AirLive IP-2000VPN User manual

6. Specifications
1 AirLive WLA-9000AP User’s Manual
IP-2000VPN
Internet VPN Route
r
User’s Manual

Declaration of Conformity
We, Manufacturer/Importer
Declare that the product
Internet VPN Router
is in conformity with
In accordance with 89/336 EEC-EMC Directive and 999/5 EC-R & TTE Directive
Clause Description
Limits and methods of measurement of radio disturbance
characteristics of information technology equipment
Disturbances in supply systems caused by household appliances
and similar electrical equipment "Harmonics"
Disturbances in supply systems caused by household appliances
and similar electrical equipment "Voltage fluctuations"
Information Technology equipment-Immunity characteristics-Limits
And methods of measurement
Manufacturer/Importer
Position/ Title : Vice President
OvisLin Corp.
5F., NO.6, Lane 130, Min-Chuan Rd.,
Hsin-Tien City, Taipei County, Taiwan
AirLive IP-2000VPN
■ EN 55022:1998
■ EN 61000-3-2:2000
■ EN 61000-3-3:1995/
A1:2001
■ EN 55024:1998
■ CE mar ing
Signature：
Name ：
Albert Yeh
Date： 2008/1/1
(Stamp)

AirLive IP-2000VPN CE Declaration Statement
Country Declaration Country Declaration
cs
Česky [Czech]
OvisLink Corp. tímto prohlašuje, že tento irLive
IP-2000VPN je ve shodě se základními
požadavky a dalšími příslušnými ustanoveními
směrnice 1999/5/ES.
lt
Lietuvių
[Lithuanian]
Šiuo OvisLink Corp. deklaruoja, kad šis irLive IP-
2000VPN atitinka esminius reikalavimus ir kitas
1999/5/EB Direktyvos nuostatas.
da
Dansk [Danish]
Undertegnede OvisLink Corp. erklærer herved,
at følgende udstyr irLive IP-2000VPN
overholder de væsentlige krav og øvrige
relevante krav i direktiv 1999/5/EF.
nl
Nederlands [Dutch
Hierbij verklaart OvisLink Corp. dat het toestel irLive
IP-2000VPN in overeenstemming is met de
essentiële eisen en de andere relevante bepalingen
van richtlijn 1999/5/EG.
de
Deutsch
[German]
Hiermit erklärt OvisLink Corp., dass sich das
Gerät irLive IP-2000VPN in Übereinstimmung
mit den grundlegenden nforderungen und den
übrigen einschlägigen Bestimmungen der
Richtlinie 1999/5/EG befindet.
mt
Malti [Maltese]
Hawnhekk, OvisLink Corp, jiddikjara li dan irLive IP-
2000VPN jikkonforma mal-ħtiġijiet essenzjali u ma
provvedimenti oħrajn relevanti li hemm fid-Dirrettiva
1999/5/EC.
et
Eesti [Estonian]
Käesolevaga kinnitab OvisLink Corp. seadme
irLive IP-2000VPN vastavust direktiivi
1999/5/EÜ põhinõuetele ja nimetatud direktiivist
tulenevatele teistele asjakohastele sätetele.
hu
Magyar
[Hungarian]
z OvisLink Corporation kijelenti, hogy az irLive IP-
2000VPN megfelel az 1999/05/CE irányelv alapvető
követelményeinek és egyéb vonatkozó
rendelkezéseinek.
en
English
Hereby, OvisLink Corp., declares that this irLive
IP-2000VPN is in compliance with the essential
requirements and other relevant provisions of
Directive 1999/5/EC.
pl
Polski [Polish]
Niniejszym OvisLink Corp oświadcza, że irLive IP-
2000VPN jest zgodny z zasadniczymi wymogami
oraz pozostałymi stosownymi postanowieniami
Dyrektywy 1999/5/EC.
es
Español
[Spanish]
Por medio de la presente OvisLink Corp. declara
que el irLive IP-2000VPN cumple con los
requisitos esenciales y cualesquiera otras
disposiciones aplicables o exigibles de la
Directiva 1999/5/CE.
pt
Português
[Portuguese]
OvisLink Corp declara que este irLive IP-2000VPN
está conforme com os requisitos essenciais e outras
disposições da Directiva 1999/5/CE.
el
Ελληνική [Greek]
ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ OvisLink Corp. ΔΗΛΩΝΕΙ
ΟΤΙ irLive IP-2000VPN ΣΥΜΜΟΡΦΩΝΕΤΑΙ
