CalAmp Vanguard 3000 User Manual

Also see for Vanguard 3000: Quick start guide Quick start guide

Contents

CalAmp Vanguard 3000 User Manual Manual pdf 96 page image

4.5 DMZAlternately, DMZ can be enabled on the Vanguard router. When DMZ is enabled, all traffic destined to the Vanguard’scellular IP address that is received from the Internet is forwarded to the DMZ host. The IP address of the DMZ host isspecified by the user. Using DMZ can eliminate the need to specify many individual port forwarding rules. However, byexposing all the ports on the local device, the local device may become more susceptible to attacks.If specific Port Forwarding rules exist in the IP Mapping Table, they will take precedence over the DMZ host.4.6 FRIENDLY IP ADDRESSFriendly IP addresses can be used with either port forwarding or DMZ to provide an additional layer of security. WhenFriendly IP addresses are used, the Vanguard will only forward packets to the LAN if the source IP address of thereceived packet matches either the specific IP address or range of IP addresses specified in the Friendly IP address field.This feature can be disabled by entering 0.0.0.0 in the friendly IP address field. In this case, packets from any host onthe Internet can be forwarded to the LAN when either DMZ or Port Forwarding is enabled.5 IPSEC AND VPN PASS-THROUGH DEPLOYMENT GUIDEThis chapter will help anyone who wants to build a secure IP network using IPsec and the Calamp Vanguard 3000Cellular Modem. Case #1: Vanguard Configured IPsec Client will demonstrate the Vanguard 3000 when used as anIPsec client. Case #2 Vanguard Configured to use a DMZ for VPN Pass-Throughwill show the Vanguard 3000 passing anIPsec connection from WAN to LAN. (VPN Pass-through).5.1 BENEFITS OF IPSECIPsec (Internet Protocol Security Standard) is an industry driven standard that ensures confidentiality, integrity, andauthenticity of an IP network. IPsec is a key component of this standard-based, flexible solution for deploying anetwork-wide policy.There are two significant benefits to IPsec compliance for our customers: enhanced security features andinteroperability.― Enhanced security features give our customers the comfort of knowing that IP based communications are usingthe most secure and comprehensive standard available today for encryption and authentication.The Vanguard IPsec encryption support: AES-128, AES-256 and 3DES.The Vanguard IPsec authentication support: MD5 and SHA1.All tunnels are created using the ESP (Encapsulating Security Payload) protocol.― Protocol interoperability means that an IPsec compliant device, such as the Vanguard 3000, will be able toexchange keys and encrypted communications with another IPsec compliant product such as a CISCO router.IPSEC compliance ensures that these two different products can negotiate and maintain a secure communicationwith each other.Vanguard 3000 Series Multicarrier Cellular Data Modem & IP Router PN 001-7300-100 Rev. B | Page 90