214 | Draytek 5500 Series specification

If a PPP-based service is selected, you should further specify the remote peer IP

Address, Username, Password, and VJ Compression for this Dial-In connection.

7.At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection.

Settings in Router B in the remote office:

1.Go to VPN and Remote Access and select Remote Access Control to enable the necessary VPN service and click OK.

214	VigorPro5500 Series User’s Guide

Image 222

Draytek 5500 Series manual 214

Contents

VigorPro 5500 Series Unified Security Firewall User’s Guide Safety Instructions and Approval Instructions European Community Declarations Regulatory Information Table of Contents 100 171 211 Trouble Shooting 235 Page Web Configuration Buttons Explanation LED Indicators and Connectors For VigorPro LED For VigorPro 5500G Wlan Isdn For VigorPro 5500Gi Interface Description Hardware Installation Internet VigorPro5500 Series User’s Guide Configuring Basic Settings Changing Password Now, the Main Screen will pop up Quick Start Wizard PPPoE VigorPro5500 Series User’s Guide Pptp Static IP Dhcp Online Status Displays the IP address of the default gateway Online status for Dhcp Saving Configuration This page is left blank What are Public IP Address and Private IP Address WANBasics of Internet Protocol IP Network Get Your Public IP Address from ISP Physical Mode General SetupEnable Display Name Physical Type Load Balance ModeActive Mode Negotiation for determined by the system Index Internet AccessAccess Mode Details Details Page for PPPoE Details Page for Static or Dynamic IP Keep WAN SettingsDhcp Client Connection DNS Server IP Address Details Page for Pptp Pptp SetupPPP Setup Assignment Load-Balance Policy MAC address for the router Protocol WAN Binding WAN Interface Src IP StartDest Port End LAN Basics of LAN What is Routing Information Protocol RIP What is Static RouteWhat are Virtual LANs and Rate Control 1st IP Address 1st Subnet Mask For IP Routing Usage Subnet Configuration Dhcp ServerRelay Agent 1st subnet/2nd subnet Specify which subnet that Static Route DNS Server Add Static Routes to Private and Public Networks VigorPro5500 Series User’s Guide Vlan Strict Bind DisableBind IP to MAC ARP Table NAT Port Redirection Service Name Public PortPrivate IP Private Port Active DMZ Host True… Choose PC WAN Interface Open PortsComment Local IP Address Start Port Enable Open PortsLocal Computer End Port Objects Settings Set to Factory Default Clear all profilesIP Object Address Type AllowedInterface Choose a proper interface WAN, LAN or Any Start IP Address IP Group Available IP ObjectsSelected IP Objects Service Type Object Service Type Group Name Available Service Type Objects Selected Service Type CSM Profile Profile Name Firewall Basics for FirewallFirewall Facilities IP Filters Stateful Packet Inspection SPI Content Security Management CSM Denial of Service DoS DefenseContent Filtering Web Filtering Anti-Virus and Anti-Intrusion Data Filter Content SecurityCall Filter Filter Move Up/Down Filter SetupFilter Rule Next Filter Set Direction Check to enableFilter Rule Comments Source/Destination IP Service Type Example VigorPro5500 Series User’s Guide DoS Defense Block Smurf Block IP optionsBlock Land Block trace router VigorPro5500 Series User’s Guide White List pass those URL Content FilterControl Matching keyword Inside to outside world to protect the local users privacy Zip, rar, .arj, .ace, .cab, .sitExe, .com, .scr, .pif, .bas, .bat, .inf, .reg Files downloading from web pages. Accordingly, files with Web Content Filter Basic Setup ServiceAnti-Intrusion Advanced Setup Type links Here and enable the SysLog Access Setup from SystemMaintenance Syslog/Mail Alert Severity Action Profile Setting Anti-Virus Enable Virus Scan Enable LogSyslog/Mail Alert Virus List File Pattern List Detailed View for Anti-Virus Destroy the file if the file Default ActionEnable Syslog/Mail Alert Name is over length For Default Action For default action Service Activation Anti-SpamMessage Choose Protocol to Scan Timeout or NetworkProblem Spam Activating Anti-Spam CancelBandwidth Management Clear Sessions Limit Bandwidth Limit Default TX limitDefault RX limit Set in that web Quality of Service TX limitRX limit General Setup for WAN Interface Reserved bandwidth to upstream speed and reserved Enable UDP BandwidthReserved Bandwidth Ratio Bandwidth to downstream speed ManagementQuality of Service Edit the Class Rule for QoS Local Address Remote AddressDiffServ CodePoint Edit the Service Type for Class Rule Port Configuration Dynamic DNS Enable the Function and Add a Dynamic DNS AccountApplications Index WAN Interface Service Provider Force UpdateEnable Dynamic Login Name Schedule Disable the Function and Clear all Dynamic DNS AccountsSet to Factory Default Delete a Dynamic DNS Account Start Date yyyy-mm-dd Enable Schedule SetupIdle Timeout Start Time hhmm Destination Port RadiusServer IP Address Shared Secret UPnP Cant work with Firewall Software MAC Address Wake On LANWake by Wake Up VPN and Remote Access Remote Access Control PPP General Setup IPSec General Setup IPSec Peer Identity IPSec Security Method 107 Remote Dial-in User User Enable this account IPSec TunnelSpecify Remote Node Check to enable callback budget control -By default, Medium -Authentication Header AH means data will beCheck to enable Callback function -Enables the callback User Name LAN to LAN Enable this profile VPN Connection ThroughCall Direction PPP Authentication Enable Ping to keep aliveEnable Ping to Keep Alive is used to handle abnormal Ping to the IP Medium AH Authentication Header means data will be IKE AuthenticationVPN and Remote Access IPSec Peer Identity 3DES without Authentication -Use triple DES encryption Perfect Forward Secret PFS- The IKE Phase 1 key will be For i models onlyProvide Isdn Number to Remote- In the case that Allowed Dial-In Type Specify Clid or Remote Profiles set in the VPN and Remote Access IPSec PeerCheck to enable Callback function-Enables the callback VPN Gateway Change default route to this VPN tunnel From first subnet to remote network, you have to do Connection Management DialRefresh Seconds Certificate Management Local CertificateGenerate Import View Trusted CA Certificate Certificate Backup IsdnBasic Concept General Settings Require ISP Callback Cbcp If your ISP supports PPP/MP SetupDial to Single/Dual ISPs Call Control Check Yes and enter the IP address in the field of Fixed IP Common SettingsMethod Ipcp Function. Require ISP Callback Cbcp If your ISP Secondary ISP Setup ISP Name Enter the secondary ISP name Primary ISP Setup ISP Name Enter your ISP namePassword Enter the password provided by your ISP Your ISP Virtual TA Install a Virtual TA Client Virtual TA ServerVirtual TA User Profiles Configure a Virtual TA Client/ Server MSN ConfigurationUser Profile Call Control Setup Call Control Basic Setup Wireless LAN Basic ConceptsSecurity Overview Example Enable Wireless LAN Mixed 11b+11g+SuperG The radio can support Channel Hide SsidLong Preamble Security Access Control Enable Access Control MAC Address Filter AttributeClear All 14.5 WDS Choose the mode for WDS setting. Disable mode will not AP Discovery Into Access Control Station List Wired Vlan VlanStation Rate Control Wireless Vlan P1 P4VLAN0-3 Login ID Wvlan How can you wireless client access into Internet? Vlan Cross Setup WVLAN0-15 Wireless Rate Control Upload RateDownload Rate System Maintenance System Status Old Password Administrator PasswordDefault Gateway New Password Configuration Backup Backup the Configuration Restore Configuration Syslog/Mail Alert Authentication Mail ToReturn-Path Time and Date Management Manager Host IP Reboot SystemTrap Timeout Trap Community Firmware Upgrade Signature Upgrade License Authentication/downl Oad message Upgrade ManuallySignature Automatically Decoded Format DiagnosticsDial-out Trigger Address, the protocol and length of the package Routing Table ARP Cache Table Dhcp Table NAT Sessions TableLeased Time Wireless Vlan Online Station Table Ping Diagnosis Ping throughPing to Data Flow Monitor Order by RX rate kbps Traffic GraphTX rate kbps Sessions Trace Route Trace through Registration for the Router Creating and Activating an Account from VigorPro Website 172 173 174 175 176 177 178 179 From System Maintenance Signature Upgrade Registering Your Vigor Router 181 182 From Anti-SpamProfile Setting 184 Activating Anti-Virus/Anti-Intrusion/Anti-Spam Service For Anti-Virus and Anti-Intrusion Service 186 187 Rename TransferBack 189 For Anti-Spam Service Getting 30 Days of Free Charge 191 192 193 Upgrade License for Anti-Spam 195 196 197 Applying a New License for Anti-Intrusion/Anti-Virus 199 200 201 202 Add License 204 Backup and Upgrade Signature for Anti-Intrusion/Anti-Virus Time for Download Switching between DT-DT and DT-KLTime for Backup Time for Import 207 208 Enabling Anti-Virus/Anti-Intrusion/Anti-Spam 210 Application and Examples 212 213 214 215 216 217 Settings in VPN Router in the enterprise office 219 Settings in the remote host 221 QoS Setting Example Go to Bandwidth ManagementQuality of Service 223 224 LAN Created by Using NAT 226 Upgrade Firmware for Your Router 228 Request a certificate from a CA server on Windows CA Server Go to Certificate Management and choose Local Certificate 231 232 233 Time and Date to reset current time of the router first Trouble Shooting Checking If the Hardware Status Is OK or Not For Windows For MacOs Pinging the Router from Your Computer For MacOs Terminal Checking If the ISP Settings are OK or Not For PPPoE Users For Static/Dynamic IP Users Backing to Factory Default Setting If Necessary Software ResetFor Pptp Users Hardware Reset Contacting Your Dealer