Data Center is our focus

We help to build, access and manage your datacenter and server rooms

Structure Cabling

We help structure your cabling, Fiber Optic, UTP, STP and Electrical.

Get ready to the #Cloud

Start your Hyper Converged Infrastructure.

Monitor your infrastructures

Monitor your hardware, software, network (ITOM), maintain your ITSM service .

Our Great People

Great team to support happy customers.

Friday, December 13, 2013

Vigor2925 akan menggantikan Vigor2920

Vigor2925 akan menggantikan Vigor2920

Vigor2925 Series is the IPv6 ready dual WAN broadband security firewall router. It ensures the business continuity for today and the future IPv6 network. Its two gigabit Ethernet WAN port can accept various high-speed Ethernet-based WAN links via FTTx/xDSL/Cable. The 2 USB ports are for 3G/4G LTE mobile broadband access. With the multi-WAN accesses, Vigor2925 routers support bandwidth management functions such as failover and load-balancing, making them ideal solutions for reliable and flexible broadband connectivity for the small business office.

The specifications cover many functions that are required by modern day businesses, including secure but easy to apply firewall, comprehensive VPN capability, Gigabit LAN ports, USB ports for 3G/4G mobile dongles, FTP servers and network printers, VLAN for flexible workgroup management, and much more.

 Vigor2925 2

Dual Gigabit Ethernet WAN port for failover and load-balancing

The Gigabit Ethernet WAN ports cater for any type of Internet access, including FTTx, xDSL and Cable fitting your local infrastructure. You can then use both WAN 1 and WAN 2 for failover, ensuring that you will always have an access to the Internet even if one of the WAN fails, or for load-balancing so the 2 WANs share Internet traffic requirements of your organization.

 

2 USB 2.0 ports for 3G/4G LTE mobile, FTP drive and network printers
The two USB ports can be used for the connection of 3G/4G mobile broadband dongle, FTP drive and network printers. A 3G/4G mobile broadband connected to one of the 2 USB ports can be used as a second WAN for bandwidth management. The USB WAN interface can also be the primary access if the local fixed line service hasn't been deployed yet. You can have 2 USB 3G/4G dongles connected to the USB ports, and assign one of these (WAN 3) to be the primary access and the other (WAN 4) as the fail-over back-up. And, you have the flexibility to convert back to fixed line services when these become available.

 

Object-based SPI Firewall for network security
Like all DrayTek routers, Vigor2925 Series supports Object-based SPI firewall and CSM (Content Security Management). The firewall allows setting of Call/Data Filters and DoS/DDoS prevention, whereas the CSM covers IM/P2P/Protocol filter, URL Content Filter and Web Content Filter.

With Objects settings, you can pre-define objects or groups for IP, service type, keyword, file extension, etc., and mix these with the Time Scheduler or the VLAN groups as required. Altogether this gives you peace of mind whether you are guarding a complicated network or a small office.

 

VLAN for secure and efficient workgroup management
Not only with 5 x Gigabit LAN ports for the needs of unified communication applications, such as CRM server, FTP server, Mail server, the Vigor2925 Series has the comprehensive VLAN function for management. The VLAN functions allow 5 subnets to be allocated for multiple workgroups. When combined with the NAT and firewall functions, you can design corporate network groups in terms of traffic, security level, priority settings, etc.

Applications such as VoIP, IPTV and Wireless SSID can also be integrated into VLAN tags and firewall objects, giving you the maximum flexibility in designing workgroups for your organization.

 

50 VPN tunnels; hardware based with comprehensive secure protocols
Up to 50 VPN tunnels are supported, each can be set to IPsec/PPTP/L2TP/L2TP over IPsec protocols, with hardware encryption of AES/DES/3DES. This level of VPN capability covers the requirements of most businesses for secure inter-office and remote data accessing. For the site-to-site application, Vigor2925 Series offers VPN load-balancing & backup to deliver the high performance and reliable remote access. For client-to-site, remote dial-in users can use up-to 25 SSL VPN tunnels to avoid the local network infrastructure limitation, , there are 64 profiles on WUI, but it only allows 25 concurrent tunnels. 

 

Multi-subnet
With the 5-port Gigabit switch on the LAN side provides extremely high speed connectivity for the highest speed local data transfer of any server or local PCs. The tagged VLANs (802.1q) can mark data with a VLAN identifier. This identifier can be carried through an onward Ethernet switch to specific ports. The specific VLAN clients can also pick up this identifier as it is just passed to the LAN. You can set the priorities for LAN-side QoS. You can assign each of VLANs to each of the different IP subnets that the router may also be operating, to provide even more isolation. The said functionality is tag-based Multi-subnet.

