233 | Draytek 5500 Series instruction

5.7Request a CA Certificate and Set as Trusted on Windows CA Server

1.Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certificate or certificate recoring list.

VigorPro5500 Series User’s Guide

233

Image 241

Draytek 5500 Series manual 233

Contents

VigorPro 5500 Series Unified Security Firewall User’s Guide Instructions Safety Instructions and Approval Regulatory Information European Community Declarations Table of Contents 100 211 171 Trouble Shooting 235 Page LED Indicators and Connectors Web Configuration Buttons Explanation LED For VigorPro Wlan For VigorPro 5500G Isdn For VigorPro 5500Gi Interface Description Internet Hardware Installation VigorPro5500 Series User’s Guide Changing Password Configuring Basic Settings Now, the Main Screen will pop up Quick Start Wizard PPPoE VigorPro5500 Series User’s Guide Pptp Static IP Dhcp Online Status Online status for Dhcp Displays the IP address of the default gateway Saving Configuration This page is left blank Basics of Internet Protocol IP Network WANWhat are Public IP Address and Private IP Address Get Your Public IP Address from ISP Enable General SetupPhysical Mode Display Name Active Mode Load Balance ModePhysical Type Negotiation for determined by the system Access Mode Internet AccessIndex Details Details Page for PPPoE Details Page for Static or Dynamic IP Dhcp Client SettingsKeep WAN Connection Address DNS Server IP PPP Setup Pptp SetupDetails Page for Pptp Assignment MAC address for the router Load-Balance Policy WAN Protocol Interface Src IP Start Binding WANDest Port End Basics of LAN LAN What is Static Route What is Routing Information Protocol RIPWhat are Virtual LANs and Rate Control Subnet 1st IP Address 1st Subnet Mask For IP Routing Usage Dhcp Server ConfigurationRelay Agent 1st subnet/2nd subnet Specify which subnet that DNS Server Static Route Add Static Routes to Private and Public Networks VigorPro5500 Series User’s Guide Vlan Bind IP to MAC DisableStrict Bind ARP Table NAT Port Redirection Public Port Service NamePrivate IP Active Private Port True… DMZ Host Choose PC Comment Open PortsWAN Interface Local IP Address Local Computer Enable Open PortsStart Port End Port Set to Factory Default Clear all profiles Objects SettingsIP Object Interface Choose a proper interface WAN, LAN or Any AllowedAddress Type Start IP Address Available IP Objects IP GroupSelected IP Objects Service Type Object Service Type Group CSM Profile Name Available Service Type Objects Selected Service Type Profile Name Basics for Firewall FirewallFirewall Facilities Stateful Packet Inspection SPI IP Filters Denial of Service DoS Defense Content Security Management CSMContent Filtering Anti-Virus and Anti-Intrusion Web Filtering Call Filter Content SecurityData Filter Filter Filter Rule Filter SetupMove Up/Down Next Filter Set Filter Rule Comments Check to enableDirection Source/Destination IP Service Type Example VigorPro5500 Series User’s Guide DoS Defense Block Land Block IP optionsBlock Smurf Block trace router VigorPro5500 Series User’s Guide Control URL Content FilterWhite List pass those Matching keyword Exe, .com, .scr, .pif, .bas, .bat, .inf, .reg Zip, rar, .arj, .ace, .cab, .sitInside to outside world to protect the local users privacy Files downloading from web pages. Accordingly, files with Web Content Filter Service Basic SetupAnti-Intrusion Advanced Setup Maintenance Syslog/Mail Alert Here and enable the SysLog Access Setup from SystemType links Severity Action Anti-Virus Profile Setting Enable Log Enable Virus ScanSyslog/Mail Alert Virus List Detailed View for Anti-Virus File Pattern List Enable Syslog/Mail Alert Default ActionDestroy the file if the file Name is over length For Default Action For default action Anti-Spam Service ActivationMessage Problem Timeout or NetworkChoose Protocol to Scan Spam Bandwidth Management CancelActivating Anti-Spam Clear Sessions Limit Default RX limit Default TX limitBandwidth Limit Set in that web TX limit Quality of ServiceRX limit General Setup for WAN Interface Reserved Bandwidth Ratio Enable UDP BandwidthReserved bandwidth to upstream speed and reserved Bandwidth to downstream speed Edit the Class Rule for QoS ManagementQuality of Service Remote Address Local AddressDiffServ CodePoint Edit the Service Type for Class Rule Port Configuration Applications Enable the Function and Add a Dynamic DNS AccountDynamic DNS Index WAN Interface Enable Dynamic Force UpdateService Provider Login Name Set to Factory Default Disable the Function and Clear all Dynamic DNS AccountsSchedule Delete a Dynamic DNS Account Idle Timeout Enable Schedule SetupStart Date yyyy-mm-dd Start Time hhmm Server IP Address RadiusDestination Port Shared Secret UPnP Cant work with Firewall Software Wake by Wake On LANMAC Address Wake Up Remote Access Control VPN and Remote Access PPP General Setup IPSec General Setup IPSec Security Method IPSec Peer Identity 107 User Remote Dial-in User IPSec Tunnel Enable this accountSpecify Remote Node Check to enable Callback function -Enables the callback Medium -Authentication Header AH means data will beCheck to enable callback budget control -By default, User Name LAN to LAN VPN Connection Through Enable this profileCall Direction Enable Ping to Keep Alive is used to handle abnormal Enable Ping to keep alivePPP Authentication Ping to the IP VPN and Remote Access IPSec Peer Identity IKE AuthenticationMedium AH Authentication Header means data will be 3DES without Authentication -Use triple DES encryption For i models only Perfect Forward Secret PFS- The IKE Phase 1 key will beProvide Isdn Number to Remote- In the case that Allowed Dial-In Type Check to enable Callback function-Enables the callback Profiles set in the VPN and Remote Access IPSec PeerSpecify Clid or Remote VPN Gateway From first subnet to remote network, you have to do Change default route to this VPN tunnel Dial Connection ManagementRefresh Seconds Local Certificate Certificate ManagementGenerate View Import Trusted CA Certificate Isdn Certificate BackupBasic Concept General Settings Dial to Single/Dual ISPs PPP/MP SetupRequire ISP Callback Cbcp If your ISP supports Call Control Method Ipcp Common SettingsCheck Yes and enter the IP address in the field of Fixed IP Function. Require ISP Callback Cbcp If your ISP Password Enter the password provided by your ISP Primary ISP Setup ISP Name Enter your ISP nameSecondary ISP Setup ISP Name Enter the secondary ISP name Your ISP Virtual TA Virtual TA Server Install a Virtual TA ClientVirtual TA User Profiles MSN Configuration Configure a Virtual TA Client/ ServerUser Profile Call Control Call Control Setup Basic Setup Basic Concepts Wireless LANSecurity Overview Example Mixed 11b+11g+SuperG The radio can support Enable Wireless LAN Hide Ssid ChannelLong Preamble Security Enable Access Control Access Control Attribute MAC Address FilterClear All 14.5 WDS Choose the mode for WDS setting. Disable mode will not AP Discovery Station List Into Access Control Vlan Wired VlanStation Rate Control P1 P4 Wireless VlanVLAN0-3 Wvlan Login ID How can you wireless client access into Internet? Vlan Cross Setup WVLAN0-15 Upload Rate Wireless Rate ControlDownload Rate System Status System Maintenance Default Gateway Administrator PasswordOld Password New Password Backup the Configuration Configuration Backup Syslog/Mail Alert Restore Configuration Mail To AuthenticationReturn-Path Time and Date Management Trap Timeout Reboot SystemManager Host IP Trap Community Firmware Upgrade License Signature Upgrade Oad message Upgrade Manually Authentication/downlSignature Automatically Dial-out Trigger DiagnosticsDecoded Format Address, the protocol and length of the package ARP Cache Table Routing Table NAT Sessions Table Dhcp TableLeased Time Wireless Vlan Online Station Table Ping through Ping DiagnosisPing to Order by Data Flow Monitor TX rate kbps Traffic GraphRX rate kbps Sessions Trace through Trace Route Creating and Activating an Account from VigorPro Website Registration for the Router 172 173 174 175 176 177 178 179 Registering Your Vigor Router From System Maintenance Signature Upgrade 181 182 From Anti-SpamProfile Setting 184 For Anti-Virus and Anti-Intrusion Service Activating Anti-Virus/Anti-Intrusion/Anti-Spam Service 186 187 Transfer RenameBack 189 Getting 30 Days of Free Charge For Anti-Spam Service 191 192 193 Upgrade License for Anti-Spam 195 196 197 Applying a New License for Anti-Intrusion/Anti-Virus 199 200 201 202 Add License 204 Backup and Upgrade Signature for Anti-Intrusion/Anti-Virus Time for Backup Switching between DT-DT and DT-KLTime for Download Time for Import 207 208 Enabling Anti-Virus/Anti-Intrusion/Anti-Spam 210 Application and Examples 212 213 214 215 216 217 Settings in VPN Router in the enterprise office 219 Settings in the remote host 221 Go to Bandwidth ManagementQuality of Service QoS Setting Example 223 224 LAN Created by Using NAT 226 Upgrade Firmware for Your Router 228 Request a certificate from a CA server on Windows CA Server Go to Certificate Management and choose Local Certificate 231 232 233 Time and Date to reset current time of the router first Checking If the Hardware Status Is OK or Not Trouble Shooting For Windows For MacOs For MacOs Terminal Pinging the Router from Your Computer For PPPoE Users Checking If the ISP Settings are OK or Not For Static/Dynamic IP Users Software Reset Backing to Factory Default Setting If NecessaryFor Pptp Users Contacting Your Dealer Hardware Reset