Draytek Vigor2960 User Manual Download Page 6 | Manualshive

Page: 6 / 446

background image

Vigor2960 Series User’s Guide

vi

4.3.6 OSPF Configuration.............................................................................................................151

4.3.7 BGP Configuration...............................................................................................................153

4.4 NAT........................................................................................................................................... 158

4.4.1 Port Redirection ...................................................................................................................158

4.4.2 DMZ Host .............................................................................................................................161

4.4.3 ALG

.............................................................................................................................165

4.4.4 Connection Timeout.............................................................................................................166

4.5 Firewall ..................................................................................................................................... 167

4.5.1 Filter Setup ..........................................................................................................................167

4.5.2 DoS Defense .......................................................................................................................194

4.5.3 MAC Block ...........................................................................................................................198

4.6 Objects Setting ......................................................................................................................... 200

4.6.1 IP Object .............................................................................................................................201

4.6.2 IP Group .............................................................................................................................203

4.6.3 IPv6 Object ..........................................................................................................................205

4.6.4 Country Object.....................................................................................................................207

4.6.5 Service Type Object ............................................................................................................209

4.6.6 Service Type Group.............................................................................................................211

4.6.7 Keyword /DNS Object..........................................................................................................213

4.6.8 File Extension Object...........................................................................................................216

4.6.9 APP Object ..........................................................................................................................219

4.6.10 Web Category Object ........................................................................................................224

4.6.11 QQ Object..........................................................................................................................227

4.6.12 QQ Group ..........................................................................................................................230

4.6.13 Time Object .......................................................................................................................232

4.6.14 Time Group........................................................................................................................234

4.6.15 SMS Service Object...........................................................................................................236

4.6.16 Mail Service Object............................................................................................................238

4.6.17 Notification Object..............................................................................................................241

4.7 User Management.................................................................................................................... 243

4.7.1 Web Portal ...........................................................................................................................243

4.7.2 User Profile ..........................................................................................................................248

4.7.3 User Group ..........................................................................................................................261

4.7.4 Guest Profile ........................................................................................................................263

4.7.5 RADIUS .............................................................................................................................269

4.7.6 LDAP/Active Directory .........................................................................................................271

4.8 Application ................................................................................................................................ 274

4.8.1 Dynamic DNS ......................................................................................................................274

4.8.2 GVRP .............................................................................................................................280

4.8.3 IGMP Proxy .........................................................................................................................281

4.8.4 UPnP .............................................................................................................................282

4.8.5 High Availability ...................................................................................................................283

4.8.6 Wake on LAN.......................................................................................................................293

4.8.7 SMS / Mail Alert Service ......................................................................................................296

4.9 VPN and Remote Access......................................................................................................... 300

4.9.1 VPN Client Wizard ...............................................................................................................300

4.9.2 VPN Server Wizard..............................................................................................................307

4.9.3 Remote Access Control .......................................................................................................313

4.9.4 PPP General Setup .............................................................................................................314

4.9.5 IPsec General Setup............................................................................................................319

4.9.6 VPN Profiles ........................................................................................................................320

4.9.7 VPN Trunk Management .....................................................................................................333

4.9.8 Connection Management ....................................................................................................338

«
...
4
5
6
7
8
...
»

Summary of Contents for Vigor2960

Page 1: ......

Page 2: ...r2960 Series User s Guide ii Vigor2960 Dual WAN Security Firewall User s Guide Version 1 4 Firmware Version V1 1 0 For future update please visit DrayTek web site for further information Date June 22...

Page 3: ...vation of the environment Warranty We warrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of...

Page 4: ...tion against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions m...

Page 5: ...OSPF 26 3 3 How to Configure LAN to LAN IPsec Tunnel between Vigor2960 and Other Router 33 3 4 CVM Application How to manage the CPE router through Vigor2960 36 3 5 CVM Application How to build the V...

Page 6: ...bject 227 4 6 12 QQ Group 230 4 6 13 Time Object 232 4 6 14 Time Group 234 4 6 15 SMS Service Object 236 4 6 16 Mail Service Object 238 4 6 17 Notification Object 241 4 7 User Management 243 4 7 1 Web...

Page 7: ...Modem Support List 392 4 15 System Maintenance 393 4 15 1 TR 069 393 4 15 2 Administrator Password 395 4 15 3 Configuration Backup 396 4 15 4 Syslog Mail Alert 398 4 15 5 Time and Date 401 4 15 6 Acc...

Page 8: ...If the Network Connection Settings on Your Computer Is OK or Not 432 5 3 Pinging the Router from Your Computer 435 5 4 Checking If the ISP Settings are OK or Not 436 5 5 Backing to Factory Default Set...

Page 9: ...of a point to point private link The DrayTek Vigor2960 Series VPN router supports Internet industry standards technology to provide customers with open interoperable VPN solutions such as X 509 DHCP...

Page 10: ...all General Setup Such profile must be established under CSM menu On The VPN tunnel is active VPN Off No VPN tunnel is active On The DoS DDoS function is active DoS Blinking It will blink while deleti...

Page 11: ...Vigor2960 Series User s Guide 3...

Page 12: ...and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration GigaWAN 1 2 Connect...

Page 13: ...evice also can connect to other computers to form a small area network The LAN LED for that port on the front panel will light up 3 Connect the cable Modem DSL Modem Media Converter to any WAN port of...

Page 14: ...ble for placing the router Make the screw holes on the short side of the bracket aim at the screw holes on the router Next fasten both the bracket and the router with two screws and fasten both the wa...

Page 15: ...change the password for this device you have to access into the web browse with default password first 1 Make sure your computer connects to the router correctly Notice You may either simply set up y...

Page 16: ...Password 5 Enter the login password admin in default on the field of Original Password Type a new one in the field of New Password and retype it on the field of Confirm Password Then click Apply to co...

Page 17: ...tart Wizard from the home page Quick Start Wizard will guide the user to establish LAN interface profile WAN interface profile and select proper protocol for connection The following will explain in m...

Page 18: ...a static IP address to the WAN interface and complete the configuration by applying the settings and rebooting your router Please type in values for Static IP address Static Mask Static Gateway and St...

Page 19: ...guration click Save to save the setting onto the router Previous Click it to return to previous setting page Finish Click it to finish the configuration Cancel Click it to discard the settings configu...

Page 20: ...When you finished the above settings please click Finish I If f P PP PP Po oE E i is s s se el le ec ct te ed d PPPoE stands for Point to Point Protocol over Ethernet It relies on two widely accepted...

Page 21: ...sername provided by ISP in this field Password Type in the password provided by ISP in this field Previous Click it to return to previous setting page Finish Click it to finish the configuration Cance...

Page 22: ...P Point to Point Tunneling Protocol mode please select PPTP for this router Next enter the settings provided by your ISP on the web page Available parameters are listed as follows Item Description PPT...

Page 23: ...blic gateway address for such WAN profile DNS Server IP Address To add a new IP address simply place the mouse cursor on this filed The following dialog will appear Add Click this button to display th...

Page 24: ...Vigor2960 Series User s Guide 16 When the following screen appears it means you have finished the Quick Start Wizard configuration...

Page 25: ...our router online first Log into the Web User Interfaceof Vigor2960 and click Product Registration 2 A Login page will be shown on the screen Please type the account and password that you created prev...

Page 26: ...r From this page please click Add 4 When the following page appears please type in Nick Name for the router and choose the right registration date from the popup calendar it appears when you click on...

Page 27: ...5 Now your router information has been added to the database Click OK to leave this web page and return to My Information web page 6 Take a look at the page of My Information the new added Vigor2960...

Page 28: ...Vigor2960 Series User s Guide 20 This page is left blank...

Page 29: ...g gg gi in ng g i in n R Ro ou ut te er r s s H HT TT TP PS S S Se er rv ve er r Remote Desktop Protocol RDP is a protocol designed for secure communications in networks using Microsoft Terminal Servi...

Page 30: ...d Screen Size based on the actual RDP server information then click Apply to save the settings 4 Open User Management User Profile to create a new profile named 7788 Set the Password as 7788 and choos...

Page 31: ...Vigor2960 Series User s Guide 23 7 A screen like the following figure will appear Simply click the SSL Application link 8 In the following screen click Connect for connecting to Win7 the RDP server...

Page 32: ...Vigor2960 Series User s Guide 24 9 After that you can access into Windows 7 via a browser Note the message below the window In which TLS means Transport Layer Security...

Page 33: ...roubleshooting If you have installed Java Runtime Environment edition 6 but still cannot establish the connection please make sure you have disabled Use TLS 1 0 in the Java Control Panel as figure sho...

Page 34: ...stance vector want to support much larger networks or want to have less susceptible to bad routing information you can enable OSPF feature to fit your request Note that both routers must support OSPF...

Page 35: ...90 00 0 A A 1 Open Routing General Setup to create a LAN 192 168 1 1 24 profile named lan1 with the settings shown below 2 Next continue to create a LAN 192 168 3 1 24 profile named lan2 with the sett...

Page 36: ...s 11 and lan1 area as 11 As shown in the topology diagram C Co on nf fi ig gu ur ra at ti io on n f fo or r V Vi ig go or r3 39 90 00 0 B B 1 Open LAN General Setup to create a LAN 192 168 2 1 24 prof...

Page 37: ...F Configuration to enable this profile Click Add to make the LAN Profiles lan2 area setting as 11 and lan1 area as 11 As shown in the topology diagram C Co on nf fi ig gu ur ra at ti io on n f fo or r...

Page 38: ...2960 Series User s Guide 30 2 Next continue to create a LAN 192 168 3 3 24 profile named lan2 with the settings shown below 3 Open LAN General Setup and click the Inter LAN Route tab to enable this pr...

Page 39: ...y diagram 5 After setting check the routing information marked with red line which is created by OSPF R Ro ou ut ti in ng g i in nf fo or rm ma at ti io on n f fo or r V Vi ig go or r3 39 90 00 0 A A...

