Draytek VigorPro 5300VSn Guida Utente

VigorPro 5300 Unified Security Firewall User’s Guide Version: 2.0 Date: 2008/05/29 Copyright 2008 All rights reserved. This pu

VigorPro5300 Series User’s Guide 2 11..22 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss 11..11..11 FFoorr VViiggoorrPPrroo55330000

VigorPro5300 Series User’s Guide 92 packets per second. Block IP options Check the box to activate the Block IP options function. The Vigor router w

VigorPro5300 Series User’s Guide 93reject this kind of packets. Warning Messages We provide Syslog function for user to retrieve message from Vigor

VigorPro5300 Series User’s Guide 94 33..77 DDeeffeennssee CCoonnffiigguurraattiioonn This menu allows you to set profiles for, activate, and upgra

VigorPro5300 Series User’s Guide 95 Anti-Intrusion Control Setup This field will display the signature version of this router. The default signature

VigorPro5300 Series User’s Guide 96 Enable Reset procession Click this radio button to break down the communication between your computer and specif

VigorPro5300 Series User’s Guide 97 Enable Check to enable this rule. If you uncheck this box, the corresponding settings for the rule will not be

VigorPro5300 Series User’s Guide 98 click Go to the specified page. Or you can click ⏐>, >>, << or >⏐ button on the right side of t

VigorPro5300 Series User’s Guide 99 Profile Name Type a name for the profile. Protocol Currently, only the files transmitted through the protocols

VigorPro5300 Series User’s Guide 100 Detect Macro Attachment The file with macro attachment will be passed/destroyed/reset under different

VigorPro5300 Series User’s Guide 101SID/NAME To find the specific type of anti-virus, you can type its SID number or name in this field if you know,

VigorPro5300 Series User’s Guide 3 Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blink

VigorPro5300 Series User’s Guide 10233..77..22..33 FFiillee FFiilltteerr PPrrooffiillee To avoid confidential file being leaked out by someone el

VigorPro5300 Series User’s Guide 103Default Action Choose one of the actions (Scan, Non-Scan, Destroy) as the default action if the file does not me

VigorPro5300 Series User’s Guide 104To activate function of Anti-Spam, you have to configure profile(s) for your computer first. Please open Defense

VigorPro5300 Series User’s Guide 105Profile Name Type a name for such profile setting. Choose Protocol to Scan Spam Spam files usually come with

VigorPro5300 Series User’s Guide 106following dialog. The keyword/group that you have set on Object Settings>>Keyword Object/ Object Settings&g

VigorPro5300 Series User’s Guide 107 Activate The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account an

VigorPro5300 Series User’s Guide 108 Signature Upgrade Setting It displays the signature version for your reference. There are three levels for the s

VigorPro5300 Series User’s Guide 109 After downloading is finished, the signature version will be upgraded and displayed on the web page. Upgrade

VigorPro5300 Series User’s Guide 110 33..88 BBaannddwwiiddtthh MMaannaaggeemmeenntt Below shows the menu items for Bandwidth Management. 33..88..

VigorPro5300 Series User’s Guide 111 To activate the function of limit session, simply click Enable and set the default session limit. Enable Click

VigorPro5300 Series User’s Guide 4 11..11..22 FFoorr VViiggoorrPPrroo55330000nn LED Status Explanation Blinking The router is powered on and r

VigorPro5300 Series User’s Guide 112In the Bandwidth Management menu, click Bandwidth Limit to open the web page. To activate the function of limit

VigorPro5300 Series User’s Guide 113have set in that web page. 33..88..33 QQuuaalliittyy ooff SSeerrvviiccee Deploying QoS (Quality of Service) m

VigorPro5300 Series User’s Guide 114 However, each node may take different attitude toward packets with high priority marking since it may bind with

VigorPro5300 Series User’s Guide 115 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the

VigorPro5300 Series User’s Guide 116(for WAN1/WAN2) on the Bandwith Management>>Quality of Service. EEddiitt tthhee CCllaassss RRuullee ff

VigorPro5300 Series User’s Guide 117For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Loc

VigorPro5300 Series User’s Guide 118 EEddiitt tthhee SSeerrvviiccee TTyyppee ffoorr CCllaassss RRuullee To add a new service type, edit or del

VigorPro5300 Series User’s Guide 119 Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP) for

VigorPro5300 Series User’s Guide 12033..99 AApppplliiccaattiioonnss Below shows the menu items for Applications. 33..99..11 DDyynnaammiicc DDNNS

VigorPro5300 Series User’s Guide 121WAN Interface Display current WAN interface used for accessing Internet. Domain Name Display the domain name th

VigorPro5300 Series User’s Guide 5 Interface Description Wireless LAN ON/OFF/WPS Factory Reset Press "Wireless LAN ON/OFF/WPS" button

VigorPro5300 Series User’s Guide 122delivery will be attempted to your host first, and then to the host you specify here if that fails. 4. Click OK

VigorPro5300 Series User’s Guide 123 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the

VigorPro5300 Series User’s Guide 1243. Configure the Force Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPP

VigorPro5300 Series User’s Guide 12533..99..44 UUPPnnPP The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devi

VigorPro5300 Series User’s Guide 126The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall

VigorPro5300 Series User’s Guide 12733..99..55 IIGGMMPP IGMP is the abbreviation of Internet Group Management Protocol. It is a communication proto

VigorPro5300 Series User’s Guide 128 Wake by Two types provide for you to wake up the binded IP. If you choose Wake by MAC Address, you have to type

VigorPro5300 Series User’s Guide 12933..1100 VVPPNN aanndd RReemmoottee AAcccceessss A Virtual Private Network (VPN) is the extension of a priva

VigorPro5300 Series User’s Guide 13033..1100..22 PPPPPP GGeenneerraall SSeettuupp This submenu only applies to PPP-related VPN connections, such

VigorPro5300 Series User’s Guide 131For example, if the local private network is 192.168.1.0/255.255.255.0, you could choose 192.168.1.200 as the Sta

VigorPro5300 Series User’s Guide 6 11..11..33 FFoorr VViiggoorrPPrroo55330000VVnn LED Status Explanation Blinking The router is powered on and

VigorPro5300 Series User’s Guide 132Pre-Shared Key- Specify a key for IKE authentication Confirm Pre-Shared Key-Confirm the pre-shared key. IPSec Sec

VigorPro5300 Series User’s Guide 133 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identi

VigorPro5300 Series User’s Guide 13433..1100..55 RReemmoottee DDiiaall--iinn UUsseerr You can manage remote access by maintaining a table of remo

VigorPro5300 Series User’s Guide 135 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the l

VigorPro5300 Series User’s Guide 136SSL Tunnel It allows the remote dial-in user to make an SSL VPN Tunnel connection through Internet, suitable for

VigorPro5300 Series User’s Guide 137 To check if SSL Web Proxy is activated or not, please open Draytek SSL VPN portal interface. From the web page,

VigorPro5300 Series User’s Guide 138Medium -Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this optio

VigorPro5300 Series User’s Guide 139Set to Factory Default Click to clear all indexes. Name Indicate the name of the LAN-to-LAN profile. The symbol ?

VigorPro5300 Series User’s Guide 140WAN1 Only - While connecting, the router will use WAN1 as the only channel for VPN connection. WAN2 First - Whi

VigorPro5300 Series User’s Guide 141PPTP Build a PPTP VPN connection to the server through the Internet. You should set the identity like User Name

VigorPro5300 Series User’s Guide 7 Interface Description Wireless LAN ON/OFF/WPS Factory Reset Press "Wireless LAN ON/OFF/WPS" button

VigorPro5300 Series User’s Guide 142AES with Authentication-Use AES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. Advanced S

VigorPro5300 Series User’s Guide 143remote peer requires the Vigor router to callback, the local ISDN number will be provided to the remote peer. Che

VigorPro5300 Series User’s Guide 144None- Do not apply the IPSec policy. Accordingly, the VPN connection employed the L2TP without IPSec policy can b

VigorPro5300 Series User’s Guide 145Callback number-The option is for extra security. Once enabled, the router will ONLY call back to the specified C

VigorPro5300 Series User’s Guide 146have to do IP, please choose NAT, otherwise choose Route. Change default route to this VPN tunnel (Only single WA

VigorPro5300 Series User’s Guide 14733..1111 CCeerrttiiffiiccaattee MMaannaaggeemmeenntt A digital certificate works as an electronic ID, which is

VigorPro5300 Series User’s Guide 148 Type in all the information that the window request. Then click Generate again. Import Click this button to imp

VigorPro5300 Series User’s Guide 14933..1111..22 TTrruusstteedd CCAA CCeerrttiiffiiccaattee Trusted CA certificate lists three sets of trusted CA

VigorPro5300 Series User’s Guide 15033..1111..33 CCeerrttiiffiiccaattee BBaacckkuupp Local certificate and Trusted CA certificate for this router

VigorPro5300 Series User’s Guide 151registration messages to validate. Then, both parties’ SIP proxies will forward the sequence of messages to calle

VigorPro5300 Series User’s Guide 8 11..11..44 FFoorr VViiggoorrPPrroo55330000VVSS LED Status Explanation Blinking The router is powered on and

VigorPro5300 Series User’s Guide 152 PPhhoonnee BBooookk In this section, you can set your VoIP contacts in the “phonebook”. It can help you to mak

VigorPro5300 Series User’s Guide 153 Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any numb

VigorPro5300 Series User’s Guide 154replace the VoIP phone number. At this time, the phone call will be changed from VoIP phone into PSTN call accord

VigorPro5300 Series User’s Guide 155Strip - When you choose this mode, the OP number will be deleted by the prefix number for calling out through the

VigorPro5300 Series User’s Guide 156 Click any index number to display the dial plan setup page. Enable Click this to enable this entry. Call Dir

VigorPro5300 Series User’s Guide 157Interface “All” means all the phone calls (including ISDN & PSTN) will be blocked with such mechanism. ”IS

VigorPro5300 Series User’s Guide 158 RReeggiioonnaall This page allows you to process incoming or outgoing phone calls by regional. Default values (

VigorPro5300 Series User’s Guide 159Call Forward [Busy][Act] Dial the number typed in this field to forward all the incoming calls to the specified

VigorPro5300 Series User’s Guide 160 Index Click this link to access into next page for setting SIP account. Profile Display the profile name of th

VigorPro5300 Series User’s Guide 161Domain/Realm Display the domain name or IP address of the SIP registrar server. Proxy Display the domain name o

VigorPro5300 Series User’s Guide 9On The port is connected with 100Mbps. Right LED (Green) Off The port is connected with 10Mbps. On The port is c

VigorPro5300 Series User’s Guide 162The system will select a proper way for your VoIP call. SIP Port Set the port number for sending/receiving SIP

VigorPro5300 Series User’s Guide 163Any as ring port for specified SIP account. By the way, ISDN-S0 can be used by mapping with MSN numbers. Ring P

VigorPro5300 Series User’s Guide 164Tone - Display the tone settings that configured in the advanced settings page of Phone Index. Gain - Display the

VigorPro5300 Series User’s Guide 165 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up

VigorPro5300 Series User’s Guide 166detailed configuration. Index (1-60) in Phone Book - Enter the index of phone book profiles. Refer to section 3.1

VigorPro5300 Series User’s Guide 167Play dial tone only when account registered - Check this box to invoke the function. Default Call Route It deter

VigorPro5300 Series User’s Guide 168 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for V

VigorPro5300 Series User’s Guide 169DDeettaaiilleedd SSeettttiinnggss ffoorr IISSDDNN11--SS00 PPoorrtt Click the number link of Index 3 (ISDN1-S

VigorPro5300 Series User’s Guide 170SIP URL – Type in the SIP URL (e.g., [email protected] or [email protected]) as the site for call forwarded. Time Out –

VigorPro5300 Series User’s Guide 171something to save the bandwidth for other using. Click On to invoke this function; click off to close the functio

VigorPro5300 Series User’s Guide 10 11..11..55 FFoorr VViiggoorrPPrroo55330000VVSSnn LED Status Explanation Blinking The router is powered on

VigorPro5300 Series User’s Guide 172 Region Select the proper region which you are located. The common settings of Caller ID Type, Dial tone, Ringin

VigorPro5300 Series User’s Guide 173default setting. Ring Frequency - This setting is used to drive the frequency of the ring tone. It is recommended

VigorPro5300 Series User’s Guide 174 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up

VigorPro5300 Series User’s Guide 175profiles. Refer to section 3.10.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check

VigorPro5300 Series User’s Guide 176configured. In addition, you can specify which port (both phone 1 and phone 2, phone 1 only or phone 2 only) will

VigorPro5300 Series User’s Guide 177 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for V

VigorPro5300 Series User’s Guide 178the default value was 101. This setting is available for the OutBand (RFC2833) mode. 33..1122..44 SSttaattuuss

VigorPro5300 Series User’s Guide 179ALERTING - Indicates that a call is coming. ACTIVE-Indicates that the VoIP connection is launched. Codec Indicat

VigorPro5300 Series User’s Guide 18033..1133..22 GGeenneerraall SSeettttiinnggss This web page allows you to enable ISDN function. ISDN Port Cl

VigorPro5300 Series User’s Guide 181MSN Numbers for the Router MSN Numbers mean that the router is able to accept only number-matched incoming calls.

VigorPro5300 Series User’s Guide 11Blinking The data is transmitting. On The port is connected with 100Mbps. Right LED (Green) Off The port is con

VigorPro5300 Series User’s Guide 182the external MSN numbers that you setup will be displayed to remote side. AApppplliiccaattiioonn EExxaammppllee

VigorPro5300 Series User’s Guide 18333..1133..33 DDiiaall ttoo aa SSiinnggllee IISSPP//DDiiaall ttoo DDuuaall IISSPPss Select Dialing to a S

VigorPro5300 Series User’s Guide 184IP Address Assignment Method (IPCP) In most environments, you should not change these settings as most ISPs provi

VigorPro5300 Series User’s Guide 185default is 180 seconds. If you set the time to 0, the ISDN connection to the ISP will always remain on. Primary

VigorPro5300 Series User’s Guide 186 33..1133..44 CCaallll CCoonnttrrooll Some applications require that the router (only for the ISDN models) be

VigorPro5300 Series User’s Guide 187access the server which is off the Internet in the head office. To remotely make the server to be available on th

VigorPro5300 Series User’s Guide 18833..1144 WWiirreelleessss LLAANN This function is used for G models only. 33..1144..11 BBaassiicc CCoonnccee

VigorPro5300 Series User’s Guide 189WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-b

VigorPro5300 Series User’s Guide 190Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN f

VigorPro5300 Series User’s Guide 191Enable Wireless LAN Check the box to enable wireless function. Mode At present, the router can connect to Mixed

