Draytek Vigor3900 Guia do Utilizador

Vigor3900 Series User’s Guide 2DDeessccrriippttiioonn ffoorr LLEEDD LED Status Explanation On The router is powered on. PWR Off The router i

Vigor3900 Series User’s Guide 92Cancel Click it to exit the dialog without saving anything. 3. When you finish the above settings, please click App

Vigor3900 Series User’s Guide 93Profile Display the name of the LAN profile. Enable This Profile Display the status of the profile. False means dis

Vigor3900 Series User’s Guide 94Cancel Click it to exit the dialog without saving anything. 3. When you finish the above settings, please click App

Vigor3900 Series User’s Guide 95means enabled. Start IP Display the starting IP address of the IP address pool for DHCP server. End IP Display the

Vigor3900 Series User’s Guide 96following example: 2000:0000:0000:0000:0000:0000:0000:10 or 2000::10. End IP Set the ending IP address of the IP add

Vigor3900 Series User’s Guide 9744..22..22 IIPP RRoouuttiinngg To make local device in LAN accessing into external network without passing NAT o

Vigor3900 Series User’s Guide 98LAN Profile Display which LAN profile used for the local device. IP Display the private IP address for such profil

Vigor3900 Series User’s Guide 994. Enter all the settings and click Apply. The new profile will be added on the screen. 44..22..33 SSttaattiicc

Vigor3900 Series User’s Guide 100Profile Display the name of such static route. Enable This Profile Display the status of the profile. False means d

Vigor3900 Series User’s Guide 101Destination IP Address Type the IP address for such static route profile. Subnet Mask Use the drop down list to ch

Vigor3900 Series User’s Guide 3CCoonnnneeccttoorrss Interface Description GigaLAN1 / 2 Connecter for local network devices. 3(SFP) Connecte

Vigor3900 Series User’s Guide 102IIPPvv66 SSttaattiicc RRoouuttee For IPv6 protocol, click the IPv6 Static Route tab to configure detailed settin

Vigor3900 Series User’s Guide 103HHooww ttoo aadddd aa nneeww IIPPvv66 SSttaattiicc RRoouuttee pprrooffiillee 1. Open LAN>>Static R

Vigor3900 Series User’s Guide 1044. Enter all the settings and click Apply. The new profile will be added on the screen. IInntteerr--LLAANN RRoou

Vigor3900 Series User’s Guide 10544..22..44 SSwwiittcchh This page allows you to configure Mirroring Port, Mirrored Port, enable/disable LAN inte

Vigor3900 Series User’s Guide 106selected rule. Delete Remove the selected VLAN ID setting. To delete a VLAN ID setting, simply select the one you

Vigor3900 Series User’s Guide 107Internet for such LAN profile with the VLAN ID number. Untag Determine if the packets transmitted to Internet thro

Vigor3900 Series User’s Guide 108Available parameters are listed as follows: Item Description Enable This Profile Check the box to enable the Mirror

Vigor3900 Series User’s Guide 109Refresh Renew current web page. Interface Display the profile name of the interface. Enable This Profile Display

Vigor3900 Series User’s Guide 110Duplex Use the drop down list to choose the duplex for such profile. Speed Use the drop down list to specify the tr

Vigor3900 Series User’s Guide 11144..22..55 BBiinndd IIPP ttoo MMAACC This function is used to bind the IP and MAC address in LAN to have a st

Vigor3900 Series User’s Guide 411..33 HHaarrddwwaarree IInnssttaallllaattiioonn 11..33..11 NNeettwwoorrkk CCoonnnneeccttiioonn Before starti

Vigor3900 Series User’s Guide 112Delete You can remove any item listed in IP Bind List. Simply click and select the one, and click Delete. The selec

Vigor3900 Series User’s Guide 1133. Click Add. 4. The following dialog appears. Available parameters are listed as follows: Item Description

Vigor3900 Series User’s Guide 11444..22..66 RRIIPP CCoonnffiigguurraattiioonn The Routing Information Protocol (RIP) is a dynamic routing protoco

Vigor3900 Series User’s Guide 115 Available parameters are listed as follows: Item Description Enable This Profile Check the box to enable the Mi

Vigor3900 Series User’s Guide 116Available parameters are listed as follows: Item Description Enable This Profile Check the box to enable the Mirr

Vigor3900 Series User’s Guide 1174. Use the drop down list of LAN Profile to choose the one you need. And specify the value of Area (either 0.0.0.

Vigor3900 Series User’s Guide 11844..33 NNAATT NAT (Network Address Translation) is a method of mapping one or more IP addresses and/or service

Vigor3900 Series User’s Guide 119Each item will be explained as follows: Item Description Add Add a new port redirect profile. Edit Modify the sele

Vigor3900 Series User’s Guide 120HHooww ttoo aadddd aa nneeww PPoorrtt RReeddiirreeccttiioonn pprrooffiillee 1. Open NAT>> Port Redir

Vigor3900 Series User’s Guide 121 Use IP Alias Use the drop down list to select the one you want. IP Alias WAN IP alias that can be selected and u

Vigor3900 Series User’s Guide 511..33..22 RRaacckk--MMoouunntteedd IInnssttaallllaattiioonn The Vigor3900 Series can be mounted on a rack by usi

Vigor3900 Series User’s Guide 122 44..33..22 DDMMZZ HHoosstt In computer networks, a DMZ (De-Militarized Zone) is a computer host or small networ

Vigor3900 Series User’s Guide 123rule. Delete Remove the selected profile. To delete a profile, simply select the one you want to delete and clic

Vigor3900 Series User’s Guide 1243. The following dialog will appear. Available parameters are listed as follows: Item Description Profile Type

Vigor3900 Series User’s Guide 12544..33..33 AAddddrreessss MMaappppiinngg This page is used to map specific private IP to specific WAN IP alias.

Vigor3900 Series User’s Guide 126will be applied to. Private IP Display the private IP used for this entry. Private IP Subnet Mask Display the subne

Vigor3900 Series User’s Guide 127Private IP subnet Mask Type the subnet mask used for this entry. Protocol Choose the protocol used for the entry.

Vigor3900 Series User’s Guide 12844..33..44 SSIIPP AALLGG SIP ALG means Session Initiation Protocol, Application Layer Gateway. This page allows

Vigor3900 Series User’s Guide 12944..44 FFiirreewwaallll The firewall controls the allowance and denial of packets through the router. The Fire

Vigor3900 Series User’s Guide 130IIPP FFiilltteerr This page allows you to create new IP filter rule(s) and group them for your request. The upper

Vigor3900 Series User’s Guide 131Item Description Comment Display the description for such profile. IP Filter Rule Group of Selected Group Add Add

Vigor3900 Series User’s Guide 6 This page is left blank.

Vigor3900 Series User’s Guide 1323. The following dialog will appear. Available parameters are listed as follows: Item Description Group Type th

Vigor3900 Series User’s Guide 1336. Choose the IP filter group first and then click the Add tab (the lower one in this page). 7. The following p

Vigor3900 Series User’s Guide 134Time Profile Choose a schedule profile to be applied on such rule. You can click to create another new time objec

Vigor3900 Series User’s Guide 135 Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. 8. Enter

Vigor3900 Series User’s Guide 136AApppplliiccaattiioonn FFiilltteerr Application Filter can integrate several application objects within one profi

Vigor3900 Series User’s Guide 137Item Description Exception IP Display the IP object profile which will not be filtered by the router for such grou

Vigor3900 Series User’s Guide 138Available parameters are listed as follows: Item Description Profile Type the name of the Application filter prof

Vigor3900 Series User’s Guide 139UURRLL FFiilltteerr URL Filter can integrate URL, Keyword, File extension and WCF object profiles within one p

Vigor3900 Series User’s Guide 140Item Description Keyword Block Display the keyword object profile selected for each rule which is not allowed to pa

Vigor3900 Series User’s Guide 1413. The following dialog will appear. Available parameters are listed as follows: Item Description Profile Type

Vigor3900 Series User’s Guide 7CChhaapptteerr 22:: IInniittiiaalliinngg SSeettttiinnggss For use the router properly, it is necessary for you t

Vigor3900 Series User’s Guide 142Item Description You can click to create another new WCF object profile. Apply Click it to save and exit the dia

Vigor3900 Series User’s Guide 14344..44..22 DDooSS DDeeffeennssee The DoS function helps to detect and mitigates DoS attacks. These include floo

Vigor3900 Series User’s Guide 144SSyysstteemm In the Firewall group, click the DOS Defense and click the tab of System. You will see the following

Vigor3900 Series User’s Guide 145Item Description user-defined timeout period. UDP Flood Threshold The default setting for threshold is 300 packe

Vigor3900 Series User’s Guide 14644..44..33 MMAACC BBlloocckk MAC Block allows you to set lots of proprietary MAC Address. Packets will be droppe

Vigor3900 Series User’s Guide 147HHooww ttoo ccrreeaattee aa nneeww MMAACC BBlloocckk pprrooffiillee 1. Open Firewall>>MAC Block. 2.

Vigor3900 Series User’s Guide 1485. A new MAC Block profile has been created. 44..55 OObbjjeeccttss SSeettttiinngg Vigor3900 allows users to se

Vigor3900 Series User’s Guide 14944..55..11 IIPP OObbjjeecctt For IPs in a limited range usually will be applied in configuring router’s setting

Vigor3900 Series User’s Guide 150Item Description End IP Address Display the IP address of the ending point for such profile. It will be joined with

Vigor3900 Series User’s Guide 151Item Description Address Type Choose the address type (Single / Range /Subnet) for such profile. Start IP Address

Vigor3900 Series User’s Guide 83. Now, the Main Screen will pop up. 4. Go to System Maintenance page and choose Administrator Password. 5. E

Vigor3900 Series User’s Guide 15244..55..22 IIPP GGrroouupp To manage conveniently, several IP object profiles can be grouped under a group. Diff

Vigor3900 Series User’s Guide 153HHooww ttoo ccrreeaattee aa nneeww IIPP GGrroouupp pprrooffiillee 1. Open Objects Setting>>IP Group

Vigor3900 Series User’s Guide 154Item Description Cancel Click it to exit the dialog without saving anything. 4. Enter all the settings and click A

Vigor3900 Series User’s Guide 155Item Description Refresh Renew current web page. Profile Number Limit Display the total number (96) of the object

Vigor3900 Series User’s Guide 156Item Description allowed to be typed here is 10. Protocol Specify one of the protocols for such profile. Source Por

Vigor3900 Series User’s Guide 15744..55..44 SSeerrvviiccee TTyyppee GGrroouupp This page allows you to bind several service types into one grou

Vigor3900 Series User’s Guide 158HHooww ttoo ccrreeaattee aa nneeww SSeerrvviiccee TTyyppee GGrroouupp pprrooffiillee 1. Open Objects Sett

Vigor3900 Series User’s Guide 15944..55..55 KKeeyywwoorrdd OObbjjeecctt Keyword can be set as a filter rule to be applied in Firewall. Vigor3900

Vigor3900 Series User’s Guide 160HHooww ttoo ccrreeaattee aa nneeww KKeeyywwoorrdd OObbjjeecctt pprrooffiillee 1. Open Objects Setting>&

Vigor3900 Series User’s Guide 161Item Description Cancel Click it to exit the dialog without saving the configuration. 4. Enter all the settings a

Vigor3900 Series User’s Guide 922..22 QQuuiicckk SSttaarrtt WWiizzaarrdd Quick Start Wizard is a wizard which is designed for configuring your

Vigor3900 Series User’s Guide 162Item Description Profile Number Limit Display the total number (16) of the object profiles to be created. Group Nam

Vigor3900 Series User’s Guide 163Item Description Cancel Click it to exit the dialog without saving the configuration. 4. Enter all the settings a

Vigor3900 Series User’s Guide 164Item Description Refresh Renew current web page. Profile Number Limit Display the total number (8) of the object pr

Vigor3900 Series User’s Guide 165Available parameters are listed as follows: Item Description Profile Type the name of the File Extension Object

Vigor3900 Series User’s Guide 16644..55..88 IIMM OObbjjeecctt People like to use Instant Message to communication with friends on line just for f

Vigor3900 Series User’s Guide 167HHooww ttoo ccrreeaattee aa nneeww IIMM OObbjjeecctt PPrrooffiillee 1. Open Objects Setting>>IM Obj

Vigor3900 Series User’s Guide 168Item Description WebIM It lists a package of IM application based on web page. You may check the box to include all

Vigor3900 Series User’s Guide 16944..55..99 PP22PP OObbjjeecctt Vigor3900 can block P2P application for users, especially for the ones who alway

Vigor3900 Series User’s Guide 170HHooww ttoo ccrreeaattee aa nneeww PP22PP OObbjjeecctt PPrrooffiillee 1. Open Objects Setting>>P2P O

Vigor3900 Series User’s Guide 1715. A new P2P Object profile has been created. 44..55..1100 PPrroottooccooll OObbjjeecctt Network services, e.

Vigor3900 Series User’s Guide 10Item Description Static - If Static is selected, you can manually assign a static IP address to the WAN interface an

Vigor3900 Series User’s Guide 172Item Description created. Profile Display the name of the IM object profile. Member Display the protocol applicatio

Vigor3900 Series User’s Guide 173Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. 4.

Vigor3900 Series User’s Guide 174WWeebb CCaatteeggoorryy OObbjjeecctt Each item will be explained as follows: Item Description Add Add a new pr

Vigor3900 Series User’s Guide 175Item Description Other Display the items under certain category that you choose to block. HHooww ttoo ccrreeaatt

Vigor3900 Series User’s Guide 176Child Protection The web pages which are not suitable for children will be classified into different categories. Si

Vigor3900 Series User’s Guide 177CCoonntteenntt FFiilltteerr LLiicceennssee Move your mouse to the link of Activate URL and click it. The system

Vigor3900 Series User’s Guide 17844..55..1122 TTiimmee OObbjjeecctt You restrict Internet access to certain hours so that users can connect to th

Vigor3900 Series User’s Guide 179HHooww ttoo ccrreeaattee aa nneeww TTiimmee OObbjjeecctt PPrrooffiillee 1. Open Objects Setting>> T

Vigor3900 Series User’s Guide 180Weekdays Specify which days in one week should perform the schedule. Apply Click it to save the configuration. Can

Vigor3900 Series User’s Guide 18144..55..1133 TTiimmee GGrroouupp This page allows you to group several time object profiles. Each item will be

Vigor3900 Series User’s Guide 1122..22..22 SStteepp 22 -- CCoonnffiigguurriinngg tthhee SSeelleecctteedd PPrroottooccooll This page will be

Vigor3900 Series User’s Guide 182HHooww ttoo ccrreeaattee aa nneeww TTiimmee GGrroouupp PPrrooffiillee 1. Open Objects Setting>> Time

Vigor3900 Series User’s Guide 1835. A new Web Category Object profile has been created. 44..66 UUsseerr MMaannaaggeemmeenntt User Management c

Vigor3900 Series User’s Guide 184Item Description involved. User-Based - If you choose such mode, the router will apply the filter rules configured

Vigor3900 Series User’s Guide 185 Available parameters will be explained as follows: Item Description Refresh Renew current web page. Auto Refresh

Vigor3900 Series User’s Guide 186Item Description 44..66..22 UUsseerr PPrrooffiillee This function allows to configure all accounts (user profil

Vigor3900 Series User’s Guide 187Item Description Enable This Profile Display the status of the profile. False means disabled; True means enabled.

Vigor3900 Series User’s Guide 1883. The following dialog will appear. Available parameters are listed as follows: Item Description Username Type

Vigor3900 Series User’s Guide 189Usage Time (min) It means the maximum usage duration for the user. By default, the Usage Time is 480 minutes. Syst

Vigor3900 Series User’s Guide 19044..66..33 UUsseerr GGrroouupp The User Group can consist of several us er profiles, which help the administrato

Vigor3900 Series User’s Guide 191HHooww ttoo ccrreeaattee aa nneeww UUsseerr GGrroouupp PPrrooffiillee 1. Open User Management>>User

Vigor3900 Series User’s Guide ii Vigor3900 Multi-WAN Security Appliance User’s Guide Version: 1.5 Firmware Version: V1.0.5 (For

Vigor3900 Series User’s Guide 12DNS Server IP Address Add – Click this button to display the IP address field for adding a new IP address. Type the

Vigor3900 Series User’s Guide 19244..66..44 RRAADDIIUUSS Remote Authentication Dial-In User Service (RADIUS) is a security authentication client/s

Vigor3900 Series User’s Guide 19344..66..55 LLDDAAPP//AAccttiivvee DDiirreeccttoorryy Lightweight Directory Access Protocol (LDAP) is a communic

Vigor3900 Series User’s Guide 19444..77 AApppplliiccaattiioonn Below shows the menu items for Applications. 44..77..11 DDyynnaammiicc DDNNSS T

Vigor3900 Series User’s Guide 195SSttaattuuss This page displays the status for all the available DDNS profiles. Each item will be explained as f

Vigor3900 Series User’s Guide 196SSeettttiinngg This page allows you to configure DDNS profiles for your request. Each item will be explained as

Vigor3900 Series User’s Guide 197HHooww ttoo eeddiitt aann eexxiissttiinngg DDDDNNSS PPrrooffiillee There are 10 sets of DDNS server offered

Vigor3900 Series User’s Guide 198Password Type in the password that you set for applying domain. Wildcard and Backup MX The Wildcard and Backup MX f

Vigor3900 Series User’s Guide 199Item Description Join Time Define the time for the system to send GVRP packet to other device. The unit is second.

Vigor3900 Series User’s Guide 200Item Description Max Session Determine the maximum session number for UPnP function.Apply Click it to save the conf

Vigor3900 Series User’s Guide 201Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these

Vigor3900 Series User’s Guide 13IIff DDHHCCPP iiss sseelleecctteedd DHCP allows a user to obtain an IP address automatically from a DHCP server

Vigor3900 Series User’s Guide 202 Available parameters are listed as follows: Item Description Enable This Profile Check this box to enable UPnP fu

Vigor3900 Series User’s Guide 203Item Description LAN Profile Choose one of the LAN profiles that such function will be applied to. Virtual IP Assi

Vigor3900 Series User’s Guide 20444..77..55 WWaakkee oonn LLAANN A PC client on LAN can be woken up by the router it connects. When a user wants

Vigor3900 Series User’s Guide 20544..88 VVPPNN aanndd RReemmoottee AAcccceessss A Virtual Private Network (VPN) is the extension of a private

Vigor3900 Series User’s Guide 206HHooww ttoo ccrreeaattee LLAANN--ttoo--LLAANN pprrooffiillee ffoorr VVPPNN cclliieenntt ((ddiiaall--oouutt)

Vigor3900 Series User’s Guide 2073. Specify the type. Click Create New VPN Profile and type the name of the profile. Then, click Next. 4. If you

Vigor3900 Series User’s Guide 208Enable This Profile Check this box to enable such profile. Always On Click Enable to make router always keeping con

Vigor3900 Series User’s Guide 209as Auth Type. Security Protocol Choose ESP to specify the IPSec protocol for the Encapsulating Security Payload pr

Vigor3900 Series User’s Guide 2106. Click OK. A new profile has been created.

Vigor3900 Series User’s Guide 21144..88..22 VVPPNN SSeerrvveerr WWiizzaarrdd Such wizard is used to configure VPN settings for VPN server. Such

Vigor3900 Series User’s Guide 14 Available parameters are listed as follows: Item Description Username Type in the username provided by ISP in this

Vigor3900 Series User’s Guide 212Type Specify which protocol (PPTP or IPSec) will be used for such VPN profile. VPN Settings Via Select From Current

Vigor3900 Series User’s Guide 213dial-in users with the CHAP protocol. User Authentication Type Set user authentication to Local server or RADIUS s

Vigor3900 Series User’s Guide 214If you choose IPSec as the Type in Step 1, you will get the following page: Available parameters are listed as fol

Vigor3900 Series User’s Guide 215Remote GRE IP The virtual IP address of the remote client, specified for this tunnel. 5. Fill in the required in

Vigor3900 Series User’s Guide 21644..88..33 RReemmoottee AAcccceessss CCoonnttrrooll Enable the necessary VPN service as you need. If you intend

Vigor3900 Series User’s Guide 217selected here. PAP - It means the router will attempt to authenticate dial-in users with the PAP protocol. CHAP -

Vigor3900 Series User’s Guide 218Item Description Authenticate Protocol The router will authenticate the dial-in user with the protocol selected her

Vigor3900 Series User’s Guide 219Preshared Key Specify a key for IKE authentication Confirm Pre-Shared Key- Retype the characters to confirm the pr

Vigor3900 Series User’s Guide 220profile. Delete Remove the selected profile. To delete a profile, simply select the one you want to delete and cl

Vigor3900 Series User’s Guide 221 Available parameters are listed as follows: Item Description Profile Type the name of the profile. Enable This

Vigor3900 Series User’s Guide 15IIff PPPPTTPP iiss sseelleecctteedd This mode lets user get the IP group information by a DSL modem with PPTP s

Vigor3900 Series User’s Guide 222Usually, use the default setting (leave it in blank). Remote Host - Type the WAN IP address for the remote host. Re

Vigor3900 Series User’s Guide 223Perfect Forward Secrecy Status Enables the PFS function. A new Diffie-Hellman Key Exchange is included every time

Vigor3900 Series User’s Guide 224GRE Key automatically. If you click Disable, you need to type GRE key manually. GRE In Key Type the hexadecimal num

Vigor3900 Series User’s Guide 225Accepted Proposal (Dial-In) For the dial-in VPN user, please specify the limitation of the proposal. Accept all s

Vigor3900 Series User’s Guide 2263. The following dialog will appear. Available parameters are listed as follows: Item Description Profile Typ

Vigor3900 Series User’s Guide 2274. Enter all the settings and click Apply. 5. A new PPTP Dial-Out profile has been created. HHooww ttoo ccrr

Vigor3900 Series User’s Guide 2283. The following dialog will appear. Available parameters are listed as follows: Item Description Profile Dis

Vigor3900 Series User’s Guide 229Profile previously. Otherwise, there are no selections displayed here. Local IP/Subnet Mask Type the IP address an

Vigor3900 Series User’s Guide 23044..88..77 VVPPNN TTrruunnkk MMaannaaggeemmeenntt VPN Load Balance Mechanism can set multiple VPN tunnels for u

Vigor3900 Series User’s Guide 231Item Description Add Add a new profile. Edit Modify the selected profile. To edit a profile, simply select the one

Vigor3900 Series User’s Guide 16 Server Address Type a remote IP address of PPTP server. Username Type in the username provided by ISP in this field

