Draytek VigorPro 5300 manuale d’uso

VigorPro 5300 Unified Security Firewall User’s Guide Version: 2.0 Date: 2008/05/29 Copyright 2008 All rights reserve d. This publication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval syst em, or translated into any lang u age without written permission from the cop[...]

VigorPro5300 Series User’s Guide ii Safety Instructions and Approval Safety Instructions z Read the installation guide thorou gh ly before you set up the router. z The router is a com plicated electronic unit that may be repaired only be authorized a nd qualified personnel. Do not try t o open or re pair the router yourself. z Do not place the ro[...]

VigorPro5300 Series User’s Guide iii European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou County, H sinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: VigorPro 5300 Series DrayTek Corp. declar es that VigorPro 5300 Series is in compl ian ce with the following essential r eq u irements and other rele[...]

VigorPro5300 Series User’s Guide iv T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1[...]

VigorPro5300 Series User’s Guide v 3.4.1 IP Object ................................................................................................................ ......... 56 3.4.2 IP Group ................................................................................................................. ........ 58 3.4.3 Service Type Object ....[...]

VigorPro5300 Series User’s Guide vi 3.12.3 Phone Settings .......................................................................................................... . 163 3.12.4 St atus .................................................................................................................. ........ 178 3.13 IS DN .......................[...]

VigorPro5300 Series User’s Guide vii 4.6 Backup and Upgrade Signature f o r A n ti - I n t r us i o n /A nt i- V ir us .................................................. 256 4.7 Switching between DT -DT and DT -KL ................................................................................ 257 4.8 Enabling Anti-Virus/Ant i-Intrusion/An ti-S p[...]

[...]

VigorPro5300 Series User’s Guide 1 1 P P r r e e f f a a c c e e VigorPro 5300 is a broadband router with dual-WAN interface. It provides policy-based load-balance, fail-over and BOD (Bandwidth on Demand), also it integrates IP layer QoS, NAT session/bandwidth management to help u sers control works well with large bandwidth. By adopting hardware[...]

VigorPro5300 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s 1 1 . . 1 1 . . 1 1 F F o o r r V V i i g g o o r r P P r r o o 5 5 3 3 0 0 0 0 LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is po[...]

VigorPro5300 Series User’s Guide 3 Interface Description Factory Reset Restore the def ault settings. Usage: Turn o n the router (A CT LED is bli nking). Pre ss the hole an d keep for more than 5 se conds. When y ou see the ACT LE D begins to bl ink rapidl y than usual, release the button. Th en the rout er will restart with the factory default c[...]

VigorPro5300 Series User’s Guide 4 1 1 . . 1 1 . . 2 2 F F o o r r V V i i g g o o r r P P r r o o 5 5 3 3 0 0 0 0 n n LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is powe red off. IDP (Intrusi o n Detect i on an d Prevention) On (Yellow) The anti-intrusion function is enabled. Vi[...]

VigorPro5300 Series User’s Guide 5 Interface Description Wireless LAN ON/OFF/WPS Factory Reset Press "Wireless LAN ON/OFF/WPS" butt on for 2 seconds to wait for client device makin g network c onnection t hrough WPS . Press "Wireless LAN ON/OFF/WPS" butt on once to enable (WLAN LED on) or disable (WLAN LED off) wireless connec[...]

VigorPro5300 Series User’s Guide 6 1 1 . . 1 1 . . 3 3 F F o o r r V V i i g g o o r r P P r r o o 5 5 3 3 0 0 0 0 V V n n LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is powe red off. IDP (Intrusi o n Detect i on an d Prevention) On (Yellow) The anti-intrusion function is enabled[...]

VigorPro5300 Series User’s Guide 7 Interface Description Wireless LAN ON/OFF/WPS Factory Reset Press "Wireless LAN ON/OFF/WPS" butt on for 2 seconds to wait for client device makin g network c onnection t hrough WPS . Press "Wireless LAN ON/OFF/WPS" butt on once to enable (WLAN LED on) or disable (WLAN LED off) wireless connec[...]

VigorPro5300 Series User’s Guide 8 1 1 . . 1 1 . . 4 4 F F o o r r V V i i g g o o r r P P r r o o 5 5 3 3 0 0 0 0 V V S S LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is powe red off. IDP (Intrusi o n Detect i on an d Prevention) On (Yellow) The anti-intrusion function is enabled[...]

VigorPro5300 Series User’s Guide 9 On The port is connected with 100Mbp s. Right LED (Green) Off The port is connected with 10Mb ps. On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On The port is connected with 100Mbp s. LAN 1/2/3/ 4 Right LED (Green) Off The port is connected with 10Mb [...]

VigorPro5300 Series User’s Guide 10 1 1 . . 1 1 . . 5 5 F F o o r r V V i i g g o o r r P P r r o o 5 5 3 3 0 0 0 0 V V S S n n LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is powe red off. IDP (Intrusi o n Detect i on an d Prevention) On (Yellow) The anti-intrusion function is en[...]

VigorPro5300 Series User’s Guide 11 Blinking The data is transmitting. On The port is connected with 100Mbp s. Right LED (Green) Off The port is connected with 10Mb ps. On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On The port is connected with 100Mbp s. LAN 1/2/3/ 4 Right LED (Green) [...]

VigorPro5300 Series User’s Guide 12 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect a cable Modem/DSL Modem/Media Converter (depends on your requirem ent) to any WAN port of router with Ethernet cable (RJ-45)[...]

VigorPro5300 Series User’s Guide 13 NT mode in VoIP>> Phone Settings , the orange LED will light on to indicate ISDN2-S0 is selected. And by using ISDN phone adapters (com ing from the router package), the user can connect several phones to Vigor5300VS for comm unication. Refer to the following figure for reference. Yet, if the user configu[...]

VigorPro5300 Series User’s Guide 14[...]

VigorPro5300 Series User’s Guide 15 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator a[...]

VigorPro5300 Series User’s Guide 16 3. Now, the Main Screen will pop up. Note: The home page will change slightly in accordance with the router you have. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password . Type a new one in the field of New Passwor[...]

VigorPro5300 Series User’s Guide 17 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y. The first screen of Quick Start Wizard is entering login password. After ty ping the pass[...]

VigorPro5300 Series User’s Guide 18 On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. Fo r example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. In the Quick Start Wizard , you can configure the router to access th[...]

VigorPro5300 Series User’s Guide 19 If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown. User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password for confirmation. Click Next for viewi[...]

VigorPro5300 Series User’s Guide 20 2 2 . . 2 2 . . 2 2 P P P P T T P P Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.[...]

VigorPro5300 Series User’s Guide 21 2 2 . . 2 2 . . 3 3 S S t t a a t t i i c c I I P P Click Static IP as the protocol. Type in all the inform ation that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, t[...]

VigorPro5300 Series User’s Guide 22 2 2 . . 2 2 . . 4 4 D D H H C C P P Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of th[...]

VigorPro5300 Series User’s Guide 23 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE/PPTP as the protocol , you will find out a link of Dial PPPoE/PPPoA or Drop PPPoE/PPPoA in the Online [...]

VigorPro5300 Series User’s Guide 24 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interfa[...]

VigorPro5300 Series User’s Guide 25 2 2 . . 4 4 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your se[...]

VigorPro5300 Series User’s Guide 26 This page is left blank.[...]

VigorPro5300 Series User’s Guide 27 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed in[...]

VigorPro5300 Series User’s Guide 28 Below shows the menu items for WAN. 3 3 . . 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This section will introduce some general settings of Internet and explain the connection modes for WAN1 and WAN2 in details. This router supports dual WAN function. It allows users to access Internet and comb[...]

VigorPro5300 Series User’s Guide 29 Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed . Otherwise, please choose Auto Weigh to let the router reach the be[...]

VigorPro5300 Series User’s Guide 30 3 3 . . 1 1 . . 3 3 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent physical mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly. [...]

VigorPro5300 Series User’s Guide 31 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E To use PPPoE as the accessing protocol of the internet, please choose Internet Acce ss fro m WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown. PPPoE Client Mode Click Enable for activating this function. [...]

VigorPro5300 Series User’s Guide 32 Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. PPP/MP Setup PPP Authentication – Select PAP only or PAP or CHAP for PPP. Idle Timeout – Set the timeo[...]

VigorPro5300 Series User’s Guide 33 For static IP mode, you usually receive a fixe d public IP address or a public subnet, nam ely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer a fixed public IP, while a DSL service provider will offer a public subnet. If you have a p[...]

