manualshive.com logo in svg

Draytek Vigor2133 Vac, Руководство пользователя

Поделиться
Скачать
Draytek Vigor2133 Vac Скачать руководство пользователя страница 6

 

Vigor2133 Series User’s Guide 

vi 

II-6 Routing..................................................................................................................................... 150

 

Web User Interface .................................................................................................................. 151

 

II-6-1 Static Route .................................................................................................................... 151

 

II-6-2 Route Policy ................................................................................................................... 155

 

II-6-2-1 General Setup .......................................................................... 155

 

II-6-2-2 Diagnose ................................................................................. 159

 

Application Notes ..................................................................................................................... 162

 

A-1 How to set up Address Mapping with Route Policy? .................................. 162

 

Part III Wireless LAN......................................................................................................165

 

III-1 Wireless LAN (2.4 GHz/5 GHz) .............................................................................................. 166

 

Web User Interface .................................................................................................................. 170

 

III-1-1 Wireless Wizard............................................................................................................. 170

 

III-1-2 General Setup ............................................................................................................... 174

 

III-1-3 Security.......................................................................................................................... 176

 

III-1-4 Access Control .............................................................................................................. 178

 

III-1-5 WPS............................................................................................................................... 179

 

III-1-6 WDS .............................................................................................................................. 181

 

III-1-7 Advanced Setting .......................................................................................................... 184

 

III-1-8 Station Control............................................................................................................... 187

 

III-1-9 AP Discovery ................................................................................................................. 187

 

III-1-10 Bandwidth Management.............................................................................................. 189

 

III-1-11 Airtime Fairness........................................................................................................... 190

 

III-1-12 Band Steering.............................................................................................................. 192

 

III-1-13 Roaming ...................................................................................................................... 196

 

III-1-14 Station List................................................................................................................... 197

 

Part IV VPN .....................................................................................................................199

 

IV-1 VPN and Remote Access ....................................................................................................... 200

 

Web User Interface .................................................................................................................. 201

 

IV-1-1 VPN Client Wizard ........................................................................................................ 201

 

IV-1-2 VPN Server Wizard ....................................................................................................... 207

 

IV-1-3 Remote Access Control ................................................................................................ 211

 

IV-1-4 PPP General Setup....................................................................................................... 212

 

IV-1-5 IPsec General Setup ..................................................................................................... 214

 

IV-1-6 IPsec Peer Identity ........................................................................................................ 215

 

IV-1-7 Remote Dial-in User...................................................................................................... 217

 

IV-1-8 LAN to LAN ................................................................................................................... 220

 

IV-1-9 Connection Management .............................................................................................. 230

 

Application Notes ..................................................................................................................... 231

 

A-1 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec 
Tunnel (Main Mode) ............................................................................. 231

 

IV-2 SSL VPN ................................................................................................................................. 236

 

Содержание Vigor2133 Vac

Страница 1: ......

Страница 2: ...Vigor2133 Series User s Guide ii Vigor2133 Series Gigabit Broadband Router User s Guide Version 1 2 Firmware Version V3 8 8 For future update please visit DrayTek web site Date April 24 2018...

Страница 3: ...the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep your purchas...

Страница 4: ...tion 21 I 5 8 2 Virtual WAN 23 I 6 Quick Start Wizard 24 I 7 Service Activation Wizard 33 I 8 Registering Vigor Router 35 Part II Connectivity 37 II 1 WAN 38 Web User Interface 39 II 1 1 General Setup...

Страница 5: ...2 1x 100 II 3 Hardware Acceleration 101 II 4 NAT 103 Web User Interface 104 II 4 1 Port Redirection 104 II 4 2 DMZ Host 108 II 4 3 Open Ports 111 II 4 4 Port Triggering 114 II 4 5 ALG 116 II 5 Applica...

Страница 6: ...Setting 184 III 1 8 Station Control 187 III 1 9 AP Discovery 187 III 1 10 Bandwidth Management 189 III 1 11 Airtime Fairness 190 III 1 12 Band Steering 192 III 1 13 Roaming 196 III 1 14 Station List...

Страница 7: ...rnet 277 V 2 Central Security Management CSM 281 Web User Interface 282 V 2 1 APP Enforcement Profile 282 V 2 2 URL Content Filter Profile 286 V 2 3 Web Content Filter Profile 290 V 2 4 DNS Filter Pro...

Страница 8: ...2 Steps for Configuring a Web Portal Profile 372 Application Notes 384 A 1 How to create Facebook APP for Web Portal Authentication 384 A 2 How to create Google APP for Web Portal Authentication 390 V...

Страница 9: ...s from USB storage device connecting to Vigor router 448 Part VIII Troubleshooting 451 VIII 1 Diagnostics 452 Web User Interface 453 VIII 1 1 Dial out Triggering 453 VIII 1 2 Routing Table 454 VIII 1...

Страница 10: ...s Guide x VIII 6 Backing to Factory Default Setting If Necessary 478 VIII 7 Contacting DrayTek 479 Appendix I VLAN Applications on Vigor Router 480 Part IX Telnet Commands 489 Accessing Telnet of Vig...

Страница 11: ...P Pa ar rt t I I I In ns st ta al ll la at ti io on n This part will introduce Vigor router and guide to install the device in hardware and software...

Страница 12: ......

Страница 13: ...ore efficiency than before By the way DoS DDoS prevention and URL Web content filter strengthen the security outside and control inside Object based firewall is flexible and allows your network be saf...

Страница 14: ...d to this port is on hook Blinking A phone call comes On A USB device is connected and active USB Blinking The data is transmitting On Wireless access point is ready Blinking Ethernet packets are tran...

Страница 15: ...ireless function is ready the green LED will be on WLAN Off Press the button and release it within 2 seconds to turn off the WLAN function When the wireless function is not ready the LED will be off W...

Страница 16: ...odem DSL Modem Media Converter to any WAN port of router with Ethernet cable RJ 45 2 Connect one port of 4 port switch to your computer with a RJ 45 cable This device allows you to connect 4 PCs direc...

Страница 17: ...ovided on the Vigor2133 packaging box to enable you to space the screws correctly on the wall 2 Place the template on the wall and drill the holes according to the recommended instruction 3 Fit screws...

Страница 18: ...Cs connected this router can print documents via the router The example provided here is made based on Windows 7 For other Windows system please visit www DrayTek com Before using it please follow the...

Страница 19: ...ser s Guide 7 4 A dialog will appear Click Add a local printer and click Next 5 In this dialog choose Create a new port In the field of Type of port use the drop down list to select Standard TCP IP Po...

Страница 20: ...User s Guide 8 6 In the following dialog type 192 168 1 1 router s LAN IP in the field of Hostname or IP Address and type 192 168 1 1 as the Port name Then click Next 7 Click Standard and choose Gene...

Страница 21: ...your system will ask you to choose right name of the printer that you installed onto the router Such step can make correct driver loaded onto your PC When you finish the selection click Next 9 Type a...

Страница 22: ...Vigor2133 Series User s Guide 10 10 Choose Do not share this printer and click Next 11 Then in the following dialog click Finish...

Страница 23: ...uide 11 12 The new printer has been added and displayed under Printers and Faxes Click the new printer icon and click Printer server properties 13 Edit the property of the new printer you have added b...

Страница 24: ...or choosing the correct protocol and LPR name The printer can be used for printing now Most of the printers with different manufacturers are compatible with vigor router Info Some printers with the fa...

Страница 25: ...he same subnet as the default IP address of Vigor router 192 168 1 1 For the detailed information please refer to the later section Trouble Shooting of the guide 2 Open a web browser on your PC and ty...

Страница 26: ...page will be different slightly in accordance with the type of the router you have 5 The web page can be logged out according to the chosen condition The default setting is Auto Logout which means the...

Страница 27: ...nto the web user interface with admin mode 3 Go to System Maintenance page and choose Administrator Password 4 Enter the login password the default is admin on the field of Old Password Type New Passw...

Страница 28: ...status including System Information IPv4 Internet Access IPv6 Internet Access Interface physical connection Security and Quick Access Click Dashboard from the main menu on the left side of the main pa...

Страница 29: ...on is not working LED left side Green It means the router or the function is working Black It means no USB device is connected USB Green It means a USB device is connected Black It means such port is...

Страница 30: ...der Quick Access The function links of System Status Dynamic DDNS TR 069 IM P2P Block Schedule Syslog Mail Alert RADIUS Firewall Object Setting and Data Flow Monitor are displayed here Move your mouse...

Страница 31: ...indicates that the traffic would be transmitted through LAN port s and then the WAN port The purpose is to perform the traffic monitor of the host s I I 5 5 4 4 G GU UI I M Ma ap p All the functions t...

Страница 32: ...on the web user interface Click the Web Console icon on the top of the main screen to open the following screen I I 5 5 6 6 C Co on nf fi ig g B Ba ac ck ku up p There is one way to store current used...

Страница 33: ...in ne e S St ta at tu us s I I 5 5 8 8 1 1 P Ph hy ys si ic ca al l C Co on nn ne ec ct ti io on n Such page displays the physical connection status such as LAN connection status WAN connection statu...

Страница 34: ...tatus Enable Yes in red means such interface is available but not enabled Yes in green means such interface is enabled Line Displays the physical connection VDSL ADSL Ethernet or USB of this interface...

Страница 35: ...nterface is enabled No in red means such interface is not available Mode Displays the type of WAN connection e g TSPC Up Time Displays the total uptime of the interface IP Displays the IP address of t...

Страница 36: ...o Wizards Quick Start Wizard The first screen of Quick Start Wizard is entering login password After typing the password please click Next On the next page as shown below please select the appropriate...

Страница 37: ...tional Enter the description of the specific network service Username Assign a specific valid user name provided by the ISP Note The maximum length of the user name you can set is 63 characters Passwo...

Страница 38: ...the Username Password provided by your ISP Click Next for viewing summary of such connection 3 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol w...

Страница 39: ...scription Username Assign a specific valid user name provided by the ISP Note The maximum length of the user name you can set is 63 characters Password Assign a valid password provided by the ISP Note...

Страница 40: ...to previous setting page Next Click it to get into the next setting page Cancel Click it to give up the quick start wizard 3 Please type in the IP address mask gateway information originally provided...

Страница 41: ...ginally provided by your ISP Available settings are explained as follows Item Description WAN IP Type the IP address Subnet Mask Type the subnet mask Gateway Type the IP address of gateway Primary DNS...

