Draytek Vigor2900 Series Security Router User's Guide Page 1

Browse online or download User's Guide for Routers Draytek Vigor2900 Series Security Router. Draytek Vigor2900 Series Security Router User`s guide User Manual

  • Download
  • Add to my manuals
  • Print
  • Page
    / 173
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 0
Vigor2900 Series
Security Router
User’s Guide
Version: 2.0
Date: 2006/1/16
Copyright 2005 All rights reserved.
This publication contains information that is protected by copyright. No part may be reproduced, transmitted,
transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright
holders. The scope of delivery and other details are subject to change without prior notice.
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Computer Inc.
Other products may be trademarks or registered trademarks of their respective manufacturers.
Page view 0
1 2 3 4 5 6 ... 172 173

Summary of Contents

Page 1 - User’s Guide

Vigor2900 Series Security Router User’s Guide Version: 2.0 Date: 2006/1/16 Copyright 2005 All rights reserved. This publicatio

Page 2

Vigor2900 Series User’s Guide 4 11..11..33 FFrroonntt aanndd RReeaarr VViieeww ffoorr VViiggoorr22990000GGii ACTISDN WLANAttack VPN Printer

Page 3

Vigor2900 Series User’s Guide 94 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limi

Page 4

Vigor2900 Series User’s Guide 95IKE Pre-Shared Key Check the box of Pre-Shared Key to invoke this function and type in the required characters (1-63

Page 5

Vigor2900 Series User’s Guide 96 Click to clear all indexes. Name Indicate the name of the LAN-to-LAN profile. The symbol ??? represents that the

Page 6

Vigor2900 Series User’s Guide 97Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activat

Page 7

Vigor2900 Series User’s Guide 98 User Name This field is applicable when you select PPTP or L2TP w/ or w/out IPSec policy above. Password This fi

Page 8

Vigor2900 Series User’s Guide 99Main mode. IKE phase 1 proposal-To propose the local available authentication schemes and encryption algorithms to

Page 9

Vigor2900 Series User’s Guide 100 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN dial-in

Page 10 - Description

Vigor2900 Series User’s Guide 101methods on the right side. If you uncheck the checkbox, the connection type you select above will apply the authenti

Page 11

Vigor2900 Series User’s Guide 102phase. If the PPP IP address is fixed by remote side, specify the fixed IP address here. Remote Network IP/ Remote N

Page 12

Vigor2900 Series User’s Guide 103your applications to operate. This has to manually set up port mappings or use other similar methods. The screenshot

Page 13

Vigor2900 Series User’s Guide 511..11..44 FFrroonntt aanndd RReeaarr VViieeww ffoorr VViiggoorr22990000ii ACTISDNQoSAttack VPN Printer WAN

Page 14

Vigor2900 Series User’s Guide 104¾ Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have ap

Page 15

Vigor2900 Series User’s Guide 105 The major benefit of this mode is that you don’t have to memorize your friend’s IP address, which might change ver

Page 16 - Internet

Vigor2900 Series User’s Guide 10633..1100..11 DDiiaallPPllaann SSeettuupp In this section, you can set your VoIP contacts in the “phonebook” we ca

Page 17

Vigor2900 Series User’s Guide 10733..1100..22 SSIIPP RReellaatteedd FFuunnccttiioonnss SSeettuupp In this section, you set up your own SIP setti

Page 18

Vigor2900 Series User’s Guide 108choose None and check the box to achieve the goal. Some SIP server allows user to use VoIP function without register

Page 19

Vigor2900 Series User’s Guide 10933..1100..33 CCOODDEECC//RRTTPP//DDTTMMFF SSeettuupp The codec used for each call can be negotiated with the pe

Page 20

Vigor2900 Series User’s Guide 110will contains 20 ms voice information. The more data contains in a single packet the less overhead it creates but ma

Page 21

Vigor2900 Series User’s Guide 111Dial Tone Power Level This setting is used to adjust the loudness of the dial tone. The smaller the number is, the