VigorPro5300 Series User’s Guide ii Safety Instructions and Approval Safety Instructions z Read the installation guide thoroughly before you set up

VigorPro5300 Series User’s Guide 12 11..33 HHaarrddwwaarree IInnssttaallllaattiioonn Before starting to configure the router, you have to connect

VigorPro5300 Series User’s Guide 192Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless ne

VigorPro5300 Series User’s Guide 193 Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP - Ac

VigorPro5300 Series User’s Guide 194128-Bit - For 128 bits WEP key, either 13 ASCII characters, such as ABCDEFGHIJKLM (or 26 hexadecimal digits leadi

VigorPro5300 Series User’s Guide 195with MAC address not listed above are allowed to access AP. Enable Mac Access Filter Select to enable the MAC A

VigorPro5300 Series User’s Guide 196z On the side of Vigor 2930 series which served as an AP, press Factory Reset button once on the front panel of

VigorPro5300 Series User’s Guide 197 Enable WPS Check this box to enable WPS setting. WPS Status Display related system information for WPS. If the

VigorPro5300 Series User’s Guide 198 The application for the WDS-Repeater mode is depicted as below: The major difference between these two modes

VigorPro5300 Series User’s Guide 199 Click WDS from Wireless LAN menu. The following page will be shown. Mode Choose the mode for WDS setting. Disa

VigorPro5300 Series User’s Guide 200one. Security There are three types for security, Disable, WEP and Pre-shared key. The setting you choose here

VigorPro5300 Series User’s Guide 201 If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the pag

VigorPro5300 Series User’s Guide 13NT mode in VoIP>> Phone Settings, the orange LED will light on to indicate ISDN2-S0 is selected. And by usin

VigorPro5300 Series User’s Guide 202 Refresh Click this button to refresh the status of station list. Add Click this button to add current selected

VigorPro5300 Series User’s Guide 203 SSID rate control controls the data transmission rate through wireless connection. Enable Check Enable for typi

VigorPro5300 Series User’s Guide 204 Name Display the name of the profile that you create. URL Display the URL. Active Display current status (act

VigorPro5300 Series User’s Guide 205WAN to LAN access, the web server must be configured behind vigor router; 2) web server gateway must be indicated

VigorPro5300 Series User’s Guide 206 The SSL Web Proxy profile names will be displayed (together with check box) as shown below. 33..1155..33 OOnnl

VigorPro5300 Series User’s Guide 207 Active User Display current user who visit SSL VPN server. Host IP Displays the IP address for the host. Tim

VigorPro5300 Series User’s Guide 208 33..1166 SSyysstteemm MMaaiinntteennaannccee For the system setup, there are several items that you have to k

VigorPro5300 Series User’s Guide 2091st IP Address Display the IP address of the LAN interface. 1st Subnet Mask Display the subnet mask address of

VigorPro5300 Series User’s Guide 210 2. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving co

VigorPro5300 Series User’s Guide 211RReessttoorree CCoonnffiigguurraattiioonn 1. Go to System Maintenance >> Configuration Backup. The follo

VigorPro5300 Series User’s Guide 14

VigorPro5300 Series User’s Guide 212Send a test e-mail Make a simple test for the e-mail address specified in this page. Please assign the mail addr

VigorPro5300 Series User’s Guide 213

VigorPro5300 Series User’s Guide 21433..1166..55 TTiimmee aanndd DDaattee It allows you to specify where the time of the router should be inquire

VigorPro5300 Series User’s Guide 21533..1166..66 MMaannaaggeemmeenntt This page allows you to manage the settings for access control, access list,

VigorPro5300 Series User’s Guide 216Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one ho

VigorPro5300 Series User’s Guide 21733..1166..88 FFiirrmmwwaarree UUppggrraaddee Before upgrading your router firmware, you need to install the

VigorPro5300 Series User’s Guide 21833..1177 DDiiaaggnnoossttiiccss Diagnostic Tools provide a useful way to view or diagnose the status of your Vi

VigorPro5300 Series User’s Guide 21933..1177..22 RRoouuttiinngg TTaabbllee Click Diagnostics and click Routing Table to open the web page. Refres

VigorPro5300 Series User’s Guide 22033..1177..44 DDHHCCPP TTaabbllee The facility provides information on IP address assignments. This information

VigorPro5300 Series User’s Guide 221Interface It indicates the interface of the WAN connection. Refresh Click it to reload the page. 33..1177..

VigorPro5300 Series User’s Guide 152 CCoonnffiigguurriinngg BBaassiicc SSeettttiinnggss For use the router properly, it is necessary for you to c

VigorPro5300 Series User’s Guide 222Index Display the number of the data flow. IP Address Display the IP address of the monitored device. TX rate (

VigorPro5300 Series User’s Guide 223The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1/WAN2 Bandwidth chart,

VigorPro5300 Series User’s Guide 22433..1177..99 TTrraaccee RRoouuttee Click Diagnostics and click Trace Route to open the web page. This page all

VigorPro5300 Series User’s Guide 2254 RReeggiissttrraattiioonn ffoorr tthhee RRoouutteerr To use the anti-intrusion, anti-virus and anti-spam fe

VigorPro5300 Series User’s Guide 2262. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this

VigorPro5300 Series User’s Guide 2274. Choose proper selection for your computer and click Continue. 5. Now you have created an account successful

VigorPro5300 Series User’s Guide 2287. Click the Activate my Account link to enable the account that you created. The following screen will be shown

VigorPro5300 Series User’s Guide 22944..22 CCrreeaattiinngg aanndd AAccttiivvaattiinngg aann AAccccoouunntt ffrroomm RRoouutteerr WWeebb CCo

VigorPro5300 Series User’s Guide 2304. A Re-login page will be shown on the screen. 5. Locate and click Create an account now link on the bottom

VigorPro5300 Series User’s Guide 2316. Type your personal information in this page and then click Continue. 7. Choose proper selection for your co

VigorPro5300 Series User’s Guide 16 3. Now, the Main Screen will pop up. Note: The home page will change slightly in accordance with the router

VigorPro5300 Series User’s Guide 2328. Now you have created an account successfully. 9. Check to see the confirmation email with the title of Ne

VigorPro5300 Series User’s Guide 23311. When you see the following page, please type in the account and password (that you just created) in the fiel

VigorPro5300 Series User’s Guide 23444..33 RReeggiisstteerriinngg YYoouurr VViiggoorr RRoouutteerr You have activated the new account for the ro

VigorPro5300 Series User’s Guide 2354. A Re-login page will be shown on the screen. Please type the account and password that you created previously

VigorPro5300 Series User’s Guide 2366. When the following page appears, please type in Nick Name (for the router) and choose the right purchase date

VigorPro5300 Series User’s Guide 23744..44 AAccttiivvaattiinngg AAnnttii--VViirruuss//AAnnttii--IInnttrruussiioonn//AAnnttii--SSppaamm SSeerrvviic

VigorPro5300 Series User’s Guide 2384. A Re-login page will be shown on the screen. Please type the account and password that you created previously

VigorPro5300 Series User’s Guide 2396. From the Device’s Service section, click the Activate button for AI-AV (Anti-Intrusion & Anti-Virus) serv

VigorPro5300 Series User’s Guide 2407. In the following page, check the box of “I have read and accept the above Agreement”. The system will find ou

VigorPro5300 Series User’s Guide 24110. Click Close. 11. Open Defense Configuration>>Status page of the router’s web configurator. The start

VigorPro5300 Series User’s Guide 17 22..22 QQuuiicckk SSttaarrtt WWiizzaarrdd If your router can be under an environment with high speed NAT, th

VigorPro5300 Series User’s Guide 24244..44..22 FFoorr AAnnttii--SSppaamm SSeerrvviiccee Please follow the steps below to activate Anti-Spam Servi

VigorPro5300 Series User’s Guide 2434. A Re-login page will be shown on the screen. Please type the account and password that you created previously

VigorPro5300 Series User’s Guide 2446. From the Device’s Service section, click the Trial button for AS (Anti-Spam) service. 7. In this page, chec

VigorPro5300 Series User’s Guide 245 9. Next, the DrayTek Service Activation screen will be shown as the following. 10. Click Close. Now, you h

VigorPro5300 Series User’s Guide 2463. Click the Activate link from Anti-Spam License to activate Anti-Spam service. 4. A Re-login page will be sh

VigorPro5300 Series User’s Guide 2475. On the web page of My Product, you can find a list of the devices that you add with the above steps. Currentl

VigorPro5300 Series User’s Guide 2487. In this page, type the License Number stated on the Anti-Spam license card in the field of License Number. Th

VigorPro5300 Series User’s Guide 2499. In this page, check the box of “I have read and accept the above Agreement”. The system will find out the dat

VigorPro5300 Series User’s Guide 250 13. Click Close to exit.

VigorPro5300 Series User’s Guide 25144..55 AAppppllyyiinngg aa NNeeww LLiicceennssee ffoorr AAnnttii--IInnttrruussiioonn//AAnnttii--VViirruuss

VigorPro5300 Series User’s Guide 18 On the next page as shown below, please select the appropriate Internet access type according to the information

VigorPro5300 Series User’s Guide 2524. A Re-login page will be shown on the screen. Please type the account and password that you created previously

VigorPro5300 Series User’s Guide 2536. From the Device’s Service section, click the Renew button for AI-AV (Anti-Intrusion & Anti-Virus) service

VigorPro5300 Series User’s Guide 254 9. Check the box of “I have read and accept the above Agreement” and click Next. 10. When this page appears,

VigorPro5300 Series User’s Guide 25511. Confirm Message window will appear for you to make a confirmation. Click Confirm. 12. The Service Activati

VigorPro5300 Series User’s Guide 25644..66 BBaacckkuupp aanndd UUppggrraaddee SSiiggnnaattuurree ffoorr AAnnttii--IInnttrruussiioonn//AAnnttii-

