Manuals / Draytek / Computer Equipment / Network Router

Draytek 2130 SIP Filter, SIP Address, SIP Mask, DIP Filter, DIP Address, DIP Mask, Source Port No

Models: 2130

1 208

Download 208 pages 58.79 Kb

Page 140

Manual background

SIP Filter

Specify the source IP filter for this ACE.

	Any: No source IP filter is specified.
	Host: Source IP filter is set to Host. Specify the source IP
	address in the SIP Address field that appears.
	Network: Source IP filter is set to Network. Specify the
	source IP address and source IP mask in the SIP Address
	and SIP Mask fields that appear.
SIP Address	Type the SIP Address here. This option is available when
	you choose Host or Network as source SIP Filter.
SIP Mask	Type the SIP Mask here. This option is available only
	when you choose Network as source SIP Filter.
DIP Filter	Specify the destination IP filter for this ACE.

	Any: No destination IP filter is specified.
	Host: Destination IP filter is set to Host. Specify the
	destination IP address in the DIP Address field that
	appears.
	Network: Destination IP filter is set to Network. Specify
	the destination IP address and destination IP mask in the
	DIP Address and DIP Mask fields that appear.
DIP Address	Type the DIP Address here. This option is available when
	you choose Host or Network as destination DIP Filter.
DIP Mask	Type the DIP Mask here. This option is available only
	when you choose Network as destination DIP Filter.
Source Port Filter	Specify the TCP port source filter for this ACE.

	Any: No TCP source filter is specified.
	Specific: If you want to filter a specific TCP source filter
	with this ACE, you can enter a specific TCP source value.
	A field for entering a TCP source value appears.
	Range: If you want to filter a specific TCP source range
	filter with this ACE, you can enter a specific TCP source
	range value. A field for entering a TCP source port range
	appears.
Source Port No.	Type the value if you choose Specific as the Source Port
	Filter. The allowed range is 0 to 65535. A frame meeting
	this ACE matches this TCP source value.
Source Port Range	Type the value if you choose Range as the Source Port
	Filter. The allowed range is 0 to 65535. A frame meeting
	this ACE matches this TCP source value.
	132	Vigor2130 Series User’s Guide

Image 140

Draytek 2130 SIP Filter, SIP Address, SIP Mask, DIP Filter, DIP Address, DIP Mask, Source Port Filter, Source Port No

