Draytek Vigor3910 Series User Manual page 304

Enable Validation Code in
Internet/LAN Access
Internet Access Control
Access List from the
Internet
Management Port Setup
Brute Force Protection
TLS/SSL Encryption Setup
294
If enabled, Vigor router will require users to enter a
validation code as shown in an image when they log in.
Allow management from the Internet – Select to allow
system administrators to login from the Internet, and then
select the specific services that are allowed to be remotely
administered.
Domain name allowed – If specified, only hosts belonging to
that domain name are allowed to manage the router over the
Internet.
Disable PING from the Internet - Select to reject all PING
packets from the Internet. For increased security, this
setting is enabled by default.
The ability of system administrators to log into the router
can be restricted to up to 10 specific hosts or networks.
Apply Access List to PING - When this option is checked and
Disable PING from the Internet is unchecked, pings
originating from the Internet will be accepted only if they
are from one of the IP addresses and/or subnet masks
specified below. This option has no effect if Disable PING
from the Internet is checked, such that no pings from the
Internet are accepted.
Index in IP Object - Enter the index of a configured IP
object.
IP / Mask - Show the IP address and/or subnet mask of the
selected IP object.
User Define Ports - Check to specify custom port numbers
for the Telnet, HTTP, HTTPS, FTP, TR-069 and SSH servers.
Default Ports - Check to use standard port numbers for the
Telnet and HTTP servers.
Any client trying to access into Internet via Vigor router will
be asked for passing through user authentication. Such
feature can prevent Vigor router from attacks when a hacker
tries every possible combination of letters, numbers and
symbols until find out the correct combination of password.
Enable brute force login protection – Select to enable
detection of brute force login attempts.
Maximum login failure – Specify the maximum number of
failed login attempts before further login is blocked.
Penalty period – Set the lockout time after maximum
number of login attempts has been exceeded. The user will
be unable to attempt to log in until the specified time has
passed.
Blocked IP List – Display, in a new browser window, IP
addresses that are currently blocked from logging into the
router.
Enable SSL 3.0 and TLS 1.0/1.1/1.2 – Check the box to
enable SSL 3.0/1.0/1.1/1.2 encryption protocols.
For improved security, the HTTPS and SSL VPN servers that
Vigor3910 Series User's Guide