VigorPro5300 Series User’s Guide 34 PING Interval - Enter the interval for the system to execute the PING operation. WAN Connection Detection Such function allows you to veri fy whether network connection is alive or not through ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping [...]

VigorPro5300 Series User’s Guide 35 Specify a MAC Address : Some Cable service providers specify a specific MAC address for access authentication. In such cases y ou need to click the Specify a MAC Address and enter the MAC address in the MAC Address field. DNS Server IP Address Type in the primary IP address for the router if you want to use Sta[...]

VigorPro5300 Series User’s Guide 36 PPP Setup PPP Authentication - Select PAP only or PAP or CHAP for PPP . Idle Timeout - Set the timeout for breaking down the Internet after passing through the time without any action. This setting is active only when the Active on demand option for Active Mode is selected in WAN>> General Setup page. IP [...]

VigorPro5300 Series User’s Guide 37 3 3 . . 1 1 . . 4 4 L L o o a a d d - - B B a a l l a a n n c c e e P P o o l l i i c c y y This router supports the function of load balanc ing. It can assign traffic with protocol t ype, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN1 or WAN2 interface. The user can ass[...]

VigorPro5300 Series User’s Guide 38 Dest Port Start Displays the IP address for the start of the destination port. Dest Port End Displays the IP address for the end of the destination port. Click Index 1 to access into the following page for configuring load-balance policy. Enable Check this box to enable this policy. Protocol Use the drop-down m[...]

VigorPro5300 Series User’s Guide 39 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router[...]

VigorPro5300 Series User’s Guide 40 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of th[...]

VigorPro5300 Series User’s Guide 41 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask[...]

VigorPro5300 Series User’s Guide 42 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.2 or greater , but smaller than 220.135.240. 254. IP Pool Counts: Enter the number of IP addres[...]

VigorPro5300 Series User’s Guide 43 DHCP Server IP Addr ess for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Internet host must have a unique IP address, also they may have a hu[...]

VigorPro5300 Series User’s Guide 44 Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i c c R R o o u u t t e e s s t t o o P P r r i i v v a a t t e e a a n n d d P P u u b b l[...]

VigorPro5300 Series User’s Guide 45 Note: There are two reasons that we have to appl y RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subnet (192.1 68.1.0/24). The second is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can acces[...]

VigorPro5300 Series User’s Guide 46 3 3 . . 2 2 . . 4 4 V V L L A A N N Virtual LAN function provides you a very conve nient way to ma nage hosts by grouping them based on the physical port. You can also manage the in/out rate of each port. Go to LAN page and select VLAN . The following page will appear. Click Enable to invoke VLAN function. To a[...]

VigorPro5300 Series User’s Guide 47 2. After checking the box to enable VLAN func tion, you will check the table according to the needs as shown below. T o remove VLAN, uncheck the needed box and click OK to save the results. 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LA[...]

VigorPro5300 Series User’s Guide 48 and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below . Add and Edit IP Address – Type the IP address that will be used for the specified MAC address. Mac Address – Type the MAC address that is used to bind with the assigned IP address. Refresh It is used to ref[...]

VigorPro5300 Series User’s Guide 49 3 3 . . 3 3 . . 1 1 P P o o r r t t R R e e d d i i r r e e c c t t i i o o n n Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc. Most of the case, you need a public IP address for each server and this public IP ad[...]

VigorPro5300 Series User’s Guide 50 Press any number under Index to access into next page for configuring port redirection. Enable Check this box to enable such port redirection setting. Mode Two options (Single and Range) are provided here for you to choose. To set a range for the specific service, select Range . In Range mode, if the public por[...]

VigorPro5300 Series User’s Guide 51 box (as the starting point). The second one is assigned automatically after you type the private port number below. Private Port Specify the private port number of the service offered by the internal host. After you enter the proper number in this box, t he second box of Private IP address will be assigned acco[...]

VigorPro5300 Series User’s Guide 52 3 3 . . 3 3 . . 2 2 D D M M Z Z H H o o s s t t As mentioned above, Port Redirection can redirect incoming TCP/UDP or othe r traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (A H), do not travel on a fixed [...]

VigorPro5300 Series User’s Guide 53 True…. MAC address of the one you want. If you previously have set up WAN Alias in Internet Access>>PPPoE, you will find them in Aux. WAN IP list for your selection. Enable Check to enable the DMZ Host function. Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. C[...]

VigorPro5300 Series User’s Guide 54 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the applicati[...]

VigorPro5300 Series User’s Guide 55 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that will be used for this entry. Local Computer Enter the private IP address of the local host or click Choose PC to select one. Choose PC Click this button and[...]

VigorPro5300 Series User’s Guide 56 3 3 . . 4 4 O O b b j j e e c c t t s s S S e e t t t t i i n n g g s s For IPs in a range, service ports in a limited ra nge and keywords usually will be applied for configuring router’s settings , we can define them with objects and bind them with groups for using conveniently. Later, we can select that obj[...]

VigorPro5300 Series User’s Guide 57 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address. If you choose LAN as the Interface here, and choose LAN as the[...]

VigorPro5300 Series User’s Guide 58 3 3 . . 4 4 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail. Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, L[...]

VigorPro5300 Series User’s Guide 59 3 3 . . 4 4 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Name Type a name for this profile. Protocol[...]

VigorPro5300 Series User’s Guide 60 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when th e first and last values are different, it indicates that all the ports except the range defined here are available for this service type. (>) – the port number greater than this value is av[...]

VigorPro5300 Series User’s Guide 61 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Object page. All the available IP objects will be shown in this box. Selected Service Type Objects Click button to add the selected IP objects in this box. 3 3 . . 4 4 . . 5 5 K K e e y y w w o o r r d d O O b b j j[...]

VigorPro5300 Series User’s Guide 62 Name Type a name for this profile, e.g., game. Contents Type the content for such profile. For example, type gambling as Contents. When you browse th e webp age, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. 3 3 . . 4 4 . . 6 6 K K [...]

VigorPro5300 Series User’s Guide 63 Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box. Selected Keyword Objects Click button to add the selected Keyword objects in this box. 3 3 . . 4 4 . . 7 7 F F i i l l e [...]

VigorPro5300 Series User’s Guide 64 Profile Name Type a name for this profile. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile.[...]

VigorPro5300 Series User’s Guide 65 3 3 . . 4 4 . . 8 8 I I M M O O b b j j e e c c t t This page allows you to set 32 profiles for In stant Messenger. These profiles will be applied in Firewall>>IM/P2P Filter Profile for filtering. Set to Factory Default Clear all profiles. Click the number under Profile column for conf iguration in detail[...]

VigorPro5300 Series User’s Guide 66 Profile Name Type a name for this profile. Type a name for such profile and check all the ite ms that not allowed to be used in the host. Finally, click OK to save this profile.[...]

VigorPro5300 Series User’s Guide 67 3 3 . . 4 4 . . 9 9 P P 2 2 P P O O b b j j e e c c t t This page allows you to set 32 profiles for p eer-to-peer application. These profiles will be applied in Firewall>>IM/P2P Filter Profile for filtering. Set to Factory Default Clear all profiles. Click the number under Profile column for conf iguratio[...]

VigorPro5300 Series User’s Guide 68 Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not allowed to be used in the host. Finally, click OK to save this profile.[...]

VigorPro5300 Series User’s Guide 69 3 3 . . 4 4 . . 1 1 0 0 M M i i s s c c O O b b j j e e c c t t This page allows you to set 32 profiles for mi scellaneous applications. These profiles will be applied in Firewall>>IM/P2P Filter Profile for filtering. Set to Factory Default Clear all profiles. Click the number under Profile column for c o[...]

VigorPro5300 Series User’s Guide 70 Type a name for such profile and check all the protocols that not allowed to be used in the host. Finally, click OK to save this profile. 3 3 . . 5 5 C C S S M M P P r r o o f f i i l l e e C C o o n n t t e e n n t t S S e e c c u u r r i i t t y y M M a a n n a a g g e e m m e e n n t t ( ( C C S S M M ) ) CS[...]

VigorPro5300 Series User’s Guide 71 Web surfing because each of multiple load bala nced database servers can handle millions of requests for categorization. Note: The priority of URL Content Filter is higher than Web Conte nt Filter. 3 3 . . 5 5 . . 1 1 I I M M / / P P 2 2 P P F F i i l l t t e e r r P P r r o o f f i i l l e e You can define pol[...]

VigorPro5300 Series User’s Guide 72 3 3 . . 5 5 . . 2 2 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e Based on the list of user defined keywords, the URL Content Filter facility in Vigor router inspects the URL string in every outgoing HTTP request. No matter the URL string is found full or partial ma[...]

VigorPro5300 Series User’s Guide 73 Priority It determines the action that this router will apply. Both: Pass – The router will let all the packages that match with the conditions specified in URL Access Control and Web Feature below passing through. When you choose this setting, both configuration set in this page for URL Access Control and We[...]

VigorPro5300 Series User’s Guide 74 Block - Restrict accessing into the corresponding webpage with the keywords listed on the box below. If the web pages do not match with the keyword set here, it will be processed with reverse action. Group/Object Selections – The Vigor router provides several frames for users to define ke ywords and each fram[...]

VigorPro5300 Series User’s Guide 75 inside to outside world to prot ect the local user's privacy. Proxy - Check the box to reject any proxy transmission. To control efficiently the limited-bandwidth usage, it will be of great value to provide the blocking mechanism that filters out the multimedia files downloading from web pages. File Extens[...]

VigorPro5300 Series User’s Guide 76 Action Pass - allow accessing into the corr esponding webpage with the categories listed on the box below. Block - restrict accessing into the corresponding webpage with the categories listed on the box below. If the web pages do not match with the specified feature set here, it will be processed with reverse a[...]

VigorPro5300 Series User’s Guide 77 restricts users in the local network from accessi ng the Internet. Furthermore, it can filter out specific packets that trigger the router to build an unwanted outgoing connection. The most basic security concept is to set user name and password while you install your router. The administrator login will preven[...]

VigorPro5300 Series User’s Guide 78 z Call Filter - When there is no existing Internet connection, Call Filter is applied to all traffic, all of which should be outgoing. It will check packets according to the filter rules. If legal, the packet w ill pass. Then the router shall “initiate a call” to build the Internet connection and send the p[...]

VigorPro5300 Series User’s Guide 79 vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system. The DoS Defense function enables the Vigor router to inspect every incoming packet based on the attack signature database. Any malicious packet that might duplicate itself to paralyze the [...]

VigorPro5300 Series User’s Guide 80 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Filter Select Pass or Block for the packets that do not match with the filter rules. IM/P2P [...]

VigorPro5300 Series User’s Guide 81 W eb Content Filter Select one of the W eb Content Filter profile settings (created in CSM>> W eb Content Filter ) for applying with this router . Please set at least one profile for anti-virus in CSM>> W eb Content Filter web page first. For troubleshoot ing needs, you can specify to record informa[...]

VigorPro5300 Series User’s Guide 82 PCs with subnet “172.16.x.x” connected under V igorPro 5300 will be protected by security settings enabled and configured on the web pages of V igor router . When the transparent mode has been checked, hackers from Intern et do not sense the existence of vigor router , therefore they cannot attack the route[...]

VigorPro5300 Series User’s Guide 83 Window size – It determines the size of TCP protocol (0~65535). The m ore the value is, the better the performance will be. However , if the network is not stable, sm all value will be proper . Session timeout /Queue timeout –Setting timeout for sessions can make the best utilization of network resources. H[...]

VigorPro5300 Series User’s Guide 84 3 3 . . 6 6 . . 3 3 F F i i l l t t e e r r S S e e t t u u p p Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule num ber button t[...]

VigorPro5300 Series User’s Guide 85 Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Index (1-15) Set PCs on LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 sc hedules pre-defined in Applications[...]

VigorPro5300 Series User’s Guide 86 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Ty pe and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type. From the IP Group drop down l[...]

VigorPro5300 Series User’s Guide 87 choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port - (=) – when the first and last value are the same, it indicates one port; when the first and last valu es are different, it indicates a range for the port and availab[...]

VigorPro5300 Series User’s Guide 88 checking the Log box. It will be sent to Syslog server . Please refer to section 3.14.4 Syslog/Mail Alert for more detailed information. W eb Content Filter Select one of the W eb Content Filter profile settings (created in CSM>> W eb Content Filter Profile ) for applying with this router . Please set at [...]

VigorPro5300 Series User’s Guide 89 codepage, no decoding job of URL will be processed. Please use the drop-down list to choose a codepage. If you do not have any idea of c hoosing suitable codepage, please open Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Window size – It de[...]

VigorPro5300 Series User’s Guide 90[...]

VigorPro5300 Series User’s Guide 91 3 3 . . 6 6 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defens[...]

VigorPro5300 Series User’s Guide 92 packets per second. Block IP options Check the box to activate the Block IP options function. The Vigor router will ignore any IP packets with IP option field in the datagram header. The reason for limitation is IP option appears to be a vulnerability of the security for the LAN because it will carry significan[...]

VigorPro5300 Series User’s Guide 93 reject this kind of packets. Warning Messages We provide Syslog function for user to retrieve message from Vigor router. The user, as a Syslog Server, shall receive the report sending from Vigor router which is a Syslog Client. All the warning messages related to DoS defense will be sent to use r and user can r[...]

VigorPro5300 Series User’s Guide 94 3 3 . . 7 7 D D e e f f e e n n s s e e C C o o n n f f i i g g u u r r a a t t i i o o n n This menu allows you to set profiles for, activate, and upgrade the service of Anti-Intrusion/Anti-Virus/Anti-Spam in your system. 3 3 . . 7 7 . . 1 1 A A n n t t i i - - I I n n t t r r u u s s i i o o n n Anti-Intrusio[...]

VigorPro5300 Series User’s Guide 95 Anti-Intrusion Control Setup This field will display the signature version of this router. The default signature version is “ basic ”. In this version, you can modify the settings for Anti-Intrusion rules in Defense Configuration>>Anti-Intrusion >>Advanced Setup page. However, if you restart/res[...]

VigorPro5300 Series User’s Guide 96 Enable Reset procession Click this radio button to break down the comm unication between your computer and specific link which might have intrusion actions. 3 3 . . 7 7 . . 1 1 . . 2 2 A A d d v v a a n n c c e e d d S S e e t t u u p p This page lists all the available types and allo ws you to adjust the rule [...]

VigorPro5300 Series User’s Guide 97 Enable Check to enable this rule. If you uncheck this box, th e corresponding settings for the rule will not be executed. SID The number for each anti-intrusion rule is displayed in this field. Name A brief description name for the an ti-intrusion rule is shown in this field. Click the name link to access into [...]

VigorPro5300 Series User’s Guide 98 click Go to the specified page. Or you can click ⏐ >, >>, << or > ⏐ button on the right side of the Go button to access to the home/previous/next/end page. 3 3 . . 7 7 . . 2 2 A A n n t t i i - - V V i i r r u u s s Vigor router can offer basic virus scanning, d estroying and cut off the c[...]

VigorPro5300 Series User’s Guide 99 Profile Name T ype a name for the profile. Protocol Currently , only the files transmitted through the protocols listed in this page including SMTP , POP3 , IMAP , HTTP and FTP will be scanned by this router . Action Choose the action that you want to apply to the proto cols of each operation. Pass - Detect if [...]

VigorPro5300 Series User’s Guide 100 Detect Macro Attachment The file with macro attach ment will be passed/destroyed/reset under different protocols. The system will detect it automatically if you set corresponding configuration here. Detect Encrypted Zipped Files The file zipped with encryption will be detected and then be passed/destroyed/rese[...]

VigorPro5300 Series User’s Guide 101 SID/NAME To find the specific type of anti-virus, you can type its SID number or name in this field if you know, and then c lick Search . The system will locate that rule for you. Search Click this button to find out all the virus rules related to the SID/NAME that you entered. The page of the searching result[...]

VigorPro5300 Series User’s Guide 102 3 3 . . 7 7 . . 2 2 . . 3 3 F F i i l l e e F F i i l l t t e e r r P P r r o o f f i i l l e e To avoid confidential file being leaked out by som eone else through network and cause severe consequence, you can specify the file name in this page and determine to destroy or scan or pass it while the file passes[...]

VigorPro5300 Series User’s Guide 103 Default Action Choose one of the actions (Scan, Non-Scan, Destroy ) as the default action if the file does not meet the conditions configured below . Keyword Y ou can set three sets of keywords for this profile. Action - Choose the action that you want to apply to the selected keyword. Destroy- Destroy the fil[...]

VigorPro5300 Series User’s Guide 104 To activate function of Anti-Spam, you have to configure profile(s) for your computer first. Please open Defense Configuration>>Anti- Spam menu to access into the following page. There are sixteen profiles provided by this system for you to define. Profile (1 ~16) There are sixteen profiles provided for [...]

VigorPro5300 Series User’s Guide 105 Profile Name Type a name for such profile setting. Choose Protocol to Scan Spam Spam files usually come with protocol of SMTP or POP3. Please check the box that you want to avoid. It would be better to check both protocols. In addition, you can check Log All Mail Events to send record of all mail events to sys[...]

VigorPro5300 Series User’s Guide 106 following dialog. The keyword/group that you have set on Object Settings>>Keyword Objec t/ Object Settings>>Keyword Group will be display ed here for you to choose. Choose Action for System Timeout or Network Problem When the system fails due to system timeout or network problem, you can specify sp[...]

VigorPro5300 Series User’s Guide 107 Activate The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account and the router. Authentication Message As for authentication information of Anti-Intrusion/Anti-Virus/Anti-Spam , the process of authenticating will be displayed on this field for your reference. 3 3 .[...]

VigorPro5300 Series User’s Guide 108 Signature Upgrade Setting It displays the signature version for your reference. There are three levels for the signature: basic – If you did not register and activate your account, you can j ust own the default 200 (or more) anti-intrusion and anti-virus rules for your router. DT-DT/DT-KL_XXXXXX – If you h[...]

VigorPro5300 Series User’s Guide 109 After downloading is finished, the signature version will be upgraded and displayed on the web page. Upgrade Automatically Specify certain time for execu ting the upgrade automatically. Remember to check the Schedule Update box to activate the time settings. Every – It means the downloading procedure will be[...]

VigorPro5300 Series User’s Guide 110 3 3 . . 8 8 B B a a n n d d w w i i d d t t h h M M a a n n a a g g e e m m e e n n t t Below shows the menu items for Bandwidth Management. 3 3 . . 8 8 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router. The router will generate t[...]

VigorPro5300 Series User’s Guide 111 To activate the function of limit session, simply click Enable and set the default session limit. Enable Click this button to activate the function of limit session. Disable Click this button to close the function of limit session. Default session limit Defines the default session number used for each computer[...]

VigorPro5300 Series User’s Guide 112 In the Bandwidth Management menu, click Bandwidth Limit to open the web page. To activate the function of limit bandwidth, simply click Enable and set the default upstream and downstream limit. Enable Click this button to activate the function of limit bandwidth. Disable Click this button to close the function[...]

VigorPro5300 Series User’s Guide 113 have set in that web page. 3 3 . . 8 8 . . 3 3 Q Q u u a a l l i i t t y y o o f f S S e e r r v v i i c c e e Deploying QoS (Quality of Servi ce) management to guarantee that all applications receive the service levels required and sufficient bandw idth to meet performance expectations is indeed one important[...]

VigorPro5300 Series User’s Guide 114 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s [...]

VigorPro5300 Series User’s Guide 115 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN- apply to incoming traffic only. OUT- apply to outgoing traffic only. BOTH- apply to both incoming and outgoing traffic. Check this box and click OK , then click S[...]

VigorPro5300 Series User’s Guide 116 (for WAN1/WAN2) on the Bandwith Management>>Quality of Service . E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link o[...]

VigorPro5300 Series User’s Guide 117 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit button to set the remote IP address (on Lan/WAN) for the rule. Edit It allows you to edi[...]

VigorPro5300 Series User’s Guide 118 E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. For add[...]

VigorPro5300 Series User’s Guide 119 Service Name Type in a new service for your request. Service Type Choose the t ype (TCP, UDP or TCP/UDP) for the new service. Port Configuration Click Single or Range . If you select Range, you have to t ype in the starting port number and the end porting num ber on the boxes below. Port Number – Type in the[...]

VigorPro5300 Series User’s Guide 120 3 3 . . 9 9 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 9 9 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP. It means that the public IP address assigned [...]

VigorPro5300 Series User’s Guide 121 WAN Interface Display current WAN interface used for accessing Internet. Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. View Log Display DDNS log status. Force Update Force the router updates its information to DDNS serv[...]

VigorPro5300 Series User’s Guide 122 delivery will be attempted to your host first, and then to the host you specify here if that fails. 4. Click OK button to activate the settings. You will see your setting has been saved. The W ildcard and Backup MX features are not supported for all Dynamic DNS providers. Y ou could get more detailed in format[...]

VigorPro5300 Series User’s Guide 123 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule. Action Specify which action Call Schedule should apply du[...]

VigorPro5300 Series User’s Guide 124 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE In ternet access profile. Now , the PPPoE Internet connection will follow the schedule order to perform For ce On or Force Down action according to the time plan that has been pre-defined in the s[...]

VigorPro5300 Series User’s Guide 125 3 3 . . 9 9 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT rou[...]

VigorPro5300 Series User’s Guide 126 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your P C may cause the UPnP function not working properly. This is because these applicati ons will block the accessing ability of some network ports. Security Considerations Activat[...]

VigorPro5300 Series User’s Guide 127 3 3 . . 9 9 . . 5 5 I I G G M M P P IGMP is the abbreviation of Internet Group Management Protocol . It is a communication protocol which is mainly used for managing the membership of Internet Protocol m ulticast groups. For invoking IGM P Snooping function, you have to check the Enable I GMP Proxy box first f[...]

VigorPro5300 Series User’s Guide 128 Wake by Two types provide for you to wake up the binded IP . If you choose Wake by MAC Address, you have to type the correct MAC address of the host in MAC Address boxes. If you choose Wake by IP Address, you have to choose the correct IP address. IP Address The IP addresses that have been configured in LAN>[...]

VigorPro5300 Series User’s Guide 129 3 3 . . 1 1 0 0 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet. In short, by VPN technology, you can send data between two computers across a[...]

VigorPro5300 Series User’s Guide 130 3 3 . . 1 1 0 0 . . 2 2 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPSec. Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol. PAP [...]

VigorPro5300 Series User’s Guide 131 For example, if the local private network is 192.168.1.0/2 55.255.255.0, you could ch oose 192.168.1.200 as the Start IP Address. But, you have to notice that the first two IP addresses of 192.168.1. 200 and 192.168.1.201 are reserved for ISDN remote dial-in user. 3 3 . . 1 1 0 0 . . 3 3 I I P P S S e e c c G [...]

VigorPro5300 Series User’s Guide 132 Pre-Shared Key- Specify a key for IKE authentication Confirm Pre-Shared Key- Confirm the pre-shared key. IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypte d. By default, this option is active. High - Encapsulating Security Payload (ESP) means payloa[...]

VigorPro5300 Series User’s Guide 133 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field can be IP Address, Domain, or E-mail address. The box under [...]

VigorPro5300 Series User’s Guide 134 3 3 . . 1 1 0 0 . . 5 5 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection. You may set parameters including specified connection p eer[...]

VigorPro5300 Series User’s Guide 135 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback functio[...]

VigorPro5300 Series User’s Guide 136 SSL Tunnel It allows the remote dial-in user to make an SSL VPN Tunnel connection through Internet, suitable for the application through network accessing (e.g., PPTP/L2TP/IPSec) If you check this box, the function of SS L Tunnel for this account will be activated immediately. To check if SSL Tunnel is activat[...]

VigorPro5300 Series User’s Guide 137 To check if SSL Web Proxy is activated or not, please open Draytek SSL VPN portal interface. From the web page, you will see the message to indicate that you have the privilege for the SSL Web Proxy. Set SSL Web Proxy – If you haven’t set any SSL VPN web proxy profiles, you will a link here. Click this lin[...]

VigorPro5300 Series User’s Guide 138 Medium -Authentication Header (AH) means data will be authenticated, but not be encrypte d. By default, this option is invoked. You can uncheck it to disable it. High-Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Enc[...]

VigorPro5300 Series User’s Guide 139 Set to Factory Default Click to clear all indexes. Name Indicate the name of the LAN-to-LAN profile. The symbol ??? represents that the profile is empty. Status Indicate the status of individual profiles. The symbol V and X represent the profile to be active and inactive, respectively. Click each index to edit[...]

VigorPro5300 Series User’s Guide 140 WAN1 Only - While connecting, the router will use WAN1 as the only channel for VPN connection. WAN2 First - While connecting, the router will use WAN2 as the first channel for VPN connection. If WAN2 fails, the router will use another WAN interface instead. WAN2 Only - While connecting, the router will use WAN[...]

VigorPro5300 Series User’s Guide 141 PPTP Build a PPTP VPN connection to the server through the Internet. You should set the identity like User Name and Password below for the authentication of remote server. IPSec Tunnel Build an IPSec VPN connection to the server through Internet. L2TP with … Build a L2TP VPN connection throug h the Internet.[...]

VigorPro5300 Series User’s Guide 142 AES with Authentication- Use AES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. Advanced Specify mode, proposal and key life of each IKE phase, Gateway etc. The window of advance setup is shown as below: IKE phase 1 mode - Select from Main mode and Aggressive mode. The ultimate outcome i[...]

VigorPro5300 Series User’s Guide 143 remote peer requires the Vigor router to callback, the local ISDN number will be provided to the remote peer. Check here to allow the Vigor router to send the ISDN number to the remote router. This feature is useful for i model only. Allowed Dial-In Type Determine the dial-in connection with different types. I[...]

VigorPro5300 Series User’s Guide 144 None- Do not apply the IPSec policy. Accordingly, the VPN connection employed the L2TP without IPSec policy can be viewed as one pure L2TP connection. Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection. Mus[...]

VigorPro5300 Series User’s Guide 145 Callback number -The option is for extra security. Once enabled, the router will ONLY call back to the specified Callback Number. Callback budget - By default, the callback function has limitation of callback period. Once the callback budget is exhausted, the function will be disabled automatically. Callback B[...]

VigorPro5300 Series User’s Guide 146 have to do IP, please choose NAT , otherwise choose Route . Change default route to this VPN tunnel (Only single WAN supports this ) Check this box to change the default route with this VPN tunnel. Be aware that this setting is available only for one WAN interface is enabled. It is not available when both WAN [...]

VigorPro5300 Series User’s Guide 147 3 3 . . 1 1 1 1 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc., and the digital signature of[...]

VigorPro5300 Series User’s Guide 148 Type in all the information that the window request. Then click Generate again. Import Click this button to import a saved file as the certification information. Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. Afte[...]

VigorPro5300 Series User’s Guide 149 3 3 . . 1 1 1 1 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text fil[...]

VigorPro5300 Series User’s Guide 150 3 3 . . 1 1 1 1 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them . If you want to set encryption password for these certificates, please[...]

VigorPro5300 Series User’s Guide 151 registration messages to validate. Then, bo th parties’ SIP proxies will forward the sequence of messages to caller to establish the session . If you both register to the same SIP Registrar, then it will be illustrated as below: The major benefit of this mode is that you don ’t have to memorize your friend[...]

VigorPro5300 Series User’s Guide 152 P P h h o o n n e e B B o o o o k k In this section, you can set your VoIP contacts in the “phonebook”. It can help you to make calls quickly and easily by using “speed-dial” Phone Number . There are total 60 index entries in the phonebook for you to store all your friends and family mem bers’ SIP ad[...]

VigorPro5300 Series User’s Guide 153 Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your friend can easily know who’s calling without memorizing lots[...]

VigorPro5300 Series User’s Guide 154 replace the VoIP phone number. At this time, the phone call will be changed from VoIP phone into PSTN call according to the loop through direction chosen. Note that, durin g the phone switch, the blare of phone will appear for a short time. And when the VoIP phone is switched into the PSTN phone, the telecom c[...]

VigorPro5300 Series User’s Guide 155 Strip - When you choose this mode, the OP number will be deleted by the prefix number for calling out through the specific VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the OP number of 886 will be deleted completely for the prefix number is set with 886 . Replace - When y[...]

VigorPro5300 Series User’s Guide 156 Click any index number to display the dial plan setup page. Enable Click this to enable this entry. Call Direction Determine the direction for the phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Barring Type Determine the type of the VoIP phone call, URI/[...]

VigorPro5300 Series User’s Guide 157 Interface “All” means all the phone calls (including ISDN & PSTN) will be blocked with such mechanism. ”ISDN” means only ISDN phone call will be blocked with such mechanism. Index (1-15) in Schedule Enter the index of schedule profiles to control the call barring according to the preconfigured sche[...]

VigorPro5300 Series User’s Guide 158 R R e e g g i i o o n n a a l l This page allows you to process incoming or outgoing phone calls by regional. Default values (common used in most areas) will be shown on this web page. You can change the number based on the region that the router is placed. Last Call Return [Miss] Sometimes, people might miss [...]

VigorPro5300 Series User’s Guide 159 Call Forward [Busy][Act] Dial the number typed in this field to forward all the incoming calls to the specified place while the phone is busy. Call Forward [No Ans][Act] Dial the number typed in this field to forward all the incoming calls to the specified place while there is no answer of the connected phone.[...]

VigorPro5300 Series User’s Guide 160 Index Click this link to access into next page for setting SIP account. Profile Display the profile name of the account.[...]

VigorPro5300 Series User’s Guide 161 Domain/Realm Display the domain name or IP address of the SIP registrar server. Proxy Display the domain name or IP address of the SIP proxy server. Account Name Display the account name of SIP address before @. Ring Port Specify which port will ring when receiving a phone call. Set Phone1, Phone2, ISDN1-S0 or[...]

VigorPro5300 Series User’s Guide 162 The system will select a proper way for your VoIP call. SIP Port Set the port number for sending/receiving SIP message for building a session. The default value is 5060. Your peer must set the same value in his/her Registrar. Domain/Realm Set the domain name or IP address of the SIP Registrar server. Proxy Set[...]

VigorPro5300 Series User’s Guide 163 Any as ring port for specified SIP account. By the way, ISDN-S0 can be used by mapping with MSN numbers. Ring Pattern Choose a ring tone type for the VoIP phone call. 3 3 . . 1 1 2 2 . . 3 3 P P h h o o n n e e S S e e t t t t i i n n g g s s This page allows user to set phone se ttings for Phone1, Phone2, ISD[...]

VigorPro5300 Series User’s Guide 164 Tone - Display the tone settings that configured in the advanced settings page of Phone Index. Gain - Display the volume gain settings for Mic/Speaker that configured in the advanced settings page of Phone Index. Default SIP Account – “draytel_1” is the default SIP account. You can click the number below[...]

VigorPro5300 Series User’s Guide 165 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically. Call Forw[...]

VigorPro5300 Series User’s Guide 166 detailed configuration. Index (1-60) in Phone Book - Enter the index of phone book profiles. Refer to section 3.11.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hide the caller ID on the display panel of the phone set. Call Waiting Check this box to invoke this f[...]

VigorPro5300 Series User’s Guide 167 Play dial tone only when account registered - Check this box to invoke the function. Default Call Route It determ ines the default direction for the call route of the router. To ISDN (for VoIP) - The router is set by using ISDN call. To change ISDN call into VoIP call, please dial the character in this field f[...]

VigorPro5300 Series User’s Guide 168 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MIS[...]

VigorPro5300 Series User’s Guide 169 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 1 1 - - S S 0 0 P P o o r r t t Click the number link of Index 3 (ISDN1-S0), you can access into the following page for configuring Phone settings. Hotline Check the box to enable it. Type in the SIP URL in the field fo[...]

VigorPro5300 Series User’s Guide 170 SIP URL – Type in the SIP URL (e.g., aaa@draytel.org or abc@iptel.org) as the site for call forwarded. Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) mode Set a period of peace time without disturbing by VoIP phone call. During the period, the one w[...]

VigorPro5300 Series User’s Guide 171 something to save the bandwidth for other using. Click On to invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six grou ps) on SIP Account page. Use the drop down list to choose one of the profile names for the accounts as the default one for this phone [...]

VigorPro5300 Series User’s Guide 172 Region Select the proper region which you are located. The common settings of Caller ID Type , Dial tone , Ringing tone , Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone,[...]

VigorPro5300 Series User’s Guide 173 default setting. Ring Frequency - This setting is used to drive the frequency of the ring tone. It is recommended for you to use the default setting. DTMF DTMF Mode – There are four DTMF modes for you to choose. InBand - Choose this one then the Vigor will send the DTMF tone as audio directly when you press [...]

VigorPro5300 Series User’s Guide 174 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically. Call Forw[...]

VigorPro5300 Series User’s Guide 175 profiles. Refer to section 3.10.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hide the caller ID on the display panel of the phone set. Prefer Codec Select one of five codecs as the default for your VoIP calls. The codec used for each call will be negotiated with[...]

VigorPro5300 Series User’s Guide 176 configured. In addition, you can specify which port (both phone 1 and phone 2, phone 1 only or phone 2 onl y) will ring. Loop Through to ISDN1-S0 Port – Choose this radio button to make all the calls controlled by ISDN line. In addition, you can press the Advanced button to configure tone settings, volume ga[...]

VigorPro5300 Series User’s Guide 177 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MIS[...]

VigorPro5300 Series User’s Guide 178 the default value was 101. This setting is available for the OutBand (RFC2833) mode. 3 3 . . 1 1 2 2 . . 4 4 S S t t a a t t u u s s From this page, you can find codec, connection and ot her important call status for each port. Refresh Seconds Specify the interval of refresh time to obtain the latest VoIP call[...]

VigorPro5300 Series User’s Guide 179 ALERTING - Indicates that a call is coming. ACTIVE- Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present channel. PeerID The present in-call or out-call peer ID (the format may be IP or Domain). Elapse The format is represented as hours:minutes:seconds. Tx Pkts To[...]

VigorPro5300 Series User’s Guide 180 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s This web page allows you to enable ISDN function. ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on yo ur local ISDN network, you should choose the correct country code. [...]

VigorPro5300 Series User’s Guide 181 MSN Numbers for the Router MSN Numbers mean that the router is able to accept only number-matched incoming calls. In addition, local ISDN network provider should support MSN services. The router provides three fields for MSN numbers. Note that MSN services must be acquired from your local telecom operators. By[...]

VigorPro5300 Series User’s Guide 182 the external MSN numbers that you setup will be displayed to remote side . A A p p p p l l i i c c a a t t i i o o n n E E x x a a m m p p l l e e You got ISDN numbers with 59 72720~5972729 fro m your ISP, and you try to connect ISDN-TE port to ISDN network. Please refer to the following configuration. Open IS[...]

VigorPro5300 Series User’s Guide 183 3 3 . . 1 1 3 3 . . 3 3 D D i i a a l l t t o o a a S S i i n n g g l l e e I I S S P P / / D D i i a a l l t t o o D D u u a a l l I I S S P P s s Select Dialing to a Single ISP if you access the Internet via a single ISP. ISP Access Setup ISP Name - Enter your ISP name such as Seednet, Hinet and so on. Dial [...]

VigorPro5300 Series User’s Guide 184 IP Address Assignment Method (IPCP) In most environments, you should not change these settings as most ISPs provide a dynamic IP address for the router when it connects to the ISP. If your ISP provides a fixed IP address, check Yes and enter the IP address in the field of Fixed IP Address . Select Dialing to D[...]

VigorPro5300 Series User’s Guide 185 default is 180 seconds. If you set the time to 0, the ISDN connection to the ISP will always remain on. Primary ISP Setup ISP Name - Enter your ISP name. Dial Number - Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided b[...]

VigorPro5300 Series User’s Guide 186 3 3 . . 1 1 3 3 . . 4 4 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router ( only for the ISDN m odels) be remotely activated, or be able to dial up to the ISP via the ISDN interface. Vigor router s provide this feature by allowing user to make a phone call to the router and [...]

VigorPro5300 Series User’s Guide 187 access the server which is off the Internet in the head office. To remotely make the server to be available on the Internet, i.e. make the router in the head o ffice activating its Internet access either by dialing-up or starting broadband connection, users can make a regular phone call (the number is set in t[...]

VigorPro5300 Series User’s Guide 188 3 3 . . 1 1 4 4 W W i i r r e e l l e e s s s s L L A A N N This function is used for G models only. 3 3 . . 1 1 4 4 . . 1 1 B B a a s s i i c c C C o o n n c c e e p p t t s s Over recent years, the market for wireless co mmunications has enjoyed tremendous growth. Wireless technology now reaches or is capabl[...]

VigorPro5300 Series User’s Guide 189 WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit ke y. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys. WPA(Wi-Fi Protected Access), the most domina ti[...]

VigorPro5300 Series User’s Guide 190 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons. To isolate means neither of the parties can access each othe r. To elaborate an example for business use, you may set up a wireless LAN for visitors onl[...]

VigorPro5300 Series User’s Guide 191 Enable Wireless LAN Check the box to enable wireless functi on. Mode At present, the router can connect to Mixed (11b+11g), 11g Only, 11b Only, Mixed (11g+1 1n), 11n Only and Mixed (11b+11g+11n) stations simultaneously. Sim ply choose Mix (11b+11g+11n) m ode. Index(1-15) Set the wireless LAN to work at certain[...]

VigorPro5300 Series User’s Guide 192 Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync filed instead of long pream ble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble. Check it to use Lon[...]

VigorPro5300 Series User’s Guide 193 Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP - Accept WEP client and the encryption key should be entered in WEP filed below. WPA/PSK - Accepts WPA clients and the encryption key should be entered in PSK. WPA2/PSK- Accepts only WPA2 clients and the e[...]

VigorPro5300 Series User’s Guide 194 128-Bit - For 128 bits WEP key, either 13 ASCII characters, such as ABCDEFGHIJ KLM (or 26 hexadecimal digits leading by 0x, such as 0x4142434445464 748494A4B4C4D). All wireless devices must support the same WEP encryption bit size and have the same key . Four keys can be entered here, but only one key can be s[...]

VigorPro5300 Series User’s Guide 195 with MAC address not listed above are allowed to access AP. Enable Mac Access Filter Select to enable the MAC Address filter for wireless LAN identified with SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be grouped under different wireless LAN. For example, they c[...]

VigorPro5300 Series User’s Guide 196 z On the side of Vigor 2930 series which served as an AP, press Factory Reset button once on the front panel of the router or c lick Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card. z If you want to use PIN code, you have to[...]

VigorPro5300 Series User’s Guide 197 Enable WPS Check this box to enable WPS setting. WPS Status Display related system information for WPS. If the wireless security (encryption) function of the router is properly configured, you can see ‘Configured’ m essage here. SSID Display the SSID1 of the router. WPS is supported by SSID1 only. Authenti[...]

VigorPro5300 Series User’s Guide 198 The application for the WDS-Repeater mode is depicted as below: The major difference between these two modes is that: while in Repeater mode, the packets received from one peer AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be for warded [...]

VigorPro5300 Series User’s Guide 199 Click WDS from Wireless LAN menu. The following page will be shown. Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second[...]

VigorPro5300 Series User’s Guide 200 one. Security There are three ty pes for security , Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Use the same key set in Security Settings page. Pre-shared Key Type 8 ~ 63 ASCII chara[...]

VigorPro5300 Series User’s Guide 201 If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page and click Brid ge or Repeater. Next, click Add to . Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. 3 3 . . 1 1 4 4 . . 7 7 S S t t a a t t i i o [...]

VigorPro5300 Series User’s Guide 202 Refresh Click this button to refresh the status of station list. Add Click this button to add current selected MAC address into Access Contro l. 3 3 . . 1 1 4 4 . . 8 8 R R a a t t e e C C o o n n t t r r o o l l This page allows you to contro l the upload and download rate of each wireless client (station) an[...]

VigorPro5300 Series User’s Guide 203 SSID rate control controls the data tran smission rate through wireless connection. Enable Check Enable for typing upload and download rate. Upload Type the transmitting rate for data uploa d. Default value is 30,000 kbps. Download Type the transmitting rate for data download. Default value is 30,000 kbps. 3 3[...]

VigorPro5300 Series User’s Guide 204 Name Display the name of the profile that you create. URL Display the URL. Active Display current status (active or inactive) of such profile. Click number link under Index filed to set detailed configuration. Name Type name of the profile. URL Type the address (function variati on or IP address) or path of th[...]

VigorPro5300 Series User’s Guide 205 WAN to LAN access, the web server must be configured behind vigor router; 2) web server gateway must be indicated to vigor router. In addition, users must execute “Connect” manually in SSL Client Portal page. SSL – if you choose such selection, web proxy over SSL will be applied for VPN. 3 3 . . 1 1 5 5 [...]

VigorPro5300 Series User’s Guide 206 The SSL Web Proxy profile names will be disp layed (together with check box) as shown below. 3 3 . . 1 1 5 5 . . 3 3 O O n n l l i i n n e e U U s s e e r r S S t t a a t t u u s s If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access in to[...]

VigorPro5300 Series User’s Guide 207 Active User Display current user who visit SSL VPN server. Host IP Displays the IP address for the host. Time out Display the time rema ining for logging out. Action You can click Drop to drop certain login user from the router's SSL Portal UI.[...]

VigorPro5300 Series User’s Guide 208 3 3 . . 1 1 6 6 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items[...]

VigorPro5300 Series User’s Guide 209 1 st IP Address Display the IP address of the LAN interface. 1 st Subnet Mask Display the subnet mask address of the LAN interface. DHCP Server Display the current status of DHCP server of the LAN interface. DNS Display the assigned IP address of the primary DNS. Link Status Display the connection status of WA[...]

VigorPro5300 Series User’s Guide 210 2. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. 3. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself. 4. Click Save button, the configuration will download a utomatically to y[...]

VigorPro5300 Series User’s Guide 211 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Go to System Maintenance >> Configuration Backup . The following windows will be popped-up, as shown below. 2. Click Browse button to choose the correct confi guration file for uploading to the router. 3. Click Restore but[...]

VigorPro5300 Series User’s Guide 212 Send a test e-mail Make a simple test for the e-mail address specified in this page. Please assign the mail address first and click this button to execute a test for verify the mail address is available or not. SMTP Server The IP address of the SMTP server. Mail To Assign a mail address for sending mails out. [...]

VigorPro5300 Series User’s Guide 213[...]

VigorPro5300 Series User’s Guide 214 3 3 . . 1 1 6 6 . . 5 5 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as[...]

VigorPro5300 Series User’s Guide 215 3 3 . . 1 1 6 6 . . 6 6 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. For example, as to management ac cess control, the port number is used to send/receive SIP message for building a session. The default value [...]

VigorPro5300 Series User’s Guide 216 Set Community Set co mmunity by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap co mmunity by typing a proper nam e. The default setting is public. Notification[...]

VigorPro5300 Series User’s Guide 217 3 3 . . 1 1 6 6 . . 8 8 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that this[...]

VigorPro5300 Series User’s Guide 218 3 3 . . 1 1 7 7 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 7 7 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r Click Diagnostics and click Dial[...]

VigorPro5300 Series User’s Guide 219 3 3 . . 1 1 7 7 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Refresh Click it to reload the page. 3 3 . . 1 1 7 7 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the conte[...]

VigorPro5300 Series User’s Guide 220 3 3 . . 1 1 7 7 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Index It displays the connection [...]

VigorPro5300 Series User’s Guide 221 Interface It indicates the interface of the WAN connection. Refresh Click it to reload the page. 3 3 . . 1 1 7 7 . . 6 6 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. Th[...]

VigorPro5300 Series User’s Guide 222 Index Display the number of the data flow. IP Address Display the IP address of the monitored device. TX rate (kbps) Display the trans mission speed of the monitored device. RX rate (kbps) Display the receiving speed of the monitored device. Sessions Display the session number that you specified in Limit Sessi[...]

VigorPro5300 Series User’s Guide 223 The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1/WAN2 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of[...]

VigorPro5300 Series User’s Guide 224 3 3 . . 1 1 7 7 . . 9 9 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run . The result of route trace will be shown on the screen[...]

VigorPro5300 Series User’s Guide 225 4 R R e e g g i i s s t t r r a a t t i i o o n n f f o o r r t t h h e e R R o o u u t t e e r r To use the anti-intrusion, anti-virus and anti- spam features of VigorPro series router, you have to create a new account, finish the registration for that account by using the router and complete the registration[...]

VigorPro5300 Series User’s Guide 226 2. Check to confirm that you accept the Agreement and click Accept . 3. Type your personal information in this page and then click Continue .[...]

VigorPro5300 Series User’s Guide 227 4. Choose proper selection for your computer and click Continue . 5. Now you have created an account successfully. 6. Check to see the confirmation email with the title of New Account Confirmation Letter from www.vigorpro.com .[...]

VigorPro5300 Series User’s Guide 228 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify th e register process is finished. Please click Login . 8. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Pa[...]

VigorPro5300 Series User’s Guide 229 4 4 . . 2 2 C C r r e e a a t t i i n n g g a a n n d d A A c c t t i i v v a a t t i i n n g g a a n n A A c c c c o o u u n n t t f f r r o o m m R R o o u u t t e e r r W W e e b b C C o o n n f f i i g g u u r r a a t t o o r r You, also can created and register a new account from the web configurator of t[...]

VigorPro5300 Series User’s Guide 230 4. A Re-login page will be shown on the screen. 5. Locate and click Create an account now link on the bottom of this page. You will access into the following page. Check the box below to confirm that you accept the Agreement and click Accept .[...]

VigorPro5300 Series User’s Guide 231 6. Type your personal information in this page and then click Continue . 7. Choose proper selection for your computer and click Continue .[...]

VigorPro5300 Series User’s Guide 232 8. Now you have created an account successfully. 9. Check to see the confirmation email with the title of New Account Confirmation Letter from www.vigorpro.com . 10. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify th e register process is [...]

VigorPro5300 Series User’s Guide 233 11. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . Then type the code in the box of AuthCode according to the value di splayed on the right side of it. 12. Now, click Login . Your account has been activated. And the foll[...]

VigorPro5300 Series User’s Guide 234 4 4 . . 3 3 R R e e g g i i s s t t e e r r i i n n g g Y Y o o u u r r V V i i g g o o r r R R o o u u t t e e r r You have activated the new account for the router. Now, it is the time for you to register your vigor router. Open Defense Configuration >>Activation ; the other is to register by using Ant[...]

VigorPro5300 Series User’s Guide 235 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. The following page will be displayed after you logging in VigorPro server. From this page, please click Add .[...]

VigorPro5300 Series User’s Guide 236 6. When the following page appears, please type in Nick Nam e (for the router) and choose the right purchase date from the popup calendar (it appears when you click on the box of Purchase Date). 7. After adding the basic information for the router, please click Submit . 8. Now, your router information has been[...]

VigorPro5300 Series User’s Guide 237 4 4 . . 4 4 A A c c t t i i v v a a t t i i n n g g A A n n t t i i - - V V i i r r u u s s / / A A n n t t i i - - I I n n t t r r u u s s i i o o n n / / A A n n t t i i - - S S p p a a m m S S e e r r v v i i c c e e After registering your vigor router, you have to follo w the steps listed below to activate[...]

VigorPro5300 Series User’s Guide 238 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. On the web page of My Product , you can find a list of the devices that you add with the above steps. Currently, you just have added VigorPro 5300. Please click the serial numb[...]

VigorPro5300 Series User’s Guide 239 6. From the Device’s Service section, click the Activate button for AI-AV (Anti-Intrusion & Anti-Virus) service. Rename It allows you to change the account name. Delete It allows you to delete account name used currently. Transfer It allows you to transfer the VigorPro device together with applied licens[...]

VigorPro5300 Series User’s Guide 240 7. In the following page, check the box of “ I have read and accept the above Agreement ”. The system will find out the date for you to activate this version of service. Then, click Next . Note: DT-DT means you can acquire the anti-intrusion and anti-virus services from DrayTek Corporation. 8. When this pa[...]

VigorPro5300 Series User’s Guide 241 10. Click Close . 11. Open Defense Configuration>>Status page of the router’s web configurator. The start date and expire date for the license are shown in this page. 12. Click Activate to access into VigorPro website again. Open the following page. You will see the AI-AV (with provider DT-DT) has been[...]

VigorPro5300 Series User’s Guide 242 4 4 . . 4 4 . . 2 2 F F o o r r A A n n t t i i - - S S p p a a m m S S e e r r v v i i c c e e Please follow the steps below to activat e Anti-Spam Service for your system. G G e e t t t t i i n n g g 3 3 0 0 D D a a y y s s o o f f F F r r e e e e C C h h a a r r g g e e 1. Open a web browser on your PC and [...]

VigorPro5300 Series User’s Guide 243 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. On the web page of My Product , you can find a list of the devices that you add with the above steps. Currently, you just have added VigorPro 5300. Please click the serial numb[...]

VigorPro5300 Series User’s Guide 244 6. From the Device’s Service section, click the Trial button for AS (Anti-Spam) service. 7. In this page, check the box of “ I have read and accept the above Agreement ”. The system will find out the date for you to activate this version of service. Then, click Next . Note: CTCH means you can acquire ant[...]

VigorPro5300 Series User’s Guide 245 9. Next, the DrayTek Service Activation scr een will be shown as the following. 10. Click Close . Now, you have finished all the procedure for activating Anti-Spam service for your router. Note: You are allowed to use this version (with anti-spam feature) for 30 days after registration for your r outer. In add[...]

VigorPro5300 Series User’s Guide 246 3. Click the Activate link from Anti-Spam License to activate Anti-Spam service. 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login .[...]

VigorPro5300 Series User’s Guide 247 5. On the web page of My Product , you can find a list of the devices that you add with the above steps. Currently, you just have added VigorPro 5300. Please click the serial number link. 6. From the Device’s Service section, click the Upgrade buttons for AS (Anti-Spam) service.[...]

VigorPro5300 Series User’s Guide 248 7. In this page, type the License Number stat ed on the Anti-Spam license card in the field of License Number . Then, click Add License . 8. Now, the license number will be displayed on the page immediately. Click Next .[...]

VigorPro5300 Series User’s Guide 249 9. In this page, check the box of “ I have read and accept the above Agreement ”. The system will find out the date for you to activate this version of service. Then, click Next . 10. When this page appears, click Apply . (Above figure supposes you have not activated Anti-Virus yet.) 11. Confirm Message wi[...]

VigorPro5300 Series User’s Guide 250 13. Click Close to exit.[...]

VigorPro5300 Series User’s Guide 251 4 4 . . 5 5 A A p p p p l l y y i i n n g g a a N N e e w w L L i i c c e e n n s s e e f f o o r r A A n n t t i i - - I I n n t t r r u u s s i i o o n n / / A A n n t t i i - - V V i i r r u u s s When days for free of charge expires, you can apply for a new license by following the steps below: 1. Open a w[...]

VigorPro5300 Series User’s Guide 252 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. On the web page of My Product , you can find a list of the devices that you add with the above steps. Currently, you just have added VigorPro 5300. Please click the serial numb[...]

VigorPro5300 Series User’s Guide 253 6. From the Device’s Service section, click the Renew button for AI-AV (Anti-Intrusion & Anti-Virus) service (service provider is DT-DT). 7. In the following page, please type in license number shown on the License Key card. Enter the number and click Add License. Note: DT-KL allows you to acquire the an[...]

VigorPro5300 Series User’s Guide 254 9. Check the box of “ I have read and accept the above Agreement ” and click Next . 10. When this page appears, click Apply .[...]

VigorPro5300 Series User’s Guide 255 11. Confirm Message window will appear fo r you to m ake a confirmation. Click Confirm . 12. The Service Activation screen will be shown as the following. 13. Click Close . Return to Defense Configuration>>Status page of the router’s web configurator. The start date and expire date for the license will[...]

VigorPro5300 Series User’s Guide 256 4 4 . . 6 6 B B a a c c k k u u p p a a n n d d U U p p g g r r a a d d e e S S i i g g n n a a t t u u r r e e f f o o r r A A n n t t i i - - I I n n t t r r u u s s i i o o n n / / A A n n t t i i - - V V i i r r u u s s You can get the most updated signature fro m DrayTek’s server if the license key of a[...]

VigorPro5300 Series User’s Guide 257 T T i i m m e e f f o o r r D D o o w w n n l l o o a a d d After changing other license, it is suggested fo r you to download newly update signature for your router. To download newly update anti-intrusio n and anti-virus from VigorPro website, please click Download Now!!! . T T i i m m e e f f o o r r I I m [...]

VigorPro5300 Series User’s Guide 258 4. A Re-login page will be shown on the screen. Please type new account and password that you created previously. And click Login . 5. The following page will be shown automa tically. You will find there are two devices service added to your router. If you activated only one service befor e, it must be only on[...]

VigorPro5300 Series User’s Guide 259 6. Click the On button on the line with DT-KL servi ce to use that service. Then, the Status light for DT-DT service will be changed into red which means you can press on the On button for that one to use it for next time. 7. Now, you have successfully switched the service provider for your router. 4 4 . . 8 8[...]

VigorPro5300 Series User’s Guide 260 If you did not check the Anti-Intrusion box and choose a proper profile for Anti-Virus/Anti-Spam, you still cannot use the Anti-Intrusion/Anti-Virus/Anti-Spam function even if you finished all the relational profiles.[...]

VigorPro5300 Series User’s Guide 261 5 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 5 5 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d[...]

VigorPro5300 Series User’s Guide 262 For using IPSec -based service, such as IPSec or L2 TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enabl[...]

VigorPro5300 Series User’s Guide 263 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s sele cte[...]

VigorPro5300 Series User’s Guide 264 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Rout[...]

VigorPro5300 Series User’s Guide 265 2. Then, for usi ng PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to[...]

VigorPro5300 Series User’s Guide 266 connection. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service [...]

VigorPro5300 Series User’s Guide 267 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets des tined to the remote network to Rou[...]

VigorPro5300 Series User’s Guide 268 5 5 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is th[...]

VigorPro5300 Series User’s Guide 269 3. Go to Remote Dial-In Users . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Meth[...]

VigorPro5300 Series User’s Guide 270 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel t o Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel[...]

VigorPro5300 Series User’s Guide 271 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router. If a PPP-based service is selected, you should fu rther specify the remote VPN server IP address, Username, Password, [...]

VigorPro5300 Series User’s Guide 272 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 5 5 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he w[...]

VigorPro5300 Series User’s Guide 273 Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS perform ance. 4. Return to previous page. Enter th e Name o[...]

VigorPro5300 Series User’s Guide 274 7. Click Setup link for W AN1. 8. Check Enable UDP Bandwidth Control on the bottom to prevent enorm ous UDP traffic of V oIP influent other application, and click OK. 9. If the worker has connected to the headquart er using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he m a[...]

VigorPro5300 Series User’s Guide 275 10. Click edit to open a new window . 11. First, check the ACT box. Then click Edit of Local Address to set a worker ’ s subnet address. Click Edit of Remote Address to set headquarter ’ s subnet address. Leave other fields and click OK . 5 5 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y [...]

VigorPro5300 Series User’s Guide 276 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage. T o use another DHCP server in the network rather than the built-i n one of V igor Router , you have to change the settings as show below .[...]

VigorPro5300 Series User’s Guide 277 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.[...]

VigorPro5300 Series User’s Guide 278 5 5 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 5 5 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers. Jo[...]

VigorPro5300 Series User’s Guide 279 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.org SIP Accounts Settings --- Profile Name: draytel 1 Regi[...]

VigorPro5300 Series User’s Guide 280 5 5 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respectively, they can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling. [...]

VigorPro5300 Series User’s Guide 281 5 5 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. 1. Insert CD of the router to your CD ROM. 2. From the[...]

VigorPro5300 Series User’s Guide 282 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 12. Type in your router IP, u[...]

VigorPro5300 Series User’s Guide 283 14. Click Send . 15. Now the firmware update is finished. 5 5 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r[...]

VigorPro5300 Series User’s Guide 284 1. Go to Certificate Management and choose Local Certificate . 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.[...]

VigorPro5300 Series User’s Guide 285 4. Connect to C A server via web browser. Follo w the instruction to submit the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate . Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PK[...]

VigorPro5300 Series User’s Guide 286 Then you have done the request and the ser ver now issues you a certificate. Select Base 64 encoded certificate and Download CA certificate . Now you should get a certificate (.cer file) and save it. 5. Back to Vigor router, go to Local Certificate . Click IMPORT button and browse the file to import the certif[...]

VigorPro5300 Series User’s Guide 287 5 5 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA c[...]

VigorPro5300 Series User’s Guide 288 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click ref[...]

VigorPro5300 Series User’s Guide 289 6 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z [...]

VigorPro5300 Series User’s Guide 290 F F o o r r W W i i n n d d o o w w s s  The example is based on Windows XP. As to the exam ples for other operation systems, please refer to the sim ilar steps or find support notes in www.draytek.com . 1. Go to Control Panel and then double-click on Network Connection s. 2. Right-click on Local Area Conne[...]

VigorPro5300 Series User’s Guide 291 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Config[...]

VigorPro5300 Series User’s Guide 292 6 6 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router. The most im[...]

VigorPro5300 Series User’s Guide 293 6 6 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly. Click Details Page of WAN1/WAN2 to review the settings that you config[...]

VigorPro5300 Series User’s Guide 294 F F o o r r S S t t a a t t i i c c / / D D y y n n a a m m i i c c I I P P U U s s e e r r s s 1. Check if the Enable option is selected. 2. Check if IP address, Subnet Mask and Gateway are entered with correct values that you got from your ISP .[...]

VigorPro5300 Series User’s Guide 295 F F o o r r P P P P T T P P U U s s e e r r s s 1. Check if the Enable option for PPTP Link is selected. 2. Check if PPTP Server, Username, Password and WAN IP address are set correctly (must identify with the values from your ISP). 6 6 . . 5 5 B B a a c c k k i i n n g g t t o o F F a a c c t t o o r r y y D [...]

VigorPro5300 Series User’s Guide 296 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly , please re lease the button. Then, the router will restar t with the default configuration. After restore[...]