This document outlines the agenda for two seminar sessions on network configuration. Session 1 will cover multi-WAN configurations, multi-LAN subnets, VLANs, LAN-to-LAN VPN, remote dial-in VPN, and load balancing policies. Session 2 will cover high availability, user management, access point management, wireless airtime fairness, and bandwidth management. The document provides detailed outlines of the topics to be discussed in each session.

1. 1
Session 1
Henry Lo
Application Engineer
Seminar
Rui Jorge
Technical Manager

2. 2
• Multi WAN
- WAN Types
- Load Balance and Backup
- Triple Play
- WAN Budget
• Multi LAN Subnets / VLAN
- Port-Based
- Tag-Based
- Inter-LAN Routing
- Hybrid Example — Setup multi-
subnets with APs
• Network Topology and
Switch Management
Outline — Session 1
• LAN-to-LAN VPN
- Supported Protocol
- Hub and Spokes
- VPN Trunk
• Remote Dial-in VPN
- Smart VPN Client
- SSL VPN
• Load-Balance/Route Policy

3. 3
Outline — Session 2
• High Availability
• User Management
- Customized Login Page Logo
- Create Accounts for Accommodations
• AP Management
- Setup, Configure, and Maintenance
- Management Methods
• WiFi Airtime Fairness
• AP Station Statistics
• Bandwidth Management

4. 4
• LAN-to-LAN VPN
- Supported Protocol
- Hub and Spokes
- VPN Trunk
• Remote Dial-in VPN
- Smart VPN Client
- SSL VPN
• Load-Balance/Route Policy
• Multi WAN
- WAN Types
- Load Balance and Backup
- Triple Play
- WAN Budget
• Multi LAN Subnets / VLAN
- Port-Based
- Tag-Based
- Inter-LAN Routing
- Hybrid Example — Setup multi-
subnets with APs
• Network Topology and
Switch Management
Outline — Session 1

5. 5
• xDSL
- ADSL, ADSL2/2+
- VDSL2
• Ethernet (10/100/1000)
• Fiber
• USB 3G/4G Dongle
Available WAN Interface

6. 6
• xDSL
- ADSL, ADSL2/2+
- VDSL2
• Ethernet (10/100/1000)
• Fiber
• USB 3G/4G Dongle
Available WAN Interface
What if:
• Physical Connection Down
• No Dongle Available

7. 7
• WiFi WAN
(V2860 / V2925)
- Choose Wireless Mode
Available WAN Interface

8. 8
Available WAN Interface
• WiFi WAN
(V2860 / V2925)
- Choose Wireless Mode
- AP Discovery

9. 9
Available WAN Interface
• WiFi WAN
(V2860 / V2925)
- Choose Wireless Mode
- AP Discovery
- Select AP

10. 10
Available WAN Interface
• WiFi WAN
(V2860 / V2925)
- Choose Wireless Mode
- AP Discovery
- Select AP
- Auto Channel

11. 11
Available WAN Interface
• WiFi WAN
(V2860 / V2925)
- Choose Wireless Mode
- AP Discovery
- Select AP
- Auto Channel
- Business Continue

12. 12
• Auto Weight / According to Line Speed
Load Balance and Backup

13. 13
• Auto Weight
Load Balance and Backup

14. 14
• According to Line Speed
Load Balance and Backup

15. 15
• According to Line Speed
Load Balance and Backup

16. 16
• Verify the Load Balance
Load Balance and Backup

17. 17
• 4 Mechanisms for
WAN Load Balance
- CAH, cached
- BAL, balanced
- DNS
- Policy
Load Balance and Backup

18. 18
• Multi-Layers Backup
Load Balance and Backup

19. 19
• Multi-Layers Backup
Load Balance and Backup

20. 20
Triple Play

21. 21
• WAN Type
- VPI/VCI for ADSL
- Tag for VDSL / Ethernet / Fiber
• Port-Based Bridge
- to IPTV Setup Box
• Open WAN Interface
- for IP Phones
• Access Mode
- PPPoE
- DHCP / Static
Triple Play

22. 22
• Open WAN Interface
Triple Play

23. Exemplos de ligações em
“Triple-Play” em Portugal

24. NOS Fibra
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN)
directamente a Porta LAN4 do Router/Modem do Operador (ZON HUB), e configurar
campos conforme exemplo em baixo :l
Router/Modem ZON HUB :
Router/Modem ZON HUB :

25. NOS Fibra
Router/Modem ZON HUB :
Router Broadband DrayTek (ex: série Vigor2925,
Vigor2120, Vigro2960, etc) :

26. NOS Fibra
Router/Modem ZON HUB :

27. MEO Fibra (modo Single-Edge)
> apenas acesso a Dados/Internet
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN)
directamente ao ONT da MEO e configurar campos conforme exemplo em baixo :l
Router/Modem ZON HUB :

28. MEO Fibra (modo Single-Edge)
> acesso a Dados/Internet + IPTV
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN)
directamente ao ONT da MEO e configurar campos conforme exemplo em baixo :l
Router/Modem ZON HUB :

29. MEO Fibra (modo Single-Edge)
> acesso a Dados/Internet + IPTV
➢ Ligar BOX de IPTV numa das portas do Switch do Router DrayTek e configurar conforme
exemplo em baixo :l
Router/Modem ZON HUB :

30. MEO Fibra (modo Single-Edge)
> acesso a Dados/Internet + IPTV + Voz
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) a um
Switch sem Gestão e configurar campos conforme exemplo anterior :
Router/Modem ZON HUB :

31. MEO Fibra (modo Single-Edge)
> acesso a Dados/Internet + IPTV + Voz
➢Ligar Porta WAN do Router DrayTek (modelo Broadband com porta
Ethernet WAN –e- Portas VoIP/FXS) directamente ao ONT da MEO e
configurar campos conforme exemplo em baixo :
Router/Modem ZON HUB :

32. MEO Fibra (modo Single-Edge)
> acesso a Dados/Internet + IPTV + Voz
➢Ligar Porta WAN do Router DrayTek (modelo Broadband com porta
Ethernet WAN –e- Portas VoIP/FXS) directamente ao ONT da MEO e
configurar campos conforme exemplo em baixo :
Router/Modem ZON HUB :

33. Vodafone Fibra
➢ Nota : Huawei HG8247H (Fibra Nova Geração) – só via Duplo-NAT
Router/Modem ZON HUB :

34. Vodafone Fibra
> apenas acesso a Dados/Internet
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN)
directamente ao ONT da Vodafone e configurar campos conforme exemplo em baixo :
Router/Modem ZON HUB :

35. Vodafone Fibra
> apenas acesso a Dados/Internet + IPTV + Voz
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN –e-
Portas VoIP/FXS) directamente ao ONT da Vodafone e configurar campos conforme
exemplo em baixo :
Router/Modem ZON HUB :

36. Vodafone Fibra
> apenas acesso a Dados/Internet + IPTV + Voz
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN –e-
Portas VoIP/FXS) directamente ao ONT da Vodafone e configurar campos conforme
exemplo em baixo :
Router/Modem ZON HUB :

37. Vodafone Fibra
> apenas acesso a Dados/Internet + IPTV + Voz
➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN –e-
Portas VoIP/FXS) directamente ao ONT da Vodafone e configurar campos conforme
exemplo em baixo :
Router/Modem ZON HUB :

38. 38
• Set Quota
• Action
• Billing Cycle
WAN Budget

39. 39
• Keep Tracking on the Usages
WAN Budget Limit

40. 40
Outline — Session 1
• LAN-to-LAN VPN
- Supported Protocol
- Hub and Spokes
- VPN Trunk
• Remote Dial-in VPN
- Smart VPN Client
- SSL VPN
• Load-Balance/Route Policy
• Multi WAN
- WAN Types
- Load Balance and Backup
- Triple Play
- WAN Budget
• Multi LAN Subnets / VLAN
- Port-Based
- Tag-Based
- Inter-LAN Routing
- Hybrid Example — Setup multi-
subnets with APs
• Network Topology and
Switch Management

41. 41
Multi LAN Subnets / VLAN
• The Initial Status

42. 42
Multi LAN Subnets/VLAN
• Port-Based

43. 43
Multi LAN Subnets/VLAN
• Tag-Based

44. 44
Multi LAN Subnets/VLAN
• Tips to Configure Hybrid VLAN
- Reserve P1 for Administrator Management, no tag

45. 45
Multi LAN Subnets/VLAN
• Tips to Configure Hybrid VLAN
- Reserve P1 for Administrator Management, no tag
- Reserve VLAN0 for other Vigor AP/Switch plug-n-play, no tag

46. 46
• Enable
LAN2 and LAN3
• Enable
Inter-LAN Routing
Multi LAN Subnets/VLAN

47. 47
• A Hybrid Example
- P1 Administrator
- P3 AP with 4 SSID
Multi LAN Subnets/VLAN

48. 48
Multi LAN Subnets/VLAN

49. 49
• Multi WAN
- WAN Types
- Load Balance and Backup
- Triple Play
- WAN Budget
• Multi LAN Subnets / VLAN
- Port-Based
- Tag-Based
- Inter-LAN Routing
- Hybrid Example — Setup multi-
subnets with APs
• Network Topology and
Switch Management
Outline
• LAN-to-LAN VPN
- Supported Protocol
- Hub and Spokes
- VPN Trunk
• Remote Dial-in VPN
- Smart VPN Client
- SSL VPN
• Load-Balance/Route Policy

50. 50
Your Network Topology

51. 51
Switch Management
• Existing VLAN Setup on Router:

52. • Trunk Port in
Darker-Grey
52
Switch Management

53. 53
Switch Management
• Auto Show All VID
for each VLAN
• Trunk Port in
Darker-Grey

54. 54
Switch Management
• Trunk Port in
Darker-Grey
• Auto Show All VID
for each VLAN
• Select VLAN for
each Port
• Finish!

55. 55
Outline
• Multi WAN
- WAN Types
- Load Balance and Backup
- Triple Play
- WAN Budget
• Multi LAN Subnets / VLAN
- Port-Based
- Tag-Based
- Inter-LAN Routing
- Hybrid Example — Setup multi-
subnets with APs
• LAN-to-LAN VPN
- Supported Protocol
- Hub and Spokes
- VPN Trunk
• Remote Dial-in VPN
- Smart VPN Client
- SSL VPN
• Load-Balance/Route Policy

56. 56
Supported VPN Protocol
• PPTP (TCP 1723)
• L2TP (UDP 1701)
• IPsec (UDP 500)
• L2TP over IPsec
• SSL VPN (TCP 443)
• mOTP

57. 57
Supported VPN Protocols
None/Nice to Have/Must
LAN to LAN
PPTP
L2TP
/IPSec
IPSec
SSL
port configurable

58. 58
LAN-to-LAN VPN
• VPN for more subnets
VPN
172.16.10.1/24 192.168.1.1/24
Headquarters
Dial-in
Branch 1
Dial-out
192.168.5.1/24

59. VPN
59
LAN-to-LAN VPN
• Hub and Spokes
VPN172.16.10.1/24
192.168.1.1/24
172.16.20.1/24
Branch 2
VPN 172.16.30.1/24
VPN
172.16.40.1/24
Branch 3
Branch 4
Headquarters
Branch 1

60. 60
LAN-to-LAN VPN
• VPN Trunk — Backup
VPN 1
172.16.10.1/24 192.168.1.1/24
Dial-in
Branch 1
Dial-out
VPN 2
WAN 1
WAN 2
Headquarters

61. 61
LAN-to-LAN VPN
• VPN Trunk — Load Balance
VPN 1
172.16.10.1/24 192.168.1.1/24
Dial-in
Branch 1
Dial-out
VPN 2
WAN 1
WAN 2
Headquarters

62. 62
None/Nice to Have/Must
Host to LAN
PPTP
L2TP
/IPSec
IPSec
SSL
port configurable
PC Android Mac iOS
Must
DrayTek
Smart VPN
Client
DrayTek
Smart VPN
Client
Must Must

63. 63
Remote Dial-In VPN
• Smart VPN Client for Android — SSL VPN

64. 64
Outline
• Multi WAN
- WAN Types
- Load Balance and Backup
- Triple Play
- WAN Budget
• Multi LAN Subnets / VLAN
- Port-Based
- Tag-Based
- Inter-LAN Routing
- Hybrid Example — Setup multi-
subnets with APs
• LAN-to-LAN VPN
- Supported Protocol
- Hub and Spokes
- VPN Trunk
• Remote Dial-in VPN
- Smart VPN Client
- SSL VPN
• Load-Balance/Route Policy

65. 65
General View

66. 66
Configuration Page

67. 67
Configuration Page
• Set Criteria
- Protocol
- Source / Dest IP
- Port

68. 68
Configuration Page
• Choose Route
- Interface
- Gateway
• Give Priority
- Higher than Routing Table?
- Higher than other Policies?

69. 69
Configuration Page
• NAT or Routing?
- Regardless of the original LAN type
• Failover to Interface / Policy
• Gradual / Immediate Failback

70. 70
Idea of Priority
• Compare between Routing Table and Route Policies
100
Index Interface
1
2
Src IP Dest IP
WAN2 LAN2 Any
WAN1 LAN2 8.8.8.8
Priority
100
INTERNET
WAN1 WAN2
LAN1
Servers
LAN2
PC
150
200

71. INTERNET
WAN1 WAN2
LAN1
Servers
LAN2
PC 71
Idea of Priority
• Compare between Routing Table and Route Policies
Index Interface
1
2
Src IP Dest IP
3
WAN2 LAN2 Any
WAN1 LAN2 8.8.8.8
Priority
200
150
200

72. INTERNET
WAN1 WAN2
LAN1
Servers
LAN2
PC 72
Idea of Priority
• Compare between Routing Table and Route Policies
Index Interface
1
2
Src IP Dest IP
3
WAN1 LAN2 8.8.8.8
WAN2 LAN2 Any
Priority
200
250
250

73. • Priority First, Sequence Second
73
Idea of Priority
• Compare between Routing Table and Route Policies

74. • Priority First, Sequence Second
- With Same Priority, Sequence Matters
74
Idea of Priority
• Compare between Routing Table and Route Policies

75. 75
Route Policy Diagnose
8.8.8.8

76. 76
• Send SIP Traffic to
the Less-Jitter WAN
Load Balance

77. 77
Route Policy with VPN
• Local Users to Remote Server
- Only Specified LAN IP are eligible to
send traffic via the VPN tunnel
Manager IPTV
INTERNET
VPNTunnel
VPN
TunnelVPN Server
Netflix Server
netflix-380.vo.llnwd.net
Employees

78. 78
Q&A