Multitech RouteFinder RF850 Manuale utente

RouteFinder®

Internet Security Appliance

RF850

RF860

User Guide

Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 2

User Guide

RouteFinder RF850/860

Document Number: S000400E, Revision E

This publication may not be reproduced, in whole or in part, without prior expressed written permission from

Multi-Tech Systems, Inc. makes no representations or warranties with respect to the contents hereof and

specifically disclaims any implied warranties of merchantability or fitness for any particular purpose.

Furthermore, Multi-Tech Systems, Inc. reserves the right to revise this publication and to make changes from

time to time in the content hereof without obligation of Multi-Tech Systems, Inc. to notify any person or

organization of such revisions or changes.

Record of Revisions

Revision Date Description

B 06/01/06 Added explanation of Load Balancing on the Network Setup screen.

C 04/05/07 Updated for Software 3.32. Changed examples 1 and 2. Added Table of

Commonly Supported Subnet Addresses to the Appendix. Updated the

Technical Support contact list.

D 09/05/07 Added "Description of Syslog Messages" to Appendix A – Disposition of

Events. Updated the warranty statement. Added an RJ-45 Ethernet cable to the

Ship Kit list. Added an FAQ about the Ethernet ports supporting 10/100 Mbps

half-duplex and full duplex lines.

E 04/14/08 Changes for software version 3.34. Added a drawing of the RouteFinder with

mounting brackets.

05/04/09 Added a link to the Multi-Tech Web site for the Warranty statement.

Warranty

For Warranty information, see the Multi-Tech Web site at http://www.multitech.com

Patents

This device is covered by one or more of the following U.S. Patent Numbers: 6,219,708; 5,301,274; 5,309,562;

5,355,365; 5,355,653; 5,452,289; 5,453.986.

The modem is covered by one or more of the following U.S. Patent Numbers: 6,031,867; 6,012,113; 6,009,082;

5,905,794; 5,864,560; 5,815,567; 5,815,503; 5,812,534; 5,809,068; 5,790,532; 5,764,628; 5,764,627;

5,754,589; D394,250; 5,724,356; 5,673,268; 5,673,257; 5,644,594; 5,628,030; 5,619,508; 5,617,423; 5,600,649;

5,592,586; 5,577,041; 5,574,725; D374,222; 5,559,793; 5,546,448; 5,546,395; 5,535,204; 5,500,859; 5,471,470;

5,463,616; 5,453,986; 5,452,289; 5,450,425; D361,764; D355,658; D355,653; D353,598; D353,144; 5,355,365;

5,309,562; 5,301,274 Other Patents Pending

Trademarks

Registered Trademarks of Multi-Tech Systems, Inc. include: Multi-Tech, the Multi-Tech logo, and RouteFinder.

Windows is a registered trademark of Microsoft Corporation in the United States and other countries. Kasperkey

is a trademark of Kasperkey Lab. All products or technologies are the trademarks or registered trademarks of

their respective holders.

Technical Support

Country By Email By Phone

Europe, Middle East, Africa [email protected]k +(44) 118 959 7774

U.S., Canada, all others [email protected]m 800-972-2439 or +763-785-3500

World Headquarters

Multi-Tech Systems, Inc.

2205 Woodale Drive

Mounds View, Minnesota 55112

(763) 785-3500 or (800) 328-9717

Fax 763-785-9874

Internet Address: http://www.multitech.com

Table of Contents

Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 3

Contents

Chapter 1 – Product Description and Specifications ........................................................................................7

Product Description...........................................................................................................................................7

RouteFinder Documentation.............................................................................................................................7

RouteFinder Features.......................................................................................................................................7

Safety Warnings................................................................................................................................................8

Safety Recommendations for Rack Installations..............................................................................................8

Shutdown Caution.............................................................................................................................................8

Ship Kit Contents..............................................................................................................................................9

License Keys.....................................................................................................................................................9

Typical Applications........................................................................................................................................10

Specifications..................................................................................................................................................11

Chapter 2 – Installation and Setup ....................................................................................................................13

System Administrator Planning.......................................................................................................................13

Planning the Network......................................................................................................................................13

Establishing an Address Table.......................................................................................................................13

Front Panel .....................................................................................................................................................14

Cabling Procedure..........................................................................................................................................15

Rackmount Bracket Installation......................................................................................................................15

Setting up a Workstation and Starting the RouteFinder.................................................................................16

Establish TCP/IP Communication...................................................................................................................16

Set a Fixed IP Address..............................................................................................................................16

Obtain a Dynamic IP Address...................................................................................................................16

Open a Web Browser .....................................................................................................................................18

Login...............................................................................................................................................................18

Web Management Software Opens................................................................................................................19

Navigating Through the Software Screens.....................................................................................................19

Screen Buttons..........................................................................................................................................20

Menus and Sub-Menus.............................................................................................................................20

Chapter 3 – Configuration Using Web Management Software.......................................................................21

Initial Configuration Step.................................................................................................................................21

Second Configuration Step – Using the Wizard Setup...................................................................................22

The Wizard Setup Screen – Configuration Example......................................................................................23

Chapter 4 – Configuration Examples................................................................................................................24

Example 3 – Remote Client-to-LAN Configuration Using DNAT and Aliasing...............................................36

Example 4 – Client-to-LAN Configuration Using PPTP Tunneling.................................................................37

Checking the Tunnel.......................................................................................................................................37

Chapter 5 – URL Categorization ........................................................................................................................38

Important Settings...........................................................................................................................................38

Setting Up HTTP Proxy and URL Filtering.....................................................................................................38

Chapter 6 – RouteFinder Software ....................................................................................................................41

Menu Bar ........................................................................................................................................................41

Administration.................................................................................................................................................42

Administration > System Setup.................................................................................................................42

Table of Contents

Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 4

Administration > SSH................................................................................................................................44

Administration > SNTP Client....................................................................................................................45

Administration > Administrative Access....................................................................................................46

Administration > Change Root Password.................................................................................................47

Administration > Site Certificate................................................................................................................48

Administration > License Key....................................................................................................................49

Administration > Intrusion Detection .........................................................................................................50

Administration > Tools...............................................................................................................................52

Administration > System Scheduler..........................................................................................................55

Administration > Factory Defaults.............................................................................................................55

Administration > User Authentication > Local Users.................................................................................56

Administration > User Authentication > RADIUS & SAM..........................................................................57

Administration > Version Information........................................................................................................59

Administration > Restart............................................................................................................................59

Administration > Shutdown .......................................................................................................................59

Networks & Services.......................................................................................................................................60

Networks & Services > Networks..............................................................................................................60

Networks & Services > Services...............................................................................................................62

Networks & Services > Network Groups...................................................................................................64

Networks & Services > Service Groups....................................................................................................65

Proxy...............................................................................................................................................................66

General Information About Proxies...........................................................................................................66

Proxy > HTTP Proxy .................................................................................................................................67

Proxy > HTTP Proxy > Custom Filters......................................................................................................71

Proxy > SMTP Proxy.................................................................................................................................72

Proxy > SMTP Proxy > SMTP SPAM Filtering..........................................................................................75

Proxy > POP3 Proxy.................................................................................................................................78

Proxy > POP3 Proxy > POP3 SPAM Filtering..........................................................................................79

Proxy > POP3 Advanced Configuration....................................................................................................81

Proxy > SOCKS Proxy..............................................................................................................................81

Proxy > DNS Proxy ...................................................................................................................................83

Network Setup ................................................................................................................................................84

About Interfaces........................................................................................................................................84

About the Interface Screen .......................................................................................................................84

Network Setup > Interface.........................................................................................................................85

Network Setup > PPP ...............................................................................................................................88

Change Your Country/Region Code .........................................................................................................89

Network Setup > PPPoE...........................................................................................................................90

Network Setup > DHCP Client..................................................................................................................91

Network Setup > Dynamic DNS (DDNS) ..................................................................................................92

Network Setup > Routes...........................................................................................................................93

Network Setup > Masquerading................................................................................................................94

Network Setup > SNAT.............................................................................................................................95

Network Setup > DNAT.............................................................................................................................96

Network Setup > Load Balancing..............................................................................................................97

Network Setup > High Availability.............................................................................................................99

DHCP Server................................................................................................................................................101

DHCP Server > Subnet Settings.............................................................................................................101

DHCP Server > Fixed Addresses............................................................................................................101

Tracking........................................................................................................................................................102

Tracking > Accounting.............................................................................................................................102

Tracking > Update Services....................................................................................................................103

Tracking > Backup ..................................................................................................................................105

