DrayTek Seminar in Greece, Session 1
•
0 likes•927 views
The document outlines topics to be covered in two seminar sessions on connecting to the Internet and network configuration using a router. Session 1 will discuss multi-subnet VLAN configuration, LAN-to-LAN VPN protocols and setup, and remote dial-in VPN access. Session 2 will cover content security, user management, access point management, bandwidth management, and WiFi airtime fairness.
Recommended
More Related Content
What's hot
What's hot (20)
Similar to DrayTek Seminar in Greece, Session 1
Similar to DrayTek Seminar in Greece, Session 1 (20)
Recently uploaded
Recently uploaded (20)
DrayTek Seminar in Greece, Session 1
- 1. 1 Connecting to the Internet Henry Lo Application Engineer Seminar
- 2. 2 • Multi LAN Subnets / VLAN - Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-subnets with APs • LAN-to-LAN VPN - PPTP and IPSec - VPN Trunk • Remote Dial-in VPN - Smart VPN Client and SSL VPN • Load-Balance/Route Policy Outline — Session 1
- 3. 3 Outline — Session 2 • Content Security Management (CSM) - Web Content Filter with DNS Filter - APP Enforcement • User Management - Customized Login Page Logo - Create Accounts for Accommodations • AP Management - Setup, Configure, and Maintenance - Management Methods • WiFi Airtime Fairness • Bandwidth Management
- 4. 4 Outline • Multi LAN Subnets / VLAN - Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-subnets with APs • LAN-to-LAN VPN - PPTP and IPSec - VPN Trunk • Remote Dial-in VPN - Smart VPN Client and SSL VPN • Load-Balance/Route Policy
- 5. 5 Multi LAN Subnets / VLAN • The Initial Status
- 6. 6 Multi LAN Subnets/VLAN • Port-Based
- 7. 7 Multi LAN Subnets/VLAN • Tag-Based
- 8. 8 Multi LAN Subnets/VLAN • A Hybrid Example - P1 in LAN1 for Administrator Management - P2~P4 in LAN2 for 3 Departments, Isolated from Each Other - P5 in LAN1 for Internal Server (e.g., FTP Server) - P6 in LAN3 for Guests
- 9. 9 • Enable LAN2 and LAN3 • Enable Inter-LAN Routing Multi LAN Subnets/VLAN
- 10. 10 • A Hybrid Example - P1 Administrator - P2, P3 Staff - P4 for AP LANA - P5 for AP LANB Multi LAN Subnets/VLAN
- 12. 12 Outline • Multi LAN Subnets / VLAN - Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-subnets with APs • LAN-to-LAN VPN - PPTP and IPSec - VPN Trunk • Remote Dial-in VPN - Smart VPN Client and SSL VPN • Load-Balance/Route Policy
- 13. 13 Supported VPN Protocol • PPTP (TCP 1723) • L2TP (UDP 1701) • IPsec (UDP 500) • L2TP over IPsec • SSL VPN (TCP 443) • mOTP
- 14. 14 Supported VPN Protocols None/Nice to Have/Must LAN to LAN PPTP L2TP /IPSec IPSec SSL port configurable V2960/V3900 only
- 15. 15 LAN-to-LAN VPN • VPN for more subnets VPN 172.16.10.1/24 192.168.1.1/24 Headquarters Dial-in Branch 1 Dial-out 172.16.15.1/24 192.168.5.1/24
- 16. VPN 16 LAN-to-LAN VPN • Hub and Spokes VPN172.16.10.1/24 192.168.1.1/24 172.16.20.1/24 Branch 2 VPN 172.16.30.1/24 VPN 172.16.40.1/24 Branch 3 Branch 4 Headquarters Branch 1
- 17. 17 LAN-to-LAN VPN • VPN Trunk — Backup VPN 1 172.16.10.1/24 192.168.1.1/24 Dial-in Branch 1 Dial-out VPN 2 WAN 1 WAN 2 Headquarters
- 18. 18 LAN-to-LAN VPN • VPN Trunk — Load Balance VPN 1 172.16.10.1/24 192.168.1.1/24 Dial-in Branch 1 Dial-out VPN 2 WAN 1 WAN 2 Headquarters
- 19. 19 None/Nice to Have/Must Host to LAN PPTP L2TP /IPSec IPSec SSL port configurable PC Android Mac iOS Must DrayTek Smart VPN Client DrayTek Smart VPN Client Must Must
- 20. 20 Remote Dial-In VPN • Smart VPN Client for Android — SSL VPN
- 21. 21 Outline • Multi LAN Subnets / VLAN - Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-subnets with APs • LAN-to-LAN VPN - PPTP and IPSec - VPN Trunk • Remote Dial-in VPN - Smart VPN Client and SSL VPN • Load-Balance/Route Policy
- 22. 22 General View
- 24. 24 Configuration Page • Set Criteria - Protocol - Source / Dest IP - Port
- 25. 25 Configuration Page • Choose Route - Interface - Gateway • Give Priority - Higher than Routing Table? - Higher than other Policies?
- 26. 26 Configuration Page • NAT or Routing? - Regardless of the original LAN type • Failover to Interface / Policy • Gradual / Immediate Failback
- 27. 27 Idea of Priority • Compare between Routing Table and Route Policies 100 Index Interface 1 2 Src IP Dest IP WAN2 LAN2 Any WAN1 LAN2 8.8.8.8 Priority 100 INTERNET WAN1 WAN2 LAN1 Servers LAN2 PC 150 200
- 28. INTERNET WAN1 WAN2 LAN1 Servers LAN2 PC 28 Idea of Priority • Compare between Routing Table and Route Policies Index Interface 1 2 Src IP Dest IP 3 WAN2 LAN2 Any WAN1 LAN2 8.8.8.8 Priority 200 150 200
- 29. INTERNET WAN1 WAN2 LAN1 Servers LAN2 PC 29 Idea of Priority • Compare between Routing Table and Route Policies Index Interface 1 2 Src IP Dest IP 3 WAN1 LAN2 8.8.8.8 WAN2 LAN2 Any Priority 200 250 250
- 30. • Priority First, Sequence Second 30 Idea of Priority • Compare between Routing Table and Route Policies
- 31. • Priority First, Sequence Second - With Same Priority, Sequence Matters 31 Idea of Priority • Compare between Routing Table and Route Policies
- 33. 33 • Send SIP Traffic to the Less-Jitter WAN Load Balance
- 34. 34 Route Policy with VPN • Local Users to Remote Server - Only Specified LAN IP are eligible to send traffic via the VPN tunnel Manager IPTV INTERNET VPNTunnel VPN TunnelVPN Server Netflix Server netflix-380.vo.llnwd.net Employees
- 35. 35 Q&A