Supplement to ViPNet VPN Documentation. Quick Start

Transcription

1 Supplement t ViPNet VPN Dcumentatin Quick Start

2 Inftecs Americas. All rights reserved. Versin: ENU This dcument is included in the sftware distributin kit and is subject t the same terms and cnditins as the sftware itself. N part f this publicatin may be reprduced, published, stred in an electrnic database, r transmitted, in any frm r by any means electrnic, mechanical, recrding, r therwise fr any purpse, withut the prir written cnsent f Inftecs Americas Inc. ViPNet is a registered trademark f Inftecs Americas Inc., New Yrk, USA. All brands and prduct names that are trademarks r registered trademarks are the prperty f their wners. Glbal cntacts page

3 Cntents Abut This Dcument... 3 Preparing fr the Setup... 3 Deplying the ViPNet Netwrk Administratr's Wrkstatin... 4 ViPNet Netwrk Manager Interface... 6 ViPNet Crdinatr Setup... 8 Installing ViPNet Client n a User's Cmputer... 8 Recmmendatins n ViPNet Crdinatr and ViPNet Client Cnfiguratin and Use... 9 Abut This Dcument This dcument is designed fr the netwrk administratrs intending t deply and cnfigure ViPNet VPN virtual private netwrks in their rganizatins. Yu can use this dcument as a quick reference t create and cnfigure a prtected netwrk, withut reading the full versin f the user's guide. Preparing fr the Setup Befre ViPNet VPN setup, think ver yur prtected netwrk structure and check netwrk cnnectin settings n the cmputer that will functin as a crdinatr. T d this: Decide n which cmputer yu are ging t deply the ViPNet netwrk administratr's wrkstatin. Yu chse either a client, r a crdinatr. Install the ViPNet Netwrk Manager prgram n the ViPNet netwrk administratr s wrkstatin. On a cmputer with installed ViPNet Netwrk Manager, deply a client (by installing ViPNet Client) r a crdinatr (by installing ViPNet Crdinatr). ViPNet Client r ViPNet Crdinatr allws yu t send keys and sftware updates frm ViPNet Netwrk Manager t ViPNet hsts, while the ViPNet Supplement t ViPNet VPN Dcumentatin. Quick Start 3

4 Netwrk Manager prgram is intended fr netwrk administering and cannt interact with ther hsts. Decide which prgram will be used t deply a crdinatr: ViPNet Crdinatr fr Windws, ViPNet Crdinatr HW r ViPNet Crdinatr VA. Make sure that yur ViPNet VPN license allws yu t add the chsen crdinatr type. Yu can deply ViPNet Crdinatr HW nly n the special hardware platfrm. ViPNet Crdinatr VA is an image f the ViPNet sftware that is intended fr functining in a virtual envirnment. Decide n which cmputer the crdinatr will be deplyed. Fr example, yu may install the crdinatr n a cmputer where private data are stred, and yu need t prvide prtected access t these data; r it may be any ther cmputer r server. A crdinatr must be always accessible frm all clients, in ther wrds, the cmputer with installed ViPNet Crdinatr must be always switched n and cnnected t the netwrk. Yu may establish prtected cnnectin t a crdinatr (as well as t a client) ver the RDP prtcl, r access public resurces n a crdinatr r a client. After yu have decided n which cmputer yu will deply the crdinatr, make sure that this cmputer has a static private IP address. On the DSL ruter, behind which the future crdinatr is lcated, cnfigure a prt frwarding rule fr the crdinatr's IP address. Set frwarding f UDP traffic frm prt t prt If the cmputer, n which yu are ging t install ViPNet Crdinatr, des nt have a static public IP address, cnfigure the Dynamic DNS service n the crrespnding ruter. T d this, yu shuld create an accunt n sme dynamic DNS service web site, fr example, Deplying the ViPNet Netwrk Administratr's Wrkstatin When yu are deplying a ViPNet netwrk based n the ViPNet VPN sftware, yu shuld deply the ViPNet netwrk administratr's wrkstatin first, by installing ViPNet Netwrk Manager, then ViPNet Client r ViPNet Crdinatr n the netwrk administratr's cmputer. Yu will use the ViPNet Netwrk Manager prgram fr netwrk administering, while the ViPNet Client r ViPNet Crdinatr prgram is required t link the administratr's wrkstatin with ther ViPNet hsts. T install the sftware n the ViPNet netwrk administratr's wrkstatin: 1 Run the ViPNet VPN setup prgram and install the ViPNet Netwrk Manager sftware n the ViPNet netwrk administratr's wrkstatin. Nte: T get yur link fr setup file dwnlad, yu shuld fill in a frm accessible by the fllwing link: Supplement t ViPNet VPN Dcumentatin. Quick Start 4

5 2 Run the ViPNet VPN setup prgram again and install the ViPNet Client r ViPNet Crdinatr prgram n the ViPNet netwrk administratr's wrkstatin. On the first page f the ViPNet VPN setup prgram, select the I d have a key set (.dst file) fr this ViPNet Client (Crdinatr) check bx. Yu can create a *.dst file later in ViPNet Netwrk Manager. After the ViPNet Client r ViPNet Crdinatr sftware installatin is cmpleted, the ViPNet sftware is installed n yur cmputer. But the prgram cannt be laded because the keys are nt installed. D yu want t install the keys nw? message will be displayed. 3 Start ViPNet Netwrk Manager and register it. 4 Upn cmpleting the registratin, create the administratr passwrd. This passwrd is required nly fr the ViPNet Netwrk Manager sftware and cannt be saved. 5 The Create ViPNet Netwrk Wizard will be started. When yu start the wizard, yu have the fllwing ptins: Fllw the wizard instructins and create the basic netwrk structure. Clse the wizard and create a netwrk later. The minimum netwrk structure will be created (ne crdinatr and ne client, n which ViPNet Netwrk Manager is installed) and the main ViPNet Netwrk Manager windw will be displayed. 6 If yu cntinue wrking with the ViPNet Netwrk Creatin wizard, n the Lcatin fr the ViPNet Administratr's Wrkstatin page, chse the netwrk hst type, n which yu want t deply the ViPNet administratr's wrkstatin. 7 If necessary, n the Autmatic netwrk structure creatin page, rename crdinatrs and clients. Fllw the instructins in Preparing fr the Setup (n page 3): specify the crdinatr's lcal IP address, DNS names (dyndns), r static public IP address. 8 On the last page f the wizard, clear the Create key sets upn cmpleting ViPNet Netwrk Creatin Wizard check bx. We recmmend yu t create key sets after yu have made the required settings in ViPNet Netwrk Manager. Figure 1. The last page f the ViPNet Netwrk Creatin Wizard Upn yu have cmpleted the wizard, ViPNet Netwrk Manager will be launched. The ViPNet netwrk administratr's wrkstatin is marked with the icn r in ViPNet Netwrk Manager. 9 Decide if user passwrds shuld be saved t the registry (fr example, t make the lg prcedure quicker and easier). T d this, in the main ViPNet Netwrk Manager windw, in the navigatin pane, click the required ViPNet client, click the Keys tab, and select r clear the Allw t save passwrd check bx. 10 Upn the cnfiguratin, save key sets fr the ViPNet hsts. T d this: Supplement t ViPNet VPN Dcumentatin. Quick Start 5

6 On the Tls menu, select Keys, and then click Save Key Sets. Figure 2. Saving key sets In the Brwse Fr Flder windw, navigate t the flder t save the key sets t. Upn the key sets have been created, in Windws Explrer, the flder will be pened, where key sets, user passwrds f ViPNet hsts have been saved t. Key sets files have a.dst extensin and are stred in flders named after the crrespnding ViPNet hsts. ViPNet user passwrds are saved as a list in the ViPNet.txt file. Yu can view the ViPNet hst administratr's passwrd, which is valid fr all the hsts n yur ViPNet netwrk, in the My Netwrk sectin, n the Passwrds tab. 11 Open the flder created fr the ViPNet netwrk administratr's wrkstatin and duble-click the *.dst file t install the keys. 12 Open the ViPNet.txt file cntaining ViPNet user passwrds. Cpy the user passwrd fr the ViPNet netwrk administratr's wrkstatin's hst. 13 Start ViPNet Mnitr: If yu use Windws 7 r an earlier versin f the Micrsft Windws perating system, n the Start menu, chse All Prgrams > ViPNet > ViPNet Client (Crdinatr) > Mnitr If yu use the Windws 8 perating system, n the Start screen, pen the Apps list and chse ViPNet > Mnitr. ViPNet Mnitr is the ViPNet Client r ViPNet Crdinatr user interface. 14 Paste the cpied user passwrd int the Passwrd bx. If yu have allwed passwrd saving in ViPNet Netwrk Manager, yu may save the passwrd t the registry. As a result, the ViPNet Netwrk Manager and ViPNet Client r ViPNet Crdinatr sftware installatin n the ViPNet netwrk administratr's wrkstatin is cmpleted. 15 Cpy the saved key sets n a remvable drive. Yu will need them fr ViPNet Crdinatr setup (n page 8), as well as fr ViPNet Client setup when yu install the prgram n users' wrk cmputers (see Installing ViPNet Client n a User's Cmputer n page 8). ViPNet Netwrk Manager Interface The ViPNet Netwrk Manager windw is shwn in the figure belw: Supplement t ViPNet VPN Dcumentatin. Quick Start 6

7 Figure 3. ViPNet Netwrk Manager interface The fllwing elements are marked with numbers in the figure: 1 The menu bar. 2 The tlbar. T add r remve buttns displayed n the tlbar, n the View menu, click Custmize Tlbar. 3 The navigatin pane. Displays the tree-like structure f yur ViPNet netwrk. 4 The view pane. Displays prperties tabs fr the element currently selected in the navigatin pane. 5 My Netwrk sectin. Cntains all crdinatrs and clients f yur ViPNet netwrk. 6 Partner Netwrks sectin. This sectin is displayed nly if yu have established partner netwrk cnnectins t ther ViPNet netwrks. It cntains a list f yur partner netwrks. Supplement t ViPNet VPN Dcumentatin. Quick Start 7

8 ViPNet Crdinatr Setup Yu shuld install ViPNet Crdinatr n cmputers that will functin as servers in yur ViPNet netwrk. A crdinatr ensures delivery f ViPNet keys and sftware updates t clients and exchange f ViPNet hsts' status infrmatin and their current addresses. Bth a client and a crdinatr can exchange encrypted messages and files with ther ViPNet hsts. T install ViPNet Crdinatr: 1 Run the ViPNet VPN setup prgram and, in the displayed windw, click Secnd step. Deply netwrk servers (ViPNet Crdinatr installatin). 2 Fllw the instructins. Yu may leave the default settings. 3 Install the keys by duble-clicking the *.dst file yu have received frm yur ViPNet netwrk administratr. Nte: T save a *.dst file fr a ViPNet hst, in the main ViPNet Netwrk Manager windw, in the navigatin pane, select this hst. In the view pane, click the Keys tab and click Save keys. 4 Run ViPNet Crdinatr Mnitr: If yu use Windws 7 r an earlier versin f the Micrsft Windws perating system, n the Start menu, chse All Prgrams > ViPNet > ViPNet Crdinatr > Mnitr. If yu use the Windws 8 perating system, n the Start screen, pen the Apps list and chse ViPNet > Mnitr. 5 T lg n t the prgram, enter the ViPNet hst's user passwrd. Nte: The user passwrd is stred in the vipnet.txt file that is created autmatically when yu save keys t the flder. Installing ViPNet Client n a User's Cmputer Yu shuld install ViPNet Client n users' cmputers where traffic prtectin is required. T install the ViPNet Client sftware n a user's cmputer: 1 Disable the firewall integrated in applicatins such as Kaspersky Internet Security, Nrtn Internet Security and s n, if such applicatins are running n yur cmputer. Supplement t ViPNet VPN Dcumentatin. Quick Start 8

9 Warning: If such a prgram is running tgether with the ViPNet sftware, it may cause cnflicts because ViPNet Mnitr has its wn implemented firewall. Prgrams that d nt have an implemented firewall, fr example, Kaspersky Anti-Virus and Nrtn Anti- Virus, are cmpatible with the ViPNet sftware. 2 Run the ViPNet VPN setup prgram and, in the displayed windw, click Third step. Cnfigure ViPNet netwrk clients (ViPNet Client installatin). 3 Fllw the instructins. Yu may leave the default settings. 4 After restart, install the keys by duble-clicking the *.dst file yu have received frm yur ViPNet netwrk administratr. Nte: T save a *.dst file fr a ViPNet hst, in the main ViPNet Netwrk Manager windw, in the navigatin pane, select this hst. In the view pane, click the Keys tab and click Save keys. 5 Run ViPNet Client Mnitr: If yu use Windws 7 r an earlier versin f the Micrsft Windws perating system, n the Start menu, chse All Prgrams > ViPNet > ViPNet Client > Mnitr If yu use the Windws 8 perating system, n the Start screen, pen the Apps list and chse ViPNet > Mnitr. Nte: The user passwrd is stred in the vipnet.txt file that is created autmatically when yu save keys t the flder. Recmmendatins n ViPNet Crdinatr and ViPNet Client Cnfiguratin and Use Fr the ViPNet netwrk t functin crrectly, fllw the recmmendatins belw: The ViPNet Crdinatr must perate uninterruptedly. At ViPNet Crdinatr startup, hst user lgn shuld be required. Fr the ViPNet Crdinatr Mnitr t start autmatically even at emergency rebt, yu shuld cnfigure saving user passwrd t the registry, as well as autlgn t the perating system. Fr mre infrmatin n system autlgn cnfiguratin, see the Supplement t ViPNet VPN Dcumentatin. Quick Start 9

10 dcument Cmmn Scenaris f ViPNet VPN Administering. Supplement t ViPNet Dcumentatin. Never exit the ViPNet Crdinatr Mnitr and ViPNet Client Mnitr prgrams. If ViPNet Mnitr is nt running, we d nt guarantee security f yur ViPNet netwrk. T hide the main prgram windw, click Clse in the upper right crner f the windw. In ViPNet Client and ViPNet Crdinatr, an integrated persnal firewall is integrated. By default, n all ViPNet clients and crdinatrs, the netwrk filters are cnfigured that allw all public netwrk IP traffic. It means that the integrated firewall is disabled. This allws t avid netwrk access prblems if, n a ViPNet hst, anther firewall (fr example, Windws Firewall) is installed. If yu want t blck unwanted IP traffic, in ViPNet Client r ViPNet Crdinatr, cnfigure the crrespnding netwrk filters. T cntrl firewalls n the ViPNet hsts f yur netwrk centrally, we recmmend yu t use the ViPNet Plicy Manager prgram. If yu are an experienced ViPNet administratr, yu can blck all unprtected cnnectins and allw nly necessary IP traffic. In this case, disable all ther firewalls including Windws Firewall. Warning: We recmmend that yu shuld nt cnfigure allwing netwrk filters unless it is necessary. Fr mre infrmatin abut netwrk filter cnfiguring, see the dcument Cmmn Scenaris f ViPNet VPN Administering, sectin Peculiarities f the Integrated Firewall. By default, virtual IP addresses are used within a WAN, and real IP addresses are used within a LAN. Fr the IP addresses used by ViPNet hsts in yur netwrk t be displayed in the Private Netwrk sectin f the main windw: On the Service menu, click Optins. In the Optins dialg bx, in the navigatin pane, select General. In the view pane, select the Shw IP addresses in the Private Netwrk sectin check bx. Nte: T cnfigure clients, in ViPNet Mnitr sftware, lg nt the administratr mde. Supplement t ViPNet VPN Dcumentatin. Quick Start 10