background image

Vigor2500V series 

20-1 

 

Chapter  20 

Management  Setup 

 

 

 

20.1  Introduction 

By  default,  the  router  may  be  configured  and  managed  through  any 
Telnet client or Web browser running on any operating system. There is 
no  requirement  for  additional  software  or  utilities.  However,  for  some 
specific circumstances, you shall have authority of deciding whether you 
would  like  to  allow  changing  the  server  port  numbers  for  the  built-in 
Telnet or HTTP server, creating access control lists to protect the router, 
or rejecting the system administrator to login from the Internet.    i.e. you 
can  allow  or  disallow  management  from  the  Internet.    For  example,  a 
technician  or  support  person  will  be  able  to  access  the  router’s 
management menus and adjust any settings or view the router’s status.     

 

The management include the remote management from web and telnet 
interfaces.    Consequently,  it  is  extremely  important  to  set  an  admin 
password  for  the  router,    otherwise  your  router  can  be  accessed  and 
seen by anyone in the world.    From the menu, you can set the rule to the 
router not to reply to pings from the Internet; this offers your router a little 
bit extra security because someone is scanning ranges of IP addresses 
searching for hosts as your public IP address will then not respond to a 
ping request. 

 

 

Summary of Contents for Vigor2500V

Page 1: ......

Page 2: ... protect your computers Make Receive Voice calls over your ADSL connection using a regular telephone handset Integration with your existing phone line POTS with automatic failover during power cuts Free Voice over IP phone calls to other VoIP users ISDN backup remote access ISDN loop through are available on Vigor2500Vi series which have ISDN interface Compatible with Windows and Mac OS ...

Page 3: ... Vigor2500V will dial instead of the SIP account if you lose ADSL access or power to the Vigor2500V Hence the PSTN line can act as a lifeline backup mechanism for VoIP calls The lifeline mechanism is activated automatically but can also be manually configured Because there is ISDN interface on the Vigor2500Vi series you can use the ISDN line as phone line as well as Internet remote access dial bac...

Page 4: ...Preamble of Vigor2500V series 3 Annex A countries Annex B countries ...

Page 5: ... mail server POP3 Flexible URL Content Filtering URL blocking by user defined keywords Preclude web surfing from using directly IP address Java ActiveX cookies proxy blocking Executable compressed multimedia files blocking Time schedule support Application Support Windows Messenger Yahoo Messenger MSN Messenger V6 0 NetMeeting ICQ2001b 2002a most online gaming and other multimedia applications UPn...

Page 6: ...Preamble of Vigor2500V series 5 Robust Firewall E mail Detection Peer to Peer VoIP communications ...

Page 7: ...Preamble of Vigor2500V series 6 Vigor2500V series with the services of ITSP Before you can set up the router for SIP you need to open an account with a SIP registrar e g IPTEL DrayTEL www draytel org ...

Page 8: ...Firewall blinking When encountering DoS attacks green A normal 100Mbps connection is through its corresponding port orange A normal 10Mbps connection is through its corresponding port LAN P1 P2 P3 P4 blinking Ethernet packets are transmitting Interface Description PWR Connect the included power adapter to the power outlet Line Connect to the analog phone line for PSTN life line Phone Connect to th...

Page 9: ...acks green A normal 100Mbps connection is through its corresponding port orange A normal 10Mbps connection is through its corresponding port LAN P1 P2 P3 P4 blinking Ethernet packets are transmitting Interface Description PWR Connect the included power adapter to the power outlet Line Connect to the analog phone line for PSTN life line Phone Connect to the analog phone for VoIP communication ADSL ...

Page 10: ...s Quick Installation Guide CD Manual and Utilities UK type power adapter EU type power adapter USA Taiwan type power adapter AU NZ type power adapter RJ 45 Ethernet RJ 11 to RJ 11 Annex A B RJ 11 to RJ 45 Annex B RJ 45 to RJ 45 ISDN for Vigor2500Vi only ...

Page 11: ...onnect one port of 4 port switch to your computer with a RJ 45 cable 3 Connect the attached power adapter to the power port 4 Check the ACT ADSL and LAN LEDs to assure network connections Regarding detailed LED status explanation please refer to section 1 3 Connection scenario is shown as below The splitter or microfilter is the optional accessories There are some variant connection in Annex A and...

Page 12: ...ion contained in this document is subject to change without notice Should you have any inquiries please feel free to contact our support via E mail Fax or phone For the latest product information and features please visit our website at www draytek com We apply the sunshine smile face of VigorBoy to some chapters in order to remind you of your special attention Should you have any queries and sugg...

Page 13: ...bed stored in a retrieval system or translated into any language without written permission from the copyright holders Trademark Microsoft is a registered trademark of Microsoft Corp Windows and Windows 95 98 98SE Me NT XP 2000 are trademarks of Microsoft Corp Other trademarks and registered trademarks of products mentioned in this manual may be the properties of their respective owners and are on...

Page 14: ...for either parts or labor to whatever extent we deem necessary to restore the product to proper operating condition Any replacement will consist of a new or remanufactured functionally equivalent product of equal value and will be offered solely at our discretion This warranty will not apply if the product is modified misused tampered with damaged by an act of God or subjected to abnormal working ...

Page 15: ...istered Owner Online web registration at www draytek com is preferred Alternatively fill in the registration card and mail it to the address found on the reverse side of the card Registered owners will receive future product and update information ...

Page 16: ...er yourself Do not place the router in a damp or humid place e g a bathroom The router should be used in a sheltered area within a temperature range from 5 to 40 Celsius Do not expose the router to direct sunlight or other heat sources The housing and electronic components may be damaged by direct sunlight or heat sources Keep the package out of reach of children When you would like to dispose of ...

Page 17: ...er relevant provisions of R TTE Directive 1999 5 EEC The product conforms to the requirements of Electro Magnetic Compatibility EMC Directive 89 336 EEC by complying with the requirements set forth in EN55022 Class B and EN55024 Class B The product conforms to the requirements of Low Voltage LVD Directive 73 23 EEC by complying with the requirements set forth in EN60950 The ISDN interface of Vigor...

Page 18: ...enerates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is not guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment o...

Page 19: ...er support Product model and serial number Warranty information Date that you received your router Brief description of your problem Steps that you may take to solve it and their associated SysLog messages The information of customer support and sales representatives are support draytek com and sales draytek com respectively ...

Page 20: ...cations 1 5 CHAPTER 2 Online Status 2 1 System status 2 2 LAN status 2 2 WAN status 2 2 ISDN status 2 3 ADSL status 2 4 CHAPTER 3 Internet Access Setup 3 1 PPPoE PPPoA 3 2 MPoA 3 3 MultiPVC 3 5 Check Online Status 3 6 CHAPTER 4 LAN TCP IP and DHCP Setup 4 1 DHCP Server configuration 4 4 DNS operation 4 5 CHAPTER 5 NAT Setup 5 1 Introduction 5 1 NAT Setup 5 2 Setting of Port Redirection Table 5 3 S...

Page 21: ...uction 6 1 Overview of Firewall 6 2 General Setting of Firewall 6 4 Editing the Filter Set 6 5 Editing the Filter Rule 6 6 Example of restricting unauthorized Internet access 6 9 Supplement A DOS Prevention 6 11 Supplement B URL Content Filtering 6 17 CHAPTER 7 Dynamic DNS Setup 7 1 Introduction 7 1 Configuration 7 2 Validation and Trouble Shooting 7 4 CHAPTER 8 Call Schedule Setup 8 1 Introductio...

Page 22: ...tic PSTN_LoopThrough lifeline Settings 12 5 Automatic ISDN_LoopThrough Settings 12 5 Manual PSTN_LoopThrough lifeline Settings 12 6 Manual ISDN_LoopThrough Settings 12 6 SIP Related Settings 12 7 Codec RTP DTMF Settings 12 9 Example of Peer to Peer 12 10 Example of Calling via SIP server via ITSP services 12 11 Voip Call Status 12 12 CHAPTER 13 ISDN only for Vigor2500Vi series 13 1 Introduction 13...

Page 23: ...ntroduction 17 1 BackUp Configuration 17 1 Restore Configuration 17 3 CHAPTER 18 Syslog 18 1 Introduction 18 1 Configuration 18 2 Example of Configuration 18 3 CHAPTER 19 Time Setup 19 1 Introduction 19 1 Configuration 19 2 Set Time Clock via Web Configurator adopt computer time 19 2 Set Time Clock via Internet adopt Time Server 19 3 CHAPTER 20 Management Setup 20 1 Introduction 20 1 Configuration...

Page 24: ...n 21 1 Reboot System 21 1 Firmware Upgrade TFTP Server 21 2 CHAPTER 22 Diagnostic Tools 22 1 Introduction 22 1 PPPoE PPPoA users 22 2 If you have ISDN port 22 2 Trigger Dial out Packet Header 22 3 Routing Table 22 5 ARP Cache Table 22 4 DHCP Table 22 5 NAT Port Redirection Table 22 5 NAT Active Session Table 22 6 ...

Page 25: ...from the router tool of firmware CD enclosed with the package As considering the convenience we suggest you to set up the Internet access via Quick Start Wizard built in within the web configurator Configure Your Router via Quick Start Wizard Step1 Open the web browser on a PC which is connected to the router and then link to the gateway IP address of the router the default setting is 192 168 1 1 ...

Page 26: ... Quick Start Wizard is switched on Enter login password Then click Next to continue Step 4 Select the value of connecting to your subscribed ISP Note If your router is provided by your ISP you might not be able to allow change any settings to switch to another ISP You shall check your contract clauses requested by your ISP before you would like to change settings or select new ISP ...

Page 27: ...ffic the router will close the connection to the ISP because there is no demand Idle timeout is determined by there being no Internet traffic for a period for example 10 minutes You can select 0 zero for no timeout the router stays connected once the router logs in You can also select 1 minus one which selects Always On the router will try to keep a permanent connection The 0 and 1 settings are on...

Page 28: ... to get Quick Start Wizard from the CD after you already followed the previous procedure and get on the Internet access If you do not want to follow previous procedure you still can use Quick Start Wizard from the router CD You shall firstly get into the router tool and install the Quick Start Wizard ...

Page 29: ...ill read Router is now configured Our Vigor2500V firstly apply efficient codecs designed to make the best use of available bandwidth but Vigor2500V also equips with automatic QoS assurance QoS Assurance assists to assign high priority to voice traffic via Internet You will always have the required inbound and outbound bandwidth which is prioritized exclusively for Voice traffic over Internet but y...

Page 30: ... LAN and WAN interface Also you could use the status page to know the Internet access status 2 2 Online Status Descriptions Click Online Status to open the Online Status page Here in we use an example to explain the Online Status In the example as shown in the following picture the router is working on Dynamic IP mode to access the Internet ...

Page 31: ...nd seconds respectively 2 2 2 LAN Status IP Address IP address of the LAN interface TX Packets Total number of transmitted IP packets since the router was powered on RX Packets Total number of received IP packets since the router was powered on 2 2 3 WAN Status Mode Indicate which ADSL access mode is active Depending upon the ADSL access mode you may see PPPoE PPPoA or MPoA GW IP Addr The gateway ...

Page 32: ...Connection The ISP active remote ISDN dial in user or LAN to LAN connection name and also the IP address for each B channel TX Pkts Total number of transmitted IP packets during this connection session TX Rate Transmission rate in characters per second cps for outgoing data RX Pkts Total number of received IP packets during this connection session RX Rate Reception rate in characters per second cp...

Page 33: ...irmware ATM Statistics TX Blocks Total number of transmitted ATM Blocks RX Blocks Total number of received ATM Blocks Corrected Blocks Total number of received ATM Blocks which is corrupted but corrected Uncorrected Blocks Total number of received ATM Blocks which is corrupted but uncorrected ADSL Status Mode Indicate which modulation mode is used G DMT G Lite or T1 413 State Indicate the DSL line...

Page 34: ...nt modes e g PPPoE PPPoA and MPoA The following is the setting path for this function Internet Access Setup PPPoE PPPoA MPoA RFC 1483 2684 Multi PVCs For ADSL access users you need to know what kind of internet access is provided by your ISP The PPPoE PPPoA and MPoA RFC 1483 2684 are mutually exclusive Note We recommend you to consult with your dealer or ISP before you would like to run Multi PVC ...

Page 35: ...SP If you want to connect to Internet all the time you can check Always On PPPoE Pass through The Vigor router offers PPPoE dial up connection Besides you also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router For Wired LAN Check this checkbox The PPPoE connection from local clients to the ISP goes straight through wired LAN ...

Page 36: ...P RIP Protocol Routing Information Protocol is abbreviated as RIP RFC1058 specifying how routers exchange routing tables information Enable RIP Check this checkbox The router periodically exchanges entire routing tables If you have multiple public IPs they are assigned from the WAN interface Click WAN IP Alias the following windows will be pop up You can assign additional IPs on the page and click...

Page 37: ...Internet Access 3 4 ...

Page 38: ...ISP or Telco Enter your allocated DSL parameters according to the information provided by your ISP QoS Type means QoS offered by ATM default UBR is recommend We recommend you to consult with your dealer or ISP before you would like to run Multi PVC In most cases you do not need to activate any settings on the menu of multi PVC because our MultiPVC is currently with framework for ISP or Telco to in...

Page 39: ...rt Wizard You can also be guided by Quick Start Wizard to detect ATM DSL setting Please follow the instructions to operate If your country is not on the list it may take longer time to detect Internet Statistics You can know the DSL status via status monitor ...

Page 40: ...few public IP addresses for your local network You could use one IP address for your router and the 2nd IP address subnet mask should be configured with the public IP address Other local PCs should set the router IP address as the default gateway When the DSL connection to the ISP has been established each local PC will directly route to the Internet Also you could use the 1st IP address subnet ma...

Page 41: ...t mask for the local private network Default 255 255 255 0 24 For IP Routing Usage Default Disable Enable Enable the 2nd IP address settings Disable Disable the 2nd IP address settings 2nd IP Address Set a public IP address 2nd Subnet Mask Set a subnet mask for the public IP address 2nd Subnet DHCP Server The following picture is for 2nd subnet DHCP Server of the Vigor Router ...

Page 42: ...D To add a MAC address on the list Remove To delete the selected MAC address on the list Edit To edit the selected MAC address on the list Cancel Give up the MAC address access control setup Close Close this window Clear All Clean all entries of MAC addresses on the list OK Save the access control list RIP Protocol Control Disable Disable the exchange of RIP packets on LAN interface 1st Subnet Set...

Page 43: ...DHCP client Please refer to the following picture for DHCP Server Configuration Enable Server Assign IP address to LAN PC automatically Disable Server Assign IP address to LAN PC manually Relay Agent Allows PCs on LAN to request IP address from other DHCP server Start IP Address Set the start IP address of the IP address pool IP Pool Counts Set the number of IP address pool Gateway IP Address Sets...

Page 44: ... getting its own IP address automatically from the router using DHCP The router will pre set DNS servers initially but the ISP will allocate their own DNS servers which are then used once the router has connected to the ISP As a result you can over ride all DNS server settings and force your own by entering them into the DNS fields on the LAN setup menu Primary IP Address Sets the IP address of th...

Page 45: ...ts own IP address to local users as a DNS proxy server and maintain a DNS cache If the IP address of a domain name is already in the DNS cache the router will resolve the domain name immediately Otherwise the router forwards the DNS query packet to the external DNS server by establishing a WAN e g DSL Cable connection ...

Page 46: ...ate IP address of every computer laptop Any unsolicited TCP IP packet to your public IP address will arrive at your router but the router can not send the packet to any computer or laptop on the LAN The NAT plays an important guard for your network clients because the internal private IP address of every computer or laptop is hidden from the outside world unless you open up ports protocols to allo...

Page 47: ...he Internet The Vigor router let you have three types of port mapping as follows Port Redirection DMZ Host Open Ports In terms of the definition of RFC1918 for the private IP addresses the users apply the 192 168 1 0 24 to local network clients e g you have three computers located at different room and you assign three private addresses to these three computers You can access Internet from these t...

Page 48: ... different services such as http smtp ftp etc External users i e people elsewhere on the Internet can then access your web server via your public IP address Even if your public IP address is a dynamic IP address you can apply the Dynamic DNS service to obtain an online WAN IP address such as hostnmae dyndns org where is able to be mapped to your current dynamic IP address Any external user can vis...

Page 49: ...pecify the private port number of the service offered by the internal host Active Check here to activate the port mapping entry Click OK Because the router has its own built in web server for the configuration if you want to access to the web configurator remotely and to a web server behind the router you need to change the router s http port to something other than the default port 80 You shall c...

Page 50: ...s so you can not decide which local client to forward the data to Vigor router has a facility called DMZ which you can specify a single local client with private IP address to which ALL unsolicited data on all protocols shall be forwarded Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption The inherent security properti...

Page 51: ...ns such as Netmeeting or Internet Games etc Each item in the setup page is described below Enable Check to enable the DMZ Host function Private IP Enter the private IP address of the DMZ host Choose PC Click this button and then a window consisting of a list of private IP addresses of all hosts in your LAN network will automatically pop up Select one private IP address in the list to be the DMZ ho...

Page 52: ...cate the relative number for the particular entry that you want to offer service in a local host You should click the appropriate index number to edit or clear the corresponding entry Comment Display the name for the specified network service Local IP Address Display the private IP address of the local host offering the service Status Display the state for the corresponding entry We use X or V to ...

Page 53: ...med as streaming Following example the UDP port ranges from 6835 to 6850 Enable Open Ports Check to enable the Open Port function for this entry Comment Specify the name for the defined network service Local Computer Enter the private IP address of the local host Choose PC Click this button and subsequently a window having a list of private IP addresses of local hosts will automatically pop up Sel...

Page 54: ...ve but allows you to define a range of ports DMZ Host This opens up a single computer or laptop completely All incoming packets will be forwarded onto the PC with the local IP address you specified The only exceptions are packets received in response to outgoing requests form other local PCs or incoming packets which match rules in the other two methods While you are using combinations of these th...

Page 55: ... the user uses the NAT facility of the router to utilize the broadband access i e Your family members can have their own computer or laptop for Internet access but you just subscribe one public IP address Every computer or laptop receives a private IP address from Vigor router The NAT provides essential security to your network clients because their private address is hidden from the outside world...

Page 56: ...u still have the security from NAT but the computer or laptop can be addressed directly from the outside world by its associated public IP address but still by only opening specific ports to it e g TCP port 80 for an http web server To achieve it you should find the path to click the button of WAN IP Alias which is located inside Internet Access Setup You follow the path Internet Access MPoA if yo...

Page 57: ... let your network client to use these public IP addresses to communicate outside world i e you can specify one computer to be your web server for showing your personal data when you would like to make friends Furthermore you can assign another public IP addresses for your kids to participate in the distance learning over Internet After you enter some of your public IP addresses into the WAN IP Ali...

Page 58: ... series shall be compatible with XBox Live If it does not work in the default configuration you can open UDP Ports 88 and 3074 and TCP Port 3074 to redirect the Xbox s local IP address You select one public IP e g 61 230 203 39 to the specified computer on the LAN The specified computer is with private IP address 192 168 1 20 XBox Live will not be prevented from Vigor router after you open UDP Por...

Page 59: ...ssigned with public IP address 61 230 203 39 The Netmeeting will not be blocked by the inherent security function of NAT The inherent security properties of NAT are somewhat bypassed if you set up DMZ You can consider adding additional filter rules or a secondary firewall The Vigor2500V series ADSL router is already equipped with the ALG s Application Level Gateways in order to increase the intero...

Page 60: ...ionally it can filter out specific packets to trigger the router to place an outgoing connection The users on the LAN are provided with secured protection by means of following firewall facilities Stateful Packet Inspection tracks packets and denies unsolicited incoming data Selectable DoS DDoS protection User configurable packet filter NAT PAT with Port Forwarding Redirection DMZ Supports ALGs Ap...

Page 61: ... is allowed to pass through the router when the WAN connection has been established Conceptually when an outgoing packet is to be routed to the WAN the IP Filter will decide if the packet should be forwarded to the Call Filter or Data Filter If the WAN link is down the packet will enter the Call Filter If the packet is not allowed to trigger router dialing it will be dropped Otherwise it will init...

Page 62: ...Call Filter rules are defined in Filter Set 1 and the Data Filter rules are defined in Filter Set 2 The following is the setting path for this function Firewall General Setup Filter Setup DoS Defense URL Content Filter General Setup Some general settings are available from this link Filter Setup Here are 12 filter sets for IP Filter configurations DoS defense Click it to set up the DoS defense fac...

Page 63: ...he General Setup page you can enable disable the Call Filter or Data Filter and assign a Start Filter Set for each configure the log settings and set a MAC address for the logged packets to be duplicated to Call Filter Check Enable to activate the Call Filter function Assign a start filter set for the Call Filter Data Filter Check Enable to activate the Data Filter function Assign a start filter s...

Page 64: ...kets from the router to another network device you must enter the other devices MAC Address HEX Format Type 0 to disable the feature The feature will be helpful under Ethernet environments 6 4 Editing the Filter Sets Comments Enter filter set comments description Maximum length is 23 characters Filter Rule Click a button numbered 1 7 to edit the filter rule Active Enable or disable the filter rule...

Page 65: ...le the Filter Rule Enables the filter rule Pass or Block Specifies the action to be taken when packets match the rule Block Immediately Packets matching the rule will be dropped immediately Pass Immediately Packets matching the rule will be passed immediately Block If No Further Match A packet matching the rule and that does not match further rules will be dropped Pass If No Further Match A packet...

Page 66: ...ets Duplication Log Check this box to enable the log function Use the Telnet command log f to view the logs Direction Sets the direction of packet flow For the Call Filter this setting is irrelevant For the Data Filter IN Specifies the rule for filtering incoming packets OUT Specifies the rule for filtering outgoing packets Protocol Specifies the protocol s this filter rule will apply to IP Addres...

Page 67: ...umber ranges between the Start Port and the End Port including the Start Port and the End Port If the End Port is empty the port number is not equal to the value of the Start Port Otherwise this port number is not between the Start Port and the End Port including the Start Port and End Port Specifies the port number is larger than the Start Port includes the Start Port Specifies the port number is...

Page 68: ...the rule only to packets which are too short to contain a complete header 6 6 An Example of Restricting Unauthorized Internet Services This section will show a simple example to restrict someone from accessing WWW services In this example we assume the IP address of the access restricted user is 192 168 1 10 The filter rule is created in the Data Filter set where Port 80 is the HTTP protocol port ...

Page 69: ...Firewall 6 10 ...

Page 70: ...ny packet that may paralyze the host in the security zone is blocked and a syslog message is sent to the client Also the DoS Defense Engine monitors the traffic behavior Any anomaly situation violating the administrator s configuration is reported and the corresponding defense function is performed in order to mitigate the attack A 3 Configuration The following sections will explain in more detail...

Page 71: ... the checkbox to activate the UDP flood defense function Once the UDP packets from the Internet exceed the user defined threshold value the router will be forced to discard all sequent UDP packets in the user defined timeout period The default setting for threshold and timeout are 300 packets per second and 10 seconds respectively Enable ICMP flood defense Click the checkbox to activate the ICMP f...

Page 72: ...out your private networks Enable Block Land Click the associated checkbox and then enforce the Vigor router to defense the Land attacks The LAN attack combines the SYN attack technology with IP spoofing A Land attack occurs when an attacker sends spoofed SYN packets having the identical source and destination addresses as well as the port number with those of the victim Enable Block Smurf Click th...

Page 73: ...igor router Enable Ping of Death Click the checkbox to activate the Block Tear Drop function Many machines may crash when receiving ICMP datagrams that exceed the maximum length To avoid this type of attack the Vigor router is designed to be capable of discarding any fragmented ICMP packets with a length greater than 1024 octets Enable Block ICMP fragment Click the checkbox to activate the Block I...

Page 74: ...aintenance Syslog Setup Mail Alert to setup the syslog client Thus the administrator can look at the warning messages from DoS Defense functionality through the DrayTek Sylsog daemon The format for this kind of the warning messages is similar to those in Firewall except for the preamble keyword DoS followed by a name to indicate what kind of attacks is detected ...

Page 75: ...Firewall 6 16 ...

Page 76: ...vent children from seeing material that their parents find objectionable In preventing access the URL content filtering facility acts as an automated version of the convenience store clerk who refuses to sell adult magazines to high school students The URL content filtering facilities are also used by businesses to prevent employees from accessing Internet resources that are either not work relate...

Page 77: ...rieve the malicious code will be discarded by the Vigor router Similarly a syslog message will be sent to the syslog client The URL content filtering facility prevents users from accessing inappropriate websites whose URL strings are identified as prohibition You must clear your browser cache first so that the URL content filtering facility can work properly on a web page that you visited before B...

Page 78: ...is able to block all downloads of multimedia files from Web pages in order to control the bandwidth usage The function of Prevent web access from IP address is used to avoid that inappropriate web sites can be accessed through directly using IP address in the URL locator even though their URL strings match the user defined keywords The function of Exceptional Subnet handling allows the administrat...

Page 79: ... partial noun or a complete URL string Multiple keywords within a frame are separated by space comma or semicolon In addition the maximal length of each frame is 32 characters After specifying keywords the Vigor router will reject the access right of any website whose whole or partial URL string matched any user defined keyword It should be noticed that the more simplified the blocking keyword lis...

Page 80: ...One checkbox is available to activate this function that will deny any web surfing activity by directly using IP address To enable it click on the empty box image and subsequently the hook image will appear Enable Excepting Subnets 4 entries are available for users to specify some specific IP addresses or subnets so that they can be free from the URL Access Control To enable an entry click on the ...

Page 81: ...uently the hook image will appear Executable file Similar to the above function click the checkbox to enable the Block Executable file function to reject any downloading behavior of the executable file from the Internet To enable it click on the empty box image and subsequently the hook image will appear Accordingly files with the following extensions will be blocked by the Vigor router exe com sc...

Page 82: ... be blocked by the Vigor router mov mp3 rm ra au wmv wav asf mpg mpeg avi ram Time Schedule Specify what time should perform the URL content filtering facility 2 5 6 later version Always Block Click it so that the URL content filtering facility can be executed on the Vigor router anytime Block from H1 M1 To H2 M2 Specify the appropriate time duration from H1 M1 to H2 M2 in one day where H1 and H2 ...

Page 83: ...g figure Also the warning message will be automatically sent to the syslog client after you enable the syslog function The administrator can setup the syslog client in the Syslog Setup by using Web Configurator Thus the administrator can view the warning messages from the URL Content Filtering functionality through the DrayTek Sylsog daemon The format for this kind of the warning messages is simil...

Page 84: ...Firewall 6 25 ...

Page 85: ...s org offered by from the Dynamic DNS service providers i e The Dynamic DNS function allows the router to update its online WAN IP address which assigned by ISP to the specified Dynamic DNS server Once the router is online you will be able to use the registered domain name to access the router or internal virtual servers from the Internet You can position the Dynamic DNS service providers as the p...

Page 86: ... the Function and Add a Dynamic DNS Account 1 Assume you have a registered domain name from the DDNS provider named hostname dyndns org and an account with username test and password test 2 Go to Applications Dynamic DNS Check Enable Dynamic DNS Account and choose correct Service Provider dyndns org type the registered hostname hostname and domain name suffix dyndns org in the Domain Name block Th...

Page 87: ...s Dynamic DNS 2 Uncheck Enable Dynamic DNS Setup and click Clear All button to disable the function and clear all accounts from the router Delete a Dynamic DNS Account 1 Go to Applications Dynamic DNS 2 Click the Index number you want to delete and click Clear All button to delete the account ...

