Draytek Vigor2860 Series User Manual

Vigor2860 Series User’s Guide
vi
Advanced Configuration............................................................................79
3.1 WAN...................................................................................................................................... 79
3.1.1 Basics of Internet Protocol (IP) Network......................................................................... 79
3.1.2 General Setup................................................................................................................. 81
3.1.3 Internet Access............................................................................................................... 88
3.1.4 Multi-PVC/VLAN ........................................................................................................... 118
3.2 LAN ..................................................................................................................................... 125
3.2.1 Basics of LAN ............................................................................................................... 125
3.2.2 General Setup............................................................................................................... 127
3.2.3 Static Route .................................................................................................................. 137
3.2.4 VLAN............................................................................................................................. 142
3.2.5 Bind IP to MAC ............................................................................................................. 146
3.2.6 LAN Port Mirror............................................................................................................. 148
3.2.7 Wired 802.1x................................................................................................................. 149
3.2.8 Web Portal Setup.......................................................................................................... 150
3.3 Load-Balance /Route Policy................................................................................................ 152
3.4 NAT ..................................................................................................................................... 162
3.4.1 Port Redirection............................................................................................................ 164
3.4.2 DMZ Host...................................................................................................................... 168
3.4.3 Open Ports.................................................................................................................... 171
3.4.4 Port Triggering.............................................................................................................. 173
3.5 Firewall................................................................................................................................ 176
3.5.1 Basics for Firewall......................................................................................................... 176
3.5.2 General Setup............................................................................................................... 178
3.5.3 Filter Setup ................................................................................................................... 183
3.5.4 DoS Defense ................................................................................................................ 191
3.6 User Management............................................................................................................... 195
3.6.1 General Setup............................................................................................................... 196
3.6.2 User Profile................................................................................................................... 198
3.6.3 User Group ................................................................................................................... 203
3.6.4 User Online Status........................................................................................................ 204
3.7 Objects Settings.................................................................................................................. 205
3.7.1 IP Object....................................................................................................................... 205
3.7.2 IP Group ....................................................................................................................... 208
3.7.3 IPv6 Object ................................................................................................................... 209
3.7.4 IPv6 Group.................................................................................................................... 211
3.7.5 Service Type Object ..................................................................................................... 212
3.7.6 Service Type Group...................................................................................................... 214
3.7.7 Keyword Object ............................................................................................................ 216
3.7.8 Keyword Group............................................................................................................. 218
3.7.9 File Extension Object.................................................................................................... 219
3.7.10 SMS/Mail Service Object............................................................................................ 221
3.7.11 Notification Object....................................................................................................... 226
3.8 CSM Profile......................................................................................................................... 228
3.8.1 APP Enforcement Profile.............................................................................................. 229
3.8.2 APPE Signature Upgrade............................................................................................. 233
3.8.3 URL Content Filter Profile............................................................................................. 235
3.8.4 Web Content Filter Profile............................................................................................. 239
3.8.5 DNS Filter Profile.......................................................................................................... 243

Draytek Vigor2860 Series Specifications

General

Firewall Type	Stateful Packet Inspection (SPI)
VPN Support	IPSec, PPTP, L2TP, SSL VPN
DoS Protection	Yes
Intrusion Prevention System (IPS)	Yes
LAN Interfaces	4 x Gigabit Ethernet
User Authentication	Local, RADIUS, LDAP
VPN Tunnels	32
Management Interface	Web-based, CLI
Concurrent Sessions	50, 000
Content Filtering	URL Keyword Filtering, Web Content Filtering