Draytek Vigor 2930 Скачать руководство пользователя

Страница: 1 / 216

Vigor2930 Series

Dual-WAN Security Firewall

User’s Guide

Version: 1.1

Date: 2007/10/30

This publication contains information that is protected by copyright. No part may be reproduced, transmitted,

transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright

holders. The scope of delivery and other details are subject to change without prior notice.

Microsoft is a registered trademark of Microsoft Corp.

Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.

Apple and Mac OS are registered trademarks of Apple Computer Inc.

Other products may be trademarks or registered trademarks of their respective manufacturers.

Содержание Vigor 2930

Страница 1: ...em or translated into any language without written permission from the copyright holders The scope of delivery and other details are subject to change without prior notice Microsoft is a registered tr...

Страница 2: ...ns on conservation of the environment Warranty We warrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from...

Страница 3: ...against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may c...

Страница 4: ...uring Basic Settings 13 2 1 Changing Password 13 2 2 Quick Start Wizard 15 2 2 1 PPPoE 16 2 2 2 PPTP 18 2 2 3 Static IP 19 2 2 4 DHCP 20 2 3 Online Status 21 2 4 Saving Configuration 23 3 AdvancedWebC...

Страница 5: ...ote Access 93 3 8 1 Remote Access Control 93 3 8 2 PPP General Setup 93 3 8 3 IPSec General Setup 95 3 8 4 IPSec Peer Identity 96 3 8 5 Remote Dial in User 98 3 8 6 LAN to LAN 101 3 8 7 Connection Man...

Страница 6: ...nection Between Remote Office and Headquarter 175 4 2 Create a Remote Dial in User Connection Between the Teleworker and Headquarter 182 4 3 QoS Setting Example 186 4 4 LAN Created by Using NAT 189 4...

Страница 7: ...ntrol inside Vigor2930 S series models support two ISDN ports ISDN S0 1 port is dedicated for ISDN phone and ISDN S0 2 port is configurable for ISDN line and phone if required It can support multiple...

Страница 8: ...ace for transmitting analog signal through Internet between Switching and router Such interface is also named with ISDN S0 extern in Germany ISDN NT Network Terminator is a port that used to connect g...

Страница 9: ...ctive QoS On The QoS function is active LED on Connector On The port is connected Off The port is disconnected Left LED Green Blinking The data is transmitting On The port is connected with 100Mbps WA...

Страница 10: ...on is active LED on Connector On The port is connected Off The port is disconnected Left LED Green Blinking The data is transmitting On The port is connected with 100Mbps WAN 1 2 Right LED Green Off T...

Страница 11: ...is on hook Phone 1 2 Blinking A phone call comes LED on Connector On The port is connected Off The port is disconnected Left LED Green Blinking The data is transmitting On The port is connected with 1...

Страница 12: ...cted Left LED Orange Blinking ISDN NT ISDN S0 intern mode is active and an ISDN phone adapter is not connected On A phone has been connected If not green LED will be off ISDN S0 1 Right LED Green Blin...

Страница 13: ...ns to blink rapidly than usual release the button Then the router will restart with the factory default configuration Restart Restart the router forcefully Phone 1 2 Connecters for PSTN phones ISDN S0...

Страница 14: ...d Left LED Orange Blinking ISDN NT ISDN S0 intern mode is active and an ISDN phone adapter is not connected On A phone has been connected If not green LED will be off ISDN S0 1 Right LED Green Blinkin...

Страница 15: ...ns to blink rapidly than usual release the button Then the router will restart with the factory default configuration Restart Restart the router forcefully Phone 1 2 Connecters for PSTN phones ISDN S0...

Страница 16: ...N LED Left or Right will light up according to the speed 100 or 10 of the device that it connected 3 Connect the telephone sets with phone lines for using VoIP function For the model without phone por...

Страница 17: ...0 2 as ISDN phone in VoIP Phone Settings the orange LED will light on to indicate ISDN2 S0 mode is selected And by using ISDN phone adapters coming from the router package the user can connect several...

Страница 18: ...Vigor2930 Series User s Guide 12 This page is left blank...

Страница 19: ...assword for this device you have to access into the web browse with default password first 1 Make sure your computer connects to the router correctly Notice You may either simply set up your computer...

Страница 20: ...and choose Administrator Password 5 Enter the login password the default is blank on the field of Old Password Type a new one in the field of New Password and retype it on the field of Retype New Pass...

Страница 21: ...is entering login password After typing the password please click Next On the next page as shown below please select the WAN interface that you use Choose Auto negotiation as the physical type for you...

Страница 22: ...medium such as a single DSL line wireless device or cable modem All the users over the Ethernet can share a common connection PPPoE is used for most of DSL modem users All local users can share one PP...

Страница 23: ...Vigor2930 Series User s Guide 17 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown...

Страница 24: ...ick PPTP as the protocol Type in all the information that your ISP provides for this protocol Click Next for viewing summary of such connection Click Finish A page of Quick Start Wizard Setup OK will...