Page 22

Vigor2900 Series User’s Guide 112supports, please use the default setting. 33..1100..55 VVooiiccee CCaallll SSttaattuuss On VoIP call status, yo

Page 23

Vigor2900 Series User’s Guide 113Rx Pkts Total number of received voice packets during this connection session. Rx Losts Total number of lost packe

Page 24 - 2900Gi and Vigor 2900i

Vigor2900 Series User’s Guide 6 11..11..55 FFrroonntt aanndd RReeaarr VViieeww ffoorr VViiggoorr22990000VV LED Status Explanation ACT (Ac

Page 25

Vigor2900 Series User’s Guide 114Enable Check this box to enable this function (for VLAN Configuration). P1 – P4 Check the box to make the computer

Page 26

Vigor2900 Series User’s Guide 115 3. To remove VLAN, uncheck the needed box and click OK to save the results. 33..1122 QQooSS CCoonnttrrooll SSee

Page 27

Vigor2900 Series User’s Guide 116Vigor routers as edge routers of DS domain shall check the marked DSCP value in the IP header of bypassing traffic,

Page 28

Vigor2900 Series User’s Guide 117Reserved Bandwidth Ratio It is reserved for the group index in the form of ratio of reserved bandwidth to upstream

Page 29

Vigor2900 Series User’s Guide 118level type by the system. Please assign one of the levels of the data for processing with QoS control. Service Type

Page 30

Vigor2900 Series User’s Guide 119 Please type in the service name, select Service type (TCP/UDP and both). Next choose either one of the port configu

Page 31

Vigor2900 Series User’s Guide 120 This page is left blank.

Page 32

Vigor2900 Series User’s Guide 1214 SSyysstteemm MMaannaaggeemmeenntt 44..11 OOnnlliinnee SSttaattuuss The Online Status provides basic network

Page 33

Vigor2900 Series User’s Guide 122 VPN Displays the VPN connection name. Type Displays the VPN connection type. Remote IP Displays the remote IP

Page 34

Vigor2900 Series User’s Guide 123 2. Click Backup button to get into the following dialog. 3. Click Save button to open another dialog for savin

Page 35 - Example 2

Vigor2900 Series User’s Guide 711..11..66 FFrroonntt aanndd RReeaarr VViieeww ffoorr VViiggoorr22990000VVGG LED Status Explanation ACT (A

Page 36 - Example 3

Vigor2900 Series User’s Guide 124 4. Click Save button, the configuration will download automatically to your computer as a file named config.cfg. T

Page 37

Vigor2900 Series User’s Guide 125RReessttoorree CCoonnffiigguurraattiioonn 1. Click Configuration Backup/Restoration on the System Management grou

Page 38

Vigor2900 Series User’s Guide 12644..44 SSyyssLLoogg//MMaaiill AAlleerrtt SSeettuupp SysLog is a popular utility in Unix world. To monitor router

Page 39

Vigor2900 Series User’s Guide 127 3. From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select

Page 40

Vigor2900 Series User’s Guide 128The Vigor router will send many types of SysLog messages. Some examples of the SysLog messages with their individual

Page 41

Vigor2900 Series User’s Guide 129 44..55 TTiimmee SSeettuupp It allows you to specify where the time of the router should be inquired from. Curre

Page 42 - - Manually enter the MAC

Vigor2900 Series User’s Guide 13044..66 MMaannaaggeemmeenntt SSeettuupp The port number used to send/receive SIP message for building a session. T

Page 43

Vigor2900 Series User’s Guide 131Trap Community Set trap community by typing a proper name. The default setting is public. Notification Host IP Set

Page 44

Vigor2900 Series User’s Guide 132Dial ISDN Clicking here causes the router to dial to the preset ISP. Click Internet Access Setup > Dial to a

Page 45

Vigor2900 Series User’s Guide 133 Click it to reload the page. In the left of each routing rule, you will see a key. These keys are defined as f

