Draytek VigorPro 5500 Series manual

VigorPro 5500 Series Unified Security Firewall User’s Guide Version: 3.0 Date: 2007/05/02 Copyright 2007 All rights reserved. This publication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval syst em, or translated into any langu age without written permission from th[...]

VigorPro5500 Series User’s Guide ii Safety Instructions and Approval Safety Instructions z Read the installation guide thorough ly before you set up the router. z The router is a complicat ed electronic unit that may be repaired only be authorized a nd qualified pe rsonnel. D o not try t o open or repai r the router yourself. z Do not place the r[...]

VigorPro5500 Series User’s Guide iii European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou County, H s inChu Industrial Park, Hsin-Chu, Taiwan 303 Product: VigorPro 5500 DrayTek Corp. declar es that VigorPro 5500 Series is in complian ce with the following essential r eq u irements and other relevant pr[...]

VigorPro5500 Series User’s Guide iv T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1[...]

VigorPro5500 Series User’s Guide v 3.4.4 Service Type Gr oup ....................................................................................................... .5 4 3.4.5 CSM Profile .............................................................................................................. ....... 55 3.5 Fire wall ........................[...]

VigorPro5500 Series User’s Guide vi 3.14.3 Se curity ................................................................................................................ ....... 137 3.14.4 Access Control .......................................................................................................... .. 138 3.14.5 WDS........................[...]

VigorPro5500 Series User’s Guide vii 5.1 Create a LAN-to-LAN Connection Betwee n Remote Office and Headquarter .................... 21 1 5.2 Create a Remote Dial-in User Connecti on Between the T elework er and Headquarter ...... 218 5.3 QoS Setti ng Exam ple ........................................................................................[...]

[...]

VigorPro5500 Series User’s Guide 1 1 P P r r e e f f a a c c e e The VigorPro5500 series router provides Dual-WAN interface (which is a configurable second WAN) for Internet access to make the Internet connection more reliable. The wireless LAN supports more secure features and the transmission speed is up to 108Mbps (Super G TM ). Object-oriente[...]

VigorPro5500 Series User’s Guide 2 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r P P r r o o 5 5 5 5 0 0 0 0 LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is powe red off. Virus On (Yellow) The anti-virus function is enabled . IDP (Intrusio n Det ect i on an d Prevention) On [...]

VigorPro5500 Series User’s Guide 3 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r P P r r o o 5 5 5 5 0 0 0 0 G G LED Status Explanation Blinking The router is powe re d on and running no rm ally. ACT (Activity) Off The router is p owered off. Virus On (Yellow) The anti-virus function is enabled. IDP (Intrusio n Det ect i on an d Prevention)[...]

VigorPro5500 Series User’s Guide 4 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r P P r r o o 5 5 5 5 0 0 0 0 i i LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is powe red off. Virus On (Yellow) The anti-virus function is enabled . IDP (Intrusio n Det ect i on an d Prevention)[...]

VigorPro5500 Series User’s Guide 5 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r P P r r o o 5 5 5 5 0 0 0 0 G G i i LED Status Explanation Blinking The router is powere d on and running no rm ally. ACT (Activity) Off The router is powe red off. Virus On (Yellow) The anti-virus function is enabled . IDP (Intrusio n Det ect i on an d Prevent[...]

VigorPro5500 Series User’s Guide 6 Interface Description RST (Factory Reset) Restore the def ault settings. Usage: Turn on t he router (A CT LED is bli nking). Press t he hole and keep for more than 5 se conds. When y ou see the ACT LE D begins to bl ink rapidl y than usual, release the button. Th en the rout er will restart with the factory defa[...]

VigorPro5500 Series User’s Guide 7 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n This section will guide you to install the rout er through hardware c onnection and configure the router’s settings through web browser. Before starting to configure the router, you have to connect your devices correctl[...]

VigorPro5500 Series User’s Guide 8[...]

VigorPro5500 Series User’s Guide 9 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator an[...]

VigorPro5500 Series User’s Guide 10 3. Now, the Main Screen will pop up. Note: The home page will change slightly in accordance with the router you have. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password . Type a new one in the field of New Passwor[...]

VigorPro5500 Series User’s Guide 11 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is entering login password. After ty ping the passw[...]

VigorPro5500 Series User’s Guide 12 On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. Fo r example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. In the Quick Start Wizard , you can configure the router to access th[...]

VigorPro5500 Series User’s Guide 13 If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown. User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password for confirmation. Click Next for viewi[...]

VigorPro5500 Series User’s Guide 14 2 2 . . 2 2 . . 2 2 P P P P T T P P Click PPTP as the protocol. Type in all the information that your ISP provi des for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.[...]

VigorPro5500 Series User’s Guide 15 2 2 . . 2 2 . . 3 3 S S t t a a t t i i c c I I P P Click Static IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, th[...]

VigorPro5500 Series User’s Guide 16 2 2 . . 2 2 . . 4 4 D D H H C C P P Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of th[...]

VigorPro5500 Series User’s Guide 17 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE/PPTP as the protocol , you will find out a link of Dial PPPoE/PPPoA or Drop PPPoE/PPPoA in the Online [...]

VigorPro5500 Series User’s Guide 18 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interfa[...]

VigorPro5500 Series User’s Guide 19 2 2 . . 4 4 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your se[...]

VigorPro5500 Series User’s Guide 20 This page is left blank.[...]

VigorPro5500 Series User’s Guide 21 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed in[...]

VigorPro5500 Series User’s Guide 22 Below shows the menu items for WAN. 3 3 . . 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This section will introduce some general settings of Internet and explain the connection modes for WAN1 and WAN2 in details. This router supports dual WAN function. It allows users to access Internet and comb[...]

VigorPro5500 Series User’s Guide 23 Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN in terface, please choose the setting of According to Line Speed . Otherwise, please choose Auto Weigh to let the router reach the b[...]

VigorPro5500 Series User’s Guide 24 3 3 . . 1 1 . . 3 3 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent physical mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly. [...]

VigorPro5500 Series User’s Guide 25 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E To use PPPoE as the accessing protocol of the internet, please choose Internet Acce ss from WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown. PPPoE Client Mode Click Enable for activating this function. I[...]

VigorPro5500 Series User’s Guide 26 Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address . Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address f o r the router[...]

VigorPro5500 Series User’s Guide 27 Static or Dynamic IP (DHCP Client) Click Enable for activating this function. If you click Disable , this function will be closed and all the settings that you adjusted in this page will be invalid. Keep WAN Connection Normally, this function is designed for Dynamic IP environments because some ISPs will drop c[...]

VigorPro5500 Series User’s Guide 28 Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dynamic IP mode. Router Name : Type in the router name provided by ISP. Domain Name : Type in the domain name that you have assigned. Specify an IP address – Click this radio button to specify so[...]

VigorPro5500 Series User’s Guide 29 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P T T P P To use PPTP as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPTP mode for WAN2. The following web page will be shown. PPTP Setup PPTP Link - Click Enable to enable a PPTP client to establ[...]

VigorPro5500 Series User’s Guide 30 Default MAC Address – Click this radio button to use default MAC address for the router. Specify a MAC Address - Some Cable service providers specify a specific MAC address for access authentication. In such cases y ou need to click the Specify a MAC Address and enter the MAC address in the MAC Address field.[...]

VigorPro5500 Series User’s Guide 31 Index Click the number of index to access into the load-balance policy configuration web page. Enable Check this box to enable this policy. Protocol Use the drop-down menu to change the protocol for t he WAN interface. WAN Use the drop-down menu to change the WAN interface. Src IP Start Displays the IP address [...]

VigorPro5500 Series User’s Guide 32 Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. Binding WAN interface Choose the WAN interface (WAN1 or WAN2) for binding. Src IP Start Type the source IP start for the specified WAN interface. Src IP End Type the source IP end for [...]

VigorPro5500 Series User’s Guide 33 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router[...]

VigorPro5500 Series User’s Guide 34 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of th[...]

VigorPro5500 Series User’s Guide 35 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T y pe in private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mas[...]

VigorPro5500 Series User’s Guide 36 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.2 or greater , but smaller than 220.135.240. 254. IP Pool Counts: Enter the number of IP addres[...]

VigorPro5500 Series User’s Guide 37 DHCP Server IP Address for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP r equest to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Internet host must have a unique IP address, also they may have a hu[...]

VigorPro5500 Series User’s Guide 38 Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i c c R R o o u u t t e e s s t t o o P P r r i i v v a a t t e e a a n n d d P P u u b b l[...]

VigorPro5500 Series User’s Guide 39 Note: There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The first is that the LAN inte rface can exchange RIP packets with the neighboring routers via the 1st subne t (192.168.1.0/24). The second is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can access t[...]

VigorPro5500 Series User’s Guide 40 3 3 . . 2 2 . . 4 4 V V L L A A N N Note: This menu is available for Vigor5500 model. For Vigor5500G, please refer to 3.13. Virtual LAN function provides you a very conve nient way to manage hosts b y grouping them based on the physical port. You can also manage the in/out rate of each port. Go to LAN page and [...]

VigorPro5500 Series User’s Guide 41 2. After checking the box to enable VLAN func tion, you will check the table according to the needs as shown below. T o remove VLAN, uncheck the needed box and click OK to save the results. 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LA[...]

VigorPro5500 Series User’s Guide 42 and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below . Add and Edit IP Address – Type the IP address that will be used for the specified MAC address. Mac Address – Type the MAC address that is used to bind with the assigned IP address. Refresh It is used to ref[...]

VigorPro5500 Series User’s Guide 43 Below shows the menu items for NAT. 3 3 . . 3 3 . . 1 1 P P o o r r t t R R e e d d i i r r e e c c t t i i o o n n Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc. Most of the case, you need a public IP address f[...]

VigorPro5500 Series User’s Guide 44 Press any number under Index to access into next page for configuring port redirection. Enable Check this box to enable such port redirection setting. Mode Two options (Single and Range) are provided here for you to choose. To set a range for the specific service, select Range . In Range mode, if the public por[...]

VigorPro5500 Series User’s Guide 45 box (as the starting point). The second one is assigned automatically after you type the private port number below. Private Port Specify the private port number of the service offered by the internal host. After you enter the proper number in this box, t he second box of Private IP address will be assigned acco[...]

VigorPro5500 Series User’s Guide 46 3 3 . . 3 3 . . 2 2 D D M M Z Z H H o o s s t t As mentioned above, Port Redirection can redirect incoming TCP/UDP or othe r traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (A H), do not travel on a fixed [...]

VigorPro5500 Series User’s Guide 47 If you previously have set up WAN Alias in Internet Access>>PPPoE, you will find them in Aux. WAN IP list for your selection. Enable Check to enable the DMZ Host function. Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this button and then a wind[...]

VigorPro5500 Series User’s Guide 48 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the applicati[...]

VigorPro5500 Series User’s Guide 49 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that will be used for this entry. Local Computer Enter the private IP address of the local host or click Choose PC to select one. Choose PC Click this button and[...]

VigorPro5500 Series User’s Guide 50 3 3 . . 4 4 O O b b j j e e c c t t s s S S e e t t t t i i n n g g s s For IPs in a range and service ports in a limited range usually will be applied for configuring router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that objec[...]

VigorPro5500 Series User’s Guide 51 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address. If you choose LAN as the Interface here, and choose LAN as the[...]

VigorPro5500 Series User’s Guide 52 3 3 . . 4 4 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail. Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, L[...]

VigorPro5500 Series User’s Guide 53 3 3 . . 4 4 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Name Type a name for this profile. Protocol[...]

VigorPro5500 Series User’s Guide 54 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when th e first and last values are different, it indicates that all the ports except the range defined here are available for this service type. (>) – the port number greater than this value is av[...]

VigorPro5500 Series User’s Guide 55 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Objects page. All the available IP objects will be shown in this box. Selected Service Type Objects Click button to add the selected IP objects in this box. 3 3 . . 4 4 . . 5 5 C C S S M M P P r r o o f f i i l l e [...]

VigorPro5500 Series User’s Guide 56 Profile Name Type a name for the CSM profile. There are several items for IM, VoIP, P2P provided here for you to choose to disallow people using. Simple check the box (es) and then click OK . Later, in the Firewall>>Edit Filter Set>>Edit Filter Rule page, you can use Content Management drop down lis[...]

VigorPro5500 Series User’s Guide 57 3 3 . . 5 5 F F i i r r e e w w a a l l l l 3 3 . . 5 5 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth fo r multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vi[...]

VigorPro5500 Series User’s Guide 58 I I P P F F i i l l t t e e r r s s Depending on whether there is an existing Internet connection, or in other words “the WAN link status is up or down”, the IP filter architecture categorizes traffic into two: Call Filter and Data Filter . z Call Filter - When there is no existing Internet connection, Call[...]

VigorPro5500 Series User’s Guide 59 C C o o n n t t e e n n t t S S e e c c u u r r i i t t y y M M a a n n a a g g e e m m e e n n t t ( ( C C S S M M ) ) As the popularity of all kinds of instant messenger application arises, communication cannot become much easier. Nevertheless, while some i ndustry may leverage this as a great tool to connect[...]

VigorPro5500 Series User’s Guide 60 W W e e b b F F i i l l t t e e r r i i n n g g We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible pare nt or employer, you should protect those in your trust against the hazards. With Web filtering service of the Vigor router, you can pr[...]

VigorPro5500 Series User’s Guide 61 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Filter Select Pass or Block for the packets that do not match with the filter rules. Content[...]

VigorPro5500 Series User’s Guide 62 Some on-line games (for example: Half Life) will use lots of fragmented UDP packets to transfer game data. Instinctively as a secur e firewall, V igor router will reject these fragmented packets to prevent attack unless you enable “ Accept Incoming Fragmented UDP Packets ”. By checking this box, you can pla[...]

VigorPro5500 Series User’s Guide 63 Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Index (1-15) Set PCs on LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 sc hedules pre-defined in Applications[...]

VigorPro5500 Series User’s Guide 64 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Ty pe and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type. From the IP Group drop down l[...]

VigorPro5500 Series User’s Guide 65 Service Group/Object - Use the drop down list to choose the one that you want. Fragments Specify the action for fragmented packets. And it is used for Data Filter only. Don’t care - No action will be taken towards fragmented packets. Unfragmented - Apply the rule to unfragmented packets. Fragmented - Apply th[...]

VigorPro5500 Series User’s Guide 66[...]

VigorPro5500 Series User’s Guide 67 3 3 . . 5 5 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defens[...]

VigorPro5500 Series User’s Guide 68 packets per second. Block IP options Check the box to activate the Block IP options function. The Vigor router will ignore any IP packets with IP option field in the datagram header. The reason for limitation is IP option appears to be a vulnerability of the security for the LAN because it will carry significan[...]

VigorPro5500 Series User’s Guide 69 reject this kind of packets. Warning Messages We provide Syslog function for user to retrieve message from Vigor router. The user, as a Syslog Server, shall receive the report sending from Vigor router which is a Syslog Client. All the warning messages related to DoS defense will be sent to use r and user can r[...]

VigorPro5500 Series User’s Guide 70 3 3 . . 5 5 . . 5 5 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r Based on the list of user defined keywords, the URL Content Filter facility in Vigor router inspects the URL string in every outgoing HTTP request. No matter the URL string is found full or partial matched with a keyword, th e V[...]

VigorPro5500 Series User’s Guide 71 a noun, a partial noun, or a complete URL string. Multiple keywords within a frame are separated by space, co mma, or semicolon. In addition, the maximal length of each frame is 32-character long. After specifying keywords, the Vigor router will decline the connection request to the website whose URL string mat[...]

VigorPro5500 Series User’s Guide 72 3 3 . . 5 5 . . 6 6 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r Click Firewall and click Web Content Filter to open the setup page. For this section, please refer to Web Content Filter user’s guide.[...]

VigorPro5500 Series User’s Guide 73 3 3 . . 6 6 A A n n t t i i - - I I n n t t r r u u s s i i o o n n This page allows you to prevent the intrusion from hackers wh ile accessing into Internet. It can detect the intrusion and execute basic defense. There are more than 200 basic rules for anti-in trusion and anti-virus for this router. To acquire[...]

VigorPro5500 Series User’s Guide 74 High Security Click this radio button to activate the anti-intrusion service with overall detecting conditions. That is, the router will detect and block the incoming/outgoing packets which match all the severity rules, including high, medium and low. The degree of severity for each rule is defined in Advance S[...]

VigorPro5500 Series User’s Guide 75 Type links Click any anti-intrusion type link to access into next page for configuring the rules settings. Here we provide several rules for each type. The factory types and rules for anti-intrusion are shown in this page. If you want to acquire more types and rules, please go to www.vigorpro.com and finish the[...]

VigorPro5500 Series User’s Guide 76 Action Pass - Click this radio button to detect if there is any intrusion occurrence for your reference. The system will not do any advanced action for such condition. Disallow - Click this radio button to block the incoming/outgoing packets with possible intrusion acti ons transmitting through the router. Rese[...]

VigorPro5500 Series User’s Guide 77 3 3 . . 7 7 A A n n t t i i - - V V i i r r u u s s Vigor router can offer basic virus scanning, d estroying and cut off the connection between questionable link and your com puter for the fil es transmitted through specified protocol. In addition, several types of compressed file form ats such as .zip, .gzip, [...]

VigorPro5500 Series User’s Guide 78 Profile Name T ype a name for the profile. Protocol Currently , only the files transmitted through the protocols listed in this page including SMTP , POP3 , IMAP , HTTP and FTP will be scanned by this router . Action Choose the action that you want to apply to the proto cols of each operation. Pass - Detect if [...]

VigorPro5500 Series User’s Guide 79 Detect Macro Attachment The file with macro attachment will be passed/destro yed/reset under different protocols. The system will detect it automatically if you set corresponding configuration here. Detect Encrypted Zipped Files The file zipped with encryption will be detected and then be passed/destroyed/reset[...]

VigorPro5500 Series User’s Guide 80 Click each name link to check the detailed information of the anti-virus rule. D D e e t t a a i i l l e e d d V V i i e e w w f f o o r r A A n n t t i i - - V V i i r r u u s s From the fourteen types of anti-virus list, clic k any one of them to access into next page. The detailed view list for anti-virus ru[...]

VigorPro5500 Series User’s Guide 81 This page allows you to set 32 entries (rules) of file names to be filtered by the router. In such case, the file format is ignored. The rout er will destroy, scan or non-scan the specified filename according to the configuration t hat you set here. Below is the page of File Pattern List . The priority of each [...]

VigorPro5500 Series User’s Guide 82 for Default Action for default action. Click OK to finish the page configuration.[...]

VigorPro5500 Series User’s Guide 83 3 3 . . 8 8 A A n n t t i i - - S S p p a a m m Many people suffer with unwanted mails comi ng from everywhere. Such device offers a mechanism, named Anti-Spam, to do basi c scanning for filtering unnecessary mails and sorting the mails. Below shows the menu items for Anti-Spam. To activate function of Anti-Spa[...]

VigorPro5500 Series User’s Guide 84 Profile Name Type a name for such profile setting. Choose Protocol to Scan Spam Spam files usually come with protocol of SMTP or POP3. Please check the box that you want to avoid. It would be better to check both protocols. Select an Action for Each Category Mails would be judged and categorized into S pam or B[...]

VigorPro5500 Series User’s Guide 85 Tag - Choose this action to make all mails be tagged with certain words for you to identify easily. For example, type “timeout” on the box of Message . Then all the mails sending to your e-mail box at system timeout will be marked with “***timeout***” before the subjects of the mails. Later, these mails[...]

VigorPro5500 Series User’s Guide 86 3 3 . . 9 9 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router. The router will generate the records of NAT sessions for su ch connection. The P2P (Peer to Peer) applications (e.g., BitTorrent) always need many sessions for processi[...]

VigorPro5500 Series User’s Guide 87 Add Adds the specific session limitation onto the list above. Edit Allows you to edit the settings for the selected limitation. Delete Delete the selected settings existing on the limitation list. Index (1-15) in Schedule Setup You can type in four sets of time schedule for your request. All the schedules can b[...]

VigorPro5500 Series User’s Guide 88 TX limit Define the limitation for the speed of the upstream. If you do not set the limit in this field, the system will use the default speed for the specific limitation you set for each index. RX limit Define the limitation for the speed of the downstream. If you do not set the limit in this field, the system[...]

VigorPro5500 Series User’s Guide 89 Assured Forwarding (AF), and Best Effort (BE). AF defines the four classes of delivery (or forwarding) classes and three levels of drop precedence in each class. Vigor routers as edge routers of DS domain shall check the marked DSCP value in the IP header of bypassing traffic, thus to allocate certain amount of[...]

VigorPro5500 Series User’s Guide 90 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN- apply to incoming traffic only. OUT- apply to outgoing traffic only. BOTH- apply to both incoming and outgoing traffic. Check this box and click OK , then click Se[...]

VigorPro5500 Series User’s Guide 91 Management>>Quality of Service . E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one. After you click the E[...]

VigorPro5500 Series User’s Guide 92 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit button to set the remote IP address (on Lan/WAN) for the rule. Edit It allows you to edit[...]

VigorPro5500 Series User’s Guide 93 E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. For addi[...]

VigorPro5500 Series User’s Guide 94 Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP) for the new service. Port Configuration Click Single or Range . If you select Range, you have to type in the starting port number and the end porting num ber on the boxes below. Port Number – Type in the st[...]

VigorPro5500 Series User’s Guide 95 3 3 . . 1 1 0 0 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 1 1 0 0 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP. It means that the public IP address as[...]

VigorPro5500 Series User’s Guide 96 Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. View Log Display DDNS log status. Force Update Force the router updates its information to DDNS server. 3. Select Index number 1 to add an account for the router. Check Enabl[...]

VigorPro5500 Series User’s Guide 97 4. Click OK button to activate the settings. You will see your setting has been saved. The W ildcard and Backup MX features are not supported for all Dynamic DNS providers. Y ou could get more detailed in formation from their websites. Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup me[...]

VigorPro5500 Series User’s Guide 98 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule. Action Specify which action Call Schedule should apply dur[...]

VigorPro5500 Series User’s Guide 99 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE In ternet access profile. Now , the PPPoE Internet connection will follow the schedule order to perform For ce On or Force Down action according to the time plan that has been pre-defined in the sc[...]

VigorPro5500 Series User’s Guide 100 3 3 . . 1 1 0 0 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT[...]

VigorPro5500 Series User’s Guide 101 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Softw are Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will blo ck the accessing ability of some network ports. Security Considerations Activat[...]

VigorPro5500 Series User’s Guide 102 3 3 . . 1 1 0 0 . . 5 5 W W a a k k e e O O n n L L A A N N A PC client on LAN can be woken up by the router it connects. When a user wants to wake up a specified PC through the router, he/she mu st type correct MAC address of the specified PC on this web page of Wake On LAN of this router. In addition, such P[...]

VigorPro5500 Series User’s Guide 103 3 3 . . 1 1 1 1 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet. In short, by VPN technology, you can send data between two computers across a[...]

VigorPro5500 Series User’s Guide 104 3 3 . . 1 1 1 1 . . 2 2 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPSec. Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol. PAP [...]

VigorPro5500 Series User’s Guide 105 For example, if the local private network is 192.168.1.0/255.2 55.255.0, you could ch oose 192.168.1.200 as the Start IP Address. But, you have to notice that the first two IP addresses of 192.168.1. 200 and 192.168.1.201 are reserved for ISDN remote dial-in user. 3 3 . . 1 1 1 1 . . 3 3 I I P P S S e e c c G [...]

VigorPro5500 Series User’s Guide 106 Pre-Shared Key- Specify a key for IKE authentication Confirm Pre-Shared Key- Confirm the pre-shared key. IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypte d. By default, this option is active. High - Encapsulating Security Payload (ESP) means payloa[...]

VigorPro5500 Series User’s Guide 107 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field can be IP Address, Domain, or E-mail Address . The box under[...]

VigorPro5500 Series User’s Guide 108 3 3 . . 1 1 1 1 . . 5 5 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection. You may set parameters including specified connection peer [...]

VigorPro5500 Series User’s Guide 109 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback functio[...]

VigorPro5500 Series User’s Guide 110 select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. Password This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. IK[...]

VigorPro5500 Series User’s Guide 111 3 3 . . 1 1 1 1 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including sp ecified connection direction (dial-in or dial-out), connection peer ID, connection type (ISDN connection, VPN connection - includ[...]

VigorPro5500 Series User’s Guide 112 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router[...]

VigorPro5500 Series User’s Guide 113 connection has been idled over the value, the router will drop the connection. Enable PING to keep alive This function is to help the router to determine the status of IPSec VPN connection, especially useful in the case of abnormal VPN IPSec tunnel disruption. For details, please refer to the note below. Check[...]

VigorPro5500 Series User’s Guide 114 VJ compression This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. VJ Compression is used for TCP/IP protocol header compression. Normally set to Yes to improve bandwidth utilization. IKE Authentication Method This group of fields is applicable for IPSec Tunnels and [...]

VigorPro5500 Series User’s Guide 115 authentication schemes and encryption algorithms to the VPN peers, and get its feedback to find a match. Two combinations are available for Aggressive mode and nine for Main mode. We suggest you select the combination that covers the most schemes. IKE phase 2 proposal- To propose the local available algorithms[...]

VigorPro5500 Series User’s Guide 116 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN connection. You should set the User Name and Password of remote dial-in user below. This feature is useful for i model only. In addition, you can further set up Callback function below. PPTP Allow [...]

VigorPro5500 Series User’s Guide 117 Specify CLID or Remote VPN Gateway You can specify the IP address of the remote dial-in user or peer ID (should be the same with the ID setting in dial-in type) by checking the box. Enter Peer ISDN number if you select ISDN above (This feature is useful for i model only.). Also, you should further specify the [...]

VigorPro5500 Series User’s Guide 118 automatically per callback connection. The default value 0 means no limitation of callback period. My WAN IP This field is only applicable when you s elect ISDN, PPTP or L2TP with or without IPSec policy above. The default value is 0.0.0.0, which means the Vigor router will get a PPP IP address from the remote[...]

VigorPro5500 Series User’s Guide 119 3 3 . . 1 1 1 1 . . 7 7 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You ma y also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Dial[...]

VigorPro5500 Series User’s Guide 120 3 3 . . 1 1 2 2 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc., and the digital signature of[...]

VigorPro5500 Series User’s Guide 121 Type in all the information that the window request. Then click Generate again. Import Click this button to import a saved file as the certification information. Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. Afte[...]

VigorPro5500 Series User’s Guide 122 3 3 . . 1 1 2 2 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text fil[...]

VigorPro5500 Series User’s Guide 123 3 3 . . 1 1 2 2 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them . If you want to set encryption password for these certificates, please[...]

VigorPro5500 Series User’s Guide 124 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s This web page allows you to enable wireless LAN function. ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local ISDN network, you should choose the correct country[...]

VigorPro5500 Series User’s Guide 125 3 3 . . 1 1 3 3 . . 3 3 D D i i a a l l t t o o S S i i n n g g l l e e / / D D u u a a l l I I S S P P s s Select Dialing to a Single ISP if you access the Internet via a single ISP. ISP Access Setup ISP Name - Enter your ISP name such as Seednet, Hinet, and so on. Dial Number - Enter the ISDN access number p[...]

VigorPro5500 Series User’s Guide 126 Method (IPCP) most ISPs provide a dynamic IP address for the router when it connects to the ISP. If your ISP provides a fixed IP address, check Yes and enter the IP address in the field of Fixed IP Address . Select Dialing to Dual ISPs if you have more than one ISP. You will be able to dial to both ISPs at the[...]

VigorPro5500 Series User’s Guide 127 Primary ISP Setup ISP Name - Enter your ISP name. Dial Number - Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided by your ISP. IP Address Assignment Method (IPCP) for primary ISP setup In most environments, you should n[...]

VigorPro5500 Series User’s Guide 128 3 3 . . 1 1 3 3 . . 4 4 V V i i r r t t u u a a l l T T A A Vi r t u a l T A means the local hosts or PCs in th e network that uses popular CAPI-based software such as R VS-COM or BVRP to access the router as a local ISDN T A for sending or receiving F AX messages over the ISDN line. Basicall y , it is a clien[...]

VigorPro5500 Series User’s Guide 129 z The Virtual TA client only supports the CA PI 2.0 protocol and has no built-in FAX engine. z One ISDN BRI interface has two B channels. The maximum number of active clients is also 2. z Before you configure the V irtual T A, you must set the correct country code in ISDN Setup . Virtual TA Server Enable - Sel[...]

VigorPro5500 Series User’s Guide 130 C C o o n n f f i i g g u u r r e e a a V V i i r r t t u u a a l l T T A A C C l l i i e e n n t t / / S S e e r r v v e e r r Since the V irtual T A application is a client/ server network model, you must configure it on both ends to run properly your V irtual T A application. By default, the V irtual T A se[...]

VigorPro5500 Series User’s Guide 131 If you have applied to an MSN number service, th e V i rtual T A server can assign which client has the specified MSN number . When an inco ming call arrives, the server will inform the appropriate client. Now we set an example to describe the configuration of the MSN number . Suppose that you could assign the[...]

VigorPro5500 Series User’s Guide 132 activation. The phone call will be soon disconnected once the router is on line. Note: Dialing to a Single ISP should be pre-configured properly . Basic Setup Link Type - Because ISDN has two B channels (64Kbps/per channel), you can specify whether you would like to have single B channel, two B channels or BOD[...]

VigorPro5500 Series User’s Guide 133 3 3 . . 1 1 4 4 W W i i r r e e l l e e s s s s L L A A N N This function is used for G models only. 3 3 . . 1 1 4 4 . . 1 1 B B a a s s i i c c C C o o n n c c e e p p t t s s Over recent years, the market for wireless co mmunications has enjoyed tremendous growth. Wireless technology now reaches or is capabl[...]

VigorPro5500 Series User’s Guide 134 WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit ke y. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys. WPA(Wi-Fi Protected Access), the most domina ti[...]

VigorPro5500 Series User’s Guide 135 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons. To isolate means neither of the parties can access each othe r. To elaborate an example for business use, you may set up a wireless LAN for visitors onl[...]

VigorPro5500 Series User’s Guide 136 11b only - The radio only supports IEE E802.11b. Index (1-15) Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this filed is blank and the function will always work. S[...]

VigorPro5500 Series User’s Guide 137 3 3 . . 1 1 4 4 . . 3 3 S S e e c c u u r r i i t t y y By clicking the Security Settings , a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP Only - Accept only WEP client[...]

VigorPro5500 Series User’s Guide 138 auto-negotiated during authentication, the field of ke y setting below will be not available for input. WPA The WPA encrypts each frame transmitted from the radio using the key, which either PSK entered manually in this field below or automatically negotiated via 802.1x authentication. Type - Select from Mixed[...]

VigorPro5500 Series User’s Guide 139 addresses for other clients in the network manually. Choose Isolate WLAN from LAN will separate all the WLAN stations from LAN based on the MAC Address list. MAC Address Filter Display all MAC addresses that are edited before. Four buttons (Add, Remove, Client’s MAC Address - Manually enter the MAC address o[...]

VigorPro5500 Series User’s Guide 140 3 3 . . 1 1 4 4 . . 5 5 W W D D S S WDS means Wireless Distribution Syste m. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge traffic between two LANs through the air. y Extend the coverage range of a WLAN. To meet the ab[...]

VigorPro5500 Series User’s Guide 141 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Mode Ch[...]

VigorPro5500 Series User’s Guide 142 Security There are three types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Check this box to use the same key set in Security Settings page. If you did not set any key [...]

VigorPro5500 Series User’s Guide 143 If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page and click Add . Later, the MAC address of the AP will be added to the page of WDS setting. 3 3 . . 1 1 4 4 . . 7 7 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge [...]

VigorPro5500 Series User’s Guide 144 3 3 . . 1 1 4 4 . . 8 8 S S t t a a t t i i o o n n R R a a t t e e C C o o n n t t r r o o l l This page allows you to cont rol the upload and download rate of each wireless client (station). Please check the box of Enable to invoke this setting. The range for the rate is between 100 ~ 30,000 kbps. 3 3 . . 1 [...]

VigorPro5500 Series User’s Guide 145 Enable Check this box to enable this function (for VLAN Configuration). P1 – P4 Check the box to make the computer connecting to th e port being grouped in specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box. For exam ple, if you check the boxes[...]

VigorPro5500 Series User’s Guide 146 7890 in the boxes of W_VLAN1. Users can conf igure fifteen groups of wireless VLAN in this page. Enable Check this box to invoke wireless VLAN function. Login ID Type Login ID for different groups of W_VLAN with 1 to 1 1 characters. Password Type password for different groups of W_VLAN with 1 to 11 characters.[...]

VigorPro5500 Series User’s Guide 147 Disable broadcast and multicast traffic Check this box to prevent br oadcast and multicast traffic forwarding to all W_VLAN. H H o o w w c c a a n n y y o o u u ( ( w w i i r r e e l l e e s s s s c c l l i i e e n n t t ) ) a a c c c c e e s s s s i i n n t t o o I I n n t t e e r r n n e e t t ? ? After fini[...]

VigorPro5500 Series User’s Guide 148 5. You can go to Diagnostics>>Wireless VLAN Online Station for viewing the connection status whenever you want. 3 3 . . 1 1 5 5 . . 3 3 V V L L A A N N C C r r o o s s s s S S e e t t u u p p This function allows the router to integr ate VLAN and W_VLAN for managing different computers (notebooks). See t[...]

VigorPro5500 Series User’s Guide 149 Enable Check this box to invoke VLAN Cross Setup function. VLAN0-3 It represents the groups of virtual LAN connected by Ethernet interface. W_VLAN0-15 It represents the groups of wireless VLAN communicated by wireless interface.[...]

VigorPro5500 Series User’s Guide 150 3 3 . . 1 1 5 5 . . 4 4 W W i i r r e e l l e e s s s s R R a a t t e e C C o o n n t t r r o o l l Rate Control manages the transmission rate of data in and out through the ro uter. You can also manage the in/out rate of each wireless VLAN. Go to VLAN menu and select Wireless Rate Control . The following page[...]

VigorPro5500 Series User’s Guide 151 3 3 . . 1 1 6 6 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items[...]

VigorPro5500 Series User’s Guide 152 DHCP Server Display the current status of DHCP server of the LAN interface. MAC Address Display the MAC address of the WAN Interface. IP Address Display the IP address of the WAN interface. Default Gateway Display the assigned IP address of the default gateway. DNS Display the assigned IP address of the primar[...]

VigorPro5500 Series User’s Guide 153 3 3 . . 1 1 6 6 . . 3 3 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k u u p p B B a a c c k k u u p p t t h h e e C C o o n n f f i i g g u u r r a a t t i i o o n n Follow the steps below to backup your configuration. 1. Go to System Maintenance >> Configuration Backup . The follow[...]

VigorPro5500 Series User’s Guide 154 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating exam ples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available. Note: Backup for Cer[...]

VigorPro5500 Series User’s Guide 155 Mail To Assign a mail address for sending mails out. Return-Path Assign a path for receiving the mail from outside. Authentication Check this box to activate this function while using e-mail application. User Name Type the user name for authentication. Password Type the password for authentication. Click OK to[...]

VigorPro5500 Series User’s Guide 156 3 3 . . 1 1 6 6 . . 5 5 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as[...]

VigorPro5500 Series User’s Guide 157 3 3 . . 1 1 6 6 . . 6 6 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. For example, as to management ac cess control, the port number is used to send/receive SIP message for building a session. The default value [...]

VigorPro5500 Series User’s Guide 158 Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a proper name. The default setting is public. Notification Host IP Set the IP address of the host that will receive the trap community. Trap Timeo[...]

VigorPro5500 Series User’s Guide 159 3 3 . . 1 1 6 6 . . 8 8 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an example. Note that this [...]

VigorPro5500 Series User’s Guide 160 3 3 . . 1 1 6 6 . . 9 9 S S i i g g n n a a t t u u r r e e U U p p g g r r a a d d e e You can get the most updated signature fro m DrayTek’s server if the license key of anti-virus/anti-intrusion for the VigorPro5500 is not e xpired. Before you upgrade the signature, please check the validation information[...]

VigorPro5500 Series User’s Guide 161 rules for your router. DT-DT/DT-KL_XXXXXX – If you have registered and activated your AI/AV account, and downloaded the newest rules from www.vigorpro.com, you can see DT-DT/DT-KL in this field that means you have obtained the latest signature information. Setup download server/Setup query server The default[...]

VigorPro5500 Series User’s Guide 162 upgraded and displayed on the web page. Upgrade Automatically Specify certain time for execu ting the upgrade automatically. Remember to check the Schedule Update box to activate the time settings. Every – It means the downloading procedure will be executed automatically whenever passi ng through the time (h[...]

VigorPro5500 Series User’s Guide 163 3 3 . . 1 1 7 7 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 7 7 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r Click Diagnostics and click Dial[...]

VigorPro5500 Series User’s Guide 164 3 3 . . 1 1 7 7 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open the web page. Refresh Click it to reload the page. 3 3 . . 1 1 7 7 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the conten[...]

VigorPro5500 Series User’s Guide 165 3 3 . . 1 1 7 7 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Index It displays the connection [...]

VigorPro5500 Series User’s Guide 166 Interface It indicates the interface of the WAN connection. Refresh Click it to reload the page. 3 3 . . 1 1 7 7 . . 6 6 W W i i r r e e l l e e s s s s V V L L A A N N O O n n l l i i n n e e S S t t a a t t i i o o n n T T a a b b l l e e Click Diagnostics and click Wireless VLAN Online Station Table to open[...]

VigorPro5500 Series User’s Guide 167 3 3 . . 1 1 7 7 . . 7 7 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determ ined by the router automatically. Ping to [...]

VigorPro5500 Series User’s Guide 168 3 3 . . 1 1 7 7 . . 8 8 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management. You have to enable IP bandwidth l[...]

VigorPro5500 Series User’s Guide 169 Refresh Click this link to refr esh this page manually. Index Display the number of the data flow. IP Address Display the IP address of the monitored device. TX rate (kbps) Display the trans mission speed of the monitored device. RX rate (kbps) Display the receiving spee d of the monitored device. Sessions Dis[...]

VigorPro5500 Series User’s Guide 170 The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1/WAN2 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of[...]

VigorPro5500 Series User’s Guide 171 4 R R e e g g i i s s t t r r a a t t i i o o n n f f o o r r t t h h e e R R o o u u t t e e r r To use the anti-intrusion, anti-virus and anti- spam features of VigorPro series router, you have to create a new account, finish the registration for that account by using the router and complete the registration[...]

VigorPro5500 Series User’s Guide 172 2. Check to confirm that you accept the Agreement and click Accept . 3. Type your personal information in this page and then click Continue .[...]

VigorPro5500 Series User’s Guide 173 4. Choose proper selection for your computer and click Continue . 5. Now you have created an account successfully. 6. Check to see the confirmation email with the title of New Account Confirmation Letter from www.vigorpro.com . 7. Click the Activate my Account link to enable the account that you created. The f[...]

VigorPro5500 Series User’s Guide 174 8. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . Then type the code in the box of AuthCode according to the value di splayed on the right side of it. 9. Now, click Login . Your account has been activated.[...]

VigorPro5500 Series User’s Guide 175 4 4 . . 2 2 C C r r e e a a t t i i n n g g a a n n d d A A c c t t i i v v a a t t i i n n g g a a n n A A c c c c o o u u n n t t f f r r o o m m R R o o u u t t e e r r W W e e b b C C o o n n f f i i g g u u r r a a t t o o r r You, also can created and register a new account from the web configurator of t[...]

VigorPro5500 Series User’s Guide 176 4. A Re-login page will be shown on the screen. 5. Locate and click Create an account now link on the bottom of this page. You will access into the following page. Check the box below to confirm that you accept the Agreement and click Accept .[...]

VigorPro5500 Series User’s Guide 177 6. Type your personal information in this page and then click Continue . 7. Choose proper selection for your computer and click Continue .[...]

VigorPro5500 Series User’s Guide 178 8. Now you have created an account successfully. 9. Check to see the confirmation email with the title of New Account Confirmation Letter from www.vigorpro.com . 10. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify th e register process is [...]

VigorPro5500 Series User’s Guide 179 11. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . Then type the code in the box of AuthCode according to the value di splayed on the right side of it. 12. Now, click Login . Your account has been activated. And the foll[...]

VigorPro5500 Series User’s Guide 180 4 4 . . 3 3 R R e e g g i i s s t t e e r r i i n n g g Y Y o o u u r r V V i i g g o o r r R R o o u u t t e e r r You have activated the new account for the router. Now, it is the time for you to register your vigor router. There are two ways to register your vigor router. One is to register by opening Syste[...]

VigorPro5500 Series User’s Guide 181 3. Click the Activate link from the Signature Upgrade web page. 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login .[...]

VigorPro5500 Series User’s Guide 182 5. The following page will be displayed after you logging in VigorPro server. From this page, please click Add . 6. When the following page appears, please type in Nick Nam e (for the router) and choose the right purchase date from the popup calendar (it appears when you click on the box of Purchase Date). 7. [...]

VigorPro5500 Series User’s Guide 183 8. Now, your router information has been added to the database. Click OK to leave this web page and return to My Product web page. F F r r o o m m A A n n t t i i - - S S p p a a m m > > > > P P r r o o f f i i l l e e S S e e t t t t i i n n g g 1. Open a web browser on your PC and type http://192[...]

VigorPro5500 Series User’s Guide 184 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. The following page will be displayed after you logging in VigorPro server. From this page, please click Add . 6. When the following page appears, please type in Nick Nam e (for[...]

VigorPro5500 Series User’s Guide 185 7. After adding the basic information for the router, please click Submit . 8. Now, your router information has been added to the database. Click OK to leave this web page and return to My Product web page. 4 4 . . 4 4 A A c c t t i i v v a a t t i i n n g g A A n n t t i i - - V V i i r r u u s s / / A A n n [...]

VigorPro5500 Series User’s Guide 186[...]

VigorPro5500 Series User’s Guide 187 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. On the web page of My Product , you can find a list of the devices that you add with the above steps. Currently, you just have added VigorPro 5500. Please click the serial numb[...]

VigorPro5500 Series User’s Guide 188 Rename It allows you to change the account name. Delete It allows you to delete account name used currently. Transfer It allows you to transfer the VigorPro device together with applied license to someone who has already registered another account in www.vigorpro.com. Be sure to press this button to transfer t[...]

VigorPro5500 Series User’s Guide 189 Note: DT-DT means you can acquire the anti-intrusion and anti-virus services from DrayTek Corporation. 8. Next, the DrayTek Service Activation screen will be shown as the following: (Above figure supposes you have not activated Anti-Spam yet.) 9. Click Close .[...]

VigorPro5500 Series User’s Guide 190 10. Return to Signature Upgrade page of the router’s we b configurator. The start date and expire date for the license are shown in this page. Now, you have finished all the procedure for registering your router. If you want to select DT-KL service additionally, repeat step 11 to step 14. Both services will [...]

VigorPro5500 Series User’s Guide 191 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. On the web page of My Product , you can find a list of the devices that you add with the above steps. Currently, you just have added VigorPro 5500. Please click the serial numb[...]

VigorPro5500 Series User’s Guide 192 6. From the Device’s Service section, click the Activate buttons for AS (Anti-Spam) service. 7. In this page, check the box of “ I have read and accept the above Agreement ”. The system will find out the date for you to activate this version of service. Then, click Register . Note: CTCH means you can acq[...]

VigorPro5500 Series User’s Guide 193 (Above figure supposes you have not activated Anti-Virus yet.) 9. Click Close . Now, you have finished all the procedure for activating Anti-Spam service for your router. Note: You are allowed to use this version (with anti-spam features) for 30 days after registration for your r outer. In addition, you will b[...]

VigorPro5500 Series User’s Guide 194 U U p p g g r r a a d d e e L L i i c c e e n n s s e e f f o o r r A A n n t t i i - - S S p p a a m m When thirty days for free of charge expires, you can apply for a new license by following the steps below: 1. Open a web browser on your PC and type http://192. 168.1.1. A pop-up window will open to ask for [...]

VigorPro5500 Series User’s Guide 195 5. On the web page of My Product , you can find a list of the devices that you add with the above steps. Currently, you just have added VigorPro 5500. Please click the serial number link. 6. From the Device’s Service section, click the Upgrade buttons for AS (Anti-Spam) service.[...]

VigorPro5500 Series User’s Guide 196[...]

VigorPro5500 Series User’s Guide 197 7. In this page, type the License Number stat ed on the Anti-Spam license card in the field of License Number . Then, click Add License . 8. Now, the license number will be displayed on the page immediately. Click Apply .[...]

VigorPro5500 Series User’s Guide 198 9. In this page, check the box of “ I have read and accept the above Agreement ”. The system will find out the date for you to activate this version of service. Then, click Comfirm . 10. Next, the DrayTek Service Activation scr een will be shown as the following. (Above figure supposes you have not activat[...]

VigorPro5500 Series User’s Guide 199 1. Open a web browser on your PC and type http://192. 168.1.1. A pop-up window will open to ask for username and password. Do not type any word on the window and click OK . 2. From the router’s web page, please open System Maintenance >>Signature Upgrade . You will see the following web page. 3. Click [...]

VigorPro5500 Series User’s Guide 200 4. A Re-login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 5. The following page will be displayed after you logging in VigorPro server. From this page, please click Add .[...]

VigorPro5500 Series User’s Guide 201 6. When the following page appears, please type in Nick Nam e (for the router) and choose the right purchase date from the popup calendar (it appears when you click on the box of Purchase Date). 7. After adding the basic information for the router, please click Submit . 8. Now, your router information has been[...]

VigorPro5500 Series User’s Guide 202 9. On the web page of My Product , you can find a list of the devices that you add with the above steps. Currently, you just have added VigorPro 5500. Please click the serial number link. 10. From the Device’s Service section, click the Activate button for AI-AV (Anti-Intrusion & Anti-Virus) service.[...]

VigorPro5500 Series User’s Guide 203 11. In the following page, please type in license number shown on the License Key card. There are two numbers for your selection, DT-DT (service from Draytek) or DT-KL (service from Kaspersky Lab). Simply enter the one that you want to apply and click Add License. Note: DT-KL allows you to acquire the anti-int[...]

VigorPro5500 Series User’s Guide 204 14. Click Apply when you finish choosing the date. The following page will be shown to ask your confirmation. 15. Check the box of I have read and accept the above Agreement and click Confirm . The Service Activation screen will be shown as the following. 16. Click Close . Return to Signature Upgrade page of t[...]

VigorPro5500 Series User’s Guide 205 4 4 . . 6 6 B B a a c c k k u u p p a a n n d d U U p p g g r r a a d d e e S S i i g g n n a a t t u u r r e e f f o o r r A A n n t t i i - - I I n n t t r r u u s s i i o o n n / / A A n n t t i i - - V V i i r r u u s s You can get the most updated signature fro m DrayTek’s server if the license key of a[...]

VigorPro5500 Series User’s Guide 206 T T i i m m e e f f o o r r B B a a c c k k u u p p Before changing other license, it is suggested fo r you to backup t he original signature first. To backup current signature informa tion with the filename vigorpro.sig , click Backup . T T i i m m e e f f o o r r D D o o w w n n l l o o a a d d After changin[...]

VigorPro5500 Series User’s Guide 207 4. A Re-login page will be shown on the screen. Please type new account and password that you created previously. And click Login .[...]

VigorPro5500 Series User’s Guide 208 The following page will be shown automa tically. You will find there are two devices service added to your router. If you activated only one service befor e, it must be only one service displayed here. In this case, DT-DT and DT-KL services are registered on the VirgorPro website. However, DT-DT service is ins[...]

VigorPro5500 Series User’s Guide 209 4 4 . . 8 8 E E n n a a b b l l i i n n g g A A n n t t i i - - V V i i r r u u s s / / A A n n t t i i - - I I n n t t r r u u s s i i o o n n / / A A n n t t i i - - S S p p a a m m After applying an account, registering your account and router, you have to access into the web page of Vigor router to enable [...]

VigorPro5500 Series User’s Guide 210 If you did not check the Anti-Intrusion box and choose a proper profile for Anti-Virus/Anti-Spam, you still cannot use the Anti-Intrusion/Anti-Virus/Anti-Spam function even if you finished all the relational profiles.[...]

VigorPro5500 Series User’s Guide 211 5 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 5 5 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d[...]

VigorPro5500 Series User’s Guide 212 For using IPSec -based service, such as IPSec or L2 TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enabl[...]

VigorPro5500 Series User’s Guide 213 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service is sele cted[...]

VigorPro5500 Series User’s Guide 214 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Rout[...]

VigorPro5500 Series User’s Guide 215 2. Then, for using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to [...]

VigorPro5500 Series User’s Guide 216 connection. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service [...]

VigorPro5500 Series User’s Guide 217 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets des tined to the remote network to Rou[...]

VigorPro5500 Series User’s Guide 218 5 5 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is th[...]

VigorPro5500 Series User’s Guide 219 3. Go to Remote Dial-In Users . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Meth[...]

VigorPro5500 Series User’s Guide 220 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel to Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel.[...]

VigorPro5500 Series User’s Guide 221 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router. If a PPP-based service is selected, you should fu rther specify the remote VPN server IP address, Username, Password, [...]

VigorPro5500 Series User’s Guide 222 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 5 5 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he w[...]

VigorPro5500 Series User’s Guide 223 3. Return to previous page. Enter th e Name of Index Class 1 by clicking Edit link. T y pe the name “ E-mail ” for Class 1. 4. For this index, the user will set reserved bandwidth (e.g., 25%) for Email using protocol POP3 and SMTP . 5. Return to previous page. Enter th e Name of Index Class 2 by clicking E[...]

VigorPro5500 Series User’s Guide 224 8. If the worker has connected to the headquart er using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he m ay set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserve bandwidth for 1 VPN tunnel. 9. Click edit to open a new window . 10. Firs[...]

VigorPro5500 Series User’s Guide 225 5 5 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deploym ent are shown below . The default V igor router private IP address/ Subnet Mask is 192.1 68.1.1/255.255.255.0. The built-in DHCP server is en abled so[...]

VigorPro5500 Series User’s Guide 226 T o use another DHCP server in the network rather than the built-in one of V igor Router , you have to change the settings as show below . Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.[...]

VigorPro5500 Series User’s Guide 227 5 5 . . 5 5 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. 1. Insert CD of the router to your CD ROM. 2. From the[...]

VigorPro5500 Series User’s Guide 228 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 12. Type in your router IP, u[...]

VigorPro5500 Series User’s Guide 229 14. Click Send . 15. Now the firmware update is finished. 5 5 . . 6 6 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r[...]

VigorPro5500 Series User’s Guide 230 1. Go to Certificate Management and choose Local Certificate . 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.[...]

VigorPro5500 Series User’s Guide 231 4. Connect to CA server via web browser. Follo w the instruction to subm it the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate . Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PK[...]

VigorPro5500 Series User’s Guide 232 Then you have done the request and the ser ver now issues you a certificate. Select Base 64 encoded certificate and Download CA certificate . Now you should get a certificate (.cer file) and save it. 5. Back to Vigor router, go to Local Certificate . Click IMPORT button and browse the file to import the certif[...]

VigorPro5500 Series User’s Guide 233 5 5 . . 7 7 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA c[...]

VigorPro5500 Series User’s Guide 234 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click ref[...]

VigorPro5500 Series User’s Guide 235 6 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z [...]

VigorPro5500 Series User’s Guide 236 F F o o r r W W i i n n d d o o w w s s  The example is based on Windows XP. As to the exam ples for other operation systems, please refer to the sim ilar steps or find support notes in www.draytek.com . 1. Go to Control Panel and then double-click on Network Connection s. 2. Right-click on Local Area Conne[...]

VigorPro5500 Series User’s Guide 237 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Config[...]

VigorPro5500 Series User’s Guide 238 6 6 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router. The most im[...]

VigorPro5500 Series User’s Guide 239 6 6 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly. Click Details Page of WAN1/WAN2 to review the settings that you config[...]

VigorPro5500 Series User’s Guide 240 F F o o r r S S t t a a t t i i c c / / D D y y n n a a m m i i c c I I P P U U s s e e r r s s 1. Check if the Enable option is selected. 2. Check if IP address, Subnet Mask and Gateway are entered with correct values that you got from your ISP .[...]

VigorPro5500 Series User’s Guide 241 F F o o r r P P P P T T P P U U s s e e r r s s 1. Check if the Enable option for PPTP Link is selected. 2. Check if PPTP Server, Username, Password and WAN IP address are set correctly (must identify with the values from your ISP). 6 6 . . 5 5 B B a a c c k k i i n n g g t t o o F F a a c c t t o o r r y y D [...]

VigorPro5500 Series User’s Guide 242 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly, please re lease the button. Then, the router will restar t with the default configuration. After restore [...]