QnoKey Manual
Contents
1. Password LI RN Please note What has been entered here is the WAN IP address of the router firewall Assuming there are several WAN ports and IP addresses in this router firewall then enter any of them connection can be successfully established with the router firewall and the burning operation for the QnoKey can be carried out as long as the login ID and password are correct N GINO your future life After successfully established a connection the icon on the desktop s right corner will change from disconnected from gray to orange color and the dialog box for burning connection data will be brought up as shown QnoKey IPSec VPN USB Mobile Key to connected in the figure below a Te 3 E Q G your EEG life M M Tu E Select the Group Account from the drop down list Enter the user name to identify this QnoKey user Click Export to save this account into QnoKey Please note that you have to set the valid Group Account on router before you exercise this program You can check Bind MAC box to enable MAC Binding function and enter the MAC Address of Client PC that you want to bind Group Account Host Name Bind MAC Group Account testa Y Host Name Bind MAC po foo foo foo on foo foo pi m joo D MAC foo oo foo SSL Port Number ud n WINS Server IP 0 with the tail of the letter Q in the logo changing The pull down2. Please select English US 4 After finishing checking the system s configuration the setup program enters into the initial installation screen as shown in the figure below i Onokey Pmode Englich InstallShield Wizard Welcome to the InstallShield Wizard for QnoKkey_Pmode_Englich The InstallShieldi R Wizard will install Qnokey_Pmode_Enaglich on your computer To continue click Next WARNING This program is protected by copyright law and international treaties Cancel Please click Next 5 The QnoKey software license agreement will appear Please take your time to read it through carefully and then click on the option I accept the terms in the license agreement as shown below 24 s your future life QnoKey IPSec VPN USB Mobile Key i OnoKey Pmode Englich Installshield Wizard License Agreement Please read the Following license agreement carefully ATTENTION THIS QNOEEY PROGRAM WITH PMODE amp UMODE HERAFTRE CALLED PROGRAM IS PROVIDED UNDER THE FOLLOWING LICENSE AGREMENT HERAFTRE CALLED LICENSE WHICH DEFINES WHAT YOU MAY DO WITH THE PROGRAM AND CONTAINS LIMITATIONS ON WARRANTIES AND OR REMEDIES THIS LICENSE IS GRANTED BY ONO TECHNOLOGY INC FOR PROGRAM PURCHASED EITHER DIRECTLY OR THROUGH ANY AUTHORISED AGENT OF THE COMPANY IMPORTANT CAREFULLY READ THIS LICENSE BEFORE USING THIS PROGRAM INSTALLING COPYING OR OTHERWISE USING THIS PROGRAM INDICATES YOUR A amp ACEHOWLEDGMENT
3. f GING your future life QnoKey IPSec VPN USB Mobile Key English User s Manual N your future life QnoKey IPSec VPN USB Mobile Key Contents NE INOQUCHON e 2 Il QnoKey Product Specifications 6 III Deployment Configurations u u u u 7 3 1 Requirements for the Installation and Operating Environment of the Connectivity Software 7 3 2 Configuration PrOCEdUres i 13 IV Firewall Router Configuration and QnoKey Group Administration 14 4 1 QnoKey Main Configuration Screen T r aa a ann nnn na 14 4 2 Group ACCOUNESEWD SCIE iatale 15 GOUD ACCOUNT ES 18 V Burning QnoKey Writing Connectivity Data by Administrator 21 5 1 Installing the QnoKey Management Software nennen nhan nnn nnns 21 5 2 Run QnoKey Management Software to Burn USB Keys 2 VI QnoKey User Connection Mode T 12 6 1 Running the QnoKey User Connection Progra
4. N your future life QnoKey IPSec VPN USB Mobile Key V Burning QnoKey Writing Connectivity Data by Administrator This section is mainly concerned with how to set PIN and write the data required for establishing IPSec VPN connection in a QnoKey Before burning the QnoKey you will need to install the QnoKey management software The software can be installed from the CD ROM For installation instructions please refer to the installation procedures below 5 1 Installing the QnoKey Management Software There are two types of QnoKey installation softwares One is the QnoKey management software used by the network administrator to burn the QnoKey and to write connection data to it the other is the QnoKey client software intended for use by the ordinary user When installing the QnoKey management software QnoKey client software will also be installed automatically However if only OnoKey client software is installed OnoKey management software will NOT be installed along with it Place the QnoKey CD ROM into your computer s optical drive The disc will run automatically and display the following language selection screen If the disc does not start automatically run Untitled exe file under the disc s directory 21 N CINCO your future life QnoKey IPSec VPN USB Mobile Key wey GINO your future life 1 Select ENGLISH and two options QnoKey Management Software and QnoKey Client Software wil
5. block connections from a QnoKey already identified as lost or remove storage parameters of a lost QnoKey automatically to minimize losses In addition after each use all temporary data QnoKey stores on the computer that may present security concerns will be removed This is a very practical design for users using a public computer and is an added layer of protection in terms of information security N your future life QnoKey IPSec VPN USB Mobile Key Easy to use With the Plug amp Play USB interface and the included client software after the QnoKey has been inserted all the user needs to do is to enter the password in order to connect to the VPN automatically After the QnoKey client software has been installed there is no need for the user to perform any configuration tasks It is possible for users with virtually no knowledge about the network to get started quickly Easy to manage Supports management at the group level allows groups to be duplicated to save time and effort On the router management screen the connection status of all QnoKey users are clearly displayed so that an enterprise network manager can easily manage enterprise users servers and application resources centrally reducing the workload and at the same time achieving better security Cost savings It can replace the more expensive external node stand alone VPN networking equipment thus reducing the cost of VPN deployment significantly Mainten