Page 40: ...Vigor2960 Series User s Guide 32...

Page 41: ...stablished between Vigor2960 and Vigor2710 C Co on nf fi ig gu ur ri in ng g V Vi ig go or r2 29 96 60 0 1 Access into the Web User Interfaceof Vigor2960 and open VPN and Remote Access VPN Profiles to...

Page 42: ...0 and open VPN and Remote Access LAN to LAN First please type the name of such VPN connection in the field of Profile Name e g 2960 Check the box of Enable this profile Choose Dial Out as Call Directi...

Page 43: ...k IP and Remote Network Mask of Vigor2960 to complete configuration 4 Please check if the VPN connection is built successfully in both devices respectively For Vigor2960 open VPN and Remote Access IPs...

Page 44: ...igor2830 series as the example The firmware upgrade for the CPE can be done through Vigor2830 series 3 3 4 4 1 1 C Co on nf fi ig gu ur re e S Se et tt ti in ng gs s o on n V Vi ig go or r2 29 96 60 0...

Page 45: ...e g Vigor2830 series and get ready to access into the web user interface of the CPE 2 Open a web browser for example IE Mozilla Firefox or Netscape on your computer and type http 192 168 1 1 3 Please...

Page 46: ...In nv vo ok ke e R Re em mo ot te e M Ma an na ag ge em me en nt t f fo or r C CP PE E 1 Login the web user interface of the CPE 2 Open System Maintenance Management Setup 3 Check Allow management fro...

Page 47: ...se the drop down list of Access Mode on WAN1 to select MPoA RFC1483 2684 Then click Details Page 3 Click Specify an IP address Type correct WAN IP address subnet mask and gateway IP address for your C...

Page 48: ...h he ec ck k C CP PE E M Ma ai in nt te en na an nc ce e P Pa ag ge e 1 Return to the web user interface of Vigor2960 2 Open Central VPN Management CPE Management 3 Now there is one CPE managed Vigor2...

Page 49: ...d d V Vi ig go or r2 29 96 60 0 When a remote device is managed by Vigor2960 series it is easy to build VPN between these two devices 1 Access into the web user interface of Vigor2960 series 2 Open Ce...

Page 50: ...open the following page for specified the CPE you want Click Connect after finished the settings 4 A confirmation dialog will appear Click OK and wait for a moment 5 If VPN is built successfully relat...

Page 51: ...VPN will be generated automatically You can access into VPN and Remote Access LAN to LAN of the remote device for viewing the detailed information Note The profile name is created automatically by th...

Page 52: ...yo ou ur r P PC C t to o V Vi ig go or r2 29 96 60 0 1 Suppose the newest firmware file is located on your PC You can upload it from your PC to Vigor2960 2 Log into the web user interface of Vigor2960...

Page 53: ...Vigor2960 Series User s Guide 45 6 In the Upload dialog click the Browse button to find out the firmware e g 2830_0508 in this case you want to upload from PC to Vigor2960 Then click Upload...

Page 54: ...Vigor2960 Series User s Guide 46 7 When the file is uploaded successfully later you will find the one in the File Explorer dialog...

Page 55: ...ofile cannot be created successfully 1 Open Central VPN Management CPE Management Click CPE Maintenance In the Maintenance area click Add 2 In the following dialog type the name for the new profile sp...

Page 56: ...s been created and displayed on the Maintenance area 4 Now the new firmware will be loaded into the CPE immediately based on the schedule setting now Note that a red icon will appear during the period...

Page 57: ...hed is displayed it means the firmware upgrade of specified CPE has completed 3 3 6 6 3 3 C Ch he ec ck k t th he e D De ev vi ic ce e I In nf fo or rm ma at ti io on n 1 Open Central VPN Management C...

Page 58: ...the network administrator can set another Vigor2960 s as the backup device s to deliver full routing services during the shutdown of the main Vigor2960 The network administrator can use a Virtual IP e...

Page 59: ...h Availability 3 In the tab of High Availability Global Setup choose Hot Standby as Redundant Method choose Primary as Config Synchronization Rule type draytek as Authentication Key choose Immediate a...

Page 60: ...ccess into the web user interface of Vigor2960 2 Open Applications High Availability 3 In the tab of High Availability Global Setup choose Hot Standby as Redundant Method choose Secondary as Config Sy...

Page 61: ...0 Series User s Guide 53 4 Click the High Availability Profile Setup tab to create HA profile s Click Add 5 Create an HA profile Refer to the following figures Type the lan1 IP address configured in R...

Page 62: ...ry before router B Secondary Simply open Applications High Availability and click the High Availability Global Setup Locate Enable High Availability Check the box and click Apply to save the settings...

Page 63: ...in to reduce the loading of the network traffic WAN1 IP Address 1 1 1 1 WAN2 IP Address 2 2 2 2 Inbound Load Balance allows Vigor2960 acting as a DNS Server to separate the traffic for each WAN interf...

Page 64: ...e Click Add 3 Add a profile named yourdomain com Define WAN1 weights 1 and WAN2 weights 2 It means the total DNS query time will be three one will pass through WAN1 two will pass through WAN2 4 Click...

Page 65: ...rver google public dns a google com Address 8 8 8 8 Name www yourdomain com Address 1 1 1 1 Second DNS query www yourdomain com Server google public dns a google com Address 8 8 8 8 Name www yourdomai...

Page 66: ...Vigor2960 Series User s Guide 58 This page is left blank...

Page 67: ...llowing ranges From 10 0 0 0 to 10 255 255 255 From 172 16 0 0 to 172 31 255 255 From 192 168 0 0 to 192 168 255 255 W Wh ha at t a ar re e P Pu ub bl li ic c I IP P A Ad dd dr re es ss s a an nd d P...

Page 68: ...WAN function It allows users to access Internet and combine the bandwidth of the WAN profiles to speed up the transmission through the network Each WAN port can connect to different ISPs even if the...

Page 69: ...rmines a WAN interface can be set with single or double VLAN ID values Normal It means only one VLAN ID value can be configured for the WAN interface Double Tag It means two VLAN ID values 802 1q in q...

Page 70: ...ode go to Step 4 directly 2 A confirmation dialog will appear Click OK to apply the related settings for Advance mode 3 Re login the system 4 Open WAN General Setup Click the Add button to open the fo...

Page 71: ...for you to specify for IPv4 protocol type Each mode will bring up different web page Mode Determine such profile will be used for NAT or routing IPv6 Protocol There are five connection modes for you...

Page 72: ...er for such VLAN The range is from 0 to 7 Apply Click it to save the configuration and exit the dialog Cancel Click it to exit the dialog without saving the configuration Global configuration allows y...

Page 73: ...k Use the drop down list to choose the subnet mask for such profile Gateway IP Address Type a public gateway address for such WAN profile DNS Server IP Address Add Click this button to display the IP...

Page 74: ...you to choose to send the request out Connection Detection Host Assign an IP address or Domain name as a destination to be detected whether the host is active sending reply to the router or not If no...

Page 75: ...Description Host Name Optional Type a name as the host name for identification IP Alias Type other IP addresses to be bound to this interface This setting is optional If you have typed addresses here...

Page 76: ...nsure the connection of the WAN interface After passing the times you set in this field and no reply received by the router the connection of WAN interface will be regarded as breaking down Vendor Cla...

Page 77: ...function of Always On The router will keep network connection all the time Disable Click it to disable the function of Always On Fixed IP Enable Click it to enable the function of Always On The router...

Page 78: ...in this field and no reply received by the router the connection of WAN interface will be regarded as breaking down IP Alias Type other IP addresses to be bound to this interface This setting is optio...

Page 79: ...dress in the Fixed IP field Please contact your ISP before you want to use this function Choose a proper protocol Static or DHCP After finished the settings in such page you need to open the Static or...

Page 80: ...on Retry Assign detecting times to ensure the connection of the WAN interface After passing the times you set in this field and no reply received by the router the connection of WAN interface will be...

Page 81: ...uch protocol IPv6 Prefix Length Type your IPv6 address prefix length IPv6 Gateway Address Type your IPv6 gateway address IPv6 DNS Server Address Type your IPv6 primary DNS Server address Add Click thi...

Page 82: ...A_NA mode DHCP IA_NA DNS Address Add Click this button to type primary DNS server address for IPv6 Save Click this button to save the setting Apply Click it to save the configuration and exit the dial...

Page 83: ...elect the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Refresh Renew current web page Profile Display...

Page 84: ...SB WAN profile Enable Check it to enable the USB WAN profile Description Give the brief description for such profile Port Display the physical WAN interface for such profile Protocol Choose the connec...

Page 85: ...pe PIN code of the SIM card that will be used to access Internet Modem Initial String 1 Such value is used to initialize USB modem Please use the default value If you have any question please contact...

Page 86: ...assword optional 4G DHCP SIM Pin code Type PIN code of the SIM card that will be used to access Internet Network Mode Force Vigor router to connect Internet with the mode specified here If you choose...

Page 87: ...cted USB WAN profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule...

Page 88: ...the drop down list to choose the WAN interface LAN VLAN Member Choose a VLAN profile from the drop down list You have to open LAN Switch page and click 802 1Q VLAN for creating VLAN ID number bound w...

Page 89: ...Load Balance and click the Inbound Load Balance tab Each item will be explained as follows Item Description Enable Check the box the enable inbound load balance function Add Add a new WAN profile for...

Page 90: ...Display the weight s that WAN interface s used Alias Interface Display the WAN interfaces used by the IP alias IP Display the alias IP settings used by the profile Alias Weight Display the weight that...

Page 91: ...Use the drop down list to choose a WAN interface profile which will be used by the domain Weight Use the drop down list to choose the one you want Alias Setting The purpose of such setting is to speci...

Page 92: ...hen such time setting has expired Negative Cache TTL Set the negative caching time name error Email Type the e mail address of the administrator NS Record This page is used to specify name server whic...

Page 93: ...ave Click it to save the settings Host Set a domain name IPv6 Address Type the IPv6 address of the host Any query concerning of Host will be forwarded to the server selected in Reference for advanced...

Page 94: ...ries User s Guide 86 4 4 1 1 3 3 S Sw wi it tc ch h This page allows you to configure Mirroring Port Mirrored Port enable disable WAN interface and configure 802 1Q VLAN ID for different WAN interface...

Page 95: ...to the VLAN ID setting configured here This page simply displays current status of 802 1Q VALN setting profiles Each item will be explained as follows Item Description Refresh Click it to reload this...

Page 96: ...ubles on Network Available parameters are listed as follows Item Description Enable This Profile Check the box to enable the Mirror function for the switch Mirroring Port Select a port for the adminis...

Page 97: ...w and click the Edit button to modify the settings A pop up window will appear for you to change the settings Interface Display the name of WAN interface Enable Check it to enable such interface Speed...

Page 98: ...such function is enabled or disabled 4 4 2 2 L LA AN N Local Area Network LAN is a group of subnets regulated and ruled by router The design of network structure is related to what type of public IP...

Page 99: ...t tu up p This page allows you to enable the profile give a brief explanation for such profile specify the VLAN ID specify MAC address and choose protocol type for such profile Each item will be expla...

Page 100: ...ow w t to o a ad dd d a a n ne ew w L LA AN N p pr ro of fi il le e 1 Open LAN General Setup and click the General Setup tab 2 Click the Add button to open the following dialog Different protocol type...

Page 101: ...blic gateway address Vigor router will detect the destination IP specified here automatically when such LAN profile is used If the IP is not detected the connection status for LAN will be shown as dow...

Page 102: ...bled Each DHCP option is composed by an option number with data For example Option number 100 Data abcd When such function is enabled the specified values for DHCP option will be seen in DHCP reply pa...

Page 103: ...erent parameter settings Link Local Link Local address is used for communicating with neighbouring nodes on the same link It is defined by the address prefix fe80 10 You don t need to setup Link Local...

Page 104: ...ecified location This page allows users to specify which subnet that DHCP server is located that the relay agent should redirect the DHCP request to Each item will be explained as follows Item Descrip...

Page 105: ...d as follows Item Description Profile Display the name of the LAN profile Enable Check this box to enable this profile DHCP Server Location Choose the interface for the DHCP server DHCP Server IP Type...

Page 106: ...960 Series User s Guide 98 4 4 2 2 1 1 3 3 I In nt te er r L LA AN N R Ro ou ut te e To make the users in different LAN communicating with each other please check the box to enable Inter LAN route fun...

Page 107: ...a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Refresh Renew current web p...

Page 108: ...Check this box to enable this profile Advertisement Lifetime Type a value for advertisement lifetime The lifetime associated with the default router in units of minutes ranging from 10 150 It is used...

Page 109: ...Profile Display the name of the LAN profile Enable Display the status of the profile False means disabled True means enabled Mode Display the mode automatic setting or manual setting specified for su...

Page 110: ...Start IP address and End IP address manually Start IP Set the starting IP address of the IP address pool for DHCP server The format the IP address shall be similar to the following example 2000 0000 0...

Page 111: ...N profile has been edited 4 4 2 2 2 2 P PP PP Po oE E S Se er rv ve er r This feature makes the router working like an ISP providing PPPoE connections to LAN PCs The only difference is that local PCs...

Page 112: ...ion Auto Refresh Specify the interval of refresh time to obtain the latest status The information will update immediately when the Refresh button is clicked Refresh Renew current web page MAC Address...

Page 113: ...cept PPPoE User Disable Click it to disable this function Enable If you click Enable only the PPPoE user can access into Internet Access Concentrator AC Name Type the name which will be reported as th...

Page 114: ...profile DHCP From It is available when RADIUS is selected as User Authentication Type DHCP Relay Enable If you want to use another DHCP server in the network other than the Vigor Router s you can let...

Page 115: ...h router Each item will be explained as follows Item Description User Name Display the user name used to access into the PPPoE server Action Display the connection status up or down of the user accoun...

Page 116: ...N for its Engineering Department another for its Marketing Department and another for its guest who can only use Internet not Intranet VLANs can also be set up according to the organization structure...

Page 117: ...2 1Q VLAN tab 2 Click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description VLAN ID Type the number as the VLAN ID Type a number used for identi...

Page 118: ...rfaces This mechanism helps manager track the network errors or abnormal packets transmission without interrupting the flow of data access the network By the way user can apply this function to monito...

Page 119: ...disable duplex Half Full speed 802 3az enable disable for the LAN ports respectively Each item will be explained as follows Item Description Edit Choose the interface listed below and click the Edit...

Page 120: ...terface Display the name of LAN interface profile Enable Check the box to enable the Mirror function for the switch Duplex Choose Half or Full for the speed specified below Speed Use the drop down lis...

Page 121: ...ansmit Unit determines the largest size of a packet When a packet with large size is transmitted through Vigor router the router will cut it into several segments to facilitate the transmission It alw...

Page 122: ...ll be displayed in this field Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Move on IP Bind List Mode Enable Choose it to invoke this functi...

Page 123: ...by other Vigor router Thus it is not necessary for that router to create Bind IP to MAC one by one Import Click it to import an IP bind to MAC information e g 123 txt obtained from other Vigor router...

Page 124: ...ng dialog appears Available parameters are listed as follows Item Description Profile Type the name of the profile IP Address Type the IP address that will be used for the specified MAC address MAC Ty...

Page 125: ...Vigor2960 Series User s Guide 117 6 A new profile has been added onto Bind Table...

Page 126: ...can configure some services such as ftp www or database with domain name which is easy to be accessed Each item will be explained as follows Item Description Add Add a new VLAN ID setting Edit Modify...

Page 127: ...bled true or disabled false Domain Name Display the domain name configured for such profile Alias Domain Name Display the alias domain name for such profile Mapping Display the IP address that domain...

Page 128: ...CNAME as the mapping target Please choose the suitable type to determine which IP address or CNAME will be mapped by the above domain name alias domain name IP Address Type the IP address in this fie...

Page 129: ...net of hosts and port range to be allocated in WAN interface User can assign traffic category and force it to go to dedicate network interface based on the following web page setup In the Routing grou...

Page 130: ...tocol of such rule Interface Display the name of the WAN profiles for Load Balance rule Primary Profile Display the primary profile configured in Failover page for such profile Backup Profile Display...

Page 131: ...such profile e g LB_1 Choose Load Balance as the Mode selection Available parameters are listed as follows Item Description Profile Type the name of the profile Mode Choose Load Balance as the Mode se...

Page 132: ...dialog Type a name for such profile e g FL_1 Choose Failover as the Mode selection Available parameters are listed as follows Item Description Profile Type the name of the profile Mode Choose Failover...

Page 133: ...route setting To edit static route setting simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected...

Page 134: ...Description Profile Type the name of the static route profile Enable Check this box to enable such profile Destination IP Address Type the IP address for such static route profile Subnet Mask Use the...

Page 135: ...ponding settings for the selected rule Delete Remove the selected static route setting To delete a static route setting simply select the one you want to delete and click the Delete button Refresh Ren...

Page 136: ...thop Type the nexthop address for such static route profile WAN LAN Profile Choose one of the LAN WAN profiles of the gateway for such static route Metric Type the distance to the target usually count...

Page 137: ...responding settings for the selected rule Delete Remove the selected static route setting To delete a static route setting simply select the one you want to delete and click the Delete button Rename A...

Page 138: ...le Type the name of the static route profile Enable Check this box to enable such profile WAN Profile Choose one of the WAN USB profiles of the gateway for such profile LAN Profile Choose one of the L...

Page 139: ...load balance to reduce the loading of the network traffic You have to manually create policy rules in order to force the traffic going to dedicate network interface Strict Bind Through dedicated inte...

Page 140: ...ed Refresh Renew current web page Profile Display the name of the rule Enable Display the status of the profile False means disabled True means enabled Protocol Display the protocol of such rule Sourc...

Page 141: ...ailable parameters are listed as follows Item Description Profile Type the name of the rule Enable Check this box to enable such profile Priority Choose the priority for such profile top high and norm...

Page 142: ...nt settings for configuration When Subnet is selected as Destination Type IP Address Type an IP address here as the destination IP address for such rule Subnet Mask Use the drop down list on the right...

Page 143: ...here Mode Specify which mode NAT or Routing will be used for such route rule Use IP Alias Click Enable to enable such function Or click Disable to disable such function When Enable is chosen choose a...

Page 144: ...ault gateway You MUST specify a gateway if you choose LAN as out going interface Mode Specify which mode NAT or Routing will be used for such route rule Use IP Alias Click Enable to enable such functi...

Page 145: ...which mode NAT or Routing will be used for such route rule Failover to the Next Rule When the specified interface disconnects due to some reason the router can use next route rule to perform data tra...

Page 146: ...s the router will use next rule match with policy route to perform data transmission When target When certain IP or domain connects successfully or fails to connect for several seconds Vigor router wi...

Page 147: ...ed and activate Failover mechanism For example you might configure settings as Out going Rule User Defined Out going interface wan1 Failover Enable when target 8 8 8 8 ping Fail for 5 seconds Then it...

Page 148: ...he WAN side or the Internet the source address of the NAT host will be mapped into either 202 211 100 10 or 203 98 200 10 which IP or mapping is decided by the internal load balancing algorithm With a...

Page 149: ...ose Static as the IPv4 Protocol 3 From the following page set main WAN IP address as 202 211 100 10 Click Add on IP Alias to configure the other IP address which is 202 211 100 11 4 After finished con...

Page 150: ...e 142 5 Open Objects Setting Object and click Add to create a new IP object profile Type the required information as shown below Click Apply to save the settings 6 Open Routing Policy Route and click...