Страница 42: ...nformation originally provided by your ISP Then click Next for next step 4 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown 5 Now yo...

Страница 43: ...Note The maximum length of the host name you can set is 39 characters MAC Some Cable service providers specify a specific MAC address for access authentication In such cases you need to enter the MAC...

Страница 44: ...Vigor2133 Series User s Guide 32 4 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown 5 Now you can enjoy surfing on the Internet...

Страница 45: ...ogging into the web user interface Service Activation Wizard is a tool which allows you to activate services without accessing into the server MyVigor located on http myvigor draytek com Info Such fun...

Страница 46: ...utlets DT APPE developed by DrayTek offers a mechanism to upgrade APPE signature automatically 3 Setting confirmation page will be displayed as follows please click Activate Info The service will be a...

Страница 47: ...the router registration 1 Please login the web configuration interface of Vigor router by typing admin admin as User Name Password 2 Click Support Area Production Registration from the home page 3 A L...

Страница 48: ...me for the router and choose the right registration date from the popup calendar it appears when you click on the box of Registration Date Click Add 5 When the following page appears your router infor...

Страница 49: ...oup of subnets regulated and ruled by router The design of network structure is related to what type of public IP addresses coming from your ISP When the data flow passing through the Network Address...

Страница 50: ...IP address assigned by the built in DHCP server of the Vigor router The router itself will also use the default private IP address 192 168 1 1 to communicate with the local hosts Meanwhile Vigor rout...

Страница 51: ...Available settings are explained as follows Item Description Index Click the WAN interface link under Index to access into the WAN configuration page Enable V means such WAN interface is enabled and...

Страница 52: ...Type the description for such WAN interface Physical Mode Display the physical mode of such WAN interface Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determ...

Страница 53: ...Disable Disable the function of VLAN with tag Tag value Type the value as the VLAN ID number The range is from 0 to 4095 Priority Type the packet priority number for such VLAN The range is from 0 to...

Страница 54: ...ease configure WAN3 interface Available settings are explained as follows Item Description Enable Choose Yes to invoke the settings for this WAN interface Choose No to disable the settings for this WA...

Страница 55: ...ess Mode Use the drop down list to choose a proper access mode The details page of that mode will be popped up If not click Details Page for accessing the page to configure the settings Details Page T...

Страница 56: ...ti PVC VLAN Option Number Type a number for such function Note If you choose to configure option 61 here the detailed settings in WAN Interface Access will be overwritten DataType Choose the type ASCI...

Страница 57: ...n access Internet through such direction For Wired LAN If you check this box PCs on the same network can use another set of PPPoE session different with the Host PC to access into Internet For Wireles...

Страница 58: ...acket transmitted through Vigor router Enable TTL value will be reduced 1 when it passess through Vigor router It will cause the client accessing Internet through Vigor router be blocked by certain IS...

Страница 59: ...ic c I IP P For static IP mode you usually receive a fixed public IP address or a public subnet namely multiple public IP addresses from your DSL or Cable ISP service providers In most cases a Cable s...

Страница 60: ...ect as detection mode you also can enable this setting to use current WAN gateway IP address for pinging With the IP address es pinging Vigor router can check if the WAN connection is on or off TTL Ti...

Страница 61: ...utomatically Click this button to obtain the IP address automatically if you want to use Dynamic IP mode Router Name Type in the router name provided by ISP Domain Name Type in the domain name that yo...

Страница 62: ...Specify the IP address of the PPTP L2TP server if you enable PPTP L2TP client mode Specify Gateway IP Address Specify the gateway IP address for DHCP server ISP Access Setup Username Type in the usern...

Страница 63: ...signment Method IPCP WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 32 public IP addresses other th...

Страница 64: ...200 64 offered by the ISP In addition PCs under LAN also can have the public IPv6 address for Internet access by means of the generated prefix No need to type any other information for PPP mode Availa...

Страница 65: ...PC C Tunnel setup protocol client TSPC is an application which could help you to connect to IPv6 network easily Please make sure your IPv4 WAN connection is OK and apply one free account from hexago...

Страница 66: ...roker Type the address for the tunnel broker IP FQDN or an optional port number WAN Connection Detection Such function allows you to verify whether network connection is alive or not through Ping Dete...

Страница 67: ...rd you can set is 19 characters Tunnel Broker It means a server of AICCU The server can provide IPv6 tunnels to sites or end users over IPv4 Type the address for the tunnel broker IP FQDN or an option...

Страница 68: ...D DUID Display the DHCP unique ID used by such WAN interface Authentication Protocol Such protocol will be used for the client to be authenticated by DHCPv6 server before accessing into Internet There...

Страница 69: ...be on always Ping IP Hostname If you choose Ping Detect as detection mode you have to type IP address in this field for pinging TTL Time to Live If you choose Ping Detect as detection mode you have t...

Страница 70: ...are explained as follows Item Description Static IPv6 Address configuration IPv6 Address Type the IPv6 Static IP Address Prefix Length Type the fixed value for prefix length Add Click it to add a new...

Страница 71: ...able when Bridge Mode is enabled When both Bridge Mode and Firewall check boxes are enabled the settings configured user profiles under User Management will be ignored And all of the filter rules defi...

Страница 72: ...llows you to verify whether network connection is alive or not through Ping Detect Mode Choose Always On or Ping Detect for the system to execute for WAN detection Always On means no detection will be...

Страница 73: ...are identical across all CE IPv4 addresses within a given 6rd domain It may be any value between 0 and 32 6rd Prefix Type the 6rd IPv6 address 6rd Prefix Length Type the IPv6 prefix length for the 6r...

Страница 74: ...Vigor2133 Series User s Guide 62 After finished the above settings click OK to save the settings Below shows an example for successful IPv6 connection based on 6rd mode...

Страница 75: ...ription Channel Display the number of each channel Channels 1 is used by the Internet Access web user interface and can not be configured here Channels 4 10 are configurable Enable Display whether the...

Страница 76: ...lti VLAN Channel 4 5 6 Enable Select to enable this channel Disable Select to disable this channel General Settings VLAN Tag Type the value as the VLAN ID number Valid settings are in the range from 1...

Страница 77: ...ration telnet TR069 If you choose Management the configuration for this VLAN will be effective for Web configuration telnet TR069 IPTV The IPTV configuration will allow the WAN interface to send IGMP...

Страница 78: ...entified by the system via their VLAN Tags Channels using the same WAN type may not configure the same VLAN tag value Priority Choose the number to determine the packet priority for such VLAN The rang...

Страница 79: ...is enabled on this WAN x WAN Budget is disabled on this WAN Quota The current cycle s Internet usage is expressed as x y where x is the cumulative usage and y is the upper limit For example 100MB 200...

Страница 80: ...object Set Mail Alert The system will send out a warning message to the administrator when the quota is running out However the connection charges will be calculated continuously Set SMS message The s...

Страница 81: ...Specify the day in the cycle as the starting point which Vigor router will reset the traffic record For example 3 means the third day of the cycle duration Use Cycle in days Cycle duration Specify the...

Страница 82: ...sage If the WAN budget is exhausted a lock will be displayed on the page if Shutdown WAN interface is selected Which means no data transmission will be carried out Moreover the system will send out a...

Страница 83: ...to demonstrate how to implement an IPv6 address on Vigor Router s WAN 1 Before configuring IPv6 on WAN please make sure the router is connected to the IPv4 Internet 2 Go to WAN Internet Access click...

Страница 84: ...k the status from the IPv6 tab on Online Status Physical Connection page 5 Furthermore Network Administrator may test the connectivity of IPv6 from the router by going to Diagnostics Ping Diagnosis an...

Страница 85: ...un nn ne el l S Se et tu up p P Pr ro ot to oc co ol l C Cl li ie en nt t In this mode the IPv6 connectivity is provided by a tunnel broker on the IPv4 Internet through a tunnel set up by Tunnel Setu...

Страница 86: ...for you you may configure that IPv6 address for WAN by doing the following steps 1 Set Connection Type to Static IPv6 2 Enter the IPv6 address and Prefix Length which provided by the ISP and click Add...

Страница 87: ...d manually To use 6in4 Static Tunnel you need sign up for a tunnel broker service and get an IPv6 address and routed IPv6 prefixes first Then configure the router as follows 1 Set Connection Type to 6...

Страница 88: ...he packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assigns private IP address to...

Страница 89: ...t ta at ti ic c R Ro ou ut te e When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static routes function rather than other method You may simpl...

Страница 90: ...that can be configured to restrict traffic coming in and going out of the computer VLANs on the other hand are usually set up using network switches or routers To communicate with the hosts outside o...

Страница 91: ...ls Page Click it to access into the setting page Each LAN will have different LAN configuration page Each LAN must be configured in different subnet IPv6 Click it to access into the settings page of I...

Страница 92: ...VLAN on how to set up VLANs In the Inter LAN Routing matrix a selected checkbox means that the 2 intersecting LANs can communicate with each other When you finish the configuration please click OK to...

Страница 93: ...ters using the Routing Information Protocol DHCP Server Configuration DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your network so it automa...

Страница 94: ...et and whose address is specified in the DHCP Server IP Address field DHCP Server IP Address It is available when Enable Relay Agent is checked Set the IP address of the DHCP server you are going to u...

Страница 95: ...ts plus room for future expansion and use addresses greater than 192 168 1 100 for static assignment I II I 2 2 1 1 2 2 D De et ta ai il ls s P Pa ag ge e f fo or r L LA AN N2 2 L LA AN N4 4 Available...

Страница 96: ...ddress pool Note When Clear DHCP lease for inactive clients periodically is enabled router will do the following Check activities of DHCP clients by ARP requests every minute when the available DHCP I...

Страница 97: ...OK to save and exit this page I II I 2 2 1 1 3 3 D De et ta ai il ls s P Pa ag ge e f fo or r I IP P R Ro ou ut te ed d S Su ub bn ne et t Available settings are explained as follows Item Description...

Страница 98: ...should be identical to the IP Address in the Network Configuration section above Lease Time The maximum duration DHCP issued IP addresses can be used before they have to be renewed Use LAN Port Speci...

Страница 99: ...settings are explained as follows Item Description Enable Check the box to enable the configuration of LAN 1 IPv6 Setup WAN Primary Interface Use the drop down list to specify a WAN interface for IPv...

Страница 100: ...r Type another IPv6 address for DNS server if required Disable DNS server will not be used Management Configures the Managed Address Configuration flag M bit in Route Advertisements Off No configurati...

Страница 101: ...g multiple WANs for IPv6 traffic Router Advertisement Configuration Click Enable to enable router advertisement server The router advertisement daemon sends Router Advertisement messages specified by...

Страница 102: ...terface in the LAN IPv6 Setup page additional WANs can be selected to carry IPv6 traffic by enabling them in the Extension WAN section Available WAN Additional WANs available but not currently selecte...

Страница 103: ...t One or more IPv4 addresses delimited by commas Data Data of this DHCP option To add a DHCP option entry from scratch clear the data entry fields Enable Interface Option Number DataType and Data by c...

Страница 104: ...es for LAN side QoS You can assign each of VLANs to each of the different IP subnets that the router may also be operating to provide even more isolation The said functionality is tag based multi subn...

Страница 105: ...ecify the priority for the packets sending by LAN VID Type the value as the VLAN ID number The range is form 0 to 4095 VIDs must be unique Priority Valid values are from 0 to 7 where 1 has the lowest...

Страница 106: ...em In its simplest form each of the Gigabit LAN ports can be isolated from each other for example to feed different companies or departments but keeping their local traffic completely separated C Co o...

Страница 107: ...is ideal for departmental or multi occupancy applications Info As for the VLAN applications refer to Appendix I VLAN Application on Vigor Router for more detailed information I II I 2 2 3 3 B Bi in n...

Страница 108: ...as follows Item Description Enable Click this radio button to invoke this function However IP MAC which is not listed in IP Bind List also can connect to Internet Disable Click this radio button to di...

Страница 109: ...ow Select All Select all entries in the ARP Table for manipulation Sort Reorder the entry based on the IP address Refresh Refresh the ARP table listed below to obtain the newest ARP table information...

Страница 110: ...select Strict Bind you have to bind one set of IP MAC address for one PC If not no one of the PCs can access into Internet And the web user interface of the router might not be accessed When you finis...

Страница 111: ...rom the menu bar of the Web UI to bring up the LAN Port Mirror configuration page Available settings are explained as follows Item Description Port Mirror Enables or disables LAN Port Mirroring Mirror...

Страница 112: ...nticated on each LAN port Select LAN Wired 802 1X from the menu bar of the Web UI to bring up the Wired 802 1X configuration page Available settings are explained as follows Item Description Enable Ch...

Страница 113: ...aming by hardware itself Open Hardware Acceleration to access into the following page Available settings are explained as follows Item Description Mode Disabled The default setting Auto When the hardw...

Страница 114: ...Therefore the performance will be lower than only one host Choose this option to specify certain PCs on LAN to apply the hardware acceleration Enable Check the box to make PC s specified in the select...

Страница 115: ...ic IP address and the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes Save cost on applying publ...

Страница 116: ...ss domain name are recognized by all users Since the server is actually located inside the LAN the network well protected by NAT of the router and identified by its private IP address port the goal of...

Страница 117: ...y the transport layer protocol TCP or UDP Public Port Display the port number which will be redirected to the specified Private IP and Port of the internal host Source IP Display the source IP address...

Страница 118: ...ding port Source IP Use the drop down list to specify an IP object Or click IP Object link to create a new one for applying Private IP Specify the private IP address of the internal host providing the...

Страница 119: ...Vigor2133 Series User s Guide 107...

Страница 120: ...gle host in the LAN Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption DMZ Host allows a defined internal user to be tot...

Страница 121: ...low The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host When you have selected one private IP from the a...

Страница 122: ...ndow will automatically pop up as depicted below The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host Whe...

Страница 123: ...ant to offer service in a local host You should click the appropriate index number to edit or clear the corresponding entry Comment Specify the name for the defined network service WAN Interface Displ...

Страница 124: ...y the WAN IP address that will be used for this entry This setting is available when WAN IP Alias is configured Private IP Enter the private IP address of the local host or click Choose IP to select o...

Страница 125: ...Vigor2133 Series User s Guide 113 After finishing all the settings here please click OK to save the configuration...

Страница 126: ...used The default durations are shown below and these duration values can be modified via telnet commands TCP 86400 sec UDP 180 sec IGMP 10 sec TCP WWW 60 sec TCP SYN 60 sec Available settings are expl...

Страница 127: ...create a new one for applying Triggering Protocol Select the protocol TCP UDP or TCP UDP for such triggering profile Triggering Port Type the port or port range for such triggering profile Incoming P...

Страница 128: ...o be transmitted and received correctly via NAT by Vigor router However SIP ALG makes SIP message and RTP packets of voice be transmitted and received correctly via NAT by Vigor router Available setti...

Страница 129: ...IP address es to correspondent servers Thus even the remote PC is adopting public DNS as the DNS server the LAN DNS resolution on Vigor2133 series will respond the specified private IP address S Sc c...

Страница 130: ...r wants to wake up a specified PC through the router he she must type correct MAC address of the specified PC on this web page of Wake on LAN WOL of this router In addition such PC must have installed...

Страница 131: ...main name from the DDNS provider say hostname dyndns org and an account with username test and password test 2 Open Applications Dynamic DNS 3 In the DDNS setup menu check Enable Dynamic DNS Setup Ava...

Страница 132: ...he domain name that you set on the setting page of DDNS setup 4 Select Index number 1 to add an account for the router Check Enable Dynamic DNS Account and choose correct Service Provider dyndns org t...

Страница 133: ...Connection Type There are two connection types HTTP and HTTPs to be specified Note that such option is available when Customized is selected as Service Provider Server Response Type any text that you...

Страница 134: ...will see your setting has been saved D Di is sa ab bl le e t th he e F Fu un nc ct ti io on n a an nd d C Cl le ea ar r a al ll l D Dy yn na am mi ic c D DN NS S A Ac cc co ou un nt ts s Uncheck Enab...

Страница 135: ...IP address es to correspondent servers Thus even the remote PC is adopting public DNS as the DNS server the LAN DNS resolution on Vigor2133 series will respond the specified private IP address Simply...

Страница 136: ...tings are explained as follows Item Description Enable Check this box to enable such profile Profile Type a name for such profile Note If you type a name here for LAN DNS and click OK to save the conf...

Страница 137: ...profile just created Or you can click index 2 to use this profile as conditional DNS forwarding Available settings are explained as follows Item Description Enable Check this box to enable such profil...

Страница 138: ...DNS security management Interface There are four WAN interfaces allowed to be set with DNS security enabled Primary DNS Display the IP address of primary DNS obtained from DHCP server or specified by...

Страница 139: ...IP address IPv4 IPv6 that you want to query Interface Specify the interface required for executing diagnose DNS Server Type the IP address of the DNS Server which will diagnose the domain specified ab...

Страница 140: ...In System Maintenance Time and Date menu press Inquire Time button to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is...

Страница 141: ...Internet Access or VPN and Remote Access LAN to LAN settings To add a schedule 1 Click any index say Index No 1 2 The detailed settings of the schedule with index 1 will be shown below Available sett...

Страница 142: ...ns the action applied such schedule will be executed every three days since the date defined on the Start Date 3 Click OK button to save the settings Example Suppose you want to control the PPPoE Inte...

Страница 143: ...d as a RADIUS client Therefore this page is used to configure settings for external RADIUS server Then LAN user of Vigor router will be authenticated by such server for network application Available s...

Страница 144: ...Control Service or Connection Status Service Default WAN It is used to specify the WAN interface for applying such function The reminder as regards concern about Firewall and UPnP Can t work with Fire...

Страница 145: ...service you subscribe General Query Interval Vigor router will periodically check which IP obtaining IPTV service by sending query It might cause inconvenience for client Therefore set a suitable tim...

Страница 146: ...ng g G Gr ro ou up p Available settings are explained as follows Item Description Refresh Click this link to renew the working multicast group status Group ID This field displays the ID port for the...

Страница 147: ...able settings are explained as follows Item Description Wake by Two types provide for you to wake up the binded IP If you choose Wake by MAC Address you have to type the correct MAC address of the hos...

Страница 148: ...content is and when the SMS will be sent Available settings are explained as follows Item Description Index Check the box to enable such profile SMS Provider Use the drop down list to choose SMS serv...

Страница 149: ...ngs SMS Mail Service Object If there is no object listed click Mail Service link to define a new one with specified service provider Mail Address Type the e mail address of the one who will receive th...

Страница 150: ...n e g IP setting If the host and user s computer have the plug in bonjour driver install they can utilize the service offered by the router by clicking the router name icon In short what the Clients u...

Страница 151: ...tem Maintenance Management Type a name as the Router Name and click OK 4 Next open Applications Bonjour Check the service that you want to use via Bonjour 5 Open the DNSSD page again The available ite...

Страница 152: ...Vigor2133 Series User s Guide 140 6 Now any page or document can be printed out through Vigor router installed with a printer...

Страница 153: ...r is not on the list Now DrayTek starts to support our own DDNS service DrayDDNS We will provide a domain name for each Vigor Router this single domain name can record IP addresses of all WAN A Ac ct...

Страница 154: ...ro of fi il le e 1 Go to Applications Dynamic DNS Setup a Tick Enable Dynamic DNS Setup b Click an available profile index c Tick Enable Dynamic DNS Account d Select DrayTek Global www drayddns com a...

Страница 155: ...om ma ai in n N Na am me e Currently only the domain name is allowed to be modified MyVigor website We will need to register the router to MyVigor server and log in to MyVigor website to modify it 1 P...

Страница 156: ...me e g XXXX25 and click Update 4 Vigor router will get the modified domain name when the it performs next DDNS updating We can click Sync domain to accelerate this process After few seconds the router...

Страница 157: ...Vigor2133 Series User s Guide 145...

Страница 158: ...ers to update your IP to the DDNS server We will take Changeip org and 3322 net as example Before setting please make sure that the WAN connection is up P Pa ar rt t A A C Ch ha an ng ge ei ip p o or...

Страница 159: ...s dynamic dns update asp u jo p jo hostname j changeip org ip IP cmd update offline 0 In which IP is a value which will be replaced with the current interface IP address automatically when DDNS servic...

Страница 160: ...ob for us automatically 1 Please go to Applications Dynamic DNS to create a profile for User Defined DDNS client 2 Set the Service Provider as User Defined 3 Set the Provider Host as member 3322 net 4...

