Instruction/ maintenance manual of the product 5500 Series Draytek
Go to page of 250
VigorPro 5500 Series Unified Security Firewall User’s Guide Version: 3.0 Date: 2007/05/02 Copyright 2007 All rights reserve d. This publication contains information th at is protected by copyright.
VigorPro5500 Series User’s Guide ii Safety Instructions and Approval Safety Instructions z Read the installation guide thorou gh ly before you set up the router. z The router is a com plicated electronic unit that may be repaired only be authorized a nd qualified personnel.
VigorPro5500 Series User’s Guide iii European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou County, H sinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: VigorPro 5500 DrayTek Corp.
VigorPro5500 Series User’s Guide iv T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation .
VigorPro5500 Series User’s Guide v 3.4.4 Service Type Gr oup ....................................................................................................... .5 4 3.4.5 CSM Profile .............................................................
VigorPro5500 Series User’s Guide vi 3.14.3 Se curity ................................................................................................................ ....... 137 3.14.4 Access Control .................................................
VigorPro5500 Series User’s Guide vii 5.1 Create a LAN-to-LAN Connection Betwee n Remote Office and Headquarter .................... 21 1 5.2 Create a Remote Dial-in User Connecti on Between the T elework er and Headquarter ...... 218 5.3 QoS Setti ng Exam ple .
.
VigorPro5500 Series User’s Guide 1 1 P P r r e e f f a a c c e e The VigorPro5500 series router provides Dual-WAN interface (which is a configurable second WAN) for Internet access to make the Internet connection more reliable. The wireless LAN supports more secure features and the transmission speed is up to 108Mbps (Super G TM ).
VigorPro5500 Series User’s Guide 2 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r P P r r o o 5 5 5 5 0 0 0 0 LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is powe red off. Virus On (Yellow) The anti-virus function is enabled .
VigorPro5500 Series User’s Guide 3 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r P P r r o o 5 5 5 5 0 0 0 0 G G LED Status Explanation Blinking The router is powe re d on and runnin g no rm ally. ACT (Activity) Off The router is powe red off.
VigorPro5500 Series User’s Guide 4 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r P P r r o o 5 5 5 5 0 0 0 0 i i LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is powe red off. Virus On (Yellow) The anti-virus function is enabled .
VigorPro5500 Series User’s Guide 5 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r P P r r o o 5 5 5 5 0 0 0 0 G G i i LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is powe red off.
VigorPro5500 Series User’s Guide 6 Interface Description RST (Factory Reset) Restore the def ault settings. Usage: Turn o n the router (A CT LED is bli nking). Pre ss the hole an d keep for more than 5 se conds. When y ou see the ACT LE D begins to bl ink rapidl y than usual, release the button.
VigorPro5500 Series User’s Guide 7 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n This section will guide you to install the rout er through hardware c onnection and configure the router’s settings through web browser.
VigorPro5500 Series User’s Guide 8.
VigorPro5500 Series User’s Guide 9 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings.
VigorPro5500 Series User’s Guide 10 3. Now, the Main Screen will pop up. Note: The home page will change slightly in accordance with the router you have. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password .
VigorPro5500 Series User’s Guide 11 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y.
VigorPro5500 Series User’s Guide 12 On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. Fo r example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step.
VigorPro5500 Series User’s Guide 13 If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown. User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP.
VigorPro5500 Series User’s Guide 14 2 2 . . 2 2 . . 2 2 P P P P T T P P Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear.
VigorPro5500 Series User’s Guide 15 2 2 . . 2 2 . . 3 3 S S t t a a t t i i c c I I P P Click Static IP as the protocol. Type in all the inform ation that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page.
VigorPro5500 Series User’s Guide 16 2 2 . . 2 2 . . 4 4 D D H H C C P P Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page.
VigorPro5500 Series User’s Guide 17 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page.
VigorPro5500 Series User’s Guide 18 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface.
VigorPro5500 Series User’s Guide 19 2 2 . . 4 4 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you.
VigorPro5500 Series User’s Guide 20 This page is left blank..
VigorPro5500 Series User’s Guide 21 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease.
VigorPro5500 Series User’s Guide 22 Below shows the menu items for WAN. 3 3 . . 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This section will introduce some general settings of Internet and explain the connection modes for WAN1 and WAN2 in details.
VigorPro5500 Series User’s Guide 23 Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed .
VigorPro5500 Series User’s Guide 24 3 3 . . 1 1 . . 3 3 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent physical mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly.
VigorPro5500 Series User’s Guide 25 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E To use PPPoE as the accessing protocol of the internet, please choose Internet Acce ss fro m WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown.
VigorPro5500 Series User’s Guide 26 Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address . Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router.
VigorPro5500 Series User’s Guide 27 Static or Dynamic IP (DHCP Client) Click Enable for activating this function. If you click Disable , this function will be closed and all the settings that you adjusted in this page will be invalid.
VigorPro5500 Series User’s Guide 28 Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dynamic IP mode. Router Name : Type in the router name provided by ISP. Domain Name : Type in the domain name that you have assigned.
VigorPro5500 Series User’s Guide 29 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P T T P P To use PPTP as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPTP mode for WAN2. The following web page will be shown.
VigorPro5500 Series User’s Guide 30 Default MAC Address – Click this radio button to use default MAC address for the router. Specify a MAC Address - Some Cable service providers specify a specific MAC address for access authentication. In such cases y ou need to click the Specify a MAC Address and enter the MAC address in the MAC Address field.