VigorPro5300 Series User’s Guide 257TTiimmee ffoorr DDoowwnnllooaadd After changing other license, it is suggested for you to download newly updat

VigorPro5300 Series User’s Guide 2584. A Re-login page will be shown on the screen. Please type new account and password that you created previously

VigorPro5300 Series User’s Guide 2596. Click the On button on the line with DT-KL service to use that service. Then, the Status light for DT-DT serv

VigorPro5300 Series User’s Guide 260 If you did not check the Anti-Intrusion box and choose a proper profile for Anti-Virus/Anti-Spam, you still cann

VigorPro5300 Series User’s Guide 2615 AApppplliiccaattiioonn aanndd EExxaammpplleess 55..11 CCrreeaattee aa LLAANN--ttoo--LLAANN CCoonnnneecc

VigorPro5300 Series User’s Guide 19If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be sho

VigorPro5300 Series User’s Guide 262For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec

VigorPro5300 Series User’s Guide 263 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password,

VigorPro5300 Series User’s Guide 264 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password,

VigorPro5300 Series User’s Guide 2652. Then, for using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup

VigorPro5300 Series User’s Guide 266connection. If a PPP-based service is selected, you should further specify the remote peer IP Address, Usernam

VigorPro5300 Series User’s Guide 267 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password,

VigorPro5300 Series User’s Guide 26855..22 CCrreeaattee aa RReemmoottee DDiiaall--iinn UUsseerr CCoonnnneeccttiioonn BBeettwweeeenn tthhee T

VigorPro5300 Series User’s Guide 269 3. Go to Remote Dial-In Users. Click on one index number to edit a profile. 4. Set Dial-In settings to as sho

VigorPro5300 Series User’s Guide 270 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tu

VigorPro5300 Series User’s Guide 271 You may further specify the method you use to get IP, the security method, and authentication method. If the Pr

VigorPro5300 Series User’s Guide 20 22..22..22 PPPPTTPP Click PPTP as the protocol. Type in all the information that your ISP provides for this pro

VigorPro5300 Series User’s Guide 272 4. Click Connect button to build connection. When the connection is successful, you will find a green light on

VigorPro5300 Series User’s Guide 273 Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS.

VigorPro5300 Series User’s Guide 274 7. Click Setup link for WAN1. 8. Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP t

VigorPro5300 Series User’s Guide 275 10. Click edit to open a new window. 11. First, check the ACT box. Then click Edit of Local Address to set

VigorPro5300 Series User’s Guide 276 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. To use another

VigorPro5300 Series User’s Guide 277 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage.

VigorPro5300 Series User’s Guide 27855..55 CCaalllliinngg SScceennaarriioo ffoorr VVooIIPP ffuunnccttiioonn 55..55..11 CCaalllliinngg vviiaa

VigorPro5300 Series User’s Guide 279Example 2: Both John and David have SIP Addresses from the same service provider. John’s SIP URL: [email protected]

VigorPro5300 Series User’s Guide 28055..55..22 PPeeeerr--ttoo--PPeeeerr CCaalllliinngg Example 3: Arnor and Paulin have Vigor routers respectively

VigorPro5300 Series User’s Guide 28155..66 UUppggrraaddee FFiirrmmwwaarree ffoorr YYoouurr RRoouutteerr Before upgrading your router firmware,

VigorPro5300 Series User’s Guide 2122..22..33 SSttaattiicc IIPP Click Static IP as the protocol. Type in all the information that your ISP provide

VigorPro5300 Series User’s Guide 2829. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instru

VigorPro5300 Series User’s Guide 283 14. Click Send. 15. Now the firmware update is finished. 55..77 RReeqquueesstt aa cceerrttiiffiiccaattee

VigorPro5300 Series User’s Guide 2841. Go to Certificate Management and choose Local Certificate. 2. You can click GENERATE button to start to ed

VigorPro5300 Series User’s Guide 2854. Connect to CA server via web browser. Follow the instruction to submit the request. Below we take a Windows 2

VigorPro5300 Series User’s Guide 286 Then you have done the request and the server now issues you a certificate. Select Base 64 encoded certificate a

VigorPro5300 Series User’s Guide 28755..88 RReeqquueesstt aa CCAA CCeerrttiiffiiccaattee aanndd SSeett aass TTrruusstteedd oonn WWiinnddoow

VigorPro5300 Series User’s Guide 2882. In Choose file to download, click CA Certificate Current and Base 64 encoded, and Download CA certificate to

VigorPro5300 Series User’s Guide 2896 TTrroouubbllee SShhoooottiinngg This section will guide you to solve abnormal situations if you cannot acces

VigorPro5300 Series User’s Guide 290FFoorr WWiinnddoowwss  The example is based on Windows XP. As to the examples for other operation systems, ple

VigorPro5300 Series User’s Guide 2914. Select Obtain an IP address automatically and Obtain DNS server address automatically. FFoorr MMaaccOOss 1

VigorPro5300 Series User’s Guide iiiEuropean Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou County, Hsi