Страница 161: ...Vigor2133 Series User s Guide 149 P Pa ar rt t C C E Ex xt te en nd d N No ot te e The customized Service Provider is also eligible with the ClouDNS net...

Страница 162: ...terface WAN LAN VPN the data can be sent from the source IP to the destination IP Address Mapping Allows you specify the outgoing WAN IP address es for an internal private IP address or a range of int...

Страница 163: ...uting Static Route The router offers IPv4 and IPv6 for you to configure the static route Both protocols bring different web pages S St ta at ti ic c R Ro ou ut te e f fo or r I IP Pv v4 4 Available se...

Страница 164: ...ublic subnet 211 100 88 0 via an internal Router B 192 168 1 3 have set Main Router 192 168 1 1 as the default gateway for the Router A 192 168 1 2 Before setting Static Route user A cannot talk to us...

Страница 165: ...to enable this profile Destination IP Address Type an IP address as the destination of such static route Subnet Mask Type the subnet mask for such static route Network Interface Use the drop down lis...

Страница 166: ...lays the routing table for your reference Index The number 1 to 40 under Index allows you to open next page to set up static route Enable Check the box to enable such static route Destination Address...

Страница 167: ...l l S Se et tu up p General Setup lists all the policies and shows whether the policy is enabled disabled what are the criteria to match and through which the interface should the traffic to go if the...

Страница 168: ...ng steps 1 Click the Wizard Mode radio button 2 Click Index 1 The setting page will appear as follows Available settings are explained as follows Item Description Source IP Any Any IP can be treated a...

Страница 169: ...transferred to the interface chosen here 4 After specifying the interface click Next to get the following page Available settings are explained as follows Item Description Force NAT Force Routing It d...

Страница 170: ...Description Enable Check this box to enable this policy Comment Type a brief explanation for such profile Protocol Use the drop down menu to choose a proper protocol for the WAN interface Source Desti...

Страница 171: ...pecify the way the packet forwarded to Choose Force NAT or Force Routing Failover to Check this button to lead the data passing through specific interface WAN LAN VPN Route Policy automatically when t...

Страница 172: ...cy Analyze how multiple packets Choose such mode to make Vigor router analyze how multiple packets in a specified file will be sent by a route policy Packet Information Specify the nature of the packe...

Страница 173: ...oad link to get a blank example file Then click such button to select that blank csv file for saving the result of analysis Analyze Click it to perform the job of analyzing The analyzed result will be...

Страница 174: ...IP alias IP Refer to the following figure This document introduces how to set up address mapping with Route Policy When a WAN interface has multiple public IP addresses the administrator may specify t...

Страница 175: ...face as WAN and then select Interface address from the drop down list The List can be edited in WAN IP Alias setting Enable Failover to other WAN so the traffic will be sent via other Interface when t...

Страница 176: ...Vigor2133 Series User s Guide 164 This page is left blank...

Страница 177: ...er s Guide 165 P Pa ar rt t I II II I W Wi ir re el le es ss s L LA AN N Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well...

Страница 178: ...802 11n draft 2 protocol To boost its performance further the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can finally smoothly enjoy str...

Страница 179: ...ryption while WPA2 applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connection Yo...

Страница 180: ...S is available for the wireless station with WPS supported It is the simplest way to build connection between wireless network clients and vigor router Users do not need to select any encryption mode...

Страница 181: ...rt PBC button of network card If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to connect to the vigor r...

Страница 182: ...home use or internal use for a company and specified for a guest AP for any wireless clients accessing into Internet Follow the steps listed below 1 Open Wizards Wireless Wizard 2 The screen of wirele...

Страница 183: ...hannel is 6 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select Auto to let system determine for you Security Key T...

Страница 184: ...r PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by 0x su...

Страница 185: ...Vigor2133 Series User s Guide 173 5 The following page will display the configuration summary for wireless setting 6 Click Finish to complete the wireless settings configuration...

Страница 186: ...AN Check the box to enable wireless function Mode For 2 4GHz At present the router can connect to 11b Only 11g Only 11n Only 2 4 GHz Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultan...

Страница 187: ...rveying The system allows you to set four sets of SSID for different usage In default the first set of SSID will be enabled You can hide it for your necessity SSID Means the identification of the wire...

Страница 188: ...efault security mode is provided and stated on the label pasted on the bottom of the router For the wireless client who wants to access into Internet through such router please input the default PSK v...

Страница 189: ...ients and the encryption key should be entered in PSK WPA2 PSK Accepts only WPA2 clients and the encryption key should be entered in PSK Mixed WPA WPA2 PSK Accepts WPA and WPA2 clients simultaneously...

Страница 190: ...to certain wireless clients only by locking their MAC address into a black or white list The user may block wireless clients by inserting their MAC addresses into a black list or only let them be able...

Страница 191: ...he selected MAC address in the list Cancel Give up the access control set up OK Click it to save the access control list Clear All Clean all entries in the MAC address list Backup Access Control Setti...

Страница 192: ...rocedure The router will wait for WPS requests from wireless clients about two minutes The WPS LED on the router will blink fast when WPS is in progress It will return to normal condition after two mi...

Страница 193: ...access into Internet through the router AP with Bridge mode configured The packets received from a WDS link will only be forwarded to local wired or wireless hosts Repeater Extended Wireless stations...

Страница 194: ...ure the following settings if required Type There are some types for you to choose WPA and WPA2 are used for WDS devices e g 2925n wireless router you can set the encryption mode as WPA or WPA2 to est...

Страница 195: ...s page at one time Similarly if you want to invoke the peer MAC address remember to check Enable box in the front of the MAC address after typing Access Point Function Click Enable to make this router...

Страница 196: ...or router will use 20MHz 40MHz 80MHz for data transmission and receiving between the AP and the stations 20 40 Vigor Router will scan for nearby wireless AP and then use 20MHz if the number of AP is m...

Страница 197: ...for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing ca...

Страница 198: ...will detect scan the country code to prevent conflict occurred If conflict is detected wireless station will be warned and is unable to make network connection Therefore changing the country code to e...

Страница 199: ...ection Time Use the drop down list to choose the duration for the wireless client connecting reconnecting to Vigor router Or type the duration manually when you choose User defined Display All Station...

Страница 200: ...l be shown on the box above this button Statistics It displays the statistics for the channels used by APs Add to If you want the found AP applying the WDS settings please type in the AP s MAC address...

Страница 201: ...determined according to the limitation of the wireless client Total Upload Limit It is available when Auto Adjustment is selected Type a value to define the maximum data traffic uploading for all of t...

Страница 202: ...IEEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case...

Страница 203: ...ns 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Available settings are explained as follows Item Description Enable Airtime Fairness Try to assign sim...

Страница 204: ...hat frequency It helps to leave 2 4GHz band available for legacy clients and improves users experience by reducing channel utilization If dual band is detected the AP will let the wireless client conn...

Страница 205: ...ent is capable of dual band or not within the time limit Check Time If the wireless station does not have the capability of 5GHz network connection the system shall wait and check for several seconds...

Страница 206: ...box of Enable Band Steering and use the default value 15 for check time setting 3 Click OK to save the settings 4 Open Wireless LAN 2 4GHz General Setup and Wireless LAN 5GHz General Setup Configure...

Страница 207: ...d Wireless LAN 5GHz Security Configure Security as 12345678 for both pages Click OK to save the settings 6 Now Vigor router will let the wireless clients connect to less congested wireless LAN such as...

Страница 208: ...requirement and cut off the network connection for that wireless station to assist it to connect another Wireless AP to get better signal This option is to disable the roaming mechanism Strictly Mini...

Страница 209: ...with its status code There is a code summary below for explanation For convenient Access Control you can select a WLAN station and click Add to Access Control below Available settings are explained a...

Страница 210: ...Vigor2133 Series User s Guide 198 This page is left blank...

Страница 211: ...a manner that emulates the properties of a point to point private link It is a form of VPN that can be used with a standard Web browser A digital certificate works as an electronic ID which is issued...

Страница 212: ...ween home office and customer Secure connection between Teleworker staff on business trip and main office Exchange data between remote office and main office POS between chain store and headquarters S...

Страница 213: ...or VPN dial out connection from server to client step by step 1 Open Wizards VPN Client Wizard The following page will appear Available settings are explained as follows Item Description LAN to LAN Cl...

Страница 214: ...es provided here Different type will lead to different configuration page After making the choices for the client profile please click Next You will see different configurations based on the selection...

Страница 215: ...Vigor2133 Series User s Guide 203 When you choose IPsec you will see the following graphic When you choose SSL you will see the following graphic...

Страница 216: ...the following graphic Available settings are explained as follows Item Description Profile Name Type a name for such profile The length of the file is limited to 10 characters Always On Check to enabl...

Страница 217: ...ill be authenticated but not be encrypted By default this option is active High Encapsulating Security Payload ESP means payload data will be encrypted and authenticated You may select encryption algo...

Страница 218: ...tton to access VPN and Remote Access Connection Management for viewing VPN Connection status Do another VPN Server Wizard Setup Click this radio button to set another profile of VPN Server through VPN...

Страница 219: ...Site VPN Remote Dial in User You can manage remote access by maintaining a table of remote user profile so that users can be authenticated to dial in via VPN connection Please choose a LAN to LAN Pro...

Страница 220: ...in User selected 2 After making the choices for the server profile please click Next You will see different configurations based on the selection you made Here we take the examples of choosing Site to...

Страница 221: ...are explained as follows Item Description Profile Name Type a name for such profile The length of the file is limited to 10 characters User Name This field is used to authenticate for connection when...

Страница 222: ...ubject Name First or Subject Name First Peer IP VPN Client IP Type the WAN IP address or VPN client IP address for the remote client Peer ID Type the ID name for the remote client The length of the na...

Страница 223: ...cc ce es ss s C Co on nt tr ro ol l Enable the necessary VPN service as you need If you intend to run a VPN server inside your LAN you should disable the VPN service of Vigor Router to allow VPN tunne...

Страница 224: ...the remote dial in user If the remote dial in user does not support the MPPE encryption algorithm the router will transmit no MPPE encrypted packets Otherwise the MPPE encryption scheme will be used...

Страница 225: ...PPP connection You should choose an IP address from the local private network For example if the local private network is 192 168 1 0 255 255 255 0 you could choose 192 168 1 200 as the Start IP Addr...

