Difference between revisions of "Configure VPN Client"

From Idrive
Jump to navigation Jump to search
(Blanked the page)
 
(12 intermediate revisions by 2 users not shown)
Line 1: Line 1:
==Information Requirements==
 
  
'''Static Internet connection''' information for remote customer site (where Transfer point is to be installed)
 
 
::*IP Address in slash notation EX: 216.133.162.67/28 = IP Address 216.133.162.67 NetMask 255.255.255.240
 
 
::*Default Gateway for connection EX: 216.133.162.65
 
 
::*Network Address EX: 216.133.162.64
 
 
IP address block explained. the /28 limits the Block of addresses to 16 as follows:
 
 
216.133.162.64 - Network Address (1 address)
 
 
216.133.162.65 - Gateway Address (1 address)
 
 
216.133.162.66 - 216.133.162.79 14 useable addresses)
 
 
http://www.zytrax.com/tech/protocols/ip-classes.html#calculator
 
 
 
 
<br\><br\>
 
 
==Initial Configuration Setup==
 
 
===Set up RB751U-2HnD Router for initial configuration===
 
 
Document the MAC addresses range from the bottom of the unit. IE 00:0C:42:AE:F2:7C - 00:0C:42:AE:F2:81 (5 addresses). These will be used to connect to the device and be logged in AdminCenter.
 
 
Connect to power
 
 
Connect cat 5 cable from Port ETH5 to the NIC for Idrive wireless
 
 
*Change settings for wireless NIC on your computer to:
 
 
::-192.168.88.10
 
 
::-255.255.255.0
 
 
<br\><br\>
 
 
===Connect using Winbox===
 
 
Download and install Winbox [http://download2.mikrotik.com/winbox.exe Configuration tool for RouterOS].
 
 
Run Winbox.exe or double click the icon on the desktop
 
 
[[File:winbox_icon.jpg|100px]]  [[File:rb2011__initial_login.jpg|250px|]]
 
 
*Enter the Default "Connect To" IP Address: 192.168.88.1
 
 
*Login: admin
 
 
*password: blank
 
 
*Click "Connect"
 
 
Upon initial log in the "RouterOS Default Configuration" pop-up window will appear. Choose "OK". We are not concerned about the default settings because they will be overwritten with the idrive default configuration file.
 
 
[[File:rb2011_initial_login_screen.jpg|400px|]]
 
 
<br\><br\><br\><br\>
 
 
==Upgrade OS and Firmware==
 
 
Obtain the latest versions (V6.x) from the MicroTik [[http://www.mikrotik.com/download |download]] site
 
 
Click on the correct link for the hardware architecture (mipsbe for RB751U-2HnD)
 
 
Click on "All Packages" and click Save
 
 
[[File:rb2011_downloads.jpg|800px|]]
 
 
 
 
Extract all of the files from zip package
 
 
Copy the files from your computer to the Router Board by dragging and dropping all of the files into the files list in the WinBox window
 
 
[[File:rb2011_upgrade_files_list.jpg|400px|]] [[File:rb2011_upgrade_files_list2.jpg|400px|]]
 
 
Restart the router and log back into the router and confirm that WinBox shows the new version of RouterOS and Firmware
 
 
[[File:rb2011_system_reboot.jpg|400px|]][[File:rb751_firmware_updated.jpg|400px|]]
 
 
 
 
 
 
<br\><br\>
 
 
==Setup using Restore configuration file (Recommended)==
 
 
===Load Idrive Standard configuration===
 
 
[[File:rb751_files.jpg|600px|thumb]]
 
 
For simplicity and consistency it is better to set the routers configuration using the RouterOS backup/restore function. This "restores" the standard idrive configuration from a .backup file. This will leave only a few custom settings that are specific to the customer location(s).
 
 
 
*Download the most current .backup file from [https://admincenter.idrive.pro/wiki/index.php?title=Idrive_Downloads Admin Center]
 
 
*Unzip the file to the Desktop on your computer
 
 
*In WinBox select “Files” from the left menu to open the Files List window.
 
 
*Use the mouse to drag and drop the configuration file from the Desktop into the Files List (uploads the file to the Router)
 
 
*Highlight the config file and click on "Restore"
 
 
'''The router will reboot with the new configuration. You will need to use the new IP address and password'''
 
 
::-The new IP address for Ports 3 - 5 will be 192.168.0.3
 
 
::-Change the IP address on your NIC to 192.168.0.10
 
 
Reconnect to the Router with the "Connect to" address of 192.168.0.3, password '''idrive#'''
 
 
 
<br\><br\><br\><br\><br\><br\>
 
 
===Set Customer/Location Specific Settings===
 
 
====Static Internet IP Address====
 
 
Click IP >Address to open the Address list form. Double Click on address to edit. All three interface addresses are shown open here. You should only need to change the ether1 address.
 
 
[[File:rb2011_ip_add_pulldown.jpg|200px|left]]
 
 
[[File:rb751_ip_addresses.jpg|550px|]]
 
 
Modify the internet connection address for the customer's location.
 
 
'''ether1''' - <span style="color: red"> '''This must be configured prior to shipment or you will not be able to contact the Transfer Point when it is installed at te customer location!!!'''.
 
 
::*Enter '''Static IP address''' (216.133.162.67/28 in this example)
 
 
::*Enter Network Address (216.133.162.64 in this example)
 
 
::*Interface "ether1"
 
 
 
'''bridge_local''' - No need to change unless there is more than one Remote Transfer point in the Idrive system. This is the IP address that the base station will see. Ports 3,4,5 share this address.
 
 
::*IP Address 192.168.0.3/16
 
 
::*Network 192.168.0.0
 
 
::*Interface bridge_local
 
 
 
'''ether2''' - Set by config file and does not need to be changed.
 
 
::*IP Address 1.1.1.2/24
 
 
::*Network 1.1.1.0
 
 
::*Interface ether2
 
 
<br\><br\>
 
 
====Set SSTP Dial Out address====
 
 
Set the Dial Out address (Static IP address of the base stations internet connection)This is the number that the Transfer Point "calls" to contact the base station.
 
 
[[File:rb751_sstp_dialout.jpg|550px|]]
 
 
<br\><br\>
 
 
====Set Timezone for customer location====
 
 
Set the timezone. The Date and time will be set by NTP (Network Time Protocol) when connected to the internet
 
 
[[File:rb751_timezone.jpg|550px|]]
 
 
<br\><br\>
 
 
==Cable Connections==
 
 
EHT1 - Internet
 
 
ETH2 - loopback cable to ETH3
 
 
ETH3 - loopback cable to ETH2
 
 
ETH4 - Optional extra AP (192.168.0.3)
 
 
ETH5 - Optional extra AP (192.168.0.3)
 
 
<br\><br\>
 
 
==Advanced Configuration (no config file)==
 
 
 
<br\><br\>
 
 
===Interfaces configuration===
 
 
Select "Interfaces" from the left menu and enable both "wlan1" and "ppp-out1".
 
 
[[File:Mikrotik-client2.jpg|800px|]]
 
 
<br\><br\>
 
 
====PPP configuration====
 
 
Select "PPP" from the left menu then go to "Profiles" tab and add new profile.
 
 
Complete the fields then select "Protocols" tab and check "yes" under "Use Encryption".
 
 
 
 
[[File:rb751_ppp_conf1.jpg|500px|]]
 
 
 
[[File:rb751_ppp_profile1.jpg|400px|]] [[File:rb751_ppp_profile2.jpg|400px|]]
 
 
 
<br\><br\>
 
 
====SSTP configuration====
 
 
Return to "Interface List" and add new "SSTP Client".
 
 
In the "Dial Out" fill "Connect To:" with the VPN Server public IP, set port to 1723, enter the user name and password that you have created on VPN Server.
 
 
Uncheck "pap" and "chap" boxes from "Allow".
 
 
[[File:rb751_add_sstp_client.jpg|300px|]] [[File:rb751_sstp_dialout2.jpg|300px|]]
 
 
If the VPN Server is configured the status will appear as connected.
 
 
If the VPN Server is not configured then check [[Configure VPN Server]].
 
 
<br\><br\>
 
 
====WLAN configuration====
 
 
 
Return on "Interface List" double-click "wlan1", select "Wireless" tab and complete the fields as in picture.
 
 
 
[[File:rb751_wlan_conf.jpg|400px|]]
 
 
<br\><br\>
 
 
===Bridges configuration===
 
 
Select "Bridge" from the left menu and add new bridge. Configure the two bridges as shown.
 
 
for "bridge_tunnel" Make sure the "ARP" is disabled and enter the MAC Address: 00:00:5E:80:01:01 then select "STP" tab and check "Protocol Mode: rstp".
 
 
[[File:rb751_bridges1.jpg|700px|]]
 
 
[[File:rb751_bridges2.jpg|700px|]]
 
 
select "Ports" tab and add interfaces to the proper bridge as shown
 
 
[[File:rb751_bridge_ports.jpg|600px|]]
 
 
<br\><br\>
 
 
===Addresses configuration===
 
 
Use the "+"button and add the addresses as shown [[Configure_VPN_Client#Static_Internet_IP_Address|Here]]
 
 
<br\><br\>
 
 
===Routes configuration===
 
 
Add the three routes
 
 
[[File:rb751_routes_add.jpg|300px|]]
 
 
route <0.0.0.0/0> - set the Gateway address for the customers internet gateway at the remote location. Leave Dst. Address all zeros.
 
 
route <192.168.0.0/16> - routes 192.168.x.x (events) traffic through the tunnel to the base station.
 
 
route <216.133.162.64/28> - Routes all internet traffic out the Ether1 interface. The address is the Network address for the remote location internet connection.
 
 
[[File:rb751_ip_routes.jpg|800px|]]
 
 
<br\><br\>
 
 
===NTP configuration===
 
 
Network Time Protocol - keeps the time syncronized
 
 
[[File:rb751_ntp_settings.jpg|400px|]]
 
 
<br\><br\>
 
 
===3G notes from Florin===
 
 
 
Connect your 3G USB dongle and restart router.
 
 
Return on "Interface List" and double-click "ppp-out1" and make sure that "usb1" option is selected. If the "Port" drop-down list is empty then your 3G dongle is not supported.
 
 
Our 3G USB worked by default without any other configuration. Click on "Advanced Mode" if your SIM does require mobile carrier configuration.
 
 
 
[[File:Mikrotik-client3.png|500px|]]
 
 
[[File:Mikrotik-client4.png|500px|]]
 
 
[[File:Mikrotik-client5.png|500px|]]
 
 
==Functional testing troubleshooting==
 
 
<br\><br\>
 
 
===Initial Installation Checks===
 
 
<br\><br\>
 
 
====Internet connection working ?====
 
 
Connect using Winbox
 
 
Connect using a browser
 
 
Telnet into the Terminal Point using Putty
 
 
Ping the terminal point
 
 
<br\><br\>
 
 
====connected to base station?====
 
 
Ping the base station public IP address
 
 
Check the structure using neighbor discovery (192.168.0.2 is at the base station end). This shows connectivity as well as the tunnel working.
 
 
[[File:rb751_neighbors_list.jpg|600px|]]
 
 
 
 
<br\><br\>
 
 
====Wifi tools / channel selection====
 
 
View other Wifi in the area
 
 
 
[[File:rb751_wifi_Scanner.jpg|600px|]]
 
 
 
View the amount of traffic on each channel
 
 
 
[[File:rb751_wifi_frequsage.jpg|600px|]]
 
 
 
 
 
[[File:rb751_wifi_sniffer.jpg|700px|]]
 
 
 
 
 
[[File:rb751_wifi_Snooper.jpg|600px|]]
 
 
 
 
 
 
<br\><br\>
 
 
====extra APs connected and functioning?====
 
 
Ping the additional AP(s)
 
 
 
[[File:rb751_ap_ping.jpg|600px|]]
 
 
<br\><br\>
 
 
===Installation checklist===
 
 
Mounting
 
 
Electrical Wiring
 
 
Antenna sealed with tape
 
 
Internet connection
 
 
External APs installed and connected
 
 
<br\><br\>
 
 
 
 
<br\><br\>
 

Latest revision as of 18:16, 7 November 2014