ΠΡΟΣ ΤΙΣ ΟΥΣΙΩΔΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ
ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ ΟΔΗΓΙΑΣ
1999/5/ΕΚ.
sl
Slovensko
[Slovenian]
OvisLink Corp izjavlja, da je ta irLive IP-2000VPN v
skladu z bistvenimi zahtevami in ostalimi relevantnimi
določili direktive 1999/5/ES.
fr
Français [French]
Par la présente OvisLink Corp. déclare que
l'appareil irLive IP-2000VPN est conforme aux
exigences essentielles et aux autres dispositions
pertinentes de la directive 1999/5/CE
sk
Slovensky [Slovak]
OvisLink Corp týmto vyhlasuje, že irLive IP-
2000VPN spĺňa základné požiadavky a všetky
príslušné ustanovenia Smernice 1999/5/ES.
it
Italiano [Italian]
Con la presente OvisLink Corp. dichiara che
questo irLive IP-2000VPN è conforme ai
requisiti essenziali ed alle altre disposizioni
pertinenti stabilite dalla direttiva 1999/5/CE.
fi
Suomi [Finnish]
OvisLink Corp vakuuttaa täten että irLive IP-
2000VPN tyyppinen laite on direktiivin 1999/5/EY
oleellisten vaatimusten ja sitä koskevien direktiivin
muiden ehtojen mukainen
lv
Latviski [Latvian]
r šo OvisLink Corp. deklarē, ka irLive IP-
2000VPN atbilst Direktīvas 1999/5/EK
būtiskajām prasībām un citiem ar to saistītajiem
noteikumiem.
Íslenska [Icelandic]
Hér með lýsir OvisLink Corp yfir því að irLive IP-
2000VPN er í samræmi við grunnkröfur og aðrar
kröfur, sem gerðar eru í tilskipun 1999/5/EC.
sv
Svenska
[Swedish]
Härmed intygar OvisLink Corp. att denna irLive
IP-2000VPN står I överensstämmelse med de
väsentliga egenskapskrav och övriga relevanta
bestämmelser som framgår av direktiv
1999/5/EG.
no
Norsk [Norwegian]
OvisLink Corp erklærer herved at utstyret irLive IP-
2000VPN er i samsvar med de grunnleggende krav
og øvrige relevante krav i direktiv 1999/5/EF.
copy of the full CE report can be obtained from the following address:
OvisLink Corp.
5F, No.6 Lane 1 0,
Min-Chuan Rd, Hsin-Tien City,
Taipei, Taiwan, R.O.C.
This equipment may be used in T, BE, CY, CZ, DK, EE, FI, FR, DE, GR, HU, IE, IT, LV, LT, LU, MT, NL, PL, PT, SK,
SI, ES, SE, GB, IS, LI, NO, CH, BG, RO, TR

AirLive IP-2000VPN User’s Manual
1
Copyright
The contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an
information retrieval system, translated into any language, or transmitted in any form or by any means,
mechanical, magnetic, electronic, optical, photocopying, manual, or otherwise, without the prior written
permission.
Trademarks
All products, company, brand names are trademarks or registered trademarks of their respective companies.
They are used for identification purpose only. Specifications are subject to be changed without prior notice.
FCC Interference Statement
The IP-2000VPN has been tested and found to comply with the limits for a Class B digital device pursuant to
Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against radio
interference in a commercial environment. This equipment can generate, use and radiate radio frequency
energy and, if not installed and used in accordance with the instructions in this manual, may cause harmful
interference to radio communications. Operation of this equipment in a residential area is likely to cause
interference, in which case the user, at his own expense, will be required to take whatever measures are
necessary to correct the interference.
CE Declaration of Conformity
This equipment complies with the requirements relating to electromagnetic compatibility,
EN 55022, EN 61000-3-2, EN 61000-3-3/A1, EN 55024, Class B.
The specification is subject to change without notice.