Страница 226: ...oad and use original IP header to encapsulate the data payload only It can just apply to local packet e g L2TP over IPsec The Tunnel mode will not only add the AH ESP payload but also use a new IP hea...

Страница 227: ...data will be encrypted and authenticated You may select encryption algorithm from Data Encryption Standard DES Triple DES 3DES and AES After finishing all the settings here please click OK to save th...

Страница 228: ...ccount Check it to enable such account profile Accept Any Peer ID Click to accept any peer regardless of its identity Accept Subject Alternative Name Click to check one specific field of digital signa...

Страница 229: ...users Besides you can extend the user accounts to the RADIUS server through the built in RADIUS client function The following figure shows the summary table Available settings are explained as follow...

Страница 230: ...300 seconds Allowed Dial In Type PPTP Allow the remote dial in user to make a PPTP VPN connection through the Internet You should set the User Name and Password of remote dial in user below IPsec Tunn...

Страница 231: ...Psec policy above The length of the password is limited to 19 characters Enable Mobile One Time Passwords mOTP Check this box to make the authentication with mOTP function PIN Code Type the code for a...

Страница 232: ...nections by maintaining a table of connection profiles You may set parameters including specified connection direction dial in or dial out connection peer ID connection type VPN connection including P...

Страница 233: ...Enable this profile Check here to activate this profile Netbios Naming Packet Pass click it to have an inquiry for data transmission between the hosts located on both sides of VPN Tunnel while connec...

Страница 234: ...this VPN connection and react accordingly This is independent of DPD dead peer detection PING to the IP Enter the IP address of the remote host that located at the other end of the VPN tunnel Dial Out...

Страница 235: ...ode Local Certificate Select one of the profiles set in Certificate Management Local Certificate IPsec Security Method This group of fields is a must for IPsec Tunnels and L2TP with IPsec Policy Mediu...

Страница 236: ...ons are available for both modes We suggest you select the combination that covers the most algorithms IKE phase 1 key lifetime For security reason the lifetime of key should be defined The default va...

Страница 237: ...to make a L2TP VPN connection through the Internet You can select to use L2TP alone or with IPsec Select from below None Do not apply the IPsec policy Accordingly the VPN connection employed the L2TP...

Страница 238: ...tal Signature X 509 Check the box of Digital Signature to invoke this function and select one predefined Profiles set in the VPN and Remote Access IPsec Peer Identity Local ID Specify which one will b...

Страница 239: ...en you find there are several subnets behind the remote VPN router RIP Direction The option specifies the direction of RIP Routing Information Protocol packets You can enable disable one of direction...

Страница 240: ...a LAN port as the transferred direction Then specify an IP address Click Advanced to configure detailed settings if required Advanced Add a static route to direct all traffic destined to more Remote N...

Страница 241: ...Vigor2133 Series User s Guide 229 2 After finishing all the settings here please click OK to save the configuration...

Страница 242: ...Drop button You may also aggressively Dial out by using Dial out Tool and clicking Dial button Available settings are explained as follows Item Description Dial out Tool General Mode This filed displ...

Страница 243: ...i io on n o on n V Vi ig go or r R Ro ou ut te er r f fo or r H He ea ad d O Of ff fi ic ce e 1 Log into the web user interface of Vigor router 2 Open VPN and Remote Access LAN to LAN to create a LAN...

Страница 244: ...and L2TP boxes Check the box of Specify Remote and type the Peer VPN Server IP e g 218 242 130 19 in this case Press the IKE Pre Shared Key button to set the PSK and select Medium AH or High ESP as t...

Страница 245: ...into the web user interface of Vigor router 2 Open VPN and Remote Access LAN to LAN to create a LAN to LAN profile The following settings are for a permanent VPN connection 3 Click any index number t...

Страница 246: ...ervice and type the remote server IP host name e g 218 242 133 91 in this case Press the IKE Pre Shared Key button to set the PSK and select Medium AH or High ESP as the security method 5 Continue to...

Страница 247: ...Vigor2133 Series User s Guide 235 7 Open VPN and Remote Access Connection Management to check the dial in connection status from head office...

Страница 248: ...network is a form of VPN that can be used with a standard Web browser There are two benefits that SSL VPN provides It is not necessary for users to preinstall VPN client software for executing SSL VPN...

Страница 249: ...It will not affect the HTTPS Port configuration set in System Maintenance Management In general the default setting is 443 Server Certificate When the client does not set any certificate default cert...

Страница 250: ...guest network or web cafe The SSL technology is the same as the encryption that you use for secure web sites such as your online bank The SSL VPN can be operated in either full tunnel mode or proxy mo...

Страница 251: ...ct PPTP or L2TP with or without IPsec policy above The length of the name password is limited to 19 characters Enable Mobile One Time Passwords mOTP Check this box to make the authentication with mOTP...

Страница 252: ...el in connecting such function can block data transmission of Netbios Naming Packet inside the tunnel Multicast via VPN Some programs might send multicast packets via VPN connection Pass Click this bu...

Страница 253: ...encrypted and authenticated You may select encryption algorithm from Data Encryption Standard DES Triple DES 3DES and AES Local ID Specify a local ID to be used for Dial in setting in the LAN to LAN P...

Страница 254: ...ess into DrayTek SSL VPN portal interface Next users can open SSL VPN Online Status to view logging status of SSL VPN Available settings are explained as follows Item Description Active User Display c...

Страница 255: ...gor router support digital certificates conforming to standard X 509 Any entity wants to utilize digital certificates should first request a certificate issued by a CA server It should also retrieve c...

Страница 256: ...import a saved file as the certification information Refresh Click this button to refresh the information listed below View Click this button to view the detailed settings for certificate request Del...

Страница 257: ...T Vigor router allows you to generate a certificate request and submit it the CA server then import it as Local Certificate If you have already gotten a certificate from a third party you may import i...

Страница 258: ...s OK Upload PKCS12 Certificate It allows users to import the certificate whose extensions are usually pfx or p12 And these certificates usually need passwords Note that PKCS12 is a standard for storin...

Страница 259: ...tings for certificate request Info You have to copy the certificate request information from above window Next access your CA server and enter the page of certificate request copy the information into...

Страница 260: ...ficate from a trusted root certificate authority is complicated and time consuming Therefore Vigor router offers a mechanism which allows you to generate root CA to save time and provide convenience f...

Страница 261: ...the following window Use Browse to find out the saved text file Then click Import The one you imported will be listed on the Trusted CA Certificate window For viewing each trusted CA certificate click...

Страница 262: ...ificate for this router can be saved within one file Please click Backup on the following screen to save them If you want to set encryption password for these certificates please type characters in bo...

Страница 263: ...y has been always the most concerned The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders It also restricts users in the local network from a...

Страница 264: ...s unsolicited incoming data Selectable Denial of Service DoS Distributed DoS DDoS attacks protection I IP P F Fi il lt te er rs s Depending on whether there is an existing Internet connection or in ot...

Страница 265: ...xhaust all your system s resource while the vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system The DoS Defense function enables...

Страница 266: ...here you assign the Start Filter Set only Also you can configure the Log Flag settings Apply IP filter to VPN incoming packets and Accept incoming fragmented UDP packets Click Firewall and click Gene...

Страница 267: ...e transmitting through Vigor router will be filtered by firewall If the firewall system e g content filter server does not make any response pass or block for these packets then the router s firewall...

Страница 268: ...ttings are explained as follows Item Description Filter Select Pass or Block for the packets that do not match with the filter rules Sessions Control The number typed here is the total sessions of the...

Страница 269: ...le settings created in CSM Web Content Filter for applying with this router Please set at least one profile for anti virus in CSM Web Content Filter web page first Or choose Create New from the drop d...

Страница 270: ...not stable small value will be proper Session timeout Setting timeout for sessions can make the best utilization of network resources Backup Firewall Click Backup to save the firewall configuration R...

Страница 271: ...Active to enable the rule Available settings are explained as follows Item Description Filter Rule Click a button numbered 1 7 to edit the filter rule Click the button will open Edit Filter Rule web p...

Страница 272: ...a several setting pages Advance Mode Allow to configure detailed settings of filter rule To use Wizard Mode simple do the following steps 1 Click the Wizard Mode radio button 2 Click Index 1 The setti...

Страница 273: ...tion Port when the first and last value are the same it indicates one port when the first and last values are different it indicates a range for the port and available for this service type when the f...

Страница 274: ...age first Or choose Create New from the drop down list in this page to create a new profile For troubleshooting needs you can specify to record information for URL Content Filter by checking the Log b...

Страница 275: ...Vigor2133 Series User s Guide 263 4 After choosing the mechanism click Next to get the summary page for reference 5 If there is no error click Finish to complete wizard setting...

Страница 276: ...ength is 14 character long Index 1 15 Set PCs on LAN to work at certain time interval only You may choose up to 4 schedules out of the 15 schedules pre defined in Applications Schedule setup The defau...

Страница 277: ...ress Single Address Range Address Subnet Address as the Address Type and type them in this dialog In addition if you want to use the IP range from defined groups or objects please choose Group and Obj...

Страница 278: ...ts except the range defined here are available for this service type the port number greater than this value is available the port number less than this value is available for this profile Service Gro...

Страница 279: ...information refer to the section of APP Enforcement profile setup For troubleshooting needs you can specify to record information for IM P2P by checking the Log box It will be sent to Syslog server Pl...

Страница 280: ...processed Please use the drop down list to choose a codepage If you do not have any idea of choosing suitable codepage please open Syslog From Codepage Information of Setup dialog you will see the re...

Страница 281: ...filtered by firewall settings configured by Vigor router When the resource is inadequate the packets will be blocked if Strict Security Checking is enabled If Strict Security Checking is not enabled t...

Страница 282: ...rom the Internet has exceeded the defined value the Vigor router will start to randomly discard the subsequent TCP SYN packets for a period defined in Timeout The goal for this is prevent the TCP SYN...

Страница 283: ...unction The Vigor router will ignore any IP packets with IP option field in the datagram header The reason for limitation is IP option appears to be a vulnerability of the security for the LAN because...

Страница 284: ...the packets The Vigor routers will block any packets realizing this attacking activity Block ICMP Fragment Check the box to activate the Block ICMP fragment function Any ICMP packets with more fragme...

Страница 285: ...Vigor2133 Series User s Guide 273...

Страница 286: ...cription Mode To have a firewall rule test specify the service type ICMP UDP TCP of the packet and type of the IP address IPv4 IPv6 Direction Set the way from WAN or from LAN that Vigor router receive...