Страница 25: ...IP as the protocol Type in all the information that your ISP provides for this protocol After finishing the settings in this page click Next to see the following page Click Finish A page of Quick Star...

Страница 26: ...protocol Type in all the information that your ISP provides for this protocol After finishing the settings in this page click Next to see the following page Click Finish A page of Quick Start Wizard...

Страница 27: ...tus WAN status ADSL Information and other status related to this router within one page If you select PPPoE PPTP as the protocol you will find out a link of Dial PPPoE PPPoA or Drop PPPoE PPPoA in the...

Страница 28: ...splays the IP address of the WAN interface GW IP Displays the IP address of the default gateway TX Packets Displays the total transmitted packets at the WAN interface TX Rate Displays the speed of tra...

Страница 29: ...words in red mean that the WAN connection of that interface WAN1 WAN2 is not ready for accessing Internet 2 2 4 4 S Sa av vi in ng g C Co on nf fi ig gu ur ra at ti io on n Each time you click OK on t...

Страница 30: ...Vigor2930 Series User s Guide 24 This page is left blank...

Страница 31: ...55 255 From 192 168 0 0 to 192 168 255 255 W Wh ha at t a ar re e P Pu ub bl li ic c I IP P A Ad dd dr re es ss s a an nd d P Pr ri iv va at te e I IP P A Ad dd dr re es ss s As the router plays a rol...

Страница 32: ...communication service such as DSL Cable modem etc If any connection problem occurred on one of the ISP connections all the traffic will be guided and switched to the normal communication port for prop...

Страница 33: ...PPoE and PPTP access modes in the Details Page of WAN Internet Access In addition there are three selections for you to choose for different purposes WAN2 Fail It means the connection for WAN1 will be...

Страница 34: ...Internet WAN2 is the optional WAN interface for accessing into the Internet when WAN 1 is inactive for some reason Display Name It shows the name of the WAN1 WAN2 that entered in general setup Physica...

Страница 35: ...field Index 1 15 in Schedule Setup You can type in four sets of time schedule for your request All the schedules can be set previously in Application Schedule web page and you can use the number that...

Страница 36: ...your ISP before you want to use this function WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 8 pub...

Страница 37: ...backup feature you must create a dial backup profile first Please click Internet Access Setup Dialing to a Single ISP to enter the backup profile None Disable the backup function Packet Trigger The ba...

Страница 38: ...you are using Notice that this setting is available for WAN1 only Obtain an IP address automatically Click this button to obtain the IP address automatically if you want to use Dynamic IP mode Router...

Страница 39: ...DN function only Before utilizing the ISDN dial backup feature you must create a dial backup profile first Please click Internet Access Setup Dialing to a Single ISP to enter the backup profile None D...

Страница 40: ...enter the MAC address in the MAC Address field WAN IP Network Settings Obtain an IP address automatically Click this button to obtain the IP address automatically Specify an IP address Click this radi...

Страница 41: ...IP Start Displays the IP address for the start of the source IP Src IP End Displays the IP address for the end of the source IP Dest IP Start Displays the IP address for the start of the destination I...

Страница 42: ...lank it means that all the source IPs inside the LAN will be passed through the WAN interface Dest IP Start Type the destination IP start for the specified WAN interface Dest IP End Type the destinati...

Страница 43: ...does is to translate the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assign...

Страница 44: ...t ta at ti ic c R Ro ou ut te e When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static routes function rather than other method You may simpl...

Страница 45: ...lt 192 168 1 1 1st Subnet Mask Type in an address code that determines the size of the network Default 255 255 255 0 24 For IP Routing Usage Click Enable to invoke this function The default setting is...

Страница 46: ...RIP information of the 2nd subnet with neighboring routers DHCP Server Configuration DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your netwo...

Страница 47: ...cally apply default DNS Server IP address 194 109 6 66 to this field Secondary IPAddress You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Serv...

Страница 48: ...that user A and B locating in different subnet can talk to each other via the router Assuming the Internet access has been configured and the router works properly z use the Main Router to surf the I...

Страница 49: ...nd continuously exchange of IP routing information with different subnets 2 Click the LAN Static Route and click on the Index Number 1 Check the Enable box Please add a static route as shown below whi...

Страница 50: ...m based on the physical port You can also manage the in out rate of each port Go to LAN page and select VLAN The following page will appear Click Enable to invoke VLAN function To add or remove a VLAN...

Страница 51: ...is enabled all the assigned IP and MAC address binding together cannot be changed If you modified the binding IP or MAC address it might cause you not access into the Internet Click LAN and click Bin...

Страница 52: ...e mapped into a single public one Public IP address is usually assigned by your ISP for which you may get charged Private IP addresses are recognized only among internal hosts When the outgoing packet...

Страница 53: ...name are recognized by all users Since the server is actually located inside the LAN the network well protected by NAT of the router and identified by its private IP address port the goal of Port Redi...