AirLive IP-2000VPN User’s Manual 2
Table of Contents
Chapter 1 Introduction................................................................................................................. 4
1.1 Features.............................................................................................................................................. 5
1.2 Installation of the Router ..................................................................................................................... 8
1.3 Front Panel and Rear Panel ............................................................................................................. 10
1.4 Packing List........................................................................................................................................11
1.5 Hardware DMZ...................................................................................................................................11
Chapter 2 Deployment ............................................................................................................... 12
Chapter 3 Configure Router ...................................................................................................... 15
3.1 Setup Wizard .................................................................................................................................... 16
3.2 LAN ................................................................................................................................................... 21
Chapter 4 Internet Features....................................................................................................... 24
4.1 WAN Port .......................................................................................................................................... 24
4.2 Advanced Internet ............................................................................................................................. 27
4.3 Dynamic DNS ................................................................................................................................... 31
4.4 Virtual Server .................................................................................................................................... 33
4.5 Options.............................................................................................................................................. 36
Chapter 5 Security...................................................................................................................... 37
5.1 Admin Login ...................................................................................................................................... 37
5.2 Access Control .................................................................................................................................. 39
5.3 Firewall Rule ..................................................................................................................................... 42
5.4 Logs .................................................................................................................................................. 46
5.5 E-mail................................................................................................................................................ 49
5.6 Security Options................................................................................................................................ 51
5.7 Scheduling ........................................................................................................................................ 53
5.8 Services ............................................................................................................................................ 54
Chapter 6 IPSec VPN.................................................................................................................. 55
6.1 Common VPN Situations .................................................................................................................. 55
6.2 VPN Configuration ............................................................................................................................ 57
6.3 Certificates ........................................................................................................................................ 67
6.4 CLRs ................................................................................................................................................. 73
6.5 Status ................................................................................................................................................ 74
Chapter 7 Microsoft VPN (PPTP) .............................................................................................. 75
7.1 PPTP Server ..................................................................................................................................... 75
7.2 Windows PPTP Clients Setup........................................................................................................... 79
Chapter 8 VPN Example............................................................................................................. 92
8.1 Office-to-office IPSec VPN – Connecting to 2 IP-2000VPN ............................................................. 93
8.2 Office-to-office IPSec VPN – Connecting IP-2000VPN and RS-1200.............................................. 99
8.3 Getting into Office Network from Internet (PPTP) – Windows XP PPTP Client ............................. 105
8.4 Getting into Office Network from Internet (IPSec) – Windows XP IPSec Client..............................113

AirLive IP-2000VPN User’s Manual
3
Chapter 9 Status....................................................................................................................... 132
9.1 Connection Status – PPPoE ........................................................................................................... 134
9.2 Connection Status – PPTP ............................................................................................................. 136
9.3 Connection Status – Telstra Big Pond ............................................................................................ 138
9.4 Connection Status – SingTel RAS .................................................................................................. 140
9.5 Connection Status – Fixed/Dynamic IP Address ............................................................................ 142
9.6 Connection Status – L2TP .............................................................................................................. 144
Chapter 10 Other Features & Settings ................................................................................... 146
10.1 Config file ...................................................................................................................................... 146
10.2 Network Diagnostics ..................................................................................................................... 148
10.3 PC Database................................................................................................................................. 149
10.4 Remote Administration.................................................................................................................. 152
10.5 Routing.......................................................................................................................................... 154
10.6 Upgrade Firmware ........................................................................................................................ 158
10.7 UPnP............................................................................................................................................. 159
Appendix A PC Configuration................................................................................................. 160
Appendix B VPN Overview...................................................................................................... 169
Appendix C Troubleshooting.................................................................................................. 172
Appendix D Specifications...................................................................................................... 174