Страница 287: ...rection from Computer A to B or from the B to A for the second packet Protocol It displays the mode selected above and the sate If required click the mode link to configure advanced setting The common...

Страница 288: ...s User s Guide 276 The following figure shows the test result after clicking Analyze Processing state for the fuctions MAC Filter QoS User management etc related to the firewall will be displayed by g...

Страница 289: ...168 1 20 accessing to Internet through Vigor router Others e g 192 168 1 31 and 192 168 1 32 outside the range can get the source from LAN only The way we can use is to set two rules under Firewall Fo...

Страница 290: ...Filter Rule 7 If Block If No Further Match for is selected for Filter the firewall of the router would check the packets with the rules starting from Rule 3 to Rule 7 The packets not matching with the...

Страница 291: ...Type 192 168 1 10 in the field of Start IP and type 192 168 1 20 in the field of End IP Then click OK to save the settings The computers within the range can access into the Internet 7 Now check the...

Страница 292: ...Series User s Guide 280 8 Both filter rules have been created Click OK Now all the settings are configured well Only the computers with the IP addresses within 192 168 1 10 192 168 1 20 can access to...

Страница 293: ...cks the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP headers only On the other hand Vigor router can preve...

Страница 294: ...will be applied in Default Rule of Firewall General Setup for filtering Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Profile Display the numbe...

Страница 295: ...s 15 characters Select All Click it to choose all of the items in this page Clear All Uncheck all the selected boxes Enable Check the box to select the APP to be blocked by Vigor router Adv A button u...

Страница 296: ...Vigor2133 Series User s Guide 284 Below shows the items which are categorized under Protocol The items categorized under P2P...

Страница 297: ...Vigor2133 Series User s Guide 285 The items categorized under OTHERS...

Страница 298: ...ious codes from web pages It s very common that malicious codes conceal in the executable objects such as ActiveX Java Applet compressed files and other executable files Once downloading these types o...

Страница 299: ...ter will block all the packages that match with the conditions specified in URL Access Control and Web Feature below When you choose this setting both configuration set in this page for URL Access Con...

Страница 300: ...Action This setting is available only when Either URL Access Control First or Either Web Feature First is selected Pass Allow accessing into the corresponding webpage with the keywords listed on the...

Страница 301: ...re it will be processed with reverse action Cookie Check the box to filter out the cookie transmission from inside to outside world to protect the local user s privacy Proxy Check the box to reject an...

Страница 302: ...have to click Activate to satisfy your request Be aware that service provider matching with Vigor router currently offers a period of time for trial version for users to experiment If you want to purc...

Страница 303: ...and suitable server Test a site to verify whether it is categorized Click this link to do the verification Set to Factory Default Click this link to retrieve the factory settings Administration Messag...

Страница 304: ...er under Profile to open the following web page The items listed in Categories will be changed according to the different service providers If you have and activate another web content filter license...

Страница 305: ...ries listed on the box below Block restrict accessing into the corresponding webpage with the categories listed on the box below If the web pages do not match with the specified feature set here it wi...

Страница 306: ...8 8 8 8 If the router server is used DNS Filter General Setting will be applied to DNS query from clients on LAN However if the external DNS server is used DNS Filter Profile will be applied to DNS qu...

Страница 307: ...l be recorded in Syslog All All the actions Pass and Block will be recorded in Syslog WCF Set the filtering conditions UCF Set the filtering conditions Black White List Specify IP address subnet mask...

Страница 308: ...everal useful services such as Anti Spam Web Content Filter Anti Intrusion and etc to filtering the web pages for the sake of protecting your system To access into MyVigor for getting more information...

Страница 309: ...es User s Guide 297 2 Click the Activate link A login page for MyVigor web site will pop up automatically 3 Click the link of Create an account now 4 Check to confirm that you accept the Agreement and...

Страница 310: ...Vigor2133 Series User s Guide 298 5 Type your personal information in this page and then click Continue 6 Choose proper selection for your computer and click Continue...

Страница 311: ...ART 8 Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor draytek com 9 Click the Activate my Account link to enable the account that you created The fol...

Страница 312: ...d 11 Now click Login Your account has been activated You can access into MyVigor server to activate the service e g WCF that you want C Cr re ea at te e a an n A Ac cc co ou un nt t v vi ia a M My yV...

Страница 313: ...onfirm that you accept the Agreement and click Accept 3 Type your personal information in this page and then click Continue 4 Choose proper selection for your computer and click Continue 5 Now you hav...

Страница 314: ...ation email with the title of New Account Confirmation Letter from myvigor draytek com 7 Click the Activate my Account link to enable the account that you created The following screen will be shown to...

Страница 315: ...password that you just created in the fields of UserName and Password Then type the code in the box of Auth Code according to the value displayed on the right side of it Now click Login Your account h...

Страница 316: ...lt te er r There are two ways to block the facebook service Web Content Filter and URL Content Filter Web Content Filter Benefits Easily and quickly implement the category website that you want to blo...

Страница 317: ...Vigor2133 Series User s Guide 305 2 Open CSM Web Content Filter Profile to create a WCF profile Check Social Networking with Action Block 3 Enable this profile in Firewall General Setup Default Rule...

Страница 318: ...RL Content Filter A Block the web page containing the word of Facebook 1 Open Object Settings Keyword Object Click an index number to open the setting page 2 In the field of Contents please type faceb...

Страница 319: ...configured from the drop down list in the field of URL Content Filter Now users cannot open any web page with the word facebook inside B Disallow users to play games on Facebook 1 Open Object Setting...

Страница 320: ...page 4 Configure the settings as the following figure 5 When you finished the above steps please open Firewall General Setup 6 Click the Default Rule tab Choose the profile just configured from the d...

Страница 321: ...Vigor2133 Series User s Guide 309...

Страница 322: ...Vigor2133 Series User s Guide 310 This page is left blank...

Страница 323: ...ng Configuration Backup Syslog Mail Alert Time and Date Management Reboot System Firmware Upgrade and Activation It is used to control the bandwith of data transmission through configuration of Sessio...

Страница 324: ...etup there are several items that you have to know the way of configuration System Status TR 069 Administrator Password User Password Login Page Greeting Configuration Backup Syslog Mail Alert Time an...

Страница 325: ...d information from this presentation Available settings are explained as follows Item Description Model Name Display the model name of the router Firmware Version Display the firmware version of the r...

Страница 326: ...ay the connection type IP Address Display the IP address of the WAN interface Default Gateway Display the assigned IP address of the default gateway IPv6 Address Display the IPv6 address for LAN Scope...

Страница 327: ...e g VigorACS Available settings are explained as follows Item Description Tr069 Click Enable to activate the settings on this page ACS Server On Choose the interface for the router connecting to ACS...

Страница 328: ...st to the server for the purpose of maintaining the binding in the Gateway Please type a number as the minimum period The default setting is 60 seconds Maximum Keep Alive Period If STUN is enabled the...

Страница 329: ...hours for CPE to send a notification of bandwidth utilization to VigorACS WAN Choose the WAN interface for applying the bandwidth utilization notification mechanism Threshold Level Set the percentage...

Страница 330: ...ord Type in the new password again Password Strength Display the security strength of the password specified above Administrator Local User The administrator can login web user interface of Vigor rout...

Страница 331: ...it on the field of User Name Later click Edit to update the information Delete If the local user listed on the box above is not satisfied simply click the username and click Delete to remove it Enabl...

Страница 332: ...or password Password Type in new password in this field The length of the password is limited to 31 characters Confirm Password Type in the new password again Password Strength Display the security st...

Страница 333: ...ng screen will appear Simply click OK 4 Log out Vigor router web user interface by clicking the Logout button 5 The following window will be open to ask for username and password Type the new user pas...

Страница 334: ...ith User Mode will be shown as follows Settings to be configured in User Mode will be less than settings in Admin Mode Only basic configuration settings will be available in User Mode Info Setting in...

Страница 335: ...Item Description Enable Check this box to enable the login customization function Login Page Title Type a brief description e g Welcome to DrayTek which will be shown on the heading of the login dial...

Страница 336: ...Vigor2133 Series User s Guide 324...

Страница 337: ...tem Maintenance Configuration Backup The following page will be popped up as shown below Available settings are explained as follows Item Description Restore Choose File Click it to specify a file to...

Страница 338: ...for downloading Periodicity backup Set the circle duration for backup Backup after change configuration Backup will be executed whenever the configuration is changed Support Model List Web configurati...

Страница 339: ...ing examples The Mac or Linux platform will appear different windows but the backup function is still available Info Backup for Certification must be done independently The Configuration Backup does n...

Страница 340: ...328 2 Click Choose File button to choose the correct configuration file for uploading to the router 3 Click Restore button and wait for few seconds the following picture will tell you that the restor...

Страница 341: ...ement If there is no name here simply lick the link to access into System Maintenance Management to set the router name Server IP Hostname The IP address of the Syslog server Destination Port Assign a...

Страница 342: ...eck this box to activate this function while using e mail application User Name Type the user name for authentication Password Type the password for authentication Enable E mail Alert Check the box to...

Страница 343: ...1 3 From the Syslog screen select the router you want to monitor Be reminded that in Network Information select the network adapter used to connect to the router Otherwise you won t succeed in retriev...

Страница 344: ...ect to inquire time information from Time Server on the Internet using assigned protocol Time Server Type the web site of the time server Priority Choose Auto or IPv6 First as the priority Time Zone S...

Страница 345: ...Available settings are explained as follows Item Description Enable SNMP Agent Check it to enable this function Get Community Set the name for getting community by typing a proper character The defaul...

Страница 346: ...community Trap Timeout The default setting is 10 seconds Enable SNMPV3 Agent Check it to enable this function USM User USM means user based security mode Type a username which will be used for authent...

Страница 347: ...CVM Access Control and Device Management The management pages for IPv4 and IPv6 protocols are different F Fo or r I IP Pv v4 4 Available settings are explained as follows Item Description Router Name...

Страница 348: ...user defined port numbers for the Telnet HTTP HTTPS FTP TR 069 and SSH servers Default Ports Check to use standard port numbers for the Telnet and HTTP servers TLS SSL Encryption Setup Enable SSL 3 0...

Страница 349: ...Check the box es to specify Disable PING from the Internet Check the checkbox to disable all PING packets from the Internet For security issue this function is enabled by default Access List from the...