Page 151: ...Type and choose IP range object profile from the drop down list of IP Object Click Apply to save the settings And 8 Upon completing the above configuration you have specified the outgoing IP address...

Page 152: ...n ng g P Po ol li ic cy y R Ro ou ut te e The following figure shows a simple application of load balance WAN1 and WAN2 can be used to access into Internet The PC in LAN1 can send the data to the remo...

Page 153: ...ype 203 65 1 35 as IP address choose Load Balance Pool as Out going Rule choose WAN1 as the Load Balance Rule click Disable for Failover to Next Rule 4 After finished the above settings click Apply to...

Page 154: ...c ch h b by y U Us si in ng g P Po ol li ic cy y R Ro ou ut te e A LAN to LAN VPN tunnel is built between DrayTek VPN router e g Vigor2960 and the remote router Enterprise firewall router in Headquart...

Page 155: ...e Subnet as Source Type and type the source IP address with 172 16 3 25 choose User Defined as Out going Rule choose lan1 as the Out going Interface type 192 168 1 2 as the Out going Gateway and click...

Page 156: ...ption WAN Profile Load Balance Pool Name Display the WAN profiles for user to choose as a default route In which wan1 to wan2 are factory default settings Auto Failover to Active WANs Enable Check it...

Page 157: ...no obstruction on the network routine In addition it will choose a correct route based on the method of Distance Vector Routing and use the Bellman Ford algorithm to calculate the routing table RIP c...

Page 158: ...lows Item Description Enable Check the box to enable the Mirror function for the switch Profile Choose the LAN WAN profile s Apply Click it to save the settings Cancel Click it to exit the dialog with...

Page 159: ...ter convergence than distance vector want to support much larger networks or want to have less susceptible to bad routing information you can enable OSPF feature to fit your request Note that both rou...

Page 160: ...Open Routing OSPF Configuration 2 Check Enable 3 Click the space of Profile A pop up dialog will appear Click Add 4 Use the drop down list of LAN Profile to choose the one you need And specify the val...

Page 161: ...g information for each other A BGP router is the neighbor of other BGP routers Define the IP address AS number for the router is essential for TCP connection of BGP routing information exchange AS the...

Page 162: ...or Display the neighbor profile name configured successfully in the Neighbor tab in Routing BGP configuration Neighbor IP Display the neighbor IP address configured successfully in the Neighbor tab in...

Page 163: ...er Type the autonomous system number for the host in BGP application Static Networks Define the IP addresses forming network range which allow to be connected by other clients through static route Add...

Page 164: ...t Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the sele...

Page 165: ...lick the Neighbor tab 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description Profile Type the name of the profile Enable Check the...

Page 166: ...P address so that local hosts can communicate with the router and access the Internet 4 4 4 4 1 1 P Po or rt t R Re ed di ir re ec ct ti io on n Port Redirection means port forwarding It may be used t...

Page 167: ...name Before using such function there is one profile existed at least Refresh Renew current web page Profile Display the name of the profile Enable Display the status of the profile False means disabl...

Page 168: ...will appear Available parameters are listed as follows Item Description Profile Type the name of the profile Enable Check the box to enable this profile Port Redirection Mode Specify the direction for...

Page 169: ...nything 4 Enter all of the settings and click Apply 5 A new profile has been added onto Port Redirection table 4 4 4 4 2 2 D DM MZ Z H Ho os st t In computer networks a DMZ De Militarized Zone is a co...

Page 170: ...move the selected profile To delete a profile simply select the one you want to delete and click the Delete button Rename Allow to modify the selected profile name Before using such function there is...

Page 171: ...profile Outgoing WAN Profile Choose a WAN profile for such entry Use IP Alias Click Enable to invoke IP Alias function IP Alias IP alias that can be selected and used for port redirection Before usin...

Page 172: ...an optional setting Use the drop down list to choose the type s to apply to such profile Apply Click it to save and exit the dialog Cancel Click it to exit the dialog without saving anything 4 Enter a...

Page 173: ...way This page allows make SIP message and RTP packets of voice being transmitting and receiving correctly via NAT by Vigor router Available parameters are listed as follows Item Description Enable SIP...

Page 174: ...n T Ti im me eo ou ut t This feature is used to configure timeout setting for sessions established by TCP UDP When a session is idle for a period of time the connection will be terminated after reachi...

Page 175: ...propriate Internet content and can filter out specific packets which may trigger unexpected outgoing connection such as a Trojan The following sections will explain how to configure the Firewall Users...

Page 176: ...Vigor2960 Series User s Guide 168...

Page 177: ...order of selected profile by moving it down Profile Number Limit Display the total number of the profiles to be created Group Display the name of the IP filter group profile Enable Display the status...

Page 178: ...ing 4 Enter all of the settings and click Apply 5 A new filter group has been added 6 You can create filter rule by clicking on the left side of the selected IP filter group profile A setting page wil...

Page 179: ...packet matching the rule and that does not match further rules will be dropped Accept If No Further Match A packet matching the rule and that does not match further rules will be passed through Connec...

Page 180: ...ystem Maintenance Syslog Mail Alert Syslog File Input Interface Choose one of the LAN or WAN profiles as data receiving interface Output Interface Choose one of the LAN or WAN profiles as data transmi...

Page 181: ...to display the profile selection box Choose one or more IP group profiles from the drop down list The selected profile will be treated as source target You can click to create another new IP group pro...

Page 182: ...e Destination User Group Click the triangle icon to display the profile selection box Choose one or more user group profiles from the drop down list The selected profile will be treated as destination...

Page 183: ...you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew c...

Page 184: ...er tab 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description Group Type the name of the IP filter group Enable Check the box to e...

Page 185: ...User s Guide 177 6 You can create filter rule by clicking on the left side of the selected IP filter group profile A setting page will appear for you to add new IP filter rule profile 7 Move your mou...

Page 186: ...be dropped immediately Accept Packets matching the rule will be passed immediately Block If No Further Match A packet matching the rule and that does not match further rules will be dropped Accept If...

Page 187: ...o create another new service type object profile Service Type Group Click the triangle icon to display the profile selection box Choose one or more service type group profiles from the drop down list...

Page 188: ...Vigor2960 Series User s Guide 180 Note You can create multiple IPv6 filter rules under a certain IP Filter group...

Page 189: ...one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule sim...

Page 190: ...pplication profile H Ho ow w t to o c cr re ea at te e a an n A Ap pp pl li ic ca at ti io on n F Fi il lt te er r p pr ro of fi il le e 1 Open Firewall Filter Setup and click the Application Filter t...

Page 191: ...IP group profiles from the drop down list The selected profile will be filtered by the router when such application filter profile is applied You can click to create another new IP group profile or yo...

Page 192: ...down list which will be allowed not be allowed to pass through the router You can click to create another new APP object profile or you can click the edit icon to modify the existed object profile Ap...

Page 193: ...cription Add Add a new group profile for URL filter Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear fo...

Page 194: ...the keyword object profile selected for each rule which is allowed to pass through the router Keyword Block Display the keyword object profile selected for each rule which is not allowed to pass thro...

Page 195: ...f fi il le e 1 Open Firewall Filter Setup and click the URL Web Category Filter tab 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Des...

Page 196: ...the profile selection box Choose one or more IP group profiles from the drop down list The selected profile will be filtered by the router when such URL filter profile is applied You can click to crea...

Page 197: ...other new keyword object profile or you can click the edit icon to modify the existed object profile Web Category Policy Click the triangle icon to display the profile selection box Choose one or more...

Page 198: ...lete a rule simply select the one you want to delete and click the Delete button Move Up Change the order of selected profile by moving it up Move Down Change the order of selected profile by moving i...

Page 199: ...Description Profile Type the name of the QQ filter profile Enable Check the box to enable this profile Time Profile Use the drop down list to specify a time profile for such profile You can click to c...

Page 200: ...eb Category Filter and QQ Filter are not suitable for the incoming packets Available parameters are listed as follows Item Description Default Policy Pass All of the incoming packets can pass through...

Page 201: ...led choose a packet number for filtering Available settings are from 4 to 16 For example 8 is selected as packet number setting It means only the former 8 packets will be filtered and inspected by Fir...

Page 202: ...to use up all your system s resources while vulnerability attacks try to paralyze the system by offending the vulnerabilities of the protocol or operation system 4 4 5 5 2 2 1 1 S Sw wi it tc ch h R R...

Page 203: ...t storm Unknown Multicast Click Enable to block the packets attacks coming from unknown multicast storm Filtering Rate Type a number 1 4096 unit is 64Kpbs required for filtering Apply Click it to save...

Page 204: ...he subsequent UDP packets within the user defined timeout period UDP Flood Threshold The default setting for threshold is 2000 packets per second UDP Flood Timeout The default setting for timeout is 1...

Page 205: ...eath Click Enable to activate the Block Ping of Death function Many machines may crash when receiving an ICMP datagram that exceeds the maximum length The router will block any fragmented ICMP packets...

Page 206: ...selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule De...

Page 207: ...listed as follows Item Description Profile Type the name which can briefly describe the reason of the MAC block of such profile Enable Check the box to enable this profile MAC Address Type the MAC ad...

Page 208: ...lows users to set different filter profiles based on IP service type keyword file extension instant message application P2P application protocol application web category QQ application time setting SM...

Page 209: ...Add a new profile Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding...

Page 210: ...llows Item Description Profile Type the name of such profile Address Type Choose the address type Single Range Subnet for such profile Start IP Address Type the IP address of the starting point for su...

Page 211: ...t the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rul...

Page 212: ...ers allowed to be typed here is 20 Description Make a brief explanation for such profile if the group name is set not clearly Objects Use the drop down list to check the IP object profiles under such...

Page 213: ...the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display...

Page 214: ...es Subnet Allow to specify subnet mask Address Pool This field allows you to type IP address specify Tag number and type subnet mask based on IPv6 protocol Tag is an optional field only used for user...

