Telkm VPN-Lite ruter setup User Manual Billin 800VGT
Cntents 1. Intrductin... 3 2. Befre yu start... 4 3. VPN-Lite Setup Using Windws Utility... 5 4. VPN-Lite Setup using yur web brwser... 7 5. VPN-Lite Manual Setup Using Telnet... 11 6. Firmware Upgrade... 15 TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 2
Intrductin Welcme t the Telkm VPN Lite ruter setup user manual. In this manual yu will receive infrmatin n hw t setup the Telkm VPN Lite service n yur Billin 800VGT using the setup utility, the ruter s graphical user interface (GUI) and Telnet cmmands (advanced user nly). T ensure that the utility wrks crrectly please temprarily disabled all sftware firewall applicatins. These applicatins may interfere with the prcesses needed t successfully cmplete the ruter setup. Examples f these applicatins/prgrams include: Nrtn, PC-Cillin, Bit Defender, McAfee. TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 3
Befre yu start This manual assumes that the Billin 800VGT is in its factry default state. Thus: LAN IP = 10.0.0.2 It is recmmended t use the utility t setup VPN-Lite n yur Billin 800VGT. The ruters graphical user interface r manual setup methd is t be used by experienced users nly. Please ensure that yur pc has DHCP enabled. Register VPN-Lite service. T enable yu t cnfigure the Telkm VPN-Lite service n yur Billin Ruter yu first need t register fr the VPN-Lite service n the Telkm website (www.telkm.c.za). On the VPN-Lite registratin site yu will be able t cnfigure and manage yur VPN-Lite sites as shwn in the image belw. Here yu will retrieve vital infrmatin like site Usernames and LAN Subnets and Site Passwrd t cnfigure the VPN-Lite sites. In the belw setup sectins yu will be required t enter these values. Please ensure that yu have all the crrect infrmatin fr each site befre yu start any f the setup sectins mentined in this dcument. Belw is an image t shw yu what infrmatin n the VPN- Lite setup site needs t be retrieved t enable yu t setup yu VPN-Lite. Yu can find this screen in the Manage Sites sectin. TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 4
VPN-Lite Setup Using Windws Utility Yu can dwnlad the VPN-Lite utility prgram frm the VPN-Lite website by selecting the Dwnlad sectin. After yu successfully dwnladed the utility just run the file t start the setup prcess. On start up yu will be requested t prvide lgin infrmatin t cnnect t the ruter. By default the ruter lgin name will be admin and the lgin passwrd will be admin. The default IP address fr the ruter is 10.0.0.2 but if this has changed unselect the Use default IP check bx and enter the current IP address f yur ruter. After a successful lgin the fllwing screen will appear. Here yu can setup yur Internet Accunt infrmatin, VPN Lite and with the advance settings yu can change yur DHCP settings. TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 5
Internet Service Prvider Accunt Setup Select Activate Internet Accunt cnfiguratin tick bx t set yur Internet username and passwrd. Yu can nw enter yur ISP username and passwrd t cnnect t the internet. Yur service prvider will prvide yu with this infrmatin. VPN Lite Lcal Site Cnfiguratin Befre yu start with this sectin, please make sure yu have registered n the VPN-Lite service website and that yu have received yur VPN-Lite accunt and IP infrmatin fr the lcal site (this will be ne f yur branches r ffices where yu will install the VPN-Lite service). Please refer t the Befre yu start sectin in this dcument n page 4 fr additinal infrmatin. T change these settings select Activate VPN Lite cnfiguratin. By using the infrmatin retrieved frm the Telkm VPN-Lite setup website (see page 4) enter yur site username, site passwrd and site la nip range using the IP slash ntatin as it appears n the Telkm VPN-Lite website. Advance Settings In the advance settings yu can enable r disable the ruter s DHCP settings. Please remember that if yu disable the DHCP settings yu will lse cnnectin t yur ruter after the settings have been updated, as the static IP address wuld have been changed t anther IP range. Yu can als set yur DHCP start and end range. T save the settings press Save Settings and wait fr the applicatin t cmplete the setup prcess. TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 6
VPN-Lite Setup using yur web brwser This sectin will guide yu thrugh the relevant steps t setup yu VPN-Lite service using the ruters graphical user interface. Cnnectin t the ruter using yur web brwser Open a web brwser like Internet Explrer r Firefx. In the internet address bar type in http://10.0.0.2 and press enter. Yu will be prmpted t supply a username and passwrd. The user name is admin and the passwrd is admin. Setup yur VPN-Lite After the ruter s graphical user interface was successfully laded in yur web brwser select Cnfiguratin WAN ISP in the menu n the left f the screen. The fllwing screen will appear n the right. Press Create t add a new WAN Cnnectin fr VPN-Lite and select PPPE Ruted with Multiple Sessin as indicated belw. Press the Next buttn t cntinue. TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 7
Yu will require yu VPN-Lite site username and passwrd that yu retrieved frm the Telkm VPN- Lite setup site. Yu can change the Descriptin field t VPNLite, Disable the Nat setting and enter yur VPN-Lite site Username and Passwrd. Press Apply t save the settings. In the next step select Abrt and press Apply Yu will nw see yur new WAN Cnnectin called VPNLite in the WAN Cnnectin list. In the menu in the left press Cnfiguratin Advanced Static Rute the fllwing screen will appear in the right. Press Delete fr the ruter 0.0.0.0 and then press the Delete Buttn n the next screen t remve the default static rute. The fllwing screen will appear t add a new static rute. TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 8
Yu need t setup 3 Static Rutes fr yur VPN-Lite service. Yu shuld supply the Destinatin, Netmask and Interface. The first Destinatin is 10.0.0.0: the Netmask shuld be 255.0.0.0 and fr interface select ppp-0. Select apply t save the first Static Rute. Press create t add the fllwing 2 Static Rute s. Destinatin Netmask Interface 172.16.0.0 255.240.0.0 ppp-0 192.168.0.0 255.255.0.0 ppp-0 Cnfigure yur ruter IP address In the menu n the left select Cnfiguratin LAN Ethernet. The fllwing screen will appear n the right. On the Telkm VPN-Lite setup site yu wuld have received a LAN Subnet address that uses this 10.0.2.0/24 frmat. Yur ruter s LAN IP wuld then be 10.0.2.2 and yur Subnet Mask will be 255.255.255.0. Nte that the ruter uses the subnet syntax instead f the slash ntatin (/24) used t display the LAN IP range n the website. Use the table belw t translate the slash ntatin t the subnet mask syntax. Yur ruters IP address is nw changed t the new IP entered in the previus step. T ensure that yur PC can still cmmunicate with yur Billin ruter n it s new LAN IP address, yu shuld release and renew yur PC s IP address. In XP r Vista press the Start buttn. Select All Prgrams\Accessries\Cmmand Prmpt. A DOS prmpt screen will appear TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 9
Type the fllwing and press enter: ipcnfig /release Yu shuld nw wait fr yur IP t be released. Then type: ipcnfig /renew. Yur PC s IP will nw be renewed and within the new range t enable yu t cnnect t yur Billin ruter s new LAN IP address. Yu can nw clse the Cmmand Prmpt screen. T recnnect t yur ruter select the link with the new IP address displayed in yur Internet Brwser. Yur Internet Brwser will nw recnnect t yur Billin ruter. Nw in the bttm right crner press the SAVE CONFIG buttn. The fllwing screen will appear. Press the Apply buttn. Yur settings will nw be saved and yu can start t use yur VPN-Lite service. TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 10
VPN-Lite Manual Setup Using Telnet The fllwing sectin will guide yu t setup yu VPN-Lite servise using the Telnet cmmand line interface. Befre yu start please refer t the Befre yu start sectin in this dcument see page 4. 1. IP Management: a. Telnet t the Billin 800VGT using the ruter s LAN IP address (default = 10.0.0.2) using this cmmand: telnet 10.0.0.2. This will access the Billin 800VGTs CLI interface allwing yu t send setup cmmands. On successful cnnectin, yu will be prmpted fr a lgin and passwrd (defaults: admin & admin). See screensht belw. Enter yur administratin lgin & passwrd. On successful authenticatin yu will arrive at the admin prmpt. (See screensht belw.) b. Setting the DHCP Server: This task is ptinal. If yu want yur Billin 800VGT t act as a DHCP server distributing IPs t yur LAN PCs please perfrm this step. Set the ruter s DHCP range t the crrect target range using this cmmand: Syntax: dhcpserver subnet 1 add iprange <Target range netwrk address> <Target range subnet> Example: dhcpserver subnet 1 add iprange 1 10.0.17.0 255.255.255.0 This ruter will nw distribute IPs t cnnected PCs frm the range 10.0.17.1 -> 10.0.17.254 Nte: Alternatively, if yu prefer t use static IPs n yur netwrk and yu wish t disable the ruter s DHCP server feature, please run this cmmand: dhcpserver disable TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 11
c. Set yur ruter s LAN IP address: Please run the fllwing cmmand t set yur ruter s LAN IP address t within the crrect target IP range. (Nte that if using DHCP server, this LAN IP must be in that same IP range). Nte that yur telnet sessin will becme unrespnsive after yu execute the cmmand and will eventually terminate. This is due t the ruter s altered LAN IP that was riginally used t setup the Telnet cnnectin, but has nw been changed. Syntax: ip set interface iplan ipaddress <LAN IP> <Subnet> Example: ip set interface iplan ipaddress 10.0.17.2 255.255.255.0 Please see the crrect LAN IP target range fr yur lcal site indicated n the VPN-Lite web page screen sht belw. Nte that the ruter uses the subnet syntax instead f the slash ntatin (/24) used t display the LAN IP range n the website. Use the table belw t translate the slash ntatin t the subnet mask syntax. d. Setting yur PCs IP address: Yur ruter s LAN IP has nw been altered but yur PC s IP is prbably still in the ld range thus making a cnnectin impssible. Please make sure that yur PCs IP is updated t the new range, either by DHCP r setting it statically. Once yur PC s IP is again within the same range as yur ruter s LAN IP, cntinue with the fllwing steps. TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 12
2. Setting up the VPN-Lite slutin: e. Telnet t the Billin 800VGT: Please repeat step 1a but this time with the ruter s new updated LAN IP. Once yu received the admin> prmpt, please cntinue with the next steps. f. Running the script: The script belw sets up the VPN-Lite service n yur Billin 800VGT. Please re-type r paste each f these cmmands int the telnet sessin that has been pened t the ruter in step 2a abve (while substituting the <angle brackets>). Actual cmmands that need t be run n the telnet sessin are indicated in blue. Please nte that bld wrds enclsed with <angle brackets> are user parameters and have t be prvided by yurself. Make sure that yu substitute all <angle brackets> with yur wn user specific parameters, befre yu start executing the script belw. Please make sure that all cmmands are run successfully. It is nt recmmended t cpy and paste the whle script at nce as pssible telnet buffer limitatins might cause certain cmmands nt t be pasted crrectly. Wrds fllwing Cmment: are cmments t the user, and nt valid cmmands. Cmment: Remve current cnnectin: ip delete interface ipwan Cmment: The abve cmmand will generate sme warnings/errrs this is nrmal. transprts delete wanlink Cmment: Setup bridge transprt and interface: rfc1483 add transprt @wanlink a1 8 35 llc bridged bridge add interface ipwan bridge attach ipwan @wanlink Cmment: Setup Internet Cnnectin: pppe add transprt wanlink dialut eth 1 pppe pppe set transprt wanlink username <ISP accunt username> pppe set transprt wanlink passwrd <ISP accunt passwrd> pppe set transprt wanlink createrute enabled pppe set transprt wanlink autcnnect disabled pppe set transprt wanlink idletimeut 0 ip add interface ipwan ip attach ipwan wanlink Cmment: Setup VPN-Lite Cnnectin pppe add transprt wanlink2 dialut eth 2 pppe pppe set transprt wanlink2 username <VPN-Lite Lcal site accunt username> pppe set transprt wanlink2 passwrd <VPN-Lite Lcal site accunt passwrd> pppe set transprt wanlink2 createrute disabled pppe set transprt wanlink2 autcnnect disabled pppe set transprt wanlink2 idletimeut 0 pppe set transprt wanlink2 discverdns primary disabled pppe set transprt wanlink2 discverdns secndary disabled ip add interface ipwan2 ip attach ipwan2 wanlink2 Cmment: Add NATting fr Internet Cnnectin TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 13
security add interface ipwan external nat enable ipwan ipwan internal Cmment: Add static rutes t private IP ranges facilitating cmmunicatin with remte VPN-Lite sites: ip add rute vpnlite1 10.0.0.0 255.0.0.0 interface ipwan2 ip add rute vpnlite2 172.16.0.0 255.240.0.0 interface ipwan2 ip add rute vpnlite3 192.168.0.0 255.255.0.0 interface ipwan2 Cmment: Save cnfiguratin and restart device: system cnfig save system restart g. After yur Billin 800VGT has rebted, the VPN-Lite slutin will be setup and ready fr use. TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 14
Firmware Upgrade Cnnect t yur ruter Open a web brwser like Internet Explrer f Firefx. In the address bar type in http://10.0.0.2 and press enter. Yu will be prmpted t supply a username and passwrd t lgn t the ruter. User name = admin Passwrd = admin. Firmware Upgrade In the left menu select Cnfiguratin System Firmware Upgrade. The fllwing screen will appear n the right. Press the Brwse buttn t select the firmware file and then press Upgrade t start the firmware upgrade prcess. A prgress screen will give indicatin n the prgress f the upgrade d nt switch ff the ruter r discnnect any cables at this stage. On cmpletin f the upgrade yu will be prmpted t restart the ruter as shwn belw. If yu select Current Settings yur ruter will restart with yur current settings n the new firmware. If yu select Factry Default Settings yur ruter will restart and all yur current settings will be lst. Select ne f the tw ptins and press the Restart buttn t apply the new firmware update. TELKOM VPN-Lite Billin 800VGT ver.2.2-240808 Page 15