Draytek Vigor3900 Series Скачать руководство пользователя страница 315 | Manualshive

Страница: 315 / 516

background image

Vigor3900 Series User’s Guide

307

Item Description

Check DNS Reply
Strictly

In default, Vigor router does not check that unsigned DNS
replies are legal or not: they are assumed to be valid and
passed on. This does not protect against an attacker forging
unsigned replies for signed DNS zones, but it is fast. If this
option is enabled, Vigor router will check the zones of
unsigned replies to ensure that unsigned replies are allowed
in those zones. The cost of this is more upstream queries and
slower performance.

Enable

– It will check if the unsigned DNS replies are

unsigned or not.

Disable

– The unsigned DNS replies will be regarded as

“legal”. It is default setting.

DNS Server check for
DNS Security

Vigor router will check and display if the DNS servers listed
in WAN profiles supporting DNS security or not.

Apply

Click it to save the configuration.

Cancel

Click it to discard the settings configured in this page.

VoIPon www.voipon.co.uk [email protected] Tel: (0)330 088 0195 Fax: +44 (0)1245 808299

«
...
313
314
315
316
317
...
»

Содержание Vigor3900 Series

Страница 1: ...VoIPon www voipon co uk sales voipon co uk Tel 0 330 088 0195 Fax 44 0 1245 808299...

Страница 2: ...igor3900 Multi WAN Security Appliance User s Guide Version 2 5 Firmware Version V1 3 0 For future update please visit DrayTek website Date May 23 2017 VoIPon www voipon co uk sales voipon co uk Tel 0...

Страница 3: ...rant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep your...

Страница 4: ...ular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correc...

Страница 5: ...to LAN IPSec Tunnel between Vigor3900 and Other Router Main Mode 36 3 7 How to run RDP service in the browser via logging in 3900 s HTTPS Server 39 3 8 How to Configure VPN Load Balance between Vigor...

Страница 6: ...ct 229 4 6 5 Country Object 231 4 6 6 Service Type Object 233 4 6 7 Service Type Group 235 4 6 8 Keyword DNS Object 237 4 6 9 File Extension Object 241 4 6 10 APP Object 243 4 6 11 Web Category Object...

Страница 7: ...th Limit 399 4 13 USB Application 403 4 13 1 Disk Status 403 4 13 2 FTP Server 404 4 13 3 SAMBA Server 405 4 13 4 Printer 408 4 13 5 Temperature Sensor 409 4 13 6 Modem Support List 411 4 14 System Ma...

Страница 8: ...13 Function Support List 487 4 18 Central Management Switch 488 4 18 1 Status 488 4 18 2 Profile 491 4 18 3 Group 495 4 18 4 Maintenance 496 4 18 5 Support List 497 4 19 External Devices 498 4 20 Pro...

Страница 9: ...i integrated solutions to SME markets A Virtual Private Network VPN is an extension of a private network that encompasses links across shared or public networks like an Intranet A VPN enables you to s...

Страница 10: ...lled and ready USB 1 2 Off No USB device is installed On The Ethernet link is established on corresponding port Blinking The data transmission is done through the corresponding port LNK Off No Etherne...

Страница 11: ...iber cable Console Provided for technician use USB1 USB2 Connecter for the USB device Factory Reset Used to restore the default settings Press it and keep for more than 5 seconds When you see the ACT...

Страница 12: ...twork The LAN LED for that port on the front panel will light up 3 Connect a server modem router depends on your requirement to any WAN port of Vigor3900 with Ethernet cable RJ 45 The WAN1 to WAN4 LED...

Страница 13: ...aches the other side of the chassis After the bracket installation the Vigor3900 Series chassis can be installed in a rack by using four screws for each side of the rack D De es sk kt to op p T Ty yp...

Страница 14: ...Vigor3900 Series User s Guide 6 This page is left blank VoIPon www voipon co uk sales voipon co uk Tel 0 330 088 0195 Fax 44 0 1245 808299...

Страница 15: ...nto the web browse with default password first 1 Make sure your computer connects to the router correctly Notice You may either simply set up your computer to get IP dynamically from the router or set...

Страница 16: ...admin on the field of Original Password Type a new one in the field of New Password and retype it on the field of Confirm Password Then click Apply to continue 6 Now the password has been changed Next...

Страница 17: ...om the home page Quick Start Wizard will guide the user to establish LAN interface profile WAN interface profile and select proper protocol for connection The following will explain in more detail for...

Страница 18: ...d by your ISP on the web page PPPoE PPPoE stands for Point to Point Protocol over Ethernet It relies on two widely accepted standards PPP and Ethernet It connects users through an Ethernet to the Inte...

Страница 19: ...n will appear You can manually assign a static IP address to the WAN interface and complete the configuration by applying the settings Available parameters are listed as follows Item Description IP Ad...

Страница 20: ...address configuration click Save to save the setting onto the router Click the icon to remove the selected entry Previous Click it to return to previous setting page Finish Click it to finish the conf...

Страница 21: ...ase click Finish I If f P PP PP Po oE E i is s s se el le ec ct te ed d PPPoE stands for Point to Point Protocol over Ethernet It relies on two widely accepted standards PPP and Ethernet It connects u...

Страница 22: ...word Type in the password provided by ISP in this field Previous Click it to return to previous setting page Finish Click it to finish the configuration Cancel Click it to discard the settings configu...

Страница 23: ...lease select PPTP for this router Next enter the settings provided by your ISP on the web page Available parameters are listed as follows Item Description PPTP Over Usually ISP dynamically assigns IP...

Страница 24: ...k it to remove the IP address if you are not satisfied with it DNS Server IP Address To add a new IP address simply place the mouse cursor on this filed The following dialog will appear Add Click this...

Страница 25: ...ove settings please click Finish Later you can surf the Internet at any time When the following screen appears it means you have finished the Quick Start Wizard configuration VoIPon www voipon co uk s...

Страница 26: ...User Interface of Vigor3900 and click Product Registration 2 A Login page will be shown on the screen Please type the account and password that you created previously And click Login Note If you haven...

Страница 27: ...registered to MyVigor website will be displayed in sequence 4 When the following page appears please type in Nick Name for the router and choose the right registration date from the popup calendar it...

Страница 28: ...ded to the database Click OK to leave this web page and return to My Information web page 6 Take a look at the page of My Information the new added Vigor3900 is listed under Your Device List VoIPon ww...

Страница 29: ...e amount of data that a LAN client can transfer over a period of time This will prevent the router s resources from being taken up by only a few LAN clients We can also create customized Bandwidth Lim...

Страница 30: ...Bandwidth Limit for each LAN Client Shared Bandwidth Limit for a group of LAN Clients Go to source target and click icon to set the rule for particular IP address Click Apply to save 3 Bandwidth Limi...

Страница 31: ...her unspecified LAN clients 5 We can also enable Smart Bandwidth Limit to restrict the bandwidth of unspecified LAN clients only when their session number is over the threshold 6 Data Flow Monitor can...

Страница 32: ...r example P2P applications We can also create customized Session Limit rule for each LAN client This note demonstrates how to set up Session Limit with Vigor3900 1 Go to Bandwidth Management Session L...

Страница 33: ...ime Click Apply to save 4 Furthermore you may enable Default Session Limit to apply session limit to all other unspecified LAN clients Enable Default Session Limit Customize your Default Max Sessions...

Страница 34: ...will use Vigor3900 as Default Gateway for accessing the Internet However in some cases network administrator would like Vigor3900 to be the DHCP server but use another LAN router as Internet Gateway...

Страница 35: ...PC to be able to access the remote VPN network connected through Vigor3900 It requires to specify Vigor3900 s IP as the gateway to remote VPN Network there are two ways to do this a Add Static Route o...

Страница 36: ...ogy in Vigor3900 1 Go to NAT Port Redirection click Add to create a profile 2 Edit the profile Give profile name and enable it Select One to One as Port Redirection Mode Select Protocol Enter Public P...

Страница 37: ...0 Series User s Guide 29 3 Now we can access the server behind NAT Vigor3900 from Vigor3900 s WAN IP with the specified port VoIPon www voipon co uk sales voipon co uk Tel 0 330 088 0195 Fax 44 0 1245...

Страница 38: ...networks or want to have less susceptible to bad routing information you can enable OSPF feature to fit your request Note that both routers must support OSPF function at the same time to build the OS...

Страница 39: ...to create a LAN 192 168 1 1 24 profile named lan1 with the settings shown below 2 Next continue to create a LAN 192 168 3 1 24 profile named lan2 with the settings shown below 3 Open LAN Static Route...

Страница 40: ...opology diagram C Co on nf fi ig gu ur ra at ti io on n f fo or r V Vi ig go or r3 39 90 00 0 B B 1 Open LAN General Setup to create a LAN 192 168 2 1 24 profile named lan1 with the settings shown bel...

Страница 41: ...Add to make the LAN Profiles lan2 area setting as 11 and lan1 area as 11 As shown in the topology diagram C Co on nf fi ig gu ur ra at ti io on n f fo or r V Vi ig go or r2 29 96 60 0 1 Open LAN Gene...

Страница 42: ...3 Open LAN Static Route and click the Inter LAN Route tab to enable this profile 4 Open LAN OSPF Configuration to enable this profile Click Add to make the LAN Profiles lan2 area setting as 11 and lan...

Страница 43: ...in nf fo or rm ma at ti io on n f fo or r V Vi ig go or r3 39 90 00 0 A A R Ro ou ut ti in ng g i in nf fo or rm ma at ti io on n f fo or r V Vi ig go or r3 39 90 00 0 B B R Ro ou ut ti in ng g i in n...

Страница 44: ...Vigor2710 C Co on nf fi ig gu ur ri in ng g V Vi ig go or r3 39 90 00 0 1 Access into the Web User Interface of Vigor3900 and open VPN and Remote Access LAN to LAN Profiles to add a new VPN configura...

Страница 45: ...AN First please type the name of such VPN connection in the field of Profile Name e g 3900 Check the box of Enable this profile Choose Dial Out as Call Direction and check the box of Always on 2 For D...

Страница 46: ...to complete configuration 4 Please check if the VPN connection is built successfully in both devices respectively For Vigor3900 open VPN and Remote Access IPSec Status for viewing the result As to Vig...

Страница 47: ...a protocol designed for secure communications in networks using Microsoft Terminal Services An easy way is provided to establish connection between the router and the RDP Server via any browser 1 Open...

Страница 48: ...number and Screen Size as you want then click Apply to save the settings 4 Open User Management User Profile to create a new profile named 7788 Set the Password as 7788 and choose the profile of Win7...

Страница 49: ...r both Username and Password 7 A screen like the following figure will appear Simply click the SSL Application link 8 In the following screen click Connect for connecting to Win7 the RDP server VoIPon...

Страница 50: ...uide 42 9 After that you can access into Windows 7 via a browser Note the message below the window In which TLS means Transport Layer Security VoIPon www voipon co uk sales voipon co uk Tel 0 330 088...

Страница 51: ...Runtime Environment edition 6 but still cannot establish the connection please make sure you have disabled Use TLS 1 0 in the Java Control Panel as figure shown below Then try to connect again VoIPon...

Страница 52: ...ing figure Vigor3900 allows users to build VPN load balance connection between Vigor3900 and other router Take Vigor2950 for an example There are two WANs on Vigor2950 and two WANs on Vigor3900 We wil...

Страница 53: ...Vigor3900 Series User s Guide 45 2 Create a profile for WAN 1 named 2950WAN1 Type the settings as shown below VoIPon www voipon co uk sales voipon co uk Tel 0 330 088 0195 Fax 44 0 1245 808299...

Страница 54: ...00 Series User s Guide 46 3 Click Apply to save the settings and exit the dialog 4 Create a profile for WAN 2 named 2950WAN2 VoIPon www voipon co uk sales voipon co uk Tel 0 330 088 0195 Fax 44 0 1245...

Страница 55: ...t and click the Load Balance Pool tab Click Add to add a Load Balance Pool profile 7 The following window will pop up Give a name for the profile 8 Click the Load Balance tab Select the IPSec GRE prof...

Страница 56: ...wing settings then click Apply Type the local network IP address and Mask of Vigor3900 as Source IP Address and Source Mask type the network IP and Mask of Vigor2950 as Destination IP Address Destinat...

Страница 57: ...g to specify which WAN interface will be used for building VPN connection Choose Dial Out as Call Direction and check the box of Always on For Dial Out Settings please choose IPSec Tunnel and type WAN...

Страница 58: ...used by WAN1 of Vigor2950 The second VPN tunnel will be configured for the WAN2 of Vigor2950 Therefore please choose WAN2 Only for VPN Dial Out Through Choose IPSec Tunnel and type the Server IP and P...

Страница 59: ...e Load Balance group 4 Type the name e g 3900 of the Load Balance in the field of Profile Name Specify the VPN profiles in Member 1 and Member 2 respectively Then choose Load Balance as the Active Mod...

Страница 60: ...3900 Series User s Guide 52 As to Vigor2950 please open VPN and Remote Access Connection Management to confirm the result VoIPon www voipon co uk sales voipon co uk Tel 0 330 088 0195 Fax 44 0 1245 80...

Страница 61: ...LAN Tagging technology Below will show how to achieve 50 WANs setup by one Vigor3900 and two VigorSwitch2260s Refer to the following application illustration C Co on nf fi ig gu ur ri in ng g 5 50 0 W...

Страница 62: ...igor3900 will ask you to re login 3 Delete default wan profiles for wan3 wan4 and wan5 by selecting the wan profile then click Delete 4 Click Add to add new WANs VoIPon www voipon co uk sales voipon c...

Страница 63: ...n1_24 referring to the settings on the left side of the application illustration and wan2_1 wan2_24 referring to the settings on the right side of the application illustration and set them with VLAN I...

Страница 64: ...packets while sending it to Port 1 Because general PC or normal network devices do not accept VLAN packets therefore in this example Vigor3900 WAN1 must be connected to VigorSwitch Port 26 for receiv...

Страница 65: ...port VLAN Tag While the switch receives packets from Port 1 it will add VLAN Tag 111 to the packets Then Vigor3900 wan1_1 will receive the packets 6 After finishing the configuration for one VigorSwit...

Страница 66: ...e upgrade for the CPE can be done through Vigor2830 series 3 3 1 10 0 1 1 C Co on nf fi ig gu ur re e S Se et tt ti in ng gs s o on n V Vi ig go or r3 39 90 00 0 1 Access into the web user interface o...

Страница 67: ...cess into the web user interface of the CPE 2 Open a web browser for example IE Mozilla Firefox or Netscape on your computer and type http 192 168 1 1 3 Please type username and password on the window...

Страница 68: ...an na ag ge em me en nt t f fo or r C CP PE E 1 Login the web user interface of the CPE 2 Open System Maintenance Management Setup 3 Check Allow management from the Internet to set management access...

Страница 69: ...WAN1 to select MPoA RFC1483 2684 Then click Details Page 3 Click Specify an IP address Type correct WAN IP address subnet mask and gateway IP address for your CPE Then click OK Note Reboot the CPE dev...

Страница 70: ...en na an nc ce e P Pa ag ge e 1 Return to the web user interface of Vigor3900 2 Open Central VPN Management CPE Management 3 Now there is one CPE managed Vigor2830 by Vigor3900 on the page of CPE Main...

Страница 71: ...emote device is managed by Vigor3900 series it is easy to build VPN between these two devices 1 Access into the web user interface of Vigor3900 series 2 Open Central VPN Management CPE Management The...

Страница 72: ...CPE you want Click Connect after finished the settings 4 A confirmation dialog will appear Click OK and wait for a moment 5 If VPN is built successfully related information will be displayed on Conne...

Страница 73: ...an access into VPN and Remote Access LAN to LAN of the remote device for viewing the detailed information Note The profile name is created automatically by the system Do not modify any value in such p...

Страница 74: ...t to o V Vi ig go or r3 39 90 00 0 1 Suppose the newest firmware file is located on your PC You can upload it from your PC to Vigor3900 2 Log into the web user interface of Vigor3900 3 Open System Ma...

Страница 75: ...alog click Upload 6 In the Upload dialog click the Browse button to find out the firmware e g 2830_0508 in this case you want to upload from PC to Vigor3900 Then click Upload VoIPon www voipon co uk s...

Страница 76: ...900 Series User s Guide 68 7 When the file is uploaded successfully later you will find the one in the File Explorer dialog VoIPon www voipon co uk sales voipon co uk Tel 0 330 088 0195 Fax 44 0 1245...

Страница 77: ...pen Central VPN Management CPE Management Click CPE Maintenance In the Maintenance area click Add 2 In the following dialog type the name for the new profile specify the vigor router the file will be...

Страница 78: ...nance area 4 Now the new firmware will be loaded into the CPE immediately based on the schedule setting now Note that a red icon will appear during the period of firmware upgrading And in the web user...

Страница 79: ...ade of specified CPE has completed 3 3 1 12 2 3 3 C Ch he ec ck k t th he e D De ev vi ic ce e I In nf fo or rm ma at ti io on n 1 Open Central VPN Management CPE Management In the Managed Devices Sta...

Страница 80: ...r Vigor3900 s as the backup device s to deliver full routing services during the shutdown of the main Vigor3900 The network administrator can use a Virtual IP e g 192 168 1 100 for both master device...

Страница 81: ...bility Global Setup choose Hot Standby as Redundant Method choose Primary as Config Synchronization Rule type draytek as Authentication Key choose Automatic as Advance Preemption Mode Click Apply to s...

Страница 82: ...High Availability 3 In the tab of High Availability Global Setup choose Hot Standby as Redundant Method choose Secondary as Config Synchronization Rule type the lan1 IP address configured in router A...

Страница 83: ...the HA for router A Primary before router B Secondary Simply open Applications High Availability and click the High Availability Global Setup Locate Enable High Availability Check the box and click Ap...

Страница 84: ...2 2 2 Inbound Load Balance allows Vigor3900 acting as a DNS Server to separate the traffic for each WAN interface according to the DNS query time Follow the steps listed below to Configure DNS Inboun...

Страница 85: ...NS query time will be three one will pass through WAN1 two will pass through WAN2 4 Click the Detail tab and locate Additional A Record Type www as the name of the Host and type 192 168 1 10 as the IP...

Страница 86: ...ourdomain com Address 1 1 1 1 Second DNS query www yourdomain com Server google public dns a google com Address 8 8 8 8 Name www yourdomain com Address 2 2 2 2 Third DNS query www yourdomain com Serve...

Страница 87: ...to 10 255 255 255 From 172 16 0 0 to 172 31 255 255 From 192 168 0 0 to 192 168 255 255 W Wh ha at t a ar re e P Pu ub bl li ic c I IP P A Ad dd dr re es ss s a an nd d P Pr ri iv va at te e I IP P A...

Страница 88: ...telecommunication service such as DSL Cable modem etc If any connection problem occurred on one of the ISP connections all the traffic will be guided and switched to the normal communication port for...

Страница 89: ...existing WAN profile Profile Number Limit Display the total number 50 of the profiles to be created Profile max length 7 Display the profile name Enable Display the status of the profile False means d...

Страница 90: ...r Advance mode go to Step 4 directly 2 A confirmation dialog will appear Click OK to apply the related settings for Advance mode 3 Re login the system 4 Open WAN General Setup Click the Add button to...

Страница 91: ...MAC Address Specify the MAC address for such profile In default the system will determine it automatically IPv4 Protocol There are several connection modes for you to specify for IPv4 protocol type E...

Страница 92: ...rity 802 1p Type the packet priority number for such VLAN The range is from 0 to 7 Apply Click it to save the configuration and exit the dialog Cancel Click it to exit the dialog without saving the co...

Страница 93: ...sor on this filed The following dialog will appear Add click this button to have a field for adding a new IP address Save click this button to save the setting click the icon to remove the selected en...

Страница 94: ...ending reply to the router or not If not the connection of WAN interface will be regarded as breaking down This function is available when Connection Detection Mode is set with PING or HTTP Save click...

Страница 95: ...e and choose it in later web page settings e g NAT Port Redirection DMZ Host Add To add a new IP address click Add Type the IP address and use the drop down list to specify the subnet mask Next click...

Страница 96: ...d by the router the connection of WAN interface will be regarded as breaking down Vendor Class ID option 60 It is used to identify the vendor type and the configuration of a DHCP client DHCP Client ID...

Страница 97: ...ation and ask you to type the same data on this field Debug Click Enable to display the PPPoE debug message in Syslog The default setting is Disable Always On Enable Click it to enable the function of...

Страница 98: ...al period of time for each detecting Connection Detection Retry Assign detecting times to ensure the connection of the WAN interface After passing the times you set in this field and no reply received...

Страница 99: ...t to save the configuration and exit the dialog Cancel Click it to exit the dialog without saving the configuration If you choose PPTP as IPv4 protocol type click the PPTP Tab to open the following pa...

Страница 100: ...Connection Detection Mode you have to specify the detection host address in this field Use the default setting Add Click this button to have a field for adding a new IP address Assign an IP address or...

Страница 101: ...the section of If you choose PPPoE as IPv4 protocol type click the PPPoE Tab to open the following page for detailed information If you choose Static as IPv6 protocol type click the StaticV6 tab to o...

Страница 102: ...e the setting click the icon to remove the selected entry Apply Click it to save the configuration and exit the dialog Cancel Click it to exit the dialog without saving the configuration VoIPon www vo...

Страница 103: ...this button to have a field for adding a new IP address Save click this button to save the setting click the icon to remove the selected entry Apply Click it to save the configuration and exit the di...

Страница 104: ...the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Refresh Renew current web page Profile Display the profile name Enable Display the statu...

Страница 105: ...on Profile Display the name of the USB WAN profile Enable Check it to enable the USB WAN profile Description Give the brief description for such profile Port Display the physical WAN interface for suc...

Страница 106: ...Interval Assign an interval period of time for each detecting Connection Detection Retry Assign detecting times to ensure the connection of the WAN interface After passing the times you set in this fi...

Страница 107: ...APN means Access Point Name which is provided and required by some ISPs Type the name Modem Dial String Such value is used to dial through USB mode Please use the default value If you have any questi...

Страница 108: ...fault Click it to restore the default settings Apply Click it to save and exit the dialog Cancel Click it to exit the dialog without saving anything 4 Enter all the settings and click Apply The modifi...

Страница 109: ...mply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected WAN profile S...

Страница 110: ...AN interface LAN VLAN Member Choose a VLAN profile from the drop down list You have to open LAN Switch page and click 802 1Q VLAN for creating VLAN ID number bound with LAN port 802 1Q VLAN profile fi...

Страница 111: ...und Load Balance Each item will be explained as follows Item Description Enable Check the box the enable inbound load balance function Add Add a new WAN profile for inbound load balance Edit Modify th...

Страница 112: ...s that WAN interface s used Alias Interface Display the WAN interfaces used by the IP alias IP Display the alias IP settings used by the profile Alias Weight Display the weight that the above IP addr...

Страница 113: ...N interface profile which will be used by the domain Weight Use the drop down list to choose the one you want Alias Setting The purpose of such setting is to specify a WAN IP address from the WAN inte...

