Planet Networking & Communication IVR-100 User Manual

Planet Networking & Communication IVR-100 User Manual

Industrial 5-port 10/100/1000t vpn security gateway

Advertisement

Quick Links

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
Industrial 5-Port 10/100/1000T VPN
Security Gateway
IVR-100
- 1 -

Advertisement

Table of Contents
loading

Summary of Contents for Planet Networking & Communication IVR-100

  • Page 1 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 - 1 -...
  • Page 2 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Copyright Copyright (C) 2020 PLANET Technology Corp. All rights reserved. The products and programs described in this User’s Manual are licensed products of PLANET Technology, This User’s Manual contains proprietary information protected by copyright, and this User’s Manual and all accompanying hardware, software, and documentation are copyrighted.
  • Page 3 In most, if not all cases, these designations are claimed as trademarks or registered trademarks by their respective companies. Revision User’s Manual of PLANET Industrial 5-Port 10/100/1000T VPN Security Gateway Model: IVR-100 Rev.: 1.0 (December, 2020) Part No. EM-IVR-100_v1.0 - 3 -...
  • Page 4: Table Of Contents

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Table of Contents Chapter 1. Product Introduction ..................... 6 Package Contents ...................... 6 Overview ........................6 Topology ........................11 Features ........................12 Product Specifications ..................... 14 Chapter 2. Hardware Introduction ..................17 Physical Descriptions ....................17 2.1.1...
  • Page 5 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Network ........................49 4.5.1 WAN ....................... 50 4.5.2 WAN Advanced ..................51 4.5.3 LAN Setup....................52 4.5.4 Routing ....................53 4.5.5 WAN IPv6 Setting .................. 54 4.5.6 DHCP ..................... 55 4.5.7 DDNS ..................... 57 4.5.8...
  • Page 6: Chapter 1. Product Introduction

    Outbound Load Balancing features can improve the network efficiency while the web-based interface provides friendly and consistent user experience. For the harsh environment, the IVR-100 can not only operate stably under temperature range from -40 to 75 degrees C, but also is equipped with a compact IP30 metal case that allows either DIN-rail or wall mounting for efficient use of cabinet space.
  • Page 7 IPSec VPN function with DES/3DES/AES encryption and MD5/SHA-1/SHA-256/SHA-384/SHA-512 authentication, and GRE, SSL, PPTP and L2TP server mechanism. The full VPN capability in the IVR-100 makes the connection solidly secure, more flexible, and more capable. The IVR-100 supports many popular security features including Content Filtering to block specific URL, MAC/IP filtering, outbound load balancing and more.
  • Page 8 Users’ network can be easily managed by just typing the URL of the websites like Facebook, YouTube and Yahoo. The IVR-100 can connect dual WANs with up to two different ISPs. It creates a stable and qualified VPN connection for many important applications such as VoIP, video conferencing and data transmission.
  • Page 9 IVR-100 Convenient and Reliable Power System To facilitate transportation and industrial-level applications, the IVR-100 provides an integrated power solution with a wide range of voltages (9~48V DC) for worldwide operability. It also provides dual-redundant, reversible polarity 9~48V DC power supply inputs for high availability applications.
  • Page 10 Today, the VPN demand expands from commercial applications to many critical networks in the harsh environment. The IVR-100 will be one of the ideal solutions that provide a high level of immunity against electromagnetic interference and heavy electrical surges typical of environments found on plant floors or in curb-side traffic control cabinets.
  • Page 11: Topology

    IVR-100 provides secured data communication for branches, vendors, and mobile workers with a flexible way to connect back to the headquarters. The IVR-100 connects dual WANs with up to two different ISPs. It creates a stable and qualified VPN connection for many important applications such as VoIP, video conferencing and data transmission.
  • Page 12: Features

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 1.4 Features  Hardware  5 10/100/1000BASE-T RJ45 ports  1 undefined Ethernet port (LAN/WAN)  Dual-WAN function  1 USB 3.0 port for system configuration backup and firmware upgrade  Reset button ...
  • Page 13 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100  Static IP/DHCP client for WAN  Protocols: TCP/IP, UDP, ARP, IPv4, IPv6  Port forwarding    VLAN  IGMP Proxy  SNMP(v1/v2C/v3)  DHCP server/NTP client  MAC address clone ...
  • Page 14: Product Specifications

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 1.5 Product Specifications Product VPN security gateway Model IVR-100 Hardware 5 10/100/1000BASE-T RJ45 Ethernet ports including  3 LAN ports Ethernet  1WAN port  1 LAN/WAN port USB Port 1 USB 3.0 port for system configuration backup and firmware upgrade <...
  • Page 15 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 IPv4, IPv6, TCP/IP, UDP, ARP, HTTP, HTTPS, NTP, DNS, PLANET Protocol DDNS, PLANET Easy DDNS, DHCP, SNMP(v1/v2C/v3), PPPoE, SNMP, QoS, VLAN, IGMP Proxy MAC filtering Content Filtering IP filtering Web filtering System operation log...
  • Page 16 Relative Humidity: 5 ~ 95% (non-condensing) Temperature: -40 ~ 85 degrees C Storage Relative Humidity: 5 ~ 95% (non-condensing) Standard Accessories IVR-100 x 1 Quick Installation Guide x 1 Packet Contents Wall-mount Kit x 1 Dust Cap x 5 - 16 -...
  • Page 17: Chapter 2. Hardware Introduction

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Chapter 2. Hardware Introduction 2.1 Physical Descriptions 2.1.1 Front View Green Lights up when the power is on. Lights to indicate that power input Fault has failed. “Steady on” to indicate the port is...
  • Page 18: Top View

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 2.1.2 Top View The upper panel of the Industrial Gateway consists of one terminal block connector within two DC power inputs. 2.1.3 Wiring the Power Inputs The 6-contact terminal block connector on the top panel of Industrial Gateway is used for two DC redundant power inputs.
  • Page 19: Wiring The Fault Alarm Contact

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 To avoid damage, please use the Industrial Gateway under its specification. 2. Tighten the wire-clamp screws for preventing the wires from loosening. Power 1 Fault Power 2 The wire gauge for the terminal block should be in the range from 12 to 24 AWG.
  • Page 20 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 The wire gauge for the terminal block should be in the range between 12 and 24 AWG. Alarm relay circuit accepts up to 24V, max. 1A currents. - 20 -...
  • Page 21: Dimensions

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 2.1.5 Dimensions - 21 -...
  • Page 22: Hardware Installation

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 2.2 Hardware Installation This section describes how to install the Industrial Gateway. There are three methods to install the Industrial Gateway -- DIN-rail mounting, wall mounting and side wall mounting. Basic knowledge of networking is assumed.
  • Page 23: Wall Mount Plate Mounting

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Step 3: Connect your device to hub / switch. A. Connect one end of a standard network cable to the LAN port (port 1) of the device. B. Connect the other end of the cable to the hub / switch.
  • Page 24 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Step 3: Use the hook holes at the corners of the wall mount plate to hang the Industrial Gateway on the wall. Step 4: To remove the wall mount plate, reverse the steps above.
  • Page 25: Side Wall Mount Plate Mounting

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 2.2.4 Side Wall Mount Plate Mounting To install the Industrial Gateway on the wall, please follow the instructions below. Step 1: Remove the DIN-rail from the Industrial Gateway. Use the screwdriver to loosen the screws to remove the DIN-rail.
  • Page 26: Chapter 3. Preparation

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Chapter 3. Preparation Before getting into the device’s web UI, user has to check the network setting and configure PC’s IP address. 3.1 Requirements User is able to confirm the following items before configuration: 1.
  • Page 27 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 2. Click "Change adapter settings". 3. Right-click on the Local Area Connection and select Properties. - 27 -...
  • Page 28 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4. Select Internet Protocol Version 4 (TCP/IPv4) and click Properties or directly double-click on Internet Protocol Version 4 (TCP/IPv4). - 28 -...
  • Page 29 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 5. Select "Use the following IP address" and "Obtain DNS server address automatically", and then click the “OK” button. - 29 -...
  • Page 30: Windows 10

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 3.2.2 Windows 10 If you are using Windows 10, please refer to the following: 1. In the search box on the taskbar, type “View network connections”, and then select View network connections at the top of the list.
  • Page 31 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 2. Right-click on the Local Area Connection and select Properties. 3. Select Internet Protocol Version 4 (TCP/IPv4) and click Properties or directly double-click on Internet Protocol Version 4 (TCP/IPv4). - 31 -...
  • Page 32 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4. Select "Use the following IP address" and "Obtain DNS server address automatically", and then click the “OK” button. - 32 -...
  • Page 33: Planet Smart Discovery Utility

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 3.3 Planet Smart Discovery Utility For easily listing the Gateway in your Ethernet environment, the search tool -- Planet Smart Discovery Utility -- is an ideal solution. The following installation instructions are to guide you to running the Planet Smart Discovery Utility.
  • Page 34 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 1. This utility shows all necessary information from the devices, such as MAC address, device name, firmware version, and device IP subnet address. It can also assign new password, IP subnet address and description to the devices.
  • Page 35: Chapter 4. Web-Based Management

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Chapter 4. Web-based Management This chapter provides setup details of the device’s Web-based Interface. 4.1 Introduction The device can be configured with your Web browser. Before configuring, please make sure your PC is under the same IP segment with the device.
  • Page 36: Main Web Page

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.3 Main Web Page After a successful login, the main web page appears. The web main page displays the web panel, main menu, function menu, and the main information in the center. Figure 4-1: Main Web Page ■...
  • Page 37 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 ■ Main Menu The main menu displays the product name, function menu, and main information in the center. Via the Web management, the administrator can set up the device by selecting the functions those listed in the...
  • Page 38: System

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.4 System Use the System menu items to display and configure basic administrative details of the Gateway. The System menu shown in Figure 4-5 provides the following features to configure and monitor system.
  • Page 39: Setup Wizard

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Setup 4.4.1 Wizard The Wizard will guide the user to configuring the Gateway easily and quickly. There are different procedures in different operation modes. According to the operation mode you switch to, please follow...
  • Page 40 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 By default, the start IP address is 192.168.1.100. Start IP Address Please do not set it to the same IP address of the Gateway. By default, the maximum DHCP users are 101, which mean the Gateway will provide DHCP client with IP address from 192.168.1.100...
  • Page 41 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Figure 4-9: Setup Wizard – WAN 2 Configurations Mode 1 -- Static IP Select Static IP Address if all the Internet port’s IP information is provided to you by your ISP. You will need to enter the IP Address, Netmask, Default Gateway and DNS Server provided to you by your ISP.
  • Page 42 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Press this button for the next step. Next Press this button for the previous step. Previous Press this button to undo any changes made locally and revert Cancel to previously saved values. Mode 2 -- DHCP Client Select DHCP Client to obtain IP Address information automatically from your ISP.
  • Page 43 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description The SPI Firewall prevents attack and improper access to network resources. SPI Firewall The default configuration is enabled. SYN Flood is a popular attack way. DoS and DDoS are TCP protocols. Hackers like using this method to make a fake connection Block SYN Flood that involves the CPU, memory, and so on.
  • Page 44 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Figure 4-13: Setup Wizard –Setup Completed Object Description Finish Press this button to save and apply changes. Previous Press this button for the previous step. - 44 -...
  • Page 45: Dashboard

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.4.2 Dashboard The dashboard provides an overview of system information including connection, port, and system status as shown in Figure 4-14. Figure 4-14: Dashboard WAN/LAN Connection Status Object Description The status means WAN is connected to Internet and LAN is connected.
  • Page 46: Status

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description Ethernet port is in use. Ethernet port is not in use. USB port is in use. USB port is not in use. System Information Object Description Display the CPU loading Memory Display the memory usage 4.4.3 Status...
  • Page 47: Statistics

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.4.4 Statistics This page displays the number of packets that pass through the Gateway on the WAN and LAN. The statistics are shown in Figure 4-16. Figure 4-16: Statistics 4.4.5 Connection Status The page will show the DHCP Table and ARP Table. .
  • Page 48: Snmp

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.4.6 SNMP This page provides SNMP setting of the Gateway as shown in Figure 4-18. Figure 4-18: SNMP Object Description Enable SNMP Disable or enable the SNMP function. The default configuration is enabled.
  • Page 49: Network

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.5 Network The Network function provides WAN, LAN and network configuration of the Gateway as shown in Figure 4-19. Figure 4-19: Network Menu Object Description Allows setting WAN interface. WAN Setup WAN Advanced Allows setting WAN Advanced settings.
  • Page 50: Wan

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.5.1 WAN This page is used to configure the parameters for Internet network which connects to the WAN port of the Gateway as shown in Figure 4-20. Here you may select the access method by clicking the item value of WAN access type.
  • Page 51: Wan Advanced

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description Netmask Enter the Subnet Mask assigned by your ISP. Gateway Enter the Gateway assigned by your ISP. DNS Server The DNS server information will be supplied by your ISP. Select DHCP Client to obtain IP Address information DHCP automatically from your ISP.
  • Page 52: Lan Setup

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description Load Balance Weight allows you to set a relative weight (from 1 - 10) Load Balance Weight for each WAN port. External Connection Enable to detect the status of WAN connection.
  • Page 53: Routing

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.5.4 Routing Please refer to the following sections for the details as shown in Figures 4-23 and Figure 4-23: Routing table Figure 4-24: Routing setup Routing tables contain a list of IP addresses. Each IP address identifies a remote router (or other network gateway) that the local router is configured to recognize.
  • Page 54: Wan Ipv6 Setting

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description The gateway is the router or host’s IP address to which packet was Gateway sent. It must be the same network segment with the WAN or LAN port. Select the interface that the IP packet must use to transmit out of the Interface router when this route is used.
  • Page 55: Dhcp

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.5.6 DHCP The DHCP service allows you to control the IP address configuration of all your network devices. When a client (host or other device such as networked printer, etc.) joins your network it will automatically get a valid IP address from a range of addresses and other settings from the DHCP service.
  • Page 56 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description Set the time for using one assigned IP. After the lease time, the Lease Time DHCP client will need to get new IP addresses from the Gateway. Default is 1440 minutes.
  • Page 57: Ddns

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.5.7 DDNS The Gateway offers the DDNS (Dynamic Domain Name System) feature, which allows the hosting of a website, FTP server, or e-mail server with a fixed domain name (named by yourself) and a dynamic IP address, and then your friends can connect to your server by entering your domain name no matter what your IP address is.
  • Page 58 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description By default, the DDNS service is disabled. DDNS Service If user needs to enable the function, please set it as enable. User is able to select the interface for DDNS service.
  • Page 59: Mac Address Clone

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.5.8 MAC Address Clone Clone or change the MAC address of the WAN interface. The setup is shown in Figure 4-28. Figure 4-28: MAC Address Clone Object Description Clone WAN MAC Set the function as enable or disable.
  • Page 60: Security

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.6 Security The Security menu provides Firewall, Access Filtering and other functions as shown in Figure 4-29. Please refer to the following sections for the details. Figure 4-29: Security menu Object Description Firewall Allows setting DoS (Denial of Service) protection as enable.
  • Page 61: Firewall

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.6.1 Firewall A "Denial-of-Service" (DoS) attack is characterized by an explicit attempt by hackers to prevent legitimate users of a service from using that service. The Gateway can prevent specific DoS attacks as...
  • Page 62 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 If the function is enabled, when the number of the current UPD-FLOOD packets is beyond the set value, the Gateway will start Block UDP Flood the blocking function immediately. The default configuration is disabled.
  • Page 63: Mac Filtering

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.6.2 MAC Filtering Entries in this table are used to restrict certain types of data packets from your local network or Internet through the Gateway. Use of such filters can be helpful in securing or restricting your local network as...
  • Page 64: Ip Filtering

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.6.3 IP Filtering IP Filtering is used to deny LAN users from accessing the public IP address on internet as shown in Figure 4-32. To begin blocking access to an IP address, enable IP Filtering and enter the IP address of the web site you wish to block.
  • Page 65: Web Filtering

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description Anywhere (of destination Check the box if you want to control all web sites, meaning the LAN IP Address) user can’t visit any web site. Input the port of destination IP Address which you want to block.
  • Page 66: Port Forwarding

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.6.5 Port Forwarding Entries in this table allow you to automatically redirect common network services to a specific machine behind the NAT firewall as shown in Figure 4-36. These settings are only necessary if you wish to host some sort of server like a web server or mail server on the private local network behind your Gateway's NAT firewall.
  • Page 67: Dmz

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description Virtual Server IP Address Enter the local IP address. Enter local ports you want to control. For TCP and UDP Services, enter the beginning of the range of port numbers used by the Internal Service Port service.
  • Page 68: Vpn

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.7 VPN To obtain a private and secure network link, the Gateway is capable of establishing VPN connections. When used in combination with remote client authentication, it links the business’ remote sites and users, conveniently providing the enterprise with an encrypted network communication method.
  • Page 69: Ipsec

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.7.1 IPSec IPSec (IP Security) is a generic standardized VPN solution. IPSec must be implemented in the IP stack which is part of the kernel. Since IPSec is a standardized protocol it is compatible to most vendors that implement IPSec.
  • Page 70 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Figure 4-41: IPSec Tunnel Object Description IPSec Tunnel Enable Check the box to enable the function. Tunnel Name Enter any words for recognition. This is only available for host-to-host connections and specifies to which interface the host is connecting.
  • Page 71 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Input the IP address of the remote host. For instance, "210.66.1.10”. Remote IP Address Remote Network The remote subnet in CIDR notation. For instance, "210.66.1.0”. Remote Netmask The netmask of the remote host.
  • Page 72 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 by using it three times. It can achieve an algorithm up to 168 bits. SHA1: The SHA1 is a revision of SHA. It has improved the shortcomings of SHA. By producing summary hash values, it can achieve an algorithm up to 160 bits.
  • Page 73 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Set the Active as enable. Input the Tunnel Name and select Interface. Input the Local Network and Netmask as the Gateway’s LAN IP address. Input the Remote Host/IP Address as another Gateway’s public WAN IP address.
  • Page 74: Gre

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.7.2 GRE This section assists you in setting the GRE Tunnel as shown in Figure 4-42. Figure 4-42: GRE Object Description GRE Tunnel Set the function as enable or disable. Add GRE Tunnel Go to the Add GRE Tunnel page to add a new tunnel.
  • Page 75 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Figure 4-43: GRE Tunnel Object Description Check the box to enable the function. Active Enter any words for recognition. Tunnel Name This is only available for host-to-host connections and specifies to which interface the host is connecting.
  • Page 76: Pptp Server

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.7.3 PPTP Server Use the IP address and the scope option needs to match the far end of the PPTP server; its goal is to use the PPTP channel technology, and establish Site-to-Site VPN where the channel can have equally good results from different methods with IPSec.
  • Page 77 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Set the authentication as enable or disable. MSCHAP v2 When the PPTP client connects to the PPTP server, it will assign the DNS server IP address to client. When the PPTP client connects to the PPTP server, it will assign the WINS WINS server IP address to client.
  • Page 78 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Set the PPTP Server as enable. Input the Server IP Address as the Gateway’s another subnet address. Input Clients IP Address Start and Clients IP Address End. Create an account. Enter Username and Password.
  • Page 79 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Select Connection Type as PPTP. Input the Server as the VPN Server Gateway’s public WAN IP address. Input the same Username and Password as the one set on the VPN Server Gateway. Go to the System -> Status page to check the Connection Type and IP Address. Make sure the VPN client Gateway gets the VPN Server’s subnet IP address.
  • Page 80: L2Tp Server

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.7.4 L2TP Server This section assists you in setting the L2TP Server as shown in Figure 4-45. Figure 4-45: L2TP Server Object Description L2TP Server Set the function as enable or disable. Input the IP address of the L2TP Server. For instance, "192.168.50.1”.
  • Page 81 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description Preshare Key Enter a pass phrase. User and Password Create the username and password for the VPN client. Main. Connection Type Aggressive. It provides the way to create the SA between two PCs. The SA can access the encoding between two PCs, and the IT administrator can assign to which key size or Preshare Key and algorithm to use.
  • Page 82 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Please refer the steps to configure the VPN settings of the VPN Gateway: 1. Connect the VPN Gateway to internet by the Wizard. 2. Go to the System -> Status page to check the WAN IP address. Make sure the VPN Gateway gets public IP address successfully.
  • Page 83 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 The VPN settings of VPN Gateway are done. 4. Please configure the VPN settings of your mobile phone. Here we use iPhone as the example: please go to the Settings -> VPN page, click the “Add VPN Configuration…”.
  • Page 84 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 The all information should be the same as VPN Gateway. For example, the Type should be L2TP, the Server should be the WAN IP of VPN Gateway, the account should be the L2TP User of VPN Gateway, the Password should be the L2TP Password of VPN Gateway, and the Secret should be the L2TP Preshare Key of VPN Gateway.
  • Page 85: Ssl Vpn

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.7.5 SSL VPN This section assists you in setting the SSL Server as shown in Figure 4-46. Figure 4-46: SSL Server Object Description Set the function as enable or disable. SSL VPN Server...
  • Page 86: Vpn Connection

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Set a port for the SSL Service. Default port is 1194. Port Set the protocol as TCP or UDP. Tunnel Protocol Virtual Network Set the Virtual Network Device as TUN or TAP. Device User is able to select the interface for SSL service using.
  • Page 87: Maintenance

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 4.8 Maintenance The Maintenance menu provides the following features for managing the system as Figure 4-48 shown below: Figure 4-48: Maintenance Menu Object Description Allows changing the login username and password. Administrator Allows setting Date & Time function.
  • Page 88: Date And Time

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Figure 4-48: Administrator Object Description Username Input a new username. Password Input a new password. Confirm Password Input password again. 4.8.2 Date and Time This section assists you in setting the system time of the Gateway. You are able to either select to set...
  • Page 89: Saving/Restoring Configuration

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Once this function is enabled, Gateway will automatically update current NTP Client Update time from NTP server. NTP Server User may use the default NTP sever or input NTP server manually. 4.8.3 Saving/Restoring Configuration This page shows the status of the configuration.
  • Page 90: Upgrading Firmware

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description Backup Settings to Press the button to save setting file to USB storage. USB Storage Load Settings from Press the button to upload setting file from USB storage. USB Storage Before removing the USB storage from the Gateway, please press the Unmount button first.
  • Page 91: Diagnostics

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Figure 4-52: Reboot/Reset Object Description Reboot Press the button to reboot system. Reset Press the button to restore all settings to factory default settings. I'd like to keep the network Check the box and then press the button profiles.
  • Page 92 Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Object Description Interface Select an interface of the Gateway. Target Host The destination IP Address or domain. Set the number of packets that will be transmitted; the Number of Packets maximum is 100.
  • Page 93: Appendix A: Ddns Application

    Industrial 5-Port 10/100/1000T VPN Security Gateway IVR-100 Appendix A: DDNS Application Configuring PLANET DDNS steps: Step 1: Visit DDNS provider’s web site and register an account if you do not have one yet. For example, register an account at http://planetddns.com Step 2: Enable DDNS option through accessing web page of the device.

Table of Contents