Document Outline

• About This Guide
• Chapter 1 – Installing RiverMaster Software
• Chapter 2 – Getting Started with RiverMaster
• Chapter 3 – Configuring an ANG-3000/7000
• Chapter 4 – Setting Up Aurorean Services
• Chapter 5 – Controlling Remote User Dialing & Access
• Chapter 6 – Managing Users & Groups
• Chapter 7 – Viewing Server Activity & Statistics
• Chapter 8 – Generating Reports
• Appendix A – Glossary
• Appendix B – ANG-3000/7000 Preconfiguration Stored on a Floppy Disk
  • Chapter 9 – License Agreement & Support
    • Index
• About This Guide
  • Contents of the Guide
  • Conventions Used in this Guide
  • Related Documents
• Installing RiverMaster Software
  • System Requirements
    • Hardware Requirements
    • Software Requirements
  • Installing the Application
    • Upgrading a Previous Release
    • Installation Steps
      • 1 Insert the Aurorean 3.0 System Software CD into the CD ROM drive.
      • 2 Open Windows Explorer, go to the RiverMaster directory on this CD and run the SETUP.EXE program.
      • 3 If a warning message appears stating that Microsoft ODBC is not present on your computer, click...
      • 4 When the Welcome window appears, click Next to continue.
      • 5 When the Software License Agreement window appears, carefully read the agreement and click Yes ...
      • 6 On the Choose Destination Location window, select where you want RiverMaster files stored on th...
      • 7 When the Select Program Folder window appears, assign a name to the RiverMaster program folder ...
      • 8 When the Start Copying Files window appears, click Next to continue the installation or click B...
      • 9 An Information window appears stating that to read the RiverMaster documentation, you must inst...
      • 10 When the Setup Complete window appears, do one of the following:
      • 11 At the second Setup Complete window, choose Yes to restart your computer and click Finish.
    • Starting the Application for the First Time
      • 1 On the main Windows NT/2000 desktop, double-click the RiverMaster icon.
      • 2 In the Aurorean VPN Name field, type a collective name that will be shared by all Aurorean devi...
      • 3 Do one of the following:
      • 4 If you entered both APS IP addresses, select the APS you want to log into and click OK.
      • 5 Type the default user name (netadmin) and password (netadmin) and click OK.
  • Removing RiverMaster Files
    • 1 On your desktop computer, click the Start button, point to Settings, then click Control Panel.
    • 2 Double-click on Add/Remove Programs to launch the utility.
    • 3 On the Install/Uninstall tab page, select RiverMaster from the list of programs and click Add/R...
    • 4 When the Confirm File Deletion window appears, click Yes to confirm that you want to remove Riv...
    • 5 When Remove Shared File? windows appear for shared .DLL and .OCX files, click Yes To All and cl...
    • 6 When the Remove Programs From Your Computer window appears with all items checked, click OK.
    • 7 When a window appears indicating that RiverMaster has been removed, click OK to acknowledge the...
    • 8 Close the Add/Remove Programs control panel.
    • 9 Open Windows Explorer by clicking the Start button, pointing to Programs, and then clicking Win...
    • 10 Locate the RiverMaster program folder.
    • 11 Delete the RiverMaster folder.
    • 12 Restart your computer.
• Getting Started with RiverMaster
  • RiverMaster Overview
  • Logging into RiverMaster
  • Checking Server Status
    • Problem Summary & Users Logged In
    • Aurorean Network Gateway Statistics
    • Aurorean Policy Server Statistics
  • Setting Up a Aurorean Virtual Network the First Time
    • 1 Enter the Aurorean VPN name for your Aurorean Virtual Network equipment and enter the IP addres...
    • 2 After you login with the default user name and password, set the authentication, encryption, an...
    • 3 Allocate IP addresses for remote users to use when they tunnel into the corporate network.
    • 4 Configure the Aurorean Network Gateway to route packets from remote users through the corporate...
    • 5 Determine how remote Aurorean Client Software users will be authenticated.
    • 6 Create mailing lists so that the Aurorean Policy Server sends you Email when alarm, alert, or ...
    • 7 Reboot the Aurorean Network Gateway to put the networking changes into effect.
    • 8 Create POP packages of selected Internet Service Providers (ISPs) from the list of those availa...
    • 9 Define groups for remote Aurorean Client Software users as described in Chapter 6.
    • 10 Add user accounts to each group as described in Chapter 6.
    • 11 Generate a customized Aurorean Client Software installation kit for distribution to members of...
• Configuring an ANG-3000/7000
  • Before You Begin
    • Allocating IP/IPX Addresses to Remote Clients
      • Virtual Subnets for Site-to-Site and Remote Access Tunnel Servers
    • Intelligent Client Routing
    • NAT Server
    • Site-to-Site Tunnels
    • AutoLink Recovery
  • General Aurorean Network Gateway Settings
    • 1 Open the Configuration pullout.
    • 2 In the list of Aurorean devices, expand the tree list under Servers (click the +symbol).
    • 3 Expand the tree list under the name of your ANG.
    • 4 Click on General to display the general network settings tab pages.
    • 5 If you plan to change the Aurorean Network Gateway’s IP address in the future, enter the new ad...
    • 6 To allow remote users to browse the Internet directly while they are tunneled into the corporat...
    • 7 Click the DNS tab.
    • 8 In the Primary DNS and Secondary DNS fields, enter the IP addresses of DNS servers on your netw...
    • 9 Click the WINS tab.
    • 10 In the Primary WINS and Secondary WINS fields, enter the IP addresses of WINS servers on your ...
    • 11 Click the NAT tab.
    • 12 In the NAT field, enter the IP Address of the NAT server on your network.
    • 13 Click Apply to save your changes.
    • 14 Do one of the following:
  • Viewing Aurorean Alternate Address Information
    • 1 Open the Configuration pullout.
    • 2 Click the arrow on the Configure toolbar item at the top left edge of the pullout.
    • 3 Choose Alt IP Addresses as shown in Figure22.
    • 4 View the ANG and APS Primary and Secondary (if previously configured) IP addresses.
    • 5 If you want to change either the ANG or APS Alternate IP address, click Modify, enter a value a...
  • Tunnel Protocols
    • 1 Open the Configuration pullout.
    • 2 In the list of Aurorean devices, expand the tree list under Servers (click the +symbol).
    • 3 Expand the tree list under the name of your ANG.
    • 4 Click on Tunnel Protocols to display PPTP and IPSec protocol tab pages.
    • 5 If you want to prevent remote clients from using one of the tunnel protocols, select the protoc...
    • 6 Click the Authentication tab.
    • 7 Do one of the following:
    • 8 Click the Encryption tab.
    • 9 Do one of the following:
    • 10 Click the Compression tab.
    • 11 Enable or disable MPPC as required.
    • 12 Click Apply to save your changes.
    • 13 Do one of the following:
  • Virtual Subnetting
    • IP Subnetting
      • 1 Open the Configuration pullout.
      • 2 In the list of Aurorean devices, expand the tree list under Servers (click the +symbol).
      • 3 Expand the tree list under the name of your ANG.
      • 4 Click on Subnetting to display IP and IPX subnet tab pages.
      • 5 Click the IP Subnets tab if it is not already displayed.
      • 6 Click Add.
      • 7 Enter the starting address of the subnet in the Address fields.
      • 8 Enter a subnet mask to define the subnet range in the Mask field.
      • 9 Do one of the following:
      • 10 Repeat Step6 through Step9 for each virtual subnet you require.
      • 11 Click Apply to save your changes.
      • 12 Do one of the following:
    • IPX Virtual Networks
      • 1 Open the Configuration pullout.
      • 2 In the list of Aurorean devices, expand the tree list under Servers (click the +symbol).
      • 3 Expand the tree list under the name of your ANG.
      • 4 Click on Subnetting to display IP and IPX subnet tab pages.
      • 5 Click the IP Virtual Networks tab if it is not already displayed.
      • 6 In the IPX Virtual Network Number field, enter an IPX network number to be used by all remote c...
      • 7 Click Apply to save your changes.
      • 8 Do one of the following:
  • Routing
    • Setting Routing Protocol Parameters
      • 1 Open the Configuration pullout.
      • 2 In the list of Aurorean devices, expand the tree list under Servers (click the +symbol).
      • 3 Expand the tree list under the name of your ANG.
      • 4 Click on Routing to display the routing parameter tab pages.
      • 5 Click on the Protocols tab to display protocol parameters for RIP and OSPF.
      • 6 Do one of the following:
      • Setting RIP Properties
        • 1 Perform the steps in the previous section to access RIP properties.
        • 2 To turn on RIP for IPX packets, click Enable under IPX RIP Enable; otherwise, continue with the...
        • 3 Do one of the following:
        • 4 In the Address field, type the address for the router that the ANG will accept updates from and...
        • 5 Repeat Step3 and Step4 for each gateway required.
        • 6 Do one of the following:
      • Setting OSPF Properties
        • 1 Perform the steps in “Setting Routing Protocol Parameters” on page55 to access OSPF properties.
        • 2 Type the area ID shared by the ANG and routers within the subnet in the OSPF Area ID fields.
        • 3 Type the IP address for the Trusted interface in the OSPF Router ID fields.
        • 4 From the OSPF Authentication Algorithm menu, choose the authentication algorithm used by router...
        • 5 Do one of the following:
    • Routing Interfaces
      • Adding or Removing a Routing Protocol for an Interface
        • 1 Open the Configuration pullout.
        • 2 In the list of Aurorean devices, expand the tree list under Servers (click the +symbol).
        • 3 Expand the tree list under the name of your ANG.
        • 4 Click on Routing to display the routing parameter tab pages.
        • 5 Click on the Interfaces tab to display the configuration for each ANG network interface.
        • 6 Select the interface (Trusted or External) from the list under Network Interfaces.
        • 7 Do one of the following:
        • 8 When the Add an Interface Routing Protocol window appears as shown in Figure35, select a routi...
        • 9 Do one of the following:
        • 10 Do one of the following:
      • Configuring RIP for the Interface
        • 1 Add RIP as described in the previous section or select RIP from the Routing Protocols list and ...
        • 2 Choose the version of RIP to use on this interface.
        • 3 In the RIP Authentication fields, choose the algorithm used by routers on your network.
        • 4 Type the RIP authentication password used by routers on your network in the Password field.
        • 5 Type the same password in the Re-Type Password field exactly as you entered it in Step4.
        • 6 Set the RIP Route Importing/Exporting options as follows:
        • 7 Do one of the following:
      • Configuring OSPF on an Interface
        • 1 Add OSPF as described in “Adding or Removing a Routing Protocol for an Interface” on page60 or...
        • 2 Type the OSPF password used by routers on your network in the Authentication Password field.
        • 3 Type the same password in the Re-Type Authentication Password field exactly as you entered it i...
        • 4 Do one of the following:
      • Creating Static Routes
        • 1 Open the Configuration pullout.
        • 2 In the list of Aurorean devices, expand the tree list under Servers (click the +symbol).
        • 3 Expand the tree list under the name of your ANG.
        • 4 Click on Routing to display the routing parameter tab pages.
        • 5 Click on the Interface tab to display the routing protocol(s) selected for each interface.
        • 6 From the Interfaces menu, choose the ANG Ethernet interface to configure (External or Trusted).
        • 7 In the Routing Protocol Selection list, double click Static Routes and click Add in the Static ...
        • 8 In the Gateway address fields, type the IP address of a gateway on this subnet.
        • 9 In the Reachable Subnet fields, type a starting IP address and subnet mask to define a subnet.
        • 10 Click Add.
        • 11 Do one of the following:
  • Adding a Remote Server
    • 1 Open the Configuration pullout.
    • 2 In the list of Aurorean devices, expand the tree list under gateways (click the +symbol).
    • 3 Expand the tree list under Remote Servers.
    • 4 Click Add Remote Server.
    • 5 Choose a name for the server in the Remote Server Name window.
    • 6 Click either IP Address or FQDN (Fully Qualified Domain Name). If you choose IP Address, enter ...
    • 7 Type a User Name and User Password and confirm the password in the fields provided.
    • 8 Choose the tunneling protocol: IPSec or PPTP.
    • 9 Click Add.
    • 10 Click Add Remote Tunnel or select the Remote Server just added and click Add Tunnel.
    • 11 Choose a name for the Remote Tunnel in the provided field.
    • 12 Click the arrow in the Remote Server Name field to bring up a pull- down list and select the R...
    • 13 Select Enabled or Disabled in the Enabled State field.
    • 14 Click Add.
    • Changing Server and Tunnel Properties
      • 1 Select your Remote Server from the tree list under Remote Servers and click Properties in the d...
      • 2 When the Remote Server Properties window appears, change any information and do one of the foll...
      • 1 Select your Remote Tunnel from the tree list under Remote Servers and click Properties in the d...
      • 2 Change any information. If the Remote Tunnel is enabled, select Disabled in the Enabled State f...
      • 3 Re-open the Remote Tunnel Properties window and select Enabled in the Enabled State field if yo...
• Setting Up Aurorean Services
  • Before You Begin
    • Authorization Plug-in Options
      • RADIUS Authentication Servers
      • Plug-in Planning
      • Threads
    • Private/Public Keys for IPSec Authentication
    • Problem Notification
    • Trace Levels
  • Adding an Authorization Plug-In
    • Enterasys Authentication
      • 1 Open the Configuration pullout.
      • 2 In the list of Aurorean devices, expand the tree list (by clicking the + symbol) under the name...
      • 3 From the list of Plug-ins, select Enterasys Authentication.
      • 4 Click Properties.
      • 5 In the Identifier field, type a name that remote users will use to select this plug-in.
      • 6 Optionally, specify a value in the Num Threads field.
      • 7 If you want to make this plug-in the default authorization method, check the Default Plug-In box.
      • 8 Do one of the following:
    • RADIUS Authorization
      • 1 Open the Configuration pullout.
      • 2 Choose Authorization Plug-ins from the Configure pull-down box in the top left corner of the pu...
      • 3 In the Name field, type in a name to describe the plugin.
      • 4 In the Identifier field, type a name that remote users will use to select this plug-in.
      • 5 Optionally, specify a value in the Num Threads field.
      • 6 To make this plug-in the default authorization method, place a check next to Default Plug-In.
      • 7 Click on Radius Plug-In.
      • 8 In the Server Address field, enter the IP address or DNS name of the RADIUS server.
      • 9 In the Shared Secret field, type the same shared secret password you entered on the RADIUS server.
      • 10 Leave the Authentication Port and Accounting Port fields set to their default values.
      • 11 In the Timeout field, enter the number of seconds the APS should wait before resending an auth...
      • 12 In the Retry field, enter the number of times the APS should resend an authentication request.
      • 13 If you were unable to create an Enterasys group on your RADIUS server and need to reuse an exi...
      • 14 If you want the APS to apply an MD4 hash to the key returned by the RADIUS server, place a che...
      • 15 Do one of the following:
      • 16 If you click Commit, you are prompted to re-type the Shared Secret.
      • 17 Reboot the APS to enable the authorization changes.
    • SecurID Authorization
      • 1 Open the Configuration pullout.
      • 2 Choose Authorization Plug-ins from the Configure pull-down box in the top left corner of the pu...
      • 3 In the Name field, type in a name to describe the plugin.
      • 4 In the Identifier field, type a name that remote users will use to select this plug-in.
      • 5 Optionally, specify a value in the Num Threads field.
      • 6 To make this plug-in the default authorization method, place a check next to Default Plug-In.
      • 7 Click on SecurID Plug-in.
      • 8 Optionally, you can change the values for Timeout and Retry from the default values displayed.
      • 9 Click Create.
      • 10 Type the path of the SecurID configuration file (SDCONF.rec) in the ACE/Server and click OK or...
  • Generating Private/Public Keys
    • 1 Open the Configuration pullout.
    • 2 Click on the Activity icon in the lower left corner of the pullout to switch to the Active Tunn...
    • 3 Expand the tree list under Active Service List (click the +symbol).
    • 4 Click on Enterasys Authentication.
    • 5 Click Start to begin generating a new private/public key pair.
  • Using the Notification Service to Send E-Mail
    • Creating a Mailing List
      • 1 Open the Configuration pullout.
      • 2 Choose Notifications from the Configure pull-down box in the top left corner of the pullout.
      • 3 Click Add (the Add button to the right of Mailing Lists).
      • 4 In the Name field, type a descriptive name for this mailing list.
      • 5 In the From Address field, enter the E-mail address that will appear as the originator for E-ma...
      • 6 In the SMTP Server field, enter the name of the SMTP server on your network.
      • 7 To make the new list the default mailing list, place a check next to Default List.
      • 8 Do one of the following:
    • Adding an Address to a Mailing List
      • 1 Open the Configuration pullout.
      • 2 Choose Notifications from the Configure pull-down box in the top left corner of the pullout.
      • 3 Select a mailing list from those shown in the Mailing Lists list box and click Modify (the Modi...
      • 4 Click Add (the Add button below the Recipients list).
      • 5 In the E-Mail Address field, type the E-mail address of the person you want to receive notifica...
      • 6 Use the check boxes to select the events which will generate E-mail and click OK.
      • 7 Do one of the following:
  • Setting Trace Levels
    • 1 Open the Configuration pullout.
    • 2 Click on the Activity icon in the lower left corner of the pullout to view the Active Service L...
    • 3 Expand the tree list under Active Service List (click the +symbol).
    • 4 Select the service of your choice.
    • 5 Click the arrow in the Trace Level field and select None, Low, Medium or High.
    • 6 Click Set to enable the Trace Level.
  • Backing Up the Database
    • 1 Open the Configuration pullout.
    • 2 Click on the Activity icon in the lower left corner of the pullout to switch to the Active Tunn...
    • 3 Expand the tree list under Active Service List (click the +symbol).
    • 4 Click on Indus River Access.
    • 5 Click Start on Backup Database.
    • 6 Click Start for Download Database to copy the database to a directory of your choice on your co...
    • 7 Keep the default name or retype the database File name, select the directory, and click Open.
• Controlling Remote User Dialing & Access
  • Before You Begin
    • TollSaver Database
    • Corporate Dial-Up Access
    • Problem Notification
  • Creating POP Packages
    • 1 Open the Configuration pullout.
    • 2 Expand the tree list (click the + symbol) under POP Packages.
    • 3 Select Make New Package or you may click the arrow next to the Configure menu item at the top l...
    • 4 Select an ISP in the Available list and transfer it to the Selected field by clicking on the do...
    • 5 Do one of the following:
    • 6 When the POP package build is completed, a window similar to Figure59 will display.
  • Adding Corporate ISPs
    • 1 Open the Configuration pullout.
    • 2 Click on the down arrow next to the Configure menu item at the top left edge of the pullout and...
    • 3 Choose Add/Modify ISP from the menu.
    • 4 Click on the ISP Profiles tab and then click Add.
    • 5 Type a name for the new ISP in the field next to the Name menu.
    • 6 In the Address, City, State, and Zip fields, type the ISP mailing address.
    • 7 From the Country list, choose the country where the ISP is located.
    • 8 Type the ISP’s Web site URL in the Web Site field.
    • 9 In the Backbone field, specify the ATM or Frame Relay backbone that serves this ISP (optional).
    • 10 In the Customer Support area, type the Email address in the Email field.
    • 11 In the Phone number field, type the ISP’s 800 phone number for technical support.
    • 12 In the Toll Phone field, type the ISP’s long distance support phone number.
    • 13 Click the ISP Properties tab.
    • 14 In the IP Address field, enter the IP Address of the dialup server.
    • 15 In the Primary DNS and Secondary DNS fields, enter the IP addresses of DNS servers used for na...
    • 16 In the Primary WINS and Secondary WINS fields, enter the IP addresses of WINS servers on your ...
    • 17 In the Default Gateway field, enter the IP address of the gateway used to forward packets to o...
    • 18 In the Cost Index field, enter a number between 0 and 999 to indicate the relative cost of usi...
    • 19 In the Performance Index field, enter a number between 0 and 999 to indicate the performance c...
    • 20 Select the Access Method as follows:
    • 21 In the optional Login Script field, type the full path of a script file for RiverMaster to loc...
    • 22 When the Select New Script Files window appears, click the browse button in the Look in field ...
    • 23 Choose the dial-up protocols supported by the ISP from the Frame Protocols menu.
    • 24 Select the Network Protocols to use over the dial-up connection as follows:
    • 25 Do one of the following:
  • Adding POPs for Corporate ISPs
    • 1 Open the Configuration pullout.
    • 2 Click on the down arrow next to the Configure menu item at the top left edge of the pullout.
    • 3 Choose ISP/POP from the menu.
    • 4 Choose Add/Modify POP from the menu.
    • 5 From the Corporate ISP Name list, choose the ISP that provides the POP or corporate dial-up acc...
    • 6 Click Add.
    • 7 In the Country Code field, click the arrow and scroll down the list to select the country where...
    • 8 Enter the POP’s location in the City and State fields.
    • 9 Type the POP or corporate phone number in the Corporate DialUp Number fields.
    • 10 In the Cost Index field, enter a number between 0 and 999 to indicate the relative cost of usi...
    • 11 In the Performance Index field, enter a number between 0 and 999 to indicate the performance h...
    • 12 In the Modem Type field, enter maximum speed of the modem (in bits per second) located at the ...
    • 13 In the optional Login Script field, type the full path or just the name of a script file for R...
    • 14 When the Select New Script Files window appears, click the browse button in the Look in field ...
    • 15 Do one of the following:
• Managing Users & Groups
  • Before You Begin
    • Group Policies
    • Aurorean Client Installation Kits
    • Client Synchronization
      • 1 The APS determines if client synchronization is enabled for a user’s group.
      • 2 The APS downloads group policy settings, El Gamal keys, and group notices over the management c...
      • 3 With Software Synchronization enabled, Aurorean Client requests new Prescriber scripts and a ne...
      • 4 With Data Synchronization enabled, Aurorean Client compares the dates of its most frequently us...
      • 5 Aurorean Client requests any remaining core and TollSaver POP files that have changed since Aur...
      • 6 The APS relinquishes the management channel and a message appears on the Aurorean Client Prescr...
    • Group Notices
  • Creating a New Group
    • 1 Open the Manage Users and Groups pullout.
    • 2 Under the list of Current Groups, click Add.
    • 3 In the Group Name field, enter a name for that group.
    • 4 In the Description field, enter information that describes the members of the group.
    • 5 To enable client synchronization for this group, begin by selecting Enable Data Synchronization.
    • 6 Complete client synchronization for this group by clicking Enable Software Synchronization.
    • 7 Determine how remote users are assigned IP addresses as follows:
    • 8 Click the Dial tab and set the group’s dialing policies as described in Table 5 and shown in Fi...
    • 9 Click the Password tab and set the group’s password policies as described in Table 6 and shown ...
    • 10 Click the Credit Card tab and set the group’s credit card billing policies as described in Tab...
    • 11 Click the Tunnel tab and set the group’s tunnel policies as described in Table 8 and shown in ...
    • 12 Do one of the following:
    • Adding Users to a Group
      • 1 Open the Manage Users and Groups pullout.
      • 2 Click on the User icon in the lower left corner of the pullout to switch to the User view.
      • 3 From the Group list, choose the group you want the user to join.
      • 4 Under the list of Current Users, click Add.
      • 5 In the User IP Address fields, select how the user receives an IP address when he or she connec...
      • 6 In the Corporate User Name field, type a name for the user.
      • 7 In the Password field, type a unique password.
      • 8 In the Confirm Password field, retype the same characters you entered in the Password field.
      • 9 In the First Name, M.I., and Last Name fields, type the user’s first and last name, and middle ...
      • 10 In the Job Title and Department fields, type information to describe the user’s position in th...
      • 11 Do one of the following:
    • Modifying User & Group Information
      • 1 Open the Manage Users and Groups pullout.
      • 2 Click on the appropriate icon in the lower left corner of the pullout to select the Group or Us...
      • 3 Select the user or group name from the list of Current Users or Current Groups.
      • 4 Click Modify.
      • 5 Change the settings for the user or group as required.
      • 6 Do one of the following:
    • Removing Users & Groups
      • 1 Open the Manage Users and Groups pullout.
      • 2 Click on the appropriate icon in the lower left corner of the pullout to select the Group or Us...
      • 3 Select the user or group name from the list of Current Users or Current Groups.
      • 4 Click Remove.
      • 5 When a confirmation window appears, do one of the following:
  • Creating an Aurorean Client Installation Kit
    • 1 Open the Manage Users and Groups pullout.
    • 2 In the Current Groups list, select the group for which you are creating the installation kit. I...
    • 3 In the field next to the Build Custom Installation kit button, click the browse arrow and choos...
    • 4 Click the Build Custom Installation kit button.
    • 5 When the Build Client Install Kit window appears, use the Output Directory field to specify whe...
    • 6 In the Kit Filename field, specify a name for the selfextracting Aurorean installation kit file.
    • 7 Set the Install Kit Options as follows:
    • 8 To leave this window open on your desktop until the kit completes, place a check next to Leavin...
    • 9 Do one of the following:
    • 10 In the Data Files area, specify the destination directory on your computer for POP phone numbe...
    • 11 In the Zip Files area, specify the destination directory and file name for the Zip file used i...
    • 12 In the Aurorean Client Kits area, specify the source directory of the Aurorean application you...
    • 13 Click OK to close the Advanced Options window and save your changes.
    • 14 On the Build Client Install Kit window, click Build to start creating the installation kit.
    • 15 If you are building a kit for the first time or you specified directories that do not currentl...
    • 16 If you opt to keep the Build Client Install Kit window open during the build, a message appear...
  • Controlling Client Synchronization
    • Viewing Group Policies
      • 1 Open the Configuration pullout.
      • 2 Click the Update tab.
      • 3 In the Global Area, expand the tree list under Group Areas (click the +symbol).
      • 4 Expand the tree list under the name of the group you want to view.
      • 5 To refresh the policy display, click the Refresh button located in the toolbar at the top edge ...
      • 6 To enable client synchronization for a group at any time, rightclick on the group name, select...
    • Building Core Data Files
      • 1 Open the Configuration pullout.
      • 2 Click the Update tab.
      • 3 Choose Build Patch Program from the toolbar on the top edge of the pullout.
      • 4 From the Group menu, choose the group you want to receive the new set of core data files.
      • 5 Click Build.
      • 6 If you have not previously built core files for this group, a Directory Not Found window appear...
    • Uploading Software Synchronization Files
      • 1 Open the Configuration pullout.
      • 2 Click the Update tab.
      • 3 Expand the list under Global Area.
      • 4 Click the Upload icon.
      • 5 Select the directory where the new software sync files reside by clicking the browser.
      • 6 Click Upload to copy the file you chose onto the APS.
  • Setting Up Group Notices
    • 1 Open the Configuration pullout.
    • 2 Click the Update tab.
    • 3 Expand the tree list under Global Area.
    • 4 Click on the Group Notice icon.
    • 5 Click the arrow in the Group field and select a group.
    • 6 Click the arrow in the Expiration Date field and set the date for this notice.
    • 7 Write your notice in the text box.
    • 8 Click Apply to set the Notice for members of the selected Group or Apply to All to set the Noti...
• Viewing Server Activity & Statistics
  • Monitoring System Activity
    • Current Message Activity
      • 1 Open the View System Activity pullout.
      • 2 Select the types of messages you want to view by choosing one of the following:
      • 3 Use the play and pause buttons in the upper left corner to start and pause the message display.
      • 4 To view a detailed description of a particular message, highlight the message in the display an...
    • Advanced Message Viewer
      • 1 Open the View System Activity pullout.
      • 2 Click the Advanced Message Viewer button located at the bottom right corner of the pullout.
      • 3 Using the Time Criteria fields, specify the period of time to display messages.
      • 4 Using the Message Type check boxes, specify the types of messages you want to view.
      • 5 Choose the server that you want to monitor from the Servers list.
      • 6 To view messages that originated from a specific user, enter the Aurorean Client’s VPN user nam...
      • 7 Do one of the following:
      • 8 To view a detailed description of a message, doubleclick on the message.
      • 9 Do one of the following:
    • RiverMaster Options
      • 1 At the RiverMaster main interface, click the RiverMaster Options button above the service statu...
      • 2 In the Performance Options area, enter a value for any message interval.
      • 3 If you wish to change the Max Message List Size or any of the four ListView sizes, enter a valu...
      • 4 Click More to display Message Statistics, the time when this RiverMaster session began and its ...
      • 5 Click OK to save Performance Option changes or Cancel to exit the window without changing the v...
  • Viewing Tunnel Activity
    • 1 On the main RiverMaster interface, click the Aurorean Network Gateway Details button.
    • 2 From the Active Users list, click on a user name.
    • 3 Using the GRE and Compression checkboxes, choose the types of statistics you want to graph for ...
    • 4 Using the controls shown in Figure91, control the graph display as follows:
  • Using SNMP to Gather Statistics
• Generating Reports
  • Report Contents
    • Server Anomaly Report
    • Network Gateway Report
    • Client Anomaly Report
    • Client Report
    • Accounting Report
  • Downloading, Viewing and Exporting Reports
    • 1 Open the Configuration pullout.
    • 2 Expand the list under Reports by clicking the +symbol.
    • 3 Choose the type of report you want to download and view.
    • 4 Choose from daily, weekly, monthly or custom options.
    • 5 Do one of the following:
    • 6 If you chose Export Data, you may keep the default file name or type a new name, select the dir...
    • Printing Reports
    • Exporting Reports
      • Exporting Reports to a Disk File
        • 1 Click the Export button along the top edge of the report display.
        • 2 Select Disk file in the Destination field.
        • 3 Select a program file Format to export the report in and click OK. Refer to the table below to ...
        • 4 If you selected one of the following formats: Crystal Reports, Excel versions 2.1, 3.0, 4.0, or...
        • 5 Select the directory to store the report and click Save. Optionally, you may also rename the fi...
        • 6 If you selected HTML versions 3.0, 3.2 Extended or 3.2 Standard, you are prompted to specify th...
        • 7 Enter a Directory Name and click OK to export the file to the default directory shown or search...
        • 8 If you chose Character-separated values, you are prompted to enter characters to separate and d...
        • 9 If you selected Character-, Tab- or Comma-separated values, Data Exchange Format, or Record Sty...
        • 10 Checkmark the applicable boxes if you want to keep either of these formats or leave them blank...
        • 11 If you selected the following versions of ODBC: Account.txt. CIAnom.txt, Client.txt, DBASE Fil...
        • 12 Type a name for the ODBC table in the field provided and click OK.
        • 13 If you selected the Excel Files or MS Access 97 Database versions of ODBC, you are prompted to...
        • 14 Type an ODBC database name in the field provided and click OK.
        • 15 If you chose the Paginated Text format, you are prompted to set the number of lines per page o...
        • 16 If you chose the Excel 5.0 Tabular format, you are prompted to set column headings. Check the ...
      • Exporting Reports to a Microsoft Exchange Folder
        • 1 Click the Export button along the top edge of the report display.
        • 2 Select a program file Format that the report will be exported in by clicking the arrow under th...
        • 3 Select Exchange Folder in the Destination field and click OK.
        • 4 Select a Profile Name by clicking the arrow next to the field and click OK. You can also create...
        • 5 Click on a folder to store the report and click OK.
      • Exporting Reports Using MAPI
        • 1 Click the Export button along the top edge of the report display.
        • 2 Select a program file Format to export the report in by clicking the arrow under the Format field.
        • 3 Select Microsoft Mail (MAPI) in the Destination field and click OK.
        • 4 Select a Profile Name by clicking the arrow next to the field and click OK. You can also create...
        • 5 Fill in the open fields as you would any mail message and click Send.
• Glossary
• ANG-3000/7000 Preconfiguration Stored on a Floppy Disk
  • Adding Remote Gateways
    • 1 Open the Configuration pullout.
    • 2 In the list of Aurorean devices, expand the tree list under Systems (click the + symbol) and ag...
    • 3 Click Add Remote Gateway.
    • 4 Enter a Remote Gateway Name and IP address in the fields provided.
    • 5 Type a User Name, User Password and confirm the password.
    • 6 Choose the tunneling protocol: IPSec or PPTP.
    • 7 Click Add.
  • Configuring ANG IP Addresses
    • 1 Under Remote Gateways, click Configure Remote Gateway.
    • 2 Enter values in the open fields as follows:
    • 3 Click Next.
  • Configuring Tunnel Protocols
    • 1 If you want to prevent the Remote Gateway from using one of the tunnel protocols, select the pr...
    • 2 Click on the Authentication tab.
    • 3 Do one of the following:
    • 4 Click the Encryption tab.
    • 5 Do one of the following:
    • 6 Click the Compression tab.
    • 7 Enable or disable MPPC as required.
    • 8 Click Next to save your changes. The Subnet Configuration window appears as shown in Figure127.
  • Configuring Virtual Subnets
    • 1 Click Add.
    • 2 Enter the starting address of the subnet in the Address fields.
    • 3 Enter a subnet mask to define the subnet range in the Mask field.
    • 4 Do one of the following:
    • 5 Repeat previous steps for each virtual subnet you require.
    • 6 Click Add to save your changes and Next to bring up the Routing Configuration window as shown i...
  • Configuring Routing Protocols
    • 1 Do one of the following:
    • 2 In the RIP Configuration popup window, if you want to turn on RIP for IPX packets, click Enable...
    • 3 Do one of the following:
    • 4 In the Address field, type the address for the router that the Aurorean Network Gateway will ac...
    • 5 Repeat Step3 and Step4 for each gateway required.
    • 6 Do one of the following:
    • OSPF Properties
      • 1 With the OSPF Configuration window displayed as shown in Figure132, type the area ID shared by...
      • 2 Type the IP address for the Trusted interface in the OSPF Router ID fields.
      • 3 From the OSPF Authentication Algorithm menu, choose the authentication algorithm used by router...
      • 4 Do one of the following:
  • Configuring Routing Interfaces
    • 1 Click the Interfaces tab in the Routing Configuration window.
    • 2 Select the interface (Trusted or External) from the list under Network Interfaces.
    • 3 Do one of the following:
    • 4 When the Add an Interface Routing Protocol window appears as shown in Figure134, select a rout...
    • 5 Do one of the following:
    • Configuring RIP for the Interface
      • 1 In the RIP Interface window, shown in Figure135, choose the version of RIP to use on this inte...
      • 2 In the RIP Authentication fields, choose the algorithm (simple or none) used by routers on your...
      • 3 Type the RIP authentication password used by routers on your network in the Password field.
      • 4 Type the same password in the Re-Type Password field exactly as you entered it in Step3.
      • 5 Set the RIP Route Importing/Exporting options as follows:
      • 6 Do one of the following:
    • Configuring OSPF on an Interface
      • 1 In the OSPF Interface window, shown in Figure136, Type the OSPF password used by routers on yo...
      • 2 Type the same password in the Re-Type Authentication Password field exactly as you entered it i...
      • 3 Do one of the following:
    • Creating Static Routes
      • 1 In the Routing Configuration window, with the Interfaces tab selected, choose the ANG Ethernet ...
      • 2 In the Routing Protocol selection list of the Add an Interface Route Protocol popup window, dou...
      • 3 In the Gateway address fields, type the IP address of a gateway on this subnet.
      • 4 In the Reachable Subnet fields, type a starting IP address and subnet mask to define a subnet.
      • 5 Click Add.
      • 6 Do one of the following:
  • Creating Remote Connections
    • 1 Click Add in the Remote Connection Configuration window, as shown in Figure139.
    • 2 Enter a name which describes the destination ANG of this ANG.
    • 3 Choose an ANG from the drop down list in the Connection to Gateway field.
    • 4 In the Tunnel Values section, enter a User Name.
    • 5 Enter a Password and Confirm Password for this user in the fields provided.
    • 6 Select a tunnel Protocol (IPSec or PPTP) from the pull down list.
    • 7 Select the Initial State you want this ANG to default to upon startup.
    • 8 Click Add.
    • 9 Do one of the following:
    • 10 Select a directory, either on your computer, the A: drive, or another site on the network and ...
  • Loading the Floppy Disk
    • 1 Insert the floppy disk in the Floppy Disk drive.
    • 2 Reboot the ANG.
    • 3 Remove the floppy disk.
• License Agreement & Support
  • Enterasys Networks License Agreement
    • License Grant
    • Warranty
    • Infringement Indemnification
    • Limitation of Liability
    • Termination
    • International Provisions
    • Applicable Law
    • U. S. Government - Commercial Computer Software
  • Technical Support
    • Support from Authorized Resellers
    • Support from Enterasys Networks
      • On-line Services
      • Phone Support
• Index
  • Symbols
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • K
  • L
  • M
  • N
  • O
  • P
  • R
  • S
  • T
  • U
  • V
  • W