Страница 350: ...e several servers provided by the system which allow you to manage the router from LAN interface Check the box es to specify Apply To Subnet Check the LAN interface for the administrator to use for ac...

Страница 351: ...illuminate or blink continuously to show the status of the various functions in the router However they can be configured to remain off at all times or remain off until a button is pressed to wake the...

Страница 352: ...Wake up LED button on this page press the Wireless On Off WPS button on the front panel press the Factory Reset button on the front panel LEDs are awake To put them to sleep immediately press the LED...

Страница 353: ...disable the ability of the Wireless button to control WLAN and WPS functions Disabling the wireless button only prevents it from being used to control WLAN functions It can still be used to wake up th...

Страница 354: ...to refresh the page to display the latest information Port The number corresponds to the LAN port number shown on the front panel Enable Deselect to disable the LAN port The default value is enabled S...

Страница 355: ...self signed certificate is signed with its own private key The self signed certificate will be applied in SSL VPN HTTPS and so on In addition it can be created for free by using a wide variety of tool...

Страница 356: ...Vigor2133 Series User s Guide 344...

Страница 357: ...dule web page and you can use the number that you have set in that web page If you want to reboot the router using the current configuration check Using current configuration and click Reboot Now To r...

Страница 358: ...w wa ar re e U Up pg gr ra ad de e Click System Maintenance Firmware Upgrade to proceed to firmware upgrade Click Select to specify the one you just download When the above page appears click Upgrade...

Страница 359: ...mechanism for your computer Click System Maintenance Activation to open the following page for accessing http myvigor draytek com Available settings are explained as follows Item Description Activate...

Страница 360: ...Vigor2133 Series User s Guide 348 Below shows the successful activation of Web Content Filter...

Страница 361: ...traffic can be throttled back to a lower speed If there s no defined priority to specify which packets should be discarded or in another term dropped from an overflowing queue packets of sensitive app...

Страница 362: ...the backbone will do the same checking before executing treatments in order to ensure service level consistency throughout the whole QoS enabled network However each node may take different attitude...

Страница 363: ...the Bandwidth Management menu click Sessions Limit to open the web page To activate the function of limit session for IPv4 and or IPv6 simply click Enable and set the default session limit Available s...

Страница 364: ...c limitation you set for each index Add Adds the specific session limitation onto the list above Edit Allows you to edit the settings for the selected limitation Delete Remove the selected settings ex...

Страница 365: ...activate the function of limit bandwidth IP Routed Subnet Check this box to apply the bandwidth limit to the second subnet specified in LAN General Setup It is available for IPv4 settings only Disabl...

Страница 366: ...tation onto the list above Edit Allow you to edit the settings for the selected limitation Delete Remove the selected settings existing on the limitation list Allow auto adjustment Check this box to m...

Страница 367: ...ll influence Class 1 Class2 Class 3 Others Display the bandwidth percentage for each class UDP Bandwidth Control Display the UDP bandwidth control is enabled or not Online Statistics Display an online...

Страница 368: ...y click the Edit link to access into next for configuration You can configure general setup for the WAN interface edit the Class Rule and edit the Service Type for the Class Rule for your request O On...

Страница 369: ...the Online Statistics link appearing on this page WAN Inbound Bandwidth It allows you to set the connecting rate of data input for other WAN For example if your ADSL supports 1M of downstream and 256K...

Страница 370: ...ation of QoS It is suggested to set the bandwidth value for inbound outbound as 80 85 of physical network speed provided by ISP to maximize the QoS performance E Ed di it t t th he e C Cl la as ss s R...

Страница 371: ...urce address For Single Address you have to fill in Start IP address For Range Address you have to fill in Start IP address and End IP address For Subnet Address you have to fill in Start IP address a...

Страница 372: ...of that one and click Edit to open the rule edit page for modification E Ed di it t t th he e S Se er rv vi ic ce e T Ty yp pe e f fo or r C Cl la as ss s R Ru ul le e 1 To add a new service type edi...

Страница 373: ...ter finishing all the settings here please click OK to save the configuration By the way you can set up to 10 service types If you want to edit delete an existed service type please select the radio b...

Страница 374: ...tbond bandwidth and bandwidth ratio Vigor router can perform the bandwidth management for the protocols streaming remote control web HD and so on Click Bandwidth Management APP QoS to open the followi...

Страница 375: ...elect all of the protocols Apply to all Choose one of the actions from the drop down list It is prepared for applying to all protocols Apply Click it to make the selected action be applied all of the...

Страница 376: ...elps you to well allocate the bandwidth upon your demand of Voice Video or Data transferring Let s see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below Scenario...

Страница 377: ...5 In the pop up window choose Range Address as the Address Type and type the start IP address and end IP address in relational fields Click OK to save the settings and exit the window 6 Click OK again...

Страница 378: ...me steps to add class rules for IPTV and Data Email with IP addresses as shown below and 9 Assuming you get 2MB 512Kb Internet line You can click the Setup link of WAN1 to set up the bandwidth for dif...

Страница 379: ...page check the box of Enable the QoS Control Type 30 50 and 15 in the boxes for VoIP IPTV and Data Email respectively Check the box of Enable UDP Bandwidth Control 11 Click OK to save the settings Th...

Страница 380: ...either be redirected to specific URLs or be shown messages when they first connect to the Internet through the router Users could be required to read and agree to terms and conditions or authenticate...

Страница 381: ...Enable Check the box to enable the profile Comments Shows the description of the profile Login Mode Shows the login mode used by the profile See the section Login Mode for details Applied Interface S...

Страница 382: ...the Internet S So oc ci ia al l L Lo og gi in n The following page will appear when users attempt to access the Internet for the first time via the router After authenticating themselves using either...

Страница 383: ...User s Guide 371 S So oc ci ia al l o or r P PI IN N L Lo og gi in n This login mode presents both Social Login and PIN Code Login modes to the users and allows them to select their preferred mode of...

Страница 384: ...ined as follows Item Description Enable this profile Check to enable this profile Comments Enter a brief description to identify this profile Choose Login Method Select the desired Login Mode Save and...

Страница 385: ...33 Series User s Guide 373 2 2 B Ba ac ck kg gr ro ou un nd d If you have selected a Login Mode that requires authentication select a background for the login page Available settings are explained as...

Страница 386: ...elect the background color of the login panel from the predefined color list or select Customize Color and enter the RGB value Click Preview to preview the selected color Opacity 10 100 Available when...

Страница 387: ...elcome message Terms and Conditions Description Enter the text to be displayed as the Terms and Conditions hyperlink text Terms and Conditions Content Enter the text to be displayed in the Terms and C...

Страница 388: ...c ci ia al l L Lo og gi in n a an nd d P PI IN N L Lo og gi in n This section describes the Login Page setup step if you have selected PIN Login and or Social Login as the Login Mode You will see only...

Страница 389: ...structions on obtaining an APP ID Facebook APP Secret Enter the secret configured for the APP ID entered above Refer to section A 1 How to create a Facebook App ID for Web Portal Authentication for de...

Страница 390: ...rovider used to send PIN notifications SMS providers are configured in Objects Setting SMS Mail Service Object Enter PIN Description Enter message to be displayed in the PIN textbox to prompt the user...

Страница 391: ...to the next page Cancel Click to abort the configuration process and return to the profile summary page 2 2n nd d s st ta ag ge e P Pa ag ge e f fo or r P PI IN N L Lo og gi in n If you have selected...

Страница 392: ...tem Description Back Button Description Enter text for the label of the hyperlink to return to the previous page PIN Code Message Enter text to be displayed as the body text on the page Default Countr...

Страница 393: ...summary page 4 4 W Wh hi it te el li is st t S Se et tt ti in ng g In this step you can configure the whitelist settings Users are allowed to send and receive traffic that satisfies whitelist settings...

Страница 394: ...the configuration on this page and proceed to the next page Cancel Click to abort the configuration process and return to the profile summary page 5 5 M Mo or re e O Op pt ti io on ns s In this step...

Страница 395: ...he operating system s built in Captive Portal Detection Landing Page After Authentication Specifies the webpage that will be displayed after the user has successfully authenticated Fixed URL The user...

Страница 396: ...ment introduces how to create Facebook APP and generate the APP ID and APP secret that can be used in Web Portal setup 1 Register as FB Developer Go to https developers facebook com and login the FB a...

Страница 397: ...igor2133 Series User s Guide 385 6 Add a New App Click on My Apps Add a New App Choose Website platform 7 Click Skip and Create App ID on first use Type Display Name Choose Category Click Create App I...

Страница 398: ...Vigor2133 Series User s Guide 386 8 Pops up security check window select the answer and then click Submit to finish the process...

Страница 399: ...Add Platform on My Apps Go to Settings then click Add Platform 11 Choose Website in Select Platform window 12 Enter the Site URL as http portal draytek com Note If you change http port in the vigor pl...

Страница 400: ...8 13 Set up Client OAuth Go to Settings Advanced Client OAuth Settings enter http portal draytek com in Valid OAuth redirect URIs and save changes 14 Go to My Apps Status Review and switch available s...

Страница 401: ...Vigor2133 Series User s Guide 389...

Страница 402: ...LAN clients by their Google or Facebook account This document introduces how to create Facebook APP and generate the APP ID and APP secret that can be used in Web Portal setup 1 Create Developer proj...

Страница 403: ...er name Set Authorized JavaScript origins and Authorized redirect URLs as http portal draytek com and click Create Note If you change http port in the vigor please add http port in URLs For example we...

Страница 404: ...t wireless coverage will be clearly indicated through simulated signal strength A AP P M Ma ai in nt te en na an nc ce e Vigor router can execute configuration backup configuration restoration firmwar...

Страница 405: ...the settings summary of the access point Device Name The name of the AP managed by Vigor router will be displayed here IP Address Display the true IP address of the access point SSID Display the SSID...

Страница 406: ...ed up Version Display the firmware version used by the access point Password Vigor2133 can get related information of the access point by accessing into the web user interface of the access point This...

Страница 407: ...y such wireless profile Security Display the security mode selected by such wireless profile Multi SSID Enable means multiple SSIDs more than one are active Disable means only SSID1 is active WLAN ACL...

Страница 408: ...pplied to the selected access point immediately Later the access point will reboot To Local WLAN Profile configured in this page is specified for VigorAP connected to Vigor router If required these se...