Page 46

Vigor2900 Series User’s Guide 8 11..11..77 FFrroonntt aanndd RReeaarr VViieeww ffoorr VViiggoorr22990000VVGGii LED Status Explanation ACT

Page 47

Vigor2900 Series User’s Guide 134 Click it to clear the whole table. 44..77..55 VViieewwiinngg DDHHCCPP AAssssiiggnneedd IIPP AAddddrreessssees

Page 48

Vigor2900 Series User’s Guide 135 Click it to reload the page. Each line across the screen indicates an active session. The following information i

Page 49

Vigor2900 Series User’s Guide 13644..99 FFiirrmmwwaarree UUppggrraaddee ((TTFFTTPP SSeerrvveerr)) Before upgrading your router firmware, you nee

Page 50

Vigor2900 Series User’s Guide 1375 AApppplliiccaattiioonn aanndd EExxaammpplleess 55..11 CCrreeaattee aa LLAANN--ttoo--LLAANN CCoonnnneecctti

Page 51

Vigor2900 Series User’s Guide 1384. For using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. For u

Page 52

Vigor2900 Series User’s Guide 1396. Set Common Settings as shown below. You should enable this profile. 7. Set Dial-Out Settings as shown below t

Page 53

Vigor2900 Series User’s Guide 1408. Set Dial-In settings as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based servic

Page 54

Vigor2900 Series User’s Guide 141Settings in Router B in the remote office: 1. Choose VPN and Remote Access Setup on the Advanced Setup group. 2. S

Page 55

Vigor2900 Series User’s Guide 142 5. Return to VPN and Remote Access Setup page and choose LAN-to-LAN Profile Setup. Click on one index number to e

Page 56

Vigor2900 Series User’s Guide 143 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP

Page 57

Vigor2900 Series User’s Guide 911..11..88 FFrroonntt aanndd RReeaarr VViieeww ffoorr VViiggoorr22990000VVii LED Status Explanation ACT (A

Page 58

Vigor2900 Series User’s Guide 144 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and

Page 59

Vigor2900 Series User’s Guide 14555..22 CCrreeaattee aa RReemmoottee DDiiaall--iinn UUsseerr CCoonnnneeccttiioonn BBeettwweeeenn tthhee TTee

Page 60

Vigor2900 Series User’s Guide 146 For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IKE/IP

Page 61

Vigor2900 Series User’s Guide 147connection. Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is

Page 62

Vigor2900 Series User’s Guide 148 3. In Step 2. Connect to VPN Server, click Insert button to add a new entry. If an IPSec-based service is sele

Page 63

Vigor2900 Series User’s Guide 149 If a PPP-based service is selected, you should further specify the remote VPN server IP address, Username, Passwor

Page 64

Vigor2900 Series User’s Guide 15055..33 QQooSS SSeettttiinngg EExxaammppllee Assume a teleworker sometimes works at home and takes care of childr

Page 65

Vigor2900 Series User’s Guide 151 7. If the worker has connected to the headquater using host to host VPN tunnel. (Please refer to Chapter 3 VPN for

Page 66

Vigor2900 Series User’s Guide 152 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. To use another DH

Page 67

Vigor2900 Series User’s Guide 153 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage.

Page 68

Vigor2900 Series User’s Guide 10 11..22 HHaarrddwwaarree IInnssttaallllaattiioonn Before starting to configure the router, you have to connect you

Page 69

Vigor2900 Series User’s Guide 15455..55 CCaalllliinngg SScceennaarriioo ffoorr VVooIIPP ffuunnccttiioonn 55..55..11 CCaalllliinngg vviiaa SS

Page 70

Vigor2900 Series User’s Guide 155Example 2: Both John and David have SIP Addresses from the same service provider. John’s SIP URL: [email protected] ,

Page 71

Vigor2900 Series User’s Guide 15655..55..22 PPeeeerr--ttoo--PPeeeerr CCaalllliinngg Example 3: Both Arnor and Paulin have Vigor routers respective

Page 72

Vigor2900 Series User’s Guide 15755..66 UUppggrraaddee FFiirrmmwwaarree ffoorr YYoouurr RRoouutteerr Before upgrading your router firmware, you

Page 73

Vigor2900 Series User’s Guide 1589. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instruc

Page 74

Vigor2900 Series User’s Guide 159 14. Click Send. 15. Now the firmware update is finished.

