Multitech RouteFinder RF560VPN User manual

SOHO Internet Security Appliance
RF560VPN
User Guide

User Guide
RouteFinder SOHO Internet Security Appliance
RF560VPN
PN S000302A Revision A
Copyright © 2003
This publication may not be reproduced, in whole or in part, without prior expressed written permission
from Multi-Tech Systems, Inc. All rights reserved.
Multi-Tech Systems, Inc. makes no representations or warranties with respect to the contents hereof
and specifically disclaims any implied warranties of merchantability or fitness for any particular
purpose. Furthermore, Multi-Tech Systems, Inc. reserves the right to revise this publication and to
make changes from time to time in the content hereof without obligation of Multi-Tech Systems, Inc. to
notify any person or organization of such revisions or changes.
Revision Date Description
A08/18/03 Initial release.
Trademarks
The Multi-Tech logo is a trademark of Multi-Tech System, Inc. Windows is a trademark of
Microsoft. All other trademarks are owned by their respective companies.
World Headquarters
Multi-Tech Systems, Inc.
2205 Woodale Drive
Mounds View, Minnesota 55112
[phone] or [phone]
Fax [phone]
Internet Address: http://www.multitech.com

Contents
Chapter 1 – Introduction and Description .............................................................................. 5
Key Features ...................................................................................................................... 5
RouteFinder Documentation ............................................................................................... 7
RF560VPN Front Panel ...................................................................................................... 8
RF560VPN Back Panel....................................................................................................... 9
Chapter 2 – Installation...........................................................................................................10
Safety Warnings ................................................................................................................10
System Requirements .......................................................................................................10
Unpacking Your RouteFinder.............................................................................................10
Cabling Your RouteFinder .................................................................................................11
Chapter 3 – Configuring the PC .............................................................................................12
Chapter 4 – Navigating the Screens ......................................................................................19
Chapter 5 – Configuring the RouteFinder Using a Web Browser ........................................20
About the Browser Interface...............................................................................................20
Setup Wizard .....................................................................................................................22
Chapter 6 – Managing the RouteFinder Using a Web Browser............................................39
Device Information.............................................................................................................39
Device Status ....................................................................................................................40
Advanced Settings.............................................................................................................42
System Tools.....................................................................................................................52
Chapter 7 – Troubleshooting .................................................................................................60
Chapter 8 – Frequently Asked Questions .............................................................................63
Appendix A – Specifications ..................................................................................................66
Appendix B – Installing TCP/IP ..............................................................................................67
Appendix C – Tools for Your RF560VPN...............................................................................69
PING..................................................................................................................................69
WINIPCFG and IPCONFIG................................................................................................69
TRACERT..........................................................................................................................69
Appendix D – Warranty and Repairs .....................................................................................70

Appendix E – Regulatory Compliance Information ..............................................................72
FCC Part 15 Regulation.....................................................................................................72
EMC, Safety, and R&TTE Directive Compliance................................................................73
Other Approvals.................................................................................................................73
Appendix F – Technical Support............................................................................................74
Glossary ..................................................................................................................................76
Index ........................................................................................................................................81

Chapter 1 – Introduction and Description
Multi-Tech Systems, Inc. RF560VPN User Guide 5
Chapter 1 – Introduction and
Description
Welcome to the world of Internet security. Your Multi-Tech SOHO RouteFinder VPN Internet security
appliance, Model RF560VPN, is ideal for the small branch office or telecommuter who needs secure
access to the corporate LAN.
In addition to providing a WAN Ethernet port for DSL or cable broadband Internet access, it also offers
both client-to-LAN and LAN-to-LAN connectivity based on the IPSec protocol. The SOHO RouteFinder
supports up to 10 IPSec tunnels and provides 3DES encryption with 1.5 Mbps throughput.
The RF560VPN is a cost-effective, easy-to-manage solution that is ideal for small- to medium-sized
businesses through the use of Network Address Translation (NAT). Since NAT provides for the
sharing of a single connection, you save the cost of multiple Internet accounts. See the Glossary for
more about NAT.
Key Features
·One WAN Ethernet port connects to a DSL or cable modem for shared Internet access.
·Supports up to 10 IPSec VPN tunnels for secure LAN-to-LAN and Client-to-LAN access over the
Internet.
·3DES encryption throughput of 1.5 Mbps.
·Built-in 4-port 10/100M bps switch.
·Built-in firewall and DHCP services with Network Address Translation (NAT).
·Protects your LAN against Denial of Service (DoS) attacks.
·Internet access controls provide client and site filtering.
·Asynchronous port for automatic dial-backup.
·Network monitoring allows the network administrator to view all incoming and outgoing packets,
status of connections, and specific connection events via a Syslog server.
·Configuration and management using any Web browser.
·Works with H.323 Voice over IP products including Multi-Tech MultiVOIP gateways or Microsoft
NetMeeting.
·PPPoE support.
·Supports Windows Plug and Play
·Flash memory allows easy firmware upgrades.
·IP address mapping/port forwarding.
·Two-year warranty.

Chapter 1 – Introduction and Description
Multi-Tech Systems, Inc. RF560VPN User Guide 6
·Secure VPN Connections. The SOHO RouteFinder VPN uses the IPSec industry standard
protocol, data encryption, and the Internet to provide high-performance, secure VPN connections.
·For LAN-to-LAN connectivity, the RouteFinder utilizes the IPSec protocol to provide up to 10
tunnels with strong 168-bit 3DES encryption using IKE and PSK key management. In addition, it
provides very high performance with 1.5 Mbps with 3 DES encryption throughput.
·For Client-to-LAN connectivity, Multi-Tech provides optional IPSec client software allowing
traveling employees and telecommuters secure access to the company’s internal network.
·Network Security Protection. Protects a network from invalid access.
·Prevention of DoS (Denial of Service) – Prevents the consequences of the Denial of Service,
such as network traffic congestion or ping of death.
·Hacker Attack Logging – Supports general hacker attack pattern monitoring and logging.
·Filtering – Prevents unauthorized packets from entering or leaving the local network.
·Connects up to 253 Users to the Internet with Broadband Speed. With the SOHO
RouteFinder VPN, up to 253 users are connected to the Internet with only one IP account.
·LAN Segmentation. For added LAN security, the RouteFinder can be used to segment the LAN
by connecting the corporate servers to one RouteFinder Ethernet port and the Internet Servers to
the other Ethernet port. This configuration puts the corporate servers behind a firewall and the
Internet servers outside the firewall. To continue to provide Internet access, connect a modem or
ISDN terminal adapter to the RouteFinder’s asynchronous port.
·Can Be Configured as a DHCP Server. The SOHO RouteFinder VPN can be configured as a
DHCP server to handle request for Internet services and route to and from the ISP. Server and
Client features include:
DHCP Server – Automatically assigns IP information to the network users.
DHCP Client – Automatically gets IP information from the ISP DHCP server.
PPPoE Client – Supports PPPoE client function to connect to the remote PPPoE server.
Idle Time – Lets you set a specified idle-time before automatically disconnecting.
Dial-on-Demand – Eliminates the need for dial-up; automatically logs to your ISP.
The RouteFinder RF560VPN

Chapter 1 – Introduction and Description
Multi-Tech Systems, Inc. RF560VPN User Guide 7
RouteFinder Documentation
The Quick Start Guide
The Quick Start Guide is a shorter version of this User Guide. It is included in printed form with your
RF560VPN. Both guides are intended to be used by systems administrators and network managers.
They provide the necessary information for a qualified person to unpack, cable, and configure the
device for proper operation.
This User Guide
The User Guide can be installed from the CD by clicking Install Manuals on the Installation screen or
downloading the file from our Web site at: http://www.multitech.com
Save or Print the User Guide
Once the User Guide is displayed on screen using Adobe Acrobat Reader, you can save the .pdf file
to your system or print a copy.
Setup Examples and Other Helpful Documents
There are five reference documents to help you setup and use your RF560VPN.
These reference guides are located on the CD that accompanies your RouteFinder and also on
the Multi-Tech Web site.
Description of the Setup Examples
1. Setup Examples for the RF560VPN.
The four examples show:
·A LAN-to-LAN VPN configuration between two RF560VPNs. One at Site A and one at Site
B. Both RouteFinders use static IP address at their WAN port gateways.
·A LAN-to-LAN VPN configuration between an RF560VPNs at Site A that uses a static IP
through its WAN port and an RF560VPN at Site B that uses a dynamic IP address through
its WAN port.
·A LAN-to-LAN VPN configuration between an RF560VPN at Site A that uses a static IP
address at the WAN port and an RF560VPN at Site B that uses dynamic IP addressing
through a modem connected to the serial port.
·A Client-to-LAN configuration between an RF560VPN at Site A and an SSH IPSec Client.
Each example includes a diagram, a summary chart of input values, an address table you can use
to keep track of your values, and explanations of the Web interface screens.
2. RF560VPN Using a NAT Box with an IPSec Pass-Through.
The two example show:
·SSH Sentinel IPSec client behind a NAT box doing IPSec Pass-Through to an RF560VPN.
·An RF560VPN behind a NAT box doing IPSec Pass-Through to another RF560VPN.
3. RF560VPN File Sharing across VPN.
4. Configuring IPSec Tunneling in Windows XP or 2000 and Connecting to an RF560VPN.
5. Advanced Settings - five examples.
6. FQDN and DDNS Examples.

Chapter 1 – Introduction and Description
Multi-Tech Systems, Inc. RF560VPN User Guide 8
RF560VPN Front Panel
RF560VPN Light Panel
LEDs Description
Link ACT Lights when the LAN client is correctly connected to the Ethernet port. Blinks
when there is activity on the Ethernet port.
100/10 Lights when the LAN client is connected at 100MB.
Off when the LAN client is connected at 10MB.
FDX COL
Lights when the LAN client is connected as full duplex.
Off when the LAN client is connected as half duplex. Blinks when there are
collisions on the network.
Serial Data Blinks when the Serial async port is receiving or transmitting data.
Serial DCD Lights when the Serial async port is properly connected to a remote site.
WAN 100 Lights when a successful connection to the 100BaseT WAN is established.
Off when connected to the 10BaseT.
WAN Link /
ACT
Lights when the LAN port has a valid Ethernet connection. Blinks when it is
receiving or transmitting data.
Status Blinks when it is starting, saving the configuration, or performing a firmware
update. Normally, it should be off.
Power Lights when power is being supplied to the router.

Chapter 1 – Introduction and Description
Multi-Tech Systems, Inc. RF560VPN User Guide 9
RF560VPN Back Panel
RF560VPN Back Panel
12VDC Power The power port connects the AC power adapter.
10/100 BT WAN
(10/100BaseT)
The WAN port connects the xDSL modem or cable modem.
Serial The Serial port connects a standard modem (optional).
Reset
The Reset button resets the router to factory defaults. Press and hold the Reset
button until the Status LED of the RF560VPN blinks, and then release it. Do not
press this button unless you want to restore all settings to the factory defaults.
Ports 1 - 4 There are 4 LAN ports. You can connect network devices such as PCs, FTP
servers, printers, or other devices you want to put on your network.

Chapter 2 – Installation
Multi-Tech Systems, Inc. RF560VPN User Guide 10
Chapter 2 – Installation
Safety Warnings
1. Never install telephone wiring during a lightning storm.
2. Never install telephone jacks in a wet location unless the jack is specifically designed for wet
locations.
3. This product is to be used with UL and cUL listed computers.
4. Never touch uninsulated telephone wires or terminals unless the telephone line has been
disconnected at the network interface.
5. Avoid using a telephone during an electrical storm. There may be a remote risk of electrical
shock from lightening.
6. Do not use the telephone to report a gas leak in the vicinity of the leak.
7. To reduce the risk of fire, use only No. 26 AWG or larger Telecommunications line cord.
System Requirements
·Microsoft I.E 5.5 or later version or Netscape Navigator 7.0 or later version
·One computer with an installed 10Mbps, 100Mbps or 10/100Mbps Ethernet card
·One Modem or ISDN TA (if a dialup backup connection is needed)
·One RJ-45 xDSL/Cable Internet connection
·TCP/IP protocol installed
·UTP network Cable with a RJ-45 connection
Unpacking Your RouteFinder
The RF560VPN shipping box contains the following items:
·The RouteFinder RF560VPN
·One RF560VPN System CD
·Power Supply
·A Quick Start Guide
If any of the items is missing or damaged, please contact Multi-Tech Systems.