Page 88: ...elnet interface use Windows telnet exe for example The command ddns log shows the results Here is an example in this case using dyndns org 1 Go to Applications Dynamic DNS 2 Click View Log button The logs of DDNS updates will be shown as follows ddns log 1 DDNS is updating 2 A username H hostname U 1 3 Connecting to the DDNS server 0x4225dad2 4 Return Code nochg 61 230 170 145 hostname dyndns org ...

Page 89: ...og to your local dealer or us support draytek com to offer you with more assistance 3 Click Online Status to know what the current WAN IP address is You will see the IP address in the circle which is the same as the Return Code in the DDNS logs This indicates that the DDNS update is done ...

Page 90: ...e the router to dial to Internet at a pre set time but also to restrict Internet access to certain hours so that the router will only let users of LAN to access Internet or dial in access if there is ISDN interface at certain times e g business hours The call schedule can also be applied to LAN to LAN profiles On the Time Setup menu you can firstly ensure your router time to be correct before you ...

Page 91: ...outer so you may prefer to use an NTP server on the Internet a time server to update the clock automatically NTP updates only occur when the router is online to the Internet they will not trigger calls themselves You can have up to 15 entries of different schedules and you must then apply the required schedule s to the appropriate ISP by entering the schedule number into the ISP setup ...

Page 92: ...ing time of the schedule Duration Time hh mm Specify the duration or period for the schedule Action Specify which action should be applied by Call Schedule during the time period of the schedule Force On Specify the connection up Force Down Specify the connection down Enable Dial On Demand Specify the connection to be dial on demand and the value of idle timeout should be specified as following Id...

Page 93: ...e and then click OK button to apply Specify the call schedule to specific Internet access profile or LAN to LAN profile Delete a Call Schedule 1 Click Call Schedule Setup and the Index number that you want to remove 2 Click Clear button to clear current profile 8 2 Example of ADSL ISP users If you want to control the PPPoE Internet access connection to be always on Force On from 9 00 to 18 00 for ...

Page 94: ...Call Schedule 8 5 3 Force Down from 18 00 to next day 9 00 the duration is 15 hours for a week ...

Page 95: ... by time plan which has been predefined in the schedule profiles 8 3 Example of ISDN ISP users Because you need to send important files to your company from your home via ISDN you can use the ISDN interface of Vigor2500Vi series to set the duration of ISDN be always on Force On from 9 00 to 12 00 for whole week The rest of time shall be on ISDN connection i e The ISDN shall be Force Down ...

Page 96: ...Call Schedule 8 7 3 Configure the Force Down from 12 00 to next day 9 00 the duration is 21 hours for whole week The Duration Time mechanism is for you to calculate the overnight period ...

Page 97: ...Call Schedule 8 8 4 Assign these two profiles to the ISDN Internet access profile ...

Page 98: ... your ISP can advise of these addresses On your LAN you can mix NATed IP addresses and public IP addresses Consequently some PCs really have public IP addresses but some PCs are on your private NATed subnet Static routes in your Vigor router provide a quick and effective way to route data from one subnet to different subnet without using the Routing Information Protocol RIP Basically a static rout...

Page 99: ... 1st subnet address 192 168 1 0 24 to surf the Internet and also an internal private subnet 192 168 10 0 24 via an internal router 192 168 1 2 24 and an internal public subnet 211 100 88 0 28 via an internal router 192 168 1 3 24 Also the router 192 168 1 1 24 is a default gateway for the router 192 168 1 2 24 1 Click LAN TCP IP and DHCP Setup select RIP Protocol Control as 1st Subnet and then cli...

Page 100: ...vate subnet 192 168 10 0 24 via the internal router 192 168 1 2 24 Click Static Route Index Number to add a static route to destination subnet 192 168 10 0 24 as follows 3 Add a static route to the inside public subnet 211 100 88 0 28 via 192 168 1 3 24 as below ...

Page 101: ...ute View Routing Table to verify the current routing table Delete or Clear the setting of Static Route 1 Click Static Route Setup Index Number which you want to delete 2 Select Status Action to Empty Clear Click OK button to delete the route ...

Page 102: ...uters the major feature of UPnP on the Vigor router is NAT Traversal This enables applications inside the firewall to automatically open the ports that they need to pass through a router It is more reliable than requiring a router to work out by itself which ports need to be opened and without the user having to manually set up port mappings or a DMZ UPnP is available on Windows XP and the Vigor r...

Page 103: ...n your Vigor router Enable UPNP Service Accordingly you can enable either the Connection Control Service or Connection Status Service An Internet Gateway icon will appear in the Network Connections window When disconnected you double click this icon to set up a connection to the Internet starting from the Internet Gateway ...

Page 104: ...or FTP server your router can know where to forward the packets coming from the Internet to The screenshots below show examples of this facility The UPnP facility on the Vigor router enables UPnP aware applications such as MSN Messenger to discover that they are behind a NAT router learn the external IP address and configure port mappings on the router to forward packets from the external ports of...

Page 105: ...d with the ALG s Application Level Gateways in order to increase the interoperability with multimedia applications for the limitation of NAT DrayTek ALG s is already integrated with the router firmware so that you do not need to set any settings onto Vigor router ...

Page 106: ...ight if there is E mail waiting for you to retrieve them You have up to five different POP3 accounts checked The E mail detection lets you see whether you have E mail waiting without turning on or log into your PC Be sure that your E mail software can receive E mail using the POP3 protocol The POP3 protocol is the world most common method However the web based services such as Hotmail unless they ...

Page 107: ... You can enter up to five profiles for different mail servers If there are E mail waiting the Mail Number waiting will be shown as well as the total size of mail box The E mail LED on the router will notify you by flashing ...

Page 108: ...Email Detection 11 3 By default the E mail will be checked every 3 minutes You can change the default frequency as shown on the screenshot ...

Page 109: ...e Provider and softphone and is widely supported SIP supports peer to peer direct calling and also calling via a SIP proxy server a role similar to the gatekeeper in H 323 networks The MGCP protocol use a client server architecture the calling scenario being very similar to the current PSTN network After a call is setup the voice streams transmit via RTP Real Time Transport Protocol Different CODE...

Page 110: ...istrar A SIP server on the Internet enables your router to log its current location IP Address and availability so that other users can call you on your SIP address e g 98141 draytel org Before you can set up the router for SIP you need to open an account with a SIP registrar e g IPTEL DrayTEL www draytel org Our Vigor2500V firstly apply efficient codecs designed to make the best use of available ...

Page 111: ...one port on the rear panel to which you connect a conventional analogue phone either corded or wireless DECT You can set the registered SIP address of your VoIP contacts into the DialPlan of the Vigor2500V to make calling them quick and easy There are 60 entries in the DialPlan for you to store all your friends and family members SIP address ...

Page 112: ...ontact on the PSTN which the Vigor2500V will dial instead of the SIP account if you lose ADSL access or power to the Vigor2500V Hence the PSTN line can act as a lifeline backup mechanism for VoIP calls The lifeline mechanism is activated automatically but can also be manually configured Because there is ISDN interface on the Vigor2500Vi series you can use the ISDN line as phone line as well as Int...

