Advance Multimedia Internet Technology WL541M Router with Wireless Card User Manual Pages 101 to 133

Download:
Mirror Download [FCC.gov]
Document ID	386849
Application ID	4dXRolfg/319D2Zf1u7HDw==
Document Description	Users Manual Pages 101 to 133
Short Term Confidential	No
Permanent Confidential	No
Supercede	No
Document Type	User Manual
Display Format	Adobe Acrobat PDF - pdf
Filesize	150.77kB (1884579 bits)
Date Submitted	2004-01-07 00:00:00
Date Available	2004-01-06 00:00:00
Creation Date	2004-01-06 09:12:27
Producing Software	Acrobat Distiller 5.0 (Windows)
Document Lastmod	2004-01-06 09:12:51
Document Title	Users Manual Pages 101 to 133

Charlie 20030401
Appendix B
Win 2000/XP IPSEC Setting guide
Example: Win XP/2000 VPN Router
(Configuration on WIN 2000 is similar to XP)
1. On Win 2000/XP, click [Start] button, select [Run], type secpol.msc in the field,
then click [Run] Goto **Local Security Policy Settings** page
2. Or in Win XP, Click [Control Pannel]
Double-click [Performance and Maintenance]
Double-click [Administrative Tools]
Local Security Policy Settings
Double-click [Local Security Policy]
Right-click [IP Security Policies on Local Computer], and click [Create IP
Security Policy].
Click the [Next] button, enter your policy’s name (Here it is
to_vpn_router). Then, click [Next].
Introduction
Dis-select the [Activate the default response rule] check box, and click
[Next] button.
Click [Finish] button, make sure [Edit] check box is checked.
Build 2 Filter Lists: “xp->router” and “router->xp”
Filter List 1: xp-> router
In the “new policy’s properties” screen, disselect [Use Add Wizard] check
box, and then click [Add] button to create a new rule.
click [Add] button
Enter a name, for example: xp->router
and dis-select [Use Add Wizard] check box. Click [Add] button.
In the Source address field, select [A specific IP Address].
and fill in IP Address: 192.168.1.1
In the Destination address field, select [A specific IP Subnet], fill in
IP Address: 192.168.123.0 and Subnet mask: 255.255.255.0.
If you want to select a protocol for your filter, click [Protocol] page.
Click [OK] button. Then click [OK] button on the “IP Filter List” page.
select [Filter Action], select [Require Security], then
click [Edit] button.
select [Negotiate security], Select [Session key Perfect Forward Secrecy (PFS)]
click [Edit] button.
select [Custom] button
Select [Data integrity and encryption (ESP)]
Configure “Integrity algorithm”: [MD5]
Configure “Encryption algorithm”: [DES]
Configure “Generate a new key every [10000] seconds”
Click [OK] button
select [Authentication Methods] page, click [Add] button.
select [Use this string to protect the key exchange (preshared key)],
and enter your preshared key string, such as
mypresharedkey. Click [OK] button.
Click [OK] button on [Authentication Methods] page.
Select [Tunnel Setting]
configure [The tunnel endpoint is specified by this IP address]: 192.168.1.254
Select [Connection Type]
select [All network connections]
Tunnel 2: router->xp
In the “new policy’s properties” page, dis-select [Use Add Wizard] check
box, and then click [Add] button to create a new rule.
click [Add] button
Enter a name, such as router->xp
and dis-select [Use Add Wizard] check box. Click [Add] button.
In the Source address field, select [A specific IP Subnet]. fill in
IP Address: 192.168.123.0 and Subnet mask: 255.255.255.0.
In the Destination address field, select [A specific IP Address],
and fill in IP Address: 192.168.1.1
If you want to select a protocol for your filter, click [Protocol] page.
Click [OK] button. Then click [OK] button on [IP Filter List] window.
select [Filter Action tab], select [Require Security], then
click [Edit] button.
select [Negotiate security], Select [Session key Perfect Forward Secrecy (PFS)]
click [Edit] button.
select [Custom] button
Select [Data integrity and encryption (ESP)]
Configure “Integrity algorithm”: [MD5]
Configure “Encryption algorithm”: [DES]
Configure “Generate a new key every [10000] seconds”
Click [OK] button
select [Authentication Methods] page, click [Add] button.
select [Use this string to protect the key exchange (preshared key)],
and enter the preshared key string, such as
mypresharedkey. Click [OK] button.
Click [OK] button on [Authentication Methods] page.
Select [Tunnel Setting]
Configure [The tunnel endpoint is specified by this IP address]: 192.168.1.1
Select [Connection Type]
select [All network connections]
Configure IKE properties
Select [General]
Click [Advanced…]
enable “Master key perfect forward security (PFS)”
configure “Authenticate and generate a new key after every [10000] seconds”
click [Methods…]
click [Add] button
Configure “Integrity algorithm”: [SHA1]
Configure “Encryption algorithm”: [3DES]
Configure “Diffie-Helman group”: [Medium (2)]
Settings on VPN router
VPN Router: Wan IP address:192.168.1.254
Lan IP address:192.168.123.254
PC:
192.168.123.123
VPN Settings:
VPN: Enable
Max. number of tunnels: 2
ID: 1
Tunnel Name: 1
Method: IKE
Press “More”
VPN Settings - Tunnel 1 – IKE
Tunnel:1
Local Subnet:192.168.123.0
Local Netmask:255.255.255.0
Remote Subnet:192.168.1.1
Remote Netmask:255.255.255.255
Remote Gateway:192.168.1.1
Preshare Key: mypresharedkey
VPN Settings - Tunnel 1 - Set IKE Proposal
ID: 1
Proposal Name: 1
DH Group: Group2
Encrypt. Algorithm: 3DES
Auth. Algorithm: SHA1
Life Time: 10000
Life Time Unit: Sec.
VPN Settings - Tunnel 1 - Set IPSec Proposal
ID: 1
Proposal Name: proposal1
DH Group: Group2
Encap. Protocol: ESP
Encrypt. Algorithm: DES
Auth. Algorithm:MD5
Life Time: 10000
Life Time Unit: Sec.
User can view VPN connection process in “System Log” page, and correct their
settings. Phase1 is related to IKE settings, Phase2 is related to IPSEC settings.
Appendix C
Console Mode (optional)
When you forget the system password or the IP address of this product, you need enter console mode to
reset them.
Before invoking the console program, be sure to find a null modem cable and use it to connect from
this product’s COM port to your computer’s COM port. Then, execute a terminal program, such as the
Hyper Terminal of MS Windows 95. The connection parameters should be set to 19200 8-N-1. And,
reboot this product. When the M1 indicator starts flashing regularly, you can press the “Enter” key of
the keyboard several times, there should be some messages and console prompt ">" appeared in the
terminal.
In the console mode, you may reset the IP address and the system password of this product. Please
remember to execute the SR command to save the changes you have made. For example,
IP 192.168.123.254
PW admin
SR

---

Source Exif Data:

File Type                       : PDF
File Type Extension             : pdf
MIME Type                       : application/pdf
PDF Version                     : 1.4
Linearized                      : No
Modify Date                     : 2004:01:06 09:12:51+01:00
Create Date                     : 2004:01:06 09:12:27+01:00
Producer                        : Acrobat Distiller 5.0 (Windows)
Page Count                      : 33
Mod Date                        : 2004:01:06 09:12:51+01:00
Creation Date                   : 2004:01:06 09:12:27+01:00
Metadata Date                   : 2004:01:06 09:12:51+01:00
Has XFA                         : No

EXIF Metadata provided by EXIF.tools