LevelOne AMG-2100 User Manual page 164

Windows Internet Explorer: From the Tools menu, click on Internet Options. Select the
Programs tab and click Manage add-ons button to enter the Manage add-ons dialogue box,
where you can see VPNClient.ipsec is enabled.
During the first-time login to AMG-2100/AMG-2101 with Local VPN, Internet Explorer will ask
clients to download an ActiveX component of IPSec VPN. Once this ActiveX component is
downloaded, it will run in parallel with the "Login Success Page" after the page being brought up
successfully. The ActiveX component helps set up individual IPSec VPN tunnels between clients and
AMG-2100/AMG-2101 and check the validity of IPSec VPN tunnels between them. If the connection
is down, the ActiveX component will detect the broken link and decompose the IPSec tunnel. Once
the IPSec VPN tunnel was built, all sent packets will be encrypted. Without connecting to the original
IPSec VPN tunnel, a client has no alternative way to gain network connection beyond this. IPSec
VPN feature supported by AMG-2100/AMG-2101 directly solves possible data security leak problem
between clients and the system via either wireless or wired connections without extra hardware or
client software installed.
• Limitations
The limitation on the client side due to ActiveX and Windows OS includes:
Internet Connection Firewall of Windows XP or Windows XP SP1 is not compatible with IPSec
protocol. It shall be turned off to allow IPSec packets to pass through.
Without patch, ICMP (Ping) and PORT command of FTP can not work in Windows XP SP2.
The forced termination (through CTRL+ALT+DEL, Task Manager) of the Internet Explorer will
stop the running of ActiveX. It causes that IPSec tunnel cannot be cleared properly at client
device. A reboot of client device is needed to clear the IPSec tunnel.
The crash of Windows Internet Explorer may cause the same result.
Internet Connection Firewall
•
In Windows XP and Windows XP SP1, the Internet Connection Firewall is not compatible with IPSec.
Internet Connection Firewall will drop packets from tunneling of IPSec VPN. Please TURN OFF
Internet Connection Firewall feature or upgrade the Windows OS into Windows XP SP2.
AMG-2100 Gigabit Access and AP Management Gateway/
AMG-2101 Gigabit Access and AP Management Gateway Plus
159
User's Manual