Page 113: ...e Vigor2500Vi will be ideal product for you when you already have ADSL and ISDN We let users of AnnexB environment can fully utilize ISDN line because Vigor2500Vi has ISDN interface If your ADSL environment is Annex A you can still additionally subscribe ISDN line as backup remote access Or you already had ISDN Internet access before you subscribe ADSL internet access Hence the Vigor2500Vi will be...

Page 114: ...to your ISDN NT1 which is installed by ISP or Telco If you want to run ISDN phone number as backup line for VoIP calls you shall purchase Vigor2500Vi series which has ISDN interface To manually dial the backup number via PSTN enter 0 on your telephone handset and then dial a PSTN phone number If you are worried that the automatic loop through might over charge your PSTN phone number we recommend y...

Page 115: ...ddress as kelly 203 69 175 19 and PSTN number is 5693483 then you can enter the DialPlan as Example 3 If David give you his IP address 203 69 175 16 only and it is not in your DialPlan you still can press keypad on the phone to dial as 203 69 175 16 ...

Page 116: ... an R indicating you have registered with your SIP server SIP Port The port number used to send receive SIP message for building a session The default value is 5060 and this must match with the peer Registrar when making VoIP calls Registrar Enter the domain name or IP address of your registered SIP Registrar server Use Registrar With the Registrar domain entered above check this box to let the Vi...

Page 117: ...VoIP 12 9 Expire Time The time duration that your SIP registrar server keeps your registration record Before the time expires the Vigor will issue another register message to registrar server again ...

Page 118: ...ta packet will contain 20 ms voice information DTMF InBand With this selected the Vigor will send DTMF tones as audio directly in the Voice stream when you press a key on the keypad DTMF OutBand With OutBand selected the Vigor will capture the keypad number pressed transform it to a digital form and send to the other side outside of the Voice stream the receiver will generate the tone according to...

Page 119: ...ar leave blank Port 1 Use Register leave blank Name arnor Password leave blank Expiry Time use default value A 3 CODEC RTP DTMF use default value B Paulin s settings B 1 DialPlan index 1 Phone Number 123 any number you like Name arnor IP Address Domain 214 61 172 53 B 2 SIP Related Function SIP Port 5060 Registrar leave blank Port 1 Use Register leave blank Name paulin Password leave blank Expiry ...

Page 120: ...ar draytel org Port 1 Use Register checked Name john Password enter John s registrar password Expiry Time use default value A 3 CODEC RTP DTMF use default value B David s settings B 1 DialPlan index 1 Phone Number 8989 any number you like Name john IP Address Domain draytel org B 2 SIP Related Function SIP Port 5060 Registrar draytel org Port 1 Use Register checked Name david Password enter David ...

Page 121: ...LECTING Indicates that the user is calling out WAIT_ANS Indicates that a connection is launched and waiting for remote user s answer ALERTING Indicates that a call is coming ACTIVE Indicates that the VoIP connection is launched CODEC The voice CODEC employed by present channel PeerID The present in call or out call peer ID the format may be IP or Domain Connect Time The format is represented as se...

Page 122: ...VoIP 12 14 In Calls The accumulating in call times Out Calls The accumulating out call times Volume Gain The volume of present call View Log To show the logs of VoIP calls as below ...

Page 123: ...ta packet will contain 20 ms voice information DTMF InBand With this selected the Vigor will send DTMF tones as audio directly in the Voice stream when you press a key on the keypad DTMF OutBand With OutBand selected the Vigor will capture the keypad number pressed transform it to a digital form and send to the other side outside of the Voice stream the receiver will generate the tone according to...

Page 124: ...ar leave blank Port 1 Use Register leave blank Name arnor Password leave blank Expiry Time use default value A 3 CODEC RTP DTMF use default value B Paulin s settings B 1 DialPlan index 1 Phone Number 123 any number you like Name arnor IP Address Domain 214 61 172 53 B 2 SIP Related Function SIP Port 5060 Registrar leave blank Port 1 Use Register leave blank Name paulin Password leave blank Expiry ...

Page 125: ...ar draytel org Port 1 Use Register checked Name john Password enter John s registrar password Expiry Time use default value A 3 CODEC RTP DTMF use default value B David s settings B 1 DialPlan index 1 Phone Number 8989 any number you like Name john IP Address Domain draytel org B 2 SIP Related Function SIP Port 5060 Registrar draytel org Port 1 Use Register checked Name david Password enter David ...

Page 126: ...LECTING Indicates that the user is calling out WAIT_ANS Indicates that a connection is launched and waiting for remote user s answer ALERTING Indicates that a call is coming ACTIVE Indicates that the VoIP connection is launched CODEC The voice CODEC employed by present channel PeerID The present in call or out call peer ID the format may be IP or Domain Connect Time The format is represented as se...

Page 127: ...VoIP 12 13 In Calls The accumulating in call times Out Calls The accumulating out call times Volume Gain The volume of present call View Log To show the logs of VoIP calls as below ...

Page 128: ...able for ISDN model only 13 2 Configuring the ISDN Interface ISDN Port Click Enable to turn on the ISDN port Disable to turn off Country Code For proper operation on your local ISDN network you should set the correct country code Own Number Sets your ISDN number If the field has been configured every outgoing call will carry the number to the called user ...

Page 129: ...ivation facility a teleworker can make a phone call to the router at the head office and ask the router to dial up to the ISP As a result the teleworkers can be authorized with their office account for utilizing ISDN dial up services and the said office can utilize ISDN LAN to LAN for secured communications and efficient work The ISDN interface on Vigor2500Vi series supports the VTA Virtual Termin...

Page 130: ...rd provided by your ISP Require ISP Callback CBCP If your ISP supports the callback function click this checkbox to activate the Callback Control Protocol during PPP negotiation Scheduler 1 15 Enter the index of schedule profiles to control the Internet access by time plan PPP MP Setup Link Type There are four link types Link Disable Dialup 64 Kbps Dialup 128 Kbps and Dialup BOD Link Disable Disab...

Page 131: ...P protocol to negotiate the username and password with the ISP PAP or CHAP Set the PPP session to use the PAP or CHAP protocols to negotiate the username and password with the ISP Idle Timeout Idle timeout means the router will disconnect after being idle for a preset amount of time The default is 180 seconds If you set the time to 0 the ISDN connection will remain always connected to the ISP IP A...

Page 132: ...ation parameters are the same as that in the last section This page provides a checkbox to enable the Dual ISPs Function and adds a secondary ISP Setup section Check the corresponding box and enter the second ISP information The setup page is depicted above ...

Page 133: ...The Virtual TA server built into the router handles the connection establishment and release The Virtual TA client installed in the Ethernet connected host creates a CAPI based driver to relay all CAPI messages between applications and the router CAPI module Before describing the configuration of Virtual TA in the Vigor routers please mention the following limitations 1 The Virtual TA client is on...

Page 134: ...2 Install a Virtual TA Client 1 Insert the CD ROM supplied with your Vigor router or directly double click the installer file Vsetup95 exe is for Windows 95 OSR2 1 or higher Vsetup98 exe is for Windows 98 98SE and Me and Vsetup2k exe is for Windows 2000 2 Follow on screen instructions of the installer The last step requires you to restart your computer Click OK to restart 3 After the computer rest...

