Draytek Vigor2912 Series User Manual Download Page 9

Page: 9 / 422

Vigor2912 Series User’s Guide

4.7.6 Service Type Group...................................................................................................... 230

4.7.7 Keyword Object ............................................................................................................ 231

4.7.8 Keyword Group............................................................................................................. 233

4.7.9 File Extension Object.................................................................................................... 234

4.7.10 SMS/Mail Service Object ............................................................................................ 236

4.7.11 Notification Object....................................................................................................... 241

4.8 CSM Profile ......................................................................................................................... 243

4.8.1 APP Enforcement Profile .............................................................................................. 244

4.8.2 URL Content Filter Profile............................................................................................. 247

4.8.3 Web Content Filter Profile............................................................................................. 252

4.8.4 DNS Filter Profile .......................................................................................................... 256

4.9 Bandwidth Management ..................................................................................................... 258

4.9.1 Sessions Limit............................................................................................................... 258

4.9.2 Bandwidth Limit ............................................................................................................ 260

4.9.3 Quality of Service.......................................................................................................... 262

4.10 Applications ....................................................................................................................... 270

4.10.1 Dynamic DNS ............................................................................................................. 270

4.10.2 LAN DNS .................................................................................................................... 274

4.10.3 Schedule ..................................................................................................................... 277

4.10.4 RADIUS ...................................................................................................................... 279

4.10.5 Active Directory/ LDAP ............................................................................................... 280

4.10.6 UPnP........................................................................................................................... 283

4.10.7 IGMP........................................................................................................................... 284

4.10.8 Wake on LAN.............................................................................................................. 285

4.10.9 SMS / Mail Alert Service ............................................................................................. 286

4.10.10 Bonjour ..................................................................................................................... 288

4.11 VPN and Remote Access .................................................................................................. 291

4.11.1 Remote Access Control .............................................................................................. 291

4.11.2 PPP General Setup .................................................................................................... 292

4.11.3 IPsec General Setup................................................................................................... 294

4.11.4 IPsec Peer Identity...................................................................................................... 296

4.11.5 Remote Dial-in User ................................................................................................... 298

4.11.6 LAN to LAN................................................................................................................. 301

4.11.7 VPN TRUNK Management ......................................................................................... 312

4.11.8 Connection Management ........................................................................................... 316

4.12 Certificate Management .................................................................................................... 317

4.12.1 Local Certificate .......................................................................................................... 318

4.12.2 Trusted CA Certificate ................................................................................................ 321

4.12.3 Certificate Backup....................................................................................................... 322

4.13 Wireless LAN .................................................................................................................... 323

4.13.1 Basic Concepts........................................................................................................... 323

4.13.2 General Setup............................................................................................................. 325

4.13.3 Security ....................................................................................................................... 327

4.13.4 Access Control............................................................................................................ 329

4.13.5 WPS............................................................................................................................ 330

4.13.6 WDS............................................................................................................................ 333

4.13.7 Advanced Setting........................................................................................................ 336

4.13.8 Station Control ............................................................................................................ 339

4.13.9 AP Discovery .............................................................................................................. 340

4.13.10 Airtime Fairness........................................................................................................ 341

4.13.11 Station List ................................................................................................................ 343

4.14 USB Application ................................................................................................................ 344

4.14.1 USB General Settings................................................................................................. 344

Summary of Contents for Vigor2912 Series

Page 1: ......

Page 2: ...Vigor2912 Series User s Guide ii ...

Page 3: ...Vigor2912 Series User s Guide iii Vigor2912 Series Dual WAN Security Router User s Guide Version 1 7 Firmware Version V3 8 1 3 For future update please visit DrayTek web site Date September 20 2016 ...

Page 4: ...rvation of the environment Warranty We warrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep your purchase receipt in a safe place as it serves as proof of date of purchase During the warranty period and upon proof of purchase should the product have indi...

Page 5: ...residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can ...

Page 6: ...Vigor2912 Series User s Guide vi ...

Page 7: ... 20 1 8 1 Physical Connection 20 1 8 2 Virtual WAN 22 1 9 Saving Configuration 22 Quick Setup 23 2 1 Quick Start Wizard 23 2 1 1 For WAN1 Ethernet Fiber and WAN2 Ethernet 25 2 1 2 For WAN3 USB 34 2 2 Service Activation Wizard 36 2 3 VPN Client Wizard 39 2 4 VPN Server Wizard 45 2 5 Wireless Wizard 50 2 6 Registering Vigor Router 53 Tutorials and Applications 57 3 1 How to configure settings for IP...

Page 8: ... Multi VLAN 140 4 2 LAN 144 4 2 1 Basics of LAN 144 4 2 2 General Setup 146 4 2 3 Static Route 155 4 2 4 VLAN 160 4 2 5 Bind IP to MAC 163 4 2 6 LAN Port Mirror 165 4 2 7 Web Portal Setup 166 4 3 Load Balance Route Policy 168 4 3 1 General Setup 169 4 3 2 Diagnose 179 4 4 NAT 181 4 4 1 Port Redirection 182 4 4 2 DMZ Host 185 4 4 3 Open Ports 188 4 4 4 Port Triggering 190 4 5 Firewall 193 4 5 1 Bas...

Page 9: ... 10 7 IGMP 284 4 10 8 Wake on LAN 285 4 10 9 SMS Mail Alert Service 286 4 10 10 Bonjour 288 4 11 VPN and Remote Access 291 4 11 1 Remote Access Control 291 4 11 2 PPP General Setup 292 4 11 3 IPsec General Setup 294 4 11 4 IPsec Peer Identity 296 4 11 5 Remote Dial in User 298 4 11 6 LAN to LAN 301 4 11 7 VPN TRUNK Management 312 4 11 8 Connection Management 316 4 12 Certificate Management 317 4 1...

Page 10: ...6 2 Routing Table 380 4 16 3 ARP Cache Table 381 4 16 4 IPv6 Neighbour Table 381 4 16 5 DHCP Table 382 4 16 6 NAT Sessions Table 383 4 16 7 DNS Cache Table 384 4 16 8 Ping Diagnosis 385 4 16 9 Data Flow Monitor 386 4 16 10 Traffic Graph 388 4 16 11 Trace Route 389 4 16 12 Syslog Explorer 390 4 16 13 IPv6 TSPC Status 391 4 16 14 DoS Flood Table 392 4 17 External Devices 394 Trouble Shooting 395 5 1...

Page 11: ...se CSM Content Security Management provides users control and management in IM Instant Messenger and P2P Peer to Peer more efficiency than before By the way DoS DDoS prevention and URL Web content filter strengthen the security outside and control inside Object based firewall is flexible and allows your network be safe In addition Vigor2912 series supports USB interface for connecting USB printer ...

Page 12: ...gs Cancel current settings and recover to the previous saved settings Clear all the selections and parameters settings including selection from drop down list All the values must be reset with factory default settings Add new settings for specified item Edit the settings for the selected item Delete the selected item with the corresponding settings Note For the other buttons shown on the web pages...

Page 13: ... router is powered off On The Web Content Filter is active It is enabled from Firewall General Setup WCF Off The Web Content Filter is inactive QoS On The QoS function is active On The DoS DDoS function is active DoS Blinking It will blink while detecting an attack On The port is connected Off The port is disconnected LAN P4 P1 Blinking The data is transmitting On Internet connection is ready Off ...

Page 14: ...nternet W2 P1 Connecter an ADSL or cable modem for accessing Internet WAN or connecter for local network devices LAN This connector is switchable for LAN and WAN connection P2 P4 Connecters for local network devices LAN Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rap...

Page 15: ...ireless access point is ready WLAN Blinking It will blink slowly while wireless traffic goes through ACT and WLAN LEDs blink quickly and simultaneously when WPS is working and will return to normal condition after two minutes You need to setup WPS within 2 minutes On The port is connected Off The port is disconnected LAN P4 P1 Blinking The data is transmitting On Internet connection is ready Off I...

Page 16: ...his connector is switchable for LAN and WAN connection P2 P4 Connecters for local network devices LAN Wireless LAN ON OFF WPS Press Wireless LAN ON OFF WPS button once to wait for client device making network connection through WPS Press Wireless LAN ON OFF WPS button twice to enable WLAN LED on or disable WLAN LED off wireless connection Factory Reset Restore the default settings Usage Turn on th...

Page 17: ...d of an Ethernet cable RJ 45 to one of the LAN ports of the router and the other end of the cable RJ 45 into the Ethernet port on your computer 3 Connect one end of the power adapter to the router s power port on the rear panel and the other side into a wall outlet 4 Power on the device by pressing down the power switch on the rear panel 5 The system starts to initiate After completing the system ...

Page 18: ...s router can print documents via the router The example provided here is made based on Windows XP 2000 For Windows 98 SE Vista please visit www DrayTek com Before using it please follow the steps below to configure settings for connected computers or wireless clients 1 Connect the printer with the router through USB parallel port 2 Open All Programs Getting Started Devices and Printers ...

Page 19: ...e 9 3 Click Add a printer 4 A dialog will appear Click Add a local printer and click Next 5 In this dialog choose Create a new port In the field of Type of port use the drop down list to select Standard TCP IP Port Then click Next ...

Page 20: ... User s Guide 10 6 In the following dialog type 192 168 1 1 router s LAN IP in the field of Hostname or IP Address and type 192 168 1 1 as the Port name Then click Next 7 Click Standard and choose Generic Network Card ...

Page 21: ... your system will ask you to choose right name of the printer that you installed onto the router Such step can make correct driver loaded onto your PC When you finish the selection click Next 9 Type a name for the chosen printer Click Next ...

Page 22: ...Vigor2912 Series User s Guide 12 10 Choose Do not share this printer and click Next 11 Then in the following dialog click Finish ...

Page 23: ...Guide 13 12 The new printer has been added and displayed under Printers and Faxes Click the new printer icon and click Printer server properties 13 Edit the property of the new printer you have added by clicking Configure Port ...

Page 24: ...ol type p1 number 1 as Queue Name Then click OK Next please refer to the red rectangle for choosing the correct protocol and LPR name The printer can be used for printing now Most of the printers with different manufacturers are compatible with vigor router ...

Page 25: ...please visit www DrayTek com to find out the printer list Open Support FAQ Application Notes find out the link of Printer Server and click it then click the What types of printers are compatible with Vigor router link Then click the What types of printers are compatible with Vigor router link Note 2 Vigor router supports printing request from computers via LAN ports but not WAN port ...

Page 26: ...n a web browser on your PC and type http 192 168 1 1 The following window will be open to ask for username and password 3 Please type admin admin as the Username Password and click Login Notice If you fail to access to the web configuration please go to Trouble Shooting for detecting and solving your problem 4 Now the Main Screen will appear Note The home page will be different slightly in accorda...

Page 27: ...n mode 3 Go to System Maintenance page and choose Administrator Password 4 Enter the login password the default is admin on the field of Old Password Type New Password Then click OK to continue Note The maximum length of the password you can set is 23 characters 5 Now the password has been changed Next time use the new password to access the Web user interface for this router Note Even the passwor...

Page 28: ...elnet command via DOS prompt The changes made by using web console have the same effects as modified through web user interface The functions settings modified under Web Console also can be reviewed on the web user interface Click the Web Console icon on the top of the main screen to open the following screen ...

Page 29: ...nfig Backup icon It allows you to backup current settings as a file Such configuration file can be restored by using System Maintenance Configuration Backup Simply click the icon on the top of the main screen and a pop up dialog will appear Click OK Save to store the setting 1 1 7 7 3 3 L Lo og go ou ut t Click the Logout icon to exit the web user interface ...

Page 30: ... on n Such page displays the physical connection status such as LAN connection status WAN connection status ADSL information and so on P Ph hy ys si ic ca al l C Co on nn ne ec ct ti io on n f fo or r I IP Pv v4 4 P Pr ro ot to oc co ol l P Ph hy ys si ic ca al l C Co on nn ne ec ct ti io on n f fo or r I IP Pv v6 6 P Pr ro ot to oc co ol l ...

Page 31: ... the interface IP Displays the IP address of the WAN interface GW IP Displays the IP address of the default gateway TX Packets Displays the total transmitted packets at the WAN interface TX Rate Displays the speed of transmitted octets at the WAN interface RX Packets Displays the total number of received packets at the WAN interface RX Rate Displays the speed of received octets at the WAN interfac...

Page 32: ...erface is not ready for accessing Internet 1 1 8 8 2 2 V Vi ir rt tu ua al l W WA AN N Such page displays the virtual WAN connection information Virtual WAN are used by TR 069 management VoIP service and so on The field of Application will list the purpose of such WAN connection 1 1 9 9 S Sa av vi in ng g C Co on nf fi ig gu ur ra at ti io on n Each time you click OK on the web page for saving the...

Page 33: ...for activating the web content filter service VPN Client Wizard used for establishing VPN tunnel the router is treated as a VPN client VPN Server Wizard used for establishing VPN tunnel the router is treated as a VPN server Wireless Wizard used for building wireless LAN connection 2 2 1 1 Q Qu ui ic ck k S St ta ar rt t W Wi iz za ar rd d Open Wizards Quick Start Wizard The first screen is enterin...

Page 34: ...select the WAN interface that you use If Ethernet interface is used please choose WAN1 WAN2 if 3G USB modem is used please choose WAN3 Then click Next for next step WAN1 WAN2 and WAN3 will bring up different configuration page Refer to the following for detailed information ...

Page 35: ...e in Ethernet If you choose WAN1 WAN2 based on Ethernet please specify physical type Then click Next On the next page as shown below please select the appropriate Internet access type according to the information from your ISP For example you should select PPPoE mode if the ISP provides you PPPoE interface Then click Next for next step P PP PP Po oE E 1 Choose WAN1 WAN2 as the WAN Interface and cl...

Page 36: ... User Name Assign a specific valid user name provided by the ISP Note The maximum length of the user name you can set is 63 characters Password Assign a valid password provided by the ISP Note The maximum length of the password you can set is 62 characters Confirm Password Retype the password Back Click it to return to previous setting page Next Click it to get into the next setting page Cancel Cl...

Page 37: ...r the Username Password provided by your ISP Click Next for viewing summary of such connection 4 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown 5 Now you can enjoy surfing on the Internet ...

Page 38: ...or you to specify Internet Access Type 2 Click PPTP L2TP as the Internet Access Type Then click Next to continue Available settings are explained as follows Item Description User Name Assign a specific valid user name provided by the ISP Note The maximum length of the user name you can set is 63 characters Password Assign a valid password provided by the ISP ...

Page 39: ...Primary DNS Type in the primary IP address for the router Second DNS Type in secondary IP address for necessity in the future PPTP Server L2TP Server Type the IP address of the server Back Click it to return to previous setting page Next Click it to get into the next setting page Cancel Click it to give up the quick start wizard 3 Please type in the IP address mask gateway information originally p...

Page 40: ...et Access type Simply click Next to continue Available settings are explained as follows Item Description WAN IP Type the IP address Subnet Mask Type the subnet mask Gateway Type the IP address of gateway Primary DNS Type in the primary IP address for the router Secondary DNS Type in secondary IP address for necessity in the future Back Click it to return to previous setting page Next Click it to ...

Page 41: ... wizard 3 Please type in the IP address information originally provided by your ISP Then click Next for next step 4 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown 5 Now you can enjoy surfing on the Internet ...

Page 42: ...ly click Next to continue Available settings are explained as follows Item Description Host Name Type the name of the host Note The maximum length of the host name you can set is 39 characters MAC Some Cable service providers specify a specific MAC address for access authentication In such cases you need to enter the MAC address Back Click it to return to previous setting page Next Click it to get...

Page 43: ...uick start wizard 3 After finished the settings above click Next for viewing summary of such connection 4 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown 5 Now you can enjoy surfing on the Internet ...

Page 44: ...plained as follows Item Description Internet Access Choose a protocol for accessing the Internet 3G 4G USB Modem PPP mode SIM Pin code Type PIN code of the SIM card that will be used to access Internet The maximum length of the pin code you can set is 15 characters Modem Initial String Such value is used to initialize USB modem Please use the default value If you have any question please contact t...

Page 45: ...h the mode specified here If you choose 4G 3G 2G as network mode the router will choose a suitable one according to the actual wireless signal automatically APN Name APN means Access Point Name which is provided and required by some ISPs 3 Then click Next for viewing summary of such connection 4 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol ...

Page 46: ...use trial version of WCF directly without accessing into the server MyVigor located on http myvigor draytek com For using Web Content Filter Profile please refer to later section Web Content Filter Profile for detailed information Now follow the steps listed below to activate WCF feature for your router Note Such function is available only for Admin Mode 1 Open Wizards Service Activation Wizard 2 ...

Page 47: ...ckage from retailing outlets Commtouch is merged by Cyren and GlobalView services will be continued to deliver powerful cloud based information security solutions Refer to http www prnewswire com news releases commtouch is now cyren 239025151 ht ml BPjM is WCF for German Speaking users The fragfINN is whitelist for German Speaking users The BPjM is ideal for your family to provide more Internet se...

Page 48: ...ll be activated and applied as the default rule configured in Firewall General Setup 6 Now the web page will display the service that you have activated according to your selection s The valid time for the free trial of these services is one month When all the trial editions for various web content filters had been enabled the configuration page of Service Activation Wizard will be invalid as show...

Page 49: ...er to client step by step 1 Open VPN and Remote Access VPN Client Wizard The following page will appear Available settings are explained as follows Item Description LAN to LAN Client Mode Selection Choose the client mode Route Mode NAT Mode If the remote network only allows you to dial in with single IP please choose this mode otherwise please choose Route Mode Please choose a LAN to LAN Profile T...

Page 50: ...lowing page In this page you have to select suitable VPN type for the VPN client profile There are six types provided here Different type will lead to different configuration page After making the choices for the client profile please click Next You will see different configurations based on the selection s you made ...

Page 51: ... are based on the Route Mode specified in LAN to LAN Client Mode Selection When you choose PPTP None Encryption or PPTP Encryption you will see the following graphic When you choose IPsec you will see the following graphic When you choose L2TP you will see the following graphic ...

Page 52: ...oose L2TP over IPsec Nice to Have or L2TP over IPsec Must you will see the following graphic Available settings are explained as follows Item Description Profile Name Type a name for such profile The length of the file is limited to 10 characters ...

Page 53: ...for such VPN profile IKE Authentication Method IKE Authentication Method usually applies to those are remote dial in user or node LAN to LAN which uses dynamic IP address and IPsec related VPN connections such as L2TP over IPsec and IPsec tunnel Pre Shared Key Specify a key for IKE authentication Confirm Pre Shared Key Confirm the pre shared key Digital Signature X 509 Click Digital Signature to i...

Page 54: ...e Network Mask Please type the network mask according to the real location of the remote host for building VPN connection 3 After finishing the configuration please click Next The confirmation page will be shown as follows If there is no problem you can click one of the radio buttons listed on the page and click Finish to execute the next action Available settings are explained as follows Item Des...

Page 55: ...r Available settings are explained as follows Item Description VPN Server Mode Selection Choose the direction for the VPN server Site to Site VPN To set a LAN to LAN profile automatically please choose Site to Site VPN Remote Dial in User You can manage remote access by maintaining a table of remote user profile so that users can be authenticated to dial in via VPN connection Please choose a LAN t...

Page 56: ... dial in type for the VPN server profile There are several types provided here similar to VPN Client Wizard Different Dial in Type will lead to different configuration page In addition adjustable items for each dial in type will be changed according to the VPN Server Mode Site to Site VPN and Remote Dial in User selected 2 After making the choices for the server profile please click Next You will ...

Page 57: ...ies User s Guide 47 When you check PPTP you will see the following graphic When you check PPTP IPsec L2TP three types or PPTP IPsec two types or L2TP with Policy Nice to Have Must you will see the following graphic ...

Page 58: ... L2TP with or without IPsec policy above The length of the name is limited to 11 characters Pre Shared Key For IPsec L2TP IPsec authentication you have to type a pre shared key The length of the name is limited to 64 characters Confirm Pre Shared Key Type the pre shared key again for confirmation Digital Signature X 509 Check the box of Digital Signature to invoke this function Peer ID Choose the ...

Page 59: ...If there is no problem you can click one of the radio buttons listed on the page and click Finish to execute the next action Available settings are explained as follows Item Description Go to the VPN Connection Management Click this radio button to access VPN and Remote Access Connection Management for viewing VPN Connection status Do another VPN Server Wizard Setup Click this radio button to set ...

Page 60: ...s are explained as follows Item Description Name Type the SSID name of this router for wireless 2 4GHz The default name is defined with DrayTek Change the name if required Mode At present the router can connect to 11b Only 11g Only 11n Only 2 4GHz Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mix 11b 11g 11n mode Channel Means the channel of frequency of t...

Page 61: ...rk and VPN connection Available settings are explained as follows Item Description Enable Disable Click it to enable or disable settings in this page SSID Type the SSID name of this router SSID1 Security Key The wireless mode offered by this wizard is WPA2 PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below o...

Page 62: ...t setting page Cancel Exit the wireless wizard without saving any changes 4 After typing the required information click Next 5 The following page will display the configuration summary for wireless setting 6 Click Finish to complete the wireless settings configuration ...

Page 63: ...o register your Vigor router to MyVigor website for getting more service Please follow the steps below to finish the router registration 1 Please login the web configuration interface of Vigor router by typing admin admin as User Name Password 2 Click Support Area Production Registration from the home page 3 A Login page will be shown on the screen Please type the account and password that you cre...

Page 64: ...rights carefully while creating a user account 4 The following page will be displayed after you logging in MyVigor From this page please click Add or Product Registration 5 When the following page appears please type in Nickname for the router and choose the right registration date from the popup calendar it appears when you click on the box of Registration Date After adding the basic information ...

Page 65: ...oduct registration 8 After clicking OK you will see the following page Your router has been registered to myvigor website successfully If you have not activated web content filter service by using Service Activation Wizard you can activate the service from this step Please click the serial number link 9 From the Device s Service section click the Trial ...

Page 66: ...eck the box of I have read and accept the above Agreement The system will find out the date for you to activate this version of service Then click Next 11 When this page appears click Register 12 Wait for a moment until the following page appears 13 Click Close ...

Page 67: ...h other via existing IPv4 network environment The IPv6 packets will be encapsulated with the header of IPv4 first Later the packets will be transformed and judged by IPv4 router Once the packets arrive the border between IPv4 and IPv6 the header of IPv4 on the packets will be removed Then the packets with IPv6 address will be forwarded to the destination of IPv6 network Translation Such feature is...

Page 68: ...e use the drop down list to choose a proper connection type Different connection types will bring out different configuration page Refer to the following PPP Dual Stack application IPv4 and IPv6 services can be utilized at the same time Choose PPP and type the information for PPPoE of IPv4 Access into the setting page for IPv6 service it is not necessary for you to configure anything ...

Page 69: ...Vigor2912 Series User s Guide 59 Click OK and open Online Status If the connection is successful you will get the IP address for IPv4 and IPv6 at the same time ...

Page 70: ...nformation for TSPC service Note While using such mode you have to make sure the IPv4 network connection is normal In the following figure the TSPC information is obtained from http gogo6 com after applied for the service Click OK and open Online Status If the connection is successful the physical connection will be shows as follows ...

Page 71: ...ote While using such mode you have to make sure the IPv4 network connection is normal In the following figure the AICCU information is obtained from https www sixxs net main after applied for the service Click OK and open Online Status If the connection is successful the physical connection will be shows as follows ...

Page 72: ... s Guide 62 DHCPv6 Client Choose DHCPv6 Client Click one of the identity associations and type the IAID number Click OK and open Online Status If the connection is successful the physical connection will be shows as follows ...

Page 73: ...ies User s Guide 63 Static IPv6 Choose Static IPv6 Type IPv6 address Prefix Length and Gateway Address Click OK and open Online Status If the connection is successful the physical connection will be shows as follows ...

Page 74: ...y the subnet of LAN1 supports IPv6 feature 2 In the field of RADVD Configuration the default setting is Enable The client s PC will ask RADVD service for the Prefix of IPv6 address automatically and generate an Interface ID by itself to compose a full and unique IPv6 address 3 In the field of HCPv6 Server Configuration when DHCPv6 service is enabled you can assign available IPv6 address for the cl...

Page 75: ...ommand of ipconfig Refer to the following figure From the above figure we can see IPv6 IP address has been captured by the system 2 Use the Ping command to ping any IPv6 address indicating an IPv6 website For example www kame net is a website supporting IPv4 IP and IPv6 IP services Its IPv6 address is seen with a format of 2001 200 dff fff1 216 3eff feb1 44d7 After getting the above message it mea...

Page 76: ...ype an URL of IPv6 e g www kame net If your computer accesses into the website by using IPv6 address you may see a turtle dancing on the screen If not only a steady turtle will be seen If you can see a turtle dancing on the screen that means IPv6 service is ready for you to access and utilize ...

Page 77: ...lorer If it is necessary for you to delete copy files on the device or write paste files to the devcie it must be done through SMB server or FTP server SMB service is based on the original USB FTP service You will need to setup USB FTP first We would like to give brief instructions on USB FTP setup here 1 Plug the USB device to the USB port on the router Make sure Disk Connected appears on the Con...

Page 78: ...B User Management Click Enable to enable FTP SMB User account Here we add a new account user1 and assign authorities Read Write and List to it 4 Click OK to save the configuration 5 Make sure the FTP service is running properly Please open a browser and type ftp 192 168 1 1 Use the account user1 to login ...

Page 79: ...SB Application USB Disk Status The information for FTP server will be shown as below Now users in LAN of Vigor2912 can access into the USB storage device by typing ftp 192 168 1 1 on any browser They can add or remove files directories depending on the Access Rule for FTP account settings in USB Application USB User Management ...

Page 80: ... at ti io on n o on n V Vi ig go or r R Ro ou ut te er r f fo or r H He ea ad d O Of ff fi ic ce e 1 Log into the web user interface of Vigor router 2 Open VPN and Remote Access LAN to LAN to create a LAN to LAN profile 3 Click any index number to open the configuration page Type a name which is easy for identification for such profile in this case type VPN Server and check the box of Enable This ...

Page 81: ... Check the box of Specify Remote and type the Peer VPN Server IP e g 218 242 130 19 in this case Press the IKE Pre Shared Key button to set the PSK and select Medium AH or High ESP as the security method 5 Continue to navigate to the TCP IP Network Settings for setting the LAN IP for remote side 6 Click OK to save the settings ...

Page 82: ...ser interface of Vigor router 2 Open VPN and Remote Access LAN to LAN to create a LAN to LAN profile The following settings are for a permanent VPN connection 3 Click any index number to open the configuration page Type a name which is easy for identification for such profile in this case type VPN Client and check the box of Enable This Profile For such Vigor router will be set as a client the cal...

Page 83: ...service and type the remote server IP host name e g 218 242 133 91 in this case Press the IKE Pre Shared Key button to set the PSK and select Medium AH or High ESP as the security method 5 Continue to navigate to the TCP IP Network Settings for setting the LAN IP for the remote side 6 Click OK to save the settings ...

Page 84: ...logy QoS Quality of Service helps you to well allocate the bandwidth upon your demand of Voice Video or Data transferring Let s see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below Scenario The Internet connection you got from ISP line is 2MB 512Kb There are VoIP telephony network IPTV set top box and data server at your home Assume you want to allocate 30 o...

Page 85: ...ick Edit to specify the local address 5 In the pop up window choose Range Address as the Address Type and type the start IP address and end IP address in relational fields Click OK to save the settings and exit the window 6 Click OK again to save the settings ...

Page 86: ...or2912 Series User s Guide 76 7 The class rule for VoIP has been set Click OK to return to previous page 8 Do the same steps to add class rules for IPTV and Data Email with IP addresses as shown below and ...

Page 87: ... bandwidth for different groups among VoIP IPTV and Data Email 10 In the Setup page check the box of Enable the QoS Control Type 30 50 and 15 in the boxes for VoIP IPTV and Data Email respectively Check the box of Enable UDP Bandwidth Control 11 Click OK to save the settings The class rules for WAN1 are defined as shown below ...

Page 88: ...s internal database Meanwhile children may chat on Skype in the restroom 1 Go to Bandwidth Management Quality of Service 2 Click Setup link of WAN 1 2 3 Make sure the QoS Control on the left corner is checked And select BOTH in Direction 3 Set Inbound Outbound bandwidth Note The rate of outbound inbound must be smaller than the real bandwidth to ensure correct calculation of QoS It is suggested to...

Page 89: ...r Class 1 Click OK to save the settings 5 Click the Setup link for WAN2 The user can set reserved bandwidth e g 25 for E mail using protocol POP3 and SMTP Click OK to save the settings 6 Return to previous page Enter the Name of Index Class 2 by clicking Edit link In this index the user will set reserved bandwidth for HTTPS And click OK ...

Page 90: ...event enormous UDP traffic influent other application Click OK 9 If the worker has connected to the headquarter using host to host VPN tunnel Please refer to Chapter 3 VPN for detail instruction he may set up an index for it Enter the Class Name of Index 3 In this index he will set reserved bandwidth for 1 VPN tunnel ...

Page 91: ... this index the user will set reserved bandwidth for VPN 11 Click Add to open the following window Check the ACT box first 12 Then click Edit of Local Address to set a worker s subnet address Click Edit of Remote Address to set headquarter s IP address Leave other fields and click OK ...

Page 92: ...l le e 1 1 U Us se er rs s c ca an n s se ee e t th he e m me es ss sa ag ge e f fo or r l la an nd di in ng g p pa ag ge e a af ft te er r l lo og gg gi in ng g i in nt to o I In nt te er rn ne et t s su uc cc ce es ss sf fu ul ll ly y 1 Open the web user interface of Vigor2912 2 Open User Management General Setup to get the following page In the field of Landing Page please type the words of Log...

Page 93: ...ck OK to save the settings 5 Open any browser e g FireFox Internet Explorer The logging page will appear and asks for username and password Please type the correct username and password 6 Click Login If the logging is successful you will see the message of Login Success from the browser you use ...

Page 94: ... in ng g i in nt to o I In nt te er rn ne et t s su uc cc ce es ss sf fu ul ll ly y 1 In the field of Landing Page please type the words as below body stats 1 script language javascript window location http www draytek com script body 2 Next enable the Landing Page function Open User Management User Profile and click one of the index number e g index number 3 links 3 In the following page check th...

Page 95: ...rowser e g FireFox Internet Explorer The logging page will appear and asks for username and password Please type the correct username and password 5 Click Login If the logging is successful you will be directed into the website of www draytek com ...

Page 96: ... Anti Spam Web Content Filter Anti Intrusion and etc to filtering the web pages for the sake of protecting your system To access into MyVigor for getting more information please create an account for MyVigor 3 3 7 7 1 1 C Cr re ea at te e a an n A Ac cc co ou un nt t v vi ia a V Vi ig go or r R Ro ou ut te er r 1 Click CSM Web Content Filter Profile The following page will appear Or Click System M...

Page 97: ...ries User s Guide 87 2 Click the Activate link A login page for MyVigor web site will pop up automatically 3 Click the link of Create an account now 4 Check to confirm that you accept the Agreement and click Accept ...

Page 98: ...Vigor2912 Series User s Guide 88 5 Type your personal information in this page and then click Continue 6 Choose proper selection for your computer and click Continue ...

Page 99: ...ART 8 Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor draytek com 9 Click the Activate my Account link to enable the account that you created The following screen will be shown to verify the register process is finished Please click Login ...

Page 100: ...Now click Login Your account has been activated You can access into MyVigor server to activate the service e g WCF that you want 3 3 7 7 2 2 C Cr re ea at te e a an n A Ac cc co ou un nt t v vi ia a M My yV Vi ig go or r W We eb b S Si it te e 1 Access into http myvigor draytek com Find the line of Not registered yet Then click the link Click here to access into next page ...

Page 101: ...s User s Guide 91 2 Check to confirm that you accept the Agreement and click Accept 3 Type your personal information in this page and then click Continue 4 Choose proper selection for your computer and click Continue ...

Page 102: ...ART 6 Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor draytek com 7 Click the Activate my Account link to enable the account that you created The following screen will be shown to verify the register process is finished Please click Login ...

Page 103: ... password that you just created in the fields of UserName and Password Then type the code in the box of Auth Code according to the value displayed on the right side of it Now click Login Your account has been activated You can access into MyVigor server to activate the service e g WCF that you want ...

Page 104: ...sing to Internet through Vigor router Others e g 192 168 1 31 and 192 168 1 32 outside the range can get the source from LAN only The way we can use is to set two rules under Firewall For Rule 1 of Set 2 under Firewall Filter Setup is used as the default setting we has to create a new rule starting from Filter Rule 2 of Set 2 1 Access into the web user interface of Vigor router 2 Open Firewall Fil...

Page 105: ...Filter Rule 7 If Block If No Further Match for is selected for Filter the firewall of the router would check the packets with the rules starting from Rule 3 to Rule 7 The packets not matching with the rules will be processed according to Rule 2 4 Next set another rule Just open Firewall Filter Setup Click the Set 2 link and choose the Filter Rule 3 button 5 Check the box of Check to enable the Fil...

Page 106: ...t Type 192 168 1 10 in the field of Start IP and type 192 168 1 20 in the field of End IP Then click OK to save the settings The computers within the range can access into the Internet 7 Now check the content of Source IP is correct or not The action for Filter shall be set with Pass Immediately Then click OK to save the settings ...

Page 107: ... Series User s Guide 97 8 Both filter rules have been created Click OK 9 Now all the settings are configured well Only the computers with the IP addresses within 192 168 1 10 192 168 1 20 can access to Internet ...

Page 108: ...exible for customize webpage Note Manual setting e g one keyword for one website I I V Vi ia a W We eb b C Co on nt te en nt t F Fi il lt te er r 1 Make sure the Web Content Filter powered by Commtouch license is valid How to register activate Web Content Filter WCF license Please visit for getting more information How to Register AI AV AS WCF Service Service Activation Wizard http www draytek com...

Page 109: ...Vigor2912 Series User s Guide 99 2 Open CSM Web Content Filter Profile to create a WCF profile Check Social Networking with Action Block 3 Enable this profile in Firewall General Setup Default Rule ...

Page 110: ... Co on nt te en nt t F Fi il lt te er r A Block the web page containing the word of Facebook 1 Open Object Settings Keyword Object Click an index number to open the setting page 2 In the field of Contents please type facebook Configure the settings as the following figure 3 Open CSM URL Content Filter Profile Click an index number to open the setting page 4 Configure the settings as the following ...

Page 111: ...t configured from the drop down list in the field of URL Content Filter Now users cannot open any web page with the word facebook inside B Disallow users to play games on Facebook 1 Open Object Settings Keyword Object Click an index number to open the setting page 2 In the field of Contents please type apps facebook Configure the settings as the following figure ...

Page 112: ...ser s Guide 102 3 Open CSM URL Content Filter Profile Click an index number to open the setting page 4 Configure the settings as the following figure 5 When you finished the above steps please open Firewall General Setup ...

Page 113: ...Series User s Guide 103 6 Click the Default Rule tab Choose the profile just configured from the drop down list in the field of URL Content Filter Now users cannot open any web page with the word facebook inside ...

Page 114: ...Vigor2912 Series User s Guide 104 This page is left blank ...

Page 115: ...to oc co ol l I IP P N Ne et tw wo or rk k IP means Internet Protocol Every device in an IP based Network including routers print server and host PCs needs an IP address to identify its location on the network To avoid address conflicts IP addresses are publicly registered with the Network Information Centre NIC Having a unique IP address is mandatory for those devices participated in the public n...

Page 116: ...o ask for a connection Then a session will be created Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system And your IP address DNS server and other related information will usually be assigned by your ISP N Ne et tw wo or rk k C Co on nn ne ec ct ti io on n b by y 3 3G G 4 4G G U US SB B M Mo od de em m For 3G 4G mobile communication through Access Point is ...

Page 117: ...ommunication service such as DSL Cable modem etc If any connection problem occurred on one of the ISP connections all the traffic will be guided and switched to the normal communication port for proper operation Please configure WAN1 WAN2 and WAN3 settings This webpage allows you to set general setup for WAN1 WAN2 and WAN3 respectively In default WAN2 is disabled If you want to enable it simply cl...

Page 118: ...have no strong demand about speed test result keep default settings as IP based Index Click the WAN interface link under Index to access into the WAN configuration page Enable V means such WAN interface is enabled and ready to be used Physical Mode Type Display the physical mode and physical type of such WAN interface Line Speed Display the downstream and upstream rate of such WAN interface Active...

Page 119: ...lance Mode please type the line speed for downloading and uploading for such WAN interface The unit is kbps VLAN Tag insertion Enable Enable the function of VLAN with tag The router will add specific VLAN number to all packets on the WAN while sending them out Please type the tag value and specify the priority for the packets sending by WAN1 Disable Disable the function of VLAN with tag Tag value ...

Page 120: ...ve Mode the option of Active When will appear Any of the selected WAN disconnect Such WAN connection will be activated when any selected WAN interface checked below disconnects All of the selected WAN disconnect Such WAN connection will be activated only when all of selected WAN interfaces checked below disconnect Check boxes for WAN1 to WAN3 Specify the WAN interface by checking the WAN box After...

Page 121: ...erface The unit is kbps Active Mode Choose Always On to make such WAN connection being activated always Load Balance Check this box to enable auto load balance function for such WAN interface When the data traffic is large the WAN interface with the function enabled will balance the data transmission automatically among all of the WAN interfaces in connection status Active When If you choose Failo...

Page 122: ... Description Index Display the WAN interface Display Name It shows the name of the WAN1 WAN2 WAN3 that entered in general setup Physical Mode It shows the physical connection for WAN1 Ethernet Fiber WAN2 Ethernet and WAN3 USB according to the real network connection Access Mode Use the drop down list to choose a proper access mode Then click Details Page for accessing the settings page to configur...

Page 123: ...g web page will be shown Available settings are explained as follows Item Description Enable Disable Click Enable for activating this function If you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid ISP Access Setup Enter your allocated username password and authentication parameters according to the information provided by your ISP Ser...

Page 124: ...can enable this setting to use current WAN gateway IP address for pinging With the IP address es pinging Vigor router can check if the WAN connection is on or off TTL Time to Live Set TTL value of PING operation Ping Interval Type the interval for the system to execute the PING operation Ping Retry Type the number of times that the system is allowed to execute the PING operation before WAN disconn...

Page 125: ...ss in the Fixed IP field Please contact your ISP before you want to use this function WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 8 public IP addresses other than the current one you are using Type the additional WAN IP address and check the Enable box Then click OK to exit the dialog Fixed IP C...

Page 126: ...tic or Dynamic IP tab The following web page will be shown Available settings are explained as follows Item Description Enable Disable Click Enable for activating this function If you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid Keep WAN Connection Normally this function is designed for Dynamic IP environments because some ISPs will...

Page 127: ...ber of times that the system is allowed to execute the PING operation before WAN disconnection is judged MTU It means Max Transmit Unit for packet Path MTU Discovery It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit path Click Detect to open the following dialog Path MTU to Type the IP address as the specific transmit path MTU reduce size by It determin...

Page 128: ...pe in IP address manually WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 8 public IP addresses other than the current one you are using Obtain an IP address automatically Click this button to obtain the IP address automatically if you want to use Dynamic IP mode Router Name Type in the router name ...

Page 129: ...ype in the primary IP address for the router if you want to use Static IP mode If necessary type in secondary IP address for necessity in the future After finishing all the settings here please click OK to activate them 4 4 1 1 3 3 3 3 D De et ta ai il ls s P Pa ag ge e f fo or r P PP PT TP P L L2 2T TP P i in n W WA AN N1 1 W WA AN N2 2 To use PPTP L2TP as the accessing protocol of the internet p...

Page 130: ... Path MTU Discovery It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit path Click Detect to open the following dialog Path MTU to Type the IP address as the specific transmit path MTU reduce size by It determines the decreasing size of MTU value For example the number specified in this field is 8 The maximum MTU size is 1500 After clicking the detect but...

Page 131: ...ess in the Fixed IP field Please contact your ISP before you want to use this function Click Yes to use this function and type in a fixed IP address in the box Fixed IP Address Type a fixed IP address WAN IP Network Settings Obtain an IP address automatically Click this button to obtain the IP address automatically Specify an IP address Click this radio button to specify some data IP Address Type ...

Page 132: ...er 3G 4G USB Modem PPP mode Click Enable for activating this function If you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid SIM PIN code Type PIN code of the SIM card that will be used to access Internet The maximum length of the PIN code you can set is 15 characters Modem Initial String Such value is used to initialize USB modem Plea...

Page 133: ...15 in Schedule Setup You can type in four sets of time schedule for your request All the schedules can be set previously in Application Schedule web page and you can use the number that you have set in that web page WAN Connection Detection Such function allows you to verify whether network connection is alive or not through ARP Detect or Ping Detect Mode Choose ARP Detect or Ping Detect for the s...

Page 134: ...ter 4G USB Modem DHCP mode Click Enable for activating this function If you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid SIM PIN code Type PIN code of the SIM card that will be used to access Internet The maximum length of the PIN code you can set is 19 characters Network Mode Force Vigor router to connect Internet with the mode spe...

Page 135: ...ther network connection is alive or not through ARP Detect or Ping Detect Mode Choose ARP Detect or Ping Detect for the system to execute for WAN detection If you choose Ping Detect as the detection mode you have to type required settings for the following items Primary Secondary Ping IP If you choose Ping Detect as detection mode you have to type Primary or Secondary IP address in this field for ...

Page 136: ...s 2001 B010 7300 200 64 offered by the ISP In addition PCs under LAN also can have the public IPv6 address for Internet access by means of the generated prefix No need to type any other information for PPP mode Available settings are explained as follows Item Description WAN Connection Detection Such function allows you to verify whether network connection is alive or not through Ping Detect Mode ...

Page 137: ...Below shows an example for successful IPv6 connection based on PPP mode Note At present the IPv6 prefix can be acquired via the PPPoE mode connection which is available for the areas such as Taiwan hinet the Netherlands Australia and UK ...

Page 138: ...ion file It gets a public IPv6 IP address and an IPv6 prefix from the tunnel broker and then monitors the state of the tunnel in background After getting the IPv6 prefix and starting router advertisement daemon RADVD the PC behind this router can directly connect to IPv6 the Internet Available settings are explained as follows Item Description Username Type the name obtained from the broker It is ...

Page 139: ...on mode you have to type TTL value After finished the above settings click OK to save the settings 4 4 1 1 3 3 9 9 D De et ta ai il ls s P Pa ag ge e f fo or r I IP Pv v6 6 A AI IC CC CU U i in n W WA AN N1 1 W WA AN N2 2 W WA AN N3 3 Available settings are explained as follows Item Description Always On Check this box to keep the network connection always Username Type the name obtained from the ...

Page 140: ...provider The maximum length of the prefix you can set is 128 characters WAN Connection Detection Such function allows you to verify whether network connection is alive or not through Ping Detect Mode Choose Always On or Ping Detect for the system to execute for WAN detection Ping IP Hostname If you choose Ping Detect as detection mode you have to type IP address in this field for pinging TTL Time ...

Page 141: ...tect or Ping Detect Mode Choose Always On Ping Detect or NS Detect for the system to execute for WAN detection With NS Detect mode the system will check if network connection is established or not like IPv4 ARP Detect Always On means no detection will be executed The network connection will be on always Ping IP Hostname If you choose Ping Detect as detection mode you have to type IP address in thi...

Page 142: ... De et ta ai il ls s P Pa ag ge e f fo or r I IP Pv v6 6 S St ta at ti ic c I IP Pv v6 6 i in n W WA AN N1 1 W WA AN N2 2 This type allows you to setup static IPv6 address for WAN interface Available settings are explained as follows Item Description Static IPv6 Address configuration IPv6 Address Type the IPv6 Static IP Address Prefix Length Type the fixed value for prefix length Add Click it to a...

Page 143: ...ction mode you have to type IP address in this field for pinging TTL Time to Live If you choose Ping Detect as detection mode you have to type TTL value Bridge Mode Enable Bridge Mode If the function is enabled the router will work as a bridge modem Enable Firewall It is available when Bridge Mode is enabled When both Bridge Mode and Firewall check boxes are enabled the settings configured user pr...

Page 144: ...rver 6in4 IPv6 Address Type the static IPv6 address for IPv4 tunnel with the value for prefix length LAN Routed Prefix Type the static IPv6 address for LAN routing with the value for prefix length Tunnel TTL Type the number for the data lifetime in tunnel WAN Connection Detection Such function allows you to verify whether network connection is alive or not through Ping Detect Mode Choose Always On...

Page 145: ...Vigor2912 Series User s Guide 135 Below shows an example for successful IPv6 connection based on 6in4 Static Tunnel mode ...

Page 146: ...h order bits that are identical across all CE IPv4 addresses within a given 6rd domain It may be any value between 0 and 32 6rd Prefix Type the 6rd IPv6 address 6rd Prefix Length Type the IPv6 prefix length for the 6rd IPv6 prefix in number of bits WAN Connection Detection Such function allows you to verify whether network connection is alive or not through Ping Detect Mode Choose Always On or Pin...

Page 147: ...Vigor2912 Series User s Guide 137 After finished the above settings click OK to save the settings Below shows an example for successful IPv6 connection based on 6rd mode ...

Page 148: ...tion is enabled Click Advanced to open the following page Available settings are explained as follows Item Description Options List Display related information of the DHCP client option Enable Check the box to enable the function of DHCP Option Each DHCP option is composed by an option number with data For example Option number 100 Data abcd When such function is enabled the specified values for D...

Page 149: ...ure option 61 here the detailed settings in WAN Interface Access will be overwritten DataType Choose the type ASCII Hex or IP address for the data to be stored Data Type the real content of the data to be processed by the function of DHCP option Add Create a new entry and display on the Option List table Update Edit the existing entry Delete Remove the existing entry After finished the above setti...

Page 150: ...ot be configured here Channels 5 8 are configurable Enable Display whether the settings in this channel are enabled Yes or not No WAN Type Displays the physical medium that the channel will use VLAN Tag Displays the VLAN tag value that will be used for the packets traveling on this channel Port based Bridge The network traffic flowing on each channel will be identified by the system via their VLAN...

Page 151: ...d settings are in the range from 1 to 4095 The network traffic flowing on each channel will be identified by the system via their VLAN Tags Channels using the same WAN type may not configure the same VLAN tag value Priority Choose the number to determine the packet priority for such VLAN The range is from 0 to 7 Bridge mode Enable Click it to enable Bridge mode for such channel Physical Members Gr...

Page 152: ...iguration of this channel Disable Click it to disable the configuration of this channel WAN Type The connections and interfaces created in every channel may select a specific WAN type to be built upon In the Multi VLAN application only the Ethernet WAN type is available The user will be able to select the physical WAN interface the channel shall use here ...

