Planet Networking & Communication CS-2000 Manuale utente

Overview

Thank you for purchases CS-2000, the UTM Content Security Gateway. This UTM Content

Security Gateway provides the multiple functions in one unit including VPN, Firewall,

Content Filtering, IDP, Email Anti-Virus and Anti-Spam, etc. Please refer to the following

sections for quick setup of your security gateway. And please also refer to the user’s

manual for more details.

This quick installation guide includes the following sections:

1. Package Content

2. Hardware Description: Hardware outlook and panel description

3. DMZ operation mode

4. Quick setup: Quick setup through Web browser

1. Package Content

 CS-2000 x 1

 User’s Manual CD-ROM x 1

 Quick Installation Guide x 1

 Power cord x 1

 Console cable x 1

 Cat5 cable x 3

 Cat5 cross cable x 1

 Rack-mount ear x 2

 Mat x 4

If any of the above items are missing or damaged, please contact your local dealer for

support.

2. Hardware Description

This section shows the front panel out look and its LED indications.

2.1 Front Panel

LED / Port Description

PWR Power is supplied to this device.

HD Blinks to indicate this devise is being to access the Hard Disk.

Console

Connect this serial port by console cable which setting is 9600, 8, N,

1 and none flow control. You can check the interface setting and reset

to factory setting.

WAN1, WAN2,

LAN, DMZ

Orange

Steady on indicates the port is connected to other

network device.

Blink to indicates there is traffic on the port

Green Steady on indicates the port is connected at

100Mbps speed

3. DMZ Operation Mode

This section describes the three different operation mode of CS-2000. The CS-2000 DMZ

port supports three operation modes, Disable, NAT and Transparent.

 Disable mode, the DMZ port is not active.

 Transparent mode, the CS-2000 works as proxy with forward DMZ packet to

WAN and forward WAN packet to DMZ. The DMZ and WAN side IP addresses

are in the same subnet.

 NAT mode, DMZ side user will share one public IP address of WAN port to

make Internet connection.

Please nd the following two pictures for example.

3.1 Transparent Mode Connection Example

LAN DMZ

CS-2000

DMZ

Transparent Mode to

WAN1

LAN PC1

192.168.1.2

LAN PC1

192.168.1.3

DMZ Server1

61.11.11.12

DMZ Server2

61.11.11.13

LAN

192.168.1.1

WAN1

61.11.11.11

WAN2

61.22.22.22

The IP addresses of WAN and DMZ are on the same subnet. This application is suitable if

you have a subnet of IP addresses from your ISP and you do not want to change any IP

conguration on the subnet.

3.2 NAT Mode Connecting Example

LAN DMZ

CS-2000

DMZ

NAT Mode

10.0.0.1

LAN PC1

192.168.1.2

LAN PC1

192.168.1.3

DMZ Server1

10.0.0.2

DMZ Server2

10.0.0.3

LAN

192.168.1.1

WAN1

61.11.11.11

WAN2

61.22.22.22

DMZ and WAN IP addresses are on the different subnet (as shown in the gure above).

This provides higher security level than transparent mode.

4. Quick Setup

STEP 1:

Connect both the Administrator’s PC and the LAN port of the Content Security Gateway

to a hub or switch. Make sure there is a link light on the hub/switch for both connections.

The CS-2000 has an embedded web server used for management and conguration. Use

a web browser to display the congurations of the Content Security Gateway (such as

Internet Explorer 4 (or above) or Netscape 4.0 (or above) with full java script support).

The default IP address of the Content Security Gateway is 192.168.1.1 with a subnet

mask of 255.255.255.0. Therefore, the IP address of the Administrator PC must be in

the range between 192.168.1.2– 192.168.1.254.

By default, the CS-2000 is shipped with its DHCP Server function enabled. This means the

client computers on the LAN network including the Administrator PC can set their TCP/IP

settings to automatically obtain an IP address from the Content Security Gateway.

The following table is a list of private IP addresses. These addresses may not be used as

a WAN IP address.

10.0.0.0 ~ 10.255.255.255

172.16.0.0 ~ 172.31.255.255

192.168.0.0 ~ 192.168.255.255

STEP 2:

Once the Administrator’s PC has an IP address on the same network as the Content

Security Gateway, open up an Internet web browser and type in http://192.168.1.1

in the address bar.

STEP 3:

A pop-up screen will appear and prompt for a username and password. A username and

password is required to connect to the Content Security Gateway. Enter the default login

username and password of Administrator (Figure-1).

 Username:admin

 Password:admin

Click OK to login the CS-2000.

Figure-1 Login Web UI

STEP 4:

After entering to the main system of CS-2000, select the Interface tab on the left menu.

Click on WAN from the sub-function list, and a sub-function list will be displayed. (Figure-

Figure-2 WAN 1/2 Interface

STEP 5:

Select the WAN 1 / 2 port that you want to set. Click Modify button to congure WAN port.

Enter the IP address provided from ISP. (Figure-3)

Figure-3 WAN Port IP Address and Netmask Setting

STEP 6:

Click on System function and click on Date/Time function in Congure.

Enter the following setting in Date/Time setting: (Figure-4)

 Select EnablesynchronizewithanInternettimeServer.

Set offset hours from GMT: +8 for example

Enter the ServerIP/Name: 140.100.1.10 for example

Enter Update system clock time: 0 for example

 Click OK.

Figure-4 Date/Time Setting

STEP 7:

Click on the Policy tab from the main function menu, and then click on Outgoing (LAN

to WAN) from the sub-function list.

STEP 8:

Click on NewEntry button.

STEP 9:

When the New Entry option appears, enter the following conguration: (Figure-5)

 SourceAddress – select “Inside_Any”

 Destination Address – select “Outside_Any”

 Service - select “ANY”

 Action - select “Permitall”

Click on OK to apply the changes.

Figure-5 Add New Policy Setting

Indice

Altri manuali Planet Networking & Communication Portale