Vigor2765 Series User’s Guide
viii
IV-1-4 PPP General Setup....................................................................................................... 235
IV-1-5 IPsec General Setup..................................................................................................... 237
IV-1-6 IPsec Peer Identity........................................................................................................ 239
IV-1-7 OpenVPN...................................................................................................................... 241
IV-1-7-1 General Setup ......................................................................... 241
IV-1-7-2 Client Config........................................................................... 242
IV-1-8 Remote Dial-in User...................................................................................................... 243
IV-1-9 LAN to LAN ................................................................................................................... 248
IV-1-10 Connection Management............................................................................................ 255
Application Notes..................................................................................................................... 256
A-1 How to Build a LAN-to-LAN VPN Between Vigor Routers via IPsec Main Mode ... 256
IV-2 SSL VPN................................................................................................................................. 261
Web User Interface.................................................................................................................. 262
IV-2-1 General Setup............................................................................................................... 262
IV-2-2 User Account................................................................................................................. 263
IV-2-3 SSL Portal Online User................................................................................................. 267
Application Notes..................................................................................................................... 268
A-1 Vigor Router to Vigor Router – SSL VPN................................................. 268
VPN Client (Dial-out Site) Setup .............................................................. 269
Establishing the VPN Tunnel................................................................... 271
IV-3 Certificate Management.......................................................................................................... 272
Web User Interface.................................................................................................................. 273
IV-3-1 Local Certificate ............................................................................................................ 273
IV-3-2 Trusted CA Certificate................................................................................................... 277
IV-3-3 Certificate Backup......................................................................................................... 279
IV-3-4 Self-Signed Certificate .................................................................................................. 280
Part V Security ...............................................................................................................281
V-1 Firewall..................................................................................................................................... 282
Web User Interface.................................................................................................................. 284
V-1-1 General Setup................................................................................................................ 284
V-1-2 Filter Setup..................................................................................................................... 289
V-1-3 DoS Defense.................................................................................................................. 298
V-1-3-1 DoS Defense............................................................................. 298
V-1-3-2 Spoofing Defense....................................................................... 301
V-1-4 Diagnose........................................................................................................................ 302
Application Notes..................................................................................................................... 305
A-1 How to Configure Certain Computers Accessing to Internet ........................ 305
A-2 How to backup and restore firewall rule and object settings? ..................... 309
V-2 CSM (Central Security Management).......................................................................................311
Web User Interface.................................................................................................................. 312
V-2-1 APP Enforcement Profile ............................................................................................... 312
V-2-2 APPE Signature Upgrade .............................................................................................. 314
V-2-3 URL Content Filter Profile.............................................................................................. 315