Draytek Vigor2200 Series User Manual Download Page 104

Page: 104 / 127

VPN-5

VPN

2. VPN IKE/IPSec Setup

Dial-in Setup

IKE Authentication Method

: Currently only supports

Pre-Shared Key authentication.

Pre-Shared Key: Specifices a key for IKE authentication.

Re-type Pre-Shared-Key: Confirms pre-shared-key.
(Maximum 64 characters)

IPSec Security Method

: Selects allowed IPSec security

method.

Summary of Contents for Vigor2200 Series

Page 1: ...n Community Declarations 0 4 1 Getting Started 1 1 1 1 Introduction 1 2 1 2Unpacking Your Vigor2200USB 1 2 1 3 LED Indicators Rear Panels Description 1 4 1 4 Detailed Features 1 8 2 Installation Setup...

Page 2: ...p 3 6 4 Advanced Setup 4 1 4 1 Dynamic DNS Setup 4 2 4 2 Call Schedule Setup 4 5 4 3 NAT Setup 4 7 4 4 Static Route 4 14 4 5 IP Filter Firewall Setup 4 16 5 System Management 5 1 5 1 Online Status 5 2...

Page 3: ...Viewing PPP Logs 6 4 6 4 FAQs 6 5 Virtual Private Network and Remote Access VPN 1 VPN 1 Introduction to VPNs and Remote Access VPN 4 VPN 2 VPN IKE IPSec Setup VPN 5 VPN 3 VPN Remote Dial in Access VP...

Page 4: ...0 1 0 Preface 0 1 About This Manual 0 2 Copyright Declarations 0 3 Trademarks 0 4 How To Become A Registered Owner 0 5 Safety Instructions 0 6 Warranty 0 7 European Community Declarations...

Page 5: ...ublication con tains information that is protected by copyright No part may be reproduced transmitted transcribed stored in a retrieval system or translated into any language without written per missi...

Page 6: ...ousing and electronic components may be damaged by direct sunlight or heat sources Keep the packaging out of reach of children When you to dispose of the Vigor2200USB please follow local regulations o...

Page 7: ...aged by an act of God or subjected to abnormal working conditions The warranty does not cover bundled or licensed software of other vendors Defects which do not significantly affect the usability of t...

Page 8: ...1 1 1 Getting Started 1 1Introduction 1 2 Unpacking Your Vigor2200USB 1 3 LED Indicators Rear Panel Description 1 4 Detailed Features...

Page 9: ...detailed User Manual in elec tronicform latestreleasedfirmware andutilities One AC DC power adapter black One Ethernet LAN cable blue for connection to a com puter or hub 1 1Introduction TheVigor2200U...

Page 10: ...1 3 Getting Started...

Page 11: ...ar Panel Description LEDIndicators ThereareelevenLEDsonthefrontpanel ACT DSL USB LNK USB LNK VPN P1 P2 P3 and P4 ACT Activity Blinks when power is supplied to the router and the router is run ningnorm...

Page 12: ...heDSLmodem LNK ONwhenthePPPconnectionoftheDSLmodemisactive USB2Group USB ON when the DSL modem is ready Blinking when there is data transferring between the Vigor2200USB and the DSL modem LNK ONwhenth...

Page 13: ...rades Pressandholdthebutton thenpowerON TheACTandDSLLEDswillblinksimultaneously seesection5 5 To restore default settings While the device is running press the button and hold for more than five secon...

Page 14: ...orts Uplink For connecting to another hub switch press the Uplink button and connect the other hub switch to the P1 port USB The DSL USB modem Alcatel Speed Touch USB or DynaMite USB Modem should be c...

Page 15: ...tures are added 3 Web HTTP Server A Web browser is the most common tool used to surf the Internet You may use Microsoft s Internet Explorer or a Netscape browser etc to configure the router as easilya...

Page 16: ...Built in Flash ROM The Flash ROM memory saves the Vigor2200USB firmware and configurations even after power down 8 Point to Point Protocol over Ethernet PPPoE Client Sup port TheVigor2200USBhasabuilt...

Page 17: ...2 1 2 Installation Setup 2 1 Before you Begin 2 2 Hardware Installation 2 3 Setting Up a Management PC 2 4 Using the Smart Start Wizard 2 5 Using the Web Configurator...

Page 18: ...block the ventila tion slots on the rear panel 4 Cables must be attached to the correct ports to do otherwise may result in damage to the router Keep cables away from walk ways 5 If you are a DSL user...

Page 19: ...Subnet Mask 255 255 255 0 DHCP Server Enabled Start IP Address 192 168 1 10 IP Pool Counts 50 Web Configurator Username admin Password blank Note Blank means no password required Telnet Console Passw...

Page 20: ...d to the PWR power jack on the rear panel of the router 2 The ACT LED should be blinking once every 2 seconds 2 2 2 Connecting to the Ethernet A Connecting to a PC 1 Attach the Ethernet cable blue col...

Page 21: ...com mended reboot the PC and ensure that it has obtained an IP address from the router you can use Windows winipcfg exe or ipconfig exe to check You can use windows ping exe to check that your PC can...

Page 22: ...o the Vigor2200USB s memory so that it s available to the modem This only ever needs to be done once the firmware is then stored in the Vigor2200USB s non volatile memory From your Windows Start Butto...

Page 23: ...2 7 After the correct modem is selected click Go and you should see some information relating to ATM settings firmware version and the IP address of the router...

Page 24: ...g DSL configuare which will be installed to router later You can choose Default to get default setting if you have any Once you want to create new setting according to your DSL environment recommanded...

Page 25: ...red on your PC in Dial up networking these details now need to be stored in the Vigor2200USB so that it can automatically log into your ISP when required Open you web browser e g MSIE or Netscape and...

Page 26: ...2 10 Once past the password prompt you will now see the router s main menu...

Page 27: ...2 11 Click on Internet Access Setup on the top right hand menu Click PPPoE PPPoA...

Page 28: ...onnect the your ADSL line to your modem The modem should start to handshake with the central site modem and once it has connected the DSL LED on the front of the modem should light This will take abou...

Page 29: ...tings The DHCP server of the router is enabled by default so the PC will then be assigned an IP address and related settings by the router The following examples are for a MicrosoftTM Windows 95 98 ma...

Page 30: ...drivers If your card is installed 1 Click the Add button The Select Network Component Type dialog box will open The box will show four options Client Adapter Protocol Service 2 Select Protocol and cli...

Page 31: ...sdialog box will open 2 On the IP Address tab click Obtain an IP address au tomatically As the DHCP Dynamic Host Configuration Protocol server built into the router is enabled by default your computer...

Page 32: ...2 16 4 Click the Gateway tab...

Page 33: ...nipcfg The IP Configuration window will open If the PC does not show an IP address in the 192 168 1 2 to 192 168 1 254 range click the Release button to release the current configuration Wait a few se...

Page 34: ...r to check the network connectivity If both hardware and software are correct your computer will receive a response from the router as shown on the next page If not verify that the Ethernet cable is c...

Page 35: ...nternet Explorer Netcape Communicator etc or telnet cli ent software you may jump directly to the next section page 2 18 We suggest you use the most up to date version of your web browser Installing t...

Page 36: ...20 1 Click Start Programs Router Tools SmartStart Wizard The following screen will open 2 Click Search to find the router on your network 3 Click OK to go to the login password screen Using the Wizar...

Page 37: ...een The screen shows read only IP and IP mask settings for the PC you are using and also the IP Address and IP Mask settings for the router Here you may change the router set tings to match your curre...

Page 38: ...page 7 If the IP address and IP Mask of your PC and of the router are not located on the same subnet renew your PC s IP ad dress using winipcfg exe on Windows95 98 Me or ipconfig exe on Windows NT 20...

Page 39: ...2 23 8 Enter admin as the User Name and leave the Password field blank The Web Configurator will open In the follow ing examples we use the NetscapeTM web browser see the next page...

Page 40: ...will open On the main page Model Firmware Version Build Date Time and LAN MAC Hardware Address information will be dis played 2 5 Using the Web Configurator 2 5 1 Connecting to the Web Configurator vi...

Page 41: ...asic Setup Setup First Quick Setup Advanced Setup and System Management The following outlines each configuration menu Basic Setup Setup First 1 Administrator Password Setup Sets changes the administr...

Page 42: ...e configured for standard Internet access 1 NAT Network Address Translation Setup Sets NAT configurations such as Port Redirection DMZ etc 2 Static Route Setup This menu has 10 routing rules for stati...

Page 43: ...Also you may set HTTP or Telnet ports to specific port numbers of your choice 3 DiagnosticTools Diagnostic tools offers useful tools for diagnosing the router or your network e g view ARP table routi...

Page 44: ...3 1 3 Basic Quick Setup 3 1 Administrator Password Setup 3 2 LAN TCP IP and DHCP Setup 3 3 Internet Access Setup...

Page 45: ...up 3 1 Administrator Password Setup For security reasons we strongly recommend that you set an ad ministrator password for the router On first setup the router re quires no password If you don t set a...

Page 46: ...HCP Setup The Vigor2200USB has one Ethernet LAN port for connecting to thelocalEthernetnetwork There are two sets of IP address settings for the LAN interface The 1st IP address netmask is for private...

Page 47: ...sable Disables the 2nd IP address settings 2nd IP Address Sets a public IP address 2nd Subnet Mask Sets a netmask for the public IP ad dress DHCP Server Configuration DHCP stands for Dynamic Host Conf...

Page 48: ...uivalent IP address Primary IP Address Sets the IP address of the primary DNS server Secondary IP Address Sets the IP address of the second ary DNS server Note If both the Primary IP and Secondary IP...

Page 49: ...rs Internet access is the primary application When you click Internet Access Setup from within the Quick Setup group thefollowingsetuppagewillbeshown PPPoE PPPoA This is for most DSL modem users All l...

Page 50: ...tiontool it willcollectthefollowingmessagesandconfigurerouterautomati cally Driver Type PPPoA or PPPoE Encapsulation Mode VC MUX or LLC SNAP VCI virtual channel identifier assigned by ISP VPI virtual...

Page 51: ...r Version display the firmware version of usb dsl modem DSL Modem Settings VCI virtualchannelidentifierassignedbyISP VPI virtualpipeidentifierassignedbyISP Encapsulation Mode VC MUX or LLC SNAP Driver...

Page 52: ...4 1 4 Advanced Setup 4 1 Dynamic DNS Setup 4 2 Call Schedule Setup 4 3 NAT Setup 4 4 Static Route 4 5 IP Filter Firewall Setup...

Page 53: ...ternet access users have no their own domain name If they want to set up Internet servers ex FTP Web or Mail server in the private local network using Port Redirection function it s not easy way Becau...

Page 54: ...this DDNS service provider and 3 DDNS profiles These profiles support the router can update its WAN IP address tothreedifferentdomainnameswhenit sonline 2 ConfiguringDDNSFunction 1 Register a DDNS ac...

Page 55: ...the www dyndns org web site Put your own hostname in the Host Name field Type your account in the User Name and Password fields If the hostname is supported wildcard by the DDNS provider you should c...

Page 56: ...al The DDNS function has been finished 4 2 Call Schedule Setup CallSchedulerwillcontroltherouter sdialerorconnection manager what time should be up or down by these call schefule profiles Beforeconfig...

Page 57: ...ime hh mm Specifythestarttimeoftheschedule DurationTime hh mm Specifytheduration orperiod otthe schedule Action SpecifywhichactionshouldbeappliedbyCallScheduler duringthetimeperiodoftheschedule Force...

Page 58: ...l use the router as a NAT enabled router NAT stands for Network Address Translation It means the router gets onegloballyre routeableIPaddressfrom theISP Localhostswill useprivatenetworkIPaddressdefine...

Page 59: ...ervers tothepublicdomainoropenaspecificportnumbertointernalhosts Internet hosts can use the WAN IP address to access internal net work services such as FTP WWW etc The following example shows how an i...

Page 60: ...e name for the specific network service Protocol Specifies the transport layer protocol TCP or UDP Public Port Specifies which port should be redirected to theinternalhost Private IP Specifies the pri...

Page 61: ...orts translation On the other hand for theinbound theDMZhostwillbeforwardedtobydefault evenif novirtualserverhasbeenspecified TheDMZHostsettingsallowa defined internal user to be exposed to the Intern...

Page 62: ...The Open Port Setup will help you to do that Click NAT Setup under the Advanced Setup group and Open Ports Setup Thefollowingsetuppagewillbeshownasbelow The router supports 10 profiles for Open Ports...

Page 63: ...Thefollowingsettingswillbeallowchangingaftercheck ing Enable Open Ports Otherwise these settings are no use Comment Type up to 12 characters for this profile Local Computer Specify the IP address for...

Page 64: ...s 10 port ranges could be configured Protocol Specify the protocol Start Port Specify the start port of a range End Port Specify the end port of a range 4 3 4 Well known Port Number List This page pro...

Page 65: ...anced Setup 4 4 Static Route You may need to access the other machines which behind other routers in the same network You can use static route function to indicate the routing path for this kind of ac...

Page 66: ...warded to the mail server through the LAN to LAN router directly Status Action Set to Active Add Destination IP Address Specifies the target network IP or host IP In this example we use netwrk IP 203...

Page 67: ...to pass through the router when the WAN connection has beenestablished In concept when an outgoing packet is to be routed to the WAN the IP Filter will decide if the packet should be forwarded to the...

Page 68: ...lter Firewall SetupusingtheWebConfigurator TheFilterhas12filtersetswith 7 filter rules for each set There are a total of 84 filter rules for the IP Filter Firewall Setup By default the Call Filter rul...

Page 69: ...Click here to restore the filter rules todefaultvalues 4 5 2 General Setup OntheGeneralSetuppageyoucanenable disabletheCallFilteror Data Filter and assign a Start Filter Set for each configure the lo...

Page 70: ...ch The log function will record all packets whichareunmatched Note The filter log will be displayed on the Telnet terminal when you type the log f command MAC Address for Packet Duplication Logged pac...

Page 71: ...red 1 7 to edit the filter rule Active Enable or disable the filter rule Next Filter Set Specifies the next filter set to be linked behind the current filter set The filters cannot be looped The follo...

Page 72: ...4 21 Advanced Setup...

Page 73: ...le the Filter Rule Enables the filter rule Pass or Block Specifies the action to be taken when pack ets match the rule Block Immediately Packets matching the rule will bedroppedimmediately PassImmedia...

Page 74: ...want to log the matched packets to another network device check this box to enable it The MAC Address is defined in General Setup MAC Ad dress for Logged Packets Duplication Log Check this box to ena...

Page 75: ...mnforthisfilterruletoapplyto Operator The operator column specifies the port number If the End Port is empty the port number is not equal to the value of the Start Port Otherwise this port number is n...

Page 76: ...estricteduseris192 168 1 10 Thefilterruleis created in the Data Filter set and is shown as below Port 80 is the HTTP protocol port number for WWW services Do not Care Specifies no fragment options in...

Page 77: ...5 1 5 System Management 5 1 Online Status 5 2 Time Setup 5 3 Management Setup 5 4 Diagnostic Tools 5 5 Reboot System 5 6FirmwareUpgrade...

Page 78: ...ll show you how to manage your router using the System Management tools shown below 5 1 Online Status Click Online Status to open the Online Status page The Online Status page contains three subgroups...

Page 79: ...r was powered on RX Packets Total number of received IP packets received since the router was powered on WAN Status Mode USB DSL modem model GW IP Addr Gateway IP Address IP Address IP address of the...

Page 80: ...be worked properly in advance Click Time Setup under System Management group to enter the setup page as below The page has two blocks one is Time Information the other isTimeSetup IntheTimeInforamtion...

Page 81: ...igor2200USB will get the wrongtime Use Internet Time Client Click to specify the time base from the Internet time protocol ex NTP TimeProtocol Specifytimeprotocol Server IP Address Specify the IP addr...

Page 82: ...tilities However forsomespecificenvironments youmaywanttochange theserverportnumbersforthebuilt inTelnetorHTTPserver cre ate access lists to protect the router or reject system administrator loginfrom...

Page 83: ...HTTP servers User Defined Ports Check to specify user defined port numbers for the Telnet and HTTP servers SNMP Setup The Simple Network Management Protocol SNMP is an applicationlayerprotocolthatcom...

Page 84: ...every host can use SNMP manager to man age TrapCommunity SpecifytheTrapcommunityname Default value is public Notification Host IP Specify the recipient of the trap message If this field is empty route...

Page 85: ...5 9 System Management View Routing Table Click View Routing Table to view the router s routing table...

Page 86: ...tic route R RIP Default route Totherightofeachroutingruleyouwillseeaninterfaceidentifier IF0 Local LAN interface IF1 ISDN B1 channel IF2 ISDN B2 channel IF3 WAN LAN2 interface View ARP Cache Table Cli...

Page 87: ...m Management View DHCP Assigned IP Addresses View DHCP Assigned IP Addresses provides information on IP addressassignments Thisinformationishelpfulindiagnosingnet work problems such as IP address conf...

Page 88: ...n underNATSetup click to verify that your settings are correct for redirecting specific port numberstospecifiedinternalusers View NAT Active Sessions Table AstherouteraccessestheInternetthroughthebuil...

Page 89: ...informationisdisplayed Private IP Port The IP address and port number of internal users PCs Pseudo Port The public port number Peer IP Port The IP address and port number of peer users PCs Ifno Stands...

Page 90: ...g current running configurations check Using current configuration and click OK To reset the router settings to default values check Using factory default configuration and click OK The router will ta...

Page 91: ...uters on your LAN and display them by IP Select the IP address of the router to upgrade then press Upgrade Enter the router s password when asked or press OK if there is no password The up grade will...

Page 92: ...6 1 6 Troubleshooting FAQ 6 1 Using the Telnet Terminal Commands 6 2 Viewing Call Logs 6 3 Viewing PPP Logs 6 4 FAQs...

Page 93: ...ydefault Linuxhasabuilt inTelnetclient 6 1 Using the Telnet Terminal Commands Click Start Run and type Telnet 192 168 1 1 in the Open box as below Note that the IP address in the example is the router...

Page 94: ...nd followed by a question mark For example the ip command is a first level command Type ip to get next level commands as shownbelow Recall Commands The Telnet terminal also provides a method to recall...

Page 95: ...nnectionmessages Thisinformationcanbehelpfulindiagnosing WAN connection problems If you do not understand the content you can easily save the log and send it to a support technician The steps are 1 Lo...

Page 96: ...your PC 4 Type log p to display the latest PPP log To display all PPP logs use the log p t command ThePPPlogisusefulinsolvingcommunicationproblemsfornormal ISDN dialup or PPPoE and PPTP dialup via a D...

Page 97: ...your PC correctly 3 USB LED does not light up after connecting the modem A Checkthatthemodemfirmwareiscorrectlyinstalled into the Vigor2200USB from the Vigor2200USB s ISP setupscreen itwillshowthemode...

Page 98: ...l for over 5 seconds to reset all settings to default values 3 What is the default IP address of the router A ThedefaultIPaddressis192 168 1 1withsubnetmask 255 255 255 0 4 Why does the router dial ou...

Page 99: ...client remove any DNS IP address set ting AstherouterwillassigntheDNSsettingstotheDHCP client enabledPC 7 What is the maximum number of IP addresses that the router DHCP server can assign to local PC...

Page 100: ...ual Private Network and Remote Access VPN 1 Introduction to VPNs and Remote Access VPN 2 VPN IKE IPSec Setup VPN 3 VPN Remote Dial in Access VPN 4 VPN LAN to LAN Access VPN 5 VPN Connection Management...

Page 101: ...ote access on the router Use the following setup links on the Setup Main Menu to setup VPN and remote access functions Quick Setup VPN Remote Dial In Access Setup Advanced Setup VPN IKE IPSec Setup VP...

Page 102: ...VPN 3 VPN System Management VPN Commection Management...

Page 103: ...rst Remote Dial In Access means the router allows a remote access node a NAT router or a single user computer to dial into a VPN router through the Internet to access the network resources of the remo...

Page 104: ...entication Method Currently only supports Pre Shared Key authentication Pre Shared Key Specifices a key for IKE authentication Re type Pre Shared Key Confirms pre shared key Maximum64characters IPSec...

Page 105: ...hatmeans routerwillnotrespondanyincomingIKEnegeotiation packet Dial outSetup IKE Authentication Method Currently only supports Pre Shared Key authentication Pre Shared Key Specifices a key for IKE aut...

Page 106: ...s the router will attempt to authenticate dial in users with the CHAP proto col first If the dial in user does not support this protocol it will fall back to use the PAP protocol for authentication 3...

Page 107: ...168 1 200 to be the Start IP Address Click OK 3 2 Creating an Access Account for a Dial in User Afteractivatingthedial incapability youmustcreatean access account for each dial in user The router prov...

Page 108: ...In Username The means the access account is free If an access account has been configured the username willbeshown Status The symbol v means the account is active x means inactive Clicktheindexnumbero...

Page 109: ...ll drop the connection Enable Incoming IP address verification For extra security enables the option to allow the dial in user to call only from a specific IP address Allowed Dial In Type Select allow...

Page 110: ...LAN to LAN through the Internet VPN The following sections are based on the network layout above to describe how to set up a LAN to LAN profile to connect two private networks through Internet In the...

Page 111: ...file for each network youneedtogathertheinformationshowninthe followtable 4 2 Creating a LAN to LAN Dialer Profile First you must create a LAN to LAN profile for each network Click LAN to LAN Dialer P...

Page 112: ...AN to LAN profiles Index Click a number in the Index to open a detailed set tingspageforeachprofile Name Indicates the name of the LAN to LAN profile The symbol meanstheprofileisavailable Status Indic...

Page 113: ...VPN 14 VPN...

Page 114: ...tgoing access Dial In allowsonlyincomingaccess Idle Timeout By default set to 300 seconds If the profiles connectionisidleforoverthelimitsetbythetimer therouter willdroptheconnection Dial Out Settings...

Page 115: ...IPSecprotocolistheAuthenti cation Header protocol The data will be authentic but will not be encrypted High ESP SpecifiestheIPSecprotocolistheEncapsulating Security Payload protocol The data will be e...

Page 116: ...nticate the dial in router EnableIncomingIPaddressverification Limitsthedial in VPN router to calling from a specific IP address Peer VPN Router WAN IP If it is enabled enter the remote VPN server IP...

Page 117: ...terwill then get a WAN IP address from the remote router during the IPCP negotiation phase If the WAN IP address is fixed by remote specify the fixed IP address here Remote Gateway IP can use default...

Page 118: ...IP Version Selects the RIP protocol version Specify Ver 2 forgreatestcompatibility For NAT operation treat remote sub net as The router has two local IP networks the1st subnet and 2nd subnet Here you...

Page 119: ...VPN 20 VPN 5 VPN Connection Management You can use VPN Connection Management to make VPN connection and monitor the VPN connection status...

Page 120: ...uick Setup VPN Remote Dial In Access Setup Enable Dial In Service Ifpeersideneedsmutualauthentication specify the username password otherwise keep it blank Step 2 Advanced Setup VPN IKE IPSec Setup Se...

Page 121: ...VPN 22 VPN For Client access Step 3a Advanced Setup VPN Remote Dial In Users Setup Establish a remote dial in user account...

Page 122: ...VPN 23 VPN For LAN to LAN access Step 3b Advanced Setup VPN LAN to LAN DialerprofileSetup Establish a LAN to LAN Dialer Profiles...

Page 123: ...n Settings Specify username password Select Dial In Type TCP IP Network Settings You can leave My WAN IP Remote Gateway IP as default Set Remote Network IP Remote Network Mask Now you can accept VPN d...

Page 124: ...VPN 25 VPN Afterconnecing youcanmonitortheVPNconnectionin formate via System Management VPN connection Mangement Via Explore you can access files of remote LAN PC...

Page 125: ...Make VPN Connection Step 1 Advanced Setup VPN IKE IPSec Setup Set Pre Shared key this key is same as peer side used Step 2 Advanced Setup VPN LAN to LAN Dialer profileSetup Establish a LAN to LAN Dia...

Page 126: ...al Out Settings Specify username password and server IP address Select the protocol type PPTP IPSec or L2TP TCP IP Network Settings You can leave My WAN IP Remote Gateway IP as default Set Remote Netw...

Page 127: ...ny personal firewall on PC for example ZoneAlarm youneedtodisableitwhile usingVPN Afterconnecing youcanmonitortheVPNconnectionin formate via System Management VPN connection Mangement Via Explore you...

Search results

Summary of Contents for Vigor2200 Series

Reviews:

Related manuals for Vigor2200 Series

Brands by name

Popular brands

Draytek Vigor2200 Series, User Manual

Search results

Summary of Contents for Vigor2200 Series

Reviews:

Related manuals for Vigor2200 Series

Brands by name

Popular brands