Page 75

Vigor2900 Series User’s Guide 160 This page is left blank.

Page 76

Vigor2900 Series User’s Guide 1616 TTrroouubbllee SShhoooottiinngg This section will guide you to solve abnormal situations if you cannot access i

Page 77

Vigor2900 Series User’s Guide 162FFoorr WWiinnddoowwss  The example is based on Windows XP. As to the examples for other operation systems, please

Page 78

Vigor2900 Series User’s Guide 1634. Select Obtain an IP address automatically and Obtain DNS server address automatically. FFoorr MMaaccOOss 1.

Page 79

Vigor2900 Series User’s Guide 112 CCoonnffiigguurriinngg BBaassiicc SSeettttiinnggss For use the router properly, it is necessary for you to chan

Page 80

Vigor2900 Series User’s Guide 16466..33 PPiinnggiinngg tthhee RRoouutteerr ffrroomm YYoouurr CCoommppuutteerr The default gateway IP address o

Page 81

Vigor2900 Series User’s Guide 165

Page 82

Vigor2900 Series User’s Guide 16666..44 CChheecckkiinngg IIff tthhee IISSPP SSeettttiinnggss aarree OOKK oorr NNoott Click Internet Access

Page 83

Vigor2900 Series User’s Guide 167 HHaarrddwwaarree RReesseett While the router is running (ACT LED blinking), press the Factory Reset button and ho

Page 84

Vigor2900 Series User’s Guide 12 Notice: Some of the settings might not appear as above, because the home page will change slightly according to th

Page 85 - Here you can

Vigor2900 Series User’s Guide 13 22..22 QQuuiicckk SSttaarrtt WWiizzaarrdd If your router can be under an environment with high speed NAT, the c

Page 86

Vigor2900 Series User’s Guide ii

Page 87

Vigor2900 Series User’s Guide 14 Please select the appropriate time zone for the router. Then, click Next. 22..22..11 SSeelleeccttiinngg PPrrootto

Page 88

Vigor2900 Series User’s Guide 15PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet.

Page 89

Vigor2900 Series User’s Guide 16 22..22..33 PPPPTTPP For PPTP connection, please click PPTP as the protocol. Click Next to see the following pa

Page 90

Vigor2900 Series User’s Guide 17PPTP Server IP Specify the IP address of the PPTP Server. After finishing the settings in this page, click Next to s

Page 91

Vigor2900 Series User’s Guide 18 22..22..44 LL22TTPP Note: This setting is available only for Vigor 2900, Vigor 2900G, Vigor 2900Gi and Vigor 2900i

Page 92

Vigor2900 Series User’s Guide 19Subnet Mask Type the subnet mask. PPTP Server IP Specify the IP address of the PPTP Server. After finishing the set

Page 93

Vigor2900 Series User’s Guide 20 Click Next to see the following page. WAN IP Type the WAN IP address that obtained from ISP. Subnet Mask Type the

Page 94

Vigor2900 Series User’s Guide 2122..22..66 DDHHCCPP Click DHCP as the protocol. Click Next to see the following page. Host Name Specify the

Page 95

Vigor2900 Series User’s Guide 22 Click Finish to save current settings and restart the router. 22..33 LLAANN TTCCPP//IIPP aanndd DDHHCCPP SSeer

Page 96

Vigor2900 Series User’s Guide 23will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outsid

Page 97

Vigor2900 Series User’s Guide iiiTTaabbllee ooff CCoonntteennttss 1 Preface ...

Page 98

Vigor2900 Series User’s Guide 24 WWhhaatt aarree VViirrttuuaall LLAANNss You can group local hosts by physical ports and create up to 4 virtual L

Page 99

Vigor2900 Series User’s Guide 252nd DHCP Server You can configure the router to serve as a DHCP server for the 2nd subnet. Start IP Address: Enter

Page 100

Vigor2900 Series User’s Guide 26 DHCP server for your network. If you want to use another DHCP server in the network other than the Vigor Router’s,

Page 101

Vigor2900 Series User’s Guide 2722..44 IISSDDNN SSeettuupp ISDN stands for Integrated Services Digital Network. It is an international communicati

Page 102

Vigor2900 Series User’s Guide 28 which can simulate a real ISDN terminal adapter installed on your computer. You can install the CAPI-compliant softw

Page 103

Vigor2900 Series User’s Guide 29SSeeccuurriittyy OOvveerrvviieeww Real-time Hardware Encryption: Vigor Router is equipped with a hardware AES encry

Page 104

Vigor2900 Series User’s Guide 30 Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wir

Page 105

Vigor2900 Series User’s Guide 3122..55..22 GGeenneerraall SSeettttiinnggss By clicking the General Settings, a new web page will appear so that yo

Page 106

Vigor2900 Series User’s Guide 32 LAN. SSID can be any text numbers or various special characters. Channel The channel of frequency of the wireless L

Page 107

Vigor2900 Series User’s Guide 3322..55..33 SSeeccuurriittyy By clicking the Security Settings, a new web page will appear so that you could configu

Page 108

Vigor2900 Series User’s Guide iv 3.1 Dynamic DNS Setup ...

Page 109

Vigor2900 Series User’s Guide 34 applicable if you select WPA/PSK. WEP/802.1x or WPA/802.1x - Accept WEP or WPA clients with 802.1x authentication. O

Page 110

Vigor2900 Series User’s Guide 35 All wireless devices must support the same WEP encryption bit size and have the same key. Four keys can be entered h

Page 111

Vigor2900 Series User’s Guide 36 Client’s MAC Address - Manually enter the MAC address of wireless client. Attribute v - select to apply VPN to the c

Page 112

Vigor2900 Series User’s Guide 3722..66 IInntteerrnneett AAcccceessss SSeettuupp Quick Start Wizard offers user an easy method to quick setup the

Page 113

Vigor2900 Series User’s Guide 38 If your router supports ISDN function, you will get the following page with ISDN dial-up Internet Access. The foll

Page 114

Vigor2900 Series User’s Guide 39PPPoE Link Click Enable for activating this function. If you click Disable, this function will be closed and all the

Page 115

Vigor2900 Series User’s Guide 40 By checking the checkbox Join NAT IP Pool, data from NAT hosts will be round-robin forwarded on a session basis. I

Page 116

Vigor2900 Series User’s Guide 41IP addresses for other purpose, such as DMZ host, Open Ports. WAN physical type Check and choose a proper type us

Page 117

Vigor2900 Series User’s Guide 42 Access Control Click Enable for activating this function. If you click Disable, this function will be closed and al

Page 118

Vigor2900 Series User’s Guide 43PING Interval - Enter the interval for the system to execute the PING operation. WAN physical type Check and choose

Page 119

Vigor2900 Series User’s Guide v4.7.2 Triggered Dial-out Packet Header...

Page 120

Vigor2900 Series User’s Guide 44 Specify an IP address – Click this radio button to specify some data if you want to use Static IP mode. IP Address

Page 121

Vigor2900 Series User’s Guide 45 PPTP Setup PPTP Link - Click Enable to enable a PPTP client to establish a tunnel to a DSL modem on the WAN inter

Page 122

Vigor2900 Series User’s Guide 46 Idle Timeout - Set the timeout for breaking down the Internet after passing through the time without any action. IP

Page 123

Vigor2900 Series User’s Guide 47 L2TP Setup L2TP Link - Click Enable to enable a L2TP client to establish a tunnel to a DSL modem on the WAN inter

Page 124

Vigor2900 Series User’s Guide 48 use the same physical type; otherwise, the connection might be failed due to inconsistent type. It is recommended fo

Page 125

Vigor2900 Series User’s Guide 49Idle Timeout Idle timeout means the router will be disconnect after being idle for a preset amount of time. The defa

Page 126 - This page is left blank

Vigor2900 Series User’s Guide 50 z The Virtual TA client only supports the CAPI 2.0 protocol and has no built-in FAX engine. z One ISDN BRI interf

Page 127

Vigor2900 Series User’s Guide 51 Virtual TA Server Enable: Select it to activate the server. Disable: Select it to deactivate the server. All Virtua

Page 128

Vigor2900 Series User’s Guide 52 On the client - Right-click the mouse on the VT icon. The following pop-up menu will be shown. Click the Virtual T

Page 129

Vigor2900 Series User’s Guide 533AAddvvaanncceedd WWeebb CCoonnffiigguurraattiioonn After finished basic configuration of the router, you can acce

Page 131

Vigor2900 Series User’s Guide 54 Active Display if this account is active or inactive. View Log It opens another dialog and shows log for DDNS info

Page 132

Vigor2900 Series User’s Guide 5533..22 CCaallll CCoonnttrrooll aanndd PPPPPP//MMPP SSeettuupp Some applications require that the router (only f

Page 133

Vigor2900 Series User’s Guide 56 PPP Authentication It specifies the PPP authentication method for PPP/MP connections. Normally you can set it to PA

Page 134

Vigor2900 Series User’s Guide 57 Index Click the number below Index to access into the setting page of schedule. Status Display if this schedule se

Page 135

Vigor2900 Series User’s Guide 58 Disable Dial-On-Demand -Specify the connection to be up when it has traffic on the line. Once there is no traffic ov

Page 136

Vigor2900 Series User’s Guide 59On NAT page, you will see the private IP address defined in RFC-1918. Usually we use the 192.168.1.0/24 subnet for th

Page 137

Vigor2900 Series User’s Guide 60 Service Name Enter the description of the specific network service. Protocol Select the transport layer protocol

Page 138

Vigor2900 Series User’s Guide 6133..44..22 DDMMZZ HHoosstt SSeettuupp As mentioned above, Port Redirection can redirect incoming TCP/UDP or other

Page 139

Vigor2900 Series User’s Guide 62 Enable Check to enable the DMZ Host function. Private IP Enter the private IP address of the DMZ host, or click C

Page 140

Vigor2900 Series User’s Guide 63 Index Indicate the relative number for the particular entry that you want to offer service in a local host. You sho

Page 141

Vigor2900 Series User’s Guide 11 PPrreeffaaccee Targeting requirement for residential, SOHO (Small Office and Home Office) and business users, the

Page 142

Vigor2900 Series User’s Guide 64 However, if you previously have set up WAN Alias in Internet Access>>PPPoE, you will find that WAN IP appeare

Page 143

Vigor2900 Series User’s Guide 65 33..44..44 VViieeww WWeellll--KKnnoowwnn PPoorrttss LLiisstt There is a list providing some well-known port num

Page 144

Vigor2900 Series User’s Guide 66 When you press the WAN IP Alias button, a window will show up for you to input other public IP addresses. The Join

Page 145

Vigor2900 Series User’s Guide 67 33..55 RRAADDIIUUSS SSeettuupp Remote Authentication Dial-In User Service (RADIUS) is a security authentication

Page 146

Vigor2900 Series User’s Guide 68 Shared Secret The RADIUS server and client share a secret that is used to authenticate the messages sent between th

Page 147

Vigor2900 Series User’s Guide 69is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can access the Internet via the router, and

Page 148

Vigor2900 Series User’s Guide 70 DDeelleettee SSttaattiicc RRoouuttee 1. Click the Index Number that you want to delete from the Static Route Co

Page 149

Vigor2900 Series User’s Guide 71DDeeaaccttiivvaattee SSttaattiicc RRoouuttee 1. Click the Index Number that you want to disable from the Static R

Page 150

Vigor2900 Series User’s Guide 72 33..77 IIPP FFiilltteerr//FFiirreewwaallll SSeettuupp 33..77..11 BBaassiiccss ffoorr FFiirreewwaallll While

Page 151

Vigor2900 Series User’s Guide 73z Data Filter - When there is an existing Internet connection, Data Filter is applied to incoming and outgoing traff

Page 152

Vigor2900 Series User’s Guide 2 11..11..11 FFrroonntt aanndd RReeaarr VViieeww ffoorr VViiggoorr22990000 ACTDMZQoSAttack VPN Printer WANP1

Page 153

Vigor2900 Series User’s Guide 74 DDeenniiaall ooff SSeerrvviiccee ((DDooSS)) DDeeffeennssee The DoS Defense functionality helps you to detect an

Page 154

Vigor2900 Series User’s Guide 75WWeebb CCoonntteenntt FFiilltteerr ((ffoorr VV mmooddeellss oonnllyy)) We all know that the content on the Int

Page 155

Vigor2900 Series User’s Guide 76 Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the button will open Edit Filter Rule w

Page 156

Vigor2900 Series User’s Guide 77Pass or Block Specifies the action to be taken when packets match the rule. Block Immediately - Packets matching th

Page 157

Vigor2900 Series User’s Guide 78 Don’t care -No action will be taken towards fragmented packets. Unfragmented -Apply the rule to unfragmented pack

Page 158

Vigor2900 Series User’s Guide 79EExxaammppllee ooff RReessttrriiccttiinngg UUnnaauutthhoorriizzeedd IInntteerrnneett SSeerrvviicceess To set a

Page 159

Vigor2900 Series User’s Guide 80 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Dat

Page 160

Vigor2900 Series User’s Guide 81 Active Check this box to invoke this setting. MAC Address Type in the MAC Address of the device that the router co

Page 161

Vigor2900 Series User’s Guide 82 Enable Dos Defense Check the box to activate the DoS Defense Functionality. Enable SYN flood defense Check the box

Page 162

Vigor2900 Series User’s Guide 83header. The reason for limitation is IP option appears to be a vulnerability of the security for the LAN because it w

Page 163

Vigor2900 Series User’s Guide 311..11..22 FFrroonntt aanndd RReeaarr VViieeww ffoorr VViiggoorr22990000GG ACTQoS WLAN Attack VPN Printer WANP1

Page 164

Vigor2900 Series User’s Guide 84 the protocol types greater than 100 are reserved and undefined at this time. Therefore, the router should have abili

Page 165

Vigor2900 Series User’s Guide 85 Enable URL Access Control Check the box to activate URL Access Control. Block websites with matching keywords Cl

Page 166

Vigor2900 Series User’s Guide 86 Prevent web access from IP address Check the box to deny any web surfing activity using IP address, such as http://2

Page 167

Vigor2900 Series User’s Guide 8733..77..66 WWeebb CCoonntteenntt FFiilltteerr ((ffoorr VV mmooddeellss oonnllyy)) Choose IP Filter/Firewall S

Page 168

Vigor2900 Series User’s Guide 88 33..77..77 IIMM BBlloocckkiinngg IM Blocking means instant messenger blocking. You will see a list of common IM (

Page 169

Vigor2900 Series User’s Guide 89 Action Specify the action for each protocol. Allow – Allow the client to access into the application through the sp

Page 170

Vigor2900 Series User’s Guide 90 33..88 VVPPNN aanndd RReemmoottee AAcccceessss SSeettuupp A Virtual Private Network (VPN) is the extension of

Page 171

Vigor2900 Series User’s Guide 91 Dial-In PPP Authentication PAP Only - Select this option to force the router to authenticate dial-in users with the

Page 172

Vigor2900 Series User’s Guide 92 33..88..33 VVPPNN IIKKEE//IIPPSSeecc GGeenneerraall SSeettuupp In IPSec General Setup, there are two major part

Page 173

Vigor2900 Series User’s Guide 93(data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES),

Comments to this Manuals

No comments