AirLive IP-2000VPN User’s Manual 4
C
C
Ch
h
ha
a
ap
p
pt
t
te
e
er
r
r
1
1
1
I
I
In
n
nt
t
tr
r
ro
o
od
d
du
u
uc
c
ct
t
ti
i
io
o
on
n
n
The AirLive Internet VPN Router, IP-2000VPN, features IPSec and PPTP VPN Server, to offer the easy
installation VPN connection for office-to-office or client-to-office environment. Follow the wizard to configure
IPSec VPN, and it will not be the difficult job to set up your own VPN environment.
The IP-2000VPN does not only feature VPN function, it is also a router built-in with SPI and DoS firewall to
protect internal device; with VPN and router’s feature, you can deploy AirLive IP-2000VPN in several
environment such as SMB office, branch office, SOHO user and the home user.
Recommendation before starting to configure IP-2000VPN
If you want to configure WAN interface first:
•Please refer to Chapter 3.1 Setup Wizard and follow the steps to configure WAN interface. You also
can refer to Chapter 4.1 WAN Port to configure WAN interface directly if you are an experienced
user.
If you want to configure Office-to-Office IPSec VPN communication:
•Please refer to VPN example Chapter 8.1 Office-to-office IPSec VPN – Connecting 2 IP-2000VPN,
or Chapter 8.2 Office-to-office IPSec VPN – Connecting IP-2000VPN and RS-1200.
If you want to connect office VPN from home:
•Please refer to VPN example Chapter 8.3 Getting into Office Network from Internet (PPTP) –
Windows XP PPTP Client.

AirLive IP-2000VPN User’s Manual
5
1.1 Features
IPSec VPN Features
•IPSec. Support for IPSec standards, including IKE and certificates.
•10 Tunnels. Up to 10 VPN tunnels can be created.
•IPSec Authentication and Encryption. Support DES, 3DES, AES-128, 192, 256 bits Encryption,
and MD5, SHA-1 Authentication.
Microsoft VPN Gateway Support
•PPTP Server. The IP-2000VPN emulates a Microsoft PPTP VPN Server, allowing clients to use
the Microsoft VPN client provided in Windows.
•Windows Client Support. Remote users can use the Microsoft VPN client (VPN Adapter) provided
in recent versions of Windows.
•Easy Setup. For both the Administrator and remote users, the Microsoft VPN is much easier to
configure than IPSec VPN.
Security Features
•Password - protected Configuration. Optional password protection is provided to prevent
unauthorized users from modifying the configuration data and settings.
•NAT Protection. An intrinsic side effect of NAT (Network Address Translation) technology is that
by allowing all LAN users to share a single IP address, the location and even the existence of each
PC is hidden. From the external viewpoint, there is no network, only a single device – the
IP-2000VPN.
•Stateful Inspection Firewall. All incoming data packets are monitored and all incoming server
requests are filtered, thus protecting your network from malicious attacks from external sources.
•Protection against DoS attacks. DoS (Denial of Service) attacks can flood your Internet
connection with invalid packets and connection requests, using so much bandwidth and so many
resources that Internet access becomes unavailable. The IP-2000VPN incorporates protection
against DoS attacks.
•Rule-based Policy Firewall. To provide additional protection against malicious packets, you can
define your own firewall rules. This can also be used to control the Internet services available to LAN
users.

