SSL VPN Products catalog534.docx
- 文档编号:10963525
- 上传时间:2023-02-24
- 格式:DOCX
- 页数:30
- 大小:927.06KB
SSL VPN Products catalog534.docx
《SSL VPN Products catalog534.docx》由会员分享,可在线阅读,更多相关《SSL VPN Products catalog534.docx(30页珍藏版)》请在冰豆网上搜索。
SSLVPNProductscatalog534
CONTENT
AboutthisGuide1
Chapter1:
BeforeYouInstall3
Servermode3
Gatewaymode4
Chapter2:
HardwareInstallation6
Requirementsofenvironment6
Productappearance6
Chapter3:
SSLVPNSoftwareConfiguration7
AccessingtheM5x00-S7
Fastconfiguration9
Chapter4:
SSLVPNQuickStart11
Usermanagement12
Resourcemanagement15
Webresource15
APPresource17
IPresource18
Rolemanagement20
GuideToEndUser24
Requirementsofenvironment24
Operatingproceduresforfirstuse(IEasexample)25
SSLVPNStartedGuide
AboutthisGuide
TheM5x00-SGettingStartedGuideprovidesthebasicinformationneededforsettinguptheM5x00-SandinitiallyconfiguringtheM5x00-Ssoftware.
Chapter1:
BeforeYouInstallcoversinformationyouneedtoknowbeforeyousetupyourM5x00-S,suchasdeterminingadeploymentstrategyandfillinginthepre-installationchecklist.
Chapter2:
HardwareInstallation(M5100-S,M5400-S,M5500-S,M5600-S,M5800-S)includesinstructionsandillustrationstohelpyoutoconnectyourM5x00-Stothenetwork.
Chapter3:
M5x00-SSoftwareConfigurationexplainshowtoinitiallyconfiguretheM5x00-Ssoftwareandmodifythesettingsafterinstallation.
Chapter4:
M5x00-SQuickStarttellsyouhowtoquicklybecomeproductivewithyourM5x00-S.ThischapterprovidesbasicinstructionsonusingaM5x00-Stoclassifytraffic,analyzeapplicationandnetworkperformance,andsolveperformanceproblems.Forcompletedetailedinformation,seePacketGuide(describedonnextpage).
Chapter5:
GuidetoEndUserthispartdescribestheinstallationanduseofSSLVPNclientend.
OtherResourcesOnlineHelpThePacketWisebrowserinterfacecontainscontext-sensitivehelpwithsufficientdetailtoassistyouinsettingupandmaintainingconfigurations.Toaccesshelp,clickthe【Help】buttonandcontext-sensitivehelpwilldisplayinaseparatewindow.Thecommand-lineinterface(CLI)alsohasonlinehelp,whichprovidescommandsyntaxdetails.
Chapter1:
BeforeYouInstall
Introduction:
ThisguidecoverstheinstallationandsetupofthefollowingSINFORproducts:
M5x00-S:
TheM5x00-SisthephysicalplatformthatsupportsSINFOR’sSSLVPNcomponents.
AdministratorTools:
anadministratorconfigurationtool,anauxiliarytoolusedforimplementingM5x00-Sconfigurations.
Beforeyouproceedtohardwareandsoftwaresetup,youneedtoconsiderthefollowing:
Yourplacementstrategy—It’simportanttoknowwhereyouwillinstalltheM5x00-Sinyournetwork.
M5x00-Ssupportstwodeploymentmodes:
GatewaymodeandServermode.
Servermode
M5x00-SisconnectedtointranetviaLANportandservesasaserverofintranet,itprovidesSSLVPNfunctionsonly.Frontal-endfirewallorrouterallowsextranetuserstoaccess80or443portsofM5x00-Sthroughportmappingorvirtualservice.Serverdeploymentmodeiseasier,itminimizesthechangetowardoriginalnetwork,andbringsnoimpacttheoriginalnetexits.Seethetopologicalgraphbelow.
Notes:
port443mustbemappedinTCPportmappingoffrontal-endfirewallorrouter,port443needstobemapped,anditisrecommendedbothports80and443bemapped,otherwiseyouwillhavenowaytoskiptohttpsbyvisitinghttp,butaccessitbyenteringhttpsdirectly.
Pre-InstallationChecklistforServerMode:
Whileinservermode,pleaseobtainthefollowinginformationbeforetheinstallation:
Parameter
Description
YourSetting
LANIPAddress
IPaddresstobeassignedtotheM5x00-S,forexample10.254.254.254
Consultyournetworkadministratortoobtainan
unassignedaddress.
NetMask
SubnetmaskforthesubnetonwhichtheM5x00-Sresides,forexample255.255.255.0
DNSAddress
Whileinservermode,WANportisconfiguredasEthernetmode,butnolineisconnected.IPofWANportissetnottoobtainIPwithinLANportsegment.Forexample,IPofLANportis10.254.254.254/24,soWANportcanbespecifiedas132.132.132.132/24,WANportmustbeconfiguredwithcorrectDNS,WANgatewayIPis0.0.0.0.
Gateway
IPaddresstheM5x00-Susestoreachothernetworks.
Whileinservermode,WANportisconfiguredasEthernetmode,andnolineisconfigured.IPofWANportcanbetypedasyoulike,butDNSmustbecorrect,WANgatewayIPis0.0.0.0.Gatewayneedstobetypedinsystemrouter.Forexample,ifGatewayIPis10.254.254.1,therouter0.0.0.0/0.0.0.0gateway10.254.254.1mustbeaddedtosystemrouterofM5x00-S.
Notes:
whileinservermode,adefaultroutermustbeaddedtosystemrouterofm5x00-s,WANportissetasEthernetmode,butnolineisconnected.IPofWANportissetnottoobtainIPwithinLANportsegment.Forexample,IPofLANportis10.254.254.254/24,soWANportcanbespecifiedas132.132.132.132/24,WANportcanbetypedas132.132.132.132/24,WANportmustbeconfiguredwithcorrectDNS,WANgatewayIPis0.0.0.0.
Gatewaymode
M5x00-SshouldersSSLVPNfunction,italsoassumesgatewayfunctionsincludingproxyorrouter.Whileingatewaymode,WANportofM5x00-Sisconnectedwithextranetrouter,whileLANportconnectedwithintranetrouter.WithinLANcomputers’gatewayspointtoLANportIPofM5x00-Sor3-layerswitchandgatewayof3-layerswitchpointsbacktoM5x00-S.ThedataflowingfromintranettoextranetwillbeforwardedbyM5x00-SgatewayactingasNATorrouter.,Seetopologicalgraphbelow:
Notes:
InthistopologicalgraphtherearetwonetworksinLAN,if3-layerswitchIPis10.254.254.1,therouter192.168.1.0/255.255.255.0and192.168.2.0/255.255.255.0gateway10.254.254.1mustbeaddedtosystemrouterofM5x00-S.
Pre-InstallationChecklistforGatewayMode
Whileingatewaymode,pleasefirstobtainthefollowinginformationbeforeyouinstall:
Parameter
Description
YourSetting
LANIPAddress
IPaddresstobeassignedtotheM5x00-S,forexample10.254.254.254
Consultyournetworkadministratortoobtainan
unassignedaddress.
NetMask
SubnetmaskforthesubnetonwhichtheM5x00-Sresides,forexample255.255.255.0
WANConfig
IfyouaccesstoInternetviaafixedIP,youarerequiredtotypetheIPandgatewaythatISPallocated;ifyouaccesstoInternetbyDSLdial,youmustenterthedialaccountNo.andpassword.
Notes:
whileingatewaymode,youalsoneedtypeintranetsegmentsinthecolumn“ProxySetup”of“NATsetup”of“Firewall”,sothatintranetuserscouldsurfInternetviaM5x00-S.
Chapter2:
HardwareInstallation
Introduction:
ThischapterdescribeshowtoinstallM5x00-Sintoyournetwork.
Requirementsofenvironment
SSLVPNdevicecanbeusedinthefollowingenvironment.
1Inputvoltage:
110V~230V
1Temperature:
-10~50℃
1Humidity:
5~90%
Inordertoensuresteadyandsustainablerunofsystem,soundgrounding,strictdustproofmeasures,goodventilationandstableroomtemperatureshouldbemaintained.Thisproducthassatisfiedtherequirementsofenvironmentprotectionondesign,itshandling,useandscrapemustcomplywithrequirementsofapplicablelawsandlegislations.
SINFORSSLVPNseriesusesAC110Vand230Vpowersupply,pleasemakesurethegroundingissoundbeforeswitchingonthepower.
Productappearance
M5x00-Sserieshasfull-steelcabinet,withfrontalpanelcoveredwithfilm,seefigurebelow:
Figure1:
SINFORSSLVPNgatewaypanel(M5100-Sasexample)
Infrontalpanel,consoleportisusedforshortmessageverificationordualmachineconnection(fordetailsrefertoadvancedguidetoadministrator).ItprovidesaspareUSBport,itstandsbyinM5x00-Sseries.
Figure2:
SINFORSSLVPNgatewayrearpanel(M5100-Sasexample)
●Insertpowercordintorearpanel,turnonthepower,boththePowerindicator(green)andtheAlarmlight(red)willilluminate,andalarmlightwillturnoffin1-2minutes,indicatinggatewayworkswell.Powerindicatorkeepsonwhilethegatewayruns.
●ConnectLANportwithintranetLANusingstandardRJ-45Ethernetwire,configureSSLVPNbysettingupIE.
●WhileinGatewayMode,connectWAN1withInternetaccessdevicesuchasrouter,opticfibertransceiverorADSLModemusingstandardRJ-45Ethernetwire.
Notes:
thealarmlightwillkeeponduringstart-upprocess,ingeneral,thisredlightwillturnsextinctin1-2minutes,thismeansthatthedevicehasbeenstartedupnormally.Sometimestheredlightmayblinkafterstart-up,indicatingthedeviceiswritingsystemlogs.Multi-lineSSLVPNcansupportInternetline,themoment,wecanconnectWAN2portwiththesecondInternetaccessdevice,WAN3withthethirdInternetline,soonandsoforth.
Chapter3:
SSLVPNSoftwareConfiguration
BeforeYouBegin
AfteryouinstalltheM5x00-Sintoyournetwork,youneedtoconfiguretheM5x00-Ssoftware.
AccessingtheM5x00-S
TherearetwowaystoaccesstheM5x00andconfiguretheM5x00-Ssoftware:
AccessingM5X00-SWithaBrowser
1.YoushouldhaveabrowsersuchasInternetExplorertoconfigurethissoftware.ThesettingscanbeaccessedusingtheEnglishversionsofthefollowingwebbrowsers:
•MicrosoftInternetExplorerv5.5orhigher(WindowsNT,2000,orXP)
•Besureyourwebbrowserisconfiguredasfollows:
•Settoacceptcookies,thedefaultsettingformostwebbrowsers.
•JavaScrIPtenabled.
everyvisittothepageinInternetExplorer.AsyoumodifyM5x00-Sconfigurationsinthebrowserinterface,thebrowsermustupdatethepageeachtimeratherthandisplayingthedataalreadystoredinthecache.
2.Startyourbrowser,thenentereitherthefactory-setIPaddresshttp:
//10.254.254.254:
1000
Note:
defaultconfigurationsofM5x00-SLANare10.254.254.254/24,portis1000.FirstconfigureanIPaddressofthesameM5X00-Sandthesamesegment,e.g.10.254.254.100/24,sothatbrowsercouldproperlyconnectM5x00-s.
UseM5x00-Sfindme
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- SSL VPN Products catalog534
![提示](https://static.bdocx.com/images/bang_tan.gif)