6. cost effective VPN connectivity solution possible In Qno Router series that have QVM VPN capability almost all of them support QnoKey connectivity and are able to accept remote connection with a QnoKey QnoKey can be used with the following operating systems with a high degree of compatibility Windows 2000 XP Vista Win 7 Management software works with Qno VPN firewall router to allow network management to carry out initial user configurations for QnoKey on the management side computer as well as the Personal Identification Number PIN for QnoKey itself With the QnoKey and PIN all the user needs to do is to insert the QnoKey into the USB interface of a computer with the software already installed enter the PIN code and an IPSec VPN connection will be automatically set up The product is simple to configure easy to use and combined with encryption parameters realizing a more convenient and more secure VPN connection A Comprehensive List of QnoKey Features is Summarized as follows Highly security The USB hardware has a built in encryption chip that can bind with the computer support user authentication and use full IPSec VPN data encryption and authentication With multiple security checks it is guaranteed that the key cannot be falsified QnoKey client life time can be set Upon reaching expiration date the key will be rendered ineffective to ensure security Support for Stolen Key Login Actions Able to
7. matter the lawsuit is related to agreement omission or other tort 5 Other Clauses 5 1 The potency of this Agreement is over any other verbal or written records The invalidation of part or whole of any clause does not affect the potency of other clauses 5 2 The power of interpretation potency and dispute are applicable for the law of Taiwan If there is any dissension or dispute between users and Qno it should be attempted to solve by consultation first If it is not solved by consultation user agrees that the dissension or dispute is brought to trial in the jurisdiction of the court in the location of Qno In China Mainland the China International Economic and Trade Arbitration Commission is the arbitration organization N your future life QnoKey IPSec VPN USB Mobile Key I Introduction QnoKey IPSec VPN USB Mobile Key is a highly secure product from Qno Technology Inc that is easy to use and maintain It addresses the needs of enterprises to allow personnel to access applications on corporate VPNs remotely and securely from outside offices The QnoKey USB flash drive is designed as lightweight and portable With the built in encryption chip and Plug amp Play interface it is not only easy to use but is also equipped with an added layer of protection With the included client side connectivity software just entering the password you can quickly establish VPN connections This makes a more user friendly secure and
8. refer to previous section on the installation of the software via CD ROM Sec 5 1 and choose to install only the QnoKey Client Software There is no need to install the management software since the ordinary user will not need to run the QnoKey management software 6 1 Running the QnoKey User Connection Program After the OnoKey Client Software has been installed the QnoKey icon will appear on your computer s QnoKey Umo desktop as shown in the figure to the right o establish a connection via QnoKey please click on the icon to run the program The following main connection window will appear Please click the button QnoSoftKey to set up connection for QnoKey If you want to set up connection with USB Key please plug in the USB Key into your computer Pin Code Use Auto Connect on next time Please Change your PIN code if this is checked You may select the language at the top of the page Currently supported languages are Simplified Chinese Traditional Chinese and English The information in the gray area provides step by step 12 N your future life QnoKey IPSec VPN USB Mobile Key instructions on how the installation can be carried out For password please enter the PIN code personal identification code obtained from the network administrator along with the QnoKey intended for the ordinary user The option Use Auto Connect next time allows you to simplify
9. the Manual this statement of intellectual property must also be copied and indicated Otherwise Qno regards it as tort and relevant duty will be prosecuted as well 2 Authority Scope of the Manual The user may install use display and read this Manual on the complete set of computer 3 User Notice If users obey the law and this Agreement they may use this Manual in accordance with the Agreement The hardcopy or softcopy of this Manual is restricted to using for information non commercial and personal purpose Besides it is not allowed to copy or announce on any network computer Furthermore it is not allowed to disseminate on any media It is not allowed to modify any part of the file Using for other purposes is prohibited by law and it may cause serious civil and criminal punishment The transgressor will receive the accusation possibly 4 Legal Liability and Exclusion 4 1 Qno will check the mistake of the texts and diagrams with all strength However Qno distributors and resellers do not bear any liability for direct or indirect economic loss data loss or other corresponding commercial loss to users or relevant personnel due to the possible omission 4 2 In order to protect the autonomy of the business development and adjustment Qno reserves the right to adjust or terminate the software Manual any time without informing users There will be no further notice regarding the product upgrade or change of techn
10. the steps of starting the program and entering the PIN code If this feature is enabled the user connection program will start itself the next time you insert the USB Key The QnoKey connection process will be carried out automatically and there is no need to enter the password After the option has been checked the system will ask the user to confirm the activation of Auto Connect and proceed to disable the Auto execute when Windows starts up function Note Qno Eey Umode Function Auto Connect will be cancel if Auto execute when Windows startup be switch on ak 20 Sob Selecting Yes will cause the following warning message box to pop up which indicates that this feature will take effect only after the system restart In another word before the next reboot unplugging the USB Key and re inserting it will not perform an auto connect QnoEey_Umode You have to restart thus PC to make change effective Note Only one of Auto execute when Windows startup and Auto Connect can be enabled at a time If Auto execute is enabled the QnoKey connection program will be automatically run and the user needs to manually enter the PIN code on the connection dialog as shown in the figure below 13 N CINCO your future life QnoKey IPSec VPN USB Mobile Key GINO your future life Please click the button QnoSoftKey to set up connection for QnoKey If you want to set up connec
11. 445 WINS Server IP If part of this information needs to be modified for a different user s QnoKey simply edit the information in the field s and there is no need to go through the same steps all over again This feature can save the administrator a lot of time entering data from start to finish It will reduce the time required to burn all the Keys significantly especially when there is a high demanding for QnoKey connection If you press No then the burning operation for this QnoKey is completed and the management program as well as the burning process will automatically shut down Please note When management program is minimized only the icon will remain on the system tray as shown in the E pi HEA figure to the right At this time if you right click the Q shaped icon the following icon menu will appear your future life QnoKey IPSec VPN USB Mobile Key About Auto execute when Windows startup Open Retum to Privilege Mode Export Exit X About This will display the software version of the QnoKey management program as shown the figure below About YEN Client IPSec VPN Client Version 2 6 RC 5 Copyright 2007 ana Technology Inc All rights reserved X Auto execute when Windows starts up If this option is checked then next time the computer restarts the QnoKey management program will be executed automatically X Open Open and return to the original QnoKey manag
12. Connectivity Software Before install OnoKey the application suite performs the necessary configuration please check your computer system to see if it meets the following requirements A Your computer s operating system must be one of the following Windows 2000 Windows XP Windows 2003 Windows Vista Windows 7 B Your computer must have one or more unused USB ports Notice Please log on as Administrator the user with maximum level of authorization on the computer for software installation For Vista users before attempting to install QnoKey software go to Control Panel gt User Accounts Disable User Account Control C Please check whether or not your Qno firewall router supports QnoKey functionality If it does not you will not be able to use QnoKey to connect VPN D Under Windows operating system confirm that the following steps are completed 1 Start 5mart Card service and configure it to start automatically upon system start up The example below uses Windows Vista for illustration gt Start gt Run gt Type in services msc to enter into Service Manager Please note that only users with Administrative privileges can enter into the Service Manager N your future life QnoKey IPSec VPN USB Mobile Key 21x Type the name of a program Folder document or Internet resource and Windows will open it For you Cancel Browse gt Enter service manageme
13. Internet Backgammon Internet Checkers 2 Internet Explorer Intemet Hearts Internet Reversi Internet Spades _ f N your future life QnoKey IPSec VPN USB Mobile Key If it is not on the list click Browse locate QnoKey s executable file under the installation folder Select it and add it to the firewall s Exceptions list The installation path is usually C ProgramFiles Qno QnoKey where Pmode is the executable file of the QnoKey management software Umode is QnoKey user s executable for connection It is recommended that both be added to the list Browse A xl Look in QnoKey Ot Gr Fe tools wz Le AutoStart UA fos ipseclose WO onokey_Pmode e Qnokey_Umode Desktop My Documents ME My Network File name Places i Files of type Applications exe com icd Cancel ZZ 3 Disable the computer s antivirus software or the firewall that comes with the antivirus software If you do not wish to disable it you will have to add QnoKey to the exceptions list of the antivirus software or the firewall that comes with it Consult the software vendor s manual for how this can be done x Please note In the event that there are other antivirus softwares firewalls that come with antivirus software specialized firewalls or other applications other than those provided by Windows that cause Qnokey to fail to make VP
14. N code Press the Connect button at this time The QnoKey connection program will attempt to establish a connection using the data that has been burned onto the QnoKey by the network administrator Refer to the following table for messages that will appear during the connection process Set up VPN tunnel Establishing VPN connection to router VPN connecttion OK If the connection with the VPN is established successfully the message VPN Connection OK will appear in the window as shown in the following diagram 15 Q CINCO your future life QnoKey IPSec VPN USB Mobile Key LINO your future life If the VPN connection complete the message will show VPN connection OK If the pop out message shows VPN connection fail please contact to your network administrator You can disconnect the VPN connection by clicking Disconnect and to recover A call out message box with the text Status Connected will also appear at the lower right corner of the 1 QuoEey X status Connected system tray where the Q icon is located and the tail of the letter Q will turn orange If there is a problem during the process and a connection cannot be established please record the text of the connection messages and send it to the agent distributor or the manufacturer s technical support staff for consultation 16 your future life QnoKey IPSec VPN USB Mobile Key 6 2 Terminating VPN Connection
15. N connections while Qno technical support staff or customer service personnel will do their best to assist you in configuring your system we cannot guarantee that a connection can always be made or that there will be no subsequent problems Please consult the relevant software vendors for compatibility issues 12 N your future life QnoKey IPSec VPN USB Mobile Key 3 2 Configuration Procedures Follow the installation procedures 1 Initial configuration for QnoKey group information can be done through the software management interface of the firewall router Through Qno firewall router configuration UI the Network Administrator can carry out the initial configurations about information in QnoKey client user 2 Data is written to QnoKey via the QnoKey management software and the PIN personal user identification code is set Through the QnoKey management software the QnoKey PIN is set The data required to establish IPSec VPN connection in the firewall router is written to QnoKey and the QnoKey is burnt successfully 3 Preparations before dialing up the VPN After configuring the QnoKey account the Network Administrator can return the QnoKey and PIN to the mobile user meanwhile install the client connectivity software on the CD ROM for the mobile user 4 Using QnoKey software in client user to establish VPN connection The user all needs to do is to insert QnoKey into the USB port in an installed co
16. ONO your future life QnoKey IPSec VPN USB Mobile Key tal QnoKey Pmode Englich InstallShield Wizard InstallShield Wizard Completed The InstallShield Wizard has successfully installed GnoKeyv Pmade Englich Click Finish to exit the wizard Please press the Finish button to end the installation program On the desktop a QnoKey shortcut icon will appear as shown in the following figure It indicates that the management software has been successfully installed OnoEev Pro de 5 2 Run QnoKey Management Software to Burn USB Keys Before running the QnoKey management program to burn data to a QnoKey be sure to note the following 1 Ensure that you have already completed the initial configurations in QnoKey client user group settings 2 Please confirm that the QnoKey management software has been successfully installed on your computer 3 Make sure that the QnoKey has been inserted into the USB port As the QnoKey administrator before you proceed to burn a QnoKey you need to obtain the administrator s account and password for the Ono router firewall in order to be able to register the router in the QnoKey management program N ONO your future life QnoKey IPSec VPN USB Mobile Key After you have confirmed the above follow the procedures below to burn the QnoKey Li OnoKew F de 1 Click on the QnoKey icon as shown in the right of destop to bring up th
17. THAT YOU HAVE READ THIS CO I do not accept the terms in the license agreement If you do not accept the terms of the agreement you will not be able to continue the installation process 25 N CINCO your future life QnoKey IPSec VPN USB Mobile Key 6 Following you need to confirm the software installation folder You can specify a different installation path by yourself generally the default path will work al OnoKey Pmode Englich InstallShueld Wizard Destination Folder Click Next to install to this folder or click Change to install to a different folder Y Install Qnokey_Pmode_Enalich to C Program Files Ono InstallShield Click Next after confirmation CINCO your future life QnoKey IPSec VPN USB Mobile Key 7 Ready to install the program T OnoKey Pmode Englich InstallShield Wizard Ready Eo Install the Program The wizard is ready to begin installation Click Install to begin the installation IF you want to review or change any of your installation settings click Back Click Cancel to exit the wizard InstallShield 8 The following figures show the installation processes ix OnoKey Pmode Englich Installshield Wizard Installing QnoKey Pmode Englich The program features vau selected are being installed Please wait while the InstallShield Wizard installs Qnokey_Pmode _ Endlich This may take several minutes Status InstallShield N D
18. ance free with no external nodes or equipment to manage thereby saving on human resources costs N your future life QnoKey IPSec VPN USB Mobile Key Product deployment diagram 22 j Application Server Staff PCs 2 Such as ERP WEB E mail Server T lt 2 QoS guarantees f a8 Headquarters Central Office VPN bandwidth VPN Router support QnoKey VPN Function VPN internet 2 El ex EE QnoKEY Mobile User f QnoKEY Hemote Side PC The features currently supported by the majority of Qno s VPN series products are listed in the following table QVF8034 QVF8042 QVF8072 QVF8205 QnoKey Max No of supported channels 1005250 300 500 300 500 500 750 N your future life QnoKey IPSec VPN USB Mobile Key QVF8210 QVF8230 QVF7105 QVF7405 QVF7403 QnoKey Max No of 1000 supported channels 75021000 1000 1200 100200 200250 300 400 Note The maximum number of QnoKeys that each model supports can only be achieved after the number of channels used by other VPN related applications e g IPSec VPN PPTP QVM is decreased to the minimum level zero channel N your future life QnoKey IPSec VPN USB Mobile Key II QnoKey Product Specifications Software Application Specifications USB Plug amp Play hardware to create a VPN connection users only need enter the password Supports Windows 2000 XP Vista Win7 Operating Systems Uses ful
19. e If the client is a regular user network administrator can select Forever for a permanent usage If the situation is more complicated or if the QnoKey is 16 N your future life QnoKey IPSec VPN USB Mobile Key provided for mobile users on business trips to ensure a secure VPN the administrator may set the life time for the QnoKey just a few days Here the range is fromi to 99 days The exact desired number of days can be entered here Account Number This represents the maximum allowable number of Limitation USB keys that can be written burned by this user group There is a maximum of 100 online users limited for each group Stolen Key Login On the drop down menu select the action desired for a Action lost or stolen QnoKey If the QnoKey is lost by accident there are three possible actions available 1 No protection Take no restrictive actions after lost 2 Clear Key content If a VPN connection is established after the QnoKey has been lost the data associated with this OnoKey will be deleted 3 Prohibit connection The QnoKey will be blocked and locked out after it is lost and cannot be used to access the VPN Press the Apply button to enable the rule settings for this group Click Cancel to undo the settings that have been entered After pressing the Apply button a dialog box will pop up asking you if you would like to continue to add another group Click OK to continue addi
20. e QnoKey management program 2 The configuration page will appear firstly as shown in the figure below You may select the language at the top Currently supported languages are Simplified Chinese Traditional Chinese and English The information in the gray area provides step by step instructions on how the installation can be carried out Ba ONG your future life Enter the PIN code and click to continue the program You can change the PIN code by clicking Change button Click Erase Key to Factory Default button to clean all the data in this QnoKey and set its PIN code as 1111 Click Cancel to close program Pin Code Change Erase Key to Factory Default First you need to enter the PIN code personal identification code in the password box The factory default is 1111 If you wish to modify your PIN later you can press the Change button and make the changes after you have entered both the old and new codes as shown in the figure below N CINCO your future life QnoKey IPSec VPN USB Mobile Key GINO N your future life Enter current password in Old Password column Enter the new password you wish to use in New Password Column Enter the new password again in Confirm New Password column Please note that the password can be alphanumeric and special characters The maximum length is 15 characters Old Pin Code New Fin Code y Confinn New Pin Cade TA To c
21. ement interface window Return to Privileged Mode Will return to the previous page of the QnoKey management interface window X Export Export IPSec VPN connection data to the OnoKey Please note The menu items available by right clicking the Qno icon located at the lower right corner will change as the main interface window changes but essentially associated with what can be performed on the main window Refer to the following figure for the exact correspondence N CINCO your future life QnoKey IPSec VPN USB Mobile Key Enter the PIN code and click OK to continue the program You can change the PIN code by clicking Change button Click Erase Key to Factory Default button to clean all the data in this QnoKey and set its PIN code as 1111 Click Cancel to close program Pin Code Change Erase Eey to Factory Default GINO your future life Enter current password in Old Password column Enter the new password you wish to use in New Password Column Enter the new password again in Confirm New Password column Please note that the password can be alphanumeric and special characters The maximum length is 15 characters Old Fin Code New Fin Code Confirm New Pin Code 10 About Auto execute when Windows startup pen Eetum to Main Page and re logm Connect Exit About Auto execute when Windows startup pen Eeim to Mam Page Login Exit N CINCO your futu
22. ical specification If necessary the change or termination will be announced in the relevant block of Qno website N your future life QnoKey IPSec VPN USB Mobile Key 4 3 All the set parameters are examples and they are for reference only You may also purpose your opinion or suggestion We will take it as reference and they may be amended in the next version 4 4 This Manual explains the configurations of all functions for different products of the same series The actual functions of the product may vary with the models Therefore some functions may not be found on the product you purchased 4 5 Qno reserves the right to change the file content of this Manual and the Manual content may not be updated instantly To know more about the updated information of the product please visit Qno official website 4 6 Qno distributors hereby declares that no liability will be born for any guarantee and condition of the corresponding information The guarantee and condition include tacit guarantee and condition about marketability suitability for special purposes ownership and non infringement The name of the companies and products mentioned may be the trademark of the owners Qno distributors do not provide the product or software of any third party company Under any circumstance Qno distributors bear no liability for special indirect derivative loss or any type of loss in the lawsuit caused by usage or information on the file no
23. l appear on the screen as follows 22 N GINO your future life QnoKey IPSec VPN USB Mobile Key Onokey the Secured WPN Connection device 15 client side PN solution created by Qno Technology Inc This USB interface device allows you to easily and quickly setup v Ph connection with and the matching client software All the VPN parameters have been saved in built in encryption chip set so you dont have to worry about the security issue while using this simple and quick connection solution Qnokey 15 complied with Windows 2000 XP and Vista to give you the most convenience way to utilize this device Q ONO your future life 2 If you have Administrator privileges and would like to carry out the writing of connection data and burning of USB keys please select QnoKey Management Software If you are an ordinary user select QnoKey Clinet Software to install The following will explain how USB Keys are burned please install the QnoKey management software before proceeding x Please note When installing QnoKey Management Software the QnoKey Clinet Software will also be installed automatically However if only QnoKey Clinet Software is installed QnoKey management software will NOT be installed along with it 3 The Choose Setup Language dialog box will then appear as shown in the figure below 23 N CINCO your future life QnoKey IPSec VPN USB Mobile Key Choose Setup Language
24. l IPSec VPN data encryption and authentication with support for 3DES Users can modify password to guard against theft of the QnoKey Supports Lost Key Login Mechanism Able to block connections from a QnoKey identified as lost or remove storage parameters of the lost QnoKey automatically Management will be able to duplicate the set of connection parameters for a group and distribute it to different users to reduce the otherwise repetitive configuration efforts Management will be able to set the connection life time for each QnoKey to prevent improper use Management will be able to set multiple WAN IP connections for backup purposes Management will be able to display the connection records of each QnoKey user effectively monitoring the connection status Hardware Specifications The hardware supports the standard USB interface has passed Microsoft Windows Hardware Quality Labs WHQL testing and uses DES to store data from being stolen Operating voltage 2 2 5 5V Operating current 150mA Operating temperature 0 C 70 Storage temperature 40 C 85 C External dimensions 49mm x 17 2 mm x 7mm Weight 8 5 g N your future life QnoKey IPSec VPN USB Mobile Key III Deployment Configurations This chapter describes the deployment of QnoKey its connection requirements and environment as well as the configuration process 3 1 Requirements for the Installation and Operating Environment of the
25. l shows a failed VPN connection Answer Check the client computer to see if the Windows Operating System used is XP 2000 Vista or Win 7 Also check to make sure whether the network is disconnected congested due to heavy traffic or connections being blocked by the firewall If the above checks reveal no abnormal situations please reinstall the OnoKey Client Software on the user s computer Check to see if the WAN IP entered into the router is correct Make sure the corresponding fixed WAN IP is correct and if there is no fixed IP fill in the correct domain name If there is no WAN to be connected leave the field blank Re export the data to the QnoKey and attempt to re connect to the VPN on the client side Question 2 If I lose the QnoKey by accident what should I do to safeguard information security on the VPN Answer First of all identify the group account of the lost QnoKey Then reconfigure this group account in the router s management UI choose Prohibit connection in the Stolen Key Login Action option to in order to prevent the OnoKey that has been lost from making VPN connections thus ensuring data security on the network Question 3 In user mode why there is no VPN connection after I enter the password Answer After you have entered your password the page that allows you to perform the connection action will then be shown Click on the Connection button at the lower left corner to begin VPN connection At thi
26. ll This sets the expiration of the QnoKey For permanent unrestricted use Forever will be shown here 14 N your future life Available Time QnoKey IPSec VPN USB Mobile Key After setting QnoKey s life time this will show the remaining time available Account Number This represents the maximum allowable number of USB keys that Limitation can be written burned by this user group Used Number This represents the number of USB keys that have been written burned with administration connection data Online Number This shows the number of QnoKey users currently connected Show List This displays the list of all QnoKey users that have been configured Edit The properties of the user group can be modified by clicking on the Edit button Delete Delete all settings of this user group Add New QnoKey Add a new group Group Delete all groups Clear and remove the settings for all groups Refresh Clicking on this button it will represent the updating status of all group settings and current online connection 4 2 Group Account Setup Screen Click Add QnoKey Group to enter Group Account Setup as shown below Q Group Account Setup Enable this rule Only alphanumeric characters are allowed 1 IP Address Domain Name WAN 2 IP Address Domain Name 9 Forever Q Day This page is mainly used for setting up the QnoKey group Here QnoKey group parameter settings such as WAN p
27. m a 12 6 2 Terminating VPN Connections nnne rn nnns sina nnn nn 17 Appendix 1 Commonly encountered problems and suggestions when using QnoKey 18 Appendix Il Qno Technical Support Information T 19 N your future life QnoKey IPSec VPN USB Mobile Key Product Manual Using Permit Agreement Product Manual hereinafter the Manual Using Permit Agreement hereinafter the Agreement is the using permit of the Manual and the relevant rights and obligations between the users and Qno Technology Inc hereinafter Qno and is the exclusion to remit or limit the liability of Qno Users who obtain the file of this manual directly or indirectly and users who use the relevant services must obey this Agreement Important Notice Qno would like to remind the users to read the clauses of the Agreement before using this product Unless you accept the clauses of this Agreement please return this Manual and product Downloading or reading of this Manual is regarded as accepting this Agreement and the restriction of clauses 1 Statement of Intellectual Property Any text and corresponding combinations diagrams interface designs printing materials or electronic files are protected by copyright of our country clauses of international copyright and other regulations of intellectual property When the user copies
28. menu is used to assign QnoKey and users to a specific QnoKey group After it has been configured the management settings and restrictions associated with the selected group will apply to the Key and to the users This identifies to whom the Key is assigned For example SalesWang This specifies whether the Key will bind with the MAC address of the remote computer If the option is not selected MAC binding is disabled and the MAC address of the user s computer will not be checked If you choose to enable it you can enter two at least one MAC addresses These will be checked against the MAC address of the user s computer when he she attempts to establish a connection If they do not N your future life MAC1 and MAC2 SSL Port Number WINS Server IP Once the above configuration information has been correctly entered and confirmed you can press the QnoKey IPSec VPN USB Mobile Key match connections will not be allowed After you have enabled Bind MAC enter the desired MAC address information for binding checking If ports 443 or 10443 have already been used by the Qno firewall router itself to support other services e g SSL VPN it is recommended that you select a different port number for remote connection so as to avoid duplication However if connection is unsuccessful due to duplicated port numbers QnoKey will still attempt to use a different port to establish an encrypted connection Only when th
29. mputer and enter the PIN and the IPSec VPN connection will be established automatically 13 N your future life QnoKey IPSec VPN USB Mobile Key IV QnoKey Group Setting and Management This chapter mainly focuses on how to conduct initial user data configuration and group management settings in Qno firewall router equipment 4 1 QnoKey Main Configuration Screen After Logging into the Qno firewall router click to open the QnoKey menu options to view the current QnoKey status summary screen as shown below QnoKey Tunnel Number Tunnel s Used 50 Tunnel s Available Q QnoKey Client Table Jump t 1 1 5 entries per page J test 1924684477 Forever 1 Show List J Edit jl 2 test 192 168 4 177 Forever 22 0 Show List ras jj Add New Qnokey Group Delete All Group QnoKey Tunnel Number Raiesh This shows the number of tunnels that have been configured and used and the number of tunnels currently available Clicking the Advanced settings users can adjust IPSec VPN QnoKey PPTP and QVM tunnel number themselves QnoKey Client Table summary Enabled Account ID Local IP address Domain Name Life Time This shows if the QnoKey user group is enabled This shows the name of the QnoKey user group This is the IP address of the QnoKey server or the domain name used Generally referring to the WAN IP of the current router firewa