AirLive IP-2000VPN User’s Manual 6
Advanced Internet Functions
•Communication Applications. Support for Internet communication applications, such as
interactive Games, Telephony, and Conferencing applications, which are often difficult to use when
behind a Firewall, is included.
•Special Internet Applications. Applications which use non-standard connections or port
numbers are normally blocked by the Firewall. The ability to define and allow such applications is
provided, to enable such applications to be used normally.
•Virtual Servers. This feature allows Internet users to access Internet servers on your LAN. The
required setup is quick and easy.
•Multi-DMZ. For each WAN (Internet) IP address allocated to you, one (1) PC on your local LAN
can be configured to allow unrestricted 2-way communication with Servers or individual users on the
Internet. This provides the ability to run programs which are incompatible with Firewalls.
•Physical DMZ Port. PCs connected to the DMZ port are effectively isolated from your LAN, while
connected to the Internet. This provides additional security for your LAN while allowing your Servers
to be accessed from the Internet.
•URL Filter. Use the URL Filter to block access to undesirable Web sites by LAN users.
•Internet Access Log. See which Internet connections have been made.
•VPN Pass through Support. PCs with VPN (Virtual Private Networking) software using PPTP,
L2TP and IPSec are transparently supported - no configuration is required.
Internet Access Features
•Shared Internet Access. All users on the LAN or WLAN can access the Internet through the
IP-2000VPN, using only a single external IP Address. The local (invalid) IP Addresses are hidden
from external sources. This process is called NAT (Network Address Translation).
•DSL & Cable Modem Support. The IP-2000VPN has a 100BaseT Ethernet port for connecting a
DSL or Cable Modem. All popular DSL and Cable Modems are supported. SingTel RAS and Big
Pond (Australia) login support is also included.
•PPPoE, PPTP, SingTel RAS and Telstra Big Pond Support. The Internet (WAN port) connection
supports PPPoE (PPP over Ethernet), PPTP (Peer-to-Peer Tunneling Protocol), SingTel RAS and
Telstra Big Pond (Australia), as well as "Direct Connection" type services.
•Fixed or Dynamic IP Address. On the Internet (WAN port) connection, the IP-2000VPN supports
both Dynamic IP Address (IP Address is allocated on connection) and Fixed IP Address.

AirLive IP-2000VPN User’s Manual
7
LAN Features
•3-Port Switching Hub. The IP-2000VPN incorporates a 3-port 10/100BaseT switching hub,
making it easy to create or extend your LAN.
•DHCP Server Support. Dynamic Host Configuration Protocol provides a dynamic IP address to
PCs and other devices upon request. The IP-2000VPN can act as a DHCP Server for devices on
your local LAN and WLAN.
•Multi Segment LAN Support. LANs containing one or more segments are supported, via the
IP-2000VPN's RIP (Routing Information Protocol) support and built-in static routing table.
•DMZ Port. Used when allowing Servers on your LAN to be accessed from the Internet, the DMZ
port provides additional protection for both your Servers and your LAN.
Configuration & Management
•Easy Setup. Use your WEB browser from anywhere on the LAN or WLAN for configuration.
•Remote Management. The IP-2000VPN can be managed from any PC on your LAN. And, if the
Internet connection exists, it can also (optionally) be configured via the Internet.
•UPnP Support. UPnP (Universal Plug and Play) allows automatic discovery and configuration of
the IP-2000VPN. UPnP is by supported by Windows ME, XP, or later.
•Configuration File Backup & Restore. You can backup (download) the IP-2000VPN's
configuration file to your PC, and restore (upload) a previously-saved configuration file to the
IP-2000VPN.

1.2 Installation of the Router
Requirement
•Network cables. Use standard 10/100BaseT network (UTP) cables with RJ45 connectors.
•TCP/IP protocol must be installed on all PCs.
•For Internet Access, an Internet Access account with an ISP, and a Broadband modem (usually, DSL
or Cable modem).
Procedure
1. Choose an Installation Site
Select a suitable place on the network to install the IP-2000VPN. Ensure the IP-2000VPN and the
DSL/Cable modem are powered OFF.
2. Connect LAN Cables
•Use standard LAN cables to connect PCs to the Switching Hub ports on the IP-2000VPN. Both
10BaseT and 100BaseTX connections can be used simultaneously.
•If required, you can connect any LAN port to another Hub. Any LAN port on the IP-2000VPN will
automatically function as an "Uplink" port when required. Just connect any LAN port to a normal port
on the other hub, using a standard LAN cable.
•If desired, connect a PC (server) to the DMZ port. To use multiple servers, use a standard LAN cable
to connect the DMZ port to a normal port on another hub, and connect your servers to the hub. PCs
connected to the DMZ port are isolated from your LAN.
3. Connect WAN Cable
Connect the Broadband modem to the WAN port on the IP-2000VPN. Use the cable supplied with your
Broadband modem. If no cable was supplied, use a standard LAN cable.
AirLive IP-2000VPN User’s Manual 8

AirLive IP-2000VPN User’s Manual
9
4. Power Up
•Power on the Broadband modem.
•Connect the supplied power adapter to the IP-2000VPN and power up. Please note that you should
use only the power adapter provided. Using a different one may cause hardware damage.
5. Check the LEDs
•The Power LED should be ON.
•The Status LED should blink during start up, and then turn Off. If it stays on, there is a hardware
error.
•For each LAN (PC) connection, the LAN Link/Act LED should be ON (provided the PC is also ON).
•If a PC is connected to the DMZ port, the DMZ port's Link/Act LED should be ON (provided the PC is
also ON).
•The WAN LED should be ON.
6. Router’s default IP
•The default IP address of router’s LAN port is:
IP Address: 192.168.1.1
Subnet Mask: 255.255.255.0
•For Web Management, please configure client PC as DHCP client to obtain IP address from
IP-2000VPN.
•After configuring the computer’s IP properly, please enter the router’s IP address “192.168.1.1” in
Web browser to manage the router, type the proper user name and password to pass the router’s
authentication.
7. User name and password
•User’s name: admin
•Password: airlive

1.3 Front Panel and Rear Panel
LED Function Color Status Description
Power Power
indication ●Green On Power on
On Error condition
Status System status ●Red
Blinking System starts up
On The WAN port is linked.
WAN WAN port
activity ●Green
Blinking The WAN port is sending or receiving
data.
On An active station is connected to the
corresponding port.
Link/Act
(LAN/DMZ) Link status ●Green
Blinking The corresponding LAN port is
sending or receiving data.
100
(LAN/DMZ) Link rate ●Orange On
Data is transmitting in 100Mbps on
the corresponding port.
Port / Button Description
Power Connect the supplied power adapter (DC12V, 1A ) here.
WAN The port where you will connect your cable (or xDSL) modem or Ethernet
router
LAN 1 ~ 3 The ports where you will connect networked computers and other devices.
DMZ PCs or devices connected to the DMZ port are isolated from the LAN.
You can deploy one or more servers to be accessed by Internet users.
Reset Press this button to reset system settings to factory defaults.
AirLive IP-2000VPN User’s Manual 10

AirLive IP-2000VPN User’s Manual
11
1.4 Packing List
The following items should be included:
•IP-2000VPN Internet VPN Router
•Installation CD-ROM
•Quick Installation Guide
•AC Adapter
When you open your package, make sure all of the above items are included and not damaged. If you
see that any components are damaged, please notify your dealer immediately.
1.5 Hardware DMZ
Using the DMZ Port
The DMZ port is intended for connection of a server you wish to make available to the public. To use multiple
servers, use a standard LAN cable to connect the DMZ port to a normal port on another switch, and connect
your servers to the switch.
Please note the following points regarding the DMZ port:
•Although physically attached to the switch ports, the DMZ port is not part of the built-in switch. It is a
separate single port which is isolated from the switch.
•PCs connected to the DMZ port are on the same LAN segment as PCs connected to the LAN ports.
They must use the same IP address range.
•PCs connected to the DMZ port are NOT visible to PCs on the LAN ports. So you cannot use
Microsoft networking or other networking protocols to connect to PCs on the DMZ. The connection
must be made via the Internet.
•PCs connected to the DMZ port still share the WAN port IP address for Internet access.
•To make PCs on the DMZ port available from the Internet, the "Virtual Server" (Port Forwarding)
feature must be configured to send incoming traffic to the appropriate server.
Advantages of the DMZ Port
If running any Servers on your LAN, you should connect them to the DMZ port, for the following reasons:
•Traffic passing between the DMZ and LAN passes through the firewall. The firewall will protect your
LAN if your Server is compromised and used to launch an attack on your LAN.
•When using the Virtual Servers feature, a firewall rule to allow incoming traffic from the Internet to the
DMZ is automatically created. If the Server is connected to the LAN ports, you must add the firewall
rule manually.

AirLive IP-2000VPN User’s Manual 12
C
C
Ch
h
ha
a
ap
p
pt
t
te
e
er
r
r
2
2
2
D
D
De
e
ep
p
pl
l
lo
o
oy
y
ym
m
me
e
en
n
nt
t
t
Overview
This chapter describes the setup procedure for:
•Internet Access
•LAN configuration
PCs on your local LAN may also require configuration. For details, see Appendix A - PC Configuration.
Other configuration may also be required, depending on which features and functions of the IP-2000VPN you
wish to use. Use the table below to locate detailed instructions for the required functions.
To Do this: Refer to:
Configure PCs on your LAN. Appendix A:
PC Configuration
Use any of the following Internet features:
•WAN Port
•Advanced Setup
•Dynamic DNS
•Virtual Servers
•Options
Chapter 4:
Internet Features
Change any of the following Security-related settings:
•Admin Login
•Access Control
•Firewall Rules
•Logs
•E-mail
•Security Options
•Scheduling
•Services
Chapter 5:
Security
Use the IPSec VPN features:
•VPN Policies
•Certificates
•CRLs
•VPN Status
Chapter 6:
VPN (IPSec)
Use the Microsoft VPN feature:
•PPTP Server in the IP-2000VPN.
•User and Client setup.
•Checking VPN connection Status.
Chapter 8:
Microsoft VPN
Check IP-2000VPN Status. Chapter 9:
Status

AirLive IP-2000VPN User’s Manual
13
Configure or use any of the following:
•Configuration File backup and restore.
•Network Diagnostic
•PC Database
•Remote Administration
•Routing
•Upgrade Firmware
•UPnP
Chapter 10:
Other Features and
Settings
Configuration Program
The IP-2000VPN contains an HTTP server. This enables you to connect to it, and configure it using your Web
Browser. Your Browser must support JavaScript. The configuration program has been tested on the
following browsers:
•Netscape v4.08 or later
•Internet Explorer v4 or later
Preparation
Before attempting to configure the IP-2000VPN, please ensure that:
•Your PC can establish a physical connection to the IP-2000VPN. The PC and the IP-2000VPN must
be directly connected (using the switch ports on the IP-2000VPN) or on the same LAN segment.
•The IP-2000VPN must be installed and powered ON.
•If the IP-2000VPN’s default IP Address (192.168.1.1) is already used by another device, the other
device must be turned OFF until the IP-2000VPN is allocated a new IP Address during configuration.
Using UPnP
If your Windows system supports UPnP, an icon for the IP-2000VPN will appear in the system tray, notifying
you that a new network device has been found, and offering to create a new desktop shortcut to the
newly-discovered device.
•Unless you intend to change the IP Address of the IP-2000VPN, you can accept the desktop
shortcut.
•Whether you accept the desktop shortcut or not, you can always find UPnP devices in My Network
Places (previously called Network Neighborhood).
•Double - click the icon for the IP-2000VPN (either on the Desktop, or in My Network Places) to start
the configuration. Refer to the following section
錯誤 ! 找不到參照來源。 for details of the initial
configuration process.