Page 135: ...nection 14 3 Configure a Virtual TA Client Server The Virtual TA application is a client server model You must set it up on both ends to operate properly your Virtual TA application By default the Virtual TA server is enabled and the Username Password fields are empty Any Virtual TA client may login to the server Once a single Username Password field has been filled the Virtual TA server will only...

Page 136: ...hat the service must be subscribed to with your telecom Specify the MSN numbers for a specific client If you have no MSN services leave this field to be empty Active Check it to enable the client for accessing the server Creating a User Profile Note that creating a single user access account limits access to the Virtual TA server to only the specified account holders In the following we assume you...

Page 137: ...Virtual TA Remote CAPI 14 5 2 On the client Right click the mouse on the VT icon The following pop up menu will be shown 3 Click the Virtual TA Login to open the login box ...

Page 138: ...have subscribed to an MSN number service the Virtual TA server can specify which client has the specified MSN number When an incoming call arrives the server will alert the Username Password matched and MSN matched client In the following we use an example to explain the configuration of the MSN number 1 Suppose that you could assign the MSN number 123 to the alan client ...

Page 139: ...number in the CAPI based software When the Virtual TA server sends an alert signal to the specified Virtual TA client the CAPI based software will also receive the alert signal If the MSN number is incorrect the software will not accept the incoming call ...

Page 140: ...is function that allows you to make a phone call to the router and then ask it to dial up to the ISP Accordingly you can access your home network to retrieve the files Of course you should have a fixed IP address and expose some internal network resources to outside world for example FTP WWW and so on In the following we explain how to setup call control and PPP MP in Advanced Setup You can use th...

Page 141: ...hese two parameters set global settings for ISDN dialup access Dial Retry Specify the dial retry counts per triggered packet A triggered packet is any packet whose destination is outside the local network The default setting is no dial retry If set to 5 for each triggered packet the router will dial 5 times until it is connected to the ISP or remote access router Dial Delay Interval Specify the in...

Page 142: ...ype Link Disable Dialup 64Kbps Dialup 128Kbps Dialup BOD PPP Authentication Specify the PPP authentication method for PPP MP connection Normally set to PAP CHAP for the widest compatibility TCP Header Compression VJ Compression is used for TCP IP protocol header compression Normally activate VJ Compression to improve bandwidth utilization Idle Timeout The ISDN connection will be dropped once there...

Page 143: ... first connected channel if its utilization exceeds the High Water Mark and such a channel is used over the High Water Time the additional channel will be activated Thus the total link speed will be 128kbps two B channels Low Water Mark and Low Water Time These parameters specify the condition for dropping the second channel Considering the two B channels if their utilization is under the Low Wate...

Page 144: ...er It includes LAN and WAN interface information Also you could get the current running firmware version or firmware related information from this presentation 16 2 Online Status Descriptions Go to the System Maintenance Online Status and you will see the result shown on the right frame The below figure is a demoed by Vigor 2500V ...

Page 145: ...Online Status 16 2 ...

Page 146: ...f your current router as a file or restore the configurations with the file The router provides an web based way to let you backup or restore the configuration very simple 17 2 Usage 17 2 1 Backup the Running Configuration 1 Go to System Maintenance Configuration Backup The following windows will be popped up as shown below ...

Page 147: ...me is config cfg You could give it another name by yourself 4 Click Save button the configuration will download automatically to your computer as a file named config cfg The above example is using Windows platform for demonstrating examples The Mac or Linux platform will appear different windows but the backup function is still available ...

Page 148: ...ntenance Configuration Backup The following windows will be popped up as shown below 2 Click Browse button to choose the correct configuration file for uploading to the router 3 Click Restore button and wait for few seconds the following picture will tell you that the restoration procedure is successful ...

Page 149: ...Configuration Backup 17 4 4 Click Restart button and wait for few seconds the router will restart by using the updated configurations ...

Page 150: ...og messages can packed as an e mail for someone who wants to receive these messages In the following we explain how to setup the syslog and mail alert functions Use the following setup link on the System Management group of the Setup Main Menu to configure the Syslog Mail Alert functions System Maintenance Syslog Mail Alert 18 2 Configuration After clicking the link of Syslog Mail Alert Setup the ...

Page 151: ...rt number to which the syslog server is listening The default value is 514 Mail Alert Setup 1 Check the Enable box to activate the mail alert service 2 SMTP Server IP Specify an IP address of the SMTP server which can send mails from your Vigor router to the recipients mailboxes directly 3 Mail To Specify an e mail address of the recipient s mailbox to which all syslog messages will be sent The re...

Page 152: ...blems occur at the recipient mailbox The current mail alert function is only designed for sending you the syslog related to Denial of Servic DoS defense behaviors after you activate the DoS defense facilities 18 3 Example Your Vigor router will send many types of syslog messages Some examples of the syslog messages with their individual formats are shown below An example of User Access log message...

Page 153: ...e of your PC via HTTP protocol The other is update the clock of router via an NTP Network Time Protocol server on the Internet On the Time Setup menu if you press Inquire Time button the router s clock will be set to current time of your PC The clock will reset if you power down or reset the router so you may prefer to use an NTP server on the Internet a time server to update the clock automatical...

Page 154: ...sure whether the computer time is accurate or not Enter System Maintenance and then click Time Setup If you press Inquire Time button the router s clock will be set to current time of your PC 19 2 2 Use an NTP server on the Internet a time server to update the clock automatically 1 Before setting up the time base through the time client you have ...

Page 155: ... click Time Setup 2 Click Use Internet Time Client choose Time Protocol as NTP specify an IP address of time server for the Server IP Address choose an adequate time zone in the Time Zone and in turn select an updated time interval in Automatically Update Interval The following screen shows an example 3 Click OK button wait for few seconds and then the time client will get time base from the speci...

Page 156: ...Time Setup 19 4 Click Time Setup again to check Current System Time information as shown below ...

Page 157: ...ogin from the Internet i e you can allow or disallow management from the Internet For example a technician or support person will be able to access the router s management menus and adjust any settings or view the router s status The management include the remote management from web and telnet interfaces Consequently it is extremely important to set an admin password for the router otherwise your ...

Page 158: ...s to access the router s management Only these IP addresses or subnets ranges you listed can access the router s menus In order to assure you will not lose the ability to access the router management yourself normal routing still works you HAVE TO remember to include your own local IP address subnet too 20 2 Configuration Click Management Setup The following setup page will appear on your computer...

Page 159: ...t By default it is not allowed Disable PING from the Internet Check the checkbox to reject all PING packets from the Internet For security concern this function is enabled by default 20 2 2 Access List You could specify that the system administrator can only login from a specific host or network defined in the list A maximum of three IPs subnet masks is allowed IP Indicate an IP address allowed to...

Page 160: ...etup 20 4 20 2 3 Management Port Setup Default Ports Check to use standard port numbers for the Telnet and HTTP servers User Defined Ports Check to specify user defined port numbers for the Telnet and HTTP servers ...

Page 161: ...open the following page There are two reboot options 1 Using current configuration If you want to reboot the router using the current configuration check Using current configuration and click OK 2 Using factory default configuration To reset the router settings to default values check Using factory default configuration and click OK The router will take about 3 to 5 seconds to reboot the system ...

Page 162: ...om or local DrayTek s web site and FTP site is ftp draytek com 2 Go to Start Programs Router Tools Router Firmware Upgrade Utility to launch the Firmware Upgrade Utility Click the Browse button to locate the new firmware file The program will look for any Vigor routers on your LAN and display them by IP address Select the IP address of the appropriate router to upgrade then press Upgrade Enter the...

Page 163: ...eful tools to view or diagnose the router Once you encounter any technical queries you can let your local dealer or us have your screenshot which is related to the result generated from Diagnostic tools The following is the setting path for the Diagnostics 22 2 If your router is Vigor2500V PPPoE PPPoA ...

Page 164: ...for the active connection Dial PPPoE or PPTP Click it to force the router to establish a PPPoE or PPTP connection Drop PPPoE or PPTP Click it to force the router to disconnect the current active PPPoE or PPTP connection 22 3 If your router is Vigor2500Vi Please find the ISDN portion ISDN Link Status If the link is active this field will show UP Otherwise it shows DOWN Dial ISDN Clicking here cause...

Page 165: ...t Header Triggered Dial out Packet Header shows the last IP packet header that triggered the router to dial out 22 5 Routing Table Click Routing Table to view the router s routing table The table provides current IP routing information held in the router In the left of each routing rule you will see a key These keys are defined as C Directly connected S Static route ...

Page 166: ...ee an interface identifier which are defined as follows IF0 Local LAN interface IF3 WAN interface 22 6 ARP Cache Table Click ARP Cache Table to view the content of the ARP Address Resolution Protocol cache held in the router The table shows a mapping between an Ethernet hardware address MAC Address and an IP address ...

Page 167: ...nments This information is helpful in diagnosing network problems such as IP address conflicts etc 22 8 NAT Port Redirection Table If you have configured Port Redirection under NAT Setup click it to verify that your settings are correct for redirecting specific port numbers to specified internal users ...

Page 168: ...built in NAT engine click NAT Active Sessions Table to see which active outgoing sessions are online Each line across the screen indicates an active session The following information is displayed Private IP Port The internal user s PC s IP address and port number Pseudo Port The public port number ...

Page 169: ... port number Ifno Stands for interface number The definition is listed below 0 LAN interface 3 WAN interface Should you have any technical queries of using Diagnostic Tools you can contact your local dealer or us support draytek com to let us be more helpful for you ...

Page 170: ...Connect the ADSL interface to the external splitter with a RJ 11 cable 2 Connect one port of 4 port switch to your computer with a RJ 45 cable 3 Connect the attached power adapter to the power port 4 Check the ACT ADSL and LAN LEDs to assure network connections Regarding detailed LED status explanation please refer to section 1 3 Connection scenario is shown as below The splitter or microfilter is...

Page 171: ...2 TroubleShooting of Vigor2500V series There are some variant connection in Annex A and Annex B countries Followings are more reference for you Annex A countries Annex B countries ...

Page 172: ...n is active Firewall blinking When encountering DoS attacks green A normal 100Mbps connection is through its corresponding port orange A normal 10Mbps connection is through its corresponding port LAN P1 P2 P3 P4 blinking Ethernet packets are transmitting Interface Description PWR Connect the included power adapter to the power outlet Line Connect to the analog phone line for PSTN life line Phone C...

Page 173: ...tacks green A normal 100Mbps connection is through its corresponding port orange A normal 10Mbps connection is through its corresponding port LAN P1 P2 P3 P4 blinking Ethernet packets are transmitting Interface Description PWR Connect the included power adapter to the power outlet Line Connect to the analog phone line for PSTN life line Phone Connect to the analog phone for VoIP communication ADSL...

Page 174: ...bnormal situations Please follow the order of subsection as below to check your installation 3 1 Is the Hardware Status OK 1 Check that if the power line and ADSL LAN cable are connected correctly 2 Turn on the router and then check that if the ACT LED blink once per second and the correspondent LAN LED is light ...

Page 175: ... OS examples please refer to the similar steps or support notes in www draytek com 1 Go to Control Panel and then double click on Network Connections 2 Right click on Local Area Connection and click on Properties 3 Select on Internet Protocol TCP IP and then click Properties 4 Select Obtain an IP address automatically and Obtain DNS server address automatically ...

Page 176: ... gateway IP of the router is 192 168 1 1 Please check that if you can ping the router correctly A For Windows 1 Open the Command Prompt window from start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP 3 Type ping 192 168 1 1 and press Enter B For Mac Terminal ...

Page 177: ...igor2500V series Note that if the computer receives a reply from 192 168 1 1 If not please check the IP address of your PC We recommend you set the network connection as get IP automatically Please refer to the next section ...

Page 178: ...he ISP settings are set correctly A For PPPoE PPPoA Users refer to the following figure 1 Check that if the Enable option is selected 2 Verify if all parameters of DSL Modem Settings are entered with correct value which given by your ISP 3 Verify if Username and Password are entered with correct value which given by your ISP ...

Page 179: ...t Mask and Gateway are set correctly or that your ISP requires using DHCP clients to obtain IP automatically 3 5 Report to ISP and Dealer for Further Technical Support 1 If the router settings are correct at all and the router still does not connect please contact your ISP technical support representative to help you for configuration 2 If the router does not work correctly please contact your dea...

Page 180: ... connection Robust firewall to help protect your computers Make Receive Voice calls over your ADSL connection using a regular telephone handset Integration with your existing phone line POTS with automatic failover during power cuts Free Voice over IP phone calls to other VoIP users ISDN backup remote access ISDN loop through are available on Vigor2500Vi series which have ISDN interface Compatible...

Page 181: ...he Vigor2500V will dial instead of the SIP account if you lose ADSL access or power to the Vigor2500V Hence the PSTN line can act as a lifeline backup mechanism for VoIP calls The lifeline mechanism is activated automatically but can also be manually configured Because there is ISDN interface on the Vigor2500Vi series you can use the ISDN line as phone line as well as Internet remote access dial b...

Page 182: ...13 TroubleShooting of Vigor2500V series Annex A countries Annex B countries ...

Page 183: ...in mail server POP3 Flexible URL Content Filtering URL blocking by user defined keywords Preclude web surfing from using directly IP address Java ActiveX cookies proxy blocking Executable compressed multimedia files blocking Time schedule support Application Support Windows Messenger Yahoo Messenger MSN Messenger V6 0 NetMeeting ICQ2001b 2002a most online gaming and other multimedia applications U...

Page 184: ...15 TroubleShooting of Vigor2500V series Robust Firewall E mail Detection Peer to Peer VoIP communications ...

Page 185: ...TroubleShooting of Vigor2500V series Vigor2500V series with the services of ITSP Before you can set up the router for SIP you need to open an account with a SIP registrar e g IPTEL DrayTEL www draytel org ...

Reviews: