Quantum SPARK 1500 - Managing VPN

To Next Page

To Previous Page

Managing VPN

R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Locally Managed Administration Guide|302

Managing VPN

This section describes how to set up and manage Remote Access and Site to Site VPN.

Main Page

Table of Contents5
Overview of Quantum Spark 1500, 1600, 1800, 1900 and 2000 Appliance Series17
1500 Appliances17
1600 And 1800 Appliances18
1900 And 2000 Appliances18
Getting Started with 1500, 1600, and 1800 Appliance Series20
Setting up the Quantum Spark Appliance22
Using Default Wifi23
First Time Deployment Options24
Zero Touch Cloud Service25
Deploying from a USB Drive or SD Card27
Sample Configuration File27
Preparing the Configuration Files28
Deploying the Configuration File - Initial Configuration29
Deploying the Configuration File - Existing Configuration30
Viewing Configuration Logs30
Troubleshooting Configuration Files31
Configuration File Error31
Suggested Workflow - Configuration File Error32
Sample Configuration Log with Error33
Using the Set Property Command33
Configuration and Upgrade Scenarios34
Configuring Cloud Services34
Configuring a Guest Network35
Introduction to the Webui36
The Home Tab37
Viewing System Information37
Controlling and Monitoring Software Blades39
Setting the Management Mode41
Configuring Cloud Services43
Managing Licenses47
Viewing the Site Map49
Notifications49
Assets51
Managing Active Devices54
Blocking a Device Manually54
Toobar Buttons55
Revoking the Hotspot Access56
Adding a New Network Object to Bypass SSL Inspection Based on the Host MAC Address56
Viewing Monitoring Data57
Network58
Troubleshooting59
Viewing Reports60
Using System Tools63
Managing the Device74
Configuring Internet Connectivity74
Getting Started74
Ipv4 Connection Types84
Ipv6 Connection Types85
Ipv6 Configuration86
Other Configuration Types92
Cellular Connections93
Monitoring97
Configuring the Wireless Network100
Dynamic Frequency Selection (DFS)102
Cloning a VAP102
Additional Configurations103
Wireless Scheduler107
Wi-Fi Quality Analyzer107
Configuring the Local Network109
Reserved IP Address for Specific MAC111
Switch111
WAN as LAN112
Monitor Mode113
Mirror Port116
Physical Interfaces117
Bridge118
Vlans122
Alias IP122
VPN Tunnel (VTI)123
Virtual Access Point (VAP)124
Gre126
Bond127
Configuring a Hotspot129
User Authentication131
Disabling the Hotspot132
Configuring MAC Filtering133
802.1X Authentication Protocol134
Configuring the DNS Server136
Configuring the Proxy Server137
Backup, Restore, Upgrade, and Other System Operations138
Using the Software Upgrade Wizard141
Welcome141
Upload Software141
Upgrade Settings141
Upgrading142
Backing up the System142
Configuring Local and Remote System Administrators144
Administrator Roles145
Local Administrators145
Remote Administrators148
Pairing a Mobile Device149
Configuring a RADIUS Server for Non-Local Quantum Spark Appliance Users150
Configuring Administrator Access154
Two-Factor Authentication (2FA)156
Managing Device Details160
Managing Date and Time161
Configuring DDNS and Access Service162
Ddns162
Reach My Device162
Remote Access to the Webui163
Remote Access to the CLI163
Using System Tools164
Advanced Routing175
Bgp175
Pim175
Ospf175
Inbound Route Filters176
Route Redistribution176
Routing Options176
Routing Monitor176
Configuring the Routing Table177
Background177
Routing Table Columns178
Limitations179
Adding a Specific Ipv4 Static Route179
Adding a Default Ipv4 Static Route183
Editing an Existing Static Route187
Deleting an Existing Static Route187
Enabling or Disabling an Existing Static Route187
Route Monitoring188
Static Routes and SD-WAN189
Managing Installed Certificates189
Managing Internal Certificates192
Configuring High Availability193
Background193
Limitations195
Prerequisites196
Configuration Workflow197
Viewing Cluster Interfaces200
Viewing the Cluster Status202
Failing over Manually203
Changing Network Configuration of Cluster Members204
Resetting Cluster Configuration204
Upgrading a Cluster Manually205
Cluster Managed by Quantum Spark Portal206
Advanced Settings207
Filtering the List of Attributes207
Configuring the Attribute Values207
Restoring Default Values207
Clarifications208
Changes between Versions208
Managing the Access Policy210
Configuring the Firewall Access Policy and Blade210
Firewall Policy211
Application & URL Filtering212
Updates213
User Awareness214
Tracking215
More Information215
Working with the Firewall Access Policy216
Firewall Policy216
Configuring Access Rules219
Updatable Objects221
Customizing Messages222
Defining Firewall Servers224
Defining NAT Control227
Sd-Wan232
Gateway Prerequisites232
SD-WAN Known Limitations232
Getting Started with SD-WAN233
Predefined Steering Behavior Objects242
Configuring User-Defined Steering Behavior Objects242
Static Routes and SD-WAN244
Advanced - Creating and Editing NAT Rules245
Inspecting Voip Traffic248
Introduction248
Configuration250
Smart Accel251
Configuring Smart Accel in R81.10.05 and Higher251
Smart Accel for Services251
Smart Accel for Assets252
Configuring Smart Accel in R81.10.00253
Iot254
Getting Started254
Monitoring255
Configuring256
Limitations256
Working with User Awareness257
Workflow257
Identity Sources257
Enabling User Awareness258
Active Directory Queries258
Browser-Based Authentication259
Identity Collector260
Configuring Qos262
Introduction262
Prerequisites262
Configuration262
Configuring the Qos Blade263
Qos263
Qos Default Policy264
Configuring the Qos Policy266
SSL Inspection Policy270
SSL Inspection270
Deploying SSL Inspection270
SSL Inspection Bypass Policy272
HTTPS Categorization273
SSL Inspection Exceptions275
SSL Inspection Advanced276
Managing Threat Prevention277
Configuring Threat Prevention Blade Control277
Enabling and Disabling Threat Prevention277
Enabling Threat Emulation Policy for the FTP Protocol278
Configuring a Custom Policy for Threat Prevention278
Scheduling Threat Prevention Updates280
Configuring Threat Prevention Policy Exceptions281
Threat Prevention Exceptions281
Allowlists282
Threat Prevention - Horizon SOC283
Viewing Infected Devices285
Viewing the IPS Protections List288
Advanced Threat Prevention Engine Settings289
Ips289
Anti-Virus289
Anti-Bot292
Threat Emulation293
User Messages295
Configuring the Anti-Spam Blade Control297
Configuring Anti-Spam Exceptions299
SSH Authentication299
Managing VPN302
Configuring VPN303
Configuring Remote Access VPN303
Introduction303
Prerequisites303
Remote Access Configuration304
L2TP VPN Client Configuration305
Configuring Site to Site VPN with a Preshared Secret305
Introduction305
Prerequisites305
Configuration305
Monitoring305
Configuring Site to Site VPN with a Certificate306
Introduction306
Prerequisites306
Configuration306
Trust Procedures306
Monitoring VPN308
Configuring the Remote Access Blade309
Getting Started with VPN Remote Access310
Advanced Options319
Changing the Default Remote Access VPN Port319
Connections between Remote Access VPN Clients in the same Office Mode Pool320
Configuring Remote Access Users322
Remote Access - Connected Remote Users327
Configuring Remote Access Authentication Servers328
Configuring Advanced Remote Access Options333
Office Mode333
DNS Servers for Remote Access Users335
DNS Domain Name335
SSL VPN Bookmarks336
Configuring the Site to Site VPN Blade337
Harmony Connect339
Configuring VPN Sites340
Configuring Advanced Site to Site Community Settings349
Viewing VPN Tunnels350
Configuring Advanced Site to Site Settings352
Configuring a Local Encryption Domain352
Configuring the Appliance Interfaces353
Configuring the IKE ID Type for the Ikev2 Main Mode (MM) Negotiation with 3Rd-Party VPN Peers353
Tunnel Health Monitoring356
Managing Trusted cas357
Managing Installed Certificates360
Managing Internal Certificates362
Managing Users and Objects364
Working with User Awareness364
Workflow364
Identity Sources364
Enabling User Awareness365
Active Directory Queries365
Browser-Based Authentication366
Identity Collector367
Configuring Local Users and User Groups369
Configuring Local and Remote System Administrators371
Administrator Roles372
Local Administrators372
Remote Administrators375
Pairing a Mobile Device376
Configuring a RADIUS Server for Non-Local Quantum Spark Appliance Users377
Managing Authentication Servers381
RADIUS Server382
TACACS+ Server385
Active Directory387
Managing Applications & Urls390
Managing System Services393
Managing Service Groups397
Managing Network Objects399
Managing Network Object Groups403
Logs and Monitoring405
Viewing Security Logs405
Viewing System Logs409
Configuring External Log Servers410
External Check Point Log Server410
Syslog Server Configuration412
Secured Syslog413
Notifications413
Managing Active Devices414
Blocking a Device Manually414
Toobar Buttons415
Revoking the Hotspot Access416
Adding a New Network Object to Bypass SSL Inspection Based on the Host MAC Address416
Assets416
Wireless Active Devices420
Paired Mobile Devices420
Viewing Infected Devices421
Viewing VPN Tunnels424
Viewing Active Connections426
Access Points427
Viewing Monitoring Data427
Viewing Reports427
Dr. Spark427
Using System Tools430
Snmp441
SNMP Traps Receivers442
SNMP Traps442
SNMP Traps for VPN Tunnels442
SNMP Traps for Hardware Sensors442
Advanced Configuration444
Upgrade Using a USB Drive444
Upgrade Using an SD Card446
Boot Loader448
Upgrade Using Boot Loader450
Restoring Factory Defaults451
Custom Default Image453
Fonic Bypass453
Configuring Bypass Mode in the Webui454
Configuring Bypass Mode in Gaia Clish454
Restful API455
Enabling and Disabling the REST API455
Request Structure455
Response Structure456
Versioning456
REST API Commands457
Login457
Logout458
Generate-Report459
Run-Clish-Command460

Quantum SPARK 1500 - Managing VPN

Table of Contents

Related product manuals