30. nable this QnoKey user This displays the serial number for this QnoKey This displays the user name for this QnoKey This displays the connection status for this QnoKey On line means that the user has established a connection successfully Off line indicates that there is no connection or connection is unsuccessful Once checked QnoKey users will apply one of the protective actions If the Bind MAC option is selected QnoKey can only be used on the computer with the MAC address it binds to On a computer with a different MAC address this QnoKey cannot be used If the Bind MAC option is enabled the MAC address that the QnoKey binds to will be displayed here On a computer with a different MAC address this QnoKey cannot be used This shows the Public IP address that the QnoKey user uses to connect to the VPN remotely If there is an NAT device in front of the remote QnoKey user s computer then the IP address shown will usually be the WAN IP address of this device This shows the Private IP address used by the QnoKey user s computer to establish the remote connection If the remote computer is using a Public IP address to connect directly to the Internet then this field will be the same as that of the Remote Client IP and the remote user s Public IP address will be shown here 19 N your future life QnoKey IPSec VPN USB Mobile Key Delete Remove the OnoKey connectivity data for this particular user 20
31. ng rules for another group or click Cancel to return to the QnoKey Main Configuration Screen As follows 17 N CINCO your future life QnoKey IPSec VPN USB Mobile Key v settings are successful Press Uk to add another TSE Key Group or press Cancel to retum to the page of USE Key status BUR At this time QnoKey s Main Configuration screen will display the groups just being configured This is shown in the figure below Qnokey Tunnel Number o Tunnel s Used o Tunnel s Available Advanced QnokKey Client Table Jumpto 1 44 Page 5 J entries per page o Game ee Add New QnoKey Group Delete All Group Rees When new rules have been added a Show List and an Edit button will appear after each of them Click Show List to display the users of this group And click Edit to modify the settings Click on the trash icon to delete thses rules 4 3 Group Account List Click on the Show List button to display the user data for the list of users in this group 18 ad your future life QnoKey IPSec VPN USB Mobile Key Group Account list Group Account ID est gt 0C243144000C1114 h Group Account ID Enabled QnoKey SN User Name Status Stolen Key Login Action Bind MAC MAC Address Remote Client IP Local IP ci This shows this user s group name You can select other groups by using the pull down list Check this option to e
32. nt locate the Smart Card service and then right click and select Properties from the menu as shown in the diagram below Start Stop Pause Resume Restart All Tasks Refresh Properties Help After clicking on the properties select Automatic under Startup type and click on OK to confirm Restart the computer so that each time the computer starts Smart Card service will start automatically and becomes a service that is required for QnoKey ON your future life QnoKey IPSec VPN USB Mobile Key Smart Card Properties Local Computer Automatic Manual UU Disabled Resume Lance Apply 2 Enable Windows Firewall and permit QnoKey to pass through gt Settings gt Control Panel gt Windows Firewall gt Choose On to enable the firewall ONE your future life QnoKey IPSec VPN USB Mobile Key Windows Firewall What else should know about Windows Firewall Pi iii u ps u gt On the Exceptions tab press Add Program locate QnoKey in the list and add it to the Exceptions list the QnoKey management software or user connection software must have been installed with Administrator privileges before added to the list 10 ON your future life QnoKey IPSec VPN USB Mobile Key Windows Firewall v Remote Assistance C Remote Desktop O UPnP Framework Add a Program Chariot Console Pb E2ES_uninst 5 FreeCell Hearts
33. onfirm your new PIN press the Change button and your new PIN will be saved and will take effect immediately The following message box will pop up to indicate the success of the operation QnoKey Pmode P successed in changing Code to USB ke WEE If you have forgotten the PIN code associated with this USB Key you can press the Erase Key to Factory Default button The management software will bring up a warning message box to confirm if you wish to erase all the data that has been burned into the QnoKey completely and the PIN code will be reverted to default QnoKey Pmode Do vou really want erase USB key to factory default your future life QnoKey IPSec VPN USB Mobile Key Press Yes to erase all the data on the QnoKey and the PIN code will be reverted to the default settings 1111 as shown in the figure below mnoKey Pmode success to erase and restore data m USB kew to default After you have entered the default PIN code 1111 and press OK you must provide the following information into the corresponding fields the Qno router firewall IP address that has been configured in the QnoKey group account settings administrator login ID and password as indicated in the following figure your future life Enter router s IP user name and password Click Login to establish the connection with router Click Cancel to close program Router IP 137 1582 1 Username admin
34. ort Life Time Account Number Limitation Stolen Key Login Action and so on can be set via the 15 N your future life QnoKey IPSec VPN USB Mobile Key WAN port in order to perform management and classification on QnoKey users and to improve security Enable this rule Checking this option will enable the settings for this group Group Account ID Type in the name of the QnoKey group you want to set Up Interface Check to configure the WAN port desired and fill in the IP address or domain name for the corresponding WAN port If the WAN port is blank then the IP address is not required otherwise this may prevent the VPN from being connected The purpose is to designate which WAN port used for VPN connections which facilitates administration If WAN 1 is selected this QnoKey group user can only connect to the VPN via WAN 1 If WAN 1 and WAN 2 are simultaneously selected this QnoKey group user can connect to the VPN via WAN 1 or WAN 2 In the event that WAN 1 is disconnected the system will be automatically switched to WAN 2 as a backup Please note B If the selected WAN port has a fixed IP with a designated IP address the system will automatically show this and the administrator need not enter anything B If the selected WAN port follows DHCP PPPoE or other ways then the administrator has to enter the correct IP address or domain name Life Time Set up the life time for this QnoKey group her
35. re life Enter router s IP user name and password Click Login to establish the connection with router Click Cancel to close program Router IP Usemame Password Select the Group Account from the drop down list Enter the user name to identify this QnoKey user Click Export to save this account into Qnokey Please note that you have to set the valid Group Account on router before you exercise this program You can check Bind MAC box to enable MAC Binding function and enter the MAC Address of Client PC that you want to bind Group Account test Host Name Bind MAC mm L service WINS Server IF 11 IPSec VPN USB Mobile Key About Auto execute when Windows startup pen Eeim to Mam Page Login Exit About Auto execute when Windows startup pen Eetum to Privilege Mode Export Exit N your future life QnoKey IPSec VPN USB Mobile Key VI QnoKey User Connection Mode This chapter focuses on how the general user can gain access to the VPN using the provided connection software and the QnoKey obtained from the network administrator Before making a VPN connection you need to install the QnoKey client software first If the network administrator has already installed the software for you you can simply run the QnoKey client connection program This program can also be installed from the CD ROM If you need to install it yourself please
36. ree attempts have been exhausted and a connection still cannot be made will the system display a connection failure status If you have a WINS Server within the intranet served by the firewall router you can enter the server s IP address here When the QnoKey user has successfully connected to the VPN he she may query and resolve the names of the computers servers in the intranet via this WINS Server If you do not need it just enter enter0 0 0 0 in the IP address block Export button to write these data to the QnoKey Qno Eey Pmode successed in exportine account data to USB Export another TSE key After the data has been successfully exported the above message box will appear Press Yes to burn the data to another QnoKey that has not been burned with the same connection data All fields will remain the same as the previous one as shown in the figure below N CINCO your future life QnoKey IPSec VPN USB Mobile Key GINO e your future life Select the Group Account from the drop down list Enter the user name to identify this QnoKey user Click Export to save this account into QnoKey Please note that you have to set the valid Group Account on router before you exercise this program You can check Bind MAC box to enable MAC Binding function and enter the MAC Address of Client PC that you want to bind Group Account test Host Name Bind MAC MAC SSL Port Number
37. s When there is no further need to connect to the VPN you can press Disconnect to terminate the VPN connection in order to safeguard your data When the connection is terminated the message Disconnect VPN OK will appear as shown in the figure below If the VPN connection complete the message will show VPN connection If the pop out message shows VPN connection fail please contact to your network administrator You can disconnect the VPN connection by clicking Disconnect and to recover the VPN connection by clicking Connect button Message 16 39 23 Disconnect VPN OE A call out message box with the text Status Disconnected will also appear at the lower right corner of the system tray where the Q icon is located and the tail of the letter Q will turn gray as shown in the figure ij QnoKey status Disconnected 08 32 to the right When the VPN has been terminated for security purposes you can unplug the QnoKey and keep itin a safe location If the QnoKey is removed when the computer is still connected to the VPN the user connection program will terminate by itself The established IPSec VPN tunnel will also be removed 17 N your future life QnoKey IPSec VPN USB Mobile Key Appendix I Commonly encountered problems and suggestions when using QnoKey Question 1 I ve set up QnoKey function on the router and burned the data onto the QnoKey Why my user program stil
38. s time messages sent back and forth by the server and client sides will be displayed in the message field Question 4 After the life time configured on a QnoKey has expired can I continue to use it Answer When the QnoKey s life time has expired you won t be able to make VPN connections but a new QnoKey can be created If other settings are unchanged you can carry out the steps directly to create a new If there are modifications new configuration steps need to be performed and the new data will overwrite the original content 18 N your future life QnoKey IPSec VPN USB Mobile Key Appendix Il Qno Technical Support Information For more information about Qno s product and technology please log into Qno s bandwidth forum refer to the examples of the FTP server or contact the technical department of Qno s dealers as well as the Qno s Mainland technical center Qno Official Website http www Qno com tw Dealer Contact Users may log on to the service webpage to check the contacts of dealers http Wwww qno com tw web where buy asp Taiwan Support Center E mail QnoFAE gno com tw 19
39. tion with USB Key please plug in the USB Key into your computer Pin Code Onosoftkey Use Auto Connect on next time Please Change your PIN code if this is checked When the computer is on as soon as the QnoKey is inserted into the computer connection with the VPN will be attempted automatically When a connection is attempted for the first time and the PIN code is entered and confirmed QnoKey s Q icon located at the lower right corner of the system tray will begin the connection For subsequent connections the main dialog box for PIN code will no longer pop up unless the user specifically moves the mouse cursor to the Q icon right clicks on it and selects Open from the menu the connection dialog box will not appear at all After entering the correct PIN code personal identification code the dialog box that displays the connection messages will appear as follows 14 GINO your future life ia Q your future life If the VPN connection complete the message will show VPN connection OK If the pop out message shows VPN connection fail please contact to your network administrator You can disconnect the VPN connection by clicking Disconnect and to recover the VPN connection by clicking Connect button Mesage connect QnoKey IPSec VPN USB Mobile Key Press the Connect button to establish a VPN connection Press Cancel to return to the previous page for entering PI
Download Pdf Manuals
Related Search