Draytek Vigor 5510Gi User manual

VigorPro 5510 Series
Unified Security Firewall
User’s Guide
Version: 1.0
Date: 2007/10/16
Copyright 2007 All rights reserved.
This publication contains information that is protected by copyright. No part may be reproduced, transmitted,
transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright
holders. The scope of delivery and other details are subject to change without prior notice.
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Computer Inc.
Other products may be trademarks or registered trademarks of their respective manufacturers.

VigorPro5510 Series User’s Guide
ii
Safety Instructions and Approval
Safety
Instructions
zRead the installation guide thoroughly before you set up the router.
zThe router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router
yourself.
zDo not place the router in a damp or humid place, e.g. a bathroom.
zThe router should be used in a sheltered area, within a temperature range of +5 to
+40 Celsius.
zDo not expose the router to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
zDo not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
zKeep the package out of reach of children.
zWhen you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any
defects in workmanship or materials for a period of two (2) years from the date of
purchase from the dealer. Please keep your purchase receipt in a safe place as it serves
as proof of date of purchase. During the warranty period, and upon proof of purchase,
should the product have indications of failure due to faulty workmanship and/or
materials, we will, at our discretion, repair or replace the defective products or
components, without charge for either parts or labor, to whatever extent we deem
necessary tore-store the product to proper operating condition. Any replacement will
consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, damaged by an act of God, or subjected to abnormal
working conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the product will
not be covered by the warranty. We reserve the right to revise the manual and online
documentation and to make changes from time to time in the contents hereof without
obligation to notify any person of such revision or changes.
Be a Registered
Owner Web registration is preferred. You can register your Vigor router via
http://www.draytek.com.
Firmware & Tools
Updates Please consult the DrayTek web site for more information on newest firmware, tools
and documents. For more detailed information, please refer to http://www.draytek.com
Parts of the anti-virus features are powered by Kaspersky Lab ZAO. For more detailed
information, please refer to http://www.kaspersky.com.

VigorPro5510 Series User’s Guide iii
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, HuKou County, HsinChu Industrial Park, Hsin-Chu, Taiwan 303
Product: VigorPro 5510
DrayTek Corp. declares that VigorPro 5510 Series is in compliance with the following essential requirements and
other relevant provisions of R&TTE Directive 1999/5/EEC.
The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 89/336/EEC by
complying with the requirements set forth in EN55022/Class A and EN55024/Class A.
The product conforms to the requirements of Low Voltage (LVD) Directive 73/23/EEC by complying with the
requirements set forth in EN60950.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by turning the equipment off and
on, the use is encouraged to try to correct the interference by one of the following measures:
zReorient or relocate the receiving antenna.
zIncrease the separation between the equipment and receiver.
zConnect the equipment into an outlet on a circuit different form that to which the receiver is connected.
zConsult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired operation.
Taiwanese BSMI (Bureau of Standards, Metrology and Inspection) A Warning:
Warning: This device might cause interference of radio frequency under the environment of dwelling. In such
condition, the users might be asked to adopt some proper strategies.
Please visit “www.draytek.com/about_us/Regulatory.php”

VigorPro5510 Series User’s Guide
iv
T
Ta ab bl le e o of f C Co on nt te en nt ts s
1
Preface ...............................................................................................................1
1.1 Web Configuration Buttons Explanation................................................................................. 1
1.2 LED Indicators and Connectors.............................................................................................. 2
1.2.1 For VigorPro 5510 ............................................................................................................ 2
1.2.2 For VigorPro 5510Gi......................................................................................................... 4
1.3 Hardware Installation .............................................................................................................. 6
1.4 Printer Installation ................................................................................................................... 7
2
Configuring Basic Settings ............................................................................13
2.1 Changing Password.............................................................................................................. 13
2.2 Quick Start Wizard ................................................................................................................ 15
2.2.1 PPPoE ............................................................................................................................ 16
2.2.2 PPTP............................................................................................................................... 18
2.2.3 Static IP........................................................................................................................... 19
2.2.4 DHCP.............................................................................................................................. 20
2.3 Online Status......................................................................................................................... 21
2.4 Saving Configuration............................................................................................................. 23
3
AdvancedWebConfiguration..................................................................................25
3.1 WAN...................................................................................................................................... 25
3.1.1 Basics of Internet Protocol (IP) Network......................................................................... 25
3.1.2 General Setup................................................................................................................. 26
3.1.3 Internet Access............................................................................................................... 28
3.1.4 Load-Balance Policy.......................................................................................................34
3.2 LAN ....................................................................................................................................... 37
3.2.1 Basics of LAN................................................................................................................. 37
3.2.2 General Setup................................................................................................................. 39
3.2.3 Static Route.................................................................................................................... 41
3.2.4 VLAN............................................................................................................................... 44
3.2.5 Bind IP to MAC............................................................................................................... 45
3.3 NAT ....................................................................................................................................... 46
3.3.1 Port Redirection.............................................................................................................. 47
3.3.2 DMZ Host........................................................................................................................ 50
3.3.3 Open Ports...................................................................................................................... 52
3.4 Objects Settings.................................................................................................................... 54
3.4.1 IP Object......................................................................................................................... 54
3.4.2 IP Group ......................................................................................................................... 56
3.4.3 Service Type Object .......................................................................................................57

VigorPro5510 Series User’s Guide v
3.4.4 Service Type Group........................................................................................................58
3.5 CSM ...................................................................................................................................... 59
3.5.1 IM/P2P Profile................................................................................................................. 60
3.5.2 URL Content Filter Profile............................................................................................... 61
3.5.3 Web Content Filter Profile............................................................................................... 63
3.6 Firewall.................................................................................................................................. 65
3.6.1 Basics for Firewall........................................................................................................... 65
3.6.2 General Setup................................................................................................................. 67
3.6.3 Filter Setup ..................................................................................................................... 70
3.6.4 DoS Defense .................................................................................................................. 76
3.7 Defense Configuration .......................................................................................................... 79
3.7.1 Anti-Intrusion................................................................................................................... 79
3.7.2 Anti-Virus ........................................................................................................................ 83
3.7.3 Activation for Anti-Intrusion/Anti-Virus Service............................................................... 88
3.7.4 Signature Upgrade.......................................................................................................... 88
3.7.5 Status.............................................................................................................................. 91
3.8 Bandwidth Management ....................................................................................................... 91
3.8.1 Sessions Limit................................................................................................................. 91
3.8.2 Bandwidth Limit .............................................................................................................. 92
3.8.3 Quality of Service............................................................................................................ 94
3.9 Applications......................................................................................................................... 101
3.9.1 Dynamic DNS............................................................................................................... 101
3.9.2 Schedule....................................................................................................................... 103
3.9.3 RADIUS ........................................................................................................................ 105
3.9.4 UPnP............................................................................................................................. 106
3.9.5 IGMP............................................................................................................................. 108
3.9.6 Wake On LAN............................................................................................................... 108
3.10 VPN and Remote Access...................................................................................................110
3.10.1 Remote Access Control.............................................................................................. 110
3.10.2 PPP General Setup .................................................................................................... 111
3.10.3 IPSec General Setup.................................................................................................. 112
3.10.4 IPSec Peer Identity..................................................................................................... 113
3.10.5 Remote Dial-in User ................................................................................................... 115
3.10.6 LAN to LAN................................................................................................................. 118
3.10.7 Connection Management ........................................................................................... 126
3.11 Certificate Management.................................................................................................... 127
3.11.1 Local Certificate.......................................................................................................... 127
3.11.2 Trusted CA Certificate ................................................................................................ 129
3.11.3 Certificate Backup....................................................................................................... 130
3.12 Web Access Control.......................................................................................................... 131
3.12.1 Web Application.......................................................................................................... 131
3.12.2 User Account.............................................................................................................. 133
3.12.3 Online User Status...................................................................................................... 134
3.13 System Maintenance......................................................................................................... 135
3.13.1 System Status............................................................................................................. 135
3.13.2 Administrator Password.............................................................................................. 136
3.13.3 Configuration Backup ................................................................................................. 136
3.13.4 Syslog/Mail Alert......................................................................................................... 138
3.13.5 Time and Date............................................................................................................ 140
3.13.6 Management............................................................................................................... 141
3.13.7 Reboot System........................................................................................................... 142

VigorPro5510 Series User’s Guide
vi
3.13.8 Firmware Upgrade...................................................................................................... 143
3.14 Diagnostics........................................................................................................................ 144
3.14.1 Dial-out Trigger........................................................................................................... 144
3.14.2 Routing Table ............................................................................................................. 145
3.14.3 ARP Cache Table....................................................................................................... 145
3.14.4 DHCP Table................................................................................................................ 146
3.14.5 NAT Sessions Table................................................................................................... 146
3.14.6 Data Flow Monitor....................................................................................................... 147
3.14.7 Traffic Graph............................................................................................................... 148
3.14.8 Ping Diagnosis............................................................................................................ 149
3.14.9 Trace Route................................................................................................................ 150
4
Registration for the Router...........................................................................151
4.1 Creating and Activating an Account from VigorPro Website............................................... 151
4.2 Creating and Activating an Account from Router Web Configurator................................... 155
4.3 Registering Your Vigor Router ............................................................................................ 160
4.4 Activating Anti-Virus/Anti-Intrusion Service......................................................................... 163
4.5 Applying a New License for Anti-Intrusion/Anti-Virus.......................................................... 168
4.6 Backup and Upgrade Signature forAnti-Intrusion/Anti-Virus .................................................. 173
4.7 Switching between DT-DT and DT-KL................................................................................ 174
4.8 Enabling Anti-Virus/Anti-Intrusion ....................................................................................... 176
5
Application and Examples............................................................................177
5.1 Create a LAN-to-LAN Connection Between Remote Office and Headquarter................... 177
5.2 Create a Remote Dial-in User Connection Between the Teleworker and Headquarter...... 184
5.3 QoS Setting Example.......................................................................................................... 188
5.4 LAN – Created by Using NAT ............................................................................................. 191
5.5 Upgrade Firmware for Your Router..................................................................................... 193
5.6 Request a certificate from a CA server on Windows CA Server......................................... 196
5.7 Request a CA Certificate and Set as Trusted on Windows CA Server............................... 200
6
Trouble Shooting...........................................................................................203
6.1 Checking If the Hardware Status Is OK or Not.................................................................... 203
6.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ................. 203
6.3 Pinging the Router from Your Computer............................................................................. 206
6.4 Checking If the ISP Settings are OK or Not........................................................................ 207
6.5 Backing to Factory Default Setting If Necessary ................................................................ 209
6.6 Contacting Your Dealer....................................................................................................... 210

VigorPro5510 Series User’s Guide vii

VigorPro5510 Series User’s Guide 1
1
P Pr re ef fa ac ce e
VigorPro 5510 is a UTM router with dual-WAN interface. It provides policy-based
load-balance, fail-over and BoD (Bandwidth on Demand), also it integrates IP layer QoS,
NAT session/bandwidth management to help users control works well with large bandwidth.
By adopting hardware-based VPN platform, hardware encryption of AES/DES/3DS and
hardware key hash of SHA-1/MD5, the router increases the performance of VPN greatly,
and offers several protocols (such as IPSec/PPTP/L2TP) with up to 200 VPN tunnels.
The object-originated design used in SPI (Stateful Packet Inspection) firewall allows users to
set firewall policy with ease. CSM (Content Security Management) provides users control
and management in IM (Instant Messenger), P2P (Peer to Peer), Web Content Filter and
URL Content Filter more efficiency than before. By the way, DoS/DDoS prevention and
URL/Web content filter strengthen the security outside and control inside.
1
1. .1 1 W We eb b C Co on nf fi ig gu ur ra at ti io on n B Bu ut tt to on ns s E Ex xp pl la an na at ti io on n
Several main buttons appeared on the web pages are defined as the following:
Save and apply current settings.
Cancel current settings and recover to the previous saved settings.
Clear all the selections and parameters settings, including selection from
drop-down list. All the values must be reset with factory default settings.
Add new settings for specified item.
Edit the settings for the selected item.
Delete the selected item with the corresponding settings.
Note: For the other buttons shown on the web pages, please refer to Chapter 3 for
detailed explanation.

VigorPro5510 Series User’s Guide
2
1
1. .2 2 L LE ED D I In nd di ic ca at to or rs s a an nd d C Co on nn ne ec ct to or rs s
Before you use the Vigor router, please get acquainted with the LED indicators and
connectors first.
1
1. .2 2. .1 1 F Fo or r V Vi ig go or rP Pr ro o 5 55 51 10 0
LED Status Explanation
Blinking The router is powered on and running normally.ACT (Activity) Off The router is powered off.
IDP (Intrusion Detection and
Prevention) On (Yellow) The anti-intrusion function is enabled.
Virus On
(Yellow) The anti-virus function is enabled.
DMZ On DMZ Host is specified in certain site.
On A USB device is connected and active.USB Blinking The data is transmitting.
Monitor On LAN traffic monitor is active.
On The profile(s) for IM/P2P, Web Content Filter,
and/or URL Content Filter application has been
activated. (It is enabled from Firewall >> General
Setup).
CSM
Off No IM/P2P, Web Content Filter, and/or URL
Content Filter application has been activated.
LED on Connector
On The port is connected with 10Mbps.
Off The port is disconnected.
10
(left LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
WAN
100
(right LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
100
(left LED)
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
Off The port is disconnected.
LAN/Monitor
LAN
1000
(right LED)
Blinking The data is transmitting.
Interface Description
RST
(Factory Reset) Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for
more than 5 seconds. When you see the ACT LED begins to blink rapidly than
usual, release the button. Then the router will restart with the factory default
configuration.

VigorPro5510 Series User’s Guide 3
WAN(1/2) Connecter for remote networked devices.
LAN/Monitor Connecter for local networked devices.
LAN (1-4) Connecter for local networked devices.
USB Connecter for a USB device.
Connecter for a power cord with 100-240VAC (inlet).
Power Switch. “1” is ON; “0” is OFF.

VigorPro5510 Series User’s Guide
4
1
1. .2 2. .2 2 F Fo or r V Vi ig go or rP Pr ro o 5 55 51 10 0G Gi i
LED Status Explanation
Blinking The router is powered on and running normally.ACT (Activity) Off The router is powered off.
IDP (Intrusion Detection and
Prevention) On (Yellow) The anti-intrusion function is enabled.
Virus On
(Yellow) The anti-virus function is enabled.
DMZ On DMZ Host is specified in certain site.
On A USB device is connected and active.USB Blinking The data is transmitting.
On Wireless access point is ready.
Blinking Ethernet packets are transmitting over wireless LAN.
WLAN
Off The WLAN function is inactive.
Monitor On LAN traffic monitor is active.
On The profile(s) for IM/P2P, Web Content Filter,
and/or URL Content Filter application has been
activated. (It is enabled from Firewall >> General
Setup).
CSM
Off No IM/P2P, Web Content Filter, and/or URL
Content Filter application has been activated.
On The ISDN service function is active.
ISDN Blinking A successful connection on the ISDN BRI B1/B2
channel.
LED on Connector
On The port is connected with 10Mbps.
Off The port is disconnected.
10
(left LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
WAN
100
(right LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
100
(left LED)
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
Off The port is disconnected.
LAN/Monitor
LAN
1000
(right LED)
Blinking The data is transmitting.
Interface Description
RST
(Factory Reset) Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for
more than 5 seconds. When you see the ACT LED begins to blink rapidly than
usual, release the button. Then the router will restart with the factory default

VigorPro5510 Series User’s Guide 5
configuration.
ISDN Connecter for ISDN line.
WAN(1/2) Connecter for remote networked devices.
LAN/Monitor Connecter for local networked devices.
LAN (1-4) Connecter for local networked devices.
USB Connecter for a USB device.
Connecter for a power cord with 100-240VAC (inlet).
Power Switch. “1” is ON; “0” is OFF.

VigorPro5510 Series User’s Guide
6
1
1. .3 3 H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
Before starting to configure the router, you have to connect your devices correctly.
1. Connect a cable Modem/DSL Modem/Media Converter (depends on your requirement)
to any WAN port of router with Ethernet cable (RJ-45). The WAN1/WAN2 LED (Left
or Right) will light up according to the speed (100 or 10) of the device that it
connected.
2. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of the router and
the other end of the cable (RJ-45) into the Ethernet port on your computer. The LAN
LED (Left or Right) will light up according to the speed (100 or 10) of the device that it
connected.
3. Connect one end of the power adapter to the router’s power port on the rear panel, and
the other side into a wall outlet.
4. Power on the device by pressing down the power switch on the rear panel.
5. The system starts to initiate. After completing the system test, the ACT LED will light
up and start blinking.
(For the detailed information of LED status, please refer to section 1.2.)

VigorPro5510 Series User’s Guide 7
1
1. .4 4 P Pr ri in nt te er r I In ns st ta al ll la at ti io on n
You can install a printer onto the router for sharing printing. All the PCs connected this
router can print documents via the router. The example provided here is made based on
Windows XP/2000. For Windows 98/SE, please visit www.draytek.com.
Before using it, please follow the steps below to configure settings for connected computers
(or wireless clients).
1. Connect the printer with the router through USB/parallel port.
2. Open Start->Settings-> Printer and Faxes.

VigorPro5510 Series User’s Guide
8
3. Open File->Add a New Computer. A welcome dialog will appear. Please click Next.
4. Click Local printer attached to this computer and click Next.
5. In this dialog, choose Create a new port Type of port and use the drop down list to
select Standard TCP/IP Port. Click Next.

VigorPro5510 Series User’s Guide 9
6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer
Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next.
7. Click Standard and choose Generic Network Card.
8. Then, in the following dialog, click Finish.

VigorPro5510 Series User’s Guide
10
9. Now, your system will ask you to choose right name of the printer that you installed
onto the router. Such step can make correct driver loaded onto your PC. When you
finish the selection, click Next.
10. For the final stage, you need to go back to Control Panel-> Printers and edit the
property of the new printer you have added.
11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next
please refer to the red rectangle for choosing the correct protocol and UPR name.
The printer can be used for printing now. Most of the printers with different manufacturers
are compatible with vigor router.

VigorPro5510 Series User’s Guide 11
Note 1: Some printers with the fax/scanning or other additional functions are not supported. If
you do not know whether your printer is supported or not, please visit www.draytek.com to
find out the printer list. Open Support Center->FAQ->Sort by product; select the model of
the router and click on it; find out the link of Printer Server FAQ; click the What types of
printers are compatible with Vigor router? link.
Note 2: Vigor router supports printing request from computers via LAN ports but not WAN
port.

VigorPro5510 Series User’s Guide
12
This page is left blank.