VigorPro5500 Series User’s Guide 31 Index Click the number of index to access into the load-balance policy configuration web page. Enable Check this box to enable this policy. Protocol Use the drop-down menu to change the protocol for t he WAN interface.
VigorPro5500 Series User’s Guide 32 Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. Binding WAN interface Choose the WAN interface (WAN1 or WAN2) for binding. Src IP Start Type the source IP start for the specified WAN interface.
VigorPro5500 Series User’s Guide 33 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . .
VigorPro5500 Series User’s Guide 34 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing.
VigorPro5500 Series User’s Guide 35 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in private IP address for connecting to a local private network (Default: 192.
VigorPro5500 Series User’s Guide 36 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.
VigorPro5500 Series User’s Guide 37 DHCP Server IP Address for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP r equest to the DHCP server . DNS Server Configuration DNS stands for Domain Name System.
VigorPro5500 Series User’s Guide 38 Destination Address Displays the destination address of the static route. Status Displays the status of the static route.
VigorPro5500 Series User’s Guide 39 Note: There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The first is that the LAN inte rface can exchange RIP packets with the neighboring routers via the 1st subne t (192.168.1.0/24).
VigorPro5500 Series User’s Guide 40 3 3 . . 2 2 . . 4 4 V V L L A A N N Note: This menu is available for Vigor5500 model. For Vigor5500G, please refer to 3.13. Virtual LAN function provides you a very conve nient way to ma nage hosts by grouping them based on the physical port.
VigorPro5500 Series User’s Guide 41 2. After checking the box to enable VLAN func tion, you will check the table according to the needs as shown below.
VigorPro5500 Series User’s Guide 42 and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below . Add and Edit IP Address – Type the IP address that will be used for the specified MAC address. Mac Address – Type the MAC address that is used to bind with the assigned IP address.
VigorPro5500 Series User’s Guide 43 Below shows the menu items for NAT. 3 3 . . 3 3 . . 1 1 P P o o r r t t R R e e d d i i r r e e c c t t i i o o n n Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc.
VigorPro5500 Series User’s Guide 44 Press any number under Index to access into next page for configuring port redirection. Enable Check this box to enable such port redirection setting. Mode Two options (Single and Range) are provided here for you to choose.
VigorPro5500 Series User’s Guide 45 box (as the starting point). The second one is assigned automatically after you type the private port number below.
VigorPro5500 Series User’s Guide 46 3 3 . . 3 3 . . 2 2 D D M M Z Z H H o o s s t t As mentioned above, Port Redirection can redirect incoming TCP/UDP or othe r traffic on particular ports to the specific private IP address/port of host in the LAN.
VigorPro5500 Series User’s Guide 47 If you previously have set up WAN Alias in Internet Access>>PPPoE, you will find them in Aux. WAN IP list for your selection. Enable Check to enable the DMZ Host function. Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one.
VigorPro5500 Series User’s Guide 48 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc.
VigorPro5500 Series User’s Guide 49 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that will be used for this entry. Local Computer Enter the private IP address of the local host or click Choose PC to select one.
VigorPro5500 Series User’s Guide 50 3 3 . . 4 4 O O b b j j e e c c t t s s S S e e t t t t i i n n g g s s For IPs in a range and service ports in a limited range usually will be applied for configuring router’s settings, therefore we can define them with objects and bind them with groups for using conveniently.
VigorPro5500 Series User’s Guide 51 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address.
VigorPro5500 Series User’s Guide 52 3 3 . . 4 4 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail.
VigorPro5500 Series User’s Guide 53 3 3 . . 4 4 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail.
VigorPro5500 Series User’s Guide 54 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when th e first and last values are different, it indicates that all the ports except the range defined here are available for this service type.
VigorPro5500 Series User’s Guide 55 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Objects page. All the available IP objects will be shown in this box. Selected Service Type Objects Click button to add the selected IP objects in this box.
VigorPro5500 Series User’s Guide 56 Profile Name Type a name for the CSM profile. There are several items for IM, VoIP, P2P provided here for you to choose to disallow people using.
VigorPro5500 Series User’s Guide 57 3 3 . . 5 5 F F i i r r e e w w a a l l l l 3 3 . . 5 5 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned.
VigorPro5500 Series User’s Guide 58 I I P P F F i i l l t t e e r r s s Depending on whether there is an existing Internet connection, or in other words “the WAN link status is up or down”, the IP filter architecture categorizes traffic into two: Call Filter and Data Filter .
VigorPro5500 Series User’s Guide 59 C C o o n n t t e e n n t t S S e e c c u u r r i i t t y y M M a a n n a a g g e e m m e e n n t t ( ( C C S S M M ) ) As the popularity of all kinds of instant messenger application arises, communication cannot become much easier.
VigorPro5500 Series User’s Guide 60 W W e e b b F F i i l l t t e e r r i i n n g g We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible pare nt or employer, you should protect those in your trust against the hazards.
VigorPro5500 Series User’s Guide 61 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter.
VigorPro5500 Series User’s Guide 62 Some on-line games (for example: Half Life) will use lots of fragmented UDP packets to transfer game data. Instinctively as a secur e firewall, V igor router will reject these fragmented packets to prevent attack unless you enable “ Accept Incoming Fragmented UDP Packets ”.
VigorPro5500 Series User’s Guide 63 Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Index (1-15) Set PCs on LAN to work at certain time interval only.
VigorPro5500 Series User’s Guide 64 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Ty pe and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type.
VigorPro5500 Series User’s Guide 65 Service Group/Object - Use the drop down list to choose the one that you want. Fragments Specify the action for fragmented packets. And it is used for Data Filter only. Don’t care - No action will be taken towards fragmented packets.
VigorPro5500 Series User’s Guide 66.
VigorPro5500 Series User’s Guide 67 3 3 . . 5 5 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default.
VigorPro5500 Series User’s Guide 68 packets per second. Block IP options Check the box to activate the Block IP options function. The Vigor router will ignore any IP packets with IP option field in the datagram header.
VigorPro5500 Series User’s Guide 69 reject this kind of packets. Warning Messages We provide Syslog function for user to retrieve message from Vigor router. The user, as a Syslog Server, shall receive the report sending from Vigor router which is a Syslog Client.
VigorPro5500 Series User’s Guide 70 3 3 . . 5 5 . . 5 5 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r Based on the list of user defined keywords, the URL Content Filter facility in Vigor router inspects the URL string in every outgoing HTTP request.
VigorPro5500 Series User’s Guide 71 a noun, a partial noun, or a complete URL string. Multiple keywords within a frame are separated by space, co mma, or semicolon.
VigorPro5500 Series User’s Guide 72 3 3 . . 5 5 . . 6 6 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r Click Firewall and click Web Content Filter to open the setup page. For this section, please refer to Web Content Filter user’s guide.
VigorPro5500 Series User’s Guide 73 3 3 . . 6 6 A A n n t t i i - - I I n n t t r r u u s s i i o o n n This page allows you to prevent the intrusion from hackers wh ile accessing into Internet. It can detect the intrusion and execute basic defense.
VigorPro5500 Series User’s Guide 74 High Security Click this radio button to activate the anti-intrusion service with overall detecting conditions. That is, the router will detect and block the incoming/outgoing packets which match all the severity rules, including high, medium and low.
VigorPro5500 Series User’s Guide 75 Type links Click any anti-intrusion type link to access into next page for configuring the rules settings. Here we provide several rules for each type. The factory types and rules for anti-intrusion are shown in this page.
VigorPro5500 Series User’s Guide 76 Action Pass - Click this radio button to detect if there is any intrusion occurrence for your reference. The system will not do any advanced action for such condition. Disallow - Click this radio button to block the incoming/outgoing packets with possible intrusion acti ons transmitting through the router.
VigorPro5500 Series User’s Guide 77 3 3 . . 7 7 A A n n t t i i - - V V i i r r u u s s Vigor router can offer basic virus scanning, d estroying and cut off the connection between questionable link and your computer for the fil es transmitted through specified protocol.
VigorPro5500 Series User’s Guide 78 Profile Name T ype a name for the profile. Protocol Currently , only the files transmitted through t he protocols listed in this page including SMTP , POP3 , IMAP , HTTP and FTP will be scanned by this router . Action Choose the action that you want to apply to the proto cols of each operation.
VigorPro5500 Series User’s Guide 79 Detect Macro Attachmen t The file with macro attachment will be passed/destro yed/reset under different protocols.
VigorPro5500 Series User’s Guide 80 Click each name link to check the detailed information of the anti-virus rule. D D e e t t a a i i l l e e d d V V i i e e w w f f o o r r A A n n t t i i - - V V i i r r u u s s From the fourteen types of anti-virus list, clic k any one of them to access into next page.
VigorPro5500 Series User’s Guide 81 This page allows you to set 32 entries (rules) of file names to be filtered by the router. In such case, the file format is ignored. The rout er will destroy, scan or non-scan the specified filename according to the configuration t hat you set here.
VigorPro5500 Series User’s Guide 82 for Default Action for default action. Click OK to finish the page configuration..
VigorPro5500 Series User’s Guide 83 3 3 . . 8 8 A A n n t t i i - - S S p p a a m m Many people suffer with unwanted mails comi ng from everywhere. Such device offers a mechanism, named Anti-Spam, to do basi c scanning for filtering unnecessary mails and sorting the mails.
VigorPro5500 Series User’s Guide 84 Profile Name Type a name for such profile setting. Choose Protocol to Scan Spam Spam files usually come with protocol of SMTP or POP3. Please check the box that you want to avoid. It would be better to check both protocols.
VigorPro5500 Series User’s Guide 85 Tag - Choose this action to make all mails be tagged with certain words for you to identify easily. For example, type “timeout” on the box of Message . Then all the mails sending to your e-mail box at system timeout will be marked with “***timeout***” before the subjects of the mails.
VigorPro5500 Series User’s Guide 86 3 3 . . 9 9 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router. The router will generate the records of NAT sessions for su ch connection.
VigorPro5500 Series User’s Guide 87 Add Adds the specific session limitation onto the list above. Edit Allows you to edit the settings for the selected limitation. Delete Delete the selected settings existing on the limitation list. Index (1-15) in Schedule Setup You can type in four sets of time schedule for your request.
VigorPro5500 Series User’s Guide 88 TX limit Define the limitation for the speed of the upstream. If you do not set the limit in this field, the system will use the default speed for the specific limitation you set for each index. RX limit Define the limitation for the speed of the downstream.
VigorPro5500 Series User’s Guide 89 Assured Forwarding (AF), and Best Effort (BE). AF defines the four classes of delivery (or forwarding) classes and three levels of drop precedence in each class.
VigorPro5500 Series User’s Guide 90 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN- apply to incoming traffic only. OUT- apply to outgoing traffic only.
VigorPro5500 Series User’s Guide 91 Management>>Quality of Service . E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one.
VigorPro5500 Series User’s Guide 92 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit button to set the remote IP address (on Lan/WAN) for the rule.
VigorPro5500 Series User’s Guide 93 E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field.
VigorPro5500 Series User’s Guide 94 Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP) for the new service. Port Configuration Click Single or Range . If you select Range, you have to t ype in the starting port number and the end porting num ber on the boxes below.
VigorPro5500 Series User’s Guide 95 3 3 . . 1 1 0 0 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 1 1 0 0 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP.
VigorPro5500 Series User’s Guide 96 Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. View Log Display DDNS log status. Force Update Force the router updates its information to DDNS server.
VigorPro5500 Series User’s Guide 97 4. Click OK button to activate the settings. You will see your setting has been saved. The W ildcard and Backup MX features are not supported for all Dynamic DNS providers. Y ou could get more detailed in formation from their websites.
VigorPro5500 Series User’s Guide 98 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule.
VigorPro5500 Series User’s Guide 99 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE In ternet access profile.
VigorPro5500 Series User’s Guide 100 3 3 . . 1 1 0 0 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system.
VigorPro5500 Series User’s Guide 101 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Softw are Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will blo ck the accessing ability of some network ports.
VigorPro5500 Series User’s Guide 102 3 3 . . 1 1 0 0 . . 5 5 W W a a k k e e O O n n L L A A N N A PC client on LAN can be woken up by the router it connects. When a user wants to wake up a specified PC through the router, he/she mu st type correct MAC address of the specified PC on this web page of Wake On LAN of this router.
VigorPro5500 Series User’s Guide 103 3 3 . . 1 1 1 1 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet.
VigorPro5500 Series User’s Guide 104 3 3 . . 1 1 1 1 . . 2 2 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPSec. Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol.
VigorPro5500 Series User’s Guide 105 For example, if the local private network is 192.168.1.0/2 55.255.255.0, you could ch oose 192.168.1.200 as the Start IP Address. But, you have to notice that the first two IP addresses of 192.168.1. 200 and 192.
VigorPro5500 Series User’s Guide 106 Pre-Shared Key- Specify a key for IKE authentication Confirm Pre-Shared Key- Confirm the pre-shared key. IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypte d.
VigorPro5500 Series User’s Guide 107 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value.
VigorPro5500 Series User’s Guide 108 3 3 . . 1 1 1 1 . . 5 5 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection.
VigorPro5500 Series User’s Guide 109 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds.
VigorPro5500 Series User’s Guide 110 select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. Password This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above.
VigorPro5500 Series User’s Guide 111 3 3 . . 1 1 1 1 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles.
VigorPro5500 Series User’s Guide 112 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile.
VigorPro5500 Series User’s Guide 113 connection has been idled over the value, the router will drop the connection. Enable PING to keep alive This function is to help the router to determine the status of IPSec VPN connection, especially useful in the case of abnormal VPN IPSec tunnel disruption.
VigorPro5500 Series User’s Guide 114 VJ compression This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. VJ Compression is used for TCP/IP protocol header compression. Normally set to Yes to improve bandwidth utilization.
VigorPro5500 Series User’s Guide 115 authentication schemes and encryption algorithms to the VPN peers, and get its feedback to find a match. Two combinations are available for Aggressive mode and nine for Main mode. We suggest you select the combination that covers the most schemes.
VigorPro5500 Series User’s Guide 116 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN connection. You should set the User Name and Password of remote dial-in user below. This feature is useful for i model only.
VigorPro5500 Series User’s Guide 117 Specify CLID or Remote VPN Gateway You can specify the IP address of the remote dial-in user or peer ID (should be the same with the ID setting in dial-in type) by checking the box. Enter Peer ISDN number if you select ISDN above (This feature is useful for i model only.
VigorPro5500 Series User’s Guide 118 automatically per callback connection. The default value 0 means no limitation of callback period. My WAN IP This field is only applicable when you s elect ISDN, PPTP or L2TP with or without IPSec policy above. The default value is 0.
VigorPro5500 Series User’s Guide 119 3 3 . . 1 1 1 1 . . 7 7 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button.
VigorPro5500 Series User’s Guide 120 3 3 . . 1 1 2 2 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc.
VigorPro5500 Series User’s Guide 121 Type in all the information that the window request. Then click Generate again. Import Click this button to import a saved file as the certification information. Refresh Click this button to refresh the information listed below.
VigorPro5500 Series User’s Guide 122 3 3 . . 1 1 2 2 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window.
VigorPro5500 Series User’s Guide 123 3 3 . . 1 1 2 2 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them .
VigorPro5500 Series User’s Guide 124 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s This web page allows you to enable wireless LAN function.
VigorPro5500 Series User’s Guide 125 3 3 . . 1 1 3 3 . . 3 3 D D i i a a l l t t o o S S i i n n g g l l e e / / D D u u a a l l I I S S P P s s Select Dialing to a Single ISP if you access the Internet via a single ISP. ISP Access Setup ISP Name - Enter your ISP name such as Seednet, Hinet, and so on.