Страница 54: ...isplay the ending IP of private IP automatically Service Name Enter the description of the specific network service Protocol Select the transport layer protocol TCP or UDP WAN IP Select the WAN IP use...

Страница 55: ...the local network http 192 168 1 13 80 Therefore you need to change the router s http port to any one other than the default port 80 to avoid conflict such as 8080 This can be set in the System Maint...

Страница 56: ...sed if you set up DMZ host We suggest you to add additional filter rules or a secondary firewall Click DMZ Host to open the following page If you previously have set up WAN Alias in Internet Access PP...

Страница 57: ...PC Click this button and then a window will automatically pop up as depicted below The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address...

Страница 58: ...relative number for the particular entry that you want to offer service in a local host You should click the appropriate index number to edit or clear the corresponding entry Comment Specify the name...

Страница 59: ...click Choose PC to select one Choose PC Click this button and subsequently a window having a list of private IP addresses of local hosts will automatically pop up Select the appropriate IP address of...

Страница 60: ...groups for using conveniently Later we can select that object group that can apply it For example all the IPs in the same department can be defined with an IP object a range of IP address 3 3 4 4 1 1...

Страница 61: ...he IP address Select Single Address if this object contains one IP address only Select Range Address if this object contains several IPs within a range Select Subnet Address if this object contains on...

Страница 62: ...Index column for settings in detail Name Type a name for this profile Maximum 15 characters are allowed Interface Choose WAN LAN or Any to display all the available IP objects with the specified inter...

Страница 63: ...detail Name Type a name for this profile Protocol Specify the protocol s which this profile will apply to Source Destination Port Source Port and the Destination Port column are available for TCP UDP...

Страница 64: ...are available for this service type the port number greater than this value is available the port number less than this value is available for this profile Below is an example of service type objects...

Страница 65: ...his box Selected Service Type Objects Click button to add the selected IP objects in this box 3 3 4 4 5 5 C CS SM M P Pr ro of fi il le e You can define policy profiles for different policy of IM Inst...

Страница 66: ...ems for IM VoIP P2P provided here for you to choose to disallow people using Simple check the box es and then click OK Later in the Firewall Edit Filter Set Edit Filter Rule page you can use Content M...

Страница 67: ...outer to build an unwanted outgoing connection The most basic security concept is to set user name and password while you install your router The administrator login will prevent unauthorized access t...

Страница 68: ...rnet connection Data Filter is applied to incoming and outgoing traffic It will check packets according to the filter rules If legal the packet will pass the router The following illustrations are flo...

Страница 69: ...ism to mitigate in a real time manner The below shows the attack types that DoS DDoS defense function can detect 1 SYN flood attack 2 UDP flood attack 3 ICMP flood attack 4 TCP Flag scan 5 Trace route...

Страница 70: ...ded into 40 easy to understand categories This database is updated as frequent as daily by a global team of Internet researchers The server will look up the URL and return a category to your router Yo...

Страница 71: ...rofile selected here For detailed information refer to the section of CSM profile setup Some on line games for example Half Life will use lots of fragmented UDP packets to transfer game data Instincti...

Страница 72: ...Filter Rule index button to enter the Filter Rule setup page Check to enable the Filter Rule Check this box to enable the filter rule Comments Enter filter set comments description Maximum length is...

Страница 73: ...e Group and Objects as the Address Type From the IP Group drop down list choose the one that you want to apply Or use the IP Object drop down list to choose the object that you want Service Type Click...

Страница 74: ...le only to packets that are too short to contain a complete header Filter Specifies the action to be taken when packets match the rule Block Immediately Packets matching the rule will be dropped immed...

Страница 75: ...two IP filters call filter or data filter You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner Each filter set is composed by 7 filter rules which can...

Страница 76: ...econds respectively Enable UDP flood defense Check the box to activate the UDP flood defense function Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value t...

Страница 77: ...tivate the Block fraggle Attack function Any broadcast UDP packets received from the Internet is blocked Activating the DoS DDoS defense functionality might block some legal packets For example when y...

Страница 78: ...at kind of attacks is detected 3 3 5 5 5 5 U UR RL L C Co on nt te en nt t F Fi il lt te er r Based on the list of user defined keywords the URL Content Filter facility in Vigor router inspects the UR...

Страница 79: ...ple keywords within a frame are separated by space comma or semicolon In addition the maximal length of each frame is 32 character long After specifying keywords the Vigor router will decline the conn...

Страница 80: ...xe com scr pif bas bat inf reg Cookie Check the box to filter out the cookie transmission from inside to outside world to protect the local user s privacy Proxy Check the box to reject any proxy trans...

Страница 81: ...e 3 3 6 6 B Ba an nd dw wi id dt th h M Ma an na ag ge em me en nt t Below shows the menu items for Bandwidth Management 3 3 6 6 1 1 S Se es ss si io on ns s L Li im mi it t A PC with private IP addre...

Страница 82: ...pecific limitations that you set on this web page Start IP Defines the start IP address for limit session End IP Defines the end IP address for limit session Maximum Sessions Defines the available ses...

Страница 83: ...bandwidth Default TX limit Define the default speed of the upstream for each computer in LAN Default RX limit Define the default speed of the downstream for each computer in LAN Limitation List Displ...

Страница 84: ...or crucial applications and marking them for high priority service level enforcement throughout the network z Scheduling Based on classification of service level to assign packets to queues and associ...

Страница 85: ...etup link to access into next page for the general setup of WAN 1 2 interface As to class rule simply click the Edit link to access into next for configuration You can configure general setup for the...

Страница 86: ...t 256kbps for this box The default value is 10000kbps Reserved Bandwidth Ratio It is reserved for the group index in the form of ratio of reserved bandwidth to upstream speed and reserved bandwidth to...

Страница 87: ...e e f fo or r Q Qo oS S The first three Class 1 to Class 3 class rules can be adjusted for your necessity To add edit or delete the class rule please click the Edit link of that one After you click th...

Страница 88: ...net Address you have to fill in Start IP address and Subnet Mask DiffServ CodePoint All the packets of data will be divided with different levels and will be processed according to the level type by t...

Страница 89: ...e f fo or r C Cl la as ss s R Ru ul le e To add a new service type edit or delete an existed service type please click the Edit link under Service Type field After you click the Edit link you will se...

Страница 90: ...Type If you select Range you have to type in the starting port number and the end porting number on the boxes below Port Number Type in the starting port number and the end porting number here if you...

Страница 91: ...ee DDNS service to the DDNS service providers The router provides up to three accounts from three different DDNS service providers Basically Vigor routers are compatible with the DDNS services supplie...

Страница 92: ...ice provider for the DDNS account Service Type Select a service type Dynamic Custom Static If you choose Custom you can modify the domain that is choosen in the Domain Name field Domain Name Type in a...

Страница 93: ...tton to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is another way to set up time You can inquiry an NTP server a time...

Страница 94: ...e applied just once Weekdays Specify which days in one week should perform the schedule Example Suppose you want to control the PPPoE Internet access connection to be always on Force On from 9 00 to 1...

Страница 95: ...anagement Enable Check to enable RADIUS client feature Server IP Address Enter the IP address of RADIUS server Destination Port The UDP port number that the RADIUS server is using The default value is...

Страница 96: ...essenger to allow full use of the voice video and messaging features Enable UPNP Service Accordingly you can enable either the Connection Control Service or Connection Status Service After setting Ena...

Страница 97: ...you need to ensure that you have applied the latest service packs and patches Non privileged users can control some router functions including removing and adding port mappings The UPnP function dyna...

Страница 98: ...y IP Address you have to choose the correct IP address IP Address The IP addresses that have been configured in Firewall Bind IP to MAC will be shown in this drop down list Choose the IP address from...

Страница 99: ...is feature can be applied for ISDN remote dial in or ISDN LAN to LAN connection in i series models 3 3 8 8 1 1 R Re em mo ot te e A Ac cc ce es ss s C Co on nt tr ro ol l Enable the necessary VPN serv...

Страница 100: ...e 40 bit to perform encryption prior to using 128 bit for encryption In other words if 128 bit MPPE encryption method is not available then 40 bit encryption scheme will be applied to encrypt the data...

Страница 101: ...psulate the data payload only It can just apply to local packet e g L2TP over IPSec The Tunnel mode will not only add the AH ESP payload but also use a new IP header Tunneled IP header to encapsulate...

Страница 102: ...ntication in either LAN to LAN connection or Remote User Dial In connection here you may edit a table of peer certificate for selection As shown below the router provides 100 entries of digital certif...

Страница 103: ...to accept the peer with matching value The field can be IP Address Domain or E mail Address The box under the Type will appear according to the type you select and ask you to fill in corresponding set...

Страница 104: ...rver through the built in RADIUS client function The following figure shows the summary table Set to Factory Default Click to clear all indexes Index Click the number below Index to access into the se...

Страница 105: ...nnel Allow the remote dial in user to make an IPSec VPN connection through Internet L2TP Allow the remote dial in user to make a L2TP VPN connection through the Internet You can select to use L2TP alo...

Страница 106: ...e Check the Medium DES 3DES or AES box as the security method Medium Authentication Header AH means data will be authenticated but not be encrypted By default this option is invoked You can uncheck it...

Страница 107: ...N tunnels simultaneously The following figure shows the summary table Set to Factory Default Click to clear all indexes Name Indicate the name of the LAN to LAN profile The symbol represents that the...

Страница 108: ...er will use another WAN interface instead WAN1 Only While connecting the router will use WAN1 as the only channel for VPN connection WAN2 First While connecting the router will use WAN2 as the first c...

Страница 109: ...etection ISDN Build ISDN LAN to LAN connection to remote network You should set up Link Type and identity like User Name and Password for the authentication of remote server You can further set up Cal...

Страница 110: ...hentication Use DES encryption algorithm and not apply any authentication scheme DES with Authentication Use DES encryption algorithm and apply MD5 or SHA 1 authentication algorithm 3DES without Authe...

Страница 111: ...e default value is 3600 seconds You may specify a value in between 600 and 86400 seconds Perfect Forward Secret PFS The IKE Phase 1 key will be reused to avoid the computation complexity in phase 2 Th...

Страница 112: ...You should set the User Name and Password of remote dial in user below IPSec Tunnel Allow the remote dial in user to trigger an IPSec VPN connection through Internet L2TP Allow the remote dial in user...

Страница 113: ...hen you select IPSec tunnel either with or without specify the IP address of the remote node Pre Shared Key Check the box of Pre Shared Key to invoke this function and type in the required characters...

Страница 114: ...dress here Do not change the default value if you do not select ISDN PPTP or L2TP Remote Network IP Remote Network Mask Add a static route to direct all traffic destined to this Remote Network IP Addr...

Страница 115: ...ind the summary table of all VPN connections You may disconnect any VPN connection by clicking Drop button You may also aggressively Dial out by using Dial out Tool and clicking Dial button Dial Click...

Страница 116: ...Any entity wants to utilize digital certificates should first request a certificate issued by a CA server It should also retrieve certificates of other trusted CA servers so it can authenticate the p...

Страница 117: ...Import Click this button to import a saved file as the certification information Refresh Click this button to refresh the information listed below View Click this button to view the detailed settings...

Страница 118: ...ck IMPORT to open the following window Use Browse to find out the saved text file Then click Import The one you imported will be listed on the Trusted CA Certificate window Then click Import to use th...

Страница 119: ...mobility in VoIP structure Every one who wants to talk using his her SIP Uniform Resource Identifier SIP Address The standard format of SIP URI is sip user password host port Some fields may be option...

Страница 120: ...u have to know your friend s IP Address The Vigor VoIP Routers will build connection between each other Please refer to the section 4 5 2 Our Vigor V models firstly apply efficient codecs designed to...

Страница 121: ...total 60 index entries in the phonebook for you to store all your friends and family members SIP addresses Loop through and Backup Phone Number will be displayed if you are using Vigor 2930V for setti...

Страница 122: ...ess SIP URL Enter your friend s SIP Address Loop through For the model of Vigor 2930VSn the selection should be as the following Backup Phone Number When the VoIP phone is obstructs or the Internet br...

Страница 123: ...be deleted by the prefix number for calling out through the specific VoIP interface Take the above picture Prefix Table Setup web page as an example the OP number of 886 will be deleted completely fo...

Страница 124: ...ble Setup web page as an example if the dial number is between 7 and 9 that number can apply the prefix number settings here Max Len Set the maximum length of the dial number for applying the prefix n...

Страница 125: ...h mechanism ISDN means only ISDN phone call will be blocked with such mechanism Index 1 15 in Schedule Enter the index of schedule profiles to control the call barring according to the preconfigured s...

Страница 126: ...gured schedules For Block IP Address this function can block incoming calls coming from IP address Such controlling also can be done based on preconfigured schedules R Re eg gi io on na al l This page...

Страница 127: ...cified place Call Forward Deact Dial the number typed in this field to release the call forward function Call Forward Busy Act Dial the number typed in this field to forward all the incoming calls to...

Страница 128: ...the number typed in this filed to block all the incoming calls from IP address Block IP Calls Deact Dial the number typed in this field to release this function Block Last Calls Act Dial the number ty...

Страница 129: ...Vigor2930 Series User s Guide 123...

Страница 130: ...ort for specified SIP account By the way ISDN S0 can be used by mapping with MSN numbers STUN Server Type in the IP address or domain of the STUN server External IP Type in the gateway IP address SIP...

Страница 131: ...r used for SIP Authorization with SIP Registrar If this setting value is the same as Account Name it is not necessary for you to check the box and set any value in this field Password The password pro...

Страница 132: ...S0 and ISDN2 TE allow you to set common settings for ISDN network connection ISDN2 port is configurable Please use the drop down list to choose ISDN2 TE for Internet connection or choose ISDN2 S0 ISD...

Страница 133: ...e router not misleading due to IP lost for example sending data from the public IP of remote router to the private IP of local router you can check this box to solve this problem Dynamic RTP Port Star...

Страница 134: ...ut any reason Busy means the incoming calls will be forwarded into SIP URL only when the local system is busy No answer means if the incoming calls do not receive any response they will be forwarded t...

Страница 135: ...dec used for each call will be negotiated with the peer party before each session and so may not be your default choice The default codec is G 729A B it occupies little bandwidth while maintaining goo...

Страница 136: ...press the Advanced button to configure tone settings volume gain MISC and DTMF mode Advanced setting is provided for fitting the telecommunication custom for the local area of the router installed Wro...

Страница 137: ...use the default setting DTMF DTMF Mode There are four DTMF modes for you to choose InBand Choose this one then the Vigor will send the DTMF tone as audio directly when you press the keypad on the phon...

Страница 138: ...ge Hotline Check the box to enable it Type in the SIP URL in the field for dialing automatically when you pick up the phone set Session Timer Check the box to enable the function In the limited time t...

Страница 139: ...ur VoIP calls The codec used for each call will be negotiated with the peer party before each session and so may not be your default choice The default codec is G 729A B it occupies little bandwidth w...

Страница 140: ...addition you can press the Advanced button to configure tone settings volume gain MISC and DTMF mode Advanced setting is provided for fitting the telecommunication custom for the local area of the ro...

Страница 141: ...to eight with digits from zero to nine Check for VoIP to ISDN Calls Set a pin code for the router to authenticate which one is allowed to dial VoIP to ISDN call The figure that you can type in this f...

Страница 142: ...status for the port of Phone1 Phone2 ISDN1 and ISDN2 The ISDN1 2 appears only when the router is equipped with ISDN interface ISDN1 means B1 channel for the physical ISDN port ISDN2 means B2 channel f...

Страница 143: ...r of received voice packets during this connection session Rx Losts Total number of lost packets during this connection session Rx Jitter The jitter of received voice packets In Calls The accumulating...

Страница 144: ...I Terminal Endpoint Identifier Point to Multipoint Configure ISDN port to use Dynamic TEI Own Number Enter your ISDN number that you got from ISDN service provider To have such number you have offer y...

Страница 145: ...SDN phone with one of these 10 different internal MSN numbers Transparent means MSN on TE port can connect to NT port without limitation on the number among 30 39 Any means all the phones under ISDN1...

Страница 146: ...igured with internal MSN number 5972729 ringing When remote user calls you by dialing 5972720 the router will make all of ISDN phones under ISDN1 S0 port ringing When remote user calls you by dialing...

Страница 147: ...able disables the ISDN dial out function Dialup 64Kbps allows you to use one ISDN B channel for Internet access Dialup 128Kbps allows you to use both ISDN B channels for Internet access Dialup BOD for...

Страница 148: ...ocol during the PPP negotiation PPP MP Setup Link Type There are three link types provided here for different purpose Link Disable disables the ISDN dial out function Dialup 128Kbps allows you to use...

Страница 149: ...ial Number Enter the ISDN access number provided by the ISP Username Enter the username provided by your ISP Password Enter the password provided by your ISP IP Address Assignment Method IPCP for seco...

Страница 150: ...required for WAN connection and some internal network resource has to be exposed for remote users such as FTP WWW Call Control Setup Dial Retry It specifies the dial retry counts per triggered packet...

Страница 151: ...our IDSN link type is Dial On Demand the connection will be initiated only when needed Bandwidth On Demand BOD Setup Bandwidth On Demand is for Multiple Link PPP ML PPP or MP The parameters are only...

Страница 152: ...compliant with the standard IEEE 802 11n protocol To boost its performance further the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can f...

Страница 153: ...connection You should select the appropriate security mechanism according to your needs No matter which security suite you select they all will enhance the over the air data protection and or privacy...

Страница 154: ...t you could configure the SSID and the wireless channel Please refer to the following figure for more information Enable Wireless LAN Check the box to enable wireless function Mode At present the rout...

Страница 155: ...gor wireless router while site surveying The system allows you to set four sets of SSID for different usage In default the first set of SSID will be enabled You can hide it for your necessity SSID Mea...

Страница 156: ...too Note Vigor N61 wireless adapter supports this function Therefore you can use and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless uti...

Страница 157: ...and the encryption key should be entered in PSK and WEP WEP 802 1x Accept WEP clients with 802 1x authentication Since the key will be auto negotiated during authentication the field of key setting be...

Страница 158: ...key either 13 ASCII characters such as ABCDEFGHIJKLM or 26 hexadecimal digits leading by 0x such as 0x4142434445464748494A4B4C4D All wireless devices must support the same WEP encryption bit size and...

Страница 159: ...to access AP Enable Mac Access Filter Select to enable the MAC Address filter for wireless LAN identified with SSID 1 to 4 respectively All the clients expressed by MAC addresses listed in the box ca...

Страница 160: ...ist 3 3 1 12 2 5 5 W WD DS S WDS means Wireless Distribution System It is a protocol for connecting two access points AP wirelessly Usually it can be used for the following application y Provide bridg...

Страница 161: ...rom a WDS link will only be forwarded to local wired or wireless hosts In other words only Repeater mode can do WDS to WDS packet forwarding In the following examples hosts connected to Bridge 1 or 3...

Страница 162: ...ter mode is for the second one Security There are three types for security Disable WEP and Pre shared key The setting you choose here will make the following WEP or Pre shared key field valid or not C...

Страница 163: ...o check Enable box in the front of the MAC address after typing Access Point Function Click Enable to make this router serving as an access point click Disable to cancel this function Status It allows...

Страница 164: ...wireless clients now along with its status code There is a code summary below for explanation For convenient Access Control you can select a WLAN station and click Add to Access Control below Refresh...

Страница 165: ...n nt te en na an nc ce e For the system setup there are several items that you have to know the way of configuration Status Administrator Password Configuration Backup Syslog Time setup Reboot System...

Страница 166: ...e LAN interface MAC Address Display the MAC address of the WAN Interface IP Address Display the IP address of the WAN interface Default Gateway Display the assigned IP address of the default gateway D...

Страница 167: ...n you click OK the login window will appear Please use the new password to access into the web configurator again 3 3 1 13 3 3 3 C Co on nf fi ig gu ur ra at ti io on n B Ba ac ck ku up p B Ba ac ck k...

Страница 168: ...windows but the backup function is still available Note Backup for Certification must be done independently The Configuration Backup does not include information of Certificate R Re es st to or re e C...

Страница 169: ...eturn Path Assign a path for receiving the mail from outside Authentication Check this box to activate this function while using e mail application User Name Type the user name for authentication Pass...

Страница 170: ...use the browser time from the remote administrator PC host as router s system time Use Internet Time Select to inquire time information from Time Server on the Internet using assigned protocol Time P...

Страница 171: ...e Internet Check the checkbox to reject all PING packets from the Internet For security issue this function is enabled by default Access List You could specify that the system administrator can only l...

Страница 172: ...st te em m The Web Configurator may be used to restart your router Click Reboot System from System Maintenance to open the following page If you want to reboot the router using the current configurat...

Страница 173: ...an example Note that this example is running over Windows OS Operating System Download the newest firmware from DrayTek s web site or FTP site The DrayTek web site is www draytek com or local DrayTek...

Страница 174: ...agnostics 3 3 1 14 4 1 1 D Di ia al l o ou ut t T Tr ri ig gg ge er r Click Diagnostics and click Dial out Trigger to open the web page The internet connection e g ISDN PPPoE PPPoA etc is triggered by...

Страница 175: ...reload the page 3 3 1 14 4 3 3 A AR RP P C Ca ac ch he e T Ta ab bl le e Click Diagnostics and click ARP Cache Table to view the content of the ARP Address Resolution Protocol cache held in the router...

Страница 176: ...P Address It displays the IP address assigned by this router for specified PC MAC Address It displays the MAC address for the specified PC that DHCP assigned IP address for it Leased Time It displays...

Страница 177: ...nitored and refreshes the data in an interval of several seconds The IP address listed here is configured in Bandwidth Management You have to enable IP bandwidth limit and IP session limit before invo...

Страница 178: ...ithin 5 minutes Unblock the device with the IP address will be blocked in five minutes The remaining time will be shown on the session column 3 3 1 14 4 7 7 T Tr ra af ff fi ic c G Gr ra ap ph h Click...

Страница 179: ...b page Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically Ping to Use the drop down list t...

Страница 180: ...address of the host in the box and click Run The result of route trace will be shown on the screen Trace through Use the drop down list to choose the WAN interface that you want to ping through or ch...

Страница 181: ...rter According to the network structure as shown in the below illustration you may follow the steps to create a LAN to LAN profile These two networks LANs should NOT have the same network address Sett...

Страница 182: ...the parties may start the VPN connection 5 Set Dial Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial Out method If an IPSec based service is selected you...

Страница 183: ...connection If an IPSec based service is selected you may further specify the remote peer IP Address IKE Authentication Method and IPSec Security Method for this Dial In connection Otherwise it will ap...

Страница 184: ...s in Router B in the remote office 1 Go to VPN and Remote Access and select Remote Access Control to enable the necessary VPN service and click OK 2 Then for using PPP based services such as PPTP L2TP...

Страница 185: ...oth of VPN connections because any one of the parties may start the VPN connection 5 Set Dial Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial Out method...

Страница 186: ...ression for this Dial Out connection 6 Set Dial In settings to as shown below to allow Router A dial in to build VPN connection If an IPSec based service is selected you may further specify the remote...

Страница 187: ...rther specify the remote peer IP Address Username Password and VJ Compression for this Dial In connection 7 At last set the remote network IP subnet in TCP IP Network Settings so that Router B can dir...

Страница 188: ...as shown in the below illustration you may follow the steps to create a Remote User Profile and install Smart VPN Client on the remote host Settings in VPN Router in the enterprise office 1 Go to VPN...

Страница 189: ...tings to as shown below to allow the remote user dial in to build VPN connection If an IPSec based service is selected you may further specify the remote peer IP Address IKE Authentication Method and...

Страница 190: ...Dial up Networking to create the PPTP tunnel to Vigor router For Win2000 XP please use Network and Dial up connections or Smart VPN Client complimentary software to help you create PPTP L2TP and L2TP...

Страница 191: ...uthentication method If the Pre Shared Key is selected it should be consistent with the one set in VPN router If a PPP based service is selected you should further specify the remote VPN server IP add...

Страница 192: ...tt ti in ng g E Ex xa am mp pl le e Assume a teleworker sometimes works at home and takes care of children When working time he would use Vigor router at home to connect to the server in the headquart...

Страница 193: ...clicking Edit link Type the name E mail for Class 1 4 For this index the user will set reserved bandwidth e g 25 for E mail using protocol POP3 and SMTP 5 Return to previous page Enter the Name of In...

Страница 194: ...affic of VoIP influent other application Click OK 8 If the worker has connected to the headquarter using host to host VPN tunnel Please refer to Chapter 3 VPN for detail instruction he may set up an i...

Страница 195: ...Cr re ea at te ed d b by y U Us si in ng g N NA AT T An example of default setting and the corresponding deployment are shown below The default Vigor router private IP address Subnet Mask is 192 168...

Страница 196: ...90 To use another DHCP server in the network rather than the built in one of Vigor Router you have to change the settings as show below You can just set the settings wrapped inside the red rectangles...

Страница 197: ...rg Proxy draytel org Act as outbound proxy unhecked Display Name John Account Number Name 1234 Authentication ID unchecked Password Expiry Time use default value CODEC RTP DTMF Use default value John...

Страница 198: ...se default value CODEC RTP DTMF Use default value John calls David He picks up the phone and dials 1111 DialPlan Phone Number for David Or He picks up the phone and dials 4321 David s Account Name Set...

Страница 199: ...ain Realm blank Proxy blank Act as outbound proxy unchecked Display Name Arnor Account Name 1234 Authentication ID unchecked Password blank Expiry Time use default value CODEC RTP DTMF Use default val...

Страница 200: ...click Install Now under Syslog description to install the corresponding program 4 The file RTSxxx exe will be asked to copy onto your computer Remember the place of storing the execution file 5 Go to...

Страница 201: ...Programs and choose Router Tools XXX Firmware Upgrade Utility 12 Type in your router IP usually 192 168 1 1 13 Click the button to the right side of Firmware file typing box Locate the files that you...

Страница 202: ...ide 196 14 Click Send 15 Now the firmware update is finished 4 4 7 7 R Re eq qu ue es st t a a c ce er rt ti if fi ic ca at te e f fr ro om m a a C CA A s se er rv ve er r o on n W Wi in nd do ow ws s...

Страница 203: ...e Management and choose Local Certificate 2 You can click GENERATE button to start to edit a certificate request Enter the information in the certificate request 3 Copy and save the X509 Local Certifi...

Страница 204: ...ake a Windows 2000 CA server for example Select Request a Certificate Select Advanced request Select Submit a certificate request a base64 encoded PKCS 10 file or a renewal request using a base64 enco...

Страница 205: ...te Now you should get a certificate cer file and save it 5 Back to Vigor router go to Local Certificate Click IMPORT button and browse the file to import the certificate cer file into Vigor router Whe...

Страница 206: ...ti if fi ic ca at te e a an nd d S Se et t a as s T Tr ru us st te ed d o on n W Wi in nd do ow ws s C CA A S Se er rv ve er r 1 Use web browser connecting to the CA server that you would like to retr...

Страница 207: ...d CA Certificate Click IMPORT button and browse the file to import the certificate cer file into Vigor router When finished click refresh and you will find the below illustration 4 You may review the...

Страница 208: ...Vigor2930 Series User s Guide 202 This page is left blank...

Страница 209: ...cking to factory default setting if necessary If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 5 5 1 1 C Ch he ec c...

Страница 210: ...er trying the above section if the link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s The example is based on Wi...

Страница 211: ...atically and Obtain DNS server address automatically F Fo or r M Ma ac cO Os s 1 Double click on the current used MacOs on the desktop 2 Open the Application folder and get into Network 3 On the Netwo...

Страница 212: ...router correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP The DOS command dialog will app...

Страница 213: ...t t Click WAN Internet Access and then check whether the ISP settings are set correctly Click Details Page of WAN1 WAN2 to review the settings that you configured previously F Fo or r P PP PP Po oE E...

Страница 214: ...de 208 F Fo or r S St ta at ti ic c D Dy yn na am mi ic c I IP P U Us se er rs s 1 Check if the Enable option is selected 2 Check if IP address Subnet Mask and Gateway are entered with correct values...

Страница 215: ...mproved by returning to the default settings Try to reset the router by software or hardware Warning After pressing factory default setting you will loose all settings you did before Make sure you hav...

Страница 216: ...Then the router will restart with the default configuration After restore the factory default setting you can configure the settings for the router again to fit your personal request 5 5 6 6 C Co on n...

Результаты поиска

Содержание Vigor 2930

Отзывы:

Похожие инструкции для Vigor 2930

Бренды по названию

Популярные бренды

Draytek Vigor 2930, Руководство пользователя

Результаты поиска

Содержание Vigor 2930

Отзывы:

Похожие инструкции для Vigor 2930

Бренды по названию

Популярные бренды