Vigor3900 Series User’s Guide 2323. The following dialog will appear. Available parameters are listed as follows: Item Description Profile Typ

Vigor3900 Series User’s Guide 233Load Balance Pool Use the drop down list to choose one profile configured in load balance pool. Then, such rule wi

Vigor3900 Series User’s Guide 234Add Add a new profile. Edit Modify the selected profile. To edit a profile, simply select the one you want to modif

Vigor3900 Series User’s Guide 2354. Click the Load Balance tab to open the following dialog. If there is no selection for Interface option, plea

Vigor3900 Series User’s Guide 23644..88..88 CCoonnnneeccttiioonn MMaannaaggeemmeenntt You can find the summary table of all VPN connections. You

Vigor3900 Series User’s Guide 23744..99 CCeerrttiiffiiccaattee MMaannaaggeemmeenntt A digital certificate works as an electronic ID, which is is

Vigor3900 Series User’s Guide 23844..99..11 LLooccaall CCeerrttiiffiiccaattee This page allows users to generate certificate based on different w

Vigor3900 Series User’s Guide 239HHooww ttoo bbuuiilldd aa llooccaall cceerrttiiffiiccaattee 1. Open Certificate Management>> Local Ce

Vigor3900 Series User’s Guide 240Domain Name: Certificated by domain name. IP: Certificated by IP address. Email: Certificated by email address. N

Vigor3900 Series User’s Guide 241 44..99..22 TTrruusstteedd CCeerrttiiffiiccaattee This page allows you to build a RootCA certificate for Vigor3

Vigor3900 Series User’s Guide 17When you finished the above settings, please click Finish. Later, you can surf the Internet at any time. When the

Vigor3900 Series User’s Guide 242Valid From Display the starting point of the valid time of trusted certificate. Valid To Display the end point of t

Vigor3900 Series User’s Guide 243Locality (City) Type the name of the city for such certificate. State/Province Type the name of the state / provin

Vigor3900 Series User’s Guide 24444..99..33 RReemmoottee CCeerrttiiffiiccaattee Vigor3900, as a Root CA, can sign any certificate coming from end

Vigor3900 Series User’s Guide 24544..1100 SSSSLL VVPPNN An SSL VPN (Secure Sockets Layer virtual private network) is a form of VPN that can be

Vigor3900 Series User’s Guide 246To delete a profile, simply select the one you want to delete and click the Delete button. Refresh Renew current we

Vigor3900 Series User’s Guide 247 44..1100..22 SSSSLL AApppplliiccaattiioonn It provides a secure and flexible solution for network resources, i

Vigor3900 Series User’s Guide 248Refresh Renew current web page. Profile Display the name of the profile that you create. IP Address Display the IP

Vigor3900 Series User’s Guide 2495. A new SSL Application profile has been created. RRDDPP RDP stands for Remote Desktop Protocol. It allows you

Vigor3900 Series User’s Guide 250Port Display the port used for this protocol. Screen Size Display the screen size for such application. HHooww tto

Vigor3900 Series User’s Guide 2515. A new SSL Application profile has been created. 44..1100..33 OOnnlliinnee UUsseerr SSttaattuuss If you ha

Vigor3900 Series User’s Guide 1822..33 RReeggiisstteerr VViiggoorr RRoouutteerr Please follow the steps below to register the router. 1 Before

Vigor3900 Series User’s Guide 25244..1111 BBaannddwwiiddtthh MMaannaaggeemmeenntt Below shows the menu items for Bandwidth Management. The QoS

Vigor3900 Series User’s Guide 25344..1111..11 IInnccoommiinngg CCllaassss Incoming Class Setup allows you to configure bandwidth percentage for

Vigor3900 Series User’s Guide 254CCllaassss RRaattee CCoonnttrrooll This page allows you to edit the incoming class rate for the QoS policer.

Vigor3900 Series User’s Guide 255HHooww ttoo eeddiitt tthhee iinnccoommiinngg ccllaassss rraattee ffoorr tthhee QQooSS ppoolliicceerr 1.

Vigor3900 Series User’s Guide 2565. The QoS Policer profile has been modified. 44..1111..22 IInnccoommiinngg FFiilltteerr There are 30 filter r

Vigor3900 Series User’s Guide 257HHooww ttoo eeddiitt tthhee iinnccoommiinngg ffiilltteerr ffoorr tthhee QQooSS ppoolliicceerr 1. Open B

Vigor3900 Series User’s Guide 258Available parameters are listed as follows: Item Description Filter Rule Display the profile name of the filter r

Vigor3900 Series User’s Guide 259Cancel Click it to exit the dialog without saving the configuration. 4. Enter all the settings and click Apply.

Vigor3900 Series User’s Guide 260CCllaassss RRaattee CCoonnttrrooll This page allows you to edit the outgoing class rate for different QoS police

Vigor3900 Series User’s Guide 261HHooww ttoo eeddiitt tthhee oouuttggooiinngg ccllaassss rraattee ffoorr tthhee QQooSS ppoolliicceerr 1.

Vigor3900 Series User’s Guide 193 The following page will be displayed after you logging in MyVigor. From this page, please click Add. Note: Belo

Vigor3900 Series User’s Guide 2625. The outgoing class rate for QoS Policer has been modified. OOuuttggooiinngg QQuueeuuee 11-- 55 WWeeiigghh

Vigor3900 Series User’s Guide 263HHooww ttoo eeddiitt tthhee oouuttggooiinngg qquueeuuee 11-- 55 wweeiigghhtt ffoorr tthhee QQooSS ppoo

Vigor3900 Series User’s Guide 26444..1111..44 OOuuttggooiinngg FFiilltteerr There are 30 filter rules for outgoing data that can be configured in

Vigor3900 Series User’s Guide 265HHooww ttoo aadddd aann oouuttggooiinngg ffiilltteerr ffoorr tthhee QQooSS ppoolliicceerr 1. Open Bandw

Vigor3900 Series User’s Guide 266 Profile – type a new name for such service type. Protocol –There are two options: TCP, UDP and TCP/UDP. Select the

Vigor3900 Series User’s Guide 26744..1111..55 SSeessssiioonnss LLiimmiitt A PC with private IP address can access to the Internet via NAT router

Vigor3900 Series User’s Guide 268Disable – Type the message manually to display on the page that the user tries to access into the blocked web page.

Vigor3900 Series User’s Guide 269limit for the specific limitation you set for each index. This field cannot be typed with “0”, otherwise the profi

Vigor3900 Series User’s Guide 270you to modify the corresponding settings for the selected profile. Delete Remove the selected profile. To delete

Vigor3900 Series User’s Guide 271 Available parameters are listed as follows: Item Description Profile Type the name of the profile. Start IP Def

Vigor3900 Series User’s Guide 205 Now, your router information has been added to the database. Click OK to leave this web page and return to My Inf

Vigor3900 Series User’s Guide 27244..1122 SSyysstteemm MMaaiinntteennaannccee For the system setup, there are several items that you have to know

Vigor3900 Series User’s Guide 273WAN Profile Choose one of the WAN profiles which will be recognized by VigorACS. Port Type the port number for Vig

Vigor3900 Series User’s Guide 274Apply Click this button to save the configuration and exit the web page. 44..1122..33 CCoonnffiigguurraattiioonn

Vigor3900 Series User’s Guide 275RReessttoorree Each item will be explained as follows: Item Description Decrypt Config Check this box to decrypt

Vigor3900 Series User’s Guide 27644..1122..44 SSyysslloogg // MMaaiill AAlleerrtt SysLog function is provided for users to monitor router. Ther

Vigor3900 Series User’s Guide 277WAN Log Click Enable to make the WAN log recorded in the Syslog. Others Log Click Enable to make other logs record

Vigor3900 Series User’s Guide 278MMaaiill AAlleerrtt Available parameters are listed as follows: Item Description Enable This Profile Check the

Vigor3900 Series User’s Guide 27944..1122..55 TTiimmee aanndd DDaattee This page allows you to specify where the time of the router should be i

Vigor3900 Series User’s Guide 28044..1122..66 AAcccceessss CCoonnttrrooll This page allows you to open or close the web configurator ofVigor3900

Vigor3900 Series User’s Guide 281router, and the later box indicates a subnet mask allowed to login to the router. Allow Ping from WAN Click Enable

Vigor3900 Series User’s Guide 21CChhaapptteerr 33:: AApppplliiccaattiioonn aanndd TTuuttoorriiaall 33..11 HHooww ttoo CCoonnffiigguurree L

Vigor3900 Series User’s Guide 28244..1122..88 RReebboooott SSyysstteemm The Vigor router system can be restarted from a Web browser. You have to

Vigor3900 Series User’s Guide 283After choosing the configuration files, click Reboot. Reboot Click this button to execute the rebooting job. 44..1

Vigor3900 Series User’s Guide 28444..1133 DDiiaaggnnoossttiiccss In some cases, a user may need to know some information about the router, such as

Vigor3900 Series User’s Guide 285Flags Display the flag of the routing entry. Possible flags include: U (route is up) H (target is a host) G (use g

Vigor3900 Series User’s Guide 286R (reinstate route for dynamic routing) D (dynamically installed by daemon or redirect) M (modified from routing da

Vigor3900 Series User’s Guide 287Item Description LAN/WAN profile (starting from LAN/WAN profile to LAN/WAN profile). Clear Delete the selected pr

Vigor3900 Series User’s Guide 288Item Description reachability. 44..1133..33 DDHHCCPP TTaabbllee The facility provides information on IP address

Vigor3900 Series User’s Guide 28944..1133..44 NNAATT SSeessssiioonn TTaabbllee This table can display about 30000 sessions with 20 pages. Each

Vigor3900 Series User’s Guide 29044..1133..55 TTrraaffffiicc GGrraapphh Click Diagnostics and click Traffic Graph to pen the web page. Specify LA

Vigor3900 Series User’s Guide 291Item Description operation about recent 4 weeks. LAN Click the LAN tab. There are three selections provided for yo

Vigor3900 Series User’s Guide iiiCopyright Information Copyright Declarations Copyright 2012 All rights reserved. This publication contains inform

Vigor3900 Series User’s Guide 22 3. Click Add to open the following page. Type the information specified for LAN1 profile, then click Apply to sav

Vigor3900 Series User’s Guide 29244..1133..66 WWeebb CCoonnssoollee Click Diagnostics and click Web Console to pen the web page for typing comman

Vigor3900 Series User’s Guide 29344..1133..88 DDaattaa FFllooww MMoonniittoorr This page displays the running procedure for the IP address moni

Vigor3900 Series User’s Guide 294Item Description Enable Dataflow Monitor Check this box to enable dataflow monitor performed by the router. IP Addr

Vigor3900 Series User’s Guide 295From this web page, check the box of Enable External Devices. Later, all the available devices will be displayed i

Vigor3900 Series User’s Guide 296 This page is left blank.

Vigor3900 Series User’s Guide 297CChhaapptteerr 55:: TTrroouubbllee SShhoooottiinngg This section will guide you to solve abnormal situations i

Vigor3900 Series User’s Guide 29855..22 CChheecckkiinngg IIff tthhee NNeettwwoorrkk CCoonnnneeccttiioonn SSeettttiinnggss oonn YYoouurr CCo

Vigor3900 Series User’s Guide 2994. Select Obtain an IP address automatically and Obtain DNS server address automatically. FFoorr MMaacc OOSS

Vigor3900 Series User’s Guide 30055..33 PPiinnggiinngg tthhee RRoouutteerr ffrroomm YYoouurr CCoommppuutteerr The default gateway IP address

Vigor3900 Series User’s Guide 301 55..44 CChheecckkiinngg IIff tthhee IISSPP SSeettttiinnggss aarree OOKK oorr NNoott Open Online Status

Vigor3900 Series User’s Guide 23 Type the information specified for LAN2 profile, then click Apply to save the settings and exit the screen. 5. Op

Vigor3900 Series User’s Guide 302 55..55 BBaacckkiinngg ttoo FFaaccttoorryy DDeeffaauulltt SSeettttiinngg IIff NNeecceessssaarryy Sometimes,

Vigor3900 Series User’s Guide 303 HHaarrddwwaarree RReesseett While the router is running (ACT LED blinking), press the Factory Reset button and

Vigor3900 Series User’s Guide 246. Click Add under the Pool tab to create a profile (e.g., WAN1WAN2) for automatic Load Balance between WAN1 and WA

Vigor3900 Series User’s Guide 259. Open WAN >> Load-Balance and click the Rule tab. 10. Click Add to create a profile for Rule1 accepting

Vigor3900 Series User’s Guide 2611. Click Add again to create a profile for Rule2 accepting 192.168.2.0/24 which always goes Internet via WAN2 when

Vigor3900 Series User’s Guide 2733..22 HHooww ttoo CCoonnffiigguurree OOSSPPFF?? OSPF (Open Shortest Path First) uses the algorithm of SPF (Sh

Vigor3900 Series User’s Guide 28CCoonnffiigguurraattiioonn ffoorr VViiggoorr33990000 AA,, 1. Open LAN >> General Setup to create a LAN (1

Vigor3900 Series User’s Guide 294. Open LAN >> OSPF Configuration to enable this profile. Click Add to make the LAN Profiles lan2 area setti

Vigor3900 Series User’s Guide 303. Open LAN >> Static Route and click the Inter-LAN Route tab to enable this profile. 4. Open LAN >>

Vigor3900 Series User’s Guide 312. Next, continue to create a LAN (192.168.3.3/24) profile named lan2 with the settings shown below. 3. Open LAN

Vigor3900 Series User’s Guide ivEuropean Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Township, Hsin

Vigor3900 Series User’s Guide 325. After setting, check the routing information (marked with red line) which is created by OSPF. RRoouuttiinngg ii

Vigor3900 Series User’s Guide 3333..33 HHooww ttoo CCoonnffiigguurree LLAANN ttoo LLAANN IIPPSSeecc TTuunnnneell bbeettwweeeenn VViiggoor

Vigor3900 Series User’s Guide 34CCoonnffiigguurriinngg VViiggoorr22771100 1. In Vigor2710, it is necessary to build two VPN connections (for two

Vigor3900 Series User’s Guide 353. For the role of Vigor2710 is dialing-out, please skip Dial-In setting. Type the Remote Network IP and Remote Ne

Vigor3900 Series User’s Guide 3633..44 HHooww ttoo rruunn RRDDPP sseerrvviiccee iinn tthhee bbrroowwsseerr vviiaa llooggggiinngg iinn 33

Vigor3900 Series User’s Guide 373. Open SSL VPN >> SSL Application and click the RDP tab to create a profile named “Win7”. Type IP address,

Vigor3900 Series User’s Guide 38 7. A screen like the following figure will appear. Simply click the SSL Application link. 8. In the following sc

Vigor3900 Series User’s Guide 399. After that, you can access into Windows 7 via a browser. Note the message below the window. In which, TLS means

Vigor3900 Series User’s Guide 40Troubleshooting If you have installed Java Runtime Environment edition 6 but still cannot establish the connection,

Vigor3900 Series User’s Guide 4133..55 HHooww ttoo CCoonnffiigguurree VVPPNN LLooaadd BBaallaannccee bbeettwweeeenn VViiggoorr33990000 aan

Vigor3900 Series User’s Guide vTTaabbllee ooff CCoonntteennttss Chapter 1: Preface...

Vigor3900 Series User’s Guide 422. Create a profile for WAN 1 (named 2950WAN1). Type the settings as shown below:

Vigor3900 Series User’s Guide 433. Click Apply to save the settings and exit the dialog. 4. Create a profile for WAN 2 (named 2950WAN2).

Vigor3900 Series User’s Guide 445. Click Apply to save the settings and exit the dialog. 6. Open VPN and Remove Access>>VPN Trunk Management

Vigor3900 Series User’s Guide 459. Click the Load Balance Rule tab and click Add to add a Load Balance rule profile. 10. Enable this profile and

Vigor3900 Series User’s Guide 46CCoonnffiigguurriinngg VViiggoorr22995500 1. In Vigor2950, it is necessary to build two VPN connections (for two

Vigor3900 Series User’s Guide 47 z Please type the network IP address and subnet of Vigor3900 in the field of Remote Network IP and Remote Network

Vigor3900 Series User’s Guide 48z Next, type the Network IP and Network Mask for both remote and local ends to complete the second VPN connection.

Vigor3900 Series User’s Guide 49As to Vigor2950, please open VPN and Remote Access>>Connection Management to confirm the result.

Vigor3900 Series User’s Guide 5033..66 HHooww ttoo SSeettuupp 5500 WWAANNss oonn VViiggoorr33990000 Vigor3900 has 5 physical WANs; however,

Vigor3900 Series User’s Guide 512. Click OK. Vigor3900 will ask you to re-login. 3. Delete default wan profiles for wan3, wan4 and wan5 by sel

Vigor3900 Series User’s Guide vi4.4 Firewall...

Vigor3900 Series User’s Guide 525. Create a new WAN profile named with wan1_1, and set VLAN ID named with 111 based on WAN Port 1(WAN1). Note that

Vigor3900 Series User’s Guide 533. Type VLAN name and VID with 111. z Suppose the physical WAN1 of Vigor3900 connects to Port 26 of VigorSwitch.

Vigor3900 Series User’s Guide 545. Go to VLAN>>PVID page to set up PVID for each port. z PVID means VigorSwitch2260 will check and add VLAN

Vigor3900 Series User’s Guide 55CChhaapptteerr 44:: AAddvvaanncceedd WWeebb CCoonnffiigguurraattiioonn After finished basic configuration of t

Vigor3900 Series User’s Guide 56via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information wi

Vigor3900 Series User’s Guide 57If you switch into Advance mode, you will get the following page: Each item will be explained as follows: Item Des

Vigor3900 Series User’s Guide 58HHooww ttoo aadddd aa nneeww WWAANN pprrooffiillee 1. First, you have to switch into Advance mode. 2. A

Vigor3900 Series User’s Guide 59VLAN Tag Choose Enable to tag the packets passing through the port specified below. Port Choose the physical WAN in

Vigor3900 Series User’s Guide 60Different IPv4 and IPv6 protocol types specified will bring up different configuration web page. z If you choose St

Vigor3900 Series User’s Guide 61NAT>>Port Redirection/DMZ Host). To add a new IP address, simply type the IP address on the box near to the A

Vigor3900 Series User’s Guide vii4.11.5 Sessions Limit...

Vigor3900 Series User’s Guide 62Apply Click it to save the configuration and exit the dialog. Cancel Click it to exit the dialog without saving the

Vigor3900 Series User’s Guide 63address. Save – click this button to save the setting. – click the icon to remove the selected entry. MTU/MRU It

Vigor3900 Series User’s Guide 64z If you choose PPPoE as IPv4 protocol type, click the PPPoE Tab to open the following page: Available parameters

Vigor3900 Series User’s Guide 65 Add – click this button to have a field for adding a new IP address. Save – click this button to save the setting.

Vigor3900 Series User’s Guide 66z If you choose PPTP as IPv4 protocol type, click the PPTP Tab to open the following page: Available parameters ar

Vigor3900 Series User’s Guide 67Connection Detection Host If you choose PING/HTTP as Connection Detection Mode, you have to specify the detection h

Vigor3900 Series User’s Guide 68z If you choose Static as IPv6 protocol type, click the StaticV6 tab to open the following page: Available paramet

Vigor3900 Series User’s Guide 69z If you choose DHCP-IA_NA as IPv6 protocol type, click the DHCPV6 Tab to open the following page: Available para

Vigor3900 Series User’s Guide 7044..11..22 DDeeffaauulltt RRoouuttee This page allows you to assign a WAN profile or a Load Balance profile as

Vigor3900 Series User’s Guide 7144..11..33 LLooaadd BBaallaannccee PPoolliiccyy Vigor3900 supports a load balancing function. It can assign t

Vigor3900 Series User’s Guide 72Protocol Display the protocol of such rule. Source IP Address Display the WAN IP address here as the source IP add

Vigor3900 Series User’s Guide 73Item Description Profile Type the name of the rule. Enable This Profile Check this box to enable such profile. Prot

Vigor3900 Series User’s Guide 744. Enter all the settings and click Apply. The new rule profile will be added on the screen. PPooooll This page a

Vigor3900 Series User’s Guide 75Mode Display the mode (failover or load balance) used by the pool profile. Interface Display the name of the WAN pr

Vigor3900 Series User’s Guide 763. Click the Load_Balance Tab. 4. Click Add. A new line for adding new entry will appear. 5. Use the drop down l

Vigor3900 Series User’s Guide 77HHooww ttoo aadddd aa PPooooll pprrooffiillee ffoorr FFaaiilloovveerr Such page allows you to set a backup

Vigor3900 Series User’s Guide 784. Use the drop down list to choose the one you need. “wan1” to wan5” are default settings. 5. Click Apply. A new

Vigor3900 Series User’s Guide 79This page simply displays current status of 802.1Q VALN setting profiles. Each item will be explained as follows:

Vigor3900 Series User’s Guide 80MMiirrrroorr CCoonnffiigguurraattiioonn The administrator can monitor all the packets passing through mirrored por

Vigor3900 Series User’s Guide 81IInntteerrffaaccee CCoonnffiigguurraattiioonn This page allows you to modify the status (enable / disable), speed

Vigor3900 Series User’s Guide 1CChhaapptteerr 11:: PPrreeffaaccee The Vigor3900 Series integrates a rich suite of functions, including NAT, fire

Vigor3900 Series User’s Guide 82means enabled. Duplex Display the duplex used (full or half) by such profile. Speed Display the transmission rate (1

Vigor3900 Series User’s Guide 8344..22 LLAANN Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network

Vigor3900 Series User’s Guide 84Edit Modify the selected LAN profile. To edit a profile, simply select the one you want to modify and click the Edit

Vigor3900 Series User’s Guide 85 Available parameters are listed as follows: Item Description Profile Type the name of the LAN profile. Enable Th

Vigor3900 Series User’s Guide 86 Add – Click it to add a new subnet mask with IP address and specified mode. Save – Click it to save the settings. I

Vigor3900 Series User’s Guide 873. When you finish the above settings, please click Apply to save the configuration and exit the dialog. DDHHCCPP

Vigor3900 Series User’s Guide 88Enable This Profile Display the status of the profile. False means disabled; True means enabled. Start IP Display th

Vigor3900 Series User’s Guide 89 Available parameters are listed as follows: Item Description Profile Display the name of the LAN profile. Enable

Vigor3900 Series User’s Guide 90 – click the icon to clear the IP setting. Lease Time Set a lease time for the DHCP server. The time unit is minute

Vigor3900 Series User’s Guide 91rule. Refresh Renew current web page. Profile Display the name of the LAN profile. Enable This Profile Display the