Draytek VigorPro 5500 User Manual

VigorPro 5500 Series

Unified Security Firewall

User’s Guide

Version: 3.0

Date: 2007/05/02

This publication contains information that is protected by copyright. No part may be reproduced, transmitted,

transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright

holders. The scope of delivery and other details are subject to change without prior notice.

Microsoft is a registered trademark of Microsoft Corp.

Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.

Apple and Mac OS are registered trademarks of Apple Computer Inc.

Other products may be trademarks or registered trademarks of their respective manufacturers.

Safety Instructions and Approval

Safety Instructions

Warranty

z Read the installation guide thoroughly before you set up the router. z The router is a complicated electronic unit that may be repaired only be

authorized and qualified personnel. Do not try to open or repair the router yourself.

z Do not place the router in a damp or humid place, e.g. a bathroom. z The router should be used in a sheltered area, within a temperature range of +5 to

+40 Celsius.

z Do not expose the router to direct sunlight or other heat sources. The housing and

electronic components may be damaged by direct sunlight or heat sources.

z Do not deploy the cable for LAN connection outdoor to prevent electronic shock

hazards.

z Keep the package out of reach of children. z When you want to dispose of the router, please follow local regulations on

conservation of the environment. We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, we will, at our discretion, repair or replace the defective products or components, without charge for either parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. The warranty does not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the usability of the product will not be covered by the warranty. We reserve the right to re vi se the ma nual and onli ne documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.

Be a Registered Owner

Firmware & Tools Updates

Web registration is preferred. You can register your Vigor router via http://www.draytek.com.

Please consult the DrayTek web site for more information on newest firmware, tools and documents. For more detailed information, please refer to http://www.draytek.com

Parts of the anti-virus features are powered by Kaspersky Lab ZAO. For more detailed information, please refer to http://www.kaspersky.com.

VigorPro5500 Series User’s Guide

European Community Declarations

Manufacturer: DrayTek Corp.

Address: No. 26, Fu Shing Road, HuKou County, HsinChu Industrial Park, Hsin-Chu, Taiwan 303

Product: VigorPro 5500 DrayTek Corp. declares that VigorPro 5500 Series is in compliance with the fo llowing essential requirements and

other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 89/336/EEC by

complying with the requirements set forth in EN55022/Class A and EN55024/Class A. The product conforms to the requirements of Low Voltage (LVD) Directive 73/23/EEC by complying with the

requirements set forth in EN60950.

Regulatory Information

Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part

15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or televisi o n recept i on , whi ch can be determined by turning the equipment of f a nd on, the use is encouraged to try to correct the interference by one of the following measures:

z Reorient or relocate the receiving antenna. z Increase the separation between the equipment and receiver. z Connect the equipment into an outlet on a circuit different form that to which the receiver is connected. z Consult the dealer or an experienced radio/TV technician for help.

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) This device may accept any interference received, including interference that may cause undesired operation.

Taiwanese BSMI (Bureau of Standards, Metrology and Inspection) A Warning:

Warning: This device might cause interference of radio frequency under the environment of dwelling. In such condition, the users might be asked to adopt some proper strategies.

Please visit “www.draytek.com/about_us/Regulatory.php”

This product is designed for the 2.4 GHz WLAN network throughout the EC region and Switzerland with restrictions in France.

This is a class A product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures.

VigorPro5500 Series User’s Guide

iii

TTaabbllee ooff CCoonntteennttss

Preface ...............................................................................................................1

1.1 Web Configuration Buttons Explanation.................................................................................1

1.2 LED Indicators and Connectors.............................................................................................. 1

1.2.1 For VigorPro 5500 ............................................................................................................ 2

1.2.2 For VigorPro 5500G.......................................................................................................... 3

1.2.3 For VigorPro 5500i............................................................................................................ 4

1.2.4 For VigorPro 5500Gi......................................................................................................... 5

1.3 Hardware Installation .............................................................................................................. 7

Configuring Basic Settings ..............................................................................9

2.1 Changing Password................................................................................................................ 9

2.2 Quick Start Wizard.................................................................................................................11

2.2.1 PPPoE ............................................................................................................................ 12

2.2.2 PPTP............................................................................................................................... 14

2.2.3 Static IP........................................................................................................................... 15

2.2.4 DHCP.............................................................................................................................. 16

2.3 Online St atus......................................................................................................................... 17

2.4 Saving Configuration............................................................................................................. 19

A d v a n c e d Web Con f i g ura t i on..................................................................................21

