@@ Line 1: / Line 1: @@
-==Information Requirements==
-'''Static Internet connection''' information for Idrive Base Station  site
-::*IP Address in slash notation EX: 216.133.162.68/28 = IP Address 216.133.162.67 NetMask 255.255.255.240
-::*Default Gateway for connection EX: 216.133.162.65
-::*Network Address EX: 216.133.162.64
-IP address block explained. the /28 limits the Block of addresses to 16 as follows:
-.133.162.64 - Network Address (1 address)
-.133.162.65 - Gateway Address (1 address)
-.133.162.66 - 216.133.162.79 14 useable addresses)
-http://www.zytrax.com/tech/protocols/ip-classes.html#calculator
-<br\><br\>
-==Initial Configuration Setup==
-===Set up RB2011LS-IN Router for initial configuration===
-Document the MAC addresses range from the bottom of the unit. IE 00:0C:42:AE:F2:7C - 00:0C:42:AE:F2:86 (10 addresses). These will be used to connect to the device and be logged in AdminCenter.
-Connect to power
-Connect cat 5 cable from Port ETH6 to the NIC for Idrive wireless
-*Change settings for wireless NIC to:
-::-192.168.88.10
-::-255.255.255.0
-<br\><br\>
-===Connect using Winbox===
-Download and install Winbox [http://download2.mikrotik.com/winbox.exe Configuration tool for RouterOS].
-Run Winbox.exe or double click the icon on the desktop
-[[File:winbox_icon.jpg|100px]]  [[File:rb2011__initial_login.jpg|250px|]]
-*Enter the Default "Connect To" IP Address: 192.168.88.1
-*Login: admin
-*password: blank
-*Click "Connect"
-Upon initial log in the "RouterOS Default Configuration" pop-up window will appear. Choose "OK". We are not concerned about the default settings because they will be overwritten with the idrive default configuration file.
-[[File:rb2011_initial_login_screen.jpg|400px|]]
-<br\><br\><br\><br\>
-==Upgrade OS and Firmware==
-Obtain the latest versions (V6.x) from the MicroTik [[http://www.mikrotik.com/download |download]] site
-Click on the correct link for the hardware architecture (mipsbe for RB2011)
-Click on "All Packages" and click Save
-[[File:rb2011_downloads.jpg|800px|]]
-Extract all of the files from zip package
-Copy the files from your computer to the Router Board by dragging and dropping all of the files into the files list in the WinBox window
-[[File:rb2011_upgrade_files_list.jpg|400px|]] [[File:rb2011_upgrade_files_list2.jpg|400px|]]
-Restart the router and log back into the router and confirm that WinBox shows the new version of RouterOS and Firmware
-[[File:rb2011_system_reboot.jpg|400px|]][[File:rb2011_firmware_updated.jpg|400px|]]
-Log back into the router and confirm the WinBox shows the new version of RouterOS and Firmware
-<br\><br\>
-==Setup using Restore configuration file (Recommended)==
-===Load Idrive Standard configuration===
-[[File:rb2011_restore_config.jpg|600px|thumb]]
-For simplicity and consistency it is better to set the routers configuration using the RouterOS backup/restore function. This "restores" the standard idrive configuration from a .backup file. This will leave only a few custom settings that are specific to the customer location(s).
-*Download the most current .backup file from [https://admincenter.idrive.pro/wiki/index.php?title=Idrive_Downloads Admin Center]
-*Unzip the file to the Desktop on your computer
-*In WinBox select “Files” from the left menu to open the Files List window.
-*Use the mouse to drag and drop the configuration file from the Desktop into the Files List (uploads the file to the Router)
-*Highlight the config file and click on "Restore"
-'''The router will reboot with the new configuration. You will need to use the new IP address and password'''
-::-The new IP address for Ports 6 - 10 will be 192.168.0.2
-::-Change the IP address on your NIC to 192.168.0.10
-Reconnect to the Router with the "Connect to" address of 192.168.0.2, password '''idrive#'''
-<br\><br\><br\><br\><br\><br\><br\><br\><br\>
-===Set Customer/Location Specific Settings===
-====Static Internet IP Address====
-Click IP >Address to open the Address list form. Double Click on an address to edit. Both interface addresses are shown open here. You should only need to change the ether1 address.
-[[File:rb2011_ip_addresses.jpg|600px|]]
-Modify the internet connection address for the customer's location.
-'''ether1''' - This is the '''Static''' Ip Address for the Base Station
-::*Enter '''Static IP address''' (216.133.162.68/28 in this example)
-::*Enter Network Address (216.133.162.64 in this example)
-::*Interface "ether1"
-'''bridge_local''' - This is the IP address that the base station will see. Ports 5,6,7,8,9,10 share this address.
-::*IP Address 192.168.0.2/16
-::*Network 192.168.0.0
-::*Interface bridge_local
-<br\><br\>
-====Set Timezone for customer location====
-Set the timezone. The Date and time will be set by NTP (Network Time Protocol) when connected to the internet
-[[File:rb751_timezone.jpg|550px|]]
-<br\><br\>
-==Network Cable Connections==
-EHT1 & ETH2 - Internet
-ETH3 - loopback cable to ETH4
-ETH4 - loopback cable to ETH3
-ETH5 - Idrive Base Station Wireless NIC (192.168.0.10)
-ETH6 - ETH10 - Local extra APs (192.168.0.2)
-<br\><br\>
-==Advanced Configuration (no config file)==
-<br\><br\>
-===Interfaces configuration===
-Select "Interfaces" from the left menu - <span style="color: red">finish this section
-[[File:rb2011_interfaces.jpg|800px|]]
-<br\><br\>
-====PPP configuration====
-Select "PPP" from the left menu then go to "Profiles" tab and add new profile.
-Complete the fields then select "Protocols" tab and check "yes" under "Use Encryption".
-[[File:rb2011_ppp_conf1.jpg|500px|]]
-[[File:rb2011_ppp_profile1.jpg|400px|]] [[File:rb751_ppp_profile2.jpg|400px|]]
-<br\><br\>
-====SSTP Server configuration====
-Return to "Interface List" and add new "SSTP Client".
-In the "Dial Out" fill "Connect To:" with the VPN Server public IP, set port to 1723, enter the user name and password that you have created on VPN Server.
-Uncheck "pap" and "chap" boxes from "Allow".
-[[File:rb2011_add_sstp_client.jpg|300px|]] [[File:rb751_sstp_dialout2.jpg|300px|]]
-If the VPN Server is configured the status will appear as connected.
-If the VPN Server is not configured then check [[Configure VPN Server]].
-<br\><br\>
-===Bridges configuration===
-Select "Bridge" from the left menu and add new bridge by clicking on the "+" button. Configure the three bridges as shown.
-"'''bridge_local'''" Make sure the "ARP" is '''enabled''' and enter the MAC Address: '''00:00:5E:80:01:01''' then select "STP" tab and check "Protocol Mode: '''rstp'''".
-"'''bridge_tunnel'''" Make sure the "ARP" is '''disabled''' then select "STP" tab and check "Protocol Mode: '''rstp'''".
-"'''bridge_internet'''" Make sure the "ARP" is '''enabled''' then select "STP" tab and check "Protocol Mode: '''none'''".
-[[File:rb2011_bridges1.jpg|800px|]]
-[[File:rb2011_bridges2.jpg|800px|]]
-[[File:rb2011_bridges3.jpg|800px|]]
-select "Ports" tab and add interfaces to the proper bridge as shown
-[[File:rb2011_bridge_ports.jpg|600px|]]
-<br\><br\>
-===Addresses configuration===
-Use the "+"button and add the addresses as shown [[Configure_VPN_Server#Static_Internet_IP_Address|Here]]
-<br\><br\>
-===Routes configuration===
-Add the three routes
-route <0.0.0.0/0> - set the Gateway address for the customers internet gateway at the remote location. Leave Dst. Address all zeros.
-route <192.168.0.0/16> - routes 192.168.x.x (events) traffic through the tunnel to the base station.
-route <216.133.162.64/28> - Routes all internet traffic out the bridge_internet interfaces. The address is the Network address for the base station internet connection.
-[[File:rb2011_ip_routes.jpg|800px|]]
-<br\><br\>
-Return to the IP->Address List interface and add "192.168.0.2/16" to "bridge_local".
-[[File:Mikrotik16.png|700px|center]]
-Select "Profiles" tab from PPP interface add new profile.
-From the "General" tab fill the new profile name and select "bridge_tunnel" from drop-down list.
-Select "Protocols" tab and check "yes" from "Use Encryption".
-[[File:Mikrotik17.png|700px|center]]
-[[File:Mikrotik18.png|700px|center]]
-From PPP interface select "Secrets" tab and create new secret.
-Fill with the name and password and select the profile you have created above.
-[[File:Mikrotik19.png|700px|center]]
-Select "SSTP Server" from PPP->Interface, check 1723 port, select "default-encryption" and uncheck "pap" and "chap" authentication.
-[[File:Mikrotik20.png|700px|center]]
-If the VPN client is configured the connection will start automatically. If the VPN client is not configured, check [[Configure VPN Client]].
-To check active connection select PPP->Active Connection or Bridge->Ports.
-[[File:Mikrotik22.png|700px|center]]
-Add the rest of interfaces to "bridge_local" in order to use the router in network.
-[[File:Mikrotik21.png|700px|center]]

Difference between revisions of "Configure VPN Server"

Latest revision as of 18:16, 7 November 2014

Navigation menu

Search