Multitech RouteFinder RF550VPN User manual

SOHO Internet Security Appliance
Model RF550VPN
User Guide

User Guide
RouteFinder SOHO Internet Security Appliance
Model RF550VPN
PN S000235E Revision E
Copyright © 2003
This publication may not be reproduced, in whole or in part, without prior expressed written permission
from Multi-Tech Systems, Inc. All rights reserved.
Multi-Tech Systems, Inc. makes no representations or warranties with respect to the contents hereof
and specifically disclaims any implied warranties of merchantability or fitness for any particular
purpose. Furthermore, Multi-Tech Systems, Inc. reserves the right to revise this publication and to
make changes from time to time in the content hereof without obligation of Multi-Tech Systems, Inc. to
notify any person or organization of such revisions or changes.
Revision Date Description
A 11/26/01 Initial release.
B 01/25/02 Changes to some screen captures. Formatting changes.
Renamed and modified the section entitled Configuring Your PC.
Added an Appendix to describe the SSH IPSec Client Setup.
C05/17/02 New examples. New screen captures. SSH IPSec Sentinel new
version (v.1.3). Advanced features are discussed in the User
Guide only.
D10/01/02 Changes to the Virtual Server section, Administrative Settings,
and VPN Connection. Software version 4.63.
E04/16/03 Software version 4.64.
Trademarks
The Multi-Tech logo is a trademark of Multi-Tech System, Inc. Windows is a trademark of Microsoft. All
other trademarks are owned by their respective companies.
World Headquarters
Multi-Tech Systems, Inc.
2205 Woodale Drive
Mounds View, Minnesota 55112
[phone] or [phone]
Fax [phone]
Internet Address: http://www.multitech.com

Contents
Chapter 1 – Introduction and Description.............................................................................. 5
Key Features ...................................................................................................................... 5
RouteFinder Documentation ............................................................................................... 7
RF550VPN Front Panel ...................................................................................................... 8
RF550VPN Back Panel....................................................................................................... 9
Chapter 2 – Installation...........................................................................................................10
Safety Warnings ................................................................................................................10
System Requirements .......................................................................................................10
Unpacking Your RouteFinder.............................................................................................10
Cabling Your RouteFinder .................................................................................................11
Chapter 3 – Configuring the PC.............................................................................................12
Chapter 4 – Navigating the Screens ......................................................................................19
Chapter 5 – Configuring the RouteFinder Using a Web Browser........................................20
About the Browser Interface...............................................................................................20
Setup Wizard.....................................................................................................................22
Chapter 6 – Managing the RouteFinder Using a Web Browser............................................33
Device Information.............................................................................................................33
Device Status ....................................................................................................................34
Advanced Settings.............................................................................................................37
System Tools.....................................................................................................................47
Chapter 7 – Troubleshooting .................................................................................................54
Chapter 8 – Frequently Asked Questions .............................................................................57
Appendix A – Specifications..................................................................................................60
Appendix B – Installing TCP/IP..............................................................................................61
Appendix C – Tools for Your RF550VPN...............................................................................63
PING..................................................................................................................................63
WINIPCFG and IPCONFIG................................................................................................63
TRACERT..........................................................................................................................63
Appendix D – Warranty and Repairs .....................................................................................64

Appendix E – Regulatory Compliance Information ..............................................................66
FCC Part 15 Regulation.....................................................................................................66
EMC, Safety, and R&TTE Directive Compliance................................................................67
Other Approvals.................................................................................................................67
Appendix F – Technical Support............................................................................................68
Glossary ..................................................................................................................................70
Index ........................................................................................................................................75

Chapter 1 – Introduction and Description
Multi-Tech Systems, Inc. RF550VPN User Guide 5
Chapter 1 – Introduction and
Description
Welcome to the world of Internet security. Your Multi-Tech SOHO RouteFinder VPN Internet security
appliance, Model RF550VPN, is ideal for the small branch office or telecommuter who needs secure
access to the corporate LAN.
In addition to providing a WAN Ethernet port for DSL or cable broadband Internet access, it also offers
both client-to-LAN and
LAN-to-LAN connectivity based on the IPSec protocol. The SOHO RouteFinder supports up to 5
IPSec tunnels and provides 3DES encryption with 700K bps throughput.
The RF550VPN is a cost-effective, easy-to-manage solution that is ideal for small- to medium-sized
businesses through the use of Network Address Translation (NAT). Since NAT provides for the
sharing of a single connection, you save the cost of multiple Internet accounts. See the Glossary for
more about NAT.
Key Features
·One WAN Ethernet port connects to a DSL or cable modem for shared Internet access.
·Supports up to 5 IPSec VPN tunnels for secure LAN-to-LAN and Client-to-LAN access over the
Internet.
·3DES encryption throughput of 700K bps.
·Built-in 4-port 10/100M bps switch.
·Built-in firewall and DHCP services with Network Address Translation (NAT).
·Protects your LAN against Denial of Service (DoS) attacks.
·Internet access controls provide client and site filtering.
·Asynchronous port for automatic dial-backup.
·Network monitoring allows the network administrator to view all incoming and outgoing packets,
status of connections, and specific connection events via a Syslog server.
·Configuration and management using any Web browser.
·Works with H.323 Voice over IP products including Multi-Tech MultiVOIP gateways or Microsoft
NetMeeting.
·Provides email addresses for 10 users with one connection.
·PPPoE support.
·Supports Windows Plug and Play
·Flash memory allows easy firmware upgrades.
·IP address mapping/port forwarding.
·Two-year warranty.

Chapter 1 – Introduction and Description
Multi-Tech Systems, Inc. RF550VPN User Guide 6
·Secure VPN Connections. The SOHO RouteFinder VPN uses the IPSec industry standard
protocol, data encryption, and the Internet to provide high-performance, secure VPN connections.
·For LAN-to-LAN connectivity, the RouteFinder utilizes the IPSec protocol to provide up to 5
tunnels with strong 168-bit 3DES encryption using IKE and PSK key management. In addition, it
provides very high performance with 700K with 3 DES encryption throughput.
·For Client-to-LAN connectivity, Multi-Tech provides optional IPSec client software allowing
traveling employees and telecommuters secure access to the company’s internal network.
·Network Security Protection. Protects a network from invalid access.
·Prevention of DoS (Denial of Service) – Prevents the consequences of the Denial of Service,
such as network traffic congestion or ping of death.
·Hacker Attack Logging – Supports general hacker attack pattern monitoring and logging.
·Filtering – Prevents unauthorized packets from entering or leaving the local network.
·Connects up to 253 Users to the Internet with Broadband Speed. With the SOHO
RouteFinder VPN, up to 253 users are connected to the Internet with only one IP account.
·LAN Segmentation. For added LAN security, the RouteFinder can be used to segment the LAN
by connecting the corporate servers to one RouteFinder Ethernet port and the Internet Servers to
the other Ethernet port. This configuration puts the corporate servers behind a firewall and the
Internet servers outside the firewall. To continue to provide Internet access, connect a modem or
ISDN terminal adapter to the RouteFinder’s asynchronous port.
·Can Be Configured as a DHCP Server. The SOHO RouteFinder VPN can be configured as a
DHCP server to handle request for Internet services and route to and from the ISP. Server and
Client features include:
DHCP Server – Automatically assigns IP information to the network users.
DHCP Client – Automatically gets IP information from the ISP DHCP server.
PPPoE Client – Supports PPPoE client function to connect to the remote PPPoE server.
Idle Time – Lets you set a specified idle-time before automatically disconnecting.
Dial-on-Demand – Eliminates the need for dial-up; automatically logs to your ISP.
The RouteFinder RF550VPN

Chapter 1 – Introduction and Description
Multi-Tech Systems, Inc. RF550VPN User Guide 7
RouteFinder Documentation
The Quick Start Guide
The Quick Start Guide is a shorter version of this User Guide. It is included in printed form with your
RF550VPN. Both guides are intended to be used by systems administrators and network managers.
They provide the necessary information for a qualified person to unpack, cable, and configure the
device for proper operation.
This User Guide
The User Guide can be installed from the CD by clicking Install Manuals on the Installation screen or
downloading the file from our Web site at: http://www.multitech.com
Save or Print the User Guide
Once the User Guide is displayed on screen using Adobe Acrobat Reader, you can save the .pdf
file to your system or print a copy.
Setup Examples and Other Helpful Documents
There are five reference documents to help you setup and use your RF550VPN.
These reference guides are located on the CD that accompanies your RouteFinder and also on
the Multi-Tech Web site.
A Description of the Reference Guides:
1. Setup Examples for the RF550VPN - Document Number S000258C
The four examples show:
·A LAN-to-LAN VPN configuration between two RF550VPNs. One at Site A and one at Site
B. Both RouteFinders use static IP address at their WAN port gateways.
·A LAN-to-LAN VPN configuration between an RF550VPNs at Site A that uses a static IP
through its WAN port and an RF550VPN at Site B that uses a dynamic IP address through
its WAN port.
·A LAN-to-LAN VPN configuration between an RF550VPN at Site A that uses a static IP
address at the WAN port and an RF550VPN at Site B that uses dynamic IP addressing
through a modem connected to the serial port.
·A Client-to-LAN configuration between an RF550VPN at Site A and an SSH IPSec Client.
Each example includes a diagram, a summary chart of input values, an address table you can use
to keep track of your values, and explanations of the Web interface screens.
2. RF550VPN Using a NAT Box with an IPSec Pass-Through - Document Number S000259B
The two example show:
·AN SSH Sentinel IPSec client behind a NAT box doing IPSec Pass-Through to an
RF550VPN.
·An RF550VPN behind a NAT box doing IPSec Pass-Through to another RF550VPN.
3. RF550VPN File Sharing Across VPN - Document Number S000260B
4. Configuring IPSec Tunneling in Windows XP or 2000 and Connecting to an RF550VPN -
Document Number S000261C.
5. Advanced Settings - five examples - Document Number S000268B

Chapter 1 – Introduction and Description
Multi-Tech Systems, Inc. RF550VPN User Guide 8
RF550VPN Front Panel
Link
ACT
100
10
FDX
COL Data DCD
Serial WAN
Link RXD TXD PWR
1234
RF550VPN Light Panel
LEDs Description
Link ACT Lights when the LAN client is correctly connected to the Ethernet port. Blinks
when there is activity on the Ethernet port.
100/10 Lights when the LAN client is connected at 100MB.
Off when the LAN client is connected at 10MB.
FDX COL
Lights when the LAN client is connected as full duplex.
Off when the LAN client is connected as half duplex. Blinks when there are
collisions on the network.
Serial Data Blinks when the Serial async port is receiving or transmitting data.
Serial DCD Lights when the Serial async port is properly connected to a remote site.
WAN Link Lights when a successful connection to the 10BaseT WAN is established.
WAN RXD Lights when the WAN port is receiving data.
WAN TXD Lights when the WAN port is transmitting data.
PWR Lights when power is being supplied to the router.

Chapter 1 – Introduction and Description
Multi-Tech Systems, Inc. RF550VPN User Guide 9
RF550VPN Back Panel
1234
Serial Reset
WAN
5VDC
RF550VPN Back Panel
Power 5VDC The power port connects the AC power adapter.
10 BT WAN
(10Base-T) The WAN port connects the xDSL modem or cable modem.
Serial The Serial port connects a standard modem (optional).
Reset
The Reset button resets the router to factory defaults. Press and hold button
until the serial LEDs of the RF550VPN blink, and then release the reset button.
Do not press this button unless you want to clear the current data.
Ports 1 - 4 There are 4 LAN ports. You can connect network devices such as PCs, FTP
servers, printers, or anything else you want to put on your network.

Chapter 2 – Installation
Multi-Tech Systems, Inc. RF550VPN User Guide 10
Chapter 2 – Installation
Safety Warnings
1. Never install telephone wiring during a lightning storm.
2. Never install telephone jacks in a wet location unless the jack is specifically designed for wet
locations.
3. This product is to be used with UL and cUL listed computers.
4. Never touch uninsulated telephone wires or terminals unless the telephone line has been
disconnected at the network interface.
5. Avoid using a telephone during an electrical storm. There may be a remote risk of electrical
shock from lightening.
6. Do not use the telephone to report a gas leak in the vicinity of the leak.
7. To reduce the risk of fire, use only No. 26 AWG or larger Telecommunications line cord.
System Requirements
·Microsoft I.E 4.0 or later version or Netscape Navigator 4.0 or later version
·One computer with an installed 10Mbps, 100Mbps or 10/100Mbps Ethernet card
·One Modem or ISDN TA (if a dialup backup connection is needed)
·One RJ-45 xDSL/Cable Internet connection
·TCP/IP protocol installed
·UTP network Cable with a RJ-45 connection
Unpacking Your RouteFinder
The RF550VPN shipping box contains the following items:
·The RouteFinder RF550VPN
·System CD
·Power Supply
·This Quick Start Guide
If any of the items is missing or damaged, please contact Multi-Tech Systems.