Page 215: ...imply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To d...

Page 216: ...Type a name for such profile Countries Check the box es for the country countries to be blocked by Firewall Apply Click it to save the configuration Cancel Click it to exit the dialog without saving...

Page 217: ...The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click t...

Page 218: ...Start It is available for TCP UDP protocol It can be ignored for ICMP Type a port number 0 65535 as the starting source port Source Port End It is available for TCP UDP protocol It can be ignored for...

Page 219: ...to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the...

Page 220: ...characters allowed to be typed here is 20 Objects Use the drop down list to check the service type object profiles under such group All the available service type objects that you have added on Objec...

Page 221: ...s Item Description Add Add a new profile Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to mo...

Page 222: ...such profile For example type gambling as Contents When you browse the webpage the page with gambling information will be watched out and be passed blocked based on the configuration on Firewall sett...

Page 223: ...ve the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 100 of the ob...

Page 224: ...tting Apply Click it to save the configuration Cancel Click it to exit the dialog without saving the configuration 4 Enter all of the settings and click Apply 5 A new DNS Object profile has been creat...

Page 225: ...object profiles to be created Profile Display the name of the profile Image Display the selected file extension of image Video Display the selected file extension of video Audio Display the selected...

Page 226: ...box es to select the file extension you need Java Several file extensions for Java offered for you to choose Use the drop down list to check the box es to select the file extension you need ActiveX Se...

Page 227: ...th types of IM P2P Protocol and Others Each tab will bring out different items with supported versions Below shows the items with versions which are categorized under IM Add Add a new profile Edit Mod...

Page 228: ...the applications with versions supported by Vigor router They are separated with types of IM P2P Protocol and Others Each tab will bring out different items with supported versions Below shows the it...

Page 229: ...u to choose to block Choose the one s you want to block and save as an IM Object profile Later it can be applied to Firewall as a filter rule and reach the purpose of block Available parameters are li...

Page 230: ...Item Description Other P2P Applications Several P2P applications offered for you to choose Check the one s you want to add for such profile Click Protocol to get the following page Network services e...

Page 231: ...following page Item Description Tunneling Streamin g Remote Control Web HD Several protocols offered for you to choose Check the one s you want to add for such profile 4 Enter all of the settings and...

Page 232: ...s to experiment If you want to purchase a formal edition simply contact with your DrayTek dealer Note 1 Web Content Filter WCF is not a built in service of Vigor router but a service powered by Commto...

Page 233: ...n Leisure Display the items under certain category that you choose to block Business Display the items under certain category that you choose to block Chatting Display the items under certain category...

Page 234: ...ries Simply check the one s that you don t want the children to visit Leisure Simply check the one s that you don t want the user to visit Business Simply check the one s that you don t want the user...

Page 235: ...URL and click it The system will guide you to access into MyVigor website After finishing the activation for the trial version of WCF remember to purchase Silver Card for WCF service from your DrayTe...

Page 236: ...sponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile...

Page 237: ...ype the name of the QQ object profile The number of the characters allowed to be typed here is 10 id Create the account name for such QQ object profile Add Click this button to add a new account Save...

Page 238: ...or the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Displa...

Page 239: ...p name is set not clearly Objects Use the drop down list to select the object profiles under such group All the available objects that you have added on Objects Setting QQ Object will be seen here To...

Page 240: ...fy the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web p...

Page 241: ...Profile Type the name of the time object profile The number of the characters allowed to be typed here is 10 Frequency Specify how often Weekdays or Once the schedule will be applied Start Date Specif...

Page 242: ...file Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for...

Page 243: ...p The number of the characters allowed to be typed here is 10 Description Make a brief explanation for such profile if the group name is set not clearly Objects Use the drop down list to check the tim...

Page 244: ...lected profile Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the...

Page 245: ...Use the drop down list to specify the service provider which offers SMS service Username Type a user name that the sender can use to register to selected SMS provider The maximum length of the name y...

Page 246: ...ed profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected profile Delete...

Page 247: ...a a n ne ew w m ma ai il l s se er rv vi ic ce e p pr ro of fi il le e 1 Open Objects Setting Mail Service Object 2 Simply click the Add button 3 The following dialog will appear Available parameters...

Page 248: ...r Name Type a name for authentication The maximum length of the name you can set is 31 characters User Password Type a password for authentication The maximum length of the password you can set is 31...

Page 249: ...emove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 8 of the o...

Page 250: ...on happened to WAN interface the router system will send the alert message to the recipient VPN Disconnection Enable When disconnection happened to a VPN tunnel the router system will send the alert m...

Page 251: ...web portal mechanism and then be managed for functions like firewall or load balance This page can determine the general rule for the users controlled by User Management The mode selected in this page...

Page 252: ...960 IP Display the IP address of the user who logs into the WUI of Vigor2960 Allow Time Display the total network connection time allowed for the log in user Start Time Display the starting time of th...

Page 253: ...the Login Mode is set as HTTP or HTTPS Note that the authentication sequence adopted by the system will be Local first Guest second RADIUS third and LDAP the last LDAP Profiles It is available when L...

Page 254: ...that the hotel wants the user s to visit Custom URL Type the URL of specified web page for redirection if Custom URL is selected as URL Redirection After Login Daily Logout Enable Force the online use...

Page 255: ...the purpose of the wireless LAN client is he she will be forced into the URL configured here while trying to access into the Internet or the desired web page through this router That is a company whic...

Page 256: ...s useful for advertisement Upload Background Image Choose a file to upload to Vigor2960 Login Page Preview Click it to have a preview of login page including welcome message and bulletin message Reset...

Page 257: ...login Time Quota Display the status Enable Disable of time quota mechanism for web portal use Remaining Time Display the remaining time for the user profile Recharge It can recharge the remaining time...

Page 258: ...en the user passes the authentication he she can access Internet via this router However the accessing operation will be restricted with the conditions configured in this user profile Enable Check thi...

Page 259: ...from Choose a LAN profile for DHCP server IP dispatching Remote clients using this profile to do PPTP L2TP dial in will be assigned IP addresses according to this DHCP pool Static IP Address Type an I...

Page 260: ...tem User is set with false Choose one of the SSL Application profiles RDP for applying into this profile To clear the selected one click to remove current object selections PPPoE Server Allow PPPoE Se...

Page 261: ...bled simply type the MAC address of the router in this field FTP User Setting Allow FTP Server Login Click Enable to allow the remote user accessing into Internet via FTP server Radius User Setting Al...

Page 262: ...he box to configure detailed setting Enable Click it to enable the time quota function for all user profiles Modify Time Quota Value Check the box to configure detailed setting You have to check this...

Page 263: ...PPPoE FTP Radius Server Login Check the box to configure detailed setting Enable Click it to enable the PPPoE FTP Radius authentication function all user profiles Apply to All Apply all of the modifi...

Page 264: ...at most 255 user accounts at a time Account Manually Auto generated with regularity Password Distinct password created by Administrator Randomly generated and the length is defined by Administrator Ma...

Page 265: ...ress Type and type 192 168 1 11 as Start IP Address Click Apply to save the settings 5 Open User Management Guest Profile and click the Mass Guest Generator tab to open the following page Type the Gro...

Page 266: ...anagement Guest Profile and click Guest Group to check the Mass User account Group By clicking each account e g choose 1001 and click Edit we can check the information for this account and we may also...

Page 267: ...or2960 Series User s Guide 259 Note that Administrator is able to Export the information for the whole group to a csv file which is useful to redistribute the account and password combinations to gues...

Page 268: ...age Check Local and Guest as Authentication Type Check IP object named of Boss to put it into the white list and this will allow this IP address to access to the Internet without authentication 8 Afte...

Page 269: ...net For Room guest to access into Internet 4 4 7 7 3 3 U Us se er r G Gr ro ou up p The User Group can consist of several user profiles which help the administrator to manage a large number of users c...

Page 270: ...reated Usergroup Display the name of the user group Enable Display the status of the profile False means disabled True means enabled Member Display the user profiles under such group H Ho ow w t to o...

Page 271: ...as follows Item Description Add Add a new profile Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for...

Page 272: ...Item Description Group Type the name of such profile Enable Check this box to enable such profile Comment Give a brief description for the profile Usage Period It determines the usage time for the gu...

Page 273: ...the settings and click Apply 5 A new guest group profile has been created 6 You can create several guest names by clicking on the left side of the selected guest group profile A setting page will app...

Page 274: ...Give a brief description for the guest Apply to Web Portal Enable Click it to make such profile being applied to web portal Disable Click it to disable the option Clean Deadline The guest profile can...

Page 275: ...art Index Type a number which will be treated as the starting number for generating mass guest profiles Note The range of Start index is 1 10000 Number to Generate Type the total number of guests to b...

Page 276: ...ytime outside the valid period Click Enable to enable such option Start Time End Time Specify the valid period by typing the time with the format of YYYY MM DD MM Apply Click it to save the configurat...

Page 277: ...r rn na al l R Ra ad di iu us s S Se er rv ve er r Vigor router can specify external RADIUS server for performing security authentication Available parameters are listed as follows Item Description En...

Page 278: ...US server Interface Only the clients from the selected interface can be authenticated by Vigor RADIUS server Port Clients can use the specified port number to exchange RADIUS information Authenticatio...

Page 279: ...e directory securely therefore users can apply LDAP to search or list the directory object inquire or manage the active directory Available parameters are listed as follows Item Description Add Add a...

Page 280: ...red regular DN if Bind Type is set with Regular Mode Regular Password Display the configured regular password if Bind Type is set with Regular Mode H Ho ow w t to o c cr re ea at te e a a n ne ew w L...

Page 281: ...r Common Name Identifier Type or edit the common name identifier for the LDAP server The common name identifier for most LDAP server is cn Base DN It means Base Distinguished Name Type the distinguish...

Page 282: ...amic DNS server Once the router is online you will be able to use the registered domain name to access the router or internal virtual servers from the Internet It is particularly helpful if you host a...

Page 283: ...lows Item Description Auto Refresh Specify the interval of refresh time to obtain the latest status The information will update immediately when the Refresh button is clicked Refresh Renew current web...

Page 284: ...DNS server immediately Refresh Renew current web page Profile Display the name of the profile Enable Display the status of the profile False means disabled True means enabled WAN Profile Display curre...

Page 285: ...Edit button Available parameters are listed as follows Item Description Profile Display the name of the profile Enable Check this box to enable such profile WAN Profile Choose a WAN profile that such...

Page 286: ...Internet IP as the source for the DDNS profile Wildcard and Backup MX The Wildcard and Backup MX features are not supported for all Dynamic DNS providers You could get more detailed information from t...

Page 287: ...Vigor2960 Series User s Guide 279 4 4 8 8 1 1 3 3 D DD DN NS S L Lo og g This page displays the information related to all DDNS...

Page 288: ...ices Available parameters are listed as follows Item Description Enable This Profile Check this box to enable GVRP function Interface Choose LAN and or WAN profiles To clear the selected one click to...

Page 289: ...port In addition such function is available in NAT mode Downstream Use the drop down list to specify the LAN profile as the destination of data coming from WAN interface defined in IGMP Proxy Channel...

Page 290: ...vailable on Windows XP and the router provide the associated support for MSN Messenger to allow full use of the voice video and messaging features Available parameters are listed as follows Item Descr...

Page 291: ...ature refers to the awareness of component failure and the availability of backup resources The complexity of HA is determined by the availability needs and the tolerance of system interruptions Syste...

Page 292: ...all secondary nodes to replace the failure one and take over the service While in the standby status the secondary nodes are still mirrored the configuration of primary in real time thus the whole sy...

Page 293: ...is no secondary router taking over the service all the data traffic would be terminated To solve the problem two methods can be executed 1 Simply reset Manual Preemption Status from Inactive to Active...

Page 294: ...ed 1 Simply reset Manual Preemption Status from Inactive to Active and then click Apply to save the settings 2 Set the value for Manual Mode Threshold After passing the time configured in Manual Mode...

Page 295: ...tect connection status of all enabled WAN profiles If connection status of all enabled WAN profiles are down the master router hands off its position 4 4 8 8 5 5 2 2 H Ho ot t S St ta an nd db by y M...

Page 296: ...e interval of refresh time to obtain the latest status The information will update immediately when the Refresh button is clicked Refresh Renew current web page Profile Number Limit Display the total...

Page 297: ...e one of the LAN profiles that such function will be applied to Virtual IP for Gateway Assign an IP address as a virtual IP VHID It means Virtual Host ID Type a number as VHID for such function VHID i...

Page 298: ...m is that each access point in LAN will participate in different high availability sessions All the WAN interfaces can be active which provide more flexible utilization of network service When LAN1 in...

Page 299: ...nt to delete and click the Delete button Refresh Renew current web page Auto Refresh Specify the interval of refresh time to obtain the latest status The information will update immediately when the R...

Page 300: ...plied to Virtual IP for Gateway Assign an IP address as a virtual IP VHID It means Virtual Host ID Type a number as VHID for such function VHID is used for Backup router to identify which Master will...

Page 301: ...8 8 6 6 1 1 W Wa ak ke e o on n L LA AN N Available parameters are listed as follows Item Description Configure Bind IP to MAC Click it to open the setting page of Bind IP to MAC Wake by Three types...

Page 302: ...and time profile Available parameters are listed as follows Item Description Add Add a new schedule profile Edit Modify the selected schedule profile To edit the profile simply select the one you want...

Page 303: ...ofile Mode Choose the type for data input Bind Table or MAC Address Bind Table Choose one of the profiles listed in Bind Table MAC Address If MAC Address is selected as Mode you have to type MAC addre...

Page 304: ...e allows you to specify SMS provider who will get the SMS what the content is and when the SMS will be sent Each item will be explained as follows Item Description Edit Modify the selected profile To...

Page 305: ...enable such profile SMS Provider Choose the SMS provider object profile from the drop down list Such profiles can be created from Object Setting SMS Service Object Recipient Type the cell phone numbe...

Page 306: ...onding settings for the selected profile Refresh Renew current web page Index Display the index number from 1 to 10 of the profile Enable This Profile Display the status of the profile False means dis...

Page 307: ...bject Recipient Type the e mail address for receiving the mail Notify Profile Choose a profile specify the timing for sending SMS from the drop down list Such profiles can be created from Object Setti...

Page 308: ...VPN technology you can send data between two computers across a shared or public network in a manner that emulates the properties of a point to point private link Below shows the menu items for VPN a...

Page 309: ...lable parameters are listed as follows Item Description Type Specify which protocol PPTP IPsec SSL will be used for such VPN profile VPN Settings Via Select From Current Settings Current VPN LAN to LA...

Page 310: ...the profile Then click Next 4 If you choose PPTP as the Type you will get the following screen Available parameters are listed as follows Item Description Profile Display the name of the VPN profile E...

Page 311: ...ask of local host Remote IP Subnet Mask Type the LAN IP address and LAN subnet mask for the remote host Route NAT Mode Specify the purpose for such profile Netbios Naming Packet Enable Click it to hav...

Page 312: ...or the remote host Remote IP Subnet Mask Type the LAN IP address and LAN subnet mask for the remote host More Remote Subnet Add more remote subnet in this field if required Auth Type The authenticatio...

Page 313: ...e name of the VPN profile Enable Check this box to enable such profile Always On Click Enable to make the profile being always on Dial Out Through Choose a wan profile to be used by such profile Then...

Page 314: ...ccurred between the hosts on both sides of VPN Tunnel in connecting such function can block data transmission of Netbios Naming Packet inside the tunnel Multicast via VPN Some programs might send mult...

Page 315: ...e for VPN dial in connection from client to server step by step H Ho ow w t to o c cr re ea at te e L LA AN N t to o L LA AN N p pr ro of fi il le e f fo or r V VP PN N s se er rv ve er r 1 Open VPN a...

Page 316: ...d return to the home page of such function 3 Click Create New VPN Profile and type the name of the profile Click Next to get into next page Note that if you choose PPTP as the Type in Step 2 you will...

Page 317: ...ckets pass through the router Disable This is default setting Click this button to let multicast packets be blocked by the router RIP via VPN Enable Click it to exchange routing information packets vi...

Page 318: ...erver The length of ID is limited to 47 characters It is available only when Aggressive Mode is enabled Auth Type The authentication to be used by Pre Shared Key or RSA Signature Choose PSK or RSA for...

Page 319: ...IP address and LAN subnet mask for the remote host Netbios Naming Packet Enable Click it to have an inquiry for data transmission between the hosts located on both sides of VPN Tunnel while connectin...

Page 320: ...Disable such function It is default setting 4 Fill in the required information on this page and click Finish A pop up window will appear 5 Click OK Then return to VPN and Remote Access VPN Server Wiz...

Page 321: ...PPTP VPN L2TP VPN SSL VPN IPsec etc of Vigor Router to allow VPN tunnel pass through Available parameters are listed as follows Item Description Enable PPTP L2TP VPN Service Enable SSL Tunnel IPsec S...

Page 322: ...ailable parameters are listed as follows Item Description Authenticate Protocol The router will authenticate the dial in user with the protocol selected here PAP It means the router will attempt to au...

Page 323: ...etween the hosts located on both sides of VPN Tunnel while connecting Block When there is conflict occurred between the hosts on both sides of VPN Tunnel in connecting such function can block data tra...

Page 324: ...protocol User Authentication Type Set user authentication to Local server or RADIUS server LDAP profiles Choose a LDAP profile for L2TP Server if LDAP is selected as user authentication type To clear...

Page 325: ...f the DHCP server you are going to use so the relay agent can help to forward the DHCP request to the DHCP server Force L2TP with IPsec policy If it is checked the router will use L2TP with IPsec poli...

Page 326: ...is selected as user authentication type DHCP Relay Enable Let the router assign IP address to every host in the LAN Disable Let you manually assign IP address to every host in the LAN DHCP Server Loca...

Page 327: ...ters are listed as follows Item Description Preshared Key Specify a key for IKE authentication Confirm Pre Shared Key Retype the characters to confirm the pre shared key WAN Profile Choose a WAN inter...

Page 328: ...profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected profile Delete Remove the selected...

Page 329: ...through the use of two traffic security protocols the Authentication Header AH and the Encapsulating Security Payload ESP and through the use of cryptographic key management procedures and protocols...

Page 330: ...e is faster The default value in Vigor router is Main mode Auth Type The authentication to be used by Pre Shared Key or RSA Signature Choose PSK or RSA for such profile Local Certificate Choose a loca...

Page 331: ...function A new Diffie Hellman Key Exchange is included every time an encryption and or authentication key are computed on PFS Dead Peer Detection Status Enable or disable the DPD function DPD Delay Th...

Page 332: ...osts located on both sides of VPN Tunnel while connecting Disable When there is conflict occurred between the hosts on both sides of VPN Tunnel in connecting such function can block data transmission...

Page 333: ...nt specified for this tunnel Auto Generate GRE Key Click Enable to enable such function If you click Disable you have to type GRE In Key and GRE Out Key respectively GRE In Key Type the hexadecimal nu...

Page 334: ...ial Out Propose the local available authentication schemes and encryption algorithms to the VPN peers and get its feedback to find a match IKE Phase2 Authentication Dial Out Propose the local availabl...

Page 335: ...ow will appear for you to modify the corresponding settings for the selected profile Delete Remove the selected profile To delete a profile simply select the one you want to delete and click the Delet...

Page 336: ...g will appear Available parameters are listed as follows Item Description Profile Type the name of the profile Enable Check this box to enable this profile Always On Click Enable to make the profile b...

Page 337: ...there is conflict occurred between the hosts on both sides of VPN Tunnel in connecting such function can block data transmission of Netbios Naming Packet inside the tunnel Multicast via VPN Some prog...

Page 338: ...simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 200 for PPTP 50 for SSL of the object profiles to be...

Page 339: ...P Subnet Mask Type the IP address and subnet mask of local host Remote IP Subnet Mask Type the LAN IP address and LAN subnet mask for the remote host Netbios Naming Packet Enable Click it to have an i...

Page 340: ...n Disable Disable such function This is default setting Apply Click it to save the configuration Cancel Click it to exit the page without saving the configuration 4 Enter all of the settings and click...

Page 341: ...orithm offered Round Robin Weighted Round Robin and Fastest Binding Tunnel Policy mechanism allows users to encrypt the data in transmission or specified service function in transmission and define sp...

Page 342: ...it window will appear for you to modify the corresponding settings for the selected profile Delete Remove the selected profile To delete a profile simply select the one you want to delete and click th...

Page 343: ...oad Balance or Failover Load Balance Interface Choose VPN profile s as the interface Note Only the VPN profiles with GRE function enabled will be listed and selected as Interface setting If there is n...

Page 344: ...elect the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected profile Delete Remove the selected profile To delet...

Page 345: ...nc ce e R Ru ul le e p pr ro of fi il le e 1 Open VPN and Remote Access VPN TRUNK Management and click the Load Balance Rule tab 2 Simply click the Add button 3 The following dialog will appear Availa...

Page 346: ...ne ec ct ti io on n M Ma an na ag ge em me en nt t You can find the summary table of all VPN connections You may disconnect any VPN connection by clicking Disconnect button Each item will be explaine...

Page 347: ...nel RX Packets Display the total received packets through this VPN TX Packets Display the total transmitted packets through this VPN Operation Display the icons to terminate view the VPN profile 4 4 9...

Page 348: ...conforming to standard X 509 Any entity wants to utilize digital certificates should first request a certificate issued by a CA server It should also retrieve certificates of other trusted CA servers...

Page 349: ...ocal certificate can be signed by itself or signed by a root CA Each item will be explained as follows Item Description Upload Click this button to open the following dialog to upload selected certifi...

Page 350: ...te Status Display the status of local certificate Valid From Display the starting point of the valid time of local certificate Valid To Display the end point of the valid time of local certificate H H...

Page 351: ...pe the name of the city for such certificate State Province Type the name of the state province for such certificate Common Name Type the common name for such certificate Email Address Type the e mail...

Page 352: ...into any place you want If you have already gotten a certificate from a third party you may import it directly The supported types are PKCS12 Certificate and Certificate with a private key 1 Open Cer...

Page 353: ...ick the Select button to open the follwoing dialog 4 From the above dialog choose the certificate you want and click Open The dialog box with the selected certificate file name will be shown as follow...

Page 354: ...es for both clients requesting for network connection It allows you to import the third party certificate authenticated by other certification authority CA to be used as a CA for signing the local cer...

Page 355: ...o Vigor router Delete Remove the selected item of trusted CA listed below Name Display the name of trusted certificate built Subject Display the subject of trusted certificate built Issuer Display the...

Page 356: ...ient Each item will be explained as follows Item Description Upload Click this button to open the following dialog to upload selected certificate onto the router After choosing the PKCS12 Certificate...

Page 357: ...cted item of trusted CA listed below Select File Use the Browse button to specify a file to be used as a certificate Name Display the name of certificate built Subject Display the subject of certifica...

Page 358: ...ted through SSL VPN in comparing with traditional VPN 4 4 1 11 1 1 1 S SS SL L W We eb b P Pr ro ox xy y SSL Web Proxy will allow the remote users to access the internal web sites over SSL Each item w...

Page 359: ...SSL Web Proxy 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description Profile Type name of the profile URL Type the address functio...

Page 360: ...you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected profile Delete Remove the selected profile To delete a profile si...

Page 361: ...hat you create IP Address Type the IP address for this protocol Port Specify the port used for this protocol The default setting is 5900 Scaling Chose the percentage 100 80 60 for such application App...

Page 362: ...elected profile To delete a profile simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 30 of the profiles...

Page 363: ...P Address Type the IP address for this protocol Port Specify the port used for this protocol Screen Size Chose the screen size for such application Apply Click it to save the configuration Cancel Clic...

Page 364: ...DrayTek SSL VPN portal interface Each item will be explained as follows Item Description Refresh Renew current web page Auto Refresh Specify the interval of refresh time to obtain the latest status Th...

Page 365: ...and any other TR 069 CPE by the function of central VPN management In addition it can be treated as a server called CVM server which can manage TR 069 CPE for periodical firmware upgrade configuratio...

Page 366: ...rofile Specify an interface for VPN management Port Type a port number for Vigor2960 Username Type a username which will be used by any CPE tried to connect to Vigor router Password Type a password wh...

Page 367: ...e to be used Local IP Subnet Type the IP address and subnet mask of local host IPsec Security Method Choose one of the following methods for the security of data transmission For example choose AH to...

Page 368: ...ows you to manage the CPEs connected to Vigor2960 Page without CPE connected Page with CPE connected Available parameters are listed as follows Item Description Managed Devices Status This area displa...

Page 369: ...mporary place for the administrator to retrieve It is useful especially for the CPEs deleted carelessly If you want to retrieve some CPE click it to open another window Deleted CPEs containing related...

Page 370: ...ge File Explorer Click it to open a file explorer The available firmware will be displayed in such page Profile Display the name of the profile Device Display the name named by Vigor2960 of the device...

Page 371: ...ce e P Pr ro of fi il le e Follow the steps below to create a new maintenance profile 1 Click Add on the Maintenance area 2 The Maintenance dialog appears Available parameters are listed as follows It...

Page 372: ...ule configured here Now The action will be performed for the selected CPE immediately Once The action will be performed for the selected CPE at the specified time and will be done for once Weekdays Th...

Page 373: ...ered to configure VPN settings for building VPN connection between Vigor2960 treated as VPN server and other Vigor router treated as CPE device i e VPN client Available parameters are listed as follow...

Page 374: ...from the Device drop down list choose the name of the CPE select PPTP or IPsec as the Dial Type choose PAP_only or PAP_or_CHAP as PPP authentication enable or disable VJ Compression then click Connec...

Page 375: ...tailed information Connected Devices Once the VPN is established successfully the basic information such as the connection type IP address RX RX will be displayed on this field Refresh Click it to ref...

Page 376: ...Vigor2960 Series User s Guide 368 4 4 1 12 2 2 2 3 3 M Ma ap p To display the location of the selected CPE with a bird s eye view open Central VPN Management CPE Management and click the tab of Map...

Page 377: ...er s Guide 369 4 4 1 12 2 3 3 L Lo og g A Al le er rt t The Log page offers brief information to identify the CPE connected to Vigor2960 The Alert page offers brief information to identify the CPE con...

Page 378: ...o network or servers for supporting timing sensitive and mission critical network applications such as VoIP Voice over IP and online gaming applications Differentiated quality of service is therefore...

Page 379: ...he corresponding settings for the selected profile Refresh Renew current web page QoS WAN Display the WAN interface used for QoS Outgoing Status Display bandwidth for the outgoing data is enabled or d...

Page 380: ...transmission rate for the outgoing incoming data The range can be set from 64000 to 10000000 Click the unit Kbps or Mbps for such rate High Medium Normal Low There are several available outgoing queue...

Page 381: ...apply hardware QoS Status Enable Click it to enable QoS for outgoing incoming traffic Disable Click it to disable QoS for outgoing incoming traffic Bandwidth Type the number as the total transmission...

Page 382: ...d profile Delete Remove the selected profile To delete a profile simply select the one you want to delete and click the Delete button Rename Allow to modify the selected profile name Refresh Renew cur...

Page 383: ...ru ul le e p pr ro of fi il le e 1 Open Bandwidth Management QoS Rule 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description Profi...

Page 384: ...t Normal is the lowest Local Address Click on the left side of the Source IP Object Source IP Group profile Check the object profile s as the source target Local IP Object Use the drop down list to ch...

Page 385: ...emote IP Object Remote IP Group profile Check the object profile s as the destination target Remote IP Object Use the drop down list to choose one of the destination IP objects for such rule profile R...

Page 386: ...ch service type Protocol There are two options TCP UDP and TCP UDP Select the protocol that you want to use Source Port Start End Type the start end number for the port range of the source port for su...

Page 387: ...ill be sent with highest priority during the process of data transmission Each item will be explained as follows Item Description Enable Enable Click it to enable VoIP QoS function SIP UDP Port Set a...

Page 388: ...that will be easily to be identified by server on ISP Each item will be explained as follows Item Description Enable Enable Click it to enable DSCP Re Tag function High Medium Normal Low There are fou...

Page 389: ...tem will be explained as follows Item Description Add Add a new profile Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit w...

Page 390: ...ult message to display on the page that the user tries to access into the blocked web page Disable Type the message manually to display on the page that the user tries to access into the blocked web p...

Page 391: ...nnot be typed with 0 otherwise the profile cannot be saved general target Time Object Click the triangle icon to display the profile selection box Choose a schedule object profile to be applied on suc...

Page 392: ...been created 4 4 1 13 3 4 4 B Ba an nd dw wi id dt th h L Li im mi it t The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications fo...

Page 393: ...his radio button to configure the default limitation for bandwidth for any LAN IP not included in the Limitation List Session Threshold When session number exceeds the set threshold Smart Bandwidth li...

Page 394: ...ed of the downstream If you do not set the limit in this field the system will use the default speed for the specific limitation you set for each index Do not type the value with 0 otherwise the profi...

Page 395: ...t The selected profile will be treated as source target You can click to create another new IP object profile Source IP Group Click the triangle icon to display the profile selection box Choose one or...

Page 396: ...o connect to USB modem Models of the modems supported by Vigor router can be seen from USB Application Modem Support List For network connection via USB modem refer to WAN General Setup for detailed i...

Page 397: ...insert a USB storage disk first At present the Vigor router can support USB storage disk with versions of FAT16 32 and EXT2 3 only Therefore before connecting the USB storage disk into the Vigor route...

Page 398: ...g is 10 4 4 1 14 4 3 3 T Te em mp pe er ra at tu ur re e S Se en ns so or r A USB Thermometer is now available that complements your installed DrayTek router installations that will help you monitor t...

Page 399: ...lay unit Temperature Alert Lower limit Temperature Alert Upper limit Type the upper limit and lower limit for the system to send out temperature alert Calibration Type a value used for correcting the...

Page 400: ...Enter all of the settings and click Apply 4 4 1 14 4 4 4 M Mo od de em m S Su up pp po or rt t L Li is st t Such page provides the information about the brand name and model name of the USB modems wh...

Page 401: ...SNMP Setup Reboot System Firmware Upgrade and Upload Language File Below shows the menu items for System Maintenance 4 4 1 15 5 1 1 T TR R 0 06 69 9 This device supports TR 069 standard It is very con...

Page 402: ...ge to syslog The default setting Disable Click Enable to make the log message being recorded by Syslog Periodic Status The default setting is Enable Please set periodic time for VigorACS to send notif...

Page 403: ...word for accessing into the WUI of the router Each item will be explained as follows Item Description Original Password Type the old password New Password Type the new password Confirm Password Re typ...

Page 404: ...Choose it to encrypt the whole configuration file Password Type a password for encrypting the file Confirm Password Retype the password for confirmation Encode Password in Config Choose it to encrypt...

Page 405: ...t for use next time Password Type a password for encrypting the file Confirm Password Retype the password for confirmation Restore Type Choose one of the types to determine where the file will be down...

Page 406: ...ug equipments 4 4 1 15 5 4 4 1 1 S Sy ys sL Lo og g F Fi il le e This page displays all the operation logs for the router Available parameters are listed as follows Item Description Refresh Renew the...

Page 407: ...e a name for the router Log to USB Enable Click it to save the log onto USB disk Disable Click it to disable the function of log to USB USB Syslog Keep Days Type the days that USB disk will keep the l...

Page 408: ...e listed as follows Item Description Enable Check the box to enable such profile Mail From Type a mail address for the mail sender Mail To Assign a mail address for the mail receiver Add Click this bu...

Page 409: ...system time functions run successfully Typically NTP achieves high accuracy and reliability with multiple redundant servers and diverse network paths Available parameters are listed as follows Item D...

Page 410: ...ser interface of Vigor router a validation code will appear to authenticate the user trying to log into web user interface Disable No validation will be done when a user tries to log into the web user...

Page 411: ...ly to LAN Subnet Choose the LAN profile s that the IPs controlled under such profile are allowed to access into the web user interface of Vigor2960 Web Allow Click Enable to allow system administrator...

Page 412: ...tion Enable Fail to Ban Enable the function to protect Vigor system while being attacked by malicious accounts and passwords Web UI SSH FTP TELNET PPTP SSL Enable Enable the function of Fail to Ban vi...

Page 413: ...tack and flooding attack and ensure following protocols can run properly Available parameters are listed as follows Item Description PPTP IPsec Web SSH Telnet FTP Access Barrier The port number used b...

Page 414: ...able to use the default IP and mask of the host as the SNMP agent If you click Disable you need to type the IP address and choose the mask manually in related fields Notification Host IP Type the IP a...

Page 415: ...with Current Configurations and click Reboot To reset the router settings to default values click Reboot with Factory Default Configurations and click Reboot The router will take a period of time to...

Page 416: ...hoose a time object from the drop down list of Schedule Time Object After clicking Apply Vigor router will reboot at the specified time Usually you have to configure required time object from Objects...

Page 417: ...1 1 U Up pg gr ra ad de e F Fi ir rm mw wa ar re e This page display current firmware version used in Vigor router In addition it allows you to select the newest firmware version manually and update t...

Page 418: ...is any newest firmware available for use If yes Vigor router will download the newest firmware from the website to the host Vigor router automatically Install Update If the firmware version stored on...

Page 419: ...ecute APP version upgrade Users can perform the APP signature upgrade manually or configure the settings on this page to make Vigor router performing the APP signature automatically 4 4 1 15 5 1 10 0...

Page 420: ...ion information automatically Mode Choose the condition to execute APP signature upgrade or send a notification Manual upgrade If it is selected check and installation for signature will be executed o...

Page 421: ...P PP P S Su up pp po or rt t L Li is st t APP Support List displays all of the applications with versions supported by Vigor router They are separated with types of IM P2P Protocol and Others Each tab...

Page 422: ...ti in ng g T Ta ab bl le e Click Diagnostics and click Routing Table to open the web page 4 4 1 16 6 1 1 1 1 R Ro ou ut ti in ng g T Ta ab bl le e Display the information for each route Each item wil...

Page 423: ...oute for dynamic routing D dynamically installed by daemon or redirect M modified from routing daemon or redirect A installed by addrconf C cache entry reject route Metric Display the distance to the...

Page 424: ...from routing daemon or redirect A installed by addrconf C cache entry reject route Metric Display the distance to the target usually counted in hops It may be needed by routing daemons Iface Display t...

Page 425: ...Click the mouse button and type the keyword inside the box The system will display the records relating to the keyword IP Address Display the IP address for different ARP cache MAC Address Display the...

Page 426: ...ce to which this neighbor is attached MAC Address Display the MAC address of the neighbor Status Display the status for such neighbor INCOMPLETE Address resolution is in progress and the link layer ad...

Page 427: ...ghbor immediately however delay sending probes for a short while in order to give upper layer protocols a chance to provide reachability confirmation PROBE The neighbor is no longer to be reachable an...

Page 428: ...Description Refresh Renew the web page Search Move the mouse cursor onto the box of Search Click the mouse button and type the keyword inside the box The system will display the records relating to t...

Page 429: ...Search Move the mouse cursor onto the box of Search Click the mouse button and type the keyword inside the box The system will display the records relating to the keyword Interface Display the interfa...

Page 430: ...the web page Search Move the mouse cursor onto the box of Search Click the mouse button and type the keyword inside the box The system will display the records relating to the keyword Source Display t...

Page 431: ...irst visited the web page will show the first 20 entries from the beginning of the MAC Table The first displayed will be the one with the lowest VLAN ID and the lowest MAC address found in the MAC Tab...

Page 432: ...ets Display the packet sizes for data transmission in receiving and sending Receive Transmit Bytes Display the number of received and transmitted bytes per port Receive Transmit Error Display the numb...

Page 433: ...e LAN Use the drop down menu to choose a LAN profile WAN Use the drop down menu to choose a WAN profile Apply Click it to save the configuration configured under the Setup tab CPU Click the CPU tab Th...

Page 434: ...information of LAN operation about recent 7 days Recent 4 Weeks Display the information of LAN operation about recent 4 weeks WAN Click the WAN tab There are three selections provided for you to spec...

Page 435: ...er to the host Simply type the IP address of the host in the box and click Run The result of route trace will be shown on the screen Each item will be explained as follows Item Description Ping TraceR...

Page 436: ...ion Enable Dataflow Monitor Check this box to enable such function Block Prevent the specified PC accessing into Internet within 5 minutes UnBlock Allow the specified PC accessing into Internet within...

Page 437: ...of the WAN interface RX Rate Display the rate of data received TX Rate Display the rate of data transmitted RX byte Display the file size of data received TX byte Display the file size of data transm...

Page 438: ...product Connection Time Display the connection time that the external product connecting to Vigor2960 Clear Click the icon to remove the record of the device when it is offline From this web page chec...

Page 439: ...ng to factory default setting if necessary If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 5 5 1 1 C Ch he ec ck k...

Page 440: ...link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s The example is based on Windows 7 As to the examples for oth...

Page 441: ...CP IP and then click Properties 5 Select Obtain an IP address automatically and Obtain DNS server address automatically Finally click OK F Fo or r M Ma ac c O OS S 1 Double click on the current used M...

Page 442: ...Vigor2960 Series User s Guide 434 3 On the Network screen select Using DHCP from the drop down list of Configure IPv4...

Page 443: ...er correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista 7 The DOS command dialog will...

Page 444: ...he ec ck ki in ng g I If f t th he e I IS SP P S Se et tt ti in ng gs s a ar re e O OK K o or r N No ot t Open Online Status to check current network status Be careful to check if the settings coming...

Page 445: ...y returning to the default settings Try to reset the router by software or hardware Warning After pressing factory default setting you will lose all settings you did before Make sure you have recorded...

Page 446: ...lt configuration After restore the factory default setting you can configure the settings for the router again to fit your personal request 5 5 6 6 C Co on nt ta ac ct ti in ng g D Dr ra ay yT Te ek k...

Reviews:

No comments

Related manuals for Vigor2960

Brand: SonicWALL Pages: 2

Brand: Lanner Pages: 63

Brand: ZyXEL Communications Pages: 2

USG Flex Series

Brand: ZyXEL Communications Pages: 18

ENTERPRISE NETWORK CENTER

Brand: ZyXEL Communications Pages: 302

Brand: PaloAlto Networks Pages: 50

Brand: Bandura Cyber Pages: 93

Cisco ASA 5500 Series

Brand: Cisco Pages: 20

Brand: SonicWALL Pages: 2

Brand: SonicWALL Pages: 2

Brand: SonicWALL Pages: 15

Brand: SonicWALL Pages: 26

Brand: SonicWALL Pages: 21

Brand: SonicWALL Pages: 42

Email Security 7.0 8000

Brand: SonicWALL Pages: 32

Brand: SonicWALL Pages: 44

Email Security 800

Brand: SonicWALL Pages: 40

Brand: SonicWALL Pages: 41

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands