219 | Draytek 5500 Series specification

3.Go to Remote Dial-In Users. Click on one index number to edit a profile.

4.Set Dial-Insettings to as shown below to allow the remote user dial-in to build VPN connection.

If an IPSec service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above.

If a PPTP service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection.

VigorPro5500 Series User’s Guide

219

Image 227

Draytek 5500 Series manual 219

Contents

VigorPro 5500 Series Unified Security Firewall User’s Guide Instructions Safety Instructions and Approval Regulatory Information European Community Declarations Table of Contents 100 211 171 Trouble Shooting 235 Page LED Indicators and Connectors Web Configuration Buttons Explanation LED For VigorPro Wlan For VigorPro 5500G Isdn For VigorPro 5500Gi Interface Description Internet Hardware Installation VigorPro5500 Series User’s Guide Changing Password Configuring Basic Settings Now, the Main Screen will pop up Quick Start Wizard PPPoE VigorPro5500 Series User’s Guide Pptp Static IP Dhcp Online Status Online status for Dhcp Displays the IP address of the default gateway Saving Configuration This page is left blank Get Your Public IP Address from ISP WANBasics of Internet Protocol IP Network What are Public IP Address and Private IP Address Display Name General SetupEnable Physical Mode Negotiation for determined by the system Load Balance ModeActive Mode Physical Type Details Internet AccessAccess Mode Index Details Page for PPPoE Details Page for Static or Dynamic IP Connection SettingsDhcp Client Keep WAN Address DNS Server IP Assignment Pptp SetupPPP Setup Details Page for Pptp MAC address for the router Load-Balance Policy WAN Protocol Dest Port End Binding WANInterface Src IP Start Basics of LAN LAN What are Virtual LANs and Rate Control What is Routing Information Protocol RIPWhat is Static Route Subnet 1st IP Address 1st Subnet Mask For IP Routing Usage Relay Agent 1st subnet/2nd subnet Specify which subnet that ConfigurationDhcp Server DNS Server Static Route Add Static Routes to Private and Public Networks VigorPro5500 Series User’s Guide Vlan ARP Table DisableBind IP to MAC Strict Bind NAT Port Redirection Private IP Service NamePublic Port Active Private Port True… DMZ Host Choose PC Local IP Address Open PortsComment WAN Interface End Port Enable Open PortsLocal Computer Start Port IP Object Objects SettingsSet to Factory Default Clear all profiles Start IP Address AllowedInterface Choose a proper interface WAN, LAN or Any Address Type Selected IP Objects IP GroupAvailable IP Objects Service Type Object Service Type Group CSM Profile Name Available Service Type Objects Selected Service Type Profile Name Firewall Facilities FirewallBasics for Firewall Stateful Packet Inspection SPI IP Filters Content Filtering Content Security Management CSMDenial of Service DoS Defense Anti-Virus and Anti-Intrusion Web Filtering Filter Content SecurityCall Filter Data Filter Next Filter Set Filter SetupFilter Rule Move Up/Down Source/Destination IP Check to enableFilter Rule Comments Direction Service Type Example VigorPro5500 Series User’s Guide DoS Defense Block trace router Block IP optionsBlock Land Block Smurf VigorPro5500 Series User’s Guide Matching keyword URL Content FilterControl White List pass those Files downloading from web pages. Accordingly, files with Zip, rar, .arj, .ace, .cab, .sitExe, .com, .scr, .pif, .bas, .bat, .inf, .reg Inside to outside world to protect the local users privacy Web Content Filter Anti-Intrusion Basic SetupService Advanced Setup Severity Here and enable the SysLog Access Setup from SystemMaintenance Syslog/Mail Alert Type links Action Anti-Virus Profile Setting Syslog/Mail Alert Enable Virus ScanEnable Log Virus List Detailed View for Anti-Virus File Pattern List Name is over length Default ActionEnable Syslog/Mail Alert Destroy the file if the file For Default Action For default action Message Service ActivationAnti-Spam Spam Timeout or NetworkProblem Choose Protocol to Scan Clear CancelBandwidth Management Activating Anti-Spam Sessions Limit Set in that web Default TX limitDefault RX limit Bandwidth Limit RX limit Quality of ServiceTX limit General Setup for WAN Interface Bandwidth to downstream speed Enable UDP BandwidthReserved Bandwidth Ratio Reserved bandwidth to upstream speed and reserved Edit the Class Rule for QoS ManagementQuality of Service DiffServ CodePoint Local AddressRemote Address Edit the Service Type for Class Rule Port Configuration Index WAN Interface Enable the Function and Add a Dynamic DNS AccountApplications Dynamic DNS Login Name Force UpdateEnable Dynamic Service Provider Delete a Dynamic DNS Account Disable the Function and Clear all Dynamic DNS AccountsSet to Factory Default Schedule Start Time hhmm Enable Schedule SetupIdle Timeout Start Date yyyy-mm-dd Shared Secret RadiusServer IP Address Destination Port UPnP Cant work with Firewall Software Wake Up Wake On LANWake by MAC Address Remote Access Control VPN and Remote Access PPP General Setup IPSec General Setup IPSec Security Method IPSec Peer Identity 107 User Remote Dial-in User Specify Remote Node Enable this accountIPSec Tunnel User Name Medium -Authentication Header AH means data will beCheck to enable Callback function -Enables the callback Check to enable callback budget control -By default, LAN to LAN Call Direction Enable this profileVPN Connection Through Ping to the IP Enable Ping to keep aliveEnable Ping to Keep Alive is used to handle abnormal PPP Authentication 3DES without Authentication -Use triple DES encryption IKE AuthenticationVPN and Remote Access IPSec Peer Identity Medium AH Authentication Header means data will be Provide Isdn Number to Remote- In the case that Perfect Forward Secret PFS- The IKE Phase 1 key will beFor i models only Allowed Dial-In Type VPN Gateway Profiles set in the VPN and Remote Access IPSec PeerCheck to enable Callback function-Enables the callback Specify Clid or Remote From first subnet to remote network, you have to do Change default route to this VPN tunnel Refresh Seconds Connection ManagementDial Generate Certificate ManagementLocal Certificate View Import Trusted CA Certificate Basic Concept Certificate BackupIsdn General Settings Call Control PPP/MP SetupDial to Single/Dual ISPs Require ISP Callback Cbcp If your ISP supports Function. Require ISP Callback Cbcp If your ISP Common SettingsMethod Ipcp Check Yes and enter the IP address in the field of Fixed IP Your ISP Primary ISP Setup ISP Name Enter your ISP namePassword Enter the password provided by your ISP Secondary ISP Setup ISP Name Enter the secondary ISP name Virtual TA Virtual TA User Profiles Install a Virtual TA ClientVirtual TA Server User Profile Configure a Virtual TA Client/ ServerMSN Configuration Call Control Call Control Setup Basic Setup Security Overview Wireless LANBasic Concepts Example Mixed 11b+11g+SuperG The radio can support Enable Wireless LAN Long Preamble ChannelHide Ssid Security Enable Access Control Access Control Clear All MAC Address FilterAttribute 14.5 WDS Choose the mode for WDS setting. Disable mode will not AP Discovery Station List Into Access Control Station Rate Control Wired VlanVlan VLAN0-3 Wireless VlanP1 P4 Wvlan Login ID How can you wireless client access into Internet? Vlan Cross Setup WVLAN0-15 Download Rate Wireless Rate ControlUpload Rate System Status System Maintenance New Password Administrator PasswordDefault Gateway Old Password Backup the Configuration Configuration Backup Syslog/Mail Alert Restore Configuration Return-Path AuthenticationMail To Time and Date Management Trap Community Reboot SystemTrap Timeout Manager Host IP Firmware Upgrade License Signature Upgrade Signature Authentication/downlOad message Upgrade Manually Automatically Address, the protocol and length of the package DiagnosticsDial-out Trigger Decoded Format ARP Cache Table Routing Table Leased Time Dhcp TableNAT Sessions Table Wireless Vlan Online Station Table Ping to Ping DiagnosisPing through Order by Data Flow Monitor Sessions Traffic GraphTX rate kbps RX rate kbps Trace through Trace Route Creating and Activating an Account from VigorPro Website Registration for the Router 172 173 174 175 176 177 178 179 Registering Your Vigor Router From System Maintenance Signature Upgrade 181 182 From Anti-SpamProfile Setting 184 For Anti-Virus and Anti-Intrusion Service Activating Anti-Virus/Anti-Intrusion/Anti-Spam Service 186 187 Back RenameTransfer 189 Getting 30 Days of Free Charge For Anti-Spam Service 191 192 193 Upgrade License for Anti-Spam 195 196 197 Applying a New License for Anti-Intrusion/Anti-Virus 199 200 201 202 Add License 204 Backup and Upgrade Signature for Anti-Intrusion/Anti-Virus Time for Import Switching between DT-DT and DT-KLTime for Backup Time for Download 207 208 Enabling Anti-Virus/Anti-Intrusion/Anti-Spam 210 Application and Examples 212 213 214 215 216 217 Settings in VPN Router in the enterprise office 219 Settings in the remote host 221 Go to Bandwidth ManagementQuality of Service QoS Setting Example 223 224 LAN Created by Using NAT 226 Upgrade Firmware for Your Router 228 Request a certificate from a CA server on Windows CA Server Go to Certificate Management and choose Local Certificate 231 232 233 Time and Date to reset current time of the router first Checking If the Hardware Status Is OK or Not Trouble Shooting For Windows For MacOs For MacOs Terminal Pinging the Router from Your Computer For PPPoE Users Checking If the ISP Settings are OK or Not For Static/Dynamic IP Users For Pptp Users Backing to Factory Default Setting If NecessarySoftware Reset Contacting Your Dealer Hardware Reset