Contents

Page Vigor2130 Series User’s Guide Vigor2130 Series High Speed Gigabit Router User’s GuideVersion Date 31/08/2009 Safety Instructions and Approval Copyright InformationSafety WarrantyEuropean Community Declarations Regulatory InformationTable of Contents 4 AdminModeOperation Vigor2130 Series User’s Guide4.3.1 Hardware NAT 5 Trouble Shooting 1.1 Web Configuration Buttons Explanation 1 Preface1.2 LED Indicators and Connectors 1.2.1 For Vigor2130Status ExplanationFactory Reset factory default configurationConnector for a power adapter Power Switch1.2.2 For Vigor2130n StatusExplanation InterfaceFactory Reset factory default configurationConnector for a power adapter Power Switch1.2.3 For Vigor2130Vn StatusExplanation InterfaceInterface Description1.3 Hardware Installation Vigor2130 Series User’s Guide Stand Installationc d e f 1.4 Printer Installation 2. Open Start-Settings- Printer and Faxes4. Click Local printer attached to this computer and click Next Vigor2130 Series User’s GuideVigor2130 Series User’s Guide 7. Click Standard and choose Generic Network Card8. Then, in the following dialog, click Finish 9. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router 2.1 Two-Level Management 2 Configuring Basic Settings2.2 Accessing Web Page Main screen for user mode operation simple configuration 2.3 Changing PasswordMain screen for admin mode operation full configuration 5. Type New Password in New Password and Confirm New Password fields. Then click OK to continue 2.4.1 Setting up the Password 2.4 Quick Start Wizard2.4.2 Setting up the Time Zone 2.4.3 Setting up the Internet ConnectionStatic IP EnableIP Address Subnet MaskDHCP PPPoEEnable Clone MAC AddressIt means Max Transmit Unit for packet. The default setting isPPTP/L2TP It means Max Transmit Unit for packet. The defaultsetting is 2.4.4 Setting up the Wireless Connection Choose Show to make the SSID being seen by wireless clientsPage WPA-PSK TypeWPA Algorithm WPA Pre-shared KeyWPA- RADIUS The UDP port number that the RADIUS server is using. TheShared Secret 2.4.5 Save the Wizard Configuration 2.5 Online Status2.6 Saving Configuration Basics of Internet Protocol IP Network 3 User Mode Operation3.1 WAN From 10.0.0.0 to From 172.16.0.0 to From 192.168.0.0 to What are Public IP Address and Private IP AddressGet Your Public IP Address from ISP Network Connection by 3G USB Modem3.1.1 Internet Access StaticType in the primary IP address for the router if you want to use Type in the username provided by ISP in this field DHCPPPPoE UsernameIt means Max Transmit Unit for packet. The default PPTP/L2TP It means Max Transmit Unit for packet. The defaultsetting is required by some ISPs APN means Access Point Name which is provided and3G USB Modem 3.1.2 Ports Speed ConfiguredPort Linkexcessive collision has occurred. If yes, a frame is dropped after 3.1.3 3G BackupDiscard - It determines whether the MAC drops frames after an 3.2 LAN Basics of LANAPN means Access Point Name which is provided and required by some ISPsWhat is Routing Information Protocol RIP What are Virtual LANs and Rate Control3.2.1 General Setup You can configure the router to serve as a DHCP server for theType in an address code that determines the size of the network Enter a value of the IP address pool for the DHCP server to start3.2.2 Ports Speed ConfiguredPort Link3.2.3 MAC Address Table Power ControlDisabled All power savings mechanisms disabled ActiPHY Link down power savings enabled3.2.4 VLAN Disable Automatic AgingStatic MAC Table Config Age Time3.2.5 Static Route IndexDestination Address Display the destination address of the static routeAdd Static Routes to Private and Public Networks 3.2.6 Bind IP to MAC and select the one, and click Remove. The selected item will be 3.3 NATand MAC address listed in ARP table can be selected and added 3.3.1 Hardware NAT 3.3.2 Open PortsSpecify the name for the defined network service NameProtocol Specify the transport layer protocol. It could be TCP, UDP and3.3.3 DMZ Host 3.4 Bandwidth Management 3.4.1 Session Limit3.4.2 Bandwidth Limit 3.4.3 Port Rate Control Shaper Unit 3.4.4 QoS Control ListShaper Rate Tx QCE Type Display the type of that QCE QoS Control EntriesType Value Display the value specified for the QCEAdding a New QCE TCP/UDP Port 3.4.5 Ports Priority Editing a QCEMoving Up/Down a QCE Deleting a QCE3.4.6 QoS Statistics Default ClassQueuing Mode Use the drop down list to choose suitable modeRx Packets Rx Low 3.5 Applications 3.5.1 Dynamic DNS3.5.2 Schedule 3.5.3 IGMP Snooping Snooping EnabledCheck the box to enable this function Check the box to enable unregistered IPMC traffic flooding3.5.5 UPnP Configuration 3.5.4 IGMP StatusDisplay current IGMP groups. Maximum number of group for each VLAN can be set isCant work with Firewall Software 3.6 Wireless LAN 3.6.1 Basic Concepts3.6.2 General Setup Security OverviewWireless Security Configuration Wireless ModeSSID Broadcast SSIDDefault Key Authentication ModeWPA Mode Key1-Key4Either 8~63 ASCII characters, such as 012345678..or Vigor2130 Series User’s Guide 3.6.3 Access Control Filter Type3.6.4 Station List 3.7 USB Application 3.6.5 Access Point Discovery3.7.1 USB General Settings 3.7.2 FTP User Management The user can enter a directory name in this field. Thenafter clicking OK, the router will create the specific/new folder in the USB diskette. In addition, if the user types “/”here, he/she can access into all of the disk folders and files Note When write protect status for the USB diskette is3.7.3 Disk Status 3.7.4 Disk SharesType a name to be used as shared folder name in Samba service Adding a New User 3.8.1 User Configuration3.8 User 3.9.1 System Status 3.9 System MaintenanceEditing/Deleting User Settings Wireless LAN Backup the Configuration 3.9.2 User Password3.9.3 Configuration Backup Restore Configuration 3.9.4 Syslog / Mail Alert Check the box to activate function of mail alert Vigor2130 Series User’s Guide 3.9.5 Time and DateSelect the time zone where the router is located Access List 3.9.7 Reboot System3.9.6 Management 3.9.8 Firmware Upgrade Vigor2130 Series User’s Guide 4 Admin Mode Operation 4.1 WANBasics of Internet Protocol IP Network From 10.0.0.0 to From 172.16.0.0 to From 192.168.0.0 toNetwork Connection by 3G USB Modem What are Public IP Address and Private IP AddressGet Your Public IP Address from ISP Type the subnet mask 4.1.1 Internet AccessStatic DHCP PPPoEIt means Max Transmit Unit for packet. The default setting isPPTP/L2TP It means Max Transmit Unit for packet. The defaultsetting is required by some ISPs APN means Access Point Name which is provided and3G USB Modem 4.1.2 Ports You can use the drop down list to choose the required speed forSIM PIN code 4.1.3 3G BackupInternet 4.2 LAN APN means Access Point Name which is provided andrequired by some ISPs Basics of LANVigor2130 Series User’s Guide What is Static RouteWhat is Routing Information Protocol RIP 4.2.1 General Setup What are Virtual LANs and Rate Control4.2.2 Ports Speed ConfiguredStart IP Address IP Pool CountsAuto 4.2.3 MAC Address Table Disable Automatic AgingStatic MAC Table Config Age Time4.2.4 VLAN 4.2.5 Static Route Add Static Routes to Private and Public NetworksVigor2130 Series User’s Guide 4.2.6 Bind IP to MAC 4.3 NAT 4.3.1 Hardware NAT 4.3.2 Open PortsSpecify the name for the defined network service NameProtocol Specify the transport layer protocol. It could be TCP, UDP and4.3.3 DMZ Host EnableCheck to enable the DMZ Host function DMZ IPDenial of Service DoS Defense 4.4 Firewall4.4.1 DoS Defense Basics for Firewall4.4.2 Ports Configuration include Disabled, and 1 to 10. The default value is Disabled Counts the number of frames that match this Access ControlRate Limited ID Port Copy4.4.3 Rate Control Object Please specify a rate number for each ID. The default setting isRate limiter ID will be applied to WAN port and LAN port “1”packet per second4.4.4 Access Control List Adding a New Access Control ProfileAction - it means the session limitation for this access control list will be applied to if matching with the rule defined in this page VLAN Parameter MAC ParameterSpecify the destination MAC filter for this ACE ARP/RARP Detailed Explanation for Frame TypeEthernet Type Filter Request/Reply Sender IP Filterdefined in Sender IP Address and Sender IP Mask Sender IP Address0 means ARP/RARP frames/packets where the hardware 1 means ARP/RARP frames/packets where the hardware0 ARP/RARP frames where the hardware address space is 1 ARP/RARP frames where the hardware address space isIP TTL IP FragmentIP Option OFFSET field is greater than zero must be able to matchSIP Filter SIP AddressSIP Mask DIP FilterICMP Code Filter ICMP Code ValueIP TTL IP FragmentIP Option SIP FilterSIP Address SIP MaskSource Port Filter Source Port NoSource Port Range Dest. Port FilterIP Option IP TTLIP Fragment SIP Filter SIP AddressSIP Mask DIP Filter0 TCP frames where the FIN field is set must not be able 0 TCP frames where the SYN field is set must not be ableDest. Port Filter Specify the TCP port destination filter for this ACE0 TCP frames where the PSH field is set must not be able 0 TCP frames where the ACK field is set must not be ableTCP PSH TCP ACKIP Protocol Value IP TTLIP Fragment IP Option4.5 Bandwidth Management SIP FilterSIP Address SIP Mask4.5.1 Session Limit 4.5.2 Bandwidth Limit EnableDisable Default TX limit4.5.3 Port Rate Control 4.5.4 QoS Control ListVigor2130 Series User’s Guide Adding a New QCE QCE TypeDisplay the type of that QCE QoS Control Entries Type ValueTCP/UDP Port Editing a QCE 4.5.5 Ports Priority Moving Up/Down a QCEDeleting a QCE Indicate the interface for the physical port, WAN port, LAN4.5.6 QoS Statistics Queuing ModeUse the drop down list to choose suitable mode Queue WeightedRx Packets Rx Low 4.6 Applications 4.6.1 Dynamic DNS4.6.2 Schedule 4.6.3 IGMP Snooping Snooping EnabledCheck the box to enable this function Check the box to enable unregistered IPMC traffic flooding4.6.5 UPnP Configuration 4.6.4 IGMP StatusDisplay current IGMP groups. Maximum number of group for each VLAN can be set isEnter the maximum sustained WAN download speed in kilobits/second. Such information can be requested byUPnP clients Enter the maximum sustained WAN upload speed in4.7 VPN and Remote Access 4.7.1 Remote Access Control4.7.2 PPTP Remote Dial-in Adding a New UserEditing/Deleting User Settings Vigor2130 Series User’s Guide4.7.3 IPSec Remote Dial-in Mobile VPN TypeIdentities AuthenticationAdvanced Settings Display the encryption and authentication algorithm used during phase 1 of the VPN connection Establishment. The4.7.4 Remote Dial-in Status algorithm is used during exchange of key exchange4.7.5 LAN to LAN Adding a VPN TunnelDisplay the encryption and authentication algorithm used during phase 1 of the VPN connection Establishment. TheEnabled NameRemote IP Type4.8 Wireless LAN 4.8.1 Basic ConceptsSecurity Overview 4.8.2 General Setup Enable Wireless LANWireless Mode SSID BroadcastWireless Security Configuration Default KeyAuthentication Mode z NoneWPA Mode WPA AlgorithmWPA Preshared Key z WPA-RADIUSWPA Algorithm Server IP AddressDestination Port Shared Secret4.8.3 Access Control Vigor2130 Series User’s Guide4.8.4 Station List 4.8.5 Access Point Discovery 4.9 USB Application4.9.1 USB General Settings 4.9.2 FTP User ManagementEnable FTP Enable Disk Sharing4.9.3 Disk Status 4.9.4 Disk Shareshere, he/she can access into all of the disk folders and files Note When write protect status for the USB diskette isThe user can enter a directory name in this field. Then after clicking OK, the router will create the specific/newAdding a New User 4.10.1 User Configuration4.10 User Editing/Deleting User Settings Vigor2130 Series User’s Guide4.11 System Maintenance 4.11.1 System StatusDisplay the subnet mask address of the WAN interface 4.11.2 System Password4.11.3 User Password 4.11.4 Configuration Backup Backup the Configuration4.11.5 Syslog/Mail Alert Restore ConfigurationEnable Syslog Access… 4.11.6 Time and Date Time ZoneAdd NTP server Click the button to add a new NTP serverClick this button to remove an NTP server 4.11.8 Reboot System4.11.7 Management 4.11.9 Firmware Upgrade 4.12 Diagnostics 4.12.1 PingD - dynamically installed by daemon or redirect A - installed by addrconf4.12.2 Routing Table Display the netmask for the destination net4.12.3 System Log 4.12.4 Traffic OverviewTime Level4.12.5 Detailed Statistics Rx Unicast 4.12.6 MAC Address Table Type VLANMAC Address Port Members4.12.7 DHCP Table It displays the name of the computer accepted the assigned4.12.8 Data Flow Monitor Block - can prevent specified PC accessing into Internet4.12.9 Ports State connection. Or you can check Auto-refresh to reload the5 Trouble Shooting 5.1 Checking If the Hardware Status Is OK or NotFor Windows For MacOs 1. Double click on the current used MacOs on the desktop2. Open the Application folder and get into Network Vigor2130 Series User’s GuideFor Windows 5.3 Pinging the Router from Your ComputerFor MacOs Terminal 5.4 Checking If the ISP Settings are OK or Not Vigor2130 Series User’s GuideFor Static Users For PPPoE Users1. Choose Static IP as the connection type 1. Choose PPPoE as the connection typeFor PPTP/L2TP Users 5.5 Backing to Factory Default Setting If NecessarySoftware Reset Hardware Reset 5.6 Contacting Your Dealer