Draytek Vigor3900 User Manual page 435

Vigor3900 Series User's Guide
VoIPon www.voipon.co.uk sales@voipon.co.uk Tel: (0)330 088 0195 Fax: +44 (0)1245 808299
4 . 1 4 . 6 . 2 F a i l t o B a n
4 . 1 4 . 6 . 2 F a i l t o B a n
When someone tries/fails to login the router many times, Vigor router system will block the
network connection for a while to protect system. At present, five protocols (Web User
Interface, SSH, FTP, Telnet, PPTP/SSL) are available for configuration to avoid malicious
attacks.
Available parameters are listed as follows:
Item
Enable Fail to Ban
Web UI/SSH/FTP/
TELNET/PPTP/SSL
Blocked IP History
Current Blocked IP
Reset Blocked Records
Apply
Cancel
Description
Enable the function to protect Vigor system while being
attacked by malicious accounts and passwords.
Enable – Enable the function of Fail to Ban via different
protocols (Web UI/SSH/FTP/TELNET/PPTP/SSL).

Login Max-failed Times – The number typed here
means the maximum logging times allowed for a group of
user account and password trying to login Vigor router.

Penalty Time – This field is used to configure the
blocking time. The default setting is 60 seconds. It
means, when a user tries to login Vigor router with a user
account for many times (defined in Login Max-failed
Times) but fails, he/she will be prohibited to login for a
period of time. When the penalty time limit is up, he/she
is allowed to login into Vigor router again.
Disable - Disable the function of Fail to Ban for Web
UI/SSH/FTP/TELNET/PPTP/SSL.
Display the history of the IP address blocked.
Display the IP address(es) blocked currently.
Click this button to reset the record for IP blocked.
Click this button to save the configuration.
Click it to discard the settings configured in this page.
427