VigorPro5500 Series User’s Guide 126 Method (IPCP) most ISPs provide a dynamic IP address for the router when it connects to the ISP. If your ISP provides a fixed IP address, check Yes and enter the IP address in the field of Fixed IP Address . Select Dialing to Dual ISPs if you have more than one ISP.
VigorPro5500 Series User’s Guide 127 Primary ISP Setup ISP Name - Enter your ISP name. Dial Number - Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided by your ISP.
VigorPro5500 Series User’s Guide 128 3 3 . . 1 1 3 3 . . 4 4 V V i i r r t t u u a a l l T T A A Vi r t u a l TA means the local hosts or PCs in th e network that uses popular CAPI-based software such as R VS-COM or BVRP to access the router as a local ISDN T A for sending or receiving F AX messages over the ISDN line.
VigorPro5500 Series User’s Guide 129 z The Virtual TA client only supports the CA PI 2.0 protocol and has no built-in FAX engine. z One ISDN BRI interface has two B channels. The maximum number of active clients is also 2. z Before you configure the V irtual T A, you must set the correct country code in ISDN Setup .
VigorPro5500 Series User’s Guide 130 C C o o n n f f i i g g u u r r e e a a V V i i r r t t u u a a l l T T A A C C l l i i e e n n t t / / S S e e r r v v e e r r Since the V irtual T A application is a client/ server network model, you m ust configure it on both ends to run properly your V irtual T A application.
VigorPro5500 Series User’s Guide 131 If you have applied to an MSN number service, th e V irtual T A server can assign which client has the specified MSN number . When an inco ming call arrives, the server will inform the appropriate client. Now we set an example to describe the configuration of the MSN number .
VigorPro5500 Series User’s Guide 132 activation. The phone call will be soon disconnected once the router is on line. Note: Dialing to a Single ISP should be pre-configured properly .
VigorPro5500 Series User’s Guide 133 3 3 . . 1 1 4 4 W W i i r r e e l l e e s s s s L L A A N N This function is used for G models only. 3 3 . . 1 1 4 4 . . 1 1 B B a a s s i i c c C C o o n n c c e e p p t t s s Over recent years, the market for wireless co mmunications has enjoyed tremendous growth.
VigorPro5500 Series User’s Guide 134 WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit ke y. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys.
VigorPro5500 Series User’s Guide 135 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons. To isolate means neither of the parties can access each othe r.
VigorPro5500 Series User’s Guide 136 11b only - The radio only supports IEE E802.11b. Index (1-15) Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup.
VigorPro5500 Series User’s Guide 137 3 3 . . 1 1 4 4 . . 3 3 S S e e c c u u r r i i t t y y By clicking the Security Settings , a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose.
VigorPro5500 Series User’s Guide 138 auto-negotiated during authentication, the field of ke y setting below will be not available for input. WPA The WPA encrypts each frame transmitted from the radio using the key, which either PSK entered manually in this field below or automatically negotiated via 802.
VigorPro5500 Series User’s Guide 139 addresses for other clients in the network manually. Choose Isolate WLAN from LAN will separate all the WLAN stations from LAN based on the MAC Address list. MAC Address Filter Display all MAC addresses that are edited before.
VigorPro5500 Series User’s Guide 140 3 3 . . 1 1 4 4 . . 5 5 W W D D S S WDS means Wireless Distribution Syste m. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge traffic between two LANs through the air.
VigorPro5500 Series User’s Guide 141 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2.
VigorPro5500 Series User’s Guide 142 Security There are three types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router.
VigorPro5500 Series User’s Guide 143 If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page and click Add . Later, the MAC address of the AP will be added to the page of WDS setting. 3 3 .
VigorPro5500 Series User’s Guide 144 3 3 . . 1 1 4 4 . . 8 8 S S t t a a t t i i o o n n R R a a t t e e C C o o n n t t r r o o l l This page allows you to cont rol the upload and download rate of each wireless client (station). Please check the box of Enable to invoke this setting.
VigorPro5500 Series User’s Guide 145 Enable Check this box to enable this function (for VLAN Configuration). P1 – P4 Check the box to make the com puter connecting to the port being grouped in specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box.
VigorPro5500 Series User’s Guide 146 7890 in the boxes of W_VLAN1. Users can conf igure fifteen groups of wireless VLAN in this page. Enable Check this box to invoke wireless VLAN function. Login ID Type Login ID for different groups of W _VLAN with 1 to 11 characters.
VigorPro5500 Series User’s Guide 147 Disable broadcast and multicast traffic Check this box to prevent br oadcast and multicast traffic forwarding to all W_VLAN.
VigorPro5500 Series User’s Guide 148 5. You can go to Diagnostics>>Wireless VLAN Online Station for viewing the connection status whenever you want. 3 3 . . 1 1 5 5 . . 3 3 V V L L A A N N C C r r o o s s s s S S e e t t u u p p This function allows the router to integr ate VLAN and W_VLAN for managing different computers (notebooks).
VigorPro5500 Series User’s Guide 149 Enable Check this box to invoke VLAN Cross Setup function. VLAN0-3 It represents the groups of virtual LAN connected by Ethernet interface. W_VLAN0-15 It represents the groups of wireless VLAN communicated by wireless interface.
VigorPro5500 Series User’s Guide 150 3 3 . . 1 1 5 5 . . 4 4 W W i i r r e e l l e e s s s s R R a a t t e e C C o o n n t t r r o o l l Rate Control manages the transmission rate of data in and out throu gh the router. You can also manage the in/out rate of each wireless VLAN.
VigorPro5500 Series User’s Guide 151 3 3 . . 1 1 6 6 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade.
VigorPro5500 Series User’s Guide 152 DHCP Server Display the current status of DHCP server of the LAN interface. MAC Address Display the MAC address of the WAN Interface. IP Address Display the IP address of the WAN interface. Default Gateway Display the assigned IP address of the default gateway.
VigorPro5500 Series User’s Guide 153 3 3 . . 1 1 6 6 . . 3 3 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k u u p p B B a a c c k k u u p p t t h h e e C C o o n n f f i i g g u u r r a a t t i i o o n n Follow the steps below to backup your configuration.
VigorPro5500 Series User’s Guide 154 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for dem onstrating examples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available.
VigorPro5500 Series User’s Guide 155 Mail To Assign a mail address for sending mails out. Return-Path Assign a path for receiving the mail from outside. Authentication Check this box to activate this function while using e-mail application. User Name Type the user name for authentication.
VigorPro5500 Series User’s Guide 156 3 3 . . 1 1 6 6 . . 5 5 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from.
VigorPro5500 Series User’s Guide 157 3 3 . . 1 1 6 6 . . 6 6 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. For example, as to management ac cess control, the port number is used to send/receive SIP message for building a session.
VigorPro5500 Series User’s Guide 158 Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a proper name. The default setting is public. Notification Host IP Set the IP address of the host that will receive the trap community.
VigorPro5500 Series User’s Guide 159 3 3 . . 1 1 6 6 . . 8 8 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools.
VigorPro5500 Series User’s Guide 160 3 3 . . 1 1 6 6 . . 9 9 S S i i g g n n a a t t u u r r e e U U p p g g r r a a d d e e You can get the most updated signature fro m DrayTek’s server if the license key of anti-virus/anti-intrusion for the VigorPro5500 is not e xpired.
VigorPro5500 Series User’s Guide 161 rules for your router. DT-DT/DT-KL_XXXXXX – If you have registered and activated your AI/AV account, and downloaded the newest rules from www.vigorpro.com, you can see DT-DT/DT-KL in this field that means you have obtained the latest signature information.
VigorPro5500 Series User’s Guide 162 upgraded and displayed on the web page. Upgrade Automatically Specify certain time for execu ting the upgrade automatically.
VigorPro5500 Series User’s Guide 163 3 3 . . 1 1 7 7 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 7 7 .
VigorPro5500 Series User’s Guide 164 3 3 . . 1 1 7 7 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page.
VigorPro5500 Series User’s Guide 165 3 3 . . 1 1 7 7 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc.
VigorPro5500 Series User’s Guide 166 Interface It indicates the interface of the WAN connection. Refresh Click it to reload the page. 3 3 . . 1 1 7 7 .
VigorPro5500 Series User’s Guide 167 3 3 . . 1 1 7 7 . . 7 7 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determ ined by the router automatically.
VigorPro5500 Series User’s Guide 168 3 3 . . 1 1 7 7 . . 8 8 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management.
VigorPro5500 Series User’s Guide 169 Refresh Click this link to refr esh this page manually. Index Display the number of the data flow. IP Address Display the IP address of the monitored device. TX rate (kbps) Display the trans mission speed of the monitored device.
VigorPro5500 Series User’s Guide 170 The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1/WAN2 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past.
VigorPro5500 Series User’s Guide 171 4 R R e e g g i i s s t t r r a a t t i i o o n n f f o o r r t t h h e e R R o o u u t t e e r r To use the anti-intrusion, anti-virus and anti- spam features o.
VigorPro5500 Series User’s Guide 172 2. Check to confirm that you accept the Agreement and click Accept . 3. Type your personal information in this page and then click Continue .
VigorPro5500 Series User’s Guide 173 4. Choose proper selection for your computer and click Continue . 5. Now you have created an account successfully. 6. Check to see the confirmation email with the title of New Account Confirmation Letter from www.
VigorPro5500 Series User’s Guide 174 8. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . Then type the code in the box of AuthCode according to the value di splayed on the right side of it.
VigorPro5500 Series User’s Guide 175 4 4 . . 2 2 C C r r e e a a t t i i n n g g a a n n d d A A c c t t i i v v a a t t i i n n g g a a n n A A c c c c o o u u n n t t f f r r o o m m R R o o u u t.
VigorPro5500 Series User’s Guide 176 4. A Re-login page will be shown on the screen. 5. Locate and click Create an account now link on the bottom of this page. You will access into the following page. Check the box below to confirm that you accept the Agreement and click Accept .
VigorPro5500 Series User’s Guide 177 6. Type your personal information in this page and then click Continue . 7. Choose proper selection for your computer and click Continue .
VigorPro5500 Series User’s Guide 178 8. Now you have created an account successfully. 9. Check to see the confirmation email with the title of New Account Confirmation Letter from www.vigorpro.com . 10. Click the Activate my Account link to enable the account that you created.
VigorPro5500 Series User’s Guide 179 11. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . Then type the code in the box of AuthCode according to the value di splayed on the right side of it.
VigorPro5500 Series User’s Guide 180 4 4 . . 3 3 R R e e g g i i s s t t e e r r i i n n g g Y Y o o u u r r V V i i g g o o r r R R o o u u t t e e r r You have activated the new account for the router. Now, it is the time for you to register your vigor router.
VigorPro5500 Series User’s Guide 181 3. Click the Activate link from the Signature Upgrade web page. 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously.
VigorPro5500 Series User’s Guide 182 5. The following page will be displayed after you logging in VigorPro server. From this page, please click Add . 6. When the following page appears, please type in Nick Nam e (for the router) and choose the right purchase date from the popup calendar (it appears when you click on the box of Purchase Date).
VigorPro5500 Series User’s Guide 183 8. Now, your router information has been added to the database. Click OK to leave this web page and return to My Product web page. F F r r o o m m A A n n t t i i - - S S p p a a m m > > > > P P r r o o f f i i l l e e S S e e t t t t i i n n g g 1.
VigorPro5500 Series User’s Guide 184 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. The following page will be displayed after you logging in VigorPro server. From this page, please click Add .
VigorPro5500 Series User’s Guide 185 7. After adding the basic information for the router, please click Submit . 8. Now, your router information has been added to the database. Click OK to leave this web page and return to My Product web page. 4 4 .
VigorPro5500 Series User’s Guide 186.
VigorPro5500 Series User’s Guide 187 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. On the web page of My Product , you can find a list of the devices that you add with the above steps.
VigorPro5500 Series User’s Guide 188 Rename It allows you to change the account name. Delete It allows you to delete account name used currently. Transfer It allows you to transfer the VigorPro device together with applied license to someone who has already registered another account in www.
VigorPro5500 Series User’s Guide 189 Note: DT-DT means you can acquire the anti-intrusion and anti-virus services from DrayTek Corporation. 8. Next, the DrayTek Service Activation screen will be shown as the following: (Above figure supposes you have not activated Anti-Spam yet.
VigorPro5500 Series User’s Guide 190 10. Return to Signature Upgrade page of the router’s w eb configurator. The start date and expire date for the license are shown in this page. Now, you have finished all the procedure for registering your ro uter.
VigorPro5500 Series User’s Guide 191 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. On the web page of My Product , you can find a list of the devices that you add with the above steps.
VigorPro5500 Series User’s Guide 192 6. From the Device’s Service section, click the Activate buttons for AS (Anti-Spam) service. 7. In this page, check the box of “ I have read and accept the above Agreement ”. The system will find out the date for you to activate this version of service.
VigorPro5500 Series User’s Guide 193 (Above figure supposes you have not activated Anti-Virus yet.) 9. Click Close . Now, you have finished all the procedure for activating Anti-Spam service for your router. Note: You are allowed to use this version (with anti-spam features) for 30 days after registration for your r outer.
VigorPro5500 Series User’s Guide 194 U U p p g g r r a a d d e e L L i i c c e e n n s s e e f f o o r r A A n n t t i i - - S S p p a a m m When thirty days for free of charge expires, y ou can apply for a new license by following the steps below: 1.
VigorPro5500 Series User’s Guide 195 5. On the web page of My Product , you can find a list of the devices that you add with the above steps. Currently, you just have added VigorPro 5500. Please click the serial number link. 6. From the Device’s Service section, click the Upgrade buttons for AS (Anti-Spam) service.
VigorPro5500 Series User’s Guide 196.
VigorPro5500 Series User’s Guide 197 7. In this page, type the License Number stat ed on the Anti-Spam license card in the field of License Number . Then, click Add License . 8. Now, the license number will be displayed on the page immediately. Click Apply .
VigorPro5500 Series User’s Guide 198 9. In this page, check the box of “ I have read and accept the above Agreement ”. The system will find out the date for you to activate this version of service. Then, click Comfirm . 10. Next, the DrayTek Service Activation scr een will be shown as the following.
VigorPro5500 Series User’s Guide 199 1. Open a web browser on your PC and type http://192. 168.1.1. A pop-up window will open to ask for username and password. Do not type any word on t he window and click OK . 2. From the router’s web page, please open System Maintenance >>Signature Upgrade .
VigorPro5500 Series User’s Guide 200 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. The following page will be displayed after you logging in VigorPro server. From this page, please click Add .
VigorPro5500 Series User’s Guide 201 6. When the following page appears, please type in Nick Nam e (for the router) and choose the right purchase date from the popup calendar (it appears when you click on the box of Purchase Date). 7. After adding the basic information for the router, please click Submit .
VigorPro5500 Series User’s Guide 202 9. On the web page of My Product , you can find a list of the devices that you add with the above steps. Currently, you just have added VigorPro 5500. Please click the serial number link. 10. From the Device’s Service section, click the Activate button for AI-AV (Anti-Intrusion & Anti-Virus) service.
VigorPro5500 Series User’s Guide 203 11. In the following page, please type in license number shown on the License Key card. There are two numbers for your selection, DT-DT (service from Draytek) or DT-KL (service from Kaspersky Lab). Simply enter the one that you want to apply and click Add License.
VigorPro5500 Series User’s Guide 204 14. Click Apply when you finish choosing t he date. The following page will be shown to ask your confirmation. 15. Check the box of I have read and accept the above Agreement and click Confirm . The Service Activation screen will be shown as the following.
VigorPro5500 Series User’s Guide 205 4 4 . . 6 6 B B a a c c k k u u p p a a n n d d U U p p g g r r a a d d e e S S i i g g n n a a t t u u r r e e f f o o r r A A n n t t i i - - I I n n t t r r u.
VigorPro5500 Series User’s Guide 206 T T i i m m e e f f o o r r B B a a c c k k u u p p Before changing other license, it is suggested fo r you to backup t he original signature first. To backup current signature informa tion with the filename vigorpro.
VigorPro5500 Series User’s Guide 207 4. A Re-login page will be shown on the screen. Please type new account and password that you created previously.
VigorPro5500 Series User’s Guide 208 The following page will be shown automa tically. You will find there are two devices service added to your router. If you activated only one service befor e, it must be only one service displayed here. In this case, DT-DT and DT-KL services are registered on the VirgorPro website.
VigorPro5500 Series User’s Guide 209 4 4 . . 8 8 E E n n a a b b l l i i n n g g A A n n t t i i - - V V i i r r u u s s / / A A n n t t i i - - I I n n t t r r u u s s i i o o n n / / A A n n t t i.
VigorPro5500 Series User’s Guide 210 If you did not check the Anti-Intrusion box and choose a proper profile for Anti-Virus/Anti-Spam, you still cannot use the Anti-Intrusion/Anti-Virus/Anti-Spam function even if you finished all the relational profiles.
VigorPro5500 Series User’s Guide 211 5 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 5 5 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L.
VigorPro5500 Series User’s Guide 212 For using IPSec -based service, such as IPSec or L2 TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile.
VigorPro5500 Series User’s Guide 213 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection.
VigorPro5500 Series User’s Guide 214 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection.
VigorPro5500 Series User’s Guide 215 2. Then, for using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known.
VigorPro5500 Series User’s Guide 216 connection. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection.
VigorPro5500 Series User’s Guide 217 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection.
VigorPro5500 Series User’s Guide 218 5 5 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w.
VigorPro5500 Series User’s Guide 219 3. Go to Remote Dial-In Users . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection.
VigorPro5500 Series User’s Guide 220 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel t o Vigor router.
VigorPro5500 Series User’s Guide 221 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router.
VigorPro5500 Series User’s Guide 222 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 5 5 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children.
VigorPro5500 Series User’s Guide 223 3. Return to previous page. Enter th e Name of Index Class 1 by clicking Edit link. T y pe the name “ E-mail ” for Class 1. 4. For this index, the user will set reserved bandwidth (e.g., 25%) for Email using protocol POP3 and SMTP .
VigorPro5500 Series User’s Guide 224 8. If the worker has connected to the headquart er using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he m ay set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserve bandwidth for 1 VPN tunnel.
VigorPro5500 Series User’s Guide 225 5 5 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/ Subnet Mask is 192.
VigorPro5500 Series User’s Guide 226 T o use another DHCP server in the network rather than the built-in one of V igor Router , you have to change the settings as show below . Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.
VigorPro5500 Series User’s Guide 227 5 5 . . 5 5 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools.
VigorPro5500 Series User’s Guide 228 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility .
VigorPro5500 Series User’s Guide 229 14. Click Send . 15. Now the firmware update is finished. 5 5 . . 6 6 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m.
VigorPro5500 Series User’s Guide 230 1. Go to Certificate Management and choose Local Certificate . 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.
VigorPro5500 Series User’s Guide 231 4. Connect to CA server via web browser. Follo w the instruction to subm it the request. Below we take a Windows 2000 CA server for example.
VigorPro5500 Series User’s Guide 232 Then you have done the request and the ser ver now issues you a certificate. Select Base 64 encoded certificate and Download CA certificate . Now you should get a certificate (.cer file) and save it. 5. Back to Vigor router, go to Local Certificate .
VigorPro5500 Series User’s Guide 233 5 5 . . 7 7 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1.
VigorPro5500 Series User’s Guide 234 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.
VigorPro5500 Series User’s Guide 235 6 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration.
VigorPro5500 Series User’s Guide 236 F F o o r r W W i i n n d d o o w w s s The example is based on Windows XP. As to the exam ples for other operation systems, please refer to the sim ilar steps or find support notes in www.draytek.com . 1. Go to Control Panel and then double-click on Network Connection s.
VigorPro5500 Series User’s Guide 237 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network .
VigorPro5500 Series User’s Guide 238 6 6 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router.
VigorPro5500 Series User’s Guide 239 6 6 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly.
VigorPro5500 Series User’s Guide 240 F F o o r r S S t t a a t t i i c c / / D D y y n n a a m m i i c c I I P P U U s s e e r r s s 1. Check if the Enable option is selected. 2. Check if IP address, Subnet Mask and Gateway are entered with correct values that you got from your ISP .
VigorPro5500 Series User’s Guide 241 F F o o r r P P P P T T P P U U s s e e r r s s 1. Check if the Enable option for PPTP Link is selected. 2. Check if PPTP Server, Username, Password and WAN IP address are set correctly (must identify with the values from your ISP).
VigorPro5500 Series User’s Guide 242 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly , please re lease the button.
An important point after buying a device Draytek 5500 Series (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Draytek 5500 Series yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Draytek 5500 Series - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Draytek 5500 Series you will learn all the available features of the product, as well as information on its operation. The information that you get Draytek 5500 Series will certainly help you make a decision on the purchase.
If you already are a holder of Draytek 5500 Series, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Draytek 5500 Series.
However, one of the most important roles played by the user manual is to help in solving problems with Draytek 5500 Series. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Draytek 5500 Series along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
