ShareTech SG-100N Use and care manual

Conventions Used in This Book
1
LAN default IP and Password
IP Address
192.168.1.1
Account / Password
admin / admin
ShareTech Security Gateway
SG-100N Administrator Manual
Version 6.1.9

Conventions Used in This Book
2
Table of Contents
CONVENTIONS USED IN THIS BOOK.............................................................. 5
CHAPTER 0：DESCRIPTION........................................................................... 6
0-1 HARDWARE OVERVIEW ............................................................................................................... 7
0-2 FRONT PANEL ........................................................................................................................... 8
0-3 REAR PANEL ............................................................................................................................. 9
0-4 SYSTEM SETTING...................................................................................................................... 14
0-5 SETTING INTERNAL AND EXTERNAL NETWORK................................................................................. 16
0-6 HOMEPAGE INFORMATION ........................................................................................................ 20
CHAPTER 1：CONFIGURATION ................................................................... 23
1-1 DATE &TIME.......................................................................................................................... 24
1-2 ADMINISTRATION..................................................................................................................... 26
1-3 SYSTEM.................................................................................................................................. 37
1-4 PACKAGE................................................................................................................................ 40
1-5 LANGUAGE ............................................................................................................................. 41
1-6 NOTIFICATION ......................................................................................................................... 42
1-7 BACKUP &MOUNT .................................................................................................................. 45
1-8 SIGNATURE UPDATE ................................................................................................................. 48
1-9 CMS..................................................................................................................................... 49
1-10 AP MANAGEMENT ................................................................................................................. 52
1-11 SSL PROOF........................................................................................................................... 57
1-12 MYCLOUD SETTING................................................................................................................ 59
CHAPTER 2：NETWORK .............................................................................. 80
2-1 INTERFACE.............................................................................................................................. 81
2-2 INTERFACE (IPV6).................................................................................................................... 95
2-3 ROUTING................................................................................................................................ 98
2-4 802.1Q .............................................................................................................................. 101

Conventions Used in This Book
3
CHAPTER 3：POLICY ................................................................................. 105
3-1 WIFI POLICY ......................................................................................................................... 106
3-2 LAN POLICY ......................................................................................................................... 106
3-3 DMZ POLICY ........................................................................................................................ 108
3-4 WAN POLICY........................................................................................................................ 108
CHAPTER 4：OBJECTS.............................................................................. 109
4-1 ADDRESS TABLE..................................................................................................................... 110
4-2 SERVICES.............................................................................................................................. 119
4-3 SCHEDULE ............................................................................................................................ 123
4-4 QOS.................................................................................................................................... 126
4-5 APPLICATION CONTROL........................................................................................................... 129
4-6 URL FILTER .......................................................................................................................... 133
4-7 VIRTUAL SERVER.................................................................................................................... 138
4-8 FIREWALL PROTECTION ........................................................................................................... 143
4-9 AUTHENTICATION .................................................................................................................. 146
4-10 BULLETIN BOARD ................................................................................................................. 161
CHAPTER 5：NETWORK SERVICES ........................................................... 166
5-1 DHCP ................................................................................................................................. 167
5-2 DDNS................................................................................................................................. 170
5-3 DNS PROXY.......................................................................................................................... 172
5-4 SNMP ................................................................................................................................ 175
5-5 REMOTE SYSLOG SERVER......................................................................................................... 177
CHAPTER 6：IDP ....................................................................................... 185
6-1 IDP SETTING......................................................................................................................... 186
6-2 IDP LOG .............................................................................................................................. 188
CHAPTER 7：SSL VPN ............................................................................... 189
7-1 SSL VPN SETTING ................................................................................................................. 190
7-2 SSL VPN LOG....................................................................................................................... 196

Conventions Used in This Book
4
7-3 VPN POLICY ......................................................................................................................... 197
7-4 SSL FROM YOUR ANDROID PHONE ............................................................................................ 199
CHAPTER 8：VPN ...................................................................................... 209
8-1 IPSEC TUNNEL ...................................................................................................................... 210
8-2 PPTP SERVER ....................................................................................................................... 216
8-3 PPTP CLIENT ........................................................................................................................ 222
8-4 VPN POLICY ......................................................................................................................... 223
CHAPTER 9：TOOLS.................................................................................. 226
9-1 CONNECTION TEST ................................................................................................................. 227
9-2 PACKET CAPTURE................................................................................................................... 234
CHAPTER 10：LOGS .................................................................................. 241
10-1 SYSTEM OPERATION ............................................................................................................. 242
CHAPTER 11：STATUS .............................................................................. 245
11-1 PERFORMANCE.................................................................................................................... 246
11-2 CONNECTION STATUS ........................................................................................................... 249
11-3 FLOW ANALYSIS................................................................................................................... 252

Conventions Used in This Book
5
Conventions Used in This Book
The following typographical conventions are used in this book
Content Style
Menu > Submenu > Right Side Banner Selections
e.g. Configuration > Administrator > System Setup
Constant width bold
Indicates chapter and section
"Italic"
"Indicates user input examples."
This icon indicates a tip, or suggestion. I would like to tell users a special point on the
Internet.
This icon indicates a limited or caution. Pay attention to these to avoid running into system.
This icon indicates an example. Give users examples and to show how to use.

Chapter 0：Description
6
Chapter 0：Description
In this chapter, it will not only tell you how to install and connect your network system but also
configure and monitor it. Many explanations in detail functions are shown as well as the examples
of the operation for interface. In the description chapter you can enable the following lists：
․0-1 Hardware Overview
․0-2 Front Panel
․0-3 Rear Panel
․0-4 System Setting
․0-5 Setting internal and external network
․0-6 Homepage Information

Chapter 0：Description
7
0-1 Hardware Overview
Integration between firewall and NAS
Unlike the traditional way building a gateway firewall and then installing shared storage space via
NAS or Network Neighborhood, ShareTech SG-100N is a gateway device integrated NAS into
firewall, protecting user’s network against threats from web activities with URL filtering. Users
can define search by keywords and sort options. Filtering conditions can be applied by time to
control over network access and usage to avoid threats from external networks. SG-100N
simplifies SMB network environments and provides IT staff a cloud-managed networking
solution.
SG-100N
Dimensions(wide*long*high) :232*152*44mm
Custom Port (Fixed LAN & WAN1), 2G memory
320G HDD
SG-100N with WiFi
Dimensions(wide*long*high) : 232*152*44mm
Custom Port (Fixed LAN & WAN1), 2G memory,
320G HDD
2dBi, 3T3R, 802.11b/g/n

Chapter 0：Description
8
0-2 Front Panel
Figure 0-2. 1 Front Panel
Model Name：please see the Figure 0-2.1(Figure 0-2.1)
Appliance LED Behavior
LED
State
Description
POWER
Blinking
ShareTech appliance is activity
Green
ShareTech appliance in ON
Off
Take off adapter power(+12V DC)
HDD
Flashing Amber
Activity going on
Off
No activity
Ethernet Ports
Flashing Green(Right)
The port is linking and active in data
transmission.
Green(Left)
Correct cable is used and power is on port
Off
Power is not on port.

Chapter 0：Description
9
0-3 Rear Panel
Figure 0-3. 1 Rear Panel
Power supply: +12 DC in
Console Port: By using RJ-45 to DB-9 Female cable, you can connect to a computer terminal for
diagnostic or configuration purpose. Terminal Configuration Parameters: 115200 baud Rate, 8
data bits, 1 stop bit, no parity, XON/XOFF flow control. A console port for inspecting settings
remotely or, if needed, resetting the device to factory default.
USB 2.0 Ports: It can connect to any USB devices, for example, a USB flash drive.
Reset Button: It is a button to reset system.
Ethernet Ports:
1. LAN: Connects to the intranet.
2. WAN: Connects to the perimeter router.

Chapter 0：Description
10
Appliance Ethernet Ports Behavior:
LED
State
Description
Ethernet Ports
Flashing Amber(Left)
The port is linking and active in data
transmission.
Amber(Left)
Correct cable is used and power is on port
Off(Left)
Power is not on port.
Amber(Right)
Port is connected at the 100 Mbps
Green(Right)
Port is connected at the 1000 Mbps
Off(Right)
Power is not on port.
Please confirm the correct installation and connection. If power LED light does not glow,
please shut down the appliance. After several minutes had passed, please reboot the
appliance again. If LED light is still not lit, please feel free to call [phone] / Skype:
sharetech_tc and contact with us while the appliance is still under warranty.
How to use condole cale:
The SG-100N can be configured via the "Console" port located on the SG-100N’s Rear panel using
a terminal-emulation program (e.g. HyperTerminal). (Figure 0-3.3)
Please purchase USB to RS232/DB9 Serial Cable and download its driver (Figure 0-3.2)
Here is an example,
USB to RS232/DB9 Serial Cable Driver, please note your OS before download.
http://www.tri-plc.com/USB-RS232/drivers.htm
Figure 0-3. 2 RS232/DB9

Chapter 0：Description
11
Figure 0-3. 3 using console
Downlaod PuTTY:
http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
Use the following configuration settings for terminal-emulation programs: (Figure 0-3.4)
Figure 0-3. 4 PuTTY Configuration

Chapter 0：Description
12
Please check your COM and LPT(Figure 0-3.5)
Figure 0-3. 5 USB-SERIAL
Enter Information: (Figure 0-3.6)
Choose "serial"
Serial line: COM(?), please refer to Figure 0-3.5, and enter your COM number.
Speed : 115200
Choose "Open"
Figure 0-3. 6 Serial line

Chapter 0：Description
13
Console Screen: (Figure 0-3.)
MY LAN IP IS 192.168.1.1: it shows current LAN IP
admin_pw_def: reset your login User Name and Password to be default(admin/admin)
admin_ip_def: reset your IP to be 192.168.1.1
Apache_port: shows http and https port
Restart: reboot SG-100N and every setting still exist on equipment.
Poweroff: shutdown SG-100N.
Figure 0-3. 7 Console Screen

Chapter 0：Description
14
0-4 System Setting
Deployment
Your PC connect the device’s LAN port directly or, with the same hub / switch, and launch a web
browser (ex. Internet Explorer, Mozilla Firefox, or Chrome) to access the management interface
address which is set to http://192.168.1.1 by default. Therefore, the IP addresses of LAN PCs must
be configured within the range between 192.168.1.2 and 192.168.1.254 inclusively, and assigned
the subnet mask of 255.255.255.0. (Figure 0-4.1)
Figure 0-4. 1 Deployment
Start Browser and Enter Login User Name / Password
Open the IE browser; enter 192.168.1.1 in the address bar. (Figure 0-4.2)
Browser will pop up for authentication, please enter admin (username) / admin (password) to login.
Figure 0-4. 2 Start Browser and Enter Login User Name / Password

Chapter 0：Description
15
Login completed (Figure 0-4.3)
Figure 0-4. 3 Login completed
Change Language
Default management interface language is English. Select Configuration > Language > Language.
Then, there are three languages, English, Traditional Chinese, and Simplified Chinese. Select one
language which belongs to you. Click on . (Figure 0-4.4)
Figure 0-4. 4 Change Language

Chapter 0：Description
16
0-5 Setting internal and external network
In this section, follow two parts below, LAN setup and WAN setup, and to start machine up.
When configure a new LAN interface address accordingly. If the company’s LAN IP address is
not belong to subnet of 192.168.1.0/24 (default), and then the Administrator must
add/change PC IP address to be within the same range of the LAN subnet. (Figure 0-5.1)
For example, to add multiple IP address (192.168.1.2) in “LAN connection”you’re your
computer.
Figure 0-5. 1 Advanced TCP/IP settings
For your reference, you may configure your management address based on the available
subnet ranges below: 10.0.0.0 ~ 10.255.255.255,
172.16.0.0 ~ 172.31.255.255,
192.168.0.0 ~ 192.168.255.255

Chapter 0：Description
17
Setting Internal Network
Select Network > Interface > Port 1, and Interface Type is LAN. (Figure 0-5.2)
Administrator clicks on Network > Interface > Port 1 (LAN) to enter internal network information. At
last, click on “save” to complete the setup.
Figure 0-5. 2 LAN Interface
Note: If the management interface is assigned with a different IP address, the management
interface will only become accessible from a web browser using the new IP address.
Setting External Network
Select Network > Interface > Port 2, and Interface Type is WAN1. (Figure 0-5.3)
Administrator clicks on Network > Interface > Port 2 (WAN) to enter external network information.
At last, click on “save” to complete the setup.
Figure 0-5. 3 external Network

Chapter 0：Description
18
Step 1: Network > Interfaces > Port 2 (WAN) (Figure 0-5.4) (Figure 0-5.5)
Figure 0-5. 4 WAN 1 Setting
Figure 0-5. 5 WAN1 Connection Type
Step 2: Port 2 (WAN) Alive Detection(Figure 0-5.6)
Figure 0-5. 6 WAN1 Alive Detection

Chapter 0：Description
19
Step 3: General Setting on Port 2 (WAN) (Figure 0-5.7)
Figure 0-5. 7 General Setting on Port 2
Step 4: After finish configuring LAN and WAN, SG-100N setup is successful.

Chapter 0：Description
20
0-6 Homepage Information
Menu Bar
From top of the screen, menu bar, you can know different models depend on the different colors.
SG series is Blue color. (Figure 0-6.1)
Figure 0-6. 1 Menu Bar
MENU
On the other hand, from the left side of the screen, MENU, it shows difference depend on the
different models.
Figure 0-6. 2 Menu
System Time and System Resource
It shows Server 1-1 Date & Time and 11-1 Performance. In addition, it displays the CPU, Memory,
Flash, and HDD simultaneously. (Figure 0-6.3)
Figure 0-6. 3 System Time and System Resource