Each of the wireless SSIDs can also be grouped within one of the VLANs.

 

AP Management 
APM provides the 3-step installation, plug-plug-press, and then wireless clients are able to enjoy surfing internet. Moreover, through the unified user interface of Draytek routers, the status of APs is clear at the first sight.

 

Supports Smart Monitor traffic report software
Vigor2925 series routers support Smart Monitor, DrayTek's proprietary network traffic reporting software, for up to 50 users. This software monitors all incoming and outgoing network traffic, categorizes these into various activity and data types and provides statistics in various report types, so network administrators can monitor network activities for planning and/or fault locating purposes.

 

Embedded IEEE 802.11n WLAN (2.4GHz)

Vigor2925n has a built-in IEEE 802.11n WLAN Access Point. The Wi-Fi access is also protected by security and encryption protocols, including WEP/WPA/WPA2, MAC Address Control, Multiple SSID, Wireless LAN Isolation, Wireless VLAN and 802.1x Authentication.

The Wireless Rate Control function allows connection rates for each network device to be individually managed as required. The WMM (Wi-Fi Multi-Media) function allows setting of priority levels for various applications: voice, video, data, etc., so time-critical applications can be assigned higher priority levels. Furthermore, WDS (Wireless Distribution System) function allows you to extend the wireless coverage distance easily.

 

Flexible Network Management

Like all DrayTek routers, Vigor2925 Series routers support comprehensive network management functions. For example, you can set username/password and directory/file access privilege for individual users as required. There are also routing/network tables, system log, debugging utilities, etc., making network administrators' jobs easy.

Other management features include SNMP, TR-069 and TR-104. TR-069 can be utilized with DrayTek's VigorACS SI management software to remotely monitor and manage the Vigor2925 Series.

 

Tuesday, December 10, 2013

ManageEngine to Launch Social Networking Software for IT Teams in Large Enterprises and Data Centers

ManageEngine to Launch Social Networking Software for IT Teams in Large Enterprises and Data Centers

Social IT Plus Helps IT Teams Collaborate in Real Time on a Social Wall; On-Premise Software to Debut at DCIM Meetup, Dallas
  • Provides a cascading, Facebook-like wall for threaded discussions
  • Integrates with ManageEngine OpManager and tools from HP, IBM, Microsoft and CA via APIs
  • Posts user-triggered actions, performance data and alarms on the wall
  • View live demo running at http://ow.ly/rv0Tt
PLEASANTON, Calif. — December 09, 2013 — ManageEngine, the real-time IT management company, today announced it is launching Social IT Plus, private social networking software for IT departments, at the DCIM Meetup in Dallas on December 10, 2013. Social IT Plus is on-premise software that helps IT shops at large enterprises and data centers collaborate in real time by establishing a one-stop, cascading wall for real-time display of IT infrastructure health. A live demo of Social IT Plus is available online athttp://demo.socialitplus.com/.
Large enterprises and data centers expand their IT very quickly, leveraging technologies such as virtualization, software-defined networking (SDN) and software-defined data center (SDDC). This mandates a communication platform that is superior to email, a platform that is dynamic and capable of pulling valuable information from IT management tools, in real time.
"We have bridged the long-standing gap between IT management tools and a communication platform with Social IT Plus," said Dev Anand, director of product management at ManageEngine. "Now, admins have a way to collaborate on issues in real time and improve the mean-time-to-repair."

Inside Social IT Plus

Social IT Plus is the downloadable, on-premise version of the company's proven, SaaS-based social networking service for IT teams. To prove the power of Social IT Plus, ManageEngine has integrated it with OpManager, the data center infrastructure and network monitoring software that can monitor 50K devices from a single installation. The integration lets IT teams share a particular page - such as a device snapshot page or alarm details page of OpManager - on the Social IT Plus wall to help the team discuss the device's performance, share troubleshooting steps and fix issues without wasting time.
Social IT Plus reduces communication barriers between IT team members. The social network is very simple to use and unlike email, provides a threaded, discussion-like UI that makes it easy to follow extended conversations that include multiple participants. IT staffers can start discussions, share videos and articles, and trigger a script to post its status via REST APIs offered by Social IT Plus. Leveraging these APIs, IT admins can integrate it with IT management solutions from HP, IBM, CA and Microsoft. Alarms and performance reports from these solutions can be shared on the wall.
Social IT Plus will be launched at the DCIM Meetup, Dallas, where most of the data center admins and IT admins from large enterprises will be participating. The DCIM Meetup is a social event sponsored by ManageEngine that gives data center admins and IT admins an opportunity to socialize and discuss their day-to-day, IT-related problems and share best practices.

Pricing and Availability

Social IT Plus will be available for download beginning December 10, 2013. Social IT Plus prices start at $495 for two technicians per year. Additional technician licenses cost $95 per user per year. Users can register athttp://www.manageengine.com/social-IT/download.html to receive the download link.
A six-month free license for Social IT Plus and OpManager Large Enterprise Edition will be provided for all the attendees of DCIM Meetup, Dallas.
For more information on Social IT Plus, please visit http://www.manageengine.com/social-IT/index.html. For more information on ManageEngine, please visit http://buzz.manageengine.com/; follow the company blog athttp://blogs.manageengine.com/, on Facebook at http://www.facebook.com/ManageEngine and on Twitter at@ManageEngine.

About Social IT Plus

Social IT Plus is an on-premise social network for data centers and large enterprises. It allows real-time collaboration and unites IT folks and IT management tools on a common wall. It provides a Facebook-like wall for threaded discussions, which makes it preferable over email. It can be integrated with ManageEngine OpManager for pulling out real-time data center/IT performance data and alarms. For more information on Social IT Plus, please visit http://www.manageengine.com/social-IT/index.html.

About ManageEngine

ManageEngine delivers the real-time IT management tools that empower an IT team to meet an organization's need for real-time services and support. Worldwide, more than 72,000 established and emerging enterprises - including more than 60 percent of the Fortune 500 - rely on ManageEngine products to ensure the optimal performance of their critical IT infrastructure, including networks, servers, applications, desktops and more. ManageEngine is a division of Zoho Corp. with offices worldwide, including the United States, India, Japan and China. For more information, please visit http://buzz.manageengine.com/; follow the company blog athttp://blogs.manageengine.com/, on Facebook at http://www.facebook.com/ManageEngine and on Twitter at@ManageEngine.

Bagaimana membuat load balancing VPN dgn Draytek Vigor ?



How to Configure Load Balance for VPN?

This article explains how to configure the Load Balance rules for VPN. We want PC1 to be able to access the IPTV service (IP address 88.88.88.88, which is a limited service for US IP addresses only) via VPN, while PC2 isn't allowed to pass through VPN to access the IPTV service.

 

Network diagram

1.network diagram

In the diagram, Vigor2850 is the router in our end, while Vigor2820 is in the remote end being using by the ISP in the U.S.

 

The information of Vigor2820

2.Vigor2820

 

Settings of Vigor 2850

3.Vigor2850

  

Before setting, please make sure the VPN tunnel is up. In this example, we name the VPN as "IPTV" in Vigor2850.

4.VPN Connection Status

 

  1. Please go to WAN >> Load-Balance Policy to create a profile to allow PC1 accessing the IPTV service via the VPN Profile "IPTV".

    a. Choose Binding Interface as "1.IPTV"

    b. Set Src IP Start/End as a single IP "192.168.1.10", which is the IP of PC1.

    c. Set Dest IP Start/End as a single IP "88.88.88.88", which is the IP of IPTV service.5.Load Balance Policy

  

  1. Applying with the "OK" button, and the load balance rule will be set well. Let us do some tests on PC1 (192.168.1.10) and PC2 (192.168.1.11).

    a. Tracert Test on PC1 (192.168.1.10).

    6.test on PC1

    In the section of tracert 88.88.88.88 :

      i. Hop 1(192.168.1.1) is the LAN IP of Vigor2850.

     ii. Hop 2 (192.168.171.1) is the LAN IP of Vigor2820.

    iii. Hop 3 (168.95.98.254) is the Gateway IP of Vigor2820.

    It means the packets were sent through the VPN tunnel to Vigor 2820 from Vigor2850.

     

    b. Tracert Test on PC2 (192.168.1.11).

    7.test on PC2

    In the section of tracert 88.88.88.88 :

     i. Hop 1(192.168.1.1) is the LAN IP of Vigor2850.

    ii. Hop 2 (60.250.189.254) is the Gateway IP of Vigor 2850.

    It means the packets weren't sent through the VPN tunnel to Vigor2820 from Vigor 2850.

Bisa online via VPN ke cabang-cabang dgn biaya murah

Punya banyak cabang tapi ingin tetap online dengan pusat ? Gunakan jaringan speedy dan pasang draytek Vigor. Kemudian setup VPN dengan VPN Management ini.


How to Use Central VPN Management

VPN management is really a difficult work when we want to build VPN connections between several VPN routers. On each router, we need to make a lot of settings, eg. Pre-Shared key, subnet, encryption mode... and so on. Once setting the wrong parameters, it makes us go insane to find out what happens. What if we have to manage lots of routers? Epilepsy! Aren't we?

Well, thanks to Central VPN Management, it becomes simple to manage VPN connections. WithCentral VPN Management, we can setup VPN connections with just one click. We can backup or restore configuration, and we can upgrade firmware as well. In following example, we will have Vigor2925, Vigor2850, and Vigor3200 as CPE(which means Customer Premise Equipment). We will use Vigor2860 to manage VPN network. With CVM on Vigor2860, we can manage 8 CPE in the meanwhile.

topology

There will be two notes,
A. How to manage VPN network
B. What's CPE maintenance

 

 

Part A. How to manage VPN network

Before managing VPN network, it's necessary to set TR-069 because CPE will send messages to CVM with TR-069 technology. Besides, we have to enable HTTP Port so that CPE can access CVM. In following case, Vigor3200 and Vigor2860 are taken for example. For step1 to step 7, we will see detail introduction about CPE settings and CVM settings. For step 8 to step 15, we will take a look on how to manage VPN status. 

  1. With TR-069, it's easy for servers to monitor clients. So we should know how to setup TR-069 first. However, before setting TR-069, it's necessary to see CVM's WAN IP address. In this case, we regard Vigor2860 as CVM.
    To see the WAN IP address of Vigor2860,

    a-1

    a. Click Online Status
    b. Click Physical Connection
    c. Just see WAN 2 Status and IP address will show in the figure as well

     

  2. The first and the only step of setting CVM,

    a-2

    a. Click Central VPN Management 
    b. Click General Setup
    c. Enable CVM Port and type 9000 in the column(In this case, we take 9000 for example. Default setting is 8000.) 
    d. Type UsernamePassword. (Attention! The information must be as same as CPE's.)
    e. Choose the correct WAN interface from WAN IP for Remote Connection
    f. Type 192.168.1.0 / 255.255.255.0 as Local Subnet (just exactly which Vigor2860 belongs to)
    g. Press OK button

     

  3. To enable HTTP Port,(HTTP Port must be enable to allow CVM Maintenance),

    a-3

    a. Click System Maintenance
    b. Click 
    Management
    c. Tick 
    Enable button
    d. Press 
    OK button

     

  4. Now we know the WAN IP, Username, and Password of Vigor2860. So we can start to set CPE's TR-069 now.(Vigor3200)
    To set TR-069,

    a-4

    a. Click System Maintenance
    b. Click 
    TR-069
    c
    Type http://x.x.x.x:yy/ACSServer/services/ACSServlet in the URL column. (Please replacex.x.x.x with Vigor2860's WAN IP/domain name, yy with CVM port)Type Username and Passwordwhatever we setup in Vigor2860.
    d. Click CPE Client 
    Enable
    e. Press 
    OK button

    After finishing all above settings, now we want to establish VPN connections by dialing to Viogr3200. Before establishing VPN connections, the first thing we need to do is add Vigor3200 into Managed Devices List.

     

  5. As we see, Vigor3200 appears in the Unmanaged Devices List. We have to add it in theManaged Devices List so that we can manage it.
    To manage Vigor3200,

    a-5

    a. Click Central VPN Management
    b. Click CPE Management
    c. Tick the button to add Vigor3200 into Managed Device List. Type the name of the device inDescription Name and the place where the device is in Location.
    d. Press Add Button

     

  6. We can see Vigor3200 shows in Managed Devices List with its name and IP address.

    a-6

     

  7. Now Vigor3200 is added in the managed list. If we want to get more information about it, we can double click the item. 
    The message box like below will appear immediately. 

    a-7

     

  8. Now we complete all settings of CPE and CVM. Now we can try dialing to Vigor3200 in PPTP to establish VPN connection.

    a-8

    a. Click Central VPN Management
    b. Click VPN Management
    c. Click Vigor3200 
    d. Press PPTP button

     

  9. Please wait for a few seconds and refresh the page. We will see detail information about VPN connections.

    a-9

     

  10. After pressing PPTP button, it will create a profile automatically. We can see detail information about VPN profiles in LAN to LAN Profiles. Both CPE and CVM will create profiles in LAN to LAN Profiles automatically. With CPE dial-in and CVM dial- out, CPE and CVM can establish VPN connections.

    a-10

    a. Click VPN and Remote Access
    b. Click LAN to LAN 
    c. Index 1 indicates VPN connection has already been established successfully

    Of course we can choose either PPTP or IPsec- just whatever we like. The settings of either PPTPor IPsec is fixed-the username and password are given by system automatically. If we want to select the settings according to personal preference, we can do it with Advanced function. In following case, we want to change PPTP to IPsec with Advanced function.

     

  11. To change encryption according to our preferences,

    a-11

    a. Click Central VPN Management
    b. Click VPN Management
    c. Press Advanced button

     

  12. A message box like following will appear immediately.
    To select IPsec,

    a-12

    a. Choose the correct device
    b. Choose IPsec Tunnel
    c. Type IKE Pre-Shared Key(just whatever we want)
    d. Press OK button

     

  13. Please wait for a few minutes after finishing all the settings. We can see whether new settings has already applied to the system.
    To see whether new settings are done successfully or not,

    a-13

    a. Click VPN and Remote Access
    b. Click LAN to LAN
    c. Please roll the window and take a look on part 3(Dial-In Settings). We find IPsec Tunnel has been ticked automatically-which means new settings apply to the system.

     

  14. Please repeat step1 to step 6 to set TR-069 on each CPE. In this case, we still have two more CPE to set- Vigor2925 and Vigor2850. It's really convenient for us to monitor every router in VPN network. All information can be seen clearly.

    a-14

     

  15. Besides application above, there's another interesting function. We can observe the locations of CPE on Google Map! As we see the figure below, there are three points on the map. Once we move mouse to the point, a message box will appear immediately. 
    To see the distribution of CPE on the map,

    a-15

    a. Click Central VPN Management
    b. Click CPE Management
    c. Click Google Map

     

After all steps in part A, we are familiar with how to use CVM function. However, there are other functions we can use. For example, we can schedule CPE to store configuration, backup configuration, and update firmware. In part B, we will take Vigor3200 for example to see detail introduction about CPE Maintenance.

 

 

Part B. What's CPE maintenance
In part B, we want to schedule Vigor3200 to backup configuration once a day. We want it backup configuration on 12:30 on weekdays since 12:00~13:00 is our rest time. CPE can backup configuration during that time and it will not affect out work. The very first thing is that we should notice USB device is certainly connected well since backup configuration will be stored in USB device.

  1. First we need to create schedule,

    b-1

    a. Click Applications
    b. Click Schedule
    c. Click Index 1

     

  2. To setup schedule,

    b-2

    a. Tick Enable Schedule Setup
    b. Select the exact Date we want(In this case, we set Start Date as 2013.9.4, Start Time as 12:30, and Duration Time as 5. Attention! It's necessary to setup Duration in case of offline. Long duration gives router more time to retry connect once CPE lose connection with CVM)
    c. Keep the default settings(In this case, we want to schedule CPE weekdays. Of course this setting according to personal preference.)

     

  3. To begin setting CPE Maintenance,

    b-3

    a. Click Central VPN Management
    b. Click CPE Management
    c. Click the middle choice-CPE Maintenance

     

  4. To start to create a new profile,

    b-4

    a. Make sure that USB disk is connected because backup configuration is stored in it.
    b. Click Index 1

     

  5. Please complete the whole setting,

    b-5

    a. Type Profile Name
    b. Tick Enable button
    c. Select the exact MAC Address of Vigor3200. 
    d. Choose the Action Type.(In this case, we choose Config Backup)
    e. Type 1(which means Index 1 in schedule will apply to the system)
    f. Press OK button

     

  6. We can also check the backup configuration in File Explorer.

    b-6

    a. Click USB Application
    b. Click File Explorer
    c. Click cvm_b0bb29(CVM's MAC Address)

     

  7. Click 00507F7A02E8(CPE's MAC Address) to continue

    b-7

     

  8. Seeing this page means backup configuration has already successfully stored in USB device. Moreover, we can see that the name of the file is determine by date. For example, "20130904_120006" means the file is created on 12:30"00 on 2013.9.4. So all backup configuration must list in order and we can manage easily! How convenient! 

    b-8

     

  9. Now we can see whether CPE backups the configuration successfully or not.

    b-9

    a. Click Central VPN Management
    b. Click Log&Alert
    c. Click Log
    d. The message above indicates CPE stores the configuration successfully

 

To summary, it makes server easier to manage VPN connections with CVM. Even there are a lot of CPE, we can take it with ease. Vigor2860 CVM can manage maximum 8 CPE. With CVM, we will not be afraid of managing huge VPN network anymore!