![Page 1: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/1.jpg)
1
Session 1
Henry Lo
Application Engineer
Seminar
Rui Jorge
Technical Manager
![Page 2: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/2.jpg)
2
• Multi WAN- WAN Types - Load Balance and Backup - Triple Play - WAN Budget
• Multi LAN Subnets / VLAN- Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-
subnets with APs
• Network Topology and Switch Management
Outline — Session 1
• LAN-to-LAN VPN - Supported Protocol - Hub and Spokes - VPN Trunk
• Remote Dial-in VPN- Smart VPN Client - SSL VPN
• Load-Balance/Route Policy
![Page 3: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/3.jpg)
3
Outline — Session 2
• High Availability• User Management
- Customized Login Page Logo - Create Accounts for Accommodations
• AP Management- Setup, Configure, and Maintenance - Management Methods
• WiFi Airtime Fairness• AP Station Statistics• Bandwidth Management
![Page 4: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/4.jpg)
4
• LAN-to-LAN VPN - Supported Protocol - Hub and Spokes - VPN Trunk
• Remote Dial-in VPN- Smart VPN Client - SSL VPN
• Load-Balance/Route Policy
• Multi WAN- WAN Types - Load Balance and Backup - Triple Play - WAN Budget
• Multi LAN Subnets / VLAN- Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-
subnets with APs
• Network Topology and Switch Management
Outline — Session 1
![Page 5: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/5.jpg)
5
• xDSL - ADSL, ADSL2/2+ - VDSL2
• Ethernet (10/100/1000) • Fiber • USB 3G/4G Dongle
Available WAN Interface
![Page 6: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/6.jpg)
6
• xDSL - ADSL, ADSL2/2+ - VDSL2
• Ethernet (10/100/1000) • Fiber • USB 3G/4G Dongle
Available WAN Interface
What if:• Physical Connection Down • No Dongle Available
![Page 7: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/7.jpg)
7
• WiFi WAN (V2860 / V2925)- Choose Wireless Mode
Available WAN Interface
![Page 8: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/8.jpg)
8
Available WAN Interface
• WiFi WAN (V2860 / V2925)- Choose Wireless Mode - AP Discovery
![Page 9: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/9.jpg)
9
Available WAN Interface
• WiFi WAN (V2860 / V2925)- Choose Wireless Mode - AP Discovery - Select AP
![Page 10: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/10.jpg)
10
Available WAN Interface
• WiFi WAN (V2860 / V2925)- Choose Wireless Mode - AP Discovery - Select AP - Auto Channel
![Page 11: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/11.jpg)
11
Available WAN Interface
• WiFi WAN (V2860 / V2925)- Choose Wireless Mode - AP Discovery - Select AP - Auto Channel - Business Continue
![Page 12: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/12.jpg)
12
• Auto Weight / According to Line Speed
Load Balance and Backup
![Page 13: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/13.jpg)
13
• Auto Weight
Load Balance and Backup
![Page 14: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/14.jpg)
14
• According to Line Speed
Load Balance and Backup
![Page 15: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/15.jpg)
15
• According to Line Speed
Load Balance and Backup
![Page 16: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/16.jpg)
16
• Verify the Load Balance
Load Balance and Backup
![Page 17: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/17.jpg)
17
• 4 Mechanisms for WAN Load Balance - CAH, cached - BAL, balanced - DNS - Policy
Load Balance and Backup
![Page 18: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/18.jpg)
18
• Multi-Layers Backup
Load Balance and Backup
![Page 19: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/19.jpg)
19
• Multi-Layers Backup
Load Balance and Backup
![Page 20: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/20.jpg)
20
Triple Play
![Page 21: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/21.jpg)
21
• WAN Type - VPI/VCI for ADSL - Tag for VDSL / Ethernet / Fiber
• Port-Based Bridge - to IPTV Setup Box
• Open WAN Interface - for IP Phones
• Access Mode - PPPoE - DHCP / Static
Triple Play
![Page 22: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/22.jpg)
22
• Open WAN Interface
Triple Play
![Page 23: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/23.jpg)
Exemplos de ligações em “Triple-Play” em Portugal
![Page 24: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/24.jpg)
NOS Fibra
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) directamente a Porta LAN4 do Router/Modem do Operador (ZON HUB), e configurar campos conforme exemplo em baixo :l
Router/Modem ZON HUB :
Router/Modem ZON HUB :
![Page 25: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/25.jpg)
NOS Fibra
Router/Modem ZON HUB :
Router Broadband DrayTek (ex: série Vigor2925, Vigor2120, Vigro2960, etc) :
![Page 26: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/26.jpg)
NOS Fibra
Router/Modem ZON HUB :
![Page 27: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/27.jpg)
MEO Fibra (modo Single-Edge) > apenas acesso a Dados/Internet
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) directamente ao ONT da MEO e configurar campos conforme exemplo em baixo :l
Router/Modem ZON HUB :
![Page 28: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/28.jpg)
MEO Fibra (modo Single-Edge) > acesso a Dados/Internet + IPTV
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) directamente ao ONT da MEO e configurar campos conforme exemplo em baixo :l
Router/Modem ZON HUB :
![Page 29: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/29.jpg)
MEO Fibra (modo Single-Edge) > acesso a Dados/Internet + IPTV
➢ Ligar BOX de IPTV numa das portas do Switch do Router DrayTek e configurar conforme exemplo em baixo :l
Router/Modem ZON HUB :
![Page 30: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/30.jpg)
MEO Fibra (modo Single-Edge) > acesso a Dados/Internet + IPTV + Voz
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) a um Switch sem Gestão e configurar campos conforme exemplo anterior :
Router/Modem ZON HUB :
![Page 31: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/31.jpg)
MEO Fibra (modo Single-Edge) > acesso a Dados/Internet + IPTV + Voz
➢Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN –e- Portas VoIP/FXS) directamente ao ONT da MEO e configurar campos conforme exemplo em baixo :
Router/Modem ZON HUB :
![Page 32: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/32.jpg)
MEO Fibra (modo Single-Edge) > acesso a Dados/Internet + IPTV + Voz
➢Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN –e- Portas VoIP/FXS) directamente ao ONT da MEO e configurar campos conforme exemplo em baixo :
Router/Modem ZON HUB :
![Page 33: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/33.jpg)
Vodafone Fibra
➢ Nota : Huawei HG8247H (Fibra Nova Geração) – só via Duplo-NAT
Router/Modem ZON HUB :
![Page 34: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/34.jpg)
Vodafone Fibra > apenas acesso a Dados/Internet
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) directamente ao ONT da Vodafone e configurar campos conforme exemplo em baixo :
Router/Modem ZON HUB :
![Page 35: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/35.jpg)
Vodafone Fibra > apenas acesso a Dados/Internet + IPTV + Voz
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN –e- Portas VoIP/FXS) directamente ao ONT da Vodafone e configurar campos conforme exemplo em baixo :
Router/Modem ZON HUB :
![Page 36: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/36.jpg)
Vodafone Fibra > apenas acesso a Dados/Internet + IPTV + Voz
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN –e- Portas VoIP/FXS) directamente ao ONT da Vodafone e configurar campos conforme exemplo em baixo :
Router/Modem ZON HUB :
![Page 37: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/37.jpg)
Vodafone Fibra > apenas acesso a Dados/Internet + IPTV + Voz
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN –e- Portas VoIP/FXS) directamente ao ONT da Vodafone e configurar campos conforme exemplo em baixo :
Router/Modem ZON HUB :
![Page 38: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/38.jpg)
38
• Set Quota • Action • Billing Cycle
WAN Budget
![Page 39: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/39.jpg)
39
• Keep Tracking on the Usages
WAN Budget Limit
![Page 40: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/40.jpg)
40
Outline — Session 1
• LAN-to-LAN VPN - Supported Protocol - Hub and Spokes - VPN Trunk
• Remote Dial-in VPN- Smart VPN Client - SSL VPN
• Load-Balance/Route Policy
• Multi WAN- WAN Types - Load Balance and Backup - Triple Play - WAN Budget
• Multi LAN Subnets / VLAN- Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-
subnets with APs
• Network Topology and Switch Management
![Page 41: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/41.jpg)
41
Multi LAN Subnets / VLAN
• The Initial Status
![Page 42: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/42.jpg)
42
Multi LAN Subnets/VLAN
• Port-Based
![Page 43: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/43.jpg)
43
Multi LAN Subnets/VLAN
• Tag-Based
![Page 44: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/44.jpg)
44
Multi LAN Subnets/VLAN• Tips to Configure Hybrid VLAN
- Reserve P1 for Administrator Management, no tag
![Page 45: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/45.jpg)
45
Multi LAN Subnets/VLAN• Tips to Configure Hybrid VLAN
- Reserve P1 for Administrator Management, no tag - Reserve VLAN0 for other Vigor AP/Switch plug-n-play, no tag
![Page 46: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/46.jpg)
46
• Enable LAN2 and LAN3
• Enable Inter-LAN Routing
Multi LAN Subnets/VLAN
![Page 47: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/47.jpg)
47
• A Hybrid Example- P1 Administrator - P3 AP with 4 SSID
Multi LAN Subnets/VLAN
![Page 48: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/48.jpg)
48
Multi LAN Subnets/VLAN
![Page 49: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/49.jpg)
49
• Multi WAN- WAN Types - Load Balance and Backup - Triple Play - WAN Budget
• Multi LAN Subnets / VLAN- Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-
subnets with APs
• Network Topology and Switch Management
Outline
• LAN-to-LAN VPN - Supported Protocol - Hub and Spokes - VPN Trunk
• Remote Dial-in VPN- Smart VPN Client - SSL VPN
• Load-Balance/Route Policy
![Page 50: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/50.jpg)
50
Your Network Topology
![Page 51: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/51.jpg)
51
Switch Management
• Existing VLAN Setup on Router:
![Page 52: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/52.jpg)
• Trunk Port in Darker-Grey
52
Switch Management
![Page 53: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/53.jpg)
53
Switch Management
• Auto Show All VID for each VLAN
• Trunk Port in Darker-Grey
![Page 54: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/54.jpg)
54
Switch Management
• Trunk Port in Darker-Grey
• Auto Show All VID for each VLAN
• Select VLAN for each Port
• Finish!
![Page 55: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/55.jpg)
55
Outline
• Multi WAN- WAN Types - Load Balance and Backup - Triple Play - WAN Budget
• Multi LAN Subnets / VLAN- Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-
subnets with APs
• LAN-to-LAN VPN - Supported Protocol - Hub and Spokes - VPN Trunk
• Remote Dial-in VPN- Smart VPN Client - SSL VPN
• Load-Balance/Route Policy
![Page 56: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/56.jpg)
56
Supported VPN Protocol
• PPTP (TCP 1723)
• L2TP (UDP 1701)
• IPsec (UDP 500)
• L2TP over IPsec
• SSL VPN (TCP 443)
• mOTP
![Page 57: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/57.jpg)
57
Supported VPN Protocols
None/Nice to Have/Must
LAN to LAN
PPTP
L2TP/IPSec
IPSec
SSLport configurable
![Page 58: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/58.jpg)
58
LAN-to-LAN VPN
• VPN for more subnets
VPN
172.16.10.1/24 192.168.1.1/24
Headquarters
Dial-in
Branch 1
Dial-out
192.168.5.1/24
![Page 59: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/59.jpg)
VPN
59
LAN-to-LAN VPN• Hub and Spokes
VPN172.16.10.1/24
192.168.1.1/24
172.16.20.1/24
Branch 2
VPN 172.16.30.1/24
VPN
172.16.40.1/24
Branch 3
Branch 4
Headquarters
Branch 1
![Page 60: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/60.jpg)
60
LAN-to-LAN VPN
• VPN Trunk — Backup
VPN 1
172.16.10.1/24 192.168.1.1/24
Dial-inBranch 1
Dial-out
VPN 2WAN 1WAN 2
Headquarters
![Page 61: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/61.jpg)
61
LAN-to-LAN VPN
• VPN Trunk — Load Balance
VPN 1
172.16.10.1/24 192.168.1.1/24
Dial-inBranch 1
Dial-out
VPN 2WAN 1WAN 2
Headquarters
![Page 62: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/62.jpg)
62
None/Nice to Have/Must
Host to LAN
PPTP
L2TP/IPSec
IPSec
SSLport configurable
PC Android Mac iOS
Must
DrayTek Smart VPN
Client
DrayTek Smart VPN
Client
Must Must
![Page 63: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/63.jpg)
63
Remote Dial-In VPN
• Smart VPN Client for Android — SSL VPN
![Page 64: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/64.jpg)
64
Outline
• Multi WAN- WAN Types - Load Balance and Backup - Triple Play - WAN Budget
• Multi LAN Subnets / VLAN- Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-
subnets with APs
• LAN-to-LAN VPN - Supported Protocol - Hub and Spokes - VPN Trunk
• Remote Dial-in VPN- Smart VPN Client - SSL VPN
• Load-Balance/Route Policy
![Page 65: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/65.jpg)
65
General View
![Page 66: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/66.jpg)
66
Configuration Page
![Page 67: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/67.jpg)
67
Configuration Page• Set Criteria
- Protocol - Source / Dest IP - Port
![Page 68: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/68.jpg)
68
Configuration Page• Choose Route
- Interface - Gateway
• Give Priority- Higher than Routing Table? - Higher than other Policies?
![Page 69: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/69.jpg)
69
Configuration Page• NAT or Routing?
- Regardless of the original LAN type
• Failover to Interface / Policy• Gradual / Immediate Failback
![Page 70: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/70.jpg)
70
Idea of Priority• Compare between Routing Table and Route Policies
100
Index Interface12
Src IP Dest IP
WAN2 LAN2 AnyWAN1 LAN2 8.8.8.8
Priority
100INTERNET
WAN1 WAN2
LAN1 Servers
LAN2 PC
150
200
![Page 71: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/71.jpg)
INTERNET
WAN1 WAN2
LAN1 Servers
LAN2 PC 71
Idea of Priority• Compare between Routing Table and Route Policies
Index Interface12
Src IP Dest IP
3
WAN2 LAN2 AnyWAN1 LAN2 8.8.8.8
Priority
200
150
200
![Page 72: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/72.jpg)
INTERNET
WAN1 WAN2
LAN1 Servers
LAN2 PC 72
Idea of Priority• Compare between Routing Table and Route Policies
Index Interface12
Src IP Dest IP
3
WAN1 LAN2 8.8.8.8WAN2 LAN2 Any
Priority200
250
250
![Page 73: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/73.jpg)
• Priority First, Sequence Second
73
Idea of Priority• Compare between Routing Table and Route Policies
![Page 74: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/74.jpg)
• Priority First, Sequence Second - With Same Priority, Sequence Matters
74
Idea of Priority• Compare between Routing Table and Route Policies
![Page 75: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/75.jpg)
75
Route Policy Diagnose
8.8.8.8
![Page 76: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/76.jpg)
76
• Send SIP Traffic to the Less-Jitter WAN
Load Balance
![Page 77: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/77.jpg)
77
Route Policy with VPN• Local Users to Remote Server
- Only Specified LAN IP are eligible to send traffic via the VPN tunnel
Manager IPTV
INTERNET
VPN
Tun
nel
VPN TunnelVPN Server
Netflix Servernetflix-380.vo.llnwd.net
Employees
![Page 78: DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1](https://reader031.vdocuments.com.br/reader031/viewer/2022022414/5875f1fc1a28ab006e8b51d1/html5/thumbnails/78.jpg)
78
Q&A