Страница 114: ...e Cache TTL Set the negative caching time name error Email Type the e mail address of the administrator NS Record This page is used to specify name server which will be used as DNS server Add Click it...

Страница 115: ...t a domain name IPv6 Address Type the IPv6 address of the host Any query concerning of Host will be forwarded to the server selected in Reference for advanced process CNAME Record It is used to record...

Страница 116: ...3 3 1 1 8 80 02 2 1 1Q Q V VL LA AN N Packets passing through the WAN interface might be tagged or untagged with VLAN ID number It depends on the setting configured in this page for VLAN ID configured...

Страница 117: ...rface selected 4 4 1 1 3 3 2 2 M Mi ir rr ro or r C Co on nf fi ig gu ur ra at ti io on n The administrator can monitor all the packets passing through mirrored port with the mirroring port It is usef...

Страница 118: ...t to make the packets passing through it monitored by the administrator Apply Click it to save the configuration Cancel Click it to discard the settings configured in this page VoIPon www voipon co uk...

Страница 119: ...click the Edit button to modify the settings A pop up window will appear for you to change the settings Interface Display the name of WAN interface Enable Check it to enable such interface Speed Use...

Страница 120: ...saving anything Refresh Renew current web page Interface Display the name of the WAN port on the router Enable Display the status of the profile False means disabled True means enabled Duplex Display...

Страница 121: ...uter has a built in DHCP server that assigns private IP address to each local host 4 4 2 2 1 1 G Ge en ne er ra al l S Se et tu up p This page allows you to configure general settings for PCs in LAN N...

Страница 122: ...the profile False means disabled True means enabled Description Display the brief explanation for the LAN profile VLAN ID Display the VLAN ID configured for the LAN profile IPv4 Protocol Display the I...

Страница 123: ...e the description for the new LAN profile VLAN ID Type a number as the VLAN ID to make the data be identified while performing data transmission Priority 802 1q Type the packet priority number for suc...

Страница 124: ...s down Connection Detection Interval It is available when ARP is selected as Connection Detection Mode Assign an interval period of time for each detecting Connection Detection Retry It is available w...

Страница 125: ...ption will be seen in DHCP reply packets Add Click it to add a new DHCP option profile Save Click it to save the setting DHCP Option Use the drop down list to choose the one you want Value Type the co...

Страница 126: ...s defined by the address prefix fe80 10 You don t need to setup Link Local address manually for it is generated automatically according to your MAC Address Static This type allows you to setup static...

Страница 127: ...ed as follows Item Description Edit Modify the selected LAN profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify t...

Страница 128: ...server DHCP Server IP Type the IP address of DHCP Server DHCP Relay Agent IP Type the IP address of DHCP Relay Agent Apply Click it to save and exit the dialog Cancel Click it to exit the dialog witho...

Страница 129: ...3 I In nt te er r L LA AN N R Ro ou ut te e To make the users in different LAN communicating with each other please check the box to enable Inter LAN route function VoIPon www voipon co uk sales voipo...

Страница 130: ...to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Refresh Renew current web page Profile Display the name of the LAN p...

Страница 131: ...ertisement Lifetime Type a value for advertisement lifetime The lifetime associated with the default router in units of minutes ranging from 10 150 It is used to control the lifetime of the prefix A l...

Страница 132: ...dify the corresponding settings for the selected rule Refresh Renew current web page Profile Display the name of the LAN profile Enable Display the status of the profile False means disabled True mean...

Страница 133: ...e Enable Check this box to enable this profile Mode Choose Automatic Setting or Manual Setting Automatic Setting It is not necessary to configure Start IP End IP and DNS setting The system will assign...

Страница 134: ...If this field is blank users on LAN will treat Vigor3900 as the DNS server Add Click it to add a new IP address for DNS server Save Click it to save the setting click the icon to remove the selected e...

Страница 135: ...t need an ADSL modem There are several advantages of using PPPoE connections on the LAN Firstly the PPPoE server can secure the LAN PC connections with username password authentication Secondly it ca...

Страница 136: ...fresh Specify the interval of refresh time to obtain the latest status The information will update immediately when the Refresh button is clicked MAC Address Display the MAC address of the client s ho...

Страница 137: ...ternet Access Concentrator AC Name Type the name which will be reported as the access concentrator name Service Name Type a specific string for authentication It causes the named service to be adverti...

Страница 138: ...nterfaces for DHCP server DHCP Server IP Address Set the IP address of the DHCP server you are going to use so DHCP Relay can help to forward the DHCP request to the DHCP server Apply Click it to save...

Страница 139: ...twork by application or department For instance in the enterprise a company might create one VLAN for multimedia users and another for e mail users or a company might have one VLAN for its Engineering...

Страница 140: ...ofile with the VLAN ID number is tagged or untagged H Ho ow w t to o a ad dd d a a n ne ew w 8 80 02 2 1 1Q Q V VL LA AN N p pr ro of fi il le e 1 Open LAN Switch and click the 802 1Q VLAN tab 2 Click...

Страница 141: ...he settings and click Apply The new profile will be added on the screen 4 4 2 2 3 3 2 2 M Mi ir rr ro or r Vigor3900 supports port mirroring function in LAN interfaces This mechanism helps manager tra...

Страница 142: ...x to enable the Mirror function for the switch Mirroring Port Select a port to view traffic sent from mirrored ports Mirrored Port Select which port is necessary to be mirrored Refresh Renew current w...

Страница 143: ...window will appear for you to change the settings Refresh Renew current web page Interface Display the profile name of the interface Enable Display the status of the profile False means disabled True...

Страница 144: ...ch profile Flow Control Click Enable to enable such function When the data cache is approaching to full load Vigor router will pause transmitting the packets till the system is able to accept new data...

Страница 145: ...ve on IP Bind List Select All Allow you to choose all the items listed in ARP Table Move Move the selected item to IP Bind List Refresh It is used to refresh the ARP table When there is one new PC add...

Страница 146: ...one Import Click it to import an IP bind to MAC information e g 123 txt obtained from other Vigor router and to be applied by Vigor3900 Profile Display the name of the profile IP Address Display the I...

Страница 147: ...r the specified MAC address MAC Type the MAC address that is used to bind with the assigned IP address Comment Type a brief description for such profile Apply Click it to save and exit the dialog Canc...

Страница 148: ...database with domain name which is easy to be accessed Each item will be explained as follows Item Description Add Add a new VLAN ID setting Edit Modify the selected VLAN ID setting To edit VALN ID se...

Страница 149: ...ured for such profile Alias Domain Name Display the alias domain name for such profile Mapping Display the IP address that domain name and domain name alias will be mapped to Applied to Display which...

Страница 150: ...in name alias domain name When you choose FORWARD you need to type the IP address of DNS server as the mapping target IP Address Type the IP address in this field Then the above domain and or alias do...

Страница 151: ...te network interface based on the following web page setup In the Routing group click the Load Balance Pool option This page allows the user to integrate several WAN profiles as a pool profile specifi...

Страница 152: ...Balance rule Primary Profile Display the primary profile configured in Failover page for such profile Backup Profile Display the backup profile configured in Failover page for such profile There are t...

Страница 153: ...e Available parameters are listed as follows Item Description Profile Type the name of the profile Mode Choose Load Balance as the Mode selection Interface Click Add A new line for adding new entry wi...

Страница 154: ...e Choose Backup as the Mode selection Available parameters are listed as follows Item Description Profile Type the name of the profile Mode Choose Backup as the Mode selection Primary Profile In defau...

Страница 155: ...to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected static route setting To delete a static ro...

Страница 156: ...this box to enable such profile Destination IP Address Type the IP address for such static route profile Subnet Mask Use the drop down list to choose the subnet mask for such static route profile Gat...

Страница 157: ...ete Remove the selected static route setting To delete a static route setting simply select the one you want to delete and click the Delete button Refresh Renew current web page Rename Allow to modify...

Страница 158: ...ic route profile Enable Check this box to enable such profile Destination IP Address Type the IP address for such static route profile Prefix Length Type the prefix length for such profile Nexthop Typ...

Страница 159: ...new static route setting Edit Modify the selected static route setting To edit static route setting simply select the one you want to modify and click the Edit button The edit window will appear for y...

Страница 160: ...me of the static route profile Enable Check this box to enable such profile WAN Profile Choose one of the WAN USB profiles of the gateway for such profile LAN Profile Choose one of the LAN profiles fo...

Страница 161: ...in order to force the traffic going to dedicate network interface Strict Bind Through dedicated interface WAN LAN the data can be sent from the source IP to the destination IP Address Mapping Allows...

Страница 162: ...e priority of such rule Protocol Display the protocol of such rule Time Objects Display the name of time object Service Type Objects Display the name of service type Source Display the name of the sou...

Страница 163: ...ble such profile Priority Choose the priority for such profile top high and normal Protocol Choose a protocol ALL TCP UDP TCP UDP and ICMP for such rule applied to load balance All is the default sett...

Страница 164: ...Subnet is selected as Destination Type IP Address Type an IP address here as the destination IP address for such rule Subnet Mask Use the drop down list on the right to choose a suitable mask for the...

Страница 165: ...ng will be used for such route rule Use IP Alias Click Enable to enable such function Or click Disable to disable such function When Enable is chosen choose an alias WAN IP address to replace the defa...

Страница 166: ...you choose LAN as out going interface Mode Specify which mode NAT or Routing will be used for such route rule Use IP Alias Click Enable to enable such function Or click Disable to disable such functi...

Страница 167: ...r such route rule Failover to the Next Rule When the specified interface disconnects due to some reason the router can use next route rule to perform data transmission automatically Click Enable to en...

Страница 168: ...h policy route to perform data transmission When target When certain IP or domain connects successfully or fails to connect for several seconds Vigor router will treat the selected interface as discon...

Страница 169: ...mple you might configure settings as Out going Rule User Defined Out going interface wan1 Failover Enable when target 8 8 8 8 ping Fail for 5 seconds Then it means even if wan1 connects to network alw...

Страница 170: ...dress of the NAT host will be mapped into either 202 211 100 10 or 203 98 200 10 which IP or mapping is decided by the internal load balancing algorithm With address mapping feature you can manually c...

Страница 171: ...following page set main WAN IP address as 202 211 100 10 Click Add on IP Alias to configure the other IP address which is 202 211 100 11 4 After finished configuration for WAN1 continue to configure...

Страница 172: ...Apply to save the settings 6 Open Routing Policy Route and click Add to create a new profile 7 In the following page check the box of Enable Choose Object as the Source Type and choose IP range object...

Страница 173: ...above configuration you have specified the outgoing IP address es for some specific computers Now you bind some specific computers to some WAN IP alias for outgoing traffic VoIPon www voipon co uk sal...

Страница 174: ...The following figure shows a simple application of load balance WAN1 and WAN2 can be used to access into Internet The PC in LAN1 can send the data to the remote PC through the specified WAN1 1 Access...

Страница 175: ...Balance Pool as Out going Rule choose WAN1 as the Load Balance Rule click Disable for Failover to Next Rule 4 After finished the above settings click Apply to save the configuration Now any packets f...

Страница 176: ...ic cy y R Ro ou ut te e A LAN to LAN VPN tunnel is built between DrayTek VPN router e g Vigor3900 and the remote router Enterprise firewall router in Headquarter can control the all of the traffic com...

Страница 177: ...ce IP address with 172 16 3 25 choose User Defined as Out going Rule choose lan1 as the Out going Interface type 192 168 1 2 as the Out going Gateway and click Disable for Failover to Next Rule 4 Afte...

Страница 178: ...ce Pool Name Display the WAN profiles for user to choose as a default route In which wan1 to wan5 are factory default settings Auto Failover to Active WANs Enable Check it to let the network connectio...

Страница 179: ...it will choose a correct route based on the method of Distance Vector Routing and use the Bellman Ford algorithm to calculate the routing table RIP can update the routing table automatically and find...

Страница 180: ...metric It is suitable for large network and complicated data exchange Vigor 3900 supports up to OSPF version 2 only for IPv4 The Autonomous System AS used in OSPF indicates the largest entity and can...

Страница 181: ...several areas Each area must be assigned with a dedicated number Note For the detailed information of OSPF application refer to section 3 2 How to Configure OSPF Apply Click it to save the settings C...

Страница 182: ...0 255 255 255 255 or 0 4294967295 for that profile If you are not satisfied the settings simply click to remove the entry and then re type the settings 5 Click Apply to save the settings and exit the...

Страница 183: ...her BGP routers Define the IP address AS number for the router is essential for TCP connection of BGP routing information exchange AS the abbreviation of Autonomous System is a group interconnected wi...

Страница 184: ...the Neighbor tab in Routing BGP configuration Neighbor IP Display the neighbor IP address configured successfully in the Neighbor tab in Routing BGP configuration Neighbor AS Display the autonomous s...

Страница 185: ...r a router in an autonomous system In an OSPF autonomous system routers on both ends cannot be set with same router IDs Static Networks Define the IP addresses forming network range which allow to be...

Страница 186: ...modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a profile simply select the...

Страница 187: ...follows Item Description Profile Type the name of the profile Enable Check the box to enable this profile Neighbor IP Address Type the private IP used for this profile Autonomous System number Type t...

Страница 188: ...esses to a globally routable IP address so that local hosts can communicate with the router and access the Internet 4 4 4 4 1 1 P Po or rt t R Re ed di ir re ec ct ti io on n Port Redirection means po...

Страница 189: ...u want to delete and click the Delete button Move Up Change the order of selected profile by moving it up Move Down Change the order of selected profile by moving it down Rename Allow to modify the se...

Страница 190: ...the private port H Ho ow w t to o a ad dd d a a n ne ew w P Po or rt t R Re ed di ir re ec ct ti io on n p pr ro of fi il le e 1 Open NAT Port Redirection 2 Simply click the Add button 3 The followin...

Страница 191: ...ublic Port End It is available when Range to One or Range to Range port or Range to Range IP is selected as Port Redirection Mode Type the starting ending number of the public port For Range to One se...

Страница 192: ...server may keep average workload and the network will not become slowly or interrupted due to large traffic Each item will be explained as follows Item Description Add Add a new server load balance p...

Страница 193: ...isplay the WAN interface of this profile IP Alias Display the selected WAN IP address Port Display the port value used by WAN interface H Ho ow w t to o a ad dd d a a n ne ew w s se er rv ve er r l lo...

Страница 194: ...network inserted as a neutral zone between a company s private network and the outside public network It prevents outside users from getting direct access to company network A DMZ is an optional and...

Страница 195: ...you want to delete and click the Delete button Rename Allow to modify the selected profile name Refresh Renew current web page Profile Display the name of the profile Enable Display the status of the...

Страница 196: ...lias that can be selected and used for port redirection Before using it please go to WAN General Setup and enable the wan1 profile Add several IP addresses under Static mode for wan1 DMZ Host IP Type...

Страница 197: ...to such profile Apply Click it to save and exit the dialog Cancel Click it to exit the dialog without saving anything 4 Enter all the settings and click Apply 5 A new profile has been added onto DMZ H...

Страница 198: ...P message and RTP packets of voice being transmitting and receiving correctly via NAT Available parameters are listed as follows Item Description Enable SIP ALG Check the box to enable the Mirror func...

Страница 199: ...2 H H 3 32 23 3 A AL LG G The H 323 ALG allows incoming and outgoing VoIP calls passing through NAT If required check the box and click Apply to save the settings VoIPon www voipon co uk sales voipon...

Страница 200: ...as follows Item Description TCP Timeout Set a time limit for sessions established by TCP except Port 80 and Port 443 UDP Timeout Set a time limit for sessions established by UDP TCP WWW Timeout Set a...

Страница 201: ...onfigure the Firewall Users can select IP Filter DoS Defense MAC Block and Port Block options from Firewall menu The DoS Defense facility can detect and mitigate the DoS attacks 4 4 5 5 1 1 F Fi il lt...

Страница 202: ...wn Profile Number Limit Display the total number of the profiles to be created Group Display the name of the IP filter group profile Enable Display the status of the profile False means disabled True...

Страница 203: ...create filter rule by clicking on the left side of the selected IP filter group profile A setting page will appear for you to add new IP filter rule profile 7 Move your mouse to click Add 8 The follow...

Страница 204: ...not match further rules will be dropped Accept If No Further Match A packet matching the rule and that does not match further rules will be passed through Connection Limit Limiting the number of pack...

Страница 205: ...rt Syslog File Input Interface Choose one of the LAN or WAN profiles as data receiving interface Output Interface Choose one of the LAN or WAN profiles as data transmitting interface Time Schedule Tim...

Страница 206: ...display the profile selection box Choose one or more object profiles from the drop down list The selected profile will be treated as source target You can click to create another new object profile or...

Страница 207: ...Enter all the settings and click Apply 10 A new IP filter rule has been added under the IP Filter Group named IPF_Market in this case Note You can create multiple IP filter rules under a certain IP F...

Страница 208: ...he Delete button Refresh Renew current web page Move Up Change the order of selected profile by moving it up Move Down Change the order of selected profile by moving it down Profile Number Limit Displ...

Страница 209: ...for the profile Apply Click it to save and exit the dialog Cancel Click it to exit the dialog without saving anything 4 Enter all of the settings and click Apply 5 A new filter group has been added 6...

Страница 210: ...m Description Profile Type the name of the IP filter rule Enable Check the box to enable this profile Action The action to be taken when packets match the rule Block Packets matching the rule will be...

Страница 211: ...er new time object profile Time Group Click the triangle icon to display the profile selection box Choose a schedule group profile to be applied on such rule You can click to create another new time g...

Страница 212: ...n target You can click to create another new IP object profile Apply Click it to save and exit the dialog Cancel Click it to exit the dialog without saving anything 9 Enter all of the settings and cli...

Страница 213: ...u to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Move Up Change the...

Страница 214: ...red rectangle Available parameters are listed as follows Item Description Profile Type the name of the application filter profile Enable Check the box to enable this profile Syslog Click Enable to mak...

Страница 215: ...les from the drop down list The selected object will be filtered by the router when such application filter profile is applied You can click to create another new object profile or click the edit icon...

Страница 216: ...Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the select...

Страница 217: ...into the blocked web page Disable Type the message manually to display on the page that the user tries to access into the blocked web page Default Web Category Administration Message Such field is av...

Страница 218: ...the System Maintenance Syslog Mail Alert Syslog File Time Schedule Time Object Click the triangle icon to display the profile selection box Choose a schedule profile to be applied on such application...

Страница 219: ...play the profile selection box Choose e one or more keyword object profiles from the drop down list which will be allowed not be allowed to pass through the router You can click to create another new...

Страница 220: ...ew current web page Move Up Change the order of selected profile by moving it up Move Down Change the order of selected profile by moving it down Rename Allow to modify the selected profile name Profi...

Страница 221: ...tion Profile Type the name of the QQ filter profile Enable This Profile Check the box to enable this profile Time Profile Use the drop down list to specify a time profile for such profile You can clic...

Страница 222: ...ul lt t P Po ol li ic cy y Default policy will be applied to all of the incoming packets if IP Filter Application Filter URL Web Category Filter and QQ Filter are not suitable for the incoming packets...

Страница 223: ...on Disable No inspection will be performed Enable Packet inspection will be performed Packets Number If Packet Inspection is enabled choose a packet number for filtering Available settings are from 4...

Страница 224: ...oming from unknown unicast storm Unknown Multicast Storm Defense Click Enable to block the packets attacks coming from unknown multicast storm Storm Filtering Rate Type a number 1 4096 unit of 64Kpbs...

Страница 225: ...hin the user defined timeout period ICMP Flood Threshold The default setting for threshold is 250 packets per second ICMP Flood Timeout The default setting for timeout is 10 seconds Block UDP Flood Cl...

Страница 226: ...ny broadcast UDP packets received from the Internet are blocked Block Tear Drop Click Enable to activate the Block Tear Drop function This attack involves the perpetrator sending overlapping packets t...

Страница 227: ...ou to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Rename Allow to m...

Страница 228: ...Check the box to enable this profile MAC Address Type the MAC address which will be blocked by the system for such profile Apply Click it to save and exit the dialog Cancel Click it to exit the dialo...

Страница 229: ...ply click the tab of IP Filter IPv6 Filter Application Filter or URL Web Category Filter to get the status for each filter If there is no data counter number is 0 for certain rule displayed on such pa...

Страница 230: ...es based on IP service type keyword file extension instant message application P2P application protocol application web category QQ application time setting SMS service mail service and notification T...

Страница 231: ...profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected pro...

Страница 232: ...e address type Single Range Subnet for such profile Start IP Address Type the IP address of the starting point for such profile End IP Address Type the IP address of the ending point for such profile...

Страница 233: ...Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete...

Страница 234: ...iption Make a brief explanation for such profile if the group name is set not clearly Objects Use the drop down list to check the IP object profiles under such group All the available IP objects that...

Страница 235: ...e Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 200 of...

Страница 236: ...ffix Allow to specify suffix for IPv6 IP address Address Pool This field allows you to type IP address specify Tag number and type subnet mask based on IPv6 protocol Tag is an optional field only used...

Страница 237: ...o modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the...

Страница 238: ...en the mouse cursor is on it Choose a suitable mask selection Apply Click it to save the configuration Vendor Edit Click it to open a table of vendor list Check the one s you want The names for select...

Страница 239: ...nd click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you wa...

Страница 240: ...heck the box es for the country countries to be blocked by Firewall Apply Click it to save the configuration Cancel Click it to exit the dialog without saving anything 4 Enter all of the settings and...

Страница 241: ...file To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 96 of the object profiles to be...

Страница 242: ...lable for TCP UDP protocol It can be ignored for ICMP Type a port number 0 65535 as the ending source port Destination Port Start It is available for TCP UDP protocol It can be ignored for ICMP Type a...

Страница 243: ...mply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To de...

Страница 244: ...yped here is 10 Description Type some words to describe such group Objects Use the drop down list to check the service type object profiles under such group All the available service type objects that...

Страница 245: ...t Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the sele...

Страница 246: ...ing as Contents When you browse the webpage the page with gambling information will be watched out and be passed blocked based on the configuration on Firewall settings Add Type the word in the box of...

Страница 247: ...elete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 100...

Страница 248: ...the box of Member and click this button to add the new word as DNS object Save Click it to save the setting Click the icon to remove the selected entry Apply Click it to save the configuration Cancel...

Страница 249: ...ettings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Lim...

Страница 250: ...file extension you need Audio Several file extensions for Audio offered for you to choose Use the drop down list to check the box es to select the file extension you need Java Several file extensions...

Страница 251: ...gnature Upgrade configuration page APP Support List APP Support List will display all of the applications with versions supported by Vigor router They are separated with types of IM P2P Protocol and O...

Страница 252: ...imply click the Add button 3 The following dialog will appear Click IM to get the following page People like to use Instant Message to communication with friends on line just for fun or just because i...

Страница 253: ...lly for the ones who always upload or download improper files to Internet P2P object setting lists all of the point to point application for you to choose to block Choose the one s you want to block a...

Страница 254: ...Others to get the following page Item Description Tunneling Streamin g Remote Control Web HD Several protocols offered for you to choose Check the one s you want to add for such profile 4 Enter all o...

Страница 255: ...with your DrayTek dealer Note 1 Web Content Filter WCF is not a built in service of Vigor router but a service powered by Commtouch If you want to use such service trial or formal edition you have to...

Страница 256: ...play the items under certain category that you choose to block Chatting Display the items under certain category that you choose to block Computer Display the items under certain category that you cho...

Страница 257: ...isit Chatting Simply check the one s that you don t want the user to use for gossip with remote people Computer Simply check the one s that you don t want the user to visit Other Simply check the one...

Страница 258: ...After finishing the activation for the trial version of WCF remember to purchase Silver Card for WCF service from your DrayTek dealer or distributor VoIPon www voipon co uk sales voipon co uk Tel 0 3...

Страница 259: ...s for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Dis...

Страница 260: ...rofile Add Click this button to add a new account Save Click this button o save the new account Click this button to remove the selected account Description Type a brief explanation for the QQ object...

Страница 261: ...ected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 16 of the object profil...

Страница 262: ...e drop down list to select the object profiles under such group All the available objects that you have added on Objects Setting QQ Object will be seen here To clear the selected one click to remove c...

Страница 263: ...ected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the tota...

Страница 264: ...rofile The number of the characters allowed to be typed here is 10 Frequency Specify how often Weekdays or Once the schedule will be applied Start Date Specify the starting date of the time object pro...

Страница 265: ...it a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selecte...

Страница 266: ...o be typed here is 10 Description Make a brief explanation for such profile if the group name is set not clearly Objects Use the drop down list to check the time object profiles under such group All t...

Страница 267: ...profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 10 of the object profiles to...

Страница 268: ...vice provider which offers SMS service Username Type a user name that the sender can use to register to selected SMS provider The maximum length of the name you can set is 31 characters Password Type...

Страница 269: ...and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected profile Delete Remove the selected profile To delete a rule simply select the one yo...

Страница 270: ...Add button 3 The following dialog will appear Available parameters are listed as follows Item Description Profile Type a name for such SMS profile The maximum length of the name you can set is 20 cha...

Страница 271: ...il service object profile has been created 4 4 6 6 1 18 8 N No ot ti if fi ic ca at ti io on n O Ob bj je ec ct t This page allows you to set ten profiles which will be applied in Application SMS Mail...

Страница 272: ...splay if such function is enabled or disabled Router Reboot Display if such function is enabled or disabled Syslog Display if such function is enabled or disabled H Ho ow w t to o c cr re ea at te e a...

Страница 273: ...stem will send the alert message to the recipient CPU Usage Enable When the CPU usage reaches a certain value the router system will send the alert message to the recipient Memory Usage Enable When th...

Страница 274: ...Se et tt ti in ng g Such page is used to set the limit value for CPU Memory TX RX When CPU Memory TX RX usage reaches the threshold the router system will send the alert message to the recipient VoIP...

Страница 275: ...an na ag ge em me en nt t User Management can manage all the accounts user profiles to connect to Internet via different protocols Below shows the menu items for User Management VoIPon www voipon co u...

Страница 276: ...which only works after you choose HTTP or HTTPS as the Mode setting on General Setup page of User Management Web Portal Refer to section 4 7 1 2 General Setup to get more detailed information of setti...

Страница 277: ...gs of web portal function Available parameters will be explained as follows Item Description Web Portal Click Enable to enable such function Use LAN DNS Choose one of the LAN DNS profile Login Mode Th...

Страница 278: ...e It is available when Bulletin Board is enabled and HTTP HTTPS is selected as Login Mode It is used to determine showing bulletin in web portal login page or not Allow non HTTP traffic before Portal...

Страница 279: ...specify the service provider which offers SMS service SMS Button Name It is a button with short message which will appear to remind the user that SMS is allowed to get username and password for acces...

Страница 280: ...abled Type that time setting HH MM for the router to force online user leaving Vigor router Fully Recharge Time Quota After It is available when Daily Logout is enabled The time quota of all local use...

Страница 281: ...e when Enable is selected in Upload Bulletin Message Choose a file to upload to Vigor3900 Bulletin Message It is available when Disable is selected in Upload Bulletin Message The bulletin message is s...

Страница 282: ...4 7 7 2 2 U Us se er r P Pr ro of fi il le e This function allows to configure all accounts user profiles in Vigor3900 including PPTP L2TP SSL PPPoE System user and so on 4 4 7 7 2 2 1 1 U Us se er r...

Страница 283: ...play the status of the profile False means disabled True means enabled System User Display the status of the System User False means disabled True means enabled Allow Web Portal Login Display the stat...

Страница 284: ...ow FTP Server Login Display if FTP Server Login is activated enable or disable or not Allow SMABA Server Login Display if SMABA Server Login is activated enable or disable or not Allow Radius Server L...

Страница 285: ...erate the function of the router as the administrator of the router False Choose it to disable the function of System User Such user profile does not have the right to operate the router s function Tr...

Страница 286: ...phone e g e759bb6f0e94c7ab4fe6 SSL Proxy It is available when System User is set with false The web proxy over SSL will be applied for VPN To clear the selected one click to remove current object sel...

Страница 287: ...fic that the user used Reset Click it to reset the setting to default value 0 MAC Binding Specify a MAC address which is limited and used for such PPPoE account Enable Click it to enable the function...

Страница 288: ...ick it to enable the time quota function for all user profiles Modify Time Quota Value Check the box to configure detailed setting You have to check this box and type the time quota value in Time Quot...

Страница 289: ...ogin Status Check the box to configure detailed setting Enable Click it to enable the SAMBA server authentication function all user profiles Apply to All Apply all of the modifications to all user pro...

Страница 290: ...t Manually Auto generated with regularity Password Distinct password created by Administrator Randomly generated and the length is defined by Administrator Max Simultaneous users per account 1 255 or...

Страница 291: ...P Address Click Apply to save the settings 5 Open User Management Guest Profile and click the Mass Guest Generator tab to open the following page Type the Group Name in this case Room Guest Name Prefi...

Страница 292: ...roup to check the Mass User account Group By clicking each account e g choose 1001 and click Edit we can check the information for this account and we may also modify the account name and password man...

Страница 293: ...Administrator is able to Export the information for the whole group to a csv file which is useful to redistribute the account and password combinations to guests VoIPon www voipon co uk sales voipon c...

Страница 294: ...on Type Check IP object named of Boss to put it into the white list and this will allow this IP address to access to the Internet without authentication 8 After finishing configuration Vigor3900 will...

Страница 295: ...Vigor3900 Series User s Guide 287 For Employees to access into Internet For Room guest to access into Internet VoIPon www voipon co uk sales voipon co uk Tel 0 330 088 0195 Fax 44 0 1245 808299...

Страница 296: ...ton The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and clic...

Страница 297: ...roup Type the name of such profile Enable Check this box to enable such profile Member Use the drop down list to check the user profile s under such group To clear the selected one click to remove cur...

Страница 298: ...Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Clean Deadline Renew the usage time designated for such...

Страница 299: ...ck Enable to enable such option Usage Time min Determines the connection time allowed for accessing Internet every time The default setting is 180 minutes When the time is up the user will be forced t...

Страница 300: ...d click Apply 5 A new guest group profile has been created 6 You can create several guest names by clicking on the left side of the selected guest group profile A setting page will appear for you to a...

Страница 301: ...scription for the guest Apply to Web Portal Enable Click it to make such profile being applied to web portal Disable Click it to disable the option Clean Deadline The guest profile can be unlocked to...

Страница 302: ...ated as the starting number for generating mass guest profiles Note The range of Start index is 1 10000 Number to Generate Type the total number of guests to be generated at one time The guest name wi...

Страница 303: ...ng the time with the format of HH MM SS Max Simultaneous Login It means the maximum online number of clients logging with this profile The range is from 1 to 255 1 means no limit 0 means No access App...

Страница 304: ...authentication Available parameters are listed as follows Item Description Enable Check this box to enable such profile Use Local Radius Server Enable Choose it to use local RADIUS server for user au...

Страница 305: ...interface can be authenticated by Vigor RADIUS server Port Clients can use the specified port number to exchange RADIUS information Authentication Client Only the clients specified in this field can...

Страница 306: ...apply LDAP to search or list the directory object inquire or manage the active directory Available parameters are listed as follows Item Description Add Add a new profile Edit Modify the selected prof...

Страница 307: ...is set with Regular Mode Logout After min Display the maximum usage duration for RADIUS authentication H Ho ow w t to o c cr re ea at te e a a n ne ew w L LD DA AP P A Ac ct ti iv ve e D Di ir re ec...

Страница 308: ...common name identifier for the LDAP server The common name identifier for most LDAP server is cn Base DN It means Base Distinguished Name Type the distinguished name used to look up entries on the LD...

Страница 309: ...you will be able to use the registered domain name to access the router or internal virtual servers from the Internet It is particularly helpful if you host a web server FTP server or other server beh...

Страница 310: ...w current web page Auto Refresh Specify the interval of refresh time to obtain the latest status The information will update immediately when the Refresh button is clicked Profile Display the name of...

Страница 311: ...nt WAN profile used by such DDNS profile Routing Policy Display the routing policy used by such DDNS profile Service Provider Display the name of service provider used by such profile Service Type Dis...

Страница 312: ...profile will apply to Routing Policy Choose a routing policy applied to the DDNS profile selected wan first The DDNS profile will be applied to the traffic via WAN interface first then applied to oth...

Страница 313: ...rofile Wildcard and Backup MX The Wildcard and Backup MX features are not supported for all Dynamic DNS providers You could get more detailed information from their websites Mail Extender Type the IP...

Страница 314: ...DNS security is able to ensure that the incoming data is not falsified and the source of the data is secure and correct to prevent from DNS attack by someone Available parameters are listed as follow...

Страница 315: ...that unsigned replies are allowed in those zones The cost of this is more upstream queries and slower performance Enable It will check if the unsigned DNS replies are unsigned or not Disable The unsig...

Страница 316: ...d as follows Item Description Enable Check this box to enable GVRP function Interface Choose LAN and or WAN profiles To clear the selected one click to remove current object selections Join Time Defin...

Страница 317: ...le in NAT mode Downstream Use the drop down list to specify the LAN profile as the destination of data coming from WAN interface defined in IGMP Proxy Channel IGMP via PPPoE Enable In LAN the PC which...

Страница 318: ...ide the associated support for MSN Messenger to allow full use of the voice video and messaging features Available parameters are listed as follows Item Description Enable Check this box to enable UPn...

Страница 319: ...ponent failure and the availability of backup resources The complexity of HA is determined by the availability needs and the tolerance of system interruptions Systems provide nearly full time availabi...

Страница 320: ...one and take over the service While in the standby status the secondary nodes are still mirrored the configuration of primary in real time thus the whole systems are assured of having identical config...

Страница 321: ...to save the settings 2 Set the value for Manual Mode Threshold After passing the time configured in Manual Mode Threshold if the system detects no master router existing then Manual Preemption Status...

Страница 322: ...en the Master device fails one of the backup devices will be chosen by priority as the Master device to offer the network service for the connected PCs Available parameters are listed as follows Item...

Страница 323: ...each access point in LAN will participate in different high availability sessions All the WAN interfaces can be active which provide more flexible utilization of network service When LAN1 in Router A...

Страница 324: ...st status The information will update immediately when the Refresh button is clicked Profile Number Limit Display the total number 3 of the object profiles to be created Profile Display the name of th...

Страница 325: ...router to identify which Master will be backed up Role LAN profiles configured for HA application can run independently and will not interfere with each other Therefore LAN1 Backup of router A can be...

Страница 326: ...ty of Vigor router in HA application The less the number is the higher the priority shall be The router with the highest priority will be treated as the Master device in HA application IP Display the...