VigorPro5300 Series User’s Guide 22 22..22..44 DDHHCCPP Click DHCP as the protocol. Type in all the information that your ISP provides for this pro

VigorPro5300 Series User’s Guide 29266..33 PPiinnggiinngg tthhee RRoouutteerr ffrroomm YYoouurr CCoommppuutteerr The default gateway IP addres

VigorPro5300 Series User’s Guide 293 66..44 CChheecckkiinngg IIff tthhee IISSPP SSeettttiinnggss aarree OOKK oorr NNoott Click WAN>>

VigorPro5300 Series User’s Guide 294 FFoorr SSttaattiicc//DDyynnaammiicc IIPP UUsseerrss 1. Check if the Enable option is selected. 2. Check if

VigorPro5300 Series User’s Guide 295FFoorr PPPPTTPP UUsseerrss 1. Check if the Enable option for PPTP Link is selected. 2. Check if PPTP Server

VigorPro5300 Series User’s Guide 296HHaarrddwwaarree RReesseett While the router is running (ACT LED blinking), press the Factory Reset button and

VigorPro5300 Series User’s Guide 2322..33 OOnnlliinnee SSttaattuuss The online status shows the system status, WAN status, ADSL Information and ot

VigorPro5300 Series User’s Guide 24 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary

VigorPro5300 Series User’s Guide 2522..44 SSaavviinngg CCoonnffiigguurraattiioonn Each time you click OK on the web page for saving the configurat

VigorPro5300 Series User’s Guide 26 This page is left blank.

VigorPro5300 Series User’s Guide 273AAddvvaanncceedd WWeebb CCoonnffiigguurraattiioonn After finished basic configuration of the router, you can a

VigorPro5300 Series User’s Guide 28 Below shows the menu items for WAN. 33..11..22 GGeenneerraall SSeettuupp This section will introduce some gen

VigorPro5300 Series User’s Guide 29Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system.

VigorPro5300 Series User’s Guide 30 33..11..33 IInntteerrnneett AAcccceessss For the router supports dual WAN function, the users can set differen

VigorPro5300 Series User’s Guide 31DDeettaaiillss PPaaggee ffoorr PPPPPPooEE To use PPPoE as the accessing protocol of the internet, please choos

VigorPro5300 Series User’s Guide iv TTaabbllee ooff CCoonntteennttss 1 Preface ...

VigorPro5300 Series User’s Guide 32 Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL

VigorPro5300 Series User’s Guide 33For static IP mode, you usually receive a fixed public IP address or a public subnet, namely multiple public IP ad

VigorPro5300 Series User’s Guide 34 PING Interval - Enter the interval for the system to execute the PING operation. WAN Connection Detection Such fu

VigorPro5300 Series User’s Guide 35Specify a MAC Address: Some Cable service providers specify a specific MAC address for access authentication. In s

VigorPro5300 Series User’s Guide 36 PPP Setup PPP Authentication - Select PAP only or PAP or CHAP for PPP. Idle Timeout - Set the timeout for brea

VigorPro5300 Series User’s Guide 3733..11..44 LLooaadd--BBaallaannccee PPoolliiccyy This router supports the function of load balancing. It can as

VigorPro5300 Series User’s Guide 38 Dest Port Start Displays the IP address for the start of the destination port. Dest Port End Displays the IP ad

VigorPro5300 Series User’s Guide 3933..22 LLAANN Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of networ

VigorPro5300 Series User’s Guide 40 WWhhaatt iiss RRoouuttiinngg IInnffoorrmmaattiioonn PPrroottooccooll ((RRIIPP)) Vigor router will exchange

VigorPro5300 Series User’s Guide 4133..22..22 GGeenneerraall SSeettuupp This page provides you the general settings for LAN. Click LAN to open the

VigorPro5300 Series User’s Guide v3.4.1 IP Object...

VigorPro5300 Series User’s Guide 42 Start IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresse

VigorPro5300 Series User’s Guide 43DHCP Server IP Address for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay A

VigorPro5300 Series User’s Guide 44 Destination Address Displays the destination address of the static route. Status Displays the status of the sta

VigorPro5300 Series User’s Guide 45Note: There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The first is that the LAN in

VigorPro5300 Series User’s Guide 46 33..22..44 VVLLAANN Virtual LAN function provides you a very convenient way to manage hosts by grouping them ba

VigorPro5300 Series User’s Guide 472. After checking the box to enable VLAN function, you will check the table according to the needs as shown below

VigorPro5300 Series User’s Guide 48 and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below. Add and Edit

VigorPro5300 Series User’s Guide 49 33..33..11 PPoorrtt RReeddiirreeccttiioonn Port Redirection is usually set up for server related service insid

VigorPro5300 Series User’s Guide 50 Press any number under Index to access into next page for configuring port redirection. Enable Check this box

VigorPro5300 Series User’s Guide 51box (as the starting point). The second one is assigned automatically after you type the private port number below

VigorPro5300 Series User’s Guide vi 3.12.3 Phone Settings ...

VigorPro5300 Series User’s Guide 52 33..33..22 DDMMZZ HHoosstt As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic

VigorPro5300 Series User’s Guide 53True…. MAC address of the one you want. If you previously have set up WAN Alias in Internet Access>>PPPoE, y

VigorPro5300 Series User’s Guide 54 33..33..33 OOppeenn PPoorrttss Open Ports allows you to open a range of ports for the traffic of special appli

VigorPro5300 Series User’s Guide 55 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service.

VigorPro5300 Series User’s Guide 56 33..44 OObbjjeeccttss SSeettttiinnggss For IPs in a range, service ports in a limited range and keywords usual

VigorPro5300 Series User’s Guide 57 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN,

VigorPro5300 Series User’s Guide 58 33..44..22 IIPP GGrroouupp This page allows you to bind several IP objects into one IP group. Set to Factor

VigorPro5300 Series User’s Guide 5933..44..33 SSeerrvviiccee TTyyppee OObbjjeecctt You can set up to 96 sets of Service Type Objects with diffe

VigorPro5300 Series User’s Guide 60 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when

VigorPro5300 Series User’s Guide 61 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Object page. Al

VigorPro5300 Series User’s Guide vii4.6 Backup and Upgrade Signature for Anti-Intrusion/Anti-Virus ...

VigorPro5300 Series User’s Guide 62 Name Type a name for this profile, e.g., game. Contents Type the content for such profile. For example, type g

VigorPro5300 Series User’s Guide 63Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All th

VigorPro5300 Series User’s Guide 64 Profile Name Type a name for this profile. Type a name for such profile and check all the items of file extensi

VigorPro5300 Series User’s Guide 6533..44..88 IIMM OObbjjeecctt This page allows you to set 32 profiles for Instant Messenger. These profiles will

VigorPro5300 Series User’s Guide 66 Profile Name Type a name for this profile. Type a name for such profile and check all the items that not allowe

VigorPro5300 Series User’s Guide 6733..44..99 PP22PP OObbjjeecctt This page allows you to set 32 profiles for peer-to-peer application. These prof

VigorPro5300 Series User’s Guide 68 Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not al

VigorPro5300 Series User’s Guide 6933..44..1100 MMiisscc OObbjjeecctt This page allows you to set 32 profiles for miscellaneous applications. Thes

VigorPro5300 Series User’s Guide 70 Type a name for such profile and check all the protocols that not allowed to be used in the host. Finally, click

VigorPro5300 Series User’s Guide 71Web surfing because each of multiple load balanced database servers can handle millions of requests for categoriza

VigorPro5300 Series User’s Guide 72 33..55..22 UURRLL CCoonntteenntt FFiilltteerr PPrrooffiillee Based on the list of user defined keywords, the

VigorPro5300 Series User’s Guide 73Priority It determines the action that this router will apply. Both: Pass – The router will let all the packages

VigorPro5300 Series User’s Guide 74 Block - Restrict accessing into the corresponding webpage with the keywords listed on the box below. If the web p

VigorPro5300 Series User’s Guide 75inside to outside world to protect the local user's privacy. Proxy - Check the box to reject any proxy tra

VigorPro5300 Series User’s Guide 76 Action Pass - allow accessing into the corresponding webpage with the categories listed on the box below. Block

VigorPro5300 Series User’s Guide 77restricts users in the local network from accessing the Internet. Furthermore, it can filter out specific packets

VigorPro5300 Series User’s Guide 78 z Call Filter - When there is no existing Internet connection, Call Filter is applied to all traffic, all of whi

VigorPro5300 Series User’s Guide 79vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operatio

VigorPro5300 Series User’s Guide 80 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. D

VigorPro5300 Series User’s Guide 81Web Content Filter Select one of the Web Content Filter profile settings (created in CSM>> Web Content Filt

VigorPro5300 Series User’s Guide 11 PPrreeffaaccee VigorPro 5300 is a broadband router with dual-WAN interface. It provides policy-based load-balan

VigorPro5300 Series User’s Guide 82 PCs with subnet “172.16.x.x” connected under VigorPro 5300 will be protected by security settings enabled and co

VigorPro5300 Series User’s Guide 83 Window size – It determines the size of TCP protocol (0~65535). The more the value is, the better the performance

VigorPro5300 Series User’s Guide 84 33..66..33 FFiilltteerr SSeettuupp Click Firewall and click Filter Setup to open the setup page. To edit or a

VigorPro5300 Series User’s Guide 85 Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/des

VigorPro5300 Series User’s Guide 86 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Ad

VigorPro5300 Series User’s Guide 87choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will appl

VigorPro5300 Series User’s Guide 88 checking the Log box. It will be sent to Syslog server. Please refer to section 3.14.4 Syslog/Mail Alert for more

VigorPro5300 Series User’s Guide 89codepage, no decoding job of URL will be processed. Please use the drop-down list to choose a codepage. If you d

VigorPro5300 Series User’s Guide 90

VigorPro5300 Series User’s Guide 9133..66..44 DDooSS DDeeffeennssee As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/def