Page 153: ...e VLAN tag configured Physical Members Group the physical ports by checking the corresponding check box es for applying the port based bridge connection Open WAN Interface for this Channel Check the box to enable relating function WAN Application Management can be specified for general management Web configuration telnet TR069 If you choose Management the configuration for this VLAN will be effect...

Page 154: ...T does is to translate the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assigns private IP address to each local host See the following diagram for a briefly understanding In some special case you may have a public IP subnet from your ISP such as 220 135 240 0 24 This means th...

Page 155: ... St ta at ti ic c R Ro ou ut te e When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static routes function rather than other method You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP W Wh ha at t a ar re e V Vi ir rt tu ua al l L LA AN Ns s a an nd d R Ra at te e C Co on...

Page 156: ...follows Item Description General Setup Allow to configure settings for each subnet respectively Index Display all of the LAN items Status Basically LAN1 status is enabled in default LAN2 and IP Routed Subnet can be observed by checking the box of Status DHCP LAN1 is configured with DHCP in default If required please check the DHCP box for each LAN IP Address Display the IP address for each LAN ite...

Page 157: ...t Server IP Address SIAddr Type the IP address of PXE server which is helpful for downloading boot loader via network Option Number Type a number for such function Note If you choose to configure option 61 here the detailed settings in WAN Interface Access will be overwritten DataType Choose the type ASCII or Hex for the data to be stored Data Type the content of the data to be processed by the fu...

Page 158: ...d to a stoppage of the exchange of routing information between routers Default Enable activate the RIP protocol DHCP Server Configuration DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client It is highly recommended that you leave the route...

Page 159: ...en if this client only uses the IP for say 5 minutes the server still reserves 1 day for that client Because a DHCP server only has a limited number of IPs to lease to its DHCP clients soon enough all the IPs will be used out and then no one will be able to get any IPs from this server anymore Therefore this feature is used to get the IP back from inactive clients i e doesn t use the IP but the se...

Page 160: ... e f fo or r I IP P R Ro ou ut te ed d S Su ub bn ne et t Available settings are explained as follows Item Description Network Configuration Enable Disable Click Enable to enable such configuration click Disable to disable such configuration For Routing Usage IPAddress Type in private IP address for connecting to a local private network Default 192 168 1 1 Subnet Mask Type in an address code that ...

Page 161: ...imum is 253 Lease Time Enter the time to determine how long the IP address assigned by DHCP server can be used Use LAN Port Specify an IP for IP Route Subnet If it is enabled DHCP server will assign IP address automatically for the clients coming from P1 and or P2 Please check the box of P1 and P2 Use MAC Address Check such box to specify MAC address MAC Address Enter the MAC Address of the host o...

Page 162: ...detailed information Below shows the settings page for IPv6 It provides 2 daemons for LAN side IPv6 address configuration One is RADVD stateless and the other is DHCPv6 Server Stateful Available settings are explained as follows Item Description Enable Check the box to enable the configuration of LAN 1 IPv6 Setup WAN Primary Interface Use the drop down list to specify a WAN interface for IPv6 Stat...

Page 163: ...quired Management Host under LAN can be assigned IP address from Vigor router via the following method SLAAC stateless The IP address with Prefix of the host shall be formed according to RA transmitted by Vigor router DHCPv6 stateful The IP address of the host shall be assigned after communicating with DHCPv6 server for answering the request of client Off No IP address is assigned Other Option O b...

Page 164: ...d for the device behind the router when IPv6 is in use Min Max Interval Time sec It defines the interval between minimum time and maximum time for sending RA Router Advertisement packets Default Lifetime sec Within such period of time Vigor2925 can be treated as the default gateway Default Preference It determines the priority of the host behind the router when RA Router Advertisement packets are ...

Page 165: ...c R Ro ou ut te e f fo or r I IP Pv v4 4 Available settings are explained as follows Item Description Set to Factory Default Clear all of the settings and return to factory default settings Viewing Routing Table Displays the routing table for your reference Index The number 1 to 10 under Index allows you to open next page to set up static route Destination Address Displays the destination address ...

Page 166: ...ription Enable Check it to enable this profile Destination IP Address Type an IP address as the destination of such static route Subnet Mask Type the subnet mask for such static route Network Interface Use the drop down list to specify an interface for such static route After finishing all the settings here please click OK to save the configuration ...

Page 167: ...ings and return to factory default settings Viewing IPv6 Routing Table Displays the routing table for your reference Index The number 1 to 40 under Index allows you to open next page to set up static route Destination Address Displays the destination address of the static route Status Displays the status of the static route Click any underline of index number to get the following page Available se...

Page 168: ... works properly use the Main Router to surf the Internet create a private subnet 192 168 10 0 using an internal Router A 192 168 1 2 create a public subnet 211 100 88 0 via an internal Router B 192 168 1 3 have set Main Router 192 168 1 1 as the default gateway for the Router A 192 168 1 2 Before setting Static Route user A cannot talk to user B for Router A can only forward recognized packets to ...

Page 169: ...gulates all packets destined to 192 168 10 0 will be forwarded to 192 168 1 2 Click OK 3 Return to Static Route Setup page Click on another Index Number to add another static route as show below which regulates all packets destined to 211 100 88 0 will be forwarded to 192 168 1 3 Click OK 4 Go to Diagnostics and choose Routing Table to verify current routing table ...

Page 170: ...ach of VLANs to each of the different IP subnets that the router may also be operating to provide even more isolation The said functionality is tag based multi subnet P Po or rt t B Ba as se ed d V VL LA AN N Relative to tag based VLAN which groups clients with an identifier port based VLAN uses physical ports P1 P4 to separate the clients into different VLAN group Open LAN VLAN The following page...

Page 171: ...AN ID number The range is form 0 to 4095 Priority Type the packet priority number for such VLAN The range is from 0 to 7 Note Leave one VLAN untagged at least to prevent from not connecting to Vigor router due to unexpected error To add or remove a VLAN please refer to the following example C Co on nf fi ig gu ur ri in ng g p po or rt t b ba as se ed d V VL LA AN N f fo or r w wi ir re el le es ss...

Page 172: ...AN Routing by checking the box between LAN1 and LAN2 Vigor router supports up to six private IP subnets on LAN Each can be independent isolated or common able to communicate with each other This is ideal for departmental or multi occupancy applications Note As for the VLAN applications refer to Appendix I VLAN Application on Vigor Router for more detailed information ...

Page 173: ...this function However IP MAC which is not listed in IP Bind List also can connect to Internet Disable Click this radio button to disable this function All the settings on this page will be invalid Strict Bind Click this radio button to block the connection of the IP MAC which is not listed in IP Bind List ARP Table This table is the LAN ARP table of this router The information for IP and MAC will ...

Page 174: ...dit to the table of IP Bind List Update It allows you to edit and modify the selected IP address and MAC address that you create before Delete You can remove any item listed in IP Bind List Simply click and select the one and click Delete The selected item will be removed from the IP Bind List Backup Store the configuration for Bind IP to MAC as a file Restore Restore the previously stored configu...

Page 175: ... this feature First it is more economical without other detecting equipments to be set up Second it may be able to view traffic on one or more ports within a VLAN at the same time Third it can transfer all data traffics to be mirrored to one analyzer connect to the mirroring port Last it is more convenient and easy to configure in user s interface Available settings are explained as follows Item D...

Page 176: ...configured here while trying to access into the Internet or the desired web page through this router That is a company which wants to have an advertisement for its products to users can specify the URL in this page to reach its goal Each item is explained as follows Item Description Profile Display the number link which allows you to configure the profile Status Display the content Disable URL Red...

Page 177: ... the web page that the hotel wants the user s to visit Message Type words or sentences here The message will be displayed on the screen for several seconds when the wireless users access into the web page through the router Default Message Click it to restore the default content Notice Content given in this field will be displayed on the screen when a web page is redirected by web portal mechanism...

Page 178: ...sons such as load balance security routing decision and etc Through protocol IP address port number and interface configuration Route Policy can be used to configure any routing rules to fit actual request In general Route Policy can easily reach the following purposes Load Balance You may manually create polices to balance the traffic across network interface Specify Interface Through dedicated i...

Page 179: ...is used as source IP of the outgoing packets Src IP Start Displays the IP address for the start of the source IP Src IP End Displays the IP address for the end of the source IP Dest IP Start Displays the IP address for the start of the destination IP Dest IP End Displays the IP address for the end of the destination IP Dest Port Start Displays the IP address for the start of the destination port D...

Page 180: ... blank it means that all the source IPs inside the LAN will be passed through the WAN interface Destination IP Any Any IP can be treated as the destination IP Dest IP Start Type the destination IP start for the specified WAN interface Dest IP End Type the destination IP end for the specified WAN interface If this field is blank it means that all the destination IPs will be passed through the WAN i...

Page 181: ...ilable settings are explained as follows Item Description Force NAT Force Routing It determines which mechanism that the router will use to forward the packet to WAN 5 After choosing the mechanism click Next to get the summary page for reference 6 If there is no error click Finish to complete wizard setting ...

Page 182: ...ries User s Guide 172 To use Advance Mode do the following steps 1 Click the Advance Mode radio button 2 Click Index 1 to access into the following page Available settings are explained as follows Item Description ...

Page 183: ... ending IP for such profile Dest IP Subnet Define a subnet containing IP address and mask address Network Type an IP address here Mask Use the drop down list to choose a suitable mask for the network Destination Port Any Any port number can be treated as the destination port Dest Port Start Type the destination port start for the destination IP Dest Port End Type the destination port end for the d...

Page 184: ...e Routing Failover to Check this button to lead the data passing through specific interface WAN LAN VPN Route Policy automatically when the selected interface defined in Send via if criteria matched is down WAN LAN Use the drop down list to choose an interface as an auto failover interface VPN Use the drop down list to choose a VPN tunnel as a failover tunnel Route Policy Use the drop down list to...

Page 185: ...ing figure a LAN to LAN VPN tunnel is built between DrayTek VPN router e g Vigor2925 series and the remote router Firewall Router can receive all of the traffic coming from remote PC which wants to access into Internet and send back the packets to Remote Router through VPN Router 1 Establish a VPN tunnel between VPN Router and the Remote Router 2 Change to default route for the router located in R...

Page 186: ...t value is fixed as 250 And Routes in Routing Table are fixed as 150 You can adjust the value for such route policy with lower value e g 100 to ensure it will be applied to packets transmission with the highest priority 5 After finished the above settings click OK to save the configuration 6 To route the packets coming from the Firewall Router back to the remote router access into the web user int...

Page 187: ...ed by the side of Router A to break through the Internet censorship circumvention A VPN tunnel has been established between Router A and router B 1 Access into the web user interface of Router A 2 Open Load Balance Route Policy General Setup 3 Click any index number e g 1 in this case 4 In the following web page check Enable type 192 168 1 10 as Src IP Range type 213 57 89 100 as the Destination I...

Page 188: ...Vigor2912 Series User s Guide 178 5 Click OK to save the settings ...

Page 189: ... such mode to make Vigor router analyze how a single packet will be sent by a route policy Analyze how multiple packets Choose such mode to make Vigor router analyze how multiple packets in a specified file will be sent by a route policy Packet Information Specify the nature of the packets to be analyzed by Vigor router ICMP UDP TCP ANY Specify a protocol for diagnosis Src IP Type an IP address as...

Page 190: ...load link to get a blank example file Then click such button to select that blank csv file for saving the result of analysis Analyze Click it to perform the job of analyzing The analyzed result will be shown on the page If required click export analysis to export the result as a file Note that the analysis was based on the current load balance route policy settings we do not guarantee it will be 1...

Page 191: ...the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes Save cost on applying public IP address and apply efficient usage of IP address NAT allows the internal IP addresses of local hosts to be translated into one public IP address thus you can have only one IP address on behalf of the entire intern...

Page 192: ...zed by all users Since the server is actually located inside the LAN the network well protected by NAT of the router and identified by its private IP address port the goal of Port Redirection function is to forward all access request with public IP address from external users to the mapping private IP address port of the server The port redirection can only apply to incoming traffic To use this fu...

Page 193: ...nfiguring port redirection Available settings are explained as follows Item Description Enable Check this box to enable such port redirection setting Mode Two options Single and Range are provided here for you to choose To set a range for the specific service select Range In Range mode if the public port start port and end port and the starting IP of private IP had been entered the system will cal...

Page 194: ... Port Specify the private port number of the service offered by the internal host After finishing all the settings here please click OK to save the configuration Note that the router has its own built in services servers such as Telnet HTTP and FTP etc Since the common port numbers of these services servers are all the same you may need to reset the router in order to avoid confliction For example...

Page 195: ... surfing and other such Internet activities from other clients will continue to work without inappropriate interruption DMZ Host allows a defined internal user to be totally exposed to the Internet which usually helps some special applications such as Netmeeting or Internet Games etc The security properties of NAT are somewhat bypassed if you set up DMZ host We suggest you to add additional filter...

Page 196: ...private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host When you have selected one private IP from the above dialog the IP address will be shown on the following screen Click OK to save the setting DMZ Host for WAN2 and WAN3 is slightly different with WAN1 Active True IP selection is available for WAN1 only See the following figure If you ...

Page 197: ...k this button and then a window will automatically pop up as depicted below The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host When you have selected one private IP from the above dialog the IP address will be shown on the following screen Click OK to save the setting After finishing all the settings h...

Page 198: ...escription Index Indicate the relative number for the particular entry that you want to offer service in a local host You should click the appropriate index number to edit or clear the corresponding entry Comment Specify the name for the defined network service WAN Interface Display the WAN interface used by such index Local IP Address Display the private IP address of the local host offering the ...

Page 199: ... address of the local host or click Choose IP to select one Choose IP Click this button and subsequently a window having a list of private IP addresses of local hosts will automatically pop up Select the appropriate IP address of the local host in the list Protocol Specify the transport layer protocol It could be TCP UDP or none for selection Start Port Specify the starting port number of the serv...

Page 200: ...ton is clicked and the configuration has taken effect open port keeps the ports opened forever Once the OK button is clicked and the configuration has taken effect port triggering will only attempt to open the ports once the triggering conditions are met The duration that these ports are opened depends on the type of protocol used The default durations are shown below and these duration values can...

Page 201: ...f the triggering packets Incoming Protocol Display the protocol for the incoming data of such triggering profile Incoming Port Display the port for the incoming data of such triggering profile Status Display if the rule is active or de active Click the index number link to open the configuration page Available settings are explained as follows Item Description Enable Check to enable this entry Ser...

Page 202: ...the port or port range for such triggering profile Incoming Protocol When the triggering packets received it is expected the incoming packets will use the selected protocol Select the protocol TCP UDP or TCP UDP for the incoming data of such triggering profile Incoming Port Type the port or port range for the incoming packets After finishing all the settings here please click OK to save the config...

Page 203: ...ction SPI tracks packets and denies unsolicited incoming data Selectable Denial of Service DoS Distributed DoS DDoS attacks protection I IP P F Fi il lt te er rs s Depending on whether there is an existing Internet connection or in other words the WAN link status is up or down the IP filter architecture categorizes traffic into two Call Filter and Data Filter Call Filter When there is no existing ...

Page 204: ...em s resource while the vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system The DoS Defense function enables the Vigor router to inspect every incoming packet based on the attack signature database Any malicious packet that might duplicate itself to paralyze the host in the secure LAN will be strictly blocked and a Syslog messa...

Page 205: ...e e Such page allows you to enable disable Call Filter and Data Filter determine general rule for filtering the incoming and outgoing data Available settings are explained as follows Item Description Call Filter Check Enable to activate the Call Filter function Assign a start filter set for the Call Filter Data Filter Check Enable to activate the Data Filter function Assign a start filter set for ...

Page 206: ...ese packets then the router s firewall will block the packets directly Block routing packet from WAN Usually IPv6 network sessions traffic from WAN to LAN will be accepted by IPv6 firewall in default IPv6 To prevent remote client accessing into the PCs on LAN check the box to make the packets routed from WAN to LAN via IPv6 being blocked by such router It is effective only for the packets routed b...

Page 207: ...k for the packets that do not match with the filter rules Sessions Control The number typed here is the total sessions of the packets that do not match the filter rule configured in this page Quality of Service Choose one of the QoS rules to be applied as firewall rule For detailed information of setting QoS please refer to the related section later User Management Such item is available only when...

Page 208: ...ge first Or choose Create New from the drop down list in this page to create a new profile For troubleshooting needs you can specify to record information for URL Content Filter by checking the Log box It will be sent to Syslog server Please refer to section Syslog Mail Alert for more detailed information Web Content Filter Select one of the Web Content Filter profile settings created in CSM Web C...

Page 209: ...sed Please use the drop down list to choose a codepage If you do not have any idea of choosing suitable codepage please open Syslog From Codepage Information of Setup dialog you will see the recommended codepage listed on the dialog box Window size It determines the size of TCP protocol 0 65535 The more the value is the better the performance will be However if the network is not stable small valu...

Page 210: ...s Item Description Filter Rule Click a button numbered 1 7 to edit the filter rule Click the button will open Edit Filter Rule web page For the detailed information refer to the following page Active Enable or disable the filter rule Comment Enter filter set comments description Maximum length is 23 character long Move Up Down Use Up or Down link to move the order of the filter rules Next Filter S...

Page 211: ...You may choose up to 4 schedules out of the 15 schedules pre defined in Applications Schedule setup The default setting of this field is blank and the function will always work Clear sessions when schedule ON Check this box to clear the sessions when the above schedule profiles are applied Direction Set the direction of packet flow It is for Data Filter only For the Call Filter this setting is not...

Page 212: ...m in this dialog In addition if you want to use the IP range from defined groups or objects please choose Group and Objects as the Address Type From the IP Group drop down list choose the one that you want to apply Or use the IP Object drop down list to choose the object that you want Service Type Click Edit to access into the following dialog to choose a suitable service type To set the service t...

Page 213: ... Data Filter only Don t care No action will be taken towards fragmented packets Unfragmented Apply the rule to unfragmented packets Fragmented Apply the rule to fragmented packets Too Short Apply the rule only to packets that are too short to contain a complete header Filter Specifies the action to be taken when packets match the rule Block Immediately Packets matching the rule will be dropped imm...

Page 214: ...te New from the drop down list in this page to create a new profile All the hosts in LAN must follow the standard configured in the APP Enforcement profile selected here For detailed information refer to the section of APP Enforcement profile setup For troubleshooting needs you can specify to record information for IM P2P by checking the Log box It will be sent to Syslog server Please refer to sec...

Page 215: ...lter link from the drop down list in this page to create a new profile Advance Setting Click Edit to open the following window However it is strongly recommended to use the default settings here Codepage This function is used to compare the characters among different languages Choose correct codepage can help the system obtaining correct ASCII after decoding data from URL and enhance the correctne...

Page 216: ...out is configured for the data flow which matched with the firewall rule DrayTek Banner Please uncheck this box and the following screen will not be shown for the unreachable web page The default setting is Enabled Strict Security Checking For the sake of security you might want the router executing strict security checking for data transmission The router performance will be affected if you invok...

Page 217: ...f two IP filters call filter or data filter You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner Each filter set is composed by 7 filter rules which can be further defined After that in General Setup you may specify one set for call filter and one set for data filter to execute first ...

Page 218: ...hold of the TCP SYN packets from the Internet has exceeded the defined value the Vigor router will start to randomly discard the subsequent TCP SYN packets for a period defined in Timeout The goal for this is prevent the TCP SYN packets attempt to exhaust the limited resource of Vigor router By default the threshold and timeout values are set to 2000 packets per second and 10 seconds respectively ...

Page 219: ...cond That means when 2000 packets per second received they will be regarded as attack event Block IP options Check the box to activate the Block IP options function The Vigor router will ignore any IP packets with IP option field in the datagram header The reason for limitation is IP option appears to be a vulnerability of the security for the LAN because it will carry significant information such...

Page 220: ...is attack involves the perpetrator sending overlapping packets to the target hosts so that those target hosts will hang once they re construct the packets The Vigor routers will block any packets realizing this attacking activity Block ICMP Fragment Check the box to activate the Block ICMP fragment function Any ICMP packets with more fragment bit set are dropped Block Unassigned Numbers Check the ...

Page 221: ...Vigor2912 Series User s Guide 211 After finishing all the settings here please click OK to save the configuration ...

Page 222: ...r account Network administrator can give different firewall policies or rules for different hosts with different User Management accounts This is more flexible and convenient for network management Not only offering the basic checking for Internet access User Management also provides additional firewall rules e g CSM checking for protecting hosts Note Filter rules configured under Firewall usually...

Page 223: ...rofile to the users Rule Based If you choose such mode the router will apply the filter rules configured in Firewall General Setup and Filter Rule to the users Authentication page Web Authentication Choose the protocol for web authentication Display IP Address on the dialog box pops up after successful login Check the box to display the IP address of the client on the pop up window after the user ...

Page 224: ... up to 100 which will be applied for users controlled under User Management Simply open User Management User Profile To set the user profile please click any index number link to open the following page Notice that profile 1 admin and profile 2 System Reservation are factory default settings Profile 2 is reserved for future use ...

Page 225: ...she can access Internet via this router with the limitation configured in this user profile The maximum length of the password you can set is 24 characters Confirm Password Type the password again for confirmation Idle Timeout If the user is idle over the limitation of the timer the network connection will be stopped for such user By default the Idle Timeout is set to 10 minutes Max User Login Suc...

Page 226: ... be downloaded from DrayTek web site Telnet If it is selected the user can use Telnet command to perform the authentication job Landing Page When a user tries to access into the web user interface of Vigor router series with the user name and password specified in this profile he she will be lead into the web page configured in Landing Page field in User Management General Setup Check this box to ...

Page 227: ...e Click this box to decrease the data quota for such profile Reset quota to default when scheduling time expired Set default time quota and data quota for such profile When the scheduling time is up the router will use the default quota settings automatically Enable Check it to use the default setting for time quota and data quota Default Time Quota Type the value for the time manually Default Dat...

Page 228: ...ber link to open the following page Available settings are explained as follows Item Description Name Type a name for this user group Available User Objects You can gather user profiles objects from User Profile page within one user group All the available user objects that you have created will be shown in this box Notice that user object Admin and Dial In User are factory settings User defined p...

Page 229: ... explained as follows Item Description Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically Refresh Click this link to refresh this page manually Index Display the number of the data flow User Display the users which connect to Vigor router currently You can click the link under the username to open the user profil...

Page 230: ...isplay the idle timeout setting for such profile Action Block can prevent specified user accessing into Internet Unblock the user will be blocked Logout the user will be logged out forcefully 4 4 7 7 O Ob bj je ec ct ts s S Se et tt ti in ng gs s Define objects such as IP address service type keyword file extension and others These pre defined objects can be applied in CSM ...

Page 231: ...mple all the IPs in the same department can be defined with an IP object a range of IP address You can set up to 192 sets of IP Objects with different conditions Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the object profile To set a new profile please do the ...

Page 232: ...hen all the IP addresses specified with LAN RT VPN interface will be opened for you to choose in Edit Filter Rule page Address Type Determine the address type for the IP address Select Single Address if this object contains one IP address only Select Range Address if this object contains several IPs within a range Select Subnet Address if this object contains one subnet for IP address Select Any A...

Page 233: ...et Mask Type the subnet mask if the Subnet Address type is selected Invert Selection If it is checked all the IP addresses except the ones listed above will be applied later while it is chosen 3 After finishing all the settings here please click OK to save the configuration Below is an example of IP objects settings ...

Page 234: ...e explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile To set a new profile please do the steps listed below 1 Click the number e g 1 under Index column for configuration in details 2 The configuration page will be shown as follows ...

Page 235: ...cified interface chosen above will be shown in this box Selected IP Objects Click button to add the selected IP objects in this box 3 After finishing all the settings here please click OK to save the configuration 4 4 7 7 3 3 I IP Pv v6 6 O Ob bj je ec ct t You can set up to 64 sets of IPv6 Objects with different conditions Available settings are explained as follows Item Description Set to Factor...

Page 236: ... Range Address if this object contains several IPv6s within a range Select Subnet Address if this object contains one subnet for IPv6 address Select Any Address if this object contains any IPv6 address Select Mac Address if this object contains Mac address Mac Address Type the MAC address of the network card which will be controlled Start IP Address Type the start IP address for Single Address typ...

Page 237: ...ts into one IPv6 group Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile To set a new profile please do the steps listed below 1 Click the number e g 1 under Index column for configuration in details 2 The configuration page will be shown as follow...

Page 238: ...this box 3 After finishing all the settings please click OK to save the configuration 4 4 7 7 5 5 S Se er rv vi ic ce e T Ty yp pe e O Ob bj je ec ct t You can set up to 96 sets of Service Type Objects with different conditions Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display ...

Page 239: ...ort number when the first and last value are the same it indicates one port when the first and last values are different it indicates a range for the port and available for this profile when the first and last value are the same it indicates all the ports except the port defined here when the first and last values are different it indicates that all the ports except the range defined here are avai...

Page 240: ...le settings are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile To set a new profile please do the steps listed below 1 Click the number e g 1 under Group column for configuration in details 2 The configuration page will be shown as follows ...

Page 241: ...jects Click button to add the selected IP objects in this box 3 After finishing all the settings please click OK to save the configuration 4 4 7 7 7 7 K Ke ey yw wo or rd d O Ob bj je ec ct t You can set 200 keyword object profiles for choosing as black white list in CSM URL Web Content Filter Profile Available settings are explained as follows Item Description Set to Factory Default Clear all pro...

Page 242: ...re explained as follows Item Description Name Type a name for this profile e g game Type a name for this profile e g game Contents Type the content for such profile For example type gambling as Contents When you browse the webpage the page with gambling information will be watched out and be passed blocked based on the configuration on Firewall settings 3 After finishing all the settings please cl...

Page 243: ... Filter Profile Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile To set a new profile please do the steps listed below 1 Click the number e g 1 under Index column for configuration in details 2 The configuration page will be shown as follows Avail...

Page 244: ...jects in this box 3 After finishing all the settings please click OK to save the configuration 4 4 7 7 9 9 F Fi il le e E Ex xt te en ns si io on n O Ob bj je ec ct t This page allows you to set eight profiles which will be applied in CSM URL Content Filter All the files with the extension names specified in these profiles will be processed according to the chosen action Available settings are exp...

Page 245: ...ls 2 The configuration page will be shown as follows Available settings are explained as follows Item Description Profile Name Type a name for this profile The maximum length of the name you can set is 7 characters 3 Type a name for such profile and check all the items of file extension that will be processed in the router Finally click OK to save this profile ...

Page 246: ... Each item is explained as follows Item Description Set to Factory Default Clear all of the settings and return to factory default settings Index Display the profile number that you can configure Profile Display the name for such SMS profile SMS Provider Display the service provider which offers SMS service To set a new profile please do the steps listed below 1 Click the SMS Provider tab and clic...

Page 247: ...n use to register to selected SMS provider The maximum length of the name you can set is 31 characters Password Type a password that the sender can use to register to selected SMS provider The maximum length of the password you can set is 31 characters Quota Type the number of the credit that you purchase from the service provider chosen above Note that one credit equals to one SMS text message on...

Page 248: ...x 10 are fixed You can click the number e g 9 under Index column for configuration in details Available settings are explained as follows Item Description Profile Name Display the name of this profile It cannot be modified Service Provider Type the website of the service provider Type the URL string in the box under the filed of Service Provider You have to contact your SMS provider to obtain the ...

Page 249: ...rval for the system to send SMS After finishing all the settings here please click OK to save the configuration M Ma ai il l S Se er rv vi ic ce e O Ob bj je ec ct t This page allows you to set ten profiles which will be applied in Application SMS Mail Alert Service Each item is explained as follows Item Description Set to Factory Default Clear all of the settings and return to factory default set...

Page 250: ...ver Type the IP address of the mail server The maximum length of the name you can set is 63 characters SMTP Port Type the port number for SMTP server Sender Address Type the e mail address of the sender Use SSL Check this box to enable such function Authentication The mail server must be authenticated with the correct username and password to have the right of sending message out Check the box to ...

Page 251: ...Alert Service You can set an object with different monitoring situation Each item is explained as follows Item Description Set to Factory Default Clear all of the settings and return to factory default settings Index Display the profile number that you can configure Profile Display the name for such mail server profile Settings Display the category selected for such profile To set a new profile pl...

Page 252: ...tion Profile Name Type a name for such notification profile The maximum length of the name you can set is 15 characters Category Display the types that will be monitored Status Display the status for the category You can check the box you want to be monitored 3 After finishing all the settings here please click OK to save the configuration ...

Page 253: ...g Because it checks the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP headers only On the other hand Vigor router can prevent user from accidentally downloading malicious codes from web pages It s very common that malicious codes conceal in the executable objects such as ActiveX Java Applet compressed file...

Page 254: ...ed in Default Rule of Firewall General Setup for filtering Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Profile Display the number of the profile which allows you to click to set different policy Name Display the name of the APP Enforcement Profile Click the number under Index column for settings in detail There are four tabs IM P2P Protoco...

Page 255: ... this page Clear All Uncheck all the selected boxes Support List Display the all the information name version and note about IM P2P Protocol and others applications that Vigor router supports for APPE function Action Block Block all the packets passing with the settings configured in this page Pass Pass all the packets with the settings configured in this page The profiles configured here can be a...

Page 256: ...Vigor2912 Series User s Guide 246 The items categorized under P2P ...

Page 257: ...er web feature where malicious code may conceal Once a user type in or click on an URL with objectionable keywords URL keyword blocking facility will decline the HTTP request to that web page thus can limit user s access to the website You may imagine URL Content Filter as a well trained convenience store clerk who won t sell adult magazines to teenagers At office URL Content Filter can also provi...

Page 258: ... access to web sites or web pages such as www sex com www backdoor net images sex p_386 html Or you may simply specify the full or partial URL such as www sex com or sex com Also the Vigor router will discard any request that tries to retrieve the malicious code Click CSM and click URL Content Filter Profile to open the profile setting page Each item is explained as follows Item Description Set to...

Page 259: ...s specified in URL Access Control and Web Feature below When you choose this setting both configuration set in this page for URL Access Control and Web Feature will be inactive Either URL Access Control First When all the packages matching with the conditions specified in URL Access Control and Web Feature below such function can determine the priority for the actions executed For this one the rou...

Page 260: ...n for this is to prevent someone dodges the URL Access Control You must clear your browser cache first so that the URL content filtering facility operates properly on a web page that you visited before Action This setting is available only when Either URL Access Control First or Either Web Feature First is selected Pass Allow accessing into the corresponding webpage with the keywords listed on the...

Page 261: ...the keywords listed on the box below Pass Allow accessing into the corresponding webpage with the keywords listed on the box below Block Restrict accessing into the corresponding webpage with the keywords listed on the box below If the web pages do not match with the specified feature set here it will be processed with reverse action Cookie Check the box to filter out the cookie transmission from ...

Page 262: ...ing a new license for web content filter you have to click Activate to satisfy your request Be aware that service provider matching with Vigor router currently offers a period of time for trial version for users to experiment If you want to purchase a formal edition simply contact with the channel partner or your dealer Click CSM and click Web Content Filter Profile to open the profile setting pag...

Page 263: ...content filter profile Setup Test Server It is recommended for you to use the default setting auto selected Find more Click it to open http myvigor draytek com for searching another qualified and suitable server Test a site to verify whether it is categorized Click this link to do the verification Set to Factory Default Click this link to retrieve the factory settings Default Message You can type ...