Using your Web Browser
To establish a connection from your PC to the IP-2000VPN:
1. Start your WEB browser.
2. In the Address box, enter "http://" and the IP Address of the IP-2000VPN, as in this example, which uses
the IP-2000VPN's default IP Address: http://192.168.1.1
3. You will be prompted for a username and password, as shown below.
4. Enter admin for the User name, and airlive for the Password.
5. These are the default values. Both the name and password can (and should) be changed, using the
Admin Login screen. Once you have changed either the name or the password, you must use the
current values
If you can’t connect
If the IP-2000VPN does not respond, check the following:
•The IP-2000VPN is properly installed, LAN connection is OK, and it is powered ON. You can test the
connection by using the "Ping" command:
•Open the MS-DOS window or command prompt window.
•Enter the command:
ping 192.168.1.1
If no response is received, either the connection is not working, or your PC's IP address is not
compatible with the IP-2000VPN’s IP Address. (See next item).
•If your PC is using a fixed IP Address, its IP Address must be within the range 192.168.1.2 to
192.168.1.254 to be compatible with the IP-2000VPN's default IP Address of 192.168.1.1. Also, the
Network Mask must be set to 255.255.255.0. See Appendix A - PC Configuration for details on
checking your PC's TCP/IP settings.
Ensure that your PC and the IP-2000VPN are on the same network segment. (If you don't have a router, this
must be the case.)
AirLive IP-2000VPN User’s Manual 14

AirLive IP-2000VPN User’s Manual
15
C
C
Ch
h
ha
a
ap
p
pt
t
te
e
er
r
r
3
3
3
C
C
Co
o
on
n
nf
f
fi
i
ig
g
gu
u
ur
r
re
e
e
R
R
Ro
o
ou
u
ut
t
te
e
er
r
r
Home Screen
The first time you connect to the IP-2000VPN, you will see the Home screen shown below:
•Use the menu bar on the top of the screen, and the "Back" button on your Browser, for navigation.
•Changing to another screen without clicking "Save" does NOT save any changes you may have
made. You must "Save" before changing screens or your data will be ignored.
•On each screen, clicking the "Help" button will display help for that screen.
•From any help screen, you can access the list of all help files (help index).

AirLive IP-2000VPN User’s Manual 16
3.1 Setup Wizard
The main purpose of Setup Wizard works to configure WAN type, when you finish the WAN port’s
configuration, you can make the test in the wizard to verify the setting.
•You need to know the type of Internet connection service used by your ISP. Check the data supplied
by your ISP.
•The common connection types are explained in the tables below:
Cable Modem
Login method Type Details ISP Data required
Dynamic IP
Address
Your IP Address is
allocated automatically,
when you connect to
you ISP.
Usually, none.
However, some ISP's may require you to
use a particular Hostname, Domain
name, or MAC (physical) address.
None
Static IP
Address
Your ISP allocates a
permanent IP Address
to you.
IP Address, mask, gateway and DNS
address allocated to you.
Some ISP's may also require you to use a
particular Hostname, Domain name, or
MAC (physical) address.
Dynamic IP
Address
Your IP Address is
allocated automatically,
when you connect to
you ISP.
User name and password.PPPoE
Static IP
Address
Your ISP allocates a
permanent IP Address
to you.
User name and password.
IP Address, mask, gateway and DNS
address allocated to you.
Some ISP's may also require you to use a
particular Hostname, Domain name, or
MAC (physical) address.

DSL Modem
Login method Type Details ISP Data required
Dynamic IP
Address
Your IP Address is allocated
automatically, when you connect
to you ISP.
User name and password.PPPoE
Static IP
Address
Your ISP allocates a permanent IP
Address to you.
IP Address, mask, gateway and
DNS address allocated to you.
Dynamic IP
Address
You connect to the ISP only when
required. The IP address is usually
allocated automatically.
•PPTP Server IP Address.
•User name and password.
PPTP
Static IP
Address
Your ISP allocates a permanent IP
Address to you.
•PPTP Server IP Address.
•User name and password.
•IP Address allocated to you
Dynamic IP
Address
You connect to the ISP only when
required. The IP address is usually
allocated automatically.
•L2TP Server IP Address or
domain name.
•User name and password.
L2TP
Static IP
Address
Your ISP allocates a permanent IP
Address to you.
•L2TP Server IP Address or
domain name
•User name and password.
•IP Address allocated to you.
AirLive IP-2000VPN User’s Manual
17