Страница 327: ...you to wake up the bound IP If you choose Wake by MAC Address you have to type the correct MAC address of the host in MAC Address boxes If you choose Wake by IP Address you have to choose the correct...

Страница 328: ...e profile To delete a profile simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Display the name of the profile Enable Display the status of p...

Страница 329: ...one of the LAN profiles The computers specified in the selected LAN profile will be waken up remotely Apply Click it to save the configuration and exit the page Cancel Click it to exit the dialog with...

Страница 330: ...corresponding settings for the selected profile Refresh Renew current web page Index Display the index number from 1 to 10 of the profile Enable Display the status of the profile False means disabled...

Страница 331: ...the SMS provider object profile from the drop down list Such profiles can be created from Object Setting SMS Service Object Recipient Type the cell phone number to receive the SMS Notify Profile Choo...

Страница 332: ...Refresh Renew current web page Index Display the index number from 1 to 10 of the profile Enable This Profile Display the status of the profile False means disabled True means enabled Mail Profile Dis...

Страница 333: ...for receiving the mail Notify Profile Choose a profile specify the timing for sending SMS from the drop down list Such profiles can be created from Object Setting Notification Object Send A Test Mail...

Страница 334: ...ta between two computers across a shared or public network in a manner that emulates the properties of a point to point private link Below shows the menu items for VPN and Remote Access 4 4 9 9 1 1 V...

Страница 335: ...em Description Type Specify which protocol PPTP IPsec SSL will be used for such VPN profile VPN Settings Via Select From Current Settings Current VPN LAN to LAN profiles will be listed below such sett...

Страница 336: ...as the Type you will get the following screen Available parameters are listed as follows Item Description Profile Display the name of the VPN profile Enable This Profile Check this box to enable such...

Страница 337: ...ype the LAN IP address and LAN subnet mask for the remote host Route NAT Mode Specify the purpose for such profile Netbios Naming Packet Enable Click it to have an inquiry for data transmission betwee...

Страница 338: ...ce Usually use the default setting leave it in blank Remote Host Type the WAN IP address for the remote host Remote IP Subnet Mask Type the LAN IP address and LAN subnet mask for the remote host More...

Страница 339: ...encrypted and authenticated Choose AH to specify the IPSec protocol for the Authentication Header protocol The data will be authenticated but not be encrypted DPD Delay DPD means dead peer detection I...

Страница 340: ...ype the IP address and subnet mask of local host Remote IP Subnet Mask Type the LAN IP address and LAN subnet mask for the remote host Route NAT Mode Specify the purpose for such profile Netbios Namin...

Страница 341: ...figure VPN settings for VPN server Such wizard will guide to set the LAN to LAN profile for VPN dial in connection step by step H Ho ow w t to o c cr re ea at te e L LA AN N t to o L LA AN N p pr ro o...

Страница 342: ...low such setting Choose the one you need Create New VPN Profile It allows you to create a new VPN LAN to LAN profile Simply type the name in the field of Profile Name The field of Profile Name is avai...

Страница 343: ...cal host Remote IP Subnet Mask Type the LAN IP address and LAN subnet mask for the remote host Netbios Naming Packet Enable Click it to have an inquiry for data transmission between the hosts located...

Страница 344: ...Specify the gateway for WAN interface Usually use the default setting leave it in blank Remote Host Type the WAN IP address for the remote host Remote IP Subnet Mask Type the LAN IP address and LAN su...

Страница 345: ...Security Protocol Choose ESP to specify the IPSec protocol for the Encapsulating Security Payload protocol The data will be encrypted and authenticated Choose AH to specify the IPSec protocol for the...

Страница 346: ...mote host Netbios Naming Packet Enable Click it to have an inquiry for data transmission between the hosts located on both sides of VPN Tunnel while connecting Disable When there is conflict occurred...

Страница 347: ...ng 4 Fill in the required information on this page and click Finish A pop up window will appear 5 Click OK Then return to VPN and Remote Access VPN Server Wizard The new added VPN server profile will...

Страница 348: ...igor Router to allow VPN tunnel pass through Available parameters are listed as follows Item Description Enable PPTP L2TP VPN Service Enable SSL Tunnel IPsec Service Check the box es to enable the ser...

Страница 349: ...scription Authenticate Protocol The router will authenticate the dial in user with the protocol selected here PAP It means the router will attempt to authenticate dial in users with the PAP protocol C...

Страница 350: ...DHCP request to the DHCP server PPTP MSS Type the maximum segment size MSS for PPTP VPN tunnel NetBIOS Naming Packet Pass Click it to have an inquiry for data transmission between the hosts located on...

Страница 351: ...mpt to authenticate dial in users with the CHAP protocol User Authentication Type Set user authentication to Local server or RADIUS server LDAP profiles Choose a LDAP profile for PPTP Server if LDAP i...

Страница 352: ...his page Enter all the settings and click Apply 4 4 9 9 4 4 3 3 S SS SL L V VP PN N This page display current status for VPN tunnel built with SSL protocol Available parameters are listed as follows I...

Страница 353: ...via VPN Some programs might send multicast packets via VPN connection Pass Click this button to let multicast packets pass through the router Block This is default setting Click this button to let mu...

Страница 354: ...for IPSec network address translator traversal NAT T traffic IPsec MSS Type the port number for IPSec MSS Apply Click it to save the configuration Cancel Click it to discard the settings configured i...

Страница 355: ...WAN interface selected for the profile Local IP Subnet Mask Display the LAN IP address with subnet mask of this profile Remote Host Display the name of the remote host of this profile Remote IP Subnet...

Страница 356: ...t Through Choose a wan profile to be used by such profile Failover to Choose a wan profile which will lead the data passing through other WAN automatically when the selected WAN interface in Dial Out...

Страница 357: ...available for Aggressive Mode enabled only Remote Peer ID Peer ID is on behalf of the IP address while identity authenticating with remote VPN server The length of the ID is limited to 47 characters...

Страница 358: ...ll send the DPD packet to each other to ensure the IPSec tunnel connection is active still Disable Click it to disable DPD DPD Delay The keep alive timer A Hello message will be emitted periodically w...

Страница 359: ...block data transmission of Netbios Naming Packet inside the tunnel Multicast via VPN Some programs might send multicast packets via VPN connection Enable Click this button to let multicast packets pa...

Страница 360: ...alue is used for the remote client to authenticate the source of the packet The length is 4 bytes The Proposal tab lists encryption and authentication algorithms to be negotiated with the remote IPsec...

Страница 361: ...the configuration Cancel Click it to exit the page without saving configuration Multiple SAs will negotiate IPSec SAs in IKE phase 2 to establish multiple IPSec tunnels for each subnet routing Config...

Страница 362: ...to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 200 of the object profiles to be created Profile Display the name of LAN to LAN prof...

Страница 363: ...g always on Dial Out Through Choose a wan interface to be used by such profile Then use the default WAN IP or specify a WAN Alias IP for VPN tunnel Failover to Choose a wan profile which will lead the...

Страница 364: ...a transmission of Netbios Naming Packet inside the tunnel Multicast via VPN Some programs might send multicast packets via VPN connection Enable Click this button to let multicast packets pass through...

Страница 365: ...rofile To delete a profile simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 200 for PPTP 50 for SSL of...

Страница 366: ...reated in User Management User Profile previously Local IP Subnet Mask Type the IP address and subnet mask of local host Remote IP Subnet Mask Type the LAN IP address and LAN subnet mask for the remot...

Страница 367: ...cription Add Add a new profile Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the c...

Страница 368: ...owing dialog will appear Available parameters are listed as follows Item Description Profile Display the name of the profile Enable Check this box to enable this profile WAN Interface Specify a WAN in...

Страница 369: ...Robin and Fastest Binding Tunnel Policy mechanism allows users to encrypt the data in transmission or specified service function in transmission and define specified VPN Tunnel for having effective ba...

Страница 370: ...ply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 32 of the profiles to be created Profile Display the name...

Страница 371: ...e Access VPN Profiles to create a new VPN profile with GRE function enabled first Weight Type a value in such field Failover Primary Interface Backup Interface Use the drop down list to specify the VP...

Страница 372: ...button Refresh Renew current web page Profile Number Limit Display the total number 128 of the profiles to be created Profile Display the name of the profile Enable Display the status of the profile F...

Страница 373: ...name of the profile Enable Check this box to enable such profile Protocol Choose the protocol for such profile Source IP Address Type the source IP address specified for this profile Source Mask Type...

Страница 374: ...IPsec VPN PPTP SSL connection PPTP Click it to perform PPTP VPN connection Profile This filed displays the profile configured in LAN to LAN with Index number and VPN Server IP address The VPN connecti...

Страница 375: ...8 2 2 H Hi is st to or ry y This page displays the history of VPN connection Each item will be explained as follows Item Description VPN Display the name of VPN profile Type Display the connection typ...

Страница 376: ...icates Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate Below shows the menu items for Certificate Management Local...

Страница 377: ...to the router Generate Open another web page for generating the local certificate Name Display the name of trusted CA built Subject Display the subject of the trusted CA built Issuer Display the issu...

Страница 378: ...tificate There are four types Domain Name Certificated by domain name IP Certificated by IP address Email Certificated by email address None Do not enter an ID value ID Value The ID value is determine...

Страница 379: ...sphrase Such string will be used for confirmation while signing remote CA It is similar to a password but generally it is longer for security Apply Click it to create a new local certificate based on...

Страница 380: ...r you specified above H Ho ow w t to o u up pl lo oa ad d a a l lo oc ca al l c ce er rt ti if fi ic ca at te e 1 Open Certificate Management Local Certificate 2 Click Upload to open the following dia...

Страница 381: ...as follows 5 Click Upload The system will start to upload the selected file 4 4 1 10 0 2 2 T Tr ru us st te ed d C CA A C Ce er rt ti if fi ic ca at te e This page allows you to build a RootCA certif...

Страница 382: ...CA mode type the required information and choose the required file e g Key Passphrase Key File PKCS12 Password and PKCS12 File Later click Upload on the dialog to upload the file onto Vigor router Del...

Страница 383: ...w w t to o b bu ui il ld d a a t tr ru us st te ed d C CA A c ce er rt ti if fi ic ca at te e 1 Open Certificate Management Trusted CA Certificate 2 Simply click the Build RootCA button 3 The followin...

Страница 384: ...to exit the web page without saving the configuration 4 Enter all the settings and click Apply 5 A new RootCA Certificate has been created 4 4 1 10 0 3 3 R Re em mo ot te e C Ce er rt ti if fi ic ca...

Страница 385: ...to download an existing certificate to the router Sign Allow you to sign a requested certificate Name Display the name of remote certificate built Subject Display the subject of remote certificate bui...

Страница 386: ...11 1 1 1 S SS SL L W We eb b P Pr ro ox xy y SSL Web Proxy will allow the remote users to access the internal web sites over SSL Each item will be explained as follows Item Description Add Add a new...

Страница 387: ...erver Host IP Address If you type function variation as URL you have to type corresponding IP address in this filed Such field must match with URL setting Apply Click it to save the configuration Canc...

Страница 388: ...esh Renew current web page Profile Number Limit Display the total number 30 of the profiles to be created Profile Display the name of the profile that you create IP Address Display the IP address for...

Страница 389: ...cify the port used for this protocol The default setting is 5900 Scaling Chose the percentage 100 80 60 for such application Apply Click it to save the configuration Cancel Click it to exit the page w...

Страница 390: ...select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 30 of the profiles to be created Profile Display the name of...

Страница 391: ...rotocol Port Specify the port used for this protocol Screen Size Chose the screen size for such application Apply Click it to save the configuration Cancel Click it to exit the page without saving the...

Страница 392: ...m will be explained as follows Item Description Auto Refresh Specify the interval of refresh time to obtain the latest status The information will update immediately when the Refresh button is clicked...

Страница 393: ...ion of finite bandwidth resources to network or servers for supporting timing sensitive and mission critical network applications such as VoIP Voice over IP and online gaming applications Differentiat...

Страница 394: ...ted profile Refresh Renew current web page WAN Display the WAN interface used for QoS Outgoing Status Display bandwidth for the outgoing data is enabled or disabled Outgoing Bandwidth Display the tota...

Страница 395: ...it to disable the QoS profile Bandwidth Type the number as the total transmission rate for the outgoing incoming data The range can be set from 64000 to 10000000 Click the unit Kbps or Mbps for such r...

Страница 396: ...s supported by Software QoS Available parameters are listed as follows Item Description WAN Use the drop down list to choose the WAN interface to apply hardware QoS Status Enable Click it to enable Qo...

Страница 397: ...he one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected profile Delete Remove the selected profile To delete a pro...

Страница 398: ...ay the queue number that such filter is categorized H Ho ow w t to o a ad dd d a a Q Qo oS S r ru ul le e p pr ro of fi il le e 1 Open Bandwidth Management QoS Rule 2 Simply click the Add button 3 The...

Страница 399: ...is the lowest Local Address Click on the left side of the Source IP Object Source IP Group profile Check the object profile s as the source target Local IP Object Use the drop down list to choose one...

Страница 400: ...eck the object profile s as the destination target Remote IP Object Use the drop down list to choose one of the destination IP objects for such rule profile Remote IP Group Use the drop down list to c...

Страница 401: ...ptions TCP UDP and TCP UDP Select the protocol that you want to use Source Port Start End Type the start end number for the port range of the source port for such filter Destination Port Start End Typ...

Страница 402: ...he process of data transmission Each item will be explained as follows Item Description Enable Enable Click it to enable VoIP QoS function SIP UDP Port Set a port number used for SIP Apply Click it to...

Страница 403: ...erver on ISP Each item will be explained as follows Item Description Enable Enable Click it to enable DSCP Re Tag function High Medium Normal Low There are four queues allowed for QoS control Use the...

Страница 404: ...t Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the sele...

Страница 405: ...e Type the message manually to display on the page that the user tries to access into the blocked web page Default Connection Limit Administration Message Such field is available when you disable the...

Страница 406: ...create another new time object profile Time Group Click the triangle icon to display the profile selection box Choose a schedule group profile to be applied on such rule You can click to create anoth...

Страница 407: ...u to modify the corresponding settings for the selected profile Delete Remove the selected profile To delete a profile simply select the one you want to delete and click the Delete button Move Up Chan...

Страница 408: ...ed of the downstream Enable Smart Bandwidth Limit Check this radio button to configure the default limitation for bandwidth for any LAN IP not included in the Limitation List Session Threshold When se...

Страница 409: ...r the specific limitation you set for each index Do not type the value with 0 otherwise the profile cannot be saved RX Limit Kbps Define the limitation for the speed of the downstream If you do not se...

Страница 410: ...Profile User Group LDAP Group Guest Group profiles from the drop down list The selected profile will be treated as source target You can click to create another new object profile Service target Clic...

Страница 411: ...uter can be seen from USB Application Modem Support List For network connection via USB modem refer to WAN General Setup for detailed information 4 4 1 13 3 1 1 D Di is sk k S St ta at tu us s This pa...

Страница 412: ...storage disk first At present the Vigor router can support USB storage disk with versions of FAT16 32 and EXT2 3 only Therefore before connecting the USB storage disk into the Vigor router please make...

Страница 413: ...and the FTP server The default setting is 10 4 4 1 13 3 3 3 S SA AM MB BA A S Se er rv ve er r SAMBA server offers the file sharing service for users through a specified file folder Any user who want...

Страница 414: ...w t to o a ad dd d e ed di it t a a S SM MA AB BA A f fo ol ld de er r p pr ro of fi il le e 1 Open USB Application SMABA Server and click SAMBA Folder tab 2 Click the Add button For an existed profil...

Страница 415: ...e users sharing the SAMBA service to read and write the file stored under the sharing folder If Specific Users is selected you have to additionally specify Read Only User and Read Write User Read Only...

Страница 416: ...State Auto It s the default setting Vigor router will detect if the connected device is printer or not If yes the printer server will be enabled automatically to activate the printer Enable The print...

Страница 417: ...ar it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures The inclusion of a USB thermometer in compatible Vigor routers will co...

Страница 418: ...limit Type the upper limit and lower limit for the system to send out temperature alert Calibration Type a value used for correcting the temperature error Temperature Alert Time Interval The default...

Страница 419: ...od de em m S Su up pp po or rt t L Li is st t Such page provides the information about the brand name and model name of the USB modems which are supported by Vigor router VoIPon www voipon co uk sales...

Страница 420: ...rade and APP Support List Below shows the menu items for System Maintenance 4 4 1 14 4 1 1 T TR R 0 06 69 9 4 4 1 14 4 1 1 1 1 T TR R 0 06 69 9 This device supports TR 069 standard It is very convenie...

Страница 421: ...Click Enable to make the log message being recorded by Syslog Periodic Status The default setting is Enable Please set periodic time for VigorACS to send notification to CPE Or click Disable to close...

Страница 422: ...check this box Then type the server IP address server port minimum keep alive period and maximum keep alive period respectively Server Address Type the IP address of the STUN server Server Port Type t...

Страница 423: ...the router Each item will be explained as follows Item Description Original Password Type the old password New Password Type the new password Confirm Password Re type the new password for confirmatio...

Страница 424: ...rd Type a password for encrypting the file Confirm Password Retype the password for confirmation Encode Password in Config Choose it to encrypt the password information in configuration file Backup Ty...

Страница 425: ...or decrypting the file for restoring it for use next time Password Type a password for encrypting the file Confirm Password Retype the password for confirmation Restore Type Choose one of the types to...

Страница 426: ...reboot the router 4 4 1 14 4 3 3 3 3 A An na al ly ys si is s Such analysis page will show user defined settings result In comparing the default settings with information displayed in this page it wil...

Страница 427: ...sL Lo og g F Fi il le e This page displays all the operation logs for the router Available parameters are listed as follows Item Description Refresh Renew the web page Download Log Save or open the Sy...

Страница 428: ...le the function of log to USB USB Syslog Keep Days Type the days that USB disk will keep the log without deleting Router Name Type the name of the router The default name is Vigor Server IP Host Name...

Страница 429: ...listed as follows Item Description Enable Check the box to enable such profile Mail From Type a mail address for the mail sender Mail To Assign a mail address for the mail receiver Add Click this but...

Страница 430: ...login event VPN Mail Alert Enable Vigor router sends a mail as an alert to inform VPN connection Disable Vigor router does not send any mail to inform VPN connection Send A Test Mail Click it to send...

Страница 431: ...me Type NTP Select to inquire time information from Time Server on the Internet using assigned protocol Browser Select this option to use the browser time from the remote administrator PC host as rout...

Страница 432: ...user interface Disable No validation will be done when a user tries to log into the web user interface of Vigor router Fail Times to Trigger It is available when Use Validation Code is enabled The nu...

Страница 433: ...you enable such function the system can be managed by these three IP addresses via WAN IP List Type the first IP address for the system administrator to login The former boxes indicate the IP address...

Страница 434: ...ing the router from LAN interface Management Port Setup Web Port Type the port number for the management through web page Telnet Port Type the port number for the management through telnet page SSH Po...

Страница 435: ...times allowed for a group of user account and password trying to login Vigor router Penalty Time This field is used to configure the blocking time The default setting is 60 seconds It means when a us...

Страница 436: ...the box to make information related to access control recorded on Syslog PPTP IPsec Web HTTPS SSH Telnet FTP Access Barrier The port number used by these protocols always became the target attacked b...

Страница 437: ...s private Default Host IP Mask Click Enable to use the default IP and mask of the host as the SNMP agent If you click Disable you need to type the IP address and choose the mask manually in related fi...

Страница 438: ...reboot the router using the current configuration choose Reboot with Current Configurations and click Reboot To reset the router settings to default values click Reboot with Factory Default Configurat...

Страница 439: ...ble Schedule Reboot and choose a time object from the drop down list of Schedule Time Object After clicking Apply Vigor router will reboot at the specified time Available parameters are listed as foll...

Страница 440: ...e End Date Display the ending date of the profile End Time Display the ending time of the profile Weekdays Display which day in a week shall perform the reboot job H Ho ow w t to o a ad dd d a a s sc...

Страница 441: ...page Download the newest firmware from DrayTek s web site or FTP site The DrayTek web site is www DrayTek com or local DrayTek s web site and the FTP site is ftp DrayTek com Click System Maintenance F...

Страница 442: ...e firmware upgrade 4 4 1 14 4 9 9 2 2 A Au ut to o F Fi ir rm mw wa ar re e U Up pg gr ra ad de e By clicking Check Update Install Update Vigor router can download upgrade firmware directly from websi...

Страница 443: ...nd install the newest firmware version automatically Notify me when new firmware is available If it is enabled after detecting the newest firmware from the website Vigor router s system will automatic...

Страница 444: ...patch version on local system Server Patch Version Display the latest patch version on DrayTek MyVigor server Server Patch Information Display detailed patch information Upgrade from Server Check Upda...

Страница 445: ...grade_auto 1 Success Your firmware is up to date and need not to patch 4 4 1 14 4 1 10 0 A AP PP P S Si ig gn na at tu ur re e U Up pg gr ra ad de e The APP object profile adopted by Vigor router will...

Страница 446: ...there is any newest signature available for use If yes Vigor router will download the newest signature from the website to the host Vigor router automatically Install Update If the signature informat...

Страница 447: ...newest information automatically Server Choose a proper server for signature upgrade from the drop down list At present only two servers myvigor draytek com or myvigoreu draytek com are supported Sys...

Страница 448: ...for the user to review related information 4 4 1 15 5 1 1 R Ro ou ut ti in ng g T Ta ab bl le e Click Diagnostics and click Routing Table to open the web page 4 4 1 15 5 1 1 2 2 R Ro ou ut ti in ng g...

Страница 449: ...up H target is a host G use gateway R reinstate route for dynamic routing D dynamically installed by daemon or redirect M modified from routing daemon or redirect A installed by addrconf C cache entr...

Страница 450: ...The system will display the records relating to the keyword Destination Display the destination IP address for various routings Next Hop Display the next hop address for such route Flags Display the f...

Страница 451: ...shows a mapping between an Ethernet hardware address MAC Address and an IP address 4 4 1 15 5 2 2 1 1 A AR RP P C Ca ac ch he e T Ta ab bl le e Each item will be explained as follows Item Description...

Страница 452: ...lear Delete the selected profile IP Object Click the Add button to add a new IP object for such 4 4 1 15 5 2 2 2 2 I IP Pv v6 6 N Ne ei ig gh hb bo or r T Ta ab bl le e Each item will be explained as...

Страница 453: ...e to verify its reachability DELAY The neighbor is no longer to be reachable and the traffic has recently been sent to the neighbor Rather than probe the neighbor immediately however delay sending pro...

Страница 454: ...on Refresh Renew the web page Search Move the mouse cursor onto the box of Search Click the mouse button and type the keyword inside the box The system will display the records relating to the keyword...

Страница 455: ...r onto the box of Search Click the mouse button and type the keyword inside the box The system will display the records relating to the keyword Interface Display the interface used by the DHCP server...

Страница 456: ...ype the keyword inside the box The system will display the records relating to the keyword Source Display the source IP address and port of local PC Destination Display the destination IP address and...

Страница 457: ...AN profile WAN Use the drop down menu to choose a WAN profile Apply Click it to save the configuration configured under the Setup tab CPU Click the CPU tab There are three selections provided for you...

Страница 458: ...7 days Recent 4 Weeks Display the information of LAN operation about recent 4 weeks WAN Click the WAN tab Network Interface Display the information of WAN operation There are three selections provide...

Страница 459: ...of the host in the box and click Start The result of route trace will be shown on the screen Each item will be explained as follows Item Description Ping TraceRoute Click Ping to perform ping function...

Страница 460: ...lows Item Description Enable Dataflow Monitor Check this box to enable dataflow monitor performed by the router Refresh Click it to renew the web page Chart Click this button to illustrate data chart...

Страница 461: ...e Display the rate of data received TX Rate Display the rate of data transmitted RX byte Display the file size of data received TX byte Display the file size of data transmitted 4 4 1 15 5 9 9 2 2 S S...

Страница 462: ...ll be used to capture the packets The default setting is All Host Port Type the IP address of the host or the post number that you want to monitor Start Click it to capturing the packets and display t...

Страница 463: ...U Us se er r S St ta at tu us s This page displays related information of user status PPPoE Server User Management VPN Connection Management and SSL Proxy for reference VoIPon www voipon co uk sales v...

Страница 464: ...aged 4 4 1 16 6 1 1 G Ge en ne er ra al l S Se et tu up p General Setup is used to configure settings which will be used by the clients to register to such Vigor router Click the tabs of General Setup...

Страница 465: ...cond The range is from 60 86400 Apply Click it to save the configuration Cancel Click it to discard the settings configured in this page 4 4 1 16 6 1 1 2 2 V VP PN N G Ge en ne er ra al l S Se et tu u...

Страница 466: ...igured in this page 4 4 1 16 6 2 2 C CP PE E M Ma an na ag ge em me en nt t All the CPEs managed by Vigor3900 can be seen with icons from this page 4 4 1 16 6 2 2 1 1 C CP PE E M Ma ai in nt te en na...

Страница 467: ...or the CPE managed by Vigor3900 Edit To modify the name and location of specific CPE click the one you want and click the Edit button A pop up window will appear Simply change the name for identificat...

Страница 468: ...the one you want to retrieve and click Restore Later the selected one will appear on the Managed Devices Status area again Maintenance This area displays all the profiles which are created for applyi...

Страница 469: ...s Display the day s chosen for such profile Filename Display the filename of the firmware Status Display current status of the profile has been finished or not Refer to sections How to manage the CPE...

Страница 470: ...eated profile Usually the name of the device will be assigned by Vigor3900 automatically If you want to give a name easy for easy recognition refer to 4 11 2 1 CPE Maintenance to specify another name...

Страница 471: ...date specified below every week Start Date End Date It is available only when Once is selected as Schedule Specify the starting date ending date with the format YYYY MM DD Start Time End Time It is a...

Страница 472: ...gh Vigor3900 for more detailed information If the VPN isn t established successfully a red line will appear instead PPTP To build a quick VPN connection with PPTP simply click the remote CPE waiting f...

Страница 473: ...Note If the VPN connection has been established successfully a new LAN to LAN profile will be created for the CPE automatically See the following example Keep VPN Settings To avoid the VPN be disconne...

Страница 474: ...sfully the basic information such as the connection type IP address RX RX will be displayed on this field Refresh Click it to refresh current page VPN Display the name of the VPN Type Display the type...

Страница 475: ...Management VPN CPE Management and click the tab of Map 4 4 1 16 6 3 3 L Lo og g A Al le er rt t The Log page offers brief information to identify the CPE connected to Vigor3900 The Alert page offers b...

Страница 476: ...mulated signal strength L Lo oa ad d B Ba al la an nc ce e f fo or r A AP P The parameters configured for Load Balance can help to distribute the traffic for all of the access points registered to Vig...

Страница 477: ...y to browse on network for PC users and mobile users Menu items related to AP are General Setup Dashboard Status WLAN Profile Rogue AP Total Traffic Event Log Station Number AP Maintenance Traffic Gra...

Страница 478: ...rt Type a port number for HTTP The default value is 9080 HTTPS Allow Click Enable to activate the HTTPS setting HTTPS Port Type a port number for HTTPS The default value is 9443 Username Type a userna...

Страница 479: ...nformation for the VigorAP managed by Vigor3900 Available parameters are listed as follows Item Description Status Display current status connected or disconnected of the managed AP Device Name The na...

Страница 480: ...he selected wireless access point Version Display the firmware version used by the access point Config Click it to open the configuration page of the selected VigorAP The device name Login username an...

Страница 481: ...Display the name of the profile The default profile cannot be renamed Main SSID Display the SSID configured by such wireless profile Security Display the security mode selected by such wireless profi...

Страница 482: ...It allows you to modify an existing wireless profile or create a new wireless profile Apply to Device Click it to apply the selected wireless profile to the specified Access Point Simply choose the de...

Страница 483: ...of the selected profile 2 Click the Edit button to display the following page Note The function of Auto Provision is available for the default WLAN profile 3 After finished the general settings config...

Страница 484: ...pen the following page for 5G wireless security settings 5 When you finished the above web page configuration click Finish to exit and return to the first page The modified WLAN profile will be shown...

Страница 485: ...tatus page will be displayed based on the type Friendly Rogue Unknown of access points That is only the selected type Friendly Rogue Unknow will be shown on this page However if unknown is selected Vi...

Страница 486: ...selected AP be classified as unknown AP Ch Display the channel used by the detected access point SSID Display the SSID specified for the detected access point BSSID Display the MAC address of the det...

Страница 487: ...nt log for all of the APs managed by Vigor router will be shown on this page It is useful for troubleshooting if required Each item will be explained as follows Item Description Refresh Click it to re...

Страница 488: ...WLAN or 5G WLAN used by wireless clients to access into Internet through VigorAP 4 4 1 17 7 9 9 A AP P M Ma ai in nt te en na an nc ce e Vigor router can execute configuration backup configuration res...

Страница 489: ...the firmware upgrade of the selected AP reboot the selected AP remotely and perform the factory reset for the selected AP File Path Specify the file and the path which will be used to perform Config R...

Страница 490: ...11 1 L Lo oa ad d B Ba al la an nc ce e The parameters configured for Load Balance can help to distribute the traffic for all of the access points registered to Vigor router Thus the bandwidth will no...

Страница 491: ...t to specify the traffic limit for uploading Download Limit Use the drop down list to specify the traffic limit for downloading Action when Threshold Exceeded Stop accepting new connections When the a...

Страница 492: ...Display a brief description e g ground roof of the AP Map Online APs Display the number of VigorAP configured and powered up Total APs Display the total number of VigorAP configured Clients Display t...

Страница 493: ...supported for floor plan Next Click it to go to the next configuration page Cancel Click it to cancel the configuration 2 Click Next The configuration page with floor plan will be shown on the web pa...

Страница 494: ...ist to the map on the left side 4 Check the box of Show AP Coverage on 5GHz 2 4 to display the signal coverage area 5 Adjust the AP on the map to find out which place can have the best wireless covera...

Страница 495: ...the Client tab to list the AP management functions that the Access Points support under different firmware versions Click the Server tab to list the AP management functions that Vigor router supports...

Страница 496: ...pen configuration pages in new designed web pages They are suitable and easy to browse on network for PC users and mobile users Menu items related to Switch are Status Profile Group Maintenance and Su...

Страница 497: ...rmation for accessing password configuration of VigorSwitch is wrong or Telnet service is disabled Switch Name Display the name of VigorSwitch Group Display the name of the group IP Address Display th...

Страница 498: ...igorSwitch Model Display the model name of VigorSwitch Firmware Version Display the firmware version that VigorSwitch current used Account It is used to change the password for accessing into VigorSwi...

Страница 499: ...icon means the VigorSwitch does connect to Vigor3900 and is managed by Vigor3900 Grey icon means Vigor3900 is detecting such VigorSwitch still Red icon means Vigor3900 cannot access it to get status...

Страница 500: ...are Version Display the firmware version that VigorSwitch current used Account It is used to change the password for accessing into VigorSwitch Add The one under New Switch List is allowed to be manag...

Страница 501: ...to Device Current setting will be saved Meanwhile the configuration in VigorSwitch also will be rewritten immediately Type new values and click Send to Device for saving the configurations Then click...

Страница 502: ...Vigor3900 Series User s Guide 494 VoIPon www voipon co uk sales voipon co uk Tel 0 330 088 0195 Fax 44 0 1245 808299...

Страница 503: ...t a switch group Available settings are explained as follows Item Description Group Name Type a name as the group name Different switches can be classified within a group Existing Switch Display all o...

Страница 504: ...ned as follows Item Description Action Type Five actions including configuration backup configuration restore configuration restore to router and switch remote reboot and factory reset are offered by...

Страница 505: ...7 4 4 1 18 8 5 5 S Su up pp po or rt t L Li is st t This page lists all models of VigorSwitch which can be managed by Vigor3900 via Switch Management VoIPon www voipon co uk sales voipon co uk Tel 0 3...

Страница 506: ...dress Display the MAC address of the external product IP Address Display the IP address of the external product Connection Time Display the connection time that the external product connecting to Vigo...

Страница 507: ...4 4 2 20 0 P Pr ro od du uc ct t R Re eg gi is st tr ra at ti io on n Please refer to section 2 3 Register Vigor Router for more detailed information VoIPon www voipon co uk sales voipon co uk Tel 0...

Страница 508: ...Vigor3900 Series User s Guide 500 This page is left blank VoIPon www voipon co uk sales voipon co uk Tel 0 330 088 0195 Fax 44 0 1245 808299...

Страница 509: ...If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 5 5 1 1 C Ch he ec ck ki in ng g I If f t th he e H Ha ar rd dw w...

Страница 510: ...s listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s The example is based on Windows XP As to the examples for other operation systems please refer to the...

Страница 511: ...ernet Protocol Version 4 TCP IP and then click Properties 5 Select Obtain an IP address automatically and Obtain DNS server address automatically Finally click OK VoIPon www voipon co uk sales voipon...

Страница 512: ...e click on the current used Mac OS on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop down list of Configure IPv4 VoIPon www voip...

Страница 513: ...s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista 7 The DOS command dialog will appear 3 Type ping 192 168 1 1 and press E...

Страница 514: ...SP P S Se et tt ti in ng gs s a ar re e O OK K o or r N No ot t Open Online Status to check current network status Be careful to check if the settings coming from your ISP have been typed correctly o...

Страница 515: ...ngs before you pressing The password of the factory default is null S So of ft tw wa ar re e R Re es se et t You can reset router to factory default via Web page Go to System Maintenance and choose Re...

Страница 516: ...k If the router settings are correct at all and the router still does not connect to internet please contact your ISP technical support representative to help you for configuration Also if the router...

Отзывы:

Нет отзывов

Похожие инструкции для Vigor3900 Series

Бренд: Lanner Страницы: 81

Firebox T35 Series

Бренд: Watchguard Страницы: 16

FVG318v1 - ProSafe 802.11g Wireless VPN Firewall Switch

Бренд: NETGEAR Страницы: 8

3C16772 - OfficeConnect Web Site Filter

Бренд: 3Com Страницы: 182

Бренд: PYCH Страницы: 17

Бренд: Fortinet Страницы: 12

Бренд: Lanner Страницы: 19

Бренд: Fortinet Страницы: 240

Бренд: Watchguard Страницы: 20

Бренд: Untangle Страницы: 2

Бренды по названию

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Популярные бренды

Загрузить еще бренды