Page 2 - Network Topology
Your network is constantly evolving as you integrate more business applications and consolidate servers. In that environment, it is becoming extremely complex to maintain total security at the edge while users being employees or Teleworkers on the go are working with customers and partners. You need...
Page 3 - Billion BiGuard VPN enabled devices – VPN Configuration; Configuration
Billion BiGuard VPN enabled devices – VPN Configuration After connected to your Billion BiGuard VPN enabled devices, you must select the menu: 【 Configuration 】→ 【 IPSec 】 . Click and add a new IPSec VPN setting as below. Connection Name: A user-defined name for the connection (e.g. “BiGuardVPN”). T...
Page 5 - Perfect Forward Secrecy:; Choose whether to enable PFS using Diffie-Hellman public-key
Perfect Forward Secrecy: Choose whether to enable PFS using Diffie-Hellman public-key cryptography to change encryption keys during the second phase of VPN negotiation. This function will provide better security, but extends the VPN negotiation time. Diffie-Hellman is a public-key cryptography proto...
Page 6 - BiGuard VPN Client Configuration – Phase 1 Configuration; IP address or DNS address of the remote router (in our example:
BiGuard VPN Client Configuration – Phase 1 Configuration “Authentication” or “Phase 1” window will concern settings for Authentication Phase or Phase 1. It is also called IKE Negotiation Phase. Phase 1's purpose is to negotiate IKE policy sets, authenticate the peers, and set up a secure channel bet...
Page 7 - with the remote router
IKE key group: Diffie-Hellman key length. You must also add phase 1 IDs in “P1 Advanced” window, if the BiGuard VPN Client from a LAN. Config-Mode : If checked, the VPN Client will activate Config-Mode for this tunnel. Config-Mode allows to the VPN Client to fetch some VPN Configuration information ...
Page 8 - Remote ID; Define the login and password of an X-Auth IPSec
DPD detects non-responding remote gateways) the VPN Client immediately starts opening a new tunnel with the redundant gateway. z The exact same behaviour will apply to the redundant gateway. This means that the VPN Client will try to open primary and redundant gateway until the user exits software o...
Page 9 - BiGuard VPN Client Configuration – Phase 2 Configuration
BiGuard VPN Client Configuration – Phase 2 Configuration “IPSec Configuration” or “Phase 2” window will concern settings for Phase 2. The purpose of Phase 2 is to negotiate the IPSec security parameters that are applied to the traffic going thought tunnels negotiated during Phase 1. Name: Label for ...
Page 10 - Automatic Open Mode :; on specific events such as:
ESP mode: IPSec encapsulation mode : tunnel. PFS group: Diffie-Hellman key length. For more advanced settings, click on 'P2 Advanced'. Automatic Open Mode : The VPN Client can automatically open the specified tunnel (Phase2) on specific events such as: z Auto open this tunnel when the VPN Client sta...
Page 11 - Open IPSec VPN Tunnels; to make into account all modifications we’ve made on your VPN
Open IPSec VPN Tunnels Once both Billion BiGuard VPN enabled devices and BiGuard VPN Client has been configured accordingly, you are ready to open VPN tunnels. First make sure you enabled your firewall with IPSec traffic. 1. Clink on to make into account all modifications we’ve made on your VPN Clie...
Page 12 - Configuration Wizard; Seven easy steps Wizard
Configuration Wizard Seven easy steps Wizard BiGuard VPN client provides a Configuration Wizard that allows the creation of VPN configuration in seven easy steps. This Configuration Wizard is designed for remote computers that need to get connected to a corporate LAN through a VPN gateway. Let take ...
Page 15 - Be sure that each client must use different VPN Client IP Address.
Step 5 of 7 As for BiGuard side, please go to >Configuration >VPN >IPSec >IPSec Wizard And input Connection Name (BiGuardVPN as example), and PreShared Key(12345678 as example), and select LAN to Host(For BiGuard VPN Client Only), then press Next . Step 6 of 7 Input BiGuard VPN Client IP...
Page 16 - After all, you will see a Configuration Summary, click; Done; too apply this rule.
Step 7 of 7 After all, you will see a Configuration Summary, click Done too apply this rule.
Page 18 - If you; Contact Billion
Appendix B – Product Support and Contact Information Referring to the Troubleshooting section in the User’s Manual can solve most problems . If you cannot resolve the problem with the Troubleshooting chapter, please contact the dealer where you purchased this product. Contact Billion WORLDWIDE http:...