Page 264: ... time about 1 second in the router When the user tries to access the same destination ID the router will check it by comparing the record stored If it matches the page will be retrieved quickly Such item can provide URL matching with the fastest rate L1 L2 Cache the router will check the URL with fast processing rate combining the feature of L1 and L2 Eight profiles are provided here as Web conten...

Page 265: ...ing into the corresponding webpage with the characters listed on Group Object Selections If the web pages do not match with the specified feature set here they will be processed with the categories listed on the box below Action Pass allow accessing into the corresponding webpage with the categories listed on the box below Block restrict accessing into the corresponding webpage with the categories...

Page 266: ...CF license must be activated first Otherwise DNS filter does not have any effect on packets Available settings are explained as follows Item Description DNS Filter Check Enable to enable such feature Syslog The filtering result can be recorded according to the setting selected for Syslog None There is no log file will be recorded for this profile Pass Only the log about Pass will be recorded in Sy...

Page 267: ...ofiles as Service Choose the WCF profiles to apply DNS filter Cache Time hour Set the time for DNS query Administration Message Type the words or sentences which will be displayed when a web page is blocked by Vigor router After finishing all the settings please click OK to save the configuration ...

Page 268: ...always need many sessions for procession and also they will occupy over resources which might result in important accesses impacted To solve the problem you can use limit session to limit the session procession for specified Hosts In the Bandwidth Management menu click Sessions Limit to open the web page To activate the function of limit session simply click Enable and set the default session limi...

Page 269: ...ecific limitation you set for each index Add Adds the specific session limitation onto the list above Edit Allows you to edit the settings for the selected limitation Delete Remove the selected settings existing on the limitation list Administration Message Type the words which will be displayed when reaches the maximum number of Internet sessions permitted Default Message Click this button to app...

Page 270: ...age To activate the function of limit bandwidth simply click Enable and set the default upstream and downstream limit Available settings are explained as follows Item Description Bandwidth Limit Enable Click this button to activate the function of limit bandwidth Apply to 2nd Subnet Check this box to apply the bandwidth limit to the second subnet specified in LAN General Setup Disable Click this b...

Page 271: ...he speed of the downstream If you do not set the limit in this field the system will use the default speed for the specific limitation you set for each index Add Add the specific speed limitation onto the list above Edit Allow you to edit the settings for the selected limitation Delete Remove the selected settings existing on the limitation list Smart Bandwidth Limit Check this box to have the ban...

Page 272: ... to queues and associated service types The basic QoS implementation in Vigor routers is to classify and schedule packets based on the service type information in the IP header For instance to ensure the connection with the headquarter a teleworker may enforce an index of QoS Control to reserve bandwidth for HTTPS connection while using lots of application at the same time One more larger scale im...

Page 273: ...ervice to open the web page Available settings are explained as follows Item Description General Setup Index Display the WAN interface number that you can edit Status Display if the WAN interface is available for such function or not Bandwidth Display the inbound and outbound bandwidth setting for the WAN interface Direction Display which direction that such function will influence Class 1 Class2 ...

Page 274: ...the general setup of WAN interface As to class rule simply click the Edit link to access into next for configuration You can configure general setup for the WAN interface edit the Class Rule and edit the Service Type for the Class Rule for your request O On nl li in ne e S St ta at ti is st ti ic cs s Display an online statistics for quality of service for your reference This feature is available ...

Page 275: ...nterface For example if your ADSL supports 1M of downstream and 256K upstream please set 1000kbps for this box The default value is 10000kbps WAN Outbound Bandwidth It allows you to set the connecting rate of data output for WAN interface For example if your ADSL supports 1M of downstream and 256K upstream please set 256kbps for this box The default value is 10000kbps Reserved Bandwidth Ratio It i...

Page 276: ...bound must be smaller than the real bandwidth to ensure correct calculation of QoS It is suggested to set the bandwidth value for inbound outbound as 80 85 of physical network speed provided by ISP to maximize the QoS performance E Ed di it t t th he e C Cl la as ss s R Ru ul le e f fo or r Q Qo oS S 1 The first three Class 1 to Class 3 class rules can be adjusted for your necessity To add edit or...

Page 277: ...dress For Single Address you have to fill in Start IP address For Range Address you have to fill in Start IP address and End IP address For Subnet Address you have to fill in Start IP address and Subnet Mask DiffServ CodePoint All the packets of data will be divided with different levels and will be processed according to the level type by the system Please assign one of the levels of the data for...

Page 278: ...xisted rule please select the radio button of that one and click Edit to open the rule edit page for modification E Ed di it t t th he e S Se er rv vi ic ce e T Ty yp pe e f fo or r C Cl la as ss s R Ru ul le e 1 To add a new service type edit or delete an existed service type please click the Edit link under Service Type field 2 After you click the Edit link you will see the following page ...

Page 279: ...ter finishing all the settings here please click OK to save the configuration By the way you can set up to 10 service types If you want to edit delete an existed service type please select the radio button of that one and click Edit Delete for modification R Re et ta ag g t th he e P Pa ac ck ke et ts s f fo or r I Id de en nt ti if fi ic ca at ti io on n Packets coming from LAN IP can be retagged...

Page 280: ...the router is online you will be able to use the registered domain name to access the router or internal virtual servers from the Internet It is particularly helpful if you host a web server FTP server or other server behind the router Before you use the Dynamic DNS feature you have to apply for free DDNS service to the DDNS service providers The router provides up to three accounts from three dif...

Page 281: ...rmation to DDNS server Auto Update interval Set the time for the router to perform auto update for DDNS service Index Click the number below Index to access into the setting page of DDNS setup to set account s WAN Interface Display the WAN interface used Domain Name Display the domain name that you set on the setting page of DDNS setup Active Display if this account is active or inactive 3 Select ...

Page 282: ...ting the router will use WAN1 WAN2 WAN3 as the only channel for such account Service Provider Select the service provider for the DDNS account Service Type Select a service type Dynamic Custom or Static If you choose Custom you can modify the domain that is chosen in the Domain Name field Domain Name Type in one domain name that you applied previously Use the drop down list to choose the desired d...

Page 283: ...ffered for you to choose WAN IP If it is selected and the WAN IP of Vigor router is private DDNS update will take place right away Internet IP If it is selected and the WAN IP of Vigor router is private it will be converted to public IP before DDNS update takes place 4 Click OK button to activate the settings You will see your setting has been saved Disable the Function and Clear all Dynamic DNS A...

Page 284: ...ess es to correspondent servers Thus even the remote PC is adopting public DNS as the DNS server the LAN DNS resolution on Vigor2912 series will respond the specified private IP address Open Applications LAN DNS to get the following page Each item is explained as follows Item Description Set to Factory Default Clear all profiles and recover to factory settings Enable Check the box to enable the se...

Page 285: ... a name here for LAN DNS and click OK to save the configuration the name also will be applied to conditional DNS forwarding automatically Domain Name Type the domain name for such profile CNAME Alias Domain Name CNAME is abbreviation of Canonical name record Such option is used to record the domain name or the host alias Add Click it to add a new host with specified reference Delete Click it to re...

Page 286: ... same domain name However you have to check this box to make the router identify respond the IP address for the DNS query coming from different LAN PC Delete Click it to remove an existed IP address on the list 3 Click OK button to save the settings 4 If you need to configure LAN DNS settings click index 1 to edit the LAN DNS profile just created ...

Page 287: ...er s clock to current time of your PC The clock will reset once if you power down or reset the router There is another way to set up time You can inquiry an NTP server a time server on the Internet to synchronize the router s clock This method can only be applied when the WAN connection has been built up Each item is explained as follows Item Description Set to Factory Default Clear all profiles a...

Page 288: ...always on Force Down Force the connection to be always down Enable Dial On Demand Specify the connection to be dial on demand and the value of idle timeout should be specified in Idle Timeout field Disable Dial On Demand Specify the connection to be up when it has traffic on the line Once there is no traffic over idle timeout the connection will be down and never up again during the schedule Idle ...

Page 289: ...been pre defined in the schedule profiles 4 4 1 10 0 4 4 R RA AD DI IU US S Remote Authentication Dial In User Service RADIUS is a security authentication client server protocol that supports authentication authorization and accounting which is widely used by Internet service providers It is the most common method of authenticating and authorizing dial up and tunneled network users The built in RA...

Page 290: ...buting directory server by clients work on directory and share the information in the directory by clients The LDAP standard is established by the work team of Internet Engineering Task Force IETF As the name described LDAP is designed as an effect way to access directory service without the complexity of other directory service protocols For LDAP is defined to perform inquire and modify the infor...

Page 291: ... you ll need to type in the Regular DN and Regular Password Server IP Address Enter the IP address of LDAP server Destination Port Type a port number as the destination port for LDAP server Use SSL Check the box to use the port number specified for SSL Regular DN Type this setting if Regular Mode is selected as Bind Type Regular Password Specify a password if Regular Mode is selected as Bind Type ...

Page 292: ...The common name identifier for most LDAP server is cn Base Distinguished Name Group Distinguished Name Type or edit the distinguished name used to look up entries on the LDAP server Sometimes you may forget the Distinguished Name since it s too long Then you may click the button to list all the account information on the AD LDAP Server to assist you finish the setup After finished the above settin...

Page 293: ... Control Service or Connection Status Service Default WAN It is used to specify the WAN interface for applying such function The reminder as regards concern about Firewall and UPnP Can t work with Firewall Software Enabling firewall applications on your PC may cause the UPnP function not working properly This is because these applications will block the accessing ability of some network ports Secu...

Page 294: ...ddition such function is available in NAT mode Enable IGMP Snooping Check this box to enable this function Multicast traffic will be forwarded to ports that have members of that group Disabling IGMP snooping will make multicast traffic treated in the same manner as broadcast traffic Refresh Click this link to renew the working multicast group status Group ID This field displays the ID port for the...

Page 295: ...lable settings are explained as follows Item Description Wake by Two types provide for you to wake up the binded IP If you choose Wake by MAC Address you have to type the correct MAC address of the host in MAC Address boxes If you choose Wake by IP Address you have to choose the correct IP address IP Address The IP addresses that have been configured in Firewall Bind IP to MAC will be shown in thi...

Page 296: ...abnormal situations Vigor router allows you to set up to 10 SMS profiles which will be sent out according to different conditions S SM MS S P Pr ro ov vi id de er r This page allows you to specify SMS provider who will get the SMS what the content is and when the SMS will be sent Available settings are explained as follows Item Description Index Check the box to enable such profile SMS Provider Us...

Page 297: ...page allows you to specify Mail Server profile who will get the notification e mail what the content is and when the message will be sent Available settings are explained as follows Item Description Index Check the box to enable such profile Mail Service Use the drop down list to choose mail service provider You can click Mail Service link to define the mail server Recipient Type the e mail addres...

Page 298: ...omplete The purpose of Bonjour is to decrease the settings configuration e g IP setting If the host and user s computer have the plug in bonjour driver install they can utilize the service offered by the router by clicking the router name icon In short what the Clients users need to know is the name of the router only To enable the Bonjour service click Applications Bonjour to open the following p...

Page 299: ...r and DNSSD have been installed you can open the web page DNSSD and see the following results 3 Open System Maintenance Management Type a name e g Vigor Router as the Router Name and click OK 4 Next open Applications Bonjour Check the service that you want to use via Bonjour ...

Page 300: ...le items will be changed as the follows It means the Vigor router based on Bonjour protocol is ready to be used as a printer server FTP server SSH Server Telnet Server and HTTP Server 6 Now any page or document can be printed out through Vigor router installed with a printer ...

Page 301: ...ic network in a manner that emulates the properties of a point to point private link Below shows the menu items for VPN and Remote Access 4 4 1 11 1 1 1 R Re em mo ot te e A Ac cc ce es ss s C Co on nt tr ro ol l Enable the necessary VPN service as you need If you intend to run a VPN server inside your LAN you should disable the VPN service of Vigor Router to allow VPN tunnel pass through as well ...

Page 302: ...If the remote dial in user does not support the MPPE encryption algorithm the router will transmit no MPPE encrypted packets Otherwise the MPPE encryption scheme will be used to encrypt the data Require MPPE 40 128bits Selecting this option will force the router to encrypt packets by using the MPPE encryption algorithm In addition the remote dial in user will use 40 bit to perform encryption prior...

Page 303: ...ose 192 168 1 200 as the Start IP Address PPP Authentication Methods Select the method s to be used for authentication in PPP connection PPTP LDAP Profile Configured LDAP profiles will be listed under such item Simply check the one you want to enable the PPP authentication by LDAP server profiles However if there is no profile listed simply click the link of PPTP LDAP Profile to create add some ne...

Page 304: ...P payload and use original IP header to encapsulate the data payload only It can just apply to local packet e g L2TP over IPsec The Tunnel mode will not only add the AH ESP payload but also use a new IP header Tunneled IP header to encapsulate the whole original IP packet Authentication Header AH provides data authentication and integrity for IP packets passed between VPN peers This is achieved by...

Page 305: ...plied with the method specified here IPsec Security Method Medium Authentication Header AH means data will be authenticated but not be encrypted By default this option is active High ESP Encapsulating Security Payload ESP means payload data will be encrypted and authenticated You may select encryption algorithm from Data Encryption Standard DES Triple DES 3DES and AES After finishing all the setti...

Page 306: ... certificates for peer dial in users Available settings are explained as follows Item Description Set to Factory Default Click it to clear all indexes Index Click the number below Index to access into the setting page of IPsec Peer Identity Name Display the profile name of that index Click each index to edit one peer digital certificate There are three security levels of digital signature authenti...

Page 307: ...ick to check one specific field of digital signature to accept the peer with matching value The field can be IP Address Domain or E mail Address The box under the Type will appear according to the type you select and ask you to fill in corresponding setting Accept Subject Name Click to check the specific fields of digital signature to accept the peer with matching value The field includes Country ...

Page 308: ... the summary table Available settings are explained as follows Item Description Set to Factory Default Click to clear all indexes Index Click the number below Index to access into the setting page of Remote Dial in User User Display the username for the specific dial in user of the LAN to LAN profile The symbol represents that the profile is empty Active Check the box to enable the selected profil...

Page 309: ... or without IPsec policy above The length of the name password is limited to 19 characters Enable Mobile One Time Passwords mOTP Check this box to make the authentication with mOTP function PIN Code Type the code for authentication e g 1234 Secret Use the 32 digit secret number generated by mOTP in the mobile phone e g e759bb6f0e94c7ab4fe6 Allowed Dial In Type PPTP Allow the remote dial in user to...

Page 310: ...unnel in connecting such function can block data transmission of Netbios Naming Packet inside the tunnel Multicast via VPN Some programs might send multicast packets via VPN connection Pass Click this button to let multicast packets pass through the router Block This is default setting Click this button to let multicast packets be blocked by the router Subnet Chose one of the subnet selections for...

Page 311: ...nal Specify a local ID to be used for Dial in setting in the LAN to LAN Profile setup This item is optional and can be used only in IKE aggressive mode After finishing all the settings here please click OK to save the configuration 4 4 1 11 1 6 6 L LA AN N t to o L LA AN N Here you can manage LAN to LAN connections by maintaining a table of connection profiles You may set parameters including spec...

Page 312: ...s empty Active V means the profile has been enabled X mans the profile has not been enabled Status Online means such LAN to LAN profile is in use Offline means such LAN to LAN profile isn t in use even if the profile has been enabled To edit each profile 1 Click each index to edit each profile and you will get the following page Each LAN to LAN profile includes 4 subgroups If the fields gray out i...

Page 313: ...cription Common Settings Profile Name Specify a name for the profile of the LAN to LAN connection Enable this profile Check here to activate this profile VPN Dial Out Through Use the drop down menu to choose a proper WAN interface for this profile This setting is useful for dial out only ...

Page 314: ...e connecting Block When there is conflict occurred between the hosts on both sides of VPN Tunnel in connecting such function can block data transmission of Netbios Naming Packet inside the tunnel Multicast via VPN Some programs might send multicast packets via VPN connection Pass Click this button to let multicast packets pass through the router Block This is default setting Click this button to l...

Page 315: ...through the Internet You should set the identity like User Name and Password below for the authentication of remote server IPsec Tunnel Build an IPsec VPN connection to the server through Internet L2TP with IPsec Policy Build a L2TP VPN connection through the Internet You can select to use L2TP alone or with IPsec Select from below None Do not apply the IPsec policy Accordingly the VPN connection ...

Page 316: ... is a must for IPsec Tunnels and L2TP with IPsec Policy Medium AH Authentication Header means data will be authenticated but not be encrypted By default this option is active High ESP Encapsulating Security Payload means payload data will be encrypted and authenticated Select from below DES without Authentication Use DES encryption algorithm and not apply any authentication scheme DES with Authent...

Page 317: ...ions are available for both modes We suggest you select the combination that covers the most algorithms IKE phase 1 key lifetime For security reason the lifetime of key should be defined The default value is 28800 seconds You may specify a value in between 900 and 86400 seconds IKE phase 2 key lifetime For security reason the lifetime of key should be defined The default value is 3600 seconds You ...

Page 318: ... dial in user below IPsec Tunnel Allow the remote dial in user to trigger an IPsec VPN connection through Internet L2TP with IPsec Policy Allow the remote dial in user to make a L2TP VPN connection through the Internet You can select to use L2TP alone or with IPsec Select from below None Do not apply the IPsec policy Accordingly the VPN connection employed the L2TP without IPsec policy can be view...

Page 319: ...TP with or without IPsec policy above IKE Authentication Method This group of fields is applicable for IPsec Tunnels and L2TP with IPsec Policy when you specify the IP address of the remote node The only exception is Digital Signature X 509 can be set when you select IPsec tunnel either with or without specify the IP address of the remote node Pre Shared Key Check the box of Pre Shared Key to invo...

Page 320: ...plicable when you select PPTP or L2TP with or without IPsec policy above The default value is 0 0 0 0 which means the Vigor router will get a PPP IP address from the remote router during the IPCP negotiation phase If the PPP IP address is fixed by remote side specify the fixed IP address here Do not change the default value if you do not select PPTP or L2TP Remote Gateway IP This field is only app...

Page 321: ...our options TX RX Both TX Only RX Only and Disable From first subnet to remote network you have to do If the remote network only allows you to dial in with single IP please choose NAT otherwise choose Route Change default route to this VPN tunnel Check this box to change the default route with this VPN tunnel 2 After finishing all the settings here please click OK to save the configuration ...

Page 322: ...t with all WAN modes single multi Dial out connection types contain IPsec PPTP L2TP L2TP over IPsec and ISDN depends on hardware specification The web page is simple to understand and easy to configure Filly compliant with VPN Server LAN Sit Single Multi Network Mail Alert support please refer to System Maintenance SysLog Mail Alert for detailed configuration Syslog support please refer to System ...

Page 323: ...r2 Display the dial out profile selected from the Member2 drop down list below Advanced This button is available only when LAN to LAN profile or more is created Detailed information for this dialog see later section Advanced Backup General Setup Status After choosing one of the profile listed above please click Enable to activate this profile If you click Disable the selected or current used VPN T...

Page 324: ... The content in Member1 2 within VPN TRUNK VPN Backup mechanism backup profile is similar to dial out profile configured in LAN to LAN web page VPN TRUNK VPN Backup mechanism backup profile will process and handle everything unless it is off line once it is activated H Ho ow w c ca an n y yo ou u s se et t a a V VP PN N T TR RU UN NK K V VP PN N B Ba ac ck ku up p m me ec ch ha an ni is sm m p pr ...

Page 325: ...ter will be used as the VPN Server i e with virtual address 192 168 50 200 Please type 192 168 50 200 in the field of My GRE IP Type IP address 192 168 50 100 of the client in the field of Peer GRE IP See the following graphic for an example 3 Later on peer side as VPN Client please type 192 168 50 100 in the field of My GRE IP and type IP address of the server 192 168 50 200 in the field of Peer ...

Page 326: ...y Resume when VPN connection breaks down or disconnects Member 1 will be the top priority for the system to do VPN connection Detail Information This field will display detailed information for Environment Recovers Detection 4 4 1 11 1 8 8 C Co on nn ne ec ct ti io on n M Ma an na ag ge em me en nt t You can find the summary table of all VPN connections You may disconnect any VPN connection by cli...

Page 327: ...y a certification authority CA It contains information such as your name a serial number expiration dates etc and the digital signature of the certificate issuing authority so that a recipient can verify that the certificate is real Here Vigor router support digital certificates conforming to standard X 509 Any entity wants to utilize digital certificates should first request a certificate issued ...

Page 328: ...file as the certification information Refresh Click this button to refresh the information listed below View Click this button to view the detailed settings for certificate request Delete Click this button to delete selected name with certification information GENERATE Click this button to open Generate Certificate Signing Request window Type in all the information that the window request such as ...

Page 329: ...e generated information will be displayed on the window below IMPORT Vigor router allows you to generate a certificate request and submit it the CA server then import it as Local Certificate If you have already gotten a certificate from a third party you may import it directly The supported types are PKCS12 Certificate and Certificate with a private key ...

Page 330: ... this button to refresh the information listed below View Click this button to view the detailed settings for certificate request Note You have to copy the certificate request information from above window Next access your CA server and enter the page of certificate request copy the information into it and submit a request A new certificate will be issued to you by the CA server You can save it D ...

Page 331: ...certificate please click IMPORT to open the following window Use Choose File to find out the saved text file Then click Import The one you imported will be listed on the Trusted CA Certificate window For viewing each trusted CA certificate click View to open the certificate detail information window If you want to delete a CA certificate choose the one and click Delete to remove all the certificat...

Page 332: ...tificate for this router can be saved within one file Please click Backup on the following screen to save them If you want to set encryption password for these certificates please type characters in both fields of Encrypt password and Confirm password Also you can use Restore to retrieve these two settings to the router whenever you want ...

Page 333: ...s are equipped with a wireless LAN interface compliant with the standard IEEE 802 11n draft 2 protocol To boost its performance further the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can finally smoothly enjoy stream music and video Note The actual data throughput will vary according to the network conditions and environmental factor...

Page 334: ...applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connection You should select the appropriate security mechanism according to your needs No matter which security suite you select they all will enhance the over the air data protection and or privacy on your wireless network The Vig...

Page 335: ...er to the following figure for more information Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Mode At present the router can connect to 11b Only 11g Only 11n Only 2 4 GHz Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Channel Means the channel of frequency of...

Page 336: ...ns the identification of the wireless LAN SSID can be any text numbers or various special characters Isolate Member Check this box to make the wireless clients stations with the same SSID not accessing for each other VPN Check this box to restrict the wireless clients stations to access VPN network Rate Control It controls the data transmission rate through wireless connection Upload Check Enable ...

Page 337: ...K of default security mode is provided and stated on the label pasted on the bottom of the router For the wireless client who wants to access into Internet through such router please input the default PSK value for connection By clicking the Security Settings a new web page will appear so that you could configure the settings of WPA and WEP Available settings are explained as follows Item Descript...

Page 338: ...namically from RADIUS server with 802 1X protocol WPA PSK Accepts only WPA clients and the encryption key should be entered in PSK WPA2 PSK Accepts only WPA2 clients and the encryption key should be entered in PSK Mixed WPA WPA2 PSK Accepts WPA and WPA2 clients simultaneously and the encryption key should be entered in PSK WPA The WPA encrypts each frame transmitted from the radio using the key wh...

Page 339: ...r may restrict wireless access to certain wireless clients only by locking their MAC address into a black or white list The user may block wireless clients by inserting their MAC addresses into a black list or only let them be able to connect by inserting their MAC addresses into a white list In the Access Control web page users may configure the white black list modes used by each SSID and the MA...

Page 340: ...cess control list Clear All Clean all entries in the MAC address list After finishing all the settings here please click OK to save the configuration 4 4 1 13 3 5 5 W WP PS S WPS Wi Fi Protected Setup provides easy procedure to make network connection between wireless station and wireless access point vigor router with the encryption of WPA and WPA2 Note Such function is available for the wireless...

Page 341: ...art PBC button of network card If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to connect to the vigor router For WPS is supported in WPA PSK or WPA2 PSK mode if you do not choose such mode in Wireless LAN Security you will see the following message box Please click OK and go back Wireless LAN Security...

Page 342: ...ode of the router Only WPA2 PSK and WPA PSK support WPS Configure via Push Button Click Start PBC to invoke Push Button style WPS setup procedure The router will wait for WPS requests from wireless clients about two minutes The WPS LED on the router will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Configure via Cl...

Page 343: ...ridge interface The application for the WDS Repeater mode is depicted as below The major difference between these two modes is that while in Repeater mode the packets received from one peer AP can be repeated to another peer AP through WDS links Yet in Bridge mode packets received from a WDS link will only be forwarded to local wired or wireless hosts In other words only Repeater mode can do WDS t...

Page 344: ...following page will be shown Available settings are explained as follows Item Description Mode Choose the mode for WDS setting Disable mode will not invoke any WDS setting Bridge mode is designed to fulfill the first type of application Repeater mode is for the second one ...

Page 345: ... mode please type in the peer MAC address in these fields Four peer MAC addresses are allowed to be entered in this page at one time Yet please disable the unused link to get better performance If you want to invoke the peer MAC address remember to check Enable box in the front of the MAC address after typing Repeater If you choose Repeater as the connecting mode please type in the peer MAC addres...

Page 346: ...ism to avoid the conflict with neighboring devices of 802 11a b g Channel Bandwidth 20 the router will use 20MHz for data transmission and receiving between the AP and the stations 20 40 the router will use 20MHz or 40MHz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission 40 the router will use 40MHz for data tran...

Page 347: ...e and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless utility window choose Enable for TxBURST on the tab of Option Note means the real transmission rate depends on the environment of the network Antenna Vigor router can be attached with two antennas to have good data transmission via wireless connection However if you have only one a...

Page 348: ...ess transmission rate is adapted dynamically Usually performance of new algorithm is better than old Fragment Length 256 2346 Set the Fragment threshold of wireless radio Do not modify default value if you don t know what it is default value is 2346 RTS Threshold 1 2347 Minimize the collision unit is bytes between hidden stations to improve wireless performance Set the RTS threshold of wireless ra...

Page 349: ...rk for a long time Note Up to 300 Wireless Station records are supported by Vigor router Available settings are explained as follows Item Description SSID Display the SSID that the wireless station will use it to connect with Vigor router Enable Check the box to enable the station control function Connection Time Reconnection Time Use the drop down list to choose the duration for the wireless clie...

Page 350: ... the APs on the wireless LAN Yet only the AP which is in the same channel of this router can be found Please click Scan to discover APs in the neighborhood Available settings are explained as follows Item Description Scan It is used to discover AP s in the neighborhood The results will be shown on the box above this button Statistics It displays the statistics for the channels used by APs Add to I...

Page 351: ... IEEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case stations get similar channel access time which is called airtime However when stations have various data rate e g 11g 11n the result is not fair The slow stations 11g work in their slow data rate and ...

Page 352: ...verall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Available settings are explained as follows Available settings are explained as follows Item Description Enable Airtime Fairness Try to assign similar airtime to each wireless station by controlling TX traffic Airtime Fairness Clic...

Page 353: ...n L Li is st t Station List provides the knowledge of connecting wireless clients now along with its status code There is a code summary below for explanation For convenient Access Control you can select a WLAN station and click Add to Access Control below Available settings are explained as follows Item Description Refresh Click this button to refresh the status of station list Add Click this but...

Page 354: ... connect to USB modem Models of the modems supported by Vigor router can be seen from USB Application Modem Support List For network connection via USB modem refer to WAN Internet Access and WAN General Setup for detailed information 4 4 1 14 4 1 1 U US SB B G Ge en ne er ra al l S Se et tt ti in ng gs s This page will determine the number of concurrent FTP connection default charset for FTP serve...

Page 355: ...de LAN Only Users coming from internet cannot connect to the SMB server of the router LAN And WAN Both LAN and WAN users can access SMB server of the router NetBios Name Service For the NetBios service of USB storage disk you have to specify a workgroup name and a host name A workgroup name must not be the same as the host name The workgroup name can have as many as 15 characters and the host name...

Page 356: ...ailable settings are explained as follows Item Description FTP SMB User Enable Click this button to activate this profile account for FTP service or SMB User service Later the user can use the username specified in this page to login into FTP server Disable Click this button to disable such profile Username Type the username for FTP SMB users for accessing into FTP server USB storage disk Be aware...

Page 357: ...ter clicking OK the router will create the specific new folder in the USB storage disk In addition if the user types here he she can access into all of the disk folders and files in USB storage disk Note When write protect status for the USB storage disk is ON you cannot type any new folder name in this field Only can be used in such case You can click to open the following dialog to add any new f...

Page 358: ...router Available settings are explained as follows Item Description Refresh Click this icon to refresh files list Back Click this icon to return to the upper directory Create Click this icon to add a new folder Current Path Display current folder Upload Click this button to upload the selected file to the USB storage disk The uploaded file in the USB diskette can be shared for other user through F...

Page 359: ...ined as follows Item Description Connection Status If there is no USB storage disk connected to Vigor router No Disk Connected will be shown here Disk Capacity It displays the total capacity of the USB storage disk Free Capacity It displays the free space of the USB storage disk Click Refresh at any time to get new status for free capacity Index It displays the number of the client which connectin...

Page 360: ...es the information about the brand name and model name of the USB modems which are supported by Vigor router 4 4 1 14 4 6 6 S SM MB B C Cl li ie en nt t S Su up pp po or rt t L Li is st t SMB Client Support List provides the test status information for applications with file sharing operated under different platforms ...

Page 361: ...in Customization Configuration Backup Syslog Mail Alert Time and Date Management Reboot System Firmware Upgrade and Activation Below shows the menu items for System Maintenance 4 4 1 15 5 1 1 S Sy ys st te em m S St ta at tu us s The System Status provides basic network settings of Vigor router It includes LAN and WAN interface information Also you could get the current running firmware version or...

Page 362: ...ver Display the current status of DHCP server of the LAN interface DNS Display the assigned IP address of the primary DNS WAN Link Status Display current connection status MAC Address Display the MAC address of the WAN Interface Connection Display the connection type IP Address Display the IP address of the WAN interface Default Gateway Display the assigned IP address of the default gateway IPv6 A...

Page 363: ...ned as follows Item Description ACS Server On Choose the interface for the router connecting to ACS server ACS Server URL Username Password Such data must be typed according to the ACS Auto Configuration Server you want to link Please refer to Auto Configuration Server user s manual for detailed information Test With Inform Click it to send a message based on the event code selection to test if su...

Page 364: ...ddress of the STUN server Server Port Type the port number of the STUN server Minimum Keep Alive Period If STUN is enabled the CPE must send binding request to the server for the purpose of maintaining the binding in the Gateway Please type a number as the minimum period The default setting is 60 seconds Maximum Keep Alive Period If STUN is enabled the CPE must send binding request to the server f...

Page 365: ...ssword Type in new password in this field The length of the password is limited to 23 characters Confirm Password Type in the new password again Administrator Local User The administrator can login web user interface of Vigor router to modify all of the settings to fit the requirements This feature allows other user in LAN who can access into the web user interface with the same privilege of the a...

Page 366: ...nable Admin Login From Wan The default setting is enabled It can ensure any user accessing into web user interface of Vigor router through Internet by username password of admin admin Administrator LDAP Setting Enable LDAP AD login for Admin users If it is enabled any user can access into the web user interface of Vigor router through the LDAP server authentication Enable Admin Login From Wan The ...

Page 367: ...l be different with full web use interface accessed by using the administrator password Password Type in new password in this field The length of the password is limited to 31 characters Confirm Password Type in the new password again When you click OK the login window will appear Please use the new password to access into the web user interface again Below shows an example for accessing into User...

Page 368: ...ing screen will appear Simply click OK 4 Log out Vigor router web user interface by clicking the Logout button 5 The following window will be open to ask for username and password Type the new user password in the filed of Password and click Login ...

Page 369: ...with User Mode will be shown as follows Settings to be configured in User Mode will be less than settings in Admin Mode Only basic configuration settings will be available in User Mode Note Setting in User Mode can be configured as same as in Admin Mode ...

Page 370: ...requirement Available settings are explained as follows Item Description Enable Check this box to enable the login customization function Login Page Title Type a brief description e g Welcome to DrayTek which will be shown on the heading of the login dialog Welcome Message and Bulletin Type words or sentences here It will be displayed for bulletin message In addition it can be displayed on the log...

Page 371: ...Vigor2912 Series User s Guide 361 Below shows an example of login customization with the information typed in Login Description and Bulletin ...

Page 372: ...estore Choose File Click it to specify a file to be restored Click Restore to restore the configuration If the file is encrypted the system will ask you to type the password to decrypt the configuration file Backup Click it to perform the configuration backup of this router Support Model List Web configuration file from other Vigor router can be applied to Vigor2912 series At present the configura...

Page 373: ...e example is using Windows platform for demonstrating examples The Mac or Linux platform will appear different windows but the backup function is still available Note Backup for Certification must be done independently The Configuration Backup does not include information of Certificate R Re es st to or re e C Co on nf fi ig gu ur ra at ti io on n 1 Go to System Maintenance Configuration Backup Th...

Page 374: ...e 364 2 Click Choose File button to choose the correct configuration file for uploading to the router 3 Click Restore button and wait for few seconds the following picture will tell you that the restoration procedure is successful ...

Page 375: ...sk Check USB Disk to save the log to the attached USB storage disk Router Name Display the name for such router configured in System Maintenance Management If there is no name here simply lick the link to access into System Maintenance Management to set the router name Server IP Address The IP address of the Syslog server Destination Port Assign a port for the Syslog protocol Mail Syslog Check the...

Page 376: ...ps as the transmission method Authentication Check this box to activate this function while using e mail application User Name Type the user name for authentication Password Type the password for authentication Enable E mail Alert Check the box to send alert message to the e mail box while the router detecting the item s you specify here Click OK to save these settings For viewing the Syslog pleas...

Page 377: ...Vigor2912 Series User s Guide 367 ...

Page 378: ...e Select to inquire time information from Time Server on the Internet using assigned protocol Time Server Type the IP address or domain name of the time server Priority IPv6 First If the time server configured with a domain name that supports IPv6 such option will be the first choice Auto It is the default setting If you have no idea whether the time server supports IPv6 or IPv4 simply choose Auto...

Page 379: ...ries User s Guide 369 Use the default time setting or set user defined time for your requirement Automatically Update Interval Select a time interval for updating from the NTP server Click OK to save these settings ...

Page 380: ...name for getting community by typing a proper character The default setting is public The maximum length of the text is limited to 23 characters Set Community Set community by typing a proper name The default setting is private The maximum length of the text is limited to 23 characters Manager Host IP IPv4 Set one host as the manager to execute SNMP function Please type in IPv4 address to specify ...

Page 381: ...ion USM User USM means user based security mode Type a username which will be used for authentication The maximum length of the text is limited to 23 characters Auth Algorithm Choose one of the encryption methods listed below as the authentication algorithm Auth Password Type a password for authentication The maximum length of the text is limited to 23 characters Privacy Algorithm Choose one of th...

Page 382: ...External Device Control The management pages for IPv4 and IPv6 protocols are different F Fo or r I IP Pv v4 4 Available settings are explained as follows Item Description Router Name Type in the router name provided by ISP Default Disable Auto Logout If it is enabled the function of auto logout for web user interface will be disabled The web user interface will be open until you click the Logout i...

Page 383: ...User Define Ports Check to specify user defined port numbers for the Telnet HTTP and FTP servers Default Ports Check to use standard port numbers for the Telnet and HTTP servers TLS SSL Encryption Setup Enable SSL 3 0 Check the box to enable the function of SSL 3 0 if required Due to security consideration the built in HTTPS and SSL VPN server of the router had upgraded to TLS1 x protocol If you a...

Page 384: ...the router from Internet Check the box es to specify Enable PING from the Internet Check the checkbox to enable all PING packets from the Internet For security issue this function is disabled by default Access List You could specify that the system administrator can only login from a specific host or network defined in the list A maximum of three IPs subnet masks is allowed IPv6 Address Prefix Len...

Page 385: ...edule web page and you can use the number that you have set in that web page If you want to reboot the router using the current configuration check Using current configuration and click Reboot Now To reset the router settings to default values check Using factory default configuration and click Reboot Now The router will take 5 seconds to reboot the system Note When the system pops up Reboot Syste...

Page 386: ...te is www DrayTek com or local DrayTek s web site and FTP site is ftp DrayTek com Click System Maintenance Firmware Upgrade to launch the Firmware Upgrade Utility Choose the right firmware by clicking Choose File Then click Upgrade The system will upgrade the firmware of the router automatically Or click OK The following screen will appear Then execute the firmware upgrade utility ...

Page 387: ...e mechanism for your computer Click System Maintenance Activation to open the following page for accessing http myvigor draytek com Available settings are explained as follows Item Description Activate via Interface Choose WAN interface used by such device for activating Web Content Filter Activate The Activate link brings you accessing into www vigorpro com to finish the activation of the account...

Page 388: ...Vigor2912 Series User s Guide 378 Below shows the successful activation of Web Content Filter ...

Page 389: ...i ia al l o ou ut t T Tr ri ig gg ge er ri in ng g Click Diagnostics and click Dial out Triggering to open the web page The internet connection e g PPPoE is triggered by a package sending from the source IP address Available settings are explained as follows Item Description Decoded Format It shows the source IP address local destination IP remote address the protocol and length of the package Ref...

Page 390: ...Guide 380 4 4 1 16 6 2 2 R Ro ou ut ti in ng g T Ta ab bl le e Click Diagnostics and click Routing Table to open the web page And Available settings are explained as follows Item Description Refresh Click it to reload the page ...

Page 391: ...ess and an IP address Available settings are explained as follows Item Description Refresh Click it to reload the page 4 4 1 16 6 4 4 I IP Pv v6 6 N Ne ei ig gh hb bo ou ur r T Ta ab bl le e The table shows a mapping between an Ethernet hardware address MAC Address and an IPv6 address This information is helpful in diagnosing network problems such as IP address conflicts etc Click Diagnostics and ...

Page 392: ...pful in diagnosing network problems such as IP address conflicts etc Click Diagnostics and click DHCP Table to open the web page And Available settings are explained as follows Item Description Index It displays the connection item number IP Address It displays the IP address assigned by this router for specified PC MAC Address It displays the MAC address for the specified PC that DHCP assigned IP...

Page 393: ...Click Diagnostics and click NAT Sessions Table to open the list page Available settings are explained as follows Item Description Private IP Port It indicates the source IP address and port of local PC Pseudo Port It indicates the temporary port of the router used for NAT Peer IP Port It indicates the destination IP address and port of remote host Interface It displays the representing number for ...

Page 394: ... displayed on Diagnostics DNS Cache Table Available settings are explained as follows Item Description Clear Click this link to remove the result on the window Refresh Click it to reload the page When an entry s TTL is larger than Check the box the type the value of TTL time to live for each entry Click OK to enable such function It means when the TTL value of each DNS query reaches the threshold ...

Page 395: ... IPV4 IPV6 Choose the interface for such function Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically Ping to Use the drop down list to choose the destination that you want to ping IP Address Type the IP address of the Host IP that you want to ping Ping IPv6 Address Type the IPv6 address th...

Page 396: ...a in an interval of several seconds The IP address listed here is configured in Bandwidth Management You have to enable IP bandwidth limit and IP session limit before invoke Data Flow Monitor If not a notification dialog box will appear to remind you enabling it Click Diagnostics and click Data Flow Monitor to open the web page You can click IP Address TX rate RX rate or Session link for arranging...

Page 397: ...ceiving speed of the monitored device Sessions Display the session number that you specified in Limit Session web page Action Block can prevent specified PC accessing into Internet within 5 minutes Unblock the device with the IP address will be blocked in five minutes The remaining time will be shown on the session column Current Peak Speed Current means current transmission rate and receiving rat...

Page 398: ... to zero the accumulated RX TX received and transmitted data of WAN Click Refresh to renew the graph at any time The horizontal axis represents time Yet the vertical axis has different meanings For WAN1 WAN2 WAN3 Bandwidth chart the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past For Sessions chart the numbers displayed on vertical axis ...

Page 399: ...pe the IP address of the host in the box and click Run The result of route trace will be shown on the screen or Available settings are explained as follows Item Description IPv4 IPv6 Click one of them to display corresponding information for it Trace through Use the drop down list to choose the interface that you want to ping through Protocol Use the drop down list to choose the protocol that you ...

Page 400: ...k Enable Web Syslog specify the type of Syslog and choose the display mode you want Later the event of Syslog with specified type will be shown for your reference Available settings are explained as follows Item Description Enable Web Syslog Check this box to enable the function of Web Syslog Syslog Type Use the drop down list to specify a type of Syslog to be displayed Export Click this link to s...

Page 401: ... Display the time of the event occurred Log Type Display the type of the record Message Display the information for each event 4 4 1 16 6 1 13 3 I IP Pv v6 6 T TS SP PC C S St ta at tu us s IPv6 TSPC status web page could help you to diagnose the connection status of TSPC If TSPC has configured properly the router will display the following page when the user connects to tunnel broker successfully...

Page 402: ...ronment to find out if there is any abnormal connection Information of IP traced and destination port used for SYN Flood UDP Flood and ICMP Flood attacks will be detected and shown respectively on different pages Moreover IP address detected and suspected to attack the network system can be blocked shortly by clicking the Block button shown on pages of SYN Flood UDP Flood and ICMP Flood Note The i...

Page 403: ...e following web page will be blocked forever Available settings are explained as follows Item Description Blocking IP Type the IP address in this field and click add It will be added to the IP List and appear in the right frame IP list in the right frame will be blocked by Vigor system permanently Remove It is used to remove selected IP address from the Blocking IP List Refresh Click this link to ...

Page 404: ... Item Description External Device Auto Discovery Check this box to detect the external device automatically and display on this page From this web page check the box of External Device Auto Discovery Later all the available devices will be displayed in this page with icons and corresponding information You can change the device name if required or remove the information for off line device wheneve...

Page 405: ... to factory default setting if necessary If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 5 5 1 1 C Ch he ec ck ki in ng g I If f t th he e H Ha ar rd dw wa ar re e S St ta at tu us s I Is s O OK K o or r N No ot t Follow the steps below to verify the hardware status 1 Check the power line and WLAN LAN cable conne...

Page 406: ...stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s The example is based on Windows 7 Professional Edition As to the examples for other operation systems please refer to the similar steps or find support notes in www DrayTek com 1 Open All Programs Getting Started Control Panel Click Network and Sharing Center 2 In the ...

Page 407: ...or2912 Series User s Guide 397 4 Select Internet Protocol Version 4 TCP IP and then click Properties 5 Select Obtain an IP address automatically and Obtain DNS server address automatically Finally click OK ...

Page 408: ...uide 398 F Fo or r M Ma ac c O OS S 1 Double click on the current used Mac OS on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop down list of Configure IPv4 ...

Page 409: ...ter correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista 7 The DOS command dialog will appear 3 Type ping 192 168 1 1 and press Enter If the link is OK the line of Reply from 192 168 1 1 bytes 32 time 1ms TTL 255 will appear 4 If the line does not appear please check the IP address set...

Page 410: ...f ff f You have to wait about 15 seconds after inserting 3G USB Modem into your Vigor2912 Later the USB LED will light on which means the installation of USB Modem is successful If the USB LED does not light on please remove and reinsert the modem again If it still fails restart Vigor2912 U US SB B L LE ED D l li ig gh ht ts s o on n b bu ut t t th he e n ne et tw wo or rk k c co on nn ne ec ct ti...

Page 411: ... t S Se et tt ti in ng g I If f N Ne ec ce es ss sa ar ry y Sometimes a wrong connection can be improved by returning to the default settings Try to reset the router by software or hardware Such function is available in Admin Mode only Warning After pressing factory default setting you will loose all settings you did before Make sure you have recorded all useful settings before you pressing S So o...

Page 412: ...king press the Factory Reset button and hold for more than 5 seconds When you see the ACT LED blinks rapidly please release the button Then the router will restart with the default configuration After restore the factory default setting you can configure the settings for the router again to fit your personal request ...

Page 413: ...Co on nt ta ac ct ti in ng g D Dr ra ay yT Te ek k If the router still cannot work correctly after trying many efforts please contact your dealer for further help right away For any questions please feel free to send e mail to support DrayTek com ...

Page 414: ...Vigor2912 Series User s Guide 404 This page is left blank ...

Page 415: ... an isolate network but not a flexible way to maintain a growing network Because the idea of port based VLAN is grouping by physical ports but the difficulty is how to handle the traffics between two or more Ethernet switches Thus VLAN is suitable for some circumstances for example the rental apartment SOHO office and so on These clients may need two or three isolated networks only and setup a net...

Page 416: ... router Note Broadband router Vigor2920 Vigor3200 Vigor2925 Vigo2960 Vigor3900 Modem router Vigor2850 Vigor2860 V VL LA AN N P Pa ac ck ke et ts s o on n V Vi ig go or r r ro ou ut te er rs s Trunk mode of LAN Trunk Port can carry the packets with VID but replace the Non VID packet as the VID of Trunk port while forwarding the packets to another switch Bridge mode of WAN P1 and P2 are doing NAT fl...

Page 417: ...m is going to be introduced to you because it is the most stable and superfast booting system in DrayTek products If the UI style of yours is different from the following It may not DrayOS system with new web style or maybe the Linux like model WAN ...

Page 418: ...Vigor2912 Series User s Guide 408 LAN V VL LA AN N a ap pp pl li ic ca at ti io on ns s o on n V Vi ig go or r r ro ou ut te er r Multi Subnet VLAN of LAN ...

Page 419: ...rvers LAN1 LAN2 LAN3 LAN4 However the traffics of the LAN port or SSID that are NOT being grouped in the same VLAN are unable to forward to each other The benefit of Port based is able to extend the wired ports by installing a cheaper dumb switch as many as you need but Tag based offers you a flexible and well managed network The networks are isolated secured and reduce the broadcasting storm effe...

Page 420: ... which serves your guests the internet accessibility but the traffics have to be isolated from your private network due to the security considerations it can be done by above settings However a switch support VLAN function is need if VLAN Tag enabled Triple Play Multi WAN NAT mode with VLAN ...

Page 421: ...Vigor2912 Series User s Guide 411 Following settings the set top box STB is able to attach with any LAN port Video streaming which your ISP provided will be played on your monitor ...

Page 422: ...idge mode with VLAN Set top box STB or the other kinds of media devices are able to attach with Port4 or Port5 of LAN Those devices that attached with Port4 or Port5 are able to access the services network directly which your ISP provided ...

Search results

Summary of Contents for Vigor2912 Series

Reviews:

Related manuals for Vigor2912 Series

Brands by name

Popular brands

Draytek Vigor2912 Series, User Manual

Search results

Summary of Contents for Vigor2912 Series

Reviews:

Related manuals for Vigor2912 Series

Brands by name

Popular brands