P3NK-3892-04Z0 FUJITSU Network Si-R FUJITSU Network Si-R Si-R brin Si-R240B
LAN 2009 11 2010 7 2 2010 10 3 2015 1 4 Microsoft Corporation Copyright FUJITSU LIMITED 2009-2015 2
...2...5...5...5...5...6...7...8...8...11...11...11...11...12...12...12...12...12...13...13...13...14 ISO/IEC15408...15 Si-R Security Software V02.02...15...15...17...18 1... 19 1.1...20 1.1.1...20 1.1.2...21 1.1.3...23 1.1.4...24 1.1.5...25 1.1.6...26 1.2...27 2... 28 2.1...29 2.1.1...29 2.1.2...31 2.2...33 2.2.1...34 2.3 PC...41 2.3.1 PC...42 2.3.2 PC...43 2.3.3 PC...44 3
2.4...46 2.4.1 LAN...46 2.4.2...54 2.5...56 2.5.1...56 2.5.2...57 2.6...58 2.7 Si-R...59 2.7.1 Si-R...63 2.8 USB...66 2.8.1 USB...66 2.8.2 USB...66 2.9...68 3... 69 3.1...70 3.1.1 FTP...70 3.1.2 USB...72 3.2...74 3.2.1 FTP...74 3.2.2...74 3.2.3...75 3.3...76 3.3.1...76 3.3.2...77... 78 4
CD-ROM README 1 2 3 Si-R PL PL 5
MicrosoftWindowsWindows NTWindows Server Windows Vista Microsoft Corporation Adobe Reader Adobe Systems Incorporated UNIX Microsoft Windows XP Professional operating system Windows XP Microsoft Windows XP Home Edition operating system Microsoft Windows Millennium Edition operating system Windows Me Microsoft Windows 98 operating system Windows 98 Microsoft Windows 95 operating system Windows 95 Microsoft Windows 2000 Server Network operating system Windows 2000 Microsoft Windows 2000 Professional operating system Microsoft Windows NT Server network operating system Version 4.0 Windows NT 4.0 Microsoft Windows NT Workstation operating system Version 4.0 Microsoft Windows Server 2003, Standard Edition Windows Server 2003 Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise Edition Microsoft Windows Server 2003 R2, Enterprise Edition Microsoft Windows Server 2003, Datacenter Edition Microsoft Windows Server 2003 R2, Datacenter Edition Microsoft Windows Server 2003, Web Edition Microsoft Windows Server 2003, Standard x64 Edition Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise x64 Edition Microsoft Windows Server 2003 R2, Enterprise x64 Edition Microsoft Windows Server 2003, Enterprise Edition for Itanium-based systems Microsoft Windows Server 2003, Datacenter x64 Edition Microsoft Windows Server 2003 R2, Datacenter x64 Edition Microsoft Windows Vista Ultimate operating system Windows Vista Microsoft Windows Vista Business operating system Microsoft Windows Vista Home Premium operating system Microsoft Windows Vista Home Basic operating system Microsoft Windows Vista Enterprise operating system 6
Si-R Si-R180B Si-R220C Si-R260B Si-R370 Si-R570 - - - - Web Web Web Si-R Si-R180B Si-R220C Si-R240B Si-R260B Si-R370 Si-R570 MIB/Trap Web Web Web 7
8
9
10 1 2 3
5 25 15 85%RH RJ-458 ISDN LAN LAN BRI LAN ESD TS2002-001 1.3 P.14 Web 1.4 P.13 11
B VCCI-B IT URL : http://jp.fujitsu.com/about/csr/eco/products/recycle/recycleindex.html 0.25mA 12
0.5A 0.5A - - - URL : http://eco.fujitsu.com/jp/ Trap/Syslog Systemwalker Network Assist Web Systemwalker Network Assist URL : http://systemwalker.fujitsu.com/jp/net_assist/ 13
CD-ROM PDF PDF Adobe Reader 14
ISO/IEC15408 Target of Evaluation IP Si-R Security Software V02.02 ISO/IEC15408 Security Software - -3.1.1 show system information Si-R Security Software V02.02 CD-ROM Si-R V34.01 Si-R Security Software V02.02 CD-ROM 3 P.6 9 Si-R Security Software V02.02 Si-R570Si-R370Si-R260BSi-R240BSi-R220C Si-R180B Si-R V34.01 ISO IEC15408 EAL4 ALC_FLR.1 ISO/IEC15408 Si-R Security Software V02.02 Si-R Security Software V02.02 IPsec 8 - -1.1.2 password admin set ID ID AAA ID - -24.11.9 mflag - -1.2.1 delete 15
ID delete AAA ID delete delete password user set delete password admin aaa delete password user aaa - FTP - SFTP - TELNET - SSH - HTTP - - 24.11.15 serverinfo ftp 24.11.20 serverinfo sftp 24.11.22 serverinfo telnet 24.11.27 serverinfo ssh 24.11.32 serverinfo http - Main Mode - RSAMain Mode Quick Mode HMAC-MD5 HMAC-SHA1 - - 8.2.3 remote ap datalink type 8.2.39 remote ap ipsec type 8.2.50 remote ap ipsec ike protocol 8.2.51 remote ap ipsec ike encrypt 8.2.52 remote ap ipsec ike auth 8.2.53 remote ap ipsec ike pfs 8.2.54 remote ap ipsec ike lifetime 8.2.55 remote ap ipsec ike lifebyte 8.2.58 remote ap ipsec ike range 8.2.62 remote ap ike shared key 8.2.64 remote ap ike proposal auth-method 8.2.65 remote ap ike proposal encrypt 8.2.66 remote ap ike proposal hash 8.2.67 remote ap ike proposal pfs 8.2.68 remote ap ike proposal lifetime 8.2.77 remote ap ike mode 8.2.80 remote ap ike certificate remote 8.2.81 remote ap ike certificate local 8.2.82 remote ap ike certificate key 8.2.83 remote ap ike certificate expired 8.2.84 remote ap ike certificate send 8.2.95 remote ap tunnel local 8.2.96 remote ap tunnel remote RSA CA IKE - -8.2.85 remote ap ike certificate request 16
IPsec/IKE - -10.1.6 template datalink type - -1.2.1 delete IPsec/IKE delete <number> delete template <number> datalink type ipsec AES 3DES 128 - -8.2.51 remote ap ipsec ike encrypt RSA - - - - 55.1.1 crypto certificate generate 55.1.2 crypto certificate local 55.1.3 crypto certificate remote 55.1.4 crypto certificate ca WAN WAN RSA - -8.2.83 remote ap ike certificate expired 17
P.15 2.14 IPsec P.69 - -8.2 IPsec/IKE 8.2.3 8.2.39 8.2.96 - -55.1 1.15 LAN VPNIPsecP.52 2.15 IPsec P.201 IPsec/IKE 2.15.2 2.15.72.15.92.15.21 2.15.222.15.26 2.15.31 2.15.35 2.15.36 18
1 1.1.......................................................... 20 1.1.1................................................................... 20 1.1.2................................................................21 1.1.3................................................................23 1.1.4................................................................24 1.1.5................................................................25 1.1.6................................................................26 1.2........................................................ 27
1 1.1 1.1.1 Si-R240B 2 CD-ROM Si-R240B RJ45 D-SUB9 2 3 2 1.2 P.27 CD-ROM CD-ROM Si-R PDF MIB PDF Adobe Reader RS232C URL : http://fenics.fujitsu.com/products/manual/cable/ 20
1 1.1.2 POWER FULL PC 100M SLOT1 10/100BASE-TX SLOT1 PWR CONSOLE USB FULL 100M FULL 100M LAN0 LAN1 CHK LAN0 LAN1 SLOT0 USB SLOT0 CHECK 10/100BASE-TX LAN01 LAN PC POWER CHECK USB USB CHECK D-SUB9 RS232C LAN/ISDN 1.2 P.20 USB USB 3.1 P.7 0 100M 10/100BASE-TX 100M/FULL P.22 2.1 P.11 FULL 10/100BASE-TX 100M/FULL P.22 2.1 P.11 21
1 10/100BASE-TXLAN0 1 HUB LAN0 LAN1 5 LAN 1.6 10/100/1000BASE-T P.2 4 LAN 10/100BASE-TXLAN0 1 PC PC PC PC SLOT0SLOT1 PC PC 100M/FULL 100M FULL 100M 10Mbps100Mbps FULL DuplexHALFFULL Duplex HALF Duplex FULL Duplex 100M FULL Auto-Nego 100M LAN 10M LAN 100M FULL LAN HALF LAN FULL 1.6 10/100/1000BASE-T P.24 22
1 1.1.3 POWER CHECK 0.5A POWER CHECK USB USB CHECK 2.1 P.11 23
1 1.1.4 Kensington SL- 381705943 0120-505-279 24
1 1.1.5 25
1 1.1.6 MAC 2 MAC MAC. MAC FIRM REV. 26
1 1.2 1. 2. 27
2 Si-R 2.1.................................................................29 2.1.1.......................................................... 29 2.1.2............................................... 31 2.2..................................................... 33 2.2.1............................................................ 34 2.3 PC.............................................................. 41 2.3.1 PC....................................................... 42 2.3.2 PC......................................................... 43 2.3.3 PC............................................. 44 2.4........................................................... 46 2.4.1 LAN............................................................. 46 2.4.2................................................... 54 2.5............................................................... 56 2.5.1...................................................... 56 2.5.2........................................................ 57 2.6.................................................................... 58 2.7 Si-R................................................ 59 2.7.1 Si-R.................................... 63 2.8 USB.................................................................. 66 2.8.1 USB...................................................... 66 2.8.2 USB.............................................. 66 2.9................................................... 68
2 2.1 1.1.1 P.20 2.1.1 %RH 0 40 15 85 0 50 8 90 AC100V±10% 50Hz / 60Hz+2%-4% D 30W 2 29
2 P.8 30
2 2.1.2 800mm 300mm 300mm 800mm 31
2 150mm 50mm 50mm 90mm 32
2 2.2 1. 2. M3 M3 33
2 2.2.1 1U 1 2 34
2 1U 1 1. M4 6 M4 2. 1. M5 4 M5 35
2 1U 2 1. 740mm 2. 500mm 650mm 1 2 36
2 650mm 760mm 1 2 740 700 600 740mm 3. 6 M5 4 2 5. M5 37
2 4. L 4 M5 4 M5 5. L M5 4 M5 38
2 1. 2. M4 4 M4 M4 3. 4. 39
USB USB 2 5. 4. M5 M5 1 180 M5 6. POWER 40
2 2.3 PC PC PC 3.3V 5V PC 12V PC http://fenics.fujitsu.com/products/sir/sir240b/#supportcard LAN Si-R LAN AP SIRWLAP LAN SLOT0 SLOT1 2 LAN LAN 41 PC
2 2.3.1 PC PC PC PC PC PC 1. 2. PC PC PC PC PC PC PC PC PC PC PC PC PC PC PC PC PCPC PC PC 42 PC
2 2.3.2 PC PC PC PC PC PC PC PCPC PC 3 PCPC 1. 2. PC PC PC 3. PC PC PC PC PC PC PC 43 PC
2 2.3.3 PC PC PC PC 5mm 40mm 5mm PC PC http://fenics.fujitsu.com/products/sir/sir240b/#supportcard PC PCPC PC 5mm 5 40mm PC 2 PC 44 PC
2 PC 1. PC 2. PC 45 PC
2 2.4 2.4.1 LAN 1 LAN LAN LAN LAN LAN LAN TCP/IP telnet ssh 46
2 LAN AutoMDI/MDI-X LAN HUB LAN 1.7 AutoMDI/MDI-X P.2 5 LAN0 HUB LAN0HUB LAN 1. 2. 10/100BASE-TX LAN 3. LAN0 LAN LAN0 LAN MDI LAN HUB MDI LAN MDI 47
2 2.5 P.56 LAN Windows 2000Windows XP Windows Vista OS OS Windows Web Windows 2000 1. 2. 3. 4. TCP/IP TCP/IP TCP/IP Windows 2000 5. TCP/IP 48
2 6. TCP/IP 7. IP IP IP 192.168.1.2255.255.255.0 192.168.1.1 8. DNS IP DNS DNS IP 192.168.1.1 9. OK 10. OK 11. Windows XP 1. 2. 3. 4. 5. TCP/IP TCP/IP TCP/IP Windows XP 49
2 6. TCP/IP 7. TCP/IP 8. IP IP IP 192.168.1.2255.255.255.0 192.168.1.1 9. DNS IP DNS DNS IP 192.168.1.1 10. OK 11. OK 50
2 12. Windows Vista 1. 2. 3. 4. 5. 6. 4TCP/IPv4 TCP/IP TCP/IP Windows Vista 7. 4TCP/IPv4 51
2 8. 4TCP/IPv4 9. IP IP IP 192.168.1.2255.255.255.0 192.168.1.1 10. DNS IP DNS DNS IP 192.168.1.1 11. OK 12. OK 13. IP IP MAC IP Windows 95 98 Me 1.- 2.winipcfg.exe Windows NT Windows 2000 XPWindows Vista 1.-- 2.ipconfig 52
2 telnet Windows 1. - 2. telnet IP 5 telnet ReturnEnter Waiting for completion of the other operation... ssh ssh ssh ssh IP SSH 2 SSH 2 ssh 2 ssh sshtelnet 5 ssh ReturnEnter Waiting for completion of the other operation... 53
2 2.4.2 1 RS232C RS232C 1.2 P.20 RS232C 1. 2. RS232C 3. RJ45 54
2 2.5 P.56 LAN 1. 2. Bit 1 Bit 8 Bit Bit 1 9600 8080 terminal 2424 terminal ShiftJISEUC terminal 3. ReturnEnter 4. Login 5. admin ReturnEnter 6. Password: 7. ReturnEnter ReturnEnter ReturnEnter 8. Si-R240B <ERROR> Authentication failed.login 5. Waiting for completion of the other operation... 55
2 2.5 2.5.1 1. 2. 2 1. 2 2. 2 2 2 56
2 2.5.2 1. 2. POWER 3. POWER CHECK 4. 57
2 2.6 72 telnet 2009 1 1 12 30 00 # date 2009/01/01.12:30:00 58
2 2.7 Si-R CD-ROM Si-R Si-R Si-R 2 Si-R 5 P.55 Si-R 1. LAN0 Si-R LAN1 PPPoE WAN LAN0 LAN1WAN Internet 2. 59 Si-R
2 3. CD-ROM CD-ROM Windows CD-ROM Windows CD-ROM binpdfexec.exe PDFExec 60 Si-R
2 4. Si-R Si-R 61 Si-R
2 5. Si-R Windows XP Service Pack 2 Microsoft Internet Explorer Internet Explorer 6. 7. 2.7.1 Si-R P.63 8. 9. 62 Si-R
2 2.7.1 Si-R Si-R Si-R 3.1 Si-R P.19 DHCP DHCP DHCP IP ID Si-R 63 Si-R
2 PPPoE PPPoE PPPoE ID IP ID Si-R 64 Si-R
2 LAN LAN LAN IP IP ID Si-R 65 Si-R
2 2.8 USB USB USB USB 2.8.1 USB USB 1. USB USB USB 2.8.2 USB USB 1. USB telnet # usbctl disable WWW USB Web 1.2 P.101.3 P.11 66 USB
2 2. USB telnet show usb hcd status status disable # show usb hcd status [USB HCD STATUS] status : disable WWW USB 3. USB USB 4. USB 5. USB telnet # usbctl enable WWW USB 67 USB
2 2.9 PC 2.6.3 PC P.51 1. telnet # configure # storage setup mode disable # save # commit # exit WWW 68
3 3.1............................................. 70 3.1.1 FTP................................................. 70 3.1.2 USB........................................... 72 3.2......................... 74 3.2.1 FTP........................................ 74 3.2.2............................................................ 74 3.2.3..................................................... 75 3.3........................................................... 76 3.3.1............................................................ 76 3.3.2................................................. 77
3 3.1 CD-ROM 2 FTP USB - - - - - - 2.6.3 PC P.51 3.1.1 FTP FTP ftp put FTP LAN0 192.168.1.1 LAN FTP LAN IP IP 192.168.1.1 255.255.255.0 LAN 2.4 P.46 70
3 CD E Windows XP 1. CD-ROM CD C:> e: E:> cd V35 2. ftp Windows XP ftp ftp-admin E:V35>ftp 192.168.1.1 IP Connected to 192.168.1.1 220 Si-R240B V35.00 FTP server (config1) ready. User (192.168.1.1:(none)): ftp-admin 331 Password required for ftp-admin. Password: 230 User ftp-admin logged in. ftp> IP 192.168.1.1255.255.255.0 admin 1.3 P.14 Web 1.4 P.13 3. BINARY put put SIR240BSOFT.ftpfirmware ftp>binary 200 Type set to I. ftp>put SIR240BSOFT.ftp firmware local: SIR240BSOFT.ftp remote: firmware 200 PORT command successful. 150 Opening BINARY mode data connection for firmware. 226- Transfer complete. update : Transfer file check now! update : Transfer file check ok. 4. Write complete 226 Write complete. ftp> 71
3 5. ftp ftp> quit 221 Goodbye. E:V35> 6. 7. telnet show system information # show system information System : Si-R240B Firm Ver. : V35.00 3.1.2 USB USB PC PC 2.6.3 PC P.51 telnet USB telnet 1. USB USB 2. admin 3. USB <filename> USB # copy /um0/<filename> firmware 4. 5. USB 6. 72
3 7. telnet show system information # show system information System : Si-R240B Firm Ver. : V35.00 WWW USB WWW 1. LAN IP IP 192.168.1.1255.255.255.0 2. USB USB 3. WWW 4. URLhttp://192.168.1.1/ 5. 6. admin 7. USB 8. 73
3 3.2 FTP ftp put FTP LAN0 192.168.1.1 3.2.1 FTP 1. FTP 3.2.2 LAN0 IP 192.168.1.1 LAN FTP 1. 2. FTP LAN HUB 10/100BASE-TX AutoMDI/MDI-X HUB 10/100BASE-TX 3. 74
3 4. CHECK LAN0 1 PC SLOT0 SLOT1 CHECK 3.2.3 1. FTP 3.1 P.70 put 2. LAN0 1 SLOT0 SLOT1 3. 75
3 3.3 RJ45 D-SUB9 RS232C 9 D-SUB HyperTerminal 3.3.1 1. 2. RS232C 3. RJ45 4. 5. CHECK LAN0 1 PC SLOT0 SLOT1 CHECK 76
3 3.3.2 1. 2. Bit Bit Bit Bit 1 8 1 9600 3. ReturnEnter 4. 5. logon ReturnEnter 6. backup# 7. reset clear ReturnEnter >logon backup# reset clear > 8. 77
S 10/100BASE-TX...22 100M...21, 22 C Si-R... 63 ssh... 53 T CD-ROM...20 CHECK...21, 23 D TCP/IP... 46 telnet... 53 U DHCP...63 Duplex...22 F USB... 21 USB... 66 W FTP...74 FULL...21, 22 H HyperTerminal...76 I ipconfig...52 L LAN...46 LAN...46, 47 LAN...46 LAN...22 M MAC...26 MAC...52 P PC...41 PC...22 PC...44 PC...22 POWER...21, 23 PPPoE...64 R RS232C...54, 76 Windows Vista... 51 Windows 2000... 48 Windows XP... 49 winipcfg... 52... 70... 20... 27... 25 LAN... 65... 20... 20, 76... 21, 54... 20... 31... 29... 26... 20... 29 78
...29...32...59, 63...48, 55...46, 54...55, 76...26...33...32... 7... 33, 34... 23, 76... 23...22...54...22...20, 56...23...29...23...48, 55, 57...46, 54...74...70, 75 FTP...70 USB...72 2...20...31...25...21...24...26...23 79
P3NK-3892-04Z0 2015 1