NEXCOM International Co., Ltd. Industry Firewall Solutions HENGETM Industry Firewall VPN Router IFA 3610/IFA 2610/IFA 1610 User Manual NEXCOM International Co., Ltd. www.nexcom.com Published February 2016 Contents Contents Introduction: Getting Started Chapter 3: The Network Menu Getting Started ......................................................................... 1 3.1 Edit hosts ......................................................................... 44 About this Reference Manual .................................................... 1 3.2 Routing ............................................................................ 45 Conventions Used in This Document ......................................... 1 3.2.1 Static routing ............................................................. 46 The Zones ................................................................................. 2 3.2.2 Policy routing ............................................................ 47 The IFA 3610/IFA 2610/IFA 1610 Management Interface ........... 3 3.3 Interfaces ......................................................................... 49 Accessing the IFA 3610/IFA 2610/IFA 1610 Appliances .............. 7 3.3.1 Uplink editor ............................................................. 49 3.3.2 VLANs ....................................................................... 51 Chapter 1: The System Menu 1.1 Dashboard ......................................................................... 9 Chapter 4: The Services Menu 1.1.1 System Information Plugin ......................................... 10 4.1 DHCP Server .................................................................... 52 1.1.2 Hardware Information Plugin ..................................... 10 4.2 Dynamic DNS ................................................................... 55 1.1.3 Service Information Plugin ......................................... 11 4.3 Time server ...................................................................... 57 1.1.4 Network Information Plugin ....................................... 11 4.4 Intrusion Prevention ......................................................... 58 1.1.5 Signatures Information Plugin .................................... 11 4.4.1 Intrusion Prevention System ....................................... 58 1.1.6 Uplink Information Plugin .......................................... 11 4.4.2 Rules ......................................................................... 58 1.2 Network Configuration .................................................... 13 4.4.3 Editor ........................................................................ 59 1.2.1 1/8 - Choose Network Mode and Uplink Type 4.5 High Availability ............................................................... 59 (RED Zone) ................................................................ 13 4.6 Traffic Monitoring ............................................................ 62 1.2.2 2/8 - Choose Network Zones ..................................... 15 4.7 SNMP Server .................................................................... 62 1.2.3 3/8 - Network Preferences ......................................... 15 4.8 Quality of Service ............................................................. 63 1.2.4 4/8 - Internet Access Preferences ............................... 17 4.8.1 Devices ...................................................................... 63 1.2.5 5/8 - Configure DNS Resolver .................................... 19 4.8.2 Classes ...................................................................... 64 1.2.6 6/8 - Configure Default Admin Mail ........................... 19 4.8.3 Rules ......................................................................... 65 1.2.7 7/8 - Apply Configuration .......................................... 20 4.9 Serial Port ........................................................................ 66 1.2.8 8/8 - End ................................................................... 20 4.9.1 Port Configuration ..................................................... 66 1.3 Event Notifications ........................................................... 21 4.9.2 Serial Server ............................................................... 67 1.3.1 Settings ..................................................................... 21 1.3.2 Events ....................................................................... 22 Chapter 5: The Firewall Menu 1.4 Updates ........................................................................... 23 5.1 Common Configuration Items .......................................... 68 1.4.1 Status ........................................................................ 23 5.2 Port Forwarding / NAT ...................................................... 70 1.4.2 Schedule for Retrieving the Update List ...................... 23 5.2.1 Port forwarding / Destination NAT ............................. 70 1.5 Support ........................................................................... 24 5.2.2 Source NAT ............................................................... 72 TM 1.6 HENGE Network ........................................................... 25 5.2.3 Incoming Routed Traffic ............................................. 72 1.6.1 Subscription .............................................................. 25 5.3 Outgoing Traffic ............................................................... 73 1.6.2 Remote Access .......................................................... 26 5.4 Inter-Zone Traffic .............................................................. 75 1.7 Passwords ........................................................................ 26 5.5 VPN Traffic ....................................................................... 76 1.8 Web Console ................................................................... 27 5.6 System Access .................................................................. 77 1.9 SSH access ....................................................................... 28 5.7 Firewall Diagrams ............................................................. 79 1.9.1 Secure Shell Access Settings ...................................... 28 1.9.2 SSH host keys ............................................................ 28 Chapter 6: Proxy 1.10 GUI Settings ................................................................... 29 6.1 DNS ................................................................................. 80 1.11 Backup .......................................................................... 29 6.1.1 DNS Proxy ................................................................. 80 1.11.1 Backup .................................................................... 30 6.1.2 DNS Routing .............................................................. 81 1.11.2 Scheduled Backups .................................................. 32 6.1.3 Anti-Spyware ............................................................. 82 1.12 Shutdown ...................................................................... 33 1.13 License Agreement ........................................................ 34 Chapter 7: The VPN Menu Chapter 2: The Status Menu 7.1 OpenVPN Server .............................................................. 83 7.1.1 Server Configuration ................................................. 84 2.1 System status ................................................................... 35 7.1.2 OpenVPN Settings ..................................................... 85 2.2 Network status ................................................................ 37 7.1.3 OpenVPN Server Instances ......................................... 85 2.3 System graphs ................................................................. 39 7.1.4 VPN Client Download ................................................ 88 2.4 Traffic graphs ................................................................... 41 7.2 OpenVPN Client (Gw2Gw) ............................................... 88 2.5 Connections .................................................................... 42 7.2.1 Add Tunnel Configuration ......................................... 89 2.6 VPN Connections ............................................................. 43 Copyright © 2014 NEXCOM International Co., Ltd. All Rights Reserved. ii IFA 3610/IFA 2610/IFA 1610 User Manual Contents 7.2.2 Advanced Tunnel Configuration ................................ 89 7.2.3 Import Profile from OpenVPN Access Server ............... 91 7.3 IPsec ................................................................................ 92 7.3.1 IPsec .......................................................................... 92 7.3.2 IPsec Settings ............................................................. 93 7.3.3 Debug Options .......................................................... 93 7.3.4 Connections .............................................................. 93 7.3.5 L2TP .......................................................................... 96 7.4 Authentication ................................................................. 97 7.4.1 Users ......................................................................... 97 7.4.2 Groups .................................................................... 100 7.4.3 Settings ................................................................... 101 7.5 Certificates ...................................................................