Amit SDE852-00001 User manual

User Manual
FW: 00PI0.1001
UM: V0.93_20140709
SDE85x-00001
Multi-Service Gateway
with WLAN Controller

Multi-Service Gateway with WLAN Controller
TABLE OF CONTENTS
CHAPTER 1 INTRODUCTION.............................................................................................7
1.1 CONTENTS LIST.....................................................................................................................................................7
1.2 HARDWARE INSTALLATION...................................................................................................................................8
1.2.1 ATTENTION.............................................................................................................................8
1.2.2 SYSTEM REQUIREMENTS.....................................................................................................8
1.2.3 Hardware Configuration............................................................................................................9
1.2.4 LED Indicators........................................................................................................................11
CHAPTER 2 GETTING STARTED .....................................................................................12
2.1 CONNECT YOUR DEVICE ....................................................................................................................................12
2.2 EASY SETUP BY CONFIGURING WEB UI............................................................................................................12
CHAPTER 3 MAKING CONFIGURATIONS .....................................................................25
3.1 BASIC NETWORK ................................................................................................................................................25
3.1.1 WAN Setup.............................................................................................................................26
3.1.1.1 Physical Interface................................................................................................................................26
3.1.1.2 Internet Setup ......................................................................................................................................28
3.1.1.2.1 Ethernet WAN...................................................................................................................................28
3.1.1.2.2 Wireless WAN – 3G/4G.....................................................................................................................36
3.1.1.3 Load Balance.......................................................................................................................................38
3.1.2 LAN & VLAN...........................................................................................................................41
3.1.2.1 Network Setting ...................................................................................................................................42
3.1.2.2 LAN & VLAN........................................................................................................................................43
3.1.2.2.1 VLAN Scenarios...............................................................................................................................43
3.1.2.2.2 Port-Based VLAN.............................................................................................................................46
3.1.2.2.3 Tag-Based VLAN..............................................................................................................................48
3.1.3 IPv6 Setup..............................................................................................................................50
3.1.3.1 Static IPv6............................................................................................................................................50
3.1.4.2 DHCP v6..............................................................................................................................................52
3.1.4.3 PPPoEv6..............................................................................................................................................53
3.1.4.4 6 to 4.....................................................................................................................................................54
3.1.4.5 6 in 4.....................................................................................................................................................55
3.1.4.6 6rd........................................................................................................................................................56
3.1.4 NAT / Bridge...........................................................................................................................58
3.1.4.1 Configuration........................................................................................................................................58
3.1.4.2 Virtual Server & Virtual Computer ......................................................................................................58
3.1.4.2.1 Virtual Server....................................................................................................................................58
SDE852 User Manual 2

Multi-Service Gateway with WLAN Controller
3.1.4.2.2Virtual Computers.............................................................................................................................59
3.1.4.3 Special AP & ALG ...............................................................................................................................60
3.1.4.3.1 ALG .................................................................................................................................................60
3.1.4.3.2 Special AP ........................................................................................................................................60
3.1.4.3.3 DMZ.................................................................................................................................................61
3.1.5 Routing...................................................................................................................................63
3.1.5.1 Static Routing.......................................................................................................................................63
3.1.5.2 Dynamic Routing .................................................................................................................................64
3.1.5.3 Routing Information.............................................................................................................................66
3.1.6 Client/Server/Proxy.................................................................................................................66
3.1.6.1 Dynamic DNS......................................................................................................................................66
3.1.6.2 DHCP Server.......................................................................................................................................67
3.2 ADVANCED NETWORK........................................................................................................................................69
3.2.1 Firewall...................................................................................................................................70
3.2.1.1 Configuration........................................................................................................................................70
3.2.1.2 Packet Filters.......................................................................................................................................70
3.2.1.2.1 Configuration....................................................................................................................................71
3.2.1.2.2 Packet Filter List...............................................................................................................................71
3.2.1.2.3 Packet Filter Rule Configuration........................................................................................................72
3.2.1.3 URL Blocking.......................................................................................................................................73
3.2.1.3.1 Configuration....................................................................................................................................74
3.2.1.3.2 URL Blocking Rule List....................................................................................................................74
3.2.1.3.3 URL Blocking Rule Configuration.....................................................................................................75
3.2.1.4 Web Content Filters.............................................................................................................................75
3.2.1.4.1 Configuration....................................................................................................................................76
3.2.1.4.2 Web Content Filter Rule List .............................................................................................................76
3.2.1.4.3 Web Content Filter Configuration......................................................................................................77
3.2.1.5 MAC Control........................................................................................................................................77
3.2.1.5.1 Configuration....................................................................................................................................78
3.2.1.5.2 MAC Control Rule List .....................................................................................................................78
3.2.1.5.3 MAC Control Rule Configuration......................................................................................................79
3.2.1.6 Application Filters................................................................................................................................79
3.2.1.6.1 Configuration....................................................................................................................................80
3.2.1.7 IPS........................................................................................................................................................80
3.2.1.8 Options.................................................................................................................................................81
3.2.2 QoS & BWM...........................................................................................................................82
3.2.2.1 Configuration........................................................................................................................................83
3.2.2.2 Rule-based QoS..................................................................................................................................84
3.2.2.2.1 Configuration....................................................................................................................................85
SDE852 User Manual 3

Multi-Service Gateway with WLAN Controller
3.2.2.2.2 QoS Rule List ...................................................................................................................................85
3.2.2.2.3 QoS Rule Configuration ....................................................................................................................86
3.2.3 VPN Setup..............................................................................................................................90
3.2.3.1 IPSec....................................................................................................................................................90
3.2.3.1.1 IPSec VPN Tunnel Scenarios.............................................................................................................91
3.2.3.1.2 IPSec Configuration..........................................................................................................................92
3.2.3.1.3 Tunnel List & Status..........................................................................................................................93
3.2.3.1.4 Tunnel Configuration ........................................................................................................................94
3.2.3.1.5 Local & Remote Configuration..........................................................................................................94
3.2.3.1.6 Authentication...................................................................................................................................95
3.2.3.1.7 IKE Phase.........................................................................................................................................95
3.2.3.1.8 IKE Proposal Definition....................................................................................................................96
3.2.3.1.9 IPSec Phase......................................................................................................................................97
3.2.3.1.10 IPSec Proposal Definition..................................................................................................................97
3.2.3.1.11 Manual Proposal...............................................................................................................................98
3.2.3.2 PPTP....................................................................................................................................................98
3.2.3.2.1 PPTP / L2TP VPN TunnelScenarios..................................................................................................99
3.2.3.2.1 PPTP Server Configuration..............................................................................................................100
3.2.3.2.2 PPTP Server Status..........................................................................................................................100
3.2.3.2.3 User Account List............................................................................................................................101
3.2.3.2.4 User Account Configuration ............................................................................................................101
3.2.3.2.5 PPTP Client ....................................................................................................................................101
3.2.3.2.6 PPTP Client List & Status................................................................................................................102
3.2.3.2.7 PPTP Client Configuration ..............................................................................................................102
3.2.3.3 L2TP...................................................................................................................................................104
3.2.3.3.1 L2TP Server Configuration..............................................................................................................104
3.2.3.3.2 L2TP Server Status..........................................................................................................................105
3.2.3.3.3 User Account List............................................................................................................................106
3.2.3.3.4 User Account Configuration ............................................................................................................106
3.2.3.3.5 L2TP Client ....................................................................................................................................106
3.2.3.3.6 L2TP Client List & Status................................................................................................................106
3.2.3.3.7 L2TP Client Configuration ..............................................................................................................107
3.2.3.4 GRE....................................................................................................................................................108
3.2.3.4.1 GRE VPN Tunnel Scenario..............................................................................................................108
3.2.3.4.2 GRE Configuration .........................................................................................................................109
3.2.3.4.3 GRE Tunnel Definitions..................................................................................................................109
3.2.3.4.4 GRE rule Configuration...................................................................................................................109
3.2.4 Redundancy.........................................................................................................................110
3.2.4.1 VRRP.................................................................................................................................................110
SDE852 User Manual 4

Multi-Service Gateway with WLAN Controller
3.2.5 System Management............................................................................................................112
3.2.5.1 TR-069 ...............................................................................................................................................112
3.2.5.2 SNMP.................................................................................................................................................112
3.2.5.3 Telnet with CLI...................................................................................................................................114
3.2.5.4 UPnP..................................................................................................................................................114
3.3 APPLICATIONS...................................................................................................................................................116
3.3.1 AP Management...................................................................................................................116
3.3.1.1 Configuration......................................................................................................................................116
3.3.1.1.1 AP Management Configuration........................................................................................................ 116
3.3.1.1.2 AP Configuration Proposal List ....................................................................................................... 116
3.3.1.2 AP List................................................................................................................................................117
3.3.1.2.1 Trusted AP List & Status.................................................................................................................. 117
3.3.1.3 AP Configuration................................................................................................................................118
3.3.1.3.1 AP Configuration .................................................................................................................................. 118
3.3.2 Captive Portal.......................................................................................................................119
3.3.2.1 Captive Portal Configuration.............................................................................................................119
3.4 SYSTEM .............................................................................................................................................................120
3.4.1 System Related....................................................................................................................120
3.4.1.1 Change Password.............................................................................................................................121
3.4.1.2 SystemInformation............................................................................................................................121
3.4.1.3 System Status....................................................................................................................................122
3.4.1.4 SystemTools.....................................................................................................................................123
3.4.2 Scheduling............................................................................................................................125
3.4.3 User Management................................................................................................................126
3.4.3.1 User List.............................................................................................................................................127
3.4.3.2 User Profile........................................................................................................................................128
3.4.3.3 User Group.........................................................................................................................................129
3.4.4 MMI......................................................................................................................................130
3.4.4.1 Web UI...............................................................................................................................................130
CHAPTOR 4TROUBLESHOOTING................................................................................132
APPENDIXA. LICENSING INFORMATION ...................................................................136
SDE852 User Manual 5

Multi-Service Gateway with WLAN Controller
Copyright
The contents of this publication may not be reproduced in any part or as a whole, stored,
transcribed in an information retrieval system, translated into any language, or transmitted
in any form or by any means, mechanical, magnetic, electronic, optical, photocopying,
manual, or otherwise, without the prior written permission.
Trademarks
All products, company, brand names are trademarks or registered trademarks of their
respective companies. They are used for identification purpose only. Specifications are
subject to be changed without prior notice.
SDE852 User Manual 6

Multi-Service Gateway with WLAN Controller
Chapter 1 Introduction
Congratulations on your purchase of this outstanding product: SDE85x-00001
Multi-Service Gateway with WLAN Controller.The product series, the multi-service
security gateway comes with fruitful functions to meet SMB fast growing intranet access
requirement. Multi-WAN NAT function allows multiple clients to have high speed access.
VPN technology can enable secure access within intranet. By AP controller function, it is
easy to deploy WiFi access infrastructure. Firewall and access control can prevent from
hackers attack and avoid unproductive activity. Friendly setting and professional network
management function, supervisor can easily take control of whole intranet. Besides being
used for SMBcorporate, when combined with AMIT various gateway series, it is also quite
suitable for commercial, mobile office, hotspot deployment, and M2M-IoT application. For
optimal IT investment, AMIT solutions will guarantee maximum ROI and highest reliability.
Instructions for installing and configuring this product can be found in this manual. Before
you install and use this product, please read this manual carefully for fully exploiting the
functions of this product.
1.1 Contents List
Items Description Contents Quantity
1 Device 1pce
2 Power Adapter 1pce
3 RJ45 Cable
1pce
4 CD 1pce
SDE852 User Manual 7

Multi-Service Gateway with WLAN Controller
1.2 Hardware Installation
1.2.1 ATTENTION
1.2.2 SYSTEM REQUIREMENTS
Network Requirements •An Ethernet RJ45 cable or DSL modem
•10/100/1000 Ethernet adapter on PC / NB.
Web-based Configuration Utility
Requirements
Computer with the following:
•Windows®, Macintosh, or Linux-based
operating system
•An installed Ethernet adapter
Browser Requirements:
•Internet Explorer 6.0 or higher
•Chrome 2.0 or higher
•Firefox 3.0 or higher
•Safari 3.0 or higher.
CD Installation Wizard Requirements
Computer with the following:
•Windows®7 / 8, Vista®
, or XP with Service Pack
2
•An installed Ethernet adapter
•CD-ROM drive
Do not use the product in high humidity or high
temperatures.
Only usethe power adapter that comes with the
package. Using a different voltage rating power
adaptor may damage the product.
Do not open or repair the case yourself. If the
Product is too hot, turn off the power immediately
and have it repaired at a qualified service center.
Place the Product on a stable surface and avoid
using this product and all accessories outdoors.
Attention
SDE852 User Manual 8

Multi-Service Gateway with WLAN Controller
1.2.3 Hardware Configuration
Rear View:
SDE852-00001
Console Port
(DB9)
Receptor
for Power
Cable
Power
ON/OFF
Switch
SDE852 User Manual 9

Multi-Service Gateway with WLAN Controller
Front View:
SDE852-00001
Auto MDI/MDIX RJ-45 Ports
2x GbE WAN to connect Internet,
1x GbE DMZ to connect Local Server
5x GbE LAN to connect local devices
Reset
Button
USB
SDE852 User Manual 10