figure 224 346
- Manage the Configuration File 347
- Back Up Settings 348
- Restore Settings 349
- Upgrade the Firmware 350
- Figure 226 352
- Monitor System Access and 355
- Performance 355
- Figure 227 356
- Figure 228 358
- Figure 229 359
- Figure 230 359
- Figure 231 360
- Figure 232 361
- Figure 233 362
- Figure 234 366
- Figure 235 366
- Configure Gateway 1 at Site 1 367
- Configure Gateway 2 at Site 2 368
- View Status Screens 369
- Figure 236 370
- Router Statistics Screen 371
- Detailed Status Screen 372
- Figure 238 373
- VLAN Status Screen 376
- Tunnel Status Screen 377
- Figure 241 378
- Figure 242 378
- Figure 243 379
- Figure 244 379
- View the VPN Logs 380
- Figure 246 381
- Figure 247 381
- View the WAN Port Status 382
- Figure 249 383
- Figure 250 383
- IPv6 WAN Port Status 384
- Figure 252 385
- View the Attached Devices 386
- View the DHCP Log 387
- Diagnostics Utilities 388
- Send a Ping Packet 389
- Trace a Route 390
- Look Up a DNS Address 390
- Display the Routing Tables 390
- Capture Packets in Real Time 391
- Troubleshooting 392
- Basic Functioning 393
- LAN or WAN Port LEDs Not On 394
- Figure 258 398
- Figure 259 399
- Figure 260 399
- Figure 261 402
- Specifications 404
- Factory Default Settings 405
- Figure 263 418
- Inbound Traffic 419
- Figure 265 420
- Figure 266 420
- Virtual Private Networks 421
- Figure 268 422
- Figure 269 422
- Figure 270 423
- Figure 271 423
- Figure 272 424
- Figure 273 424
- VPN Gateway-to-Gateway 425
- Figure 275 426
- Figure 276 426
- Figure 277 427
- Figure 278 427
- Figure 279 428
- Figure 280 428
- Figure 281 429
- Log Message Terms 431
- System Log Messages 431
- Login/Logout 432
- System Startup 433
- Firewall Restart 433
- IPSec Restart 434
- WAN Status 435
- PPP Logs 436
- • PPPoE Idle Timeout Logs 437
- • PPTP Idle T 437
- Resolved DNS Names 438
- VPN Log Messages 439
- SSL VPN Logs 443
- Routing Logs 444
- LAN to WAN Logs 445
- LAN to DMZ Logs 445
- DMZ to WAN Logs 445
- WAN to LAN Logs 445
- Other Event Logs 446
- DHCP Logs 447
- Table 143. DHCP logs 448
- Two-Factor Authentication 449
- Figure 282 451
- Figure 283 452
- Figure 284 452
- Notification of Compliance 453
- Numerics 455
Powiązane produkty i podręczniki dla Switche sieciowe Waters Network Systems ProSwitch-Quad Series
(92 strony)
(21 strony)© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.132 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji