User manual | EMQ-MH-2300 v1.0

Gigabit Multi-Homing VPN Security Gateway
MH-2300
Quick Installation Guide
Table of Contents
1. Package Contents........................................................................................ 3
2. Setup of the Gigabit Multi-Homing VPN Security Gateway............................... 4
2.1 Hardware Installation............................................................................ 4
2.2 Basic System Configuration................................................................... 5
2.2.1 Deploying MH-2300 in Gateway Mode........................................... 8
2.2.2 Deploying MH-2300 in Non-inline Mode........................................12
3. Further Information....................................................................................17
1.Package Contents
zz MH-2300 x 1
zz Quick Installation Guide x 1
zz User’s Manual CD x 1
zz Power cord x 1
zz Feet pads x 4
If any of the above items are damaged or missing, please contact your dealer
immediately.
3
2.Setup of the Gigabit Multi-Homing VPN Security
Gateway
The followings are instructions for setting up PLANET MH-2300. Refer to the
illustration and follow the simple steps below to quickly install your Gigabit MultiHoming VPN Security Gateway.
2.1 Hardware Installation
Front Panel:
Power Indicator
Reset Button
Port LED Indications
Port 1/2/3/4/5
Power Button
Front Panel of the MH-2300
 Power Indicator: Lights up in green when the power is on.
 Port 1 / 2 / 3 / 4 / 5 can be defined as:
LAN Port: For connecting to a switch.
WAN Port: For connecting to a perimeter router.
DMZ Port: For providing the public with services, such as email or Web, using
a physically-separated network segment, while at the same time preventing
any potential security threats.
 Power Button: For turning MH-2300 on or off.
 Reset Button: For resetting MH-2300 to factory default settings.
4
Note
1. Port LED Indications:
Flashing indicates the packets are processed through the device.
Amber indicates a link speed at 10/100 Mbps. Green indicates a
link speed at 1000 Mbps.
2.The reset button is an SMT component; please don’t press it too
hard. Otherwise, damage to reset function may happen.
2.2 Basic System Configuration
Step 1. Connect the IT administrator’s network adaptor and MH-2300’s LAN port
to the same hub / switch, and then launch a browser (IE or Firefox) to
link the management interface at http://192.168.1.1.
Step 2. The browser prompts you for the login credentials. (Both are “admin” by
default.)
Typing in the User Name and Password
5
Step 3. The user interface consists of the following two panels:
 Menu Panel: Presents all the available system configurations in a tree
directory structure. (See Overview of Functions for further details)
 Configuration Panel: Displays the data or configurable settings of the
corresponding item selected on the Menu Panel.
The MH-2300’s Management Interface
For your reference, you may configure your management address
based on the available subnet ranges below.
10.0.0.0 ~ 10.255.255.255
Note
6
172.16.0.0 ~ 172.31.255.255
192.168.0.0 ~ 192.168.255.255
Step 4. At the first login, you will be guided through the basic settings that are
required to install MH-2300 by the wizard.
The Install Wizard
Step 5.Select the language and character encoding for your management
interface.
Selecting the Language and Default Character Encoding
Note
The default encoding will be applied to the data of unspecified
encoding.
7
2.2.1Deploying MH-2300 in Gateway mode
The unit is deployed to replace your existing firewall.
Step 1. Configure the LAN settings: (according to your network infrastructure).
 Physical Connection: Select “Port1 (LAN 1)”.
 Interface Type: Select “LAN”.
 Connection Type: Select “NAT Routing”.
 Specify the IPv4 Address and Netmask.
Configuring the LAN Interface Settings
Note
8
The access to the management interface is subject to the LAN
interface. Therefore, enter the management address to a Web
browser correspondingly if any changes have been made to the
LAN interface.
Step 2. Configure the WAN Interface (please refer to your ISP for the details).
 Select “Port 5 (WAN 1)” for Physical Connection.
 Select “WAN” for Interface Type.
 Select your Connection Type.
 Complete the remaining fields according to your network.
