Draytek Vigor2620 LTE Series User Manual page 312

Internet Access Control
LAN Access Control
Access List from the
Internet
Management Port Setup
Brute Force Protection
TLS/SSL Encryption Setup
300
Logout icon manually.
Allow management from the Internet - Enable the checkbox
to allow system administrators to login from the Internet.
There are several servers provided by the system to allow
you managing the router from Internet. Check the box(es) to
specify.
Disable PING from the Internet - Check the checkbox to
reject all PING packets from the Internet. For security issue,
this function is enabled by default.
Allow management from LAN - Enable the checkbox to allow
system administrators to login from LAN interface. There are
several servers provided by the system which allow you to
manage the router from LAN interface. Check the box(es) to
specify.
Apply To Subnet - Check the LAN interface for the
administrator to use for accessing into web user interface of
Vigor router.
You could specify that the system administrator can only
login from a specific host or network defined in the list. A
maximum of three IPs/subnet masks is allowed.
User Define Ports - Check to specify user-defined port
numbers for the Telnet, HTTP, HTTPS, FTP, TR-069 and SSH
servers.
Default Ports - Check to use standard port numbers for the
Telnet and HTTP servers.
Any client trying to access into Internet via Vigor router will
be asked for passing through user authentication. Such
feature can prevent Vigor router from attacks when a hacker
tries every possible combination of letters, numbers and
symbols until find out the correct combination of password.
Enable brute force login protection – Enable the protection
mechanism.
Maximum login failure – Specify the maximum number of
wrong password that client can try for logging to Vigor
router.
Penalty period – Set a period of time to block the IP address
which is used (by user or hacker) for passing through the user
authentication again and again but failed always. When the
time is up, Vigor system will unblock that IP and allow it to
access into Vigor router again.
Blocked IP List – Open another web page which displays
current blocked IPs.
Enable SSL 3.0 and / or TLS 1.0/1.1/1.2 – Check the box to
enable the function of SSL 3.0 and/or TLS 1.0/1.1/1.2 if
required.
Due to security consideration, the built-in HTTPS and SSL
VPN server of the router had upgraded to TLS1.x protocol. If
you are using old browser(eg. IE6.0) or old SmartVPN Client,
you may still need to enable SSL 3.0 to make sure you can
Vigor2620 Series User's Guide