Tracking > Version Control......................................................................................................................107

Table of Contents

Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 5

Packet Filters................................................................................................................................................108

Packet Filters > Packet Filter Rules........................................................................................................108

Packet Filters > ICMP .............................................................................................................................110

Packet Filters > Advanced ......................................................................................................................111

Packet Filters > Enable/Disable Log.......................................................................................................113

Packet Filters > QoS ...............................................................................................................................114

VPN (Virtual Private Networks).....................................................................................................................116

VPN > IPSec ...........................................................................................................................................116

Introduction to Virtual Private Networks..................................................................................................116

VPN > X.509 Certificates ........................................................................................................................121

VPN > IPSec Bridging.............................................................................................................................121

VPN > PPTP............................................................................................................................................123

Wizard Setup – Screen Description..............................................................................................................125

Statistics & Logs ...........................................................................................................................................127

Statistics & Logs > Uptime......................................................................................................................128

Statistics and Logs > Hardware ..............................................................................................................128

Statistics and Logs > Networks...............................................................................................................128

Statistics & Logs > Interfaces..................................................................................................................131

Statistics & Logs > SMTP Proxy .............................................................................................................131

Statistics & Logs > Accounting................................................................................................................132

Statistics & Logs > Self Monitor ..............................................................................................................132

Statistics & Logs > IPSec........................................................................................................................133

Statistics & Logs > PPTP........................................................................................................................133

Statistics & Logs > Packet Filter..............................................................................................................134

Statistics & Logs > Port Scans................................................................................................................135

Statistics & Logs > View Logs.................................................................................................................135

Statistics & Logs > HTTP Access............................................................................................................136

Statistics & Logs > DHCP .......................................................................................................................137

Statistics & Logs > SMTP Virus Quarantines..........................................................................................137

Statistics & Logs > POP3 Virus Quarantines..........................................................................................137

Statistics & Logs > SMTP SPAM Quarantines........................................................................................137

Statistics & Logs > Administrative Authentication Log............................................................................137

Statistics & Logs > QoS ..........................................................................................................................138

Statistics & Logs > DDNS Log ................................................................................................................138

Chapter 7 – User Authentication Methods......................................................................................................139

Proxy Services and Authentication Methods...........................................................................................139

Which Method Should You Choose?......................................................................................................139

Authentication Setup.....................................................................................................................................140

Setting Up RADIUS Authentication.........................................................................................................140

Setting Up a Microsoft IAS RADIUS Server............................................................................................140

Setting Up NT/2000 SAM (SMB) Authentication.....................................................................................141

Chapter 8 – Frequently Asked Questions (FAQs)..........................................................................................142

Chapter 9 – Troubleshooting ...........................................................................................................................147

Appendix A – Disposition of Events for the RouteFinder v3.xx...................................................................149

Appendix B – The RouteFinder Rescue Kernel..............................................................................................156

Appendix C – Table of Commonly Supported Subnet Addresses...............................................................160

Appendix D – Hardware Upgrades & Add-ons and Software Add-ons .......................................................162

Hardware Upgrades and Add-ons................................................................................................................162

Software Add-ons .........................................................................................................................................163

Appendix E – RouteFinder Maintenance ........................................................................................................164

Table of Contents

Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 6

Appendix F – Ordering Accessories...............................................................................................................166

SupplyNet Online Ordering Instructions..................................................................................................166

Appendix G – Regulatory Compliance............................................................................................................167

Appendix H – License Agreements.................................................................................................................169

GNU GENERAL PUBLIC LICENSE........................................................................................................171

Kaspersky Standard End User License Agreement................................................................................173

Appendix I – Waste Electrical and Electronic Equipment Directive (WEEE)..............................................175

Glossary.............................................................................................................................................................176

Index...................................................................................................................................................................187

Chapter 1 – Product Description and Specifications

Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 7

Chapter 1 – Product Description and

Specifications

Product Description

The RouteFinder®all-in-one security appliance is designed to maximize network security without compromising

network performance. It offers a Stateful Packet Inspection firewall for the ultimate in firewall security. The

RouteFinder security appliance uses data encryption, user authentication, and the Internet to securely connect

telecommuters, remote offices, customers, or suppliers to the corporate office while avoiding the cost of private

leased lines or dial-up charges.

RouteFinder Documentation

The Quick Start Guide is intended to provide the experienced system administrator the information needed to

quickly get the RouteFinder up and running.

The User Guide with more detailed information is provided on the RouteFinder CD or the Multi-Tech Systems,

Inc. Web site.

RouteFinder Features

See the RouteFinder Data Sheet for detailed descriptions of the following features:

•Supports IPSec and PPTP VPN tunneling

•Utilizes Triple Data Encryption Standard (3DES) and AES encryption

•Stateful Packet Inspection firewall with packet filter rules, DNAT, SNAT, and IP Masquerade

•Optional anti-virus subscription

•Free spam filtering for unsolicited bulk emails

•QoS (Quality of Service) / Bandwidth allocation

•Dual WAN load balancing and failover

•High availability

•Automatic dial-backup with built-in modem (RF860) or via an external dial-up modem or ISDN terminal

adapter (RF850)

•Automatic system updates to protect your network against the latest threats and DoS attacks

•Application layer security using SMTP, HTTP, DNS, and SOCKS proxies

•Secure local or remote management using HTTP, HTTPS, or SSH

•Reporting function provides valuable troubleshooting information

•Three built-in Ethernet ports (LAN, WAN, WAN2/DMZ)

•Shared Internet access via PPPoE, DHCP or static IP

•Internet access control tools provide client and site filtering

•Traffic monitoring and reporting

•IP address mapping/port forwarding and DMZ port

•RoHS compliant

•Two-year warranty

Chapter 1 – Product Description and Specifications

Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 8

Safety Warnings

Lithium Battery Caution

Danger of explosion if battery is incorrectly replaced. A lithium battery on the RouteFinder PC board provides

backup power for the time-keeping capability. The battery has an estimated life expectancy of ten years. When it

starts to weaken, the date and time may be incorrect. If the battery fails, send the board back to Multi-Tech for

battery replacement.

Ethernet Ports Caution

The Ethernet ports are not designed to be connected to a Public Telecommunication Network.

Software Recovery CD Warning

Do not use the Software Recovery CD for any purpose except for re-installing software onto the RouteFinder

hard drive.

Telecom Warnings for Modem Operation

•Never install telephone wiring during a lightning storm.

•This product must be disconnected from the telephone network interface when servicing.

•This product is to be used with UL and cUL listed computers.

•Never touch uninsulated telephone wires or terminals unless the telephone line has been disconnected

at the network interface.

•Use caution when installing or modifying telephone lines.

•Avoid using a telephone during an electrical storm. There may be a remote risk of electrical shock from

lightning.

•Do not use the telephone to report a gas leak in the vicinity of the leak.

•To reduce the risk of fire, use only No. 26 AWG or larger telecommunications line cord.

•Never install telephone jacks in a wet location unless the jack is specifically designed for wet locations.

Safety Recommendations for Rack Installations

•Ensure proper installation of the RouteFinder in a closed or multi-unit enclosure by following the

recommended installation as defined by the enclosure manufacturer.

•IMPORTANT: Do not place the RouteFinder directly on top of other equipment or place other equipment

directly on top of the RouteFinder.

•If installing the RouteFinder in a closed or multi-unit enclosure, ensure adequate airflow within the rack

so that the maximum recommended ambient temperature is not exceeded.

•Ensure that the RouteFinder is properly connected to earth ground via a grounded power cord. If a

power strip is used, ensure that the power strip provides adequate grounding of the attached apparatus.

•Ensure that the main supply circuit is capable of handling the load of the RouteFinder. Refer to the

power label on the equipment for load requirements.

•Maximum ambient temperature for the RouteFinder is 50 degrees Celsius (120°F).

•This equipment should only be installed by properly qualified service personnel.

•Only connect like circuits. In other words, connect SELV (Secondary Extra Low Voltage) circuits to

SELV circuits and TN (Telecommunications Network) circuits to TN circuits.

Shutdown Caution

Never unplug the RouteFinder power until after you have performed the Shutdown process. If the RouteFinder

is not properly shut down before unplugging the Power, the next startup may take a little longer, or in the worst

case, data could be lost.

Chapter 1 – Product Description and Specifications

Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 9

Ship Kit Contents

The RouteFinder is shipped with the following:

•One Multi-Tech Systems, Inc. RouteFinder

•One external power supply with AC power cord

•RJ-45 Ethernet cable

•One printed Quick Start Guide

•Two rack mounting brackets and four mounting screws.

•One RouteFinder documentation CD which contains documentation, license agreements, Adobe

Acrobat Reader, and license keys.

•A 30-day evaluation copy of VPN client software on CD (not the full working version).

•One RouteFinder Software Recovery CD.

Warning: Do not use the Software Recovery CD for any purpose except for re-installing software onto the

RouteFinder hard drive.

Note: If any of these items are missing, contact Multi-Tech Systems or your dealer or distributor. Inspect the

contents for signs of any shipping damage. If damage is observed, do not power up the RouteFinder; contact

Technical Support at Multi-Tech Systems, Inc. for advice.

License Keys

here to Find the License Key Numbers

icense Key numbers are printed on labels that are placed:

•On the bottom of the RouteFinder chassis

•On the compact flash drive inside the chassis

•On the front cover of the Quick Start Guide.

System License Key

Each RouteFinder ships with a unique individual system License Key, a 20-digit alphanumeric number.

You can view License Key information from the RouteFinder's Web Management software at Administration >

License Key. This screen shows the entered License Key number and indicates whether it is a valid License

Key number.

The License Key number is tied to and tracked with your RouteFinder's serial number. Whenever you require

additional licenses, you must first provide Multi-Tech with your current License Key and serial number

information in order for us to update your RouteFinder. With a valid License Key, you are entitled to use Multi-

Tech’s Update service and support.

Note: The system key is already entered into the VPN setup.

AntiVirus License Key

AntiVirus software with its corresponding License Key is available as a special purchase from Multi-Tech.

Chapter 1 – Product Description and Specifications

Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 10

Typical Applications

Remote User VPN.The client-to-

LAN VPN application replaces

traditional dial-in remote access by

allowing a remote user to connect

to the corporate LAN through a

secure tunnel over the Internet.

The advantage is that a remote

user can make a local call to an

Internet Service Provider, without

sacrificing the company’s security,

as opposed to a long distance call

to the corporate remote access

server.

Branch Office VPN. The LAN-to-

LAN VPN application sends

network traffic over the branch

office Internet connection instead

of relying on dedicated leased line

connections. This can save

thousands of dollars in line costs

and reduce overall hardware and

management expenses.

Firewall Security. As businesses

shift from dial-up or leased line

connections to always-on

broadband Internet connections,

the network becomes more

vulnerable to Internet hackers.

The RouteFinder provides a full-

featured firewall based on

Stateful Packet Inspection

technology and NAT protocol to

provide security from intruders

attempting to access the office

LAN.

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Multitech Router di rete

Multitech

Multitech RouteFinder MTASR2-203 Manuale utente

Multitech

Multitech MultiFRAD FR220 Manuale utente

Multitech

Multitech MultiConnect rCell MTR-H6 Manuale utente

Multitech

Multitech rCell 500 Series Manuale utente

Multitech

Multitech RouteFinder RF825-C-Nx Manuale utente

Multitech

Multitech MultiFrad FR3100 Manuale utente

Multitech

Multitech MultiConnect rCell MTR-H5 Manuale di istruzioni

Multitech

Multitech MultiConnect rCell MTR-H6 Manuale utente

Multitech

Multitech RouteFinder RF825-C-Nx Manuale utente

Multitech

Multitech RouteFinder RF560VPN Manuale utente

Multitech

Multitech RouteFinder RF560VPN Manuale utente

Multitech

Multitech MultiConnect rCell 100 Series Manuale utente

Multitech

Multitech RouteFinder RF600VPN Manuale utente

Multitech

Multitech MultiConnect rCell 100 Series Manuale utente

Multitech

Multitech RouteFinder RF850 Manuale utente

Multitech

Multitech MultiConnect rCell 100 MTR-H5 Manuale utente

Multitech

Multitech MultiFRAD FR221 Manuale utente

Multitech

Multitech MultiConnect rCell 100 Series Istruzioni per l'installazione

Multitech

Multitech MultiConnect rCell 100 Series Manuale utente

Multitech

Multitech MultiFrad FR3060 Manuale utente

Multitech

Multitech RouteFinder MTASR2-201 Manuale utente

Multitech

Multitech RouteFinder RF102S Manuale utente

Multitech

Multitech RouteFinder RF560VPN Manuale utente

Multitech

Multitech RouteFinder RF600VPN Manuale utente

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza