Draytek Vigor2860 Series User Manual

Vigor2860 Series User’s Guide
619
E
E
x
x
a
a
m
m
p
p
l
l
e
e
> mngt lanaccess -e 1
> mngt lanaccess -s FTP,TELNET
> mngt lanaccess -i LAN3
>
> mngt lanaccess -v
Current LAN Access Control Setting:
* Enable:Yes
* Service:
- FTP:Yes
- HTTP:No
- HTTPS:No
- TELNET:Yes
- SSH:No
* Subnet:
- LAN 2: disabled
- LAN 3: enabled
- LAN 4: disabled
- LAN 5: disabled
- LAN 6: disabled
- DMZ: disabled
- IP Routed Subnet: disabled
Note: the settings do NOT apply to LAN1, LAN1 is always allowed to access
the router
T
T
e
e
l
l
n
n
e
e
t
t
C
C
o
o
m
m
m
m
a
a
n
n
d
d
:
:
m
m
n
n
g
g
t
t
e
e
c
c
h
h
o
o
i
i
c
c
m
m
p
p
This command allows users to activate/inactivate echo ICMP packet function.
mngt echoicmp [enable]
mngt echoicmp [disable]
S
S
y
y
n
n
t
t
a
a
x
x
D
D
e
e
s
s
c
c
r
r
i
i
p
p
t
t
i
i
o
o
n
n
Parameter Description
enable
It means to activate the function of echo ICMP packet.
disable
It means to inactivate the function of echo ICMP packet.
E
E
x
x
a
a
m
m
p
p
l
l
e
e
> mngt echoicmp enable
%% Echo ICMP packet enabled.
T
T
e
e
l
l
n
n
e
e
t
t
C
C
o
o
m
m
m
m
a
a
n
n
d
d
:
:
m
m
n
n
g
g
t
t
a
a
c
c
c
c
e
e
s
s
s
s
l
l
i
i
s
s
t
t
This command allows you to specify that the system administrator can login from a specific
host or network. A maximum of three IPs/subnet masks is allowed.
mngt accesslist list
mngt accesslist add [index][ip addr][mask]
mngt accesslist remove [index]

Draytek Vigor2860 Series Specifications

General

Firewall Type	Stateful Packet Inspection (SPI)
VPN Support	IPSec, PPTP, L2TP, SSL VPN
DoS Protection	Yes
Intrusion Prevention System (IPS)	Yes
LAN Interfaces	4 x Gigabit Ethernet
User Authentication	Local, RADIUS, LDAP
VPN Tunnels	32
Management Interface	Web-based, CLI
Concurrent Sessions	50, 000
Content Filtering	URL Keyword Filtering, Web Content Filtering