DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1

Session 1

Henry Lo

Application Engineer

Seminar

Rui Jorge

Technical Manager

• Multi WAN- WAN Types - Load Balance and Backup - Triple Play - WAN Budget

• Multi LAN Subnets / VLAN- Port-Based - Tag-Based - Inter-LAN Routing - Hybrid Example — Setup multi-

subnets with APs

• Network Topology and Switch Management

Outline — Session 1

• LAN-to-LAN VPN - Supported Protocol - Hub and Spokes - VPN Trunk

• Remote Dial-in VPN- Smart VPN Client - SSL VPN

• Load-Balance/Route Policy

• High Availability• User Management

- Customized Login Page Logo - Create Accounts for Accommodations

• AP Management- Setup, Configure, and Maintenance - Management Methods

• WiFi Airtime Fairness• AP Station Statistics• Bandwidth Management

subnets with APs

• xDSL - ADSL, ADSL2/2+ - VDSL2

• Ethernet (10/100/1000) • Fiber • USB 3G/4G Dongle

Available WAN Interface

• xDSL - ADSL, ADSL2/2+ - VDSL2

• Ethernet (10/100/1000) • Fiber • USB 3G/4G Dongle

What if:• Physical Connection Down • No Dongle Available

• WiFi WAN (V2860 / V2925)- Choose Wireless Mode

• WiFi WAN (V2860 / V2925)- Choose Wireless Mode - AP Discovery

• WiFi WAN (V2860 / V2925)- Choose Wireless Mode - AP Discovery - Select AP

• WiFi WAN (V2860 / V2925)- Choose Wireless Mode - AP Discovery - Select AP - Auto Channel

• WiFi WAN (V2860 / V2925)- Choose Wireless Mode - AP Discovery - Select AP - Auto Channel - Business Continue

• Auto Weight / According to Line Speed

Load Balance and Backup

• Auto Weight

• According to Line Speed

• Verify the Load Balance

• 4 Mechanisms for WAN Load Balance - CAH, cached - BAL, balanced - DNS - Policy

• Multi-Layers Backup

Triple Play

• WAN Type - VPI/VCI for ADSL - Tag for VDSL / Ethernet / Fiber

• Port-Based Bridge - to IPTV Setup Box

• Open WAN Interface - for IP Phones

• Access Mode - PPPoE - DHCP / Static

Triple Play

• Open WAN Interface

Triple Play

Exemplos de ligações em “Triple-Play” em Portugal

NOS Fibra

➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) directamente a Porta LAN4 do Router/Modem do Operador (ZON HUB), e configurar campos conforme exemplo em baixo :l

Router/Modem ZON HUB :

NOS Fibra

Router Broadband DrayTek (ex: série Vigor2925, Vigor2120, Vigro2960, etc) :

NOS Fibra

MEO Fibra (modo Single-Edge) > apenas acesso a Dados/Internet

➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) directamente ao ONT da MEO e configurar campos conforme exemplo em baixo :l

MEO Fibra (modo Single-Edge) > acesso a Dados/Internet + IPTV

➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) directamente ao ONT da MEO e configurar campos conforme exemplo em baixo :l

MEO Fibra (modo Single-Edge) > acesso a Dados/Internet + IPTV

➢ Ligar BOX de IPTV numa das portas do Switch do Router DrayTek e configurar conforme exemplo em baixo :l

MEO Fibra (modo Single-Edge) > acesso a Dados/Internet + IPTV + Voz

➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) a um Switch sem Gestão e configurar campos conforme exemplo anterior :

➢Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN –e- Portas VoIP/FXS) directamente ao ONT da MEO e configurar campos conforme exemplo em baixo :

Vodafone Fibra

➢ Nota : Huawei HG8247H (Fibra Nova Geração) – só via Duplo-NAT

Vodafone Fibra > apenas acesso a Dados/Internet

➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN) directamente ao ONT da Vodafone e configurar campos conforme exemplo em baixo :

Vodafone Fibra > apenas acesso a Dados/Internet + IPTV + Voz

➢ Ligar Porta WAN do Router DrayTek (modelo Broadband com porta Ethernet WAN –e- Portas VoIP/FXS) directamente ao ONT da Vodafone e configurar campos conforme exemplo em baixo :

• Set Quota • Action • Billing Cycle

WAN Budget

• Keep Tracking on the Usages

WAN Budget Limit

subnets with APs

Multi LAN Subnets / VLAN

• The Initial Status

Multi LAN Subnets/VLAN

• Port-Based

• Tag-Based

Multi LAN Subnets/VLAN• Tips to Configure Hybrid VLAN

- Reserve P1 for Administrator Management, no tag

Multi LAN Subnets/VLAN• Tips to Configure Hybrid VLAN

- Reserve P1 for Administrator Management, no tag - Reserve VLAN0 for other Vigor AP/Switch plug-n-play, no tag

• Enable LAN2 and LAN3

• Enable Inter-LAN Routing

• A Hybrid Example- P1 Administrator - P3 AP with 4 SSID

subnets with APs

Outline

Your Network Topology

Switch Management

• Existing VLAN Setup on Router:

• Trunk Port in Darker-Grey

Switch Management

• Auto Show All VID for each VLAN

Switch Management

• Auto Show All VID for each VLAN

• Select VLAN for each Port

• Finish!

Outline

subnets with APs

Supported VPN Protocol

• PPTP (TCP 1723)

• L2TP (UDP 1701)

• IPsec (UDP 500)

• L2TP over IPsec

• SSL VPN (TCP 443)

• mOTP

Supported VPN Protocols

None/Nice to Have/Must

LAN to LAN

L2TP/IPSec

SSLport configurable

LAN-to-LAN VPN

• VPN for more subnets

172.16.10.1/24 192.168.1.1/24

Headquarters

Dial-in

Branch 1

Dial-out

192.168.5.1/24

LAN-to-LAN VPN• Hub and Spokes

VPN172.16.10.1/24

192.168.1.1/24

172.16.20.1/24

Branch 2

VPN 172.16.30.1/24

172.16.40.1/24

Branch 3

Branch 4

Headquarters

Branch 1

LAN-to-LAN VPN

• VPN Trunk — Backup

172.16.10.1/24 192.168.1.1/24

Dial-inBranch 1

Dial-out

VPN 2WAN 1WAN 2

Headquarters

LAN-to-LAN VPN

• VPN Trunk — Load Balance

172.16.10.1/24 192.168.1.1/24

Dial-inBranch 1

Dial-out

VPN 2WAN 1WAN 2

Headquarters

None/Nice to Have/Must

Host to LAN

L2TP/IPSec

SSLport configurable

PC Android Mac iOS

DrayTek Smart VPN

Client

DrayTek Smart VPN

Client

Must Must

Remote Dial-In VPN

• Smart VPN Client for Android — SSL VPN

Outline

subnets with APs

General View

Configuration Page

Configuration Page• Set Criteria

- Protocol - Source / Dest IP - Port

Configuration Page• Choose Route

- Interface - Gateway

• Give Priority- Higher than Routing Table? - Higher than other Policies?

Configuration Page• NAT or Routing?

- Regardless of the original LAN type

• Failover to Interface / Policy• Gradual / Immediate Failback

Idea of Priority• Compare between Routing Table and Route Policies

Index Interface12

Src IP Dest IP

WAN2 LAN2 AnyWAN1 LAN2 8.8.8.8

Priority

100INTERNET

WAN1 WAN2

LAN1 Servers

LAN2 PC

INTERNET

WAN1 WAN2

LAN1 Servers

LAN2 PC 71

Index Interface12

Src IP Dest IP

WAN2 LAN2 AnyWAN1 LAN2 8.8.8.8

Priority

INTERNET

WAN1 WAN2

LAN1 Servers

LAN2 PC 72

Index Interface12

Src IP Dest IP

WAN1 LAN2 8.8.8.8WAN2 LAN2 Any

Priority200

• Priority First, Sequence Second

• Priority First, Sequence Second - With Same Priority, Sequence Matters

Route Policy Diagnose

8.8.8.8

• Send SIP Traffic to the Less-Jitter WAN

Load Balance

Route Policy with VPN• Local Users to Remote Server

- Only Specified LAN IP are eligible to send traffic via the VPN tunnel

Manager IPTV

INTERNET

VPN TunnelVPN Server

Netflix Servernetflix-380.vo.llnwd.net

Employees

DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 1

Technology

Produtos DrayTek - Roteadores, Switchs, Telefonia IP

Draytek VigorCMS Operational Manual V12

DrayTek Seminar in Greece, session 2

Vigor-2766 Draytek datasheet

DrayTek - Q4

DrayTek Seminar in Greece, Session 1

DrayTek V3200 QuickStartGuide v1.0

Draytek Telnet

Draytek Databook 2015

Case DrayTek - Solução Dslam

DrayTek Roadshow in Turkey, Session 2

Everbest (Draytek) Nov. 2011 VigorACS SI version

VDSL Setup Instructions - Draytek DV130 example

DrayTek Telnet Commands Reference Guide

Reliable Networking Solutions - DrayTek

Draytek Telnet Cmdrefguide 30

Ik1 draytek 2012_(5)

DrayTek & GreenBow IPsec VPN Configuration (pt)

DrayTek Telnet+Commands+V1.11

Draytek - Smart Monitor QuickStartGuide_V1.0