3.1 WAN...................................................................................................................................... 21

3.1.1 Basics of Internet Protocol (IP) Network......................................................................... 21

3.1.2 General Setup................................................................................................................. 22

3.1.3 Internet Access............................................................................................................... 24

3.1.4 Load-Balance Policy.......................................................................................................30

3.2 LAN ....................................................................................................................................... 33

3.2.1 Basics of LAN ................................................................................................................. 33

3.2.2 General Setup................................................................................................................. 35

3.2.3 Static Route.................................................................................................................... 37

3.2.4 VLAN............................................................................................................................... 40

3.2.5 Bind IP to MAC............................................................................................................... 41

3.3 NAT ....................................................................................................................................... 42

3.3.1 Port Redirection.............................................................................................................. 43

3.3.2 DMZ Host........................................................................................................................ 46

3.3.3 Open Ports...................................................................................................................... 48

3.4 Objects Settings.................................................................................................................... 50

3.4.1 IP Object......................................................................................................................... 50

3.4.2 IP Group ......................................................................................................................... 52

3.4.3 Service Type Object .......................................................................................................53

VigorPro5500 Series User’s Guide

3.4.4 Service Type Group........................................................................................................54

3.4.5 CSM Profile..................................................................................................................... 55

3.5 Firewall.................................................................................................................................. 57

3.5.1 Basics for Firewall........................................................................................................... 57

3.5.2 General Setup................................................................................................................. 60

3.5.3 Filter Setup ..................................................................................................................... 62

3.5.4 DoS Defense .................................................................................................................. 67

3.5.5 URL Content Filter.......................................................................................................... 70

3.5.6 Web Content Filter.......................................................................................................... 72

3.6 Anti-Intrusion......................................................................................................................... 73

3.6.1 Basic Setup..................................................................................................................... 73

3.6.2 Advanced Setup ............................................................................................................. 74

3.7 Anti-Virus............................................................................................................................... 77

3.7.1 Profile Setting ................................................................................................................. 77

3.7.2 Virus List......................................................................................................................... 79

3.7.3 File Pattern List............................................................................................................... 80

3.8 Anti-Spam.............................................................................................................................. 83

3.8.1 Profile Setting ................................................................................................................. 83

3.8.2 Activating Anti-Spam ......................................................................................................85

3.9 Bandwidth Management....................................................................................................... 85

3.9.1 Sessions Limit................................................................................................................. 86

3.9.2 Bandwidth Limit .............................................................................................................. 87

3.9.3 Quality of Service............................................................................................................ 88

3.10 Applications......................................................................................................................... 95

3.10.1 Dynamic DNS............................................................................................................... 95

3.10.2 Schedule....................................................................................................................... 97

3.10.3 RADIUS........................................................................................................................ 99

3.10.4 UPnP........................................................................................................................... 100

3.10.5 Wake On LAN............................................................................................................. 102

3.11 VPN and Remote Access.................................................................................................. 103

3.11.1 Remote Access Control.............................................................................................. 103

3.11.2 PPP General Setup .................................................................................................... 104

3.11.3 IPSec General Setup.................................................................................................. 105

3.11.4 IPSec Peer Identity..................................................................................................... 106

3.11.5 Remote Dial-in User ................................................................................................... 108

3.11.6 LAN to LAN................................................................................................................. 111

3.11.7 Connection Management ........................................................................................... 119

3.12 Certificate Management.................................................................................................... 120

3.12.1 Local Certificate.......................................................................................................... 120

3.12.2 Trusted CA Certificate ................................................................................................ 122

3.12.3 Certificate Backup....................................................................................................... 123

3.13 ISDN.................................................................................................................................. 123

3.13.1 Basic Concept............................................................................................................. 123

3.13.2 General Settings......................................................................................................... 124

3.13.3 Dial to Single/Dual ISPs.............................................................................................. 125

3.13.4 Virtual TA.................................................................................................................... 128

3.13.5 Call Control................................................................................................................. 131

3.14 Wireless LAN .................................................................................................................... 133

3.14.1 Basic Concepts........................................................................................................... 133

3.14.2 General Setup............................................................................................................. 135

VigorPro5500 Series User’s Guide

3.14.3 Security....................................................................................................................... 137

3.14.4 Access Control............................................................................................................ 138

3.14.5 WDS............................................................................................................................ 140

3.14.6 AP Discovery.............................................................................................................. 142

3.14.7 Station List.................................................................................................................. 143

3.14.8 Station Rate Control ................................................................................................... 144

3.15 VLAN................................................................................................................................. 144

3.15.1 Wired VLAN................................................................................................................ 144

3.15.2 Wireless VLAN............................................................................................................ 145

3.15.3 VLAN Cross Setup...................................................................................................... 148

3.15.4 Wireless Rate Control................................................................................................. 150

3.16 System Maintenance......................................................................................................... 151

3.16.1 System Status............................................................................................................. 151

3.16.2 Administrator Password.............................................................................................. 152

3.16.3 Configuration Backup ................................................................................................. 153

3.16.4 Syslog/Mail Alert......................................................................................................... 154

3.16.5 Time and Date............................................................................................................ 156

3.16.6 Management............................................................................................................... 157

3.16.7 Reboot System........................................................................................................... 158

3.16.8 Firmware Upgrade...................................................................................................... 159

3.16.9 Signature Upgrade...................................................................................................... 160

3.17 Diagnostics........................................................................................................................ 163

3.17.1 Dial-out Trigger........................................................................................................... 163

3.17.2 Routing Table ............................................................................................................. 164

3.17.3 ARP Cache Table....................................................................................................... 164

3.17.4 DHCP Table................................................................................................................ 165

3.17.5 NAT Sessions Table................................................................................................... 165

3.17.6 Wireless VLAN Online Station Table.......................................................................... 166

3.17.7 Ping Diagnosis............................................................................................................ 167

3.17.8 Data Flow Monitor....................................................................................................... 168

3.17.9 Traffic Graph............................................................................................................... 169

3.17.10 Trace Route.............................................................................................................. 170

Registration for the Router...........................................................................171

4.1 Creating and Activating an Account from V igorPro Website............................................... 171

4.2 Creating and Activating an Account from Router Web Configurator................................... 175

4.3 Registering Your Vigor Router ............................................................................................ 180

4.4 Activating Anti-Virus/Anti-Intrusion/Anti-Sp am Service....................................................... 185

4.4.1 For Anti-Virus and Anti-Intrusion Service..................................................................... 185

4.4.2 For Anti-Spam Service.................................................................................................. 190

4.5 Applying a New License for Anti-Intrusion/Anti-Virus.......................................................... 198

4.6 Backup and Upgrade Signature for Anti-Intrusion/Anti-Virus..................................................... 205

4.7 Switching between DT-DT and DT-KL................................................................................ 206

4.8 Enabling Anti-Virus/Anti-Intrusion/Anti-Spam...................................................................... 209

Application and Examples............................................................................211

VigorPro5500 Series User’s Guide

5.1 Create a LAN-to-LAN Connection Between Remote Office and Headquarter....................21 1

5.2 Create a Remote Dial-in User Connection Between the Teleworker and Headquarter...... 218

5.3 QoS Setting Example.......................................................................................................... 222

5.4 LAN – Created by Using NAT ............................................................................................. 225

5.5 Upgrade Firmware for Y our Router..................................................................................... 227

5.6 Request a certificate from a CA server on Windows CA Server......................................... 229

5.7 Request a CA Certificate and Set as Trusted on Windows CA Server............................... 233

Trouble Shooting...........................................................................................235

6.1 Checking If the Hardware Status Is OK or Not....................................................................235

6.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ................. 235

6.3 Pinging the Router from Your Computer............................................................................. 238

6.4 Checking If the ISP Settings are OK or Not........................................................................ 239

6.5 Backing to Factory Default Setting If Necessary ................................................................ 241

6.6 Contacting Your Dealer....................................................................................................... 242

VigorPro5500 Series User’s Guide

vii

Prreeffaaccee

The VigorPro5500 series router provides Dual-WAN interface (which is a configurable second WAN) for Internet access to make the Internet connection more reliable. The wireless LAN supports more secure features and the transmission speed is up to 108Mbps (Super G

11..11 WWeebb CCoonnffiigguurraattiioonn BBuuttttoonnss EExxppllaannaattiioonn

Several main buttons appeared on the web pages are defined as the following:

). Object-oriented firewall is flexible and allows your network be safe.

Save and apply current settings.

Cancel current settings and recover to the previous saved settings.

Clear all the selections and parameters settings, including selection from

drop-down list. All the values must be reset with factory default settings.

Add new settings for specified item.

Edit the settings for the selected item.

Delete the selected item with the corresponding settings.

Note: For the other buttons shown on the web pages, please refer to Chapter 3 for detailed explanation.

11..22 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss

Before you use the Vigor router, please get acquainted with the LED indicators and connectors first.

The displays of LED indicators and connectors for the routers are different slightly. The following sections will introduce them respectively.

VigorPro5500 Series User’s Guide

11..22..11 FFoorr VViiggoorrPPrroo 55550000

LED Status Explanation

Virus On

IDP (Intrusion Detection and Prevention)

DMZ On DMZ Host is specified in certain site. Monitor On LAN traffic monitor is active.

QoS

LED on Connector

10 (left LED)

WAN

100 (right LED)

LAN/Monitor LAN

100 (left LED)

1000 (right LED)

Blinking The router is powered on and running normal l y .ACT (Activity) Off The router is powered off.

The anti-virus function is enabled.

(Yellow) On

(Yellow)

On The VPN tunnel is launched. VPN Off The VPN tunnel is closed. On The QoS function is active.

On The port is connected with 10Mbps. Off The port is disconnected. Blinking The data is transmitting. On The port is connected with 100Mbps. Off The port is disconnected. Blinking The data is transmitting. On The port is connected with 100Mbps. Off The port is disconnected. Blinking The data is transmitting. On The port is connected with 1000Mbps. Off The port is disconnected. Blinking The data is transmitting.

The anti-intrusion function is enabled.

Interface Description

RST (Factory Reset)

WAN(1/2) Connecter for remote netw or k e d devi ces . LAN/Monitor Connecter for local networked devices. LAN (1-4) Connecter for local networked devices.

Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration.

Connecter for a power cord with 100-240VAC (inlet). Power Switch. “1” is ON; “0” is OFF.

VigorPro5500 Series User’s Guide

11..22..22 FFoorr VViiggoorrPPrroo 55550000GG

LED Status Explanation

Virus On

IDP (Intrusion Detection and Prevention)

DMZ On DMZ Host is specified in certain site. Monitor On LAN traffic monitor is active.

QoS WLAN

LED on Connector

10 (left LED)

WAN

100 (right LED)

LAN/Monitor LAN

100 (left LED)

1000 (right LED)

Blinking The ro ut er is powered on and running normally.ACT (Activity) Off The router is powered off.

The anti-virus function is enabled.

(Yellow) On

(Yellow)

On The VPN tunnel is launched. VPN Off The VPN tunnel is closed. On The QoS function is active.

On Wireless access point is ready. Blinking Ethernet packets are transmitting over wireless LAN. Off The WLAN function is inactive.

The anti-intrusion function is enabled.

Interface Description

RST (Factory Reset)

WAN(1/2) Connecter for remote networked devices. LAN/Monitor Connecter for local networked devices. LAN (1-4) Connecter for local networked devices.

VigorPro5500 Series User’s Guide

Connecter for a power cord with 100-240VAC (inlet). Power Switch. “1” is ON; “0” is OFF.

11..22..33 FFoorr VViiggoorrPPrroo 55550000ii

LED Status Explanation

Virus IDP (Intrusion Detection and

Prevention) DMZ On DMZ Host is specified in certain site. Monitor On LAN traffic monitor is active.

QoS ISDN

LED on Connector

10 (left LED)

WAN

100 (right LED)

LAN/Monitor LAN

100 (left LED)

1000 (right LED)

Blinking The router is powered on and running normally. ACT (Activity) Off The router is powered off.

On (Yellow)

On The VPN tunnel is launched. VPN Off The VPN tunnel is closed. On The QoS function is active.

On The ISDN service function is active. Blinking A successful connection on the ISDN BRI

The anti-virus function is enabled. The anti-intrusion function is enabled.

B1/B2 channel.

Interface Description

RST (Factory Reset)

ISDN Connect for NT1 (or NT1+) box provided by ISDN service provider. WAN(1/2) Connecter for remote networked devices. LAN/Monitor Connecter for local networked devices. LAN (1- 4) Connecter for local networked devices.

Connecter for a power cord with 100-240VAC (inlet). Power Switch. “1” is ON; “0” is OFF.

VigorPro5500 Series User’s Guide

11..22..44 FFoorr VViiggoorrPPrroo 55550000GGii

LED Status Explanation

Virus IDP (Intrusion Detection and

Prevention) DMZ On DMZ Host is specified in certain site. Monitor On LAN traffic monitor is active.

QoS WLAN

ISDN

LED on Connector

10 (left LED)

WAN

100 (right LED)

LAN/Monitor LAN

100 (left LED)

1000 (right LED)

Blinking The router is powered on and running normally. ACT (Activity) Off The router is powered off.

On (Yellow)

On The VPN tunnel is launched. VPN Off The VPN tunnel is closed. On The QoS function is active.

On Wireless access point is ready. Blinking Ethernet packets are transmitting over wireless LAN. Off The WLAN function is inactive. On The ISDN service function is active. Blinking A successful connection on the ISDN BRI

The anti-virus function is enabled. The anti-intrusion function is enabled.

B1/B2 channel.

VigorPro5500 Series User’s Guide

Interface Description

RST (Factory Reset)

Connecter for a power cord with 100-240VAC (inlet). Power Switch. “1” is ON; “0” is OFF.

VigorPro5500 Series User’s Guide

11..33 HHaarrddwwaarree IInnssttaallllaattiioonn

This section will guide you to install the router through hardware connection and configure the router’s settings through web browser.

Before starting to configure the router, you have to connect your devices correctly.

1. Connect the power cord to the router’s power port on the rear panel, and the other side

into a wall outlet.

2. Power on the device by pressing down the power switch on the rear panel.

3. The system starts to initiate. After completing the system test, the ACT LED will light

up and start blinking.

4. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of the router and

the other end of the cable (RJ-45) into the Ethernet port on your computer (that device also can connect to other computers to form a small area network). The LAN LED will light up according to the network card feature (10Mpbs or 100Mpbs) of the device that it connected.

5. Connect a modem/router (depends on your requirement) to any WAN port of router

with Ethernet cable (RJ-45). The WAN1/WAN2 LED (down/up) will light up according to the network card feature ((10Mpbs or 100Mpbs) of the device that it connected.

Power Switch

Power Cord

Internet

Cable/DSL Modem or Media Converter

(For the detailed information of LED status, please refer to section 1.2.)

LAN

VigorPro5500 Series User’s Guide

Coonnffiigguurriinngg

For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings.

This chapter explains how to setup a password for an administrator and how to adjust basic settings for accessing Internet successfully. Be aware that only the administrator can change the router configuration.

22..11 CChhaannggiinngg PPaasssswwoorrdd

To change the password for this device, you have to access into the web browse with default password first.

1. Make sure your computer connects to the router correctly.

Notice: You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1. For the detailed information, please refer to the later section - Trouble Shooting of this guide.

2. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will

open to ask for username and password. Please type default values (both username and password are Null) on the window for the first time accessing and click OK for next screen.

Baassiicc

Seettttiinnggss

VigorPro5500 Series User’s Guide

3. Now, the Main Screen will pop up.

Note: The home page will change slightly in accordance with the router you have.

4. Go to System Maintenance page and choose Administrator Password.

5. Enter the login password (the default is blank) on the field of Old Password. Type a

new one in the field of New Password and retype it on the field of Retype New Password. Then click OK to continue.

6. Now, the password has been changed. Next time, use the new password to access the

Web Configurator for this router.

VigorPro5500 Series User’s Guide

22..22 QQuuiicckk SSttaarrtt WWiizzaarrdd

If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next.

On the next page as shown below, please select the WAN interface that you use. Choose Auto negotiation as the physical type for your router. Then click Next for next step.

VigorPro5500 Series User’s Guide

On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step.

22..22..11 PPPPPPooEE

In the Quick Start Wizard, you can configure the router to access the Internet with different protocol/modes such as PPPoE, PPTP, Static IP or DHCP. The router supports the DSL WAN interface for Internet access.

PPPoE stands for Point-to-Point Protocol over Ethernet. It relies on two widely accepted standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a common broadband medium, such as a single DSL line, wireless device or cable modem. All the users over the Ethernet can share a common connection.

PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet. Your service provider will provide you information about user name, password, and authentication mode.

VigorPro5500 Series User’s Guide

If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown.

User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password for confirmation.

Click Next for viewing summary of such connection.

Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

VigorPro5500 Series User’s Guide

22..22..22 PPPPTTPP

Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol.

Click Next for viewing summary of such connection.

Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

VigorPro5500 Series User’s Guide

22..22..33 SSttaattiicc IIPP

Click Static IP as the protocol. Type in all the information that your ISP provides for this protocol.

After finishing the settings in this page, click Next to see the following page.

Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

VigorPro5500 Series User’s Guide

22..22..44 DDHHCCPP

Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol.

After finishing the settings in this page, click Next to see the following page.

Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

VigorPro5500 Series User’s Guide

22..33 OOnnlliinnee SSttaattuuss

The online status shows the system status, WAN status, ADSL Information and other status related to this router within one page. If you select PPPoE/PPTP as the protocol, you will find out a link of Dial PPPoE/PPPoA or Drop PPPoE/PPPoA in the Online Status web page.

Online status for PPPoE (WAN2)

Online status for PPTP (for WAN2)

Online status for Static IP (for WAN1)

VigorPro5500 Series User’s Guide

Online status for DHCP

Detailed explanation is shown below:

Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS.

LAN Status

IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interface. RX Packets Displays the total number of received packets at the LAN interface.

WAN1/2 Status

Line Displays the physical connection (Ethernet) of this interface. Name Displays the name set in WAN1/WAN web page. Mode Displays the type of WAN connection (e.g., PPPoE). Up Time Displays the total uptime of the interface. IP Displays the IP address of the WAN interface. GW IP Displays the IP address of the default gateway. TX Packets Displays the total transmitted packets at the WAN interface. TX Rate Displays the speed of transmitted octets at the WAN interface. RX Packets Displays the total number of received packets at the WAN

interface.

RX Rate Displays the speed of received octets at the WAN interface.

Note: The words in green mean that the WAN connection of that interface

(WAN1/WAN2) is ready for accessing Internet; the words in red mean that the WAN connection of that interface (WAN1/WAN2) is not ready for accessing Internet.

VigorPro5500 Series User’s Guide

22..44 SSaavviinngg CCoonnffiigguurraattiioonn

Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you.

Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button.

VigorPro5500 Series User’s Guide

This page is left blank.

VigorPro5500 Series User’s Guide

Addvvaanncceedd

After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suiting his/her request, please refer to this chapter for getting detailed information about the advanced configuration of this router. As for other examples of application, please refer to chapter 4.

33..11 WWAANN

33..11..11 BBaassiiccss ooff IInntteerrnneett PPrroottooccooll ((IIPP)) NNeettwwoorrkk

Quick Start Wizard offers user an easy method to quick setup the connection mode for the router. Moreover, if you want to adjust more settings for different WAN modes, please go to WAN group and click the Internet Access link.

IP means Internet Protocol. Every device in an IP-based Network including routers, print server, and host PCs, needs an IP address to identify its location on the network. To avoid address conflicts, IP addresses are publicly registered with the Network Information Centre (NIC). Having a unique IP address is mandatory for those devices participated in the public network but not in the private TCP/IP local area networks (LANs), such as host PCs under the management of a router since they do not need to be accessed by the public. Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges:

Weebb

Coonnffiigguurraattiioonn

From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255

WWhhaatt aarree PPuubblliicc IIPP AAddddrreessss aanndd PPrriivvaattee IIPP AAddddrreessss

As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to communicate with the local hosts. Meanwhile, Vigor router will communicate with other network devices through a public IP address. When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network. Thus, all the host PCs can share a common Internet connection.

GGeett YYoouurr PPuubblliicc IIPP AAddddrreessss ffrroomm IISSPP

In ADSL deployment, the PPP (Point to Point)-style authentication and authorization is required for bridging customer premises equipment (CPE). Point to Point Protocol over Ethernet (PPPoE) connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator. This implementation provides users with significant ease of use. Meanwhile it provides access control, billing, and type of service according to user requirement.

When a router begins to connect to your ISP, a serial of discovery process will occur to ask for a connection. Then a session will be created. Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP.

VigorPro5500 Series User’s Guide

Below shows the menu items for WAN.

33..11..22 GGeenneerraall SSeettuupp

This section will introduce some general settings of Internet and explain the connection modes for WAN1 and WAN2 in details.

This router supports dual WAN function. It allows users to access Internet and combine the bandwidth of the dual WAN to speed up the transmission through the network. Each WAN port can connect to different ISPs, Even if the ISPs use different technology to provide telecommunication service (such as DSL, Cable modem, etc.). If any connection problem occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation. Please configure WAN1 and WAN2 settings.

This webpage allows you to set general setup for WAN1 and WAN respectively.

Note: In default, WAN1 and WAN2 are enabled.

Enable Choose Yes to invoke the settings for this WAN interface.

Choose No to disable the settings for this WAN interface.

Display Name Type the description for the WAN1/WAN2 interface. Physical Mode For WAN1, the physical connection is done through ADSL

port; yet the physical connection for WAN2 is done through an Ethernet port (P1). You cannot change it.

VigorPro5500 Series User’s Guide

+ 220 hidden pages