Configuring the WAN Interface Settings
9
Step 3.Tick the box of “Synchronize to an NTP server” to ensure the
accuracy of system clock.
Configuring the System Clock Settings
Step 4. Tick the box of “Outgoing” to create a policy for outgoing traffic.
Creating an Outgoing Network Policy
10
1.After the completion of wizard, an outgoing network policy is
created correspondingly under Policy > Outgoing.
 Source Address is defaulted to “Inside_Any”.
 Destination Address is defaulted to “Outside_Any”.
 Service is defaulted to “Any”.
Note
The Policy Allowing LAN Users to Access External Network Resources
2.To allow Internet access to LAN users, assign their PCs with
static IP addresses within the same subnet as MH-2300 as well
as designate MH-2300 as the default gateway. Otherwise, enable
DHCP service to automatically distribute IP addresses to them.
LAN traffic can be regulated by means of network policies if
desired.
Step 5. This step confirms what interface addresses have been assigned to
MH-2300.
Confirmation on Interface Settings
Step 6. Installation is completed after clicking Finish from the previous step.
11
2.2.2Deploying MH-2300 in Non-inline Mode
The unit is attached to your LAN switch without any network interference.
On the existing firewall, specify a LAN subnet.
Place MH-2300 on the LAN behind the firewall.
Step 1. Configure the LAN interface as shown below:
 Select “Port 1 (LAN 1)” for Physical Connection.
 Select “LAN” for Interface Type.
 Select “NAT Routing” for Connection Type.
 Specify the IPv4 Address and Netmask.
Configuring the LAN 1 Interface Settings
12
Step 2. Configure the WAN interface as shown below:
Select “Port 5 (WAN 1)” for Physical Connection.
Select “WAN” for Interface Type.
 Select your Connection Type.
 Complete the remaining fields according to your network.
Configuring the WAN 1 Interface Settings
13
Step 3. Tick the box of “Synchronize to an NTP server” to ensure the accuracy of
system clock.
Configuring the System Clock Settings
Step 4.Tick the boxes to create the corresponded policies for each type of
network traffic.
Creating Policies for Each Type of Network Traffic
Note
14
After the completion of wizard, an outgoing network policy is
created correspondingly under Policy > Outgoing, Incoming,
WAN to DMZ, LAN to DMZ, DMZ to WAN, DMZ to LAN, LAN
to LAN, DMZ to DMZ.
 Source Address is defaulted to “Inside_Any”.
 Destination Address is defaulted to “Outside_Any”.
 Service is defaulted to “Any”.
Step 5. This step confirms what interface addresses have been assigned to
MH-2300.
Confirmation on Interface Settings
Step 6. Installation is completed after clicking Finish from the previous step.
Step 7.Under Network > Interface, set as shown below:
Click Modify corresponding to the Port 1.
 Select “LAN” for Interface Type.
 Select “Transparent Bridging” for Connection Type.
 Tick the boxes of “Ping/ Tracert”, “HTTP” and “HTTPS”.
Click OK.
Configuring the LAN 1 Interface Settings
15
Step 8.Connect MH-2300’s Port 5 (WAN 1) to your LAN switch or hub and
remove the connection on Port 1 (LAN 1).
The Network Address Settings for Non-inline Mode
Note
The access to MH-2300 is now available through the WAN 1 port
only. Therefore, use the address specified for the WAN interface to
access the management interface.
Step 9.Under Network > Interface Group, set as shown below:
 Select “Group 1” for Port 1 (LAN 1) and Port 5 (WAN 1).
Click OK.
Grouping the Network Interfaces
16
3.Further Information
Thank you for purchasing PLANET products. The above steps introduce simple
configuration for MH-2300. For further configuration, please refer to the user’s
manual on the CD. If you have other questions, please contact the local dealer
where you purchased this product or you can contact PLANET directly at the
following email address: [email protected]
17
Copyright © PLANET Technology Corp. 2014.
Contents are subject to revision without prior notice.
PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their
respective owners.

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project