Страница 409: ...th he e w wi ir re el le es ss s L LA AN N p pr ro of fi il le e 1 Select the WLAN profile index number 1 to 5 you want to edit 2 Click the index number link to display the following page Info The fun...

Страница 410: ...Vigor2133 Series User s Guide 398 3 After finished the general settings configuration click Next to open the following page for 2 4G wireless security settings...

Страница 411: ...ove web page configuration click Next to open the following page for 5G wireless security settings 5 When you finished the above web page configuration click Finish to exit and return to the first pag...

Страница 412: ...eboot can be performed to more than one AP at one time by using Vigor2133 Available settings are explained as follows Item Description Action There are four actions provided by Vigor router to manage...

Страница 413: ...action V VI I 4 4 4 4 T Tr ra af ff fi ic c G Gr ra ap ph h Click Traffic Graph to open the web page Choose one of the managed Access Points LAN A or LAN B daily or weekly for viewing data transmissio...

Страница 414: ...ting to the access point The purpose is to prevent lots of stations connecting to access point at the same time and causing traffic unbalanced Please define the required station number for WLAN 2 4GHz...

Страница 415: ...ngth if it is less than When the access point is overload e g reaching the limit of station number or limit of network traffic it will terminate the network connection of the client s station with the...

Страница 416: ...ev vi ic ce es s Available settings are explained as follows Item Description External Device Syslog Check this box to display information of the detected device on Syslog External Device Auto Discove...

Страница 417: ...Vigor2133 Series User s Guide 405 When you finished the configuration click OK to save it Info Only DrayTek products can be detected by this function...

Страница 418: ...Vigor2133 Series User s Guide 406 This page is left blank...

Страница 419: ...ress service type keyword file extension and others These pre defined objects can be applied in CSM USB device connected on Vigor router can be regarded as a server or WAN interface By way of Vigor ro...

Страница 420: ...ries User s Guide 408 V VI II I 1 1 O Ob bj je ec ct ts s S Se et tt ti in ng gs s Define objects such as IP address service type keyword file extension and others These pre defined objects can be app...

Страница 421: ...range usually will be applied in configuring router s settings therefore we can define them with objects and bind them with groups for using conveniently Later we can select that object group that can...

Страница 422: ...Subnet Address Mac Address or all that IP object with the selected type will be shown on this page Set to Factory Default Clear all profiles Search Type a string of the IP object that you want to sea...

Страница 423: ...without any input data to your hard disk Download Download the CSV file from Vigor router and store in your hard disk Restore IP Object Select Click it to specify a predefined CSV file Restore Import...

Страница 424: ...if this object contains Mac address MAC Address Type the MAC address of the network card which will be controlled Start IP Address Type the start IP address for Single Address type End IP Address Type...

Страница 425: ...ws Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile To set a new profile please do the step...

Страница 426: ...ove will be shown in this box Selected IP Objects Click button to add the selected IP objects in this box 3 After finishing all the settings here please click OK to save the configuration V VI II I 1...

Страница 427: ...veral IPv6s within a range Select Subnet Address if this object contains one subnet for IPv6 address Select Any Address if this object contains any IPv6 address Select Mac Address if this object conta...

Страница 428: ...ings are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile To set a new...

Страница 429: ...v6 Objects Click button to add the selected IPv6 objects in this box 3 After finishing all the settings please click OK to save the configuration V VI II I 1 1 5 5 S Se er rv vi ic ce e T Ty yp pe e O...

Страница 430: ...columns are available for TCP UDP protocol It can be ignored for other protocols The filter rule will filter out any port number when the first and last value are the same it indicates one port when t...

Страница 431: ...6 6 S Se er rv vi ic ce e T Ty yp pe e G Gr ro ou up p This page allows you to bind several service types into one group Available settings are explained as follows Item Description Set to Factory De...

Страница 432: ...ngs are explained as follows Item Description Name Type a name for this profile Maximum 15 characters are allowed Available Service Type Objects All the available service objects that you have added o...

Страница 433: ...t 200 keyword object profiles for choosing as black white list in CSM URL Web Content Filter Profile Available settings are explained as follows Item Description Set to Factory Default Clear all profi...

Страница 434: ...are explained as follows Item Description Name Type a name for this profile e g game Maximum 15 characters are allowed Contents Type the content for such profile For example type gambling as Contents...

Страница 435: ...t in CSM URL Web Content Filter Profile Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure N...

Страница 436: ...elected Keyword objects in this box 3 After finishing all the settings please click OK to save the configuration V VI II I 1 1 9 9 F Fi il le e E Ex xt te en ns si io on n O Ob bj je ec ct t This page...

Страница 437: ...s 2 The configuration page will be shown as follows Available settings are explained as follows Item Description Profile Name Type a name for this profile The maximum length of the name you can set is...

Страница 438: ...ce Each item is explained as follows Item Description Set to Factory Default Clear all of the settings and return to factory default settings Index Display the profile number that you can configure Pr...

Страница 439: ...name Type a user name that the sender can use to register to selected SMS provider The maximum length of the name you can set is 31 characters Password Type a password that the sender can use to regis...

Страница 440: ...router offers several SMS service provider to offer the SMS service However if your service provider cannot be found from the service provider list simply use Index 9 and Index 10 to make customized S...

Страница 441: ...o selected SMS provider The maximum length of the password you can set is 31 characters Quota Type the total number of the messages that the router will send out Sending Interval Type the shortest tim...

Страница 442: ...SMTP Port Type the port number for SMTP server Sender Address Type the e mail address of the sender Use SSL Check this box to use port 465 for SMTP server for some e mail server uses https as the tra...

Страница 443: ...t ti io on n O Ob bj je ec ct t This page allows you to set ten profiles which will be applied in Application SMS Mail Alert Service You can set an object with different monitoring situation To set a...

Страница 444: ...cription Profile Name Type a name for such notification profile The maximum length of the name you can set is 15 characters Category Display the types that will be monitored Status Display the status...

Страница 445: ...are explained as follows Item Description Add Click it to open the following page for adding a new string object Set to Factory Default Click it to clear all of the settings in this page Index Displa...

Страница 446: ...Log into the web user interface of Vigor router 2 Configure relational objects first Open Object Settings SMS Mail Server Object to get the following page Index 1 to Index 8 allows you to choose the b...

Страница 447: ...e event conditions of the notification 6 Choose any index number e g Index 1 in this case to configure conditions for sending the SMS In the following page type the name of the profile and check the D...

Страница 448: ...SMS Then type the phone number in the field of Recipient the one who will receive the SMS 9 Click OK to save the settings Later if one of the WAN connections fails in your router the system will send...

Страница 449: ...P Pr ro ov vi id de er r Choose one of the Index numbers 9 or 10 allowing you to customize the SMS Provider In the web page type the URL string of the SMS provider and type the username and password...

Страница 450: ...er clients on LAN can access write and read data stored in USB storage disk with different applications After setting the configuration in USB Application you can type the IP address of the Vigor rout...

Страница 451: ...USB storage disk into the Vigor router please make sure the memory format for the USB storage disk is FAT16 or FAT32 It is recommended for you to use FAT32 for viewing the filename completely FAT16 c...

Страница 452: ...ters Both them cannot contain any of the following Workgroup Name Type a name for the workgroup Host Name Type the host name for the router Printer Server Enable Click it to make Vigor router act as a...

Страница 453: ...d for FTP firmware upgrade usage Note FTP Passive mode is not supported by Vigor Router Please disable the mode on the FTP client Password Type the password for FTP SMB users for accessing FTP server...

Страница 454: ...disk into the USB interface of the Vigor router Otherwise you cannot save the configuration V VI II I 2 2 3 3 F Fi il le e E Ex xp pl lo or re er r File Explorer offers an easy way for users to view...

Страница 455: ...Available settings are explained as follows Item Description Connection Status If there is no USB device connected to Vigor router No Disk Connected will be shown here Disk Capacity It displays the t...

Страница 456: ...communications room is overheating During summer in particular it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures The inclus...

Страница 457: ...t Choose the display unit of the temperature There are two types for you to choose Alarm Settings Enable Syslog Alarm The temperature log will be recorded on Syslog if it is enabled Upper temperature...

Страница 458: ...es User s Guide 446 V VI II I 2 2 6 6 M Mo od de em m S Su up pp po or rt t L Li is st t Such page provides the information about the brand name and model name of the USB modems which are supported by...

Страница 459: ...Guide 447 V VI II I 2 2 7 7 S SM MB B C Cl li ie en nt t S Su up pp po or rt t L Li is st t SMB Client Support List provides the test status information for applications with file sharing operated un...

Страница 460: ...USB Applicaiton File Explorer If it is necessary for you to delete copy files on the device or write paste files to the devcie it must be done through SMB server or FTP server SMB service is based on...

Страница 461: ...SB User Management Click Enable to enable FTP User account Here we add a new account user1 and assign authorities Read Write and List to it 4 Click OK to save the configuration 5 Make sure the FTP ser...

Страница 462: ...SB Application USB Disk Status The information for FTP server will be shown as below Now users in LAN of Vigor2133 can access into the USB storage device by typing ftp 192 168 1 1 on any browser They...

Страница 463: ...51 P Pa ar rt t V VI II II I T Tr ro ou ub bl le es sh ho oo ot ti in ng g This part will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and...

Страница 464: ...low to check your basic installation status stage by stage Checking if the hardware status is OK or not Checking if the network connection settings on your computer are OK or not Pinging the router fr...

Страница 465: ...1 1 1 D Di ia al l o ou ut t T Tr ri ig gg ge er ri in ng g Click Diagnostics and click Dial out Triggering to open the web page The internet connection e g PPPoE is triggered by a package sending fr...

Страница 466: ...ide 454 V VI II II I 1 1 2 2 R Ro ou ut ti in ng g T Ta ab bl le e Click Diagnostics and click Routing Table to open the web page Available settings are explained as follows Item Description Refresh C...

Страница 467: ...dress Resolution Protocol cache held in the router The table shows a mapping between an Ethernet hardware address MAC Address and an IP address Available settings are explained as follows Item Descrip...

Страница 468: ...ping between an Ethernet hardware address MAC Address and an IPv6 address This information is helpful in diagnosing network problems such as IP address conflicts etc Click Diagnostics and click IPv6 N...

Страница 469: ...CP Table to open the web page Available settings are explained as follows Item Description Index It displays the connection item number IP Address It displays the IP address assigned by this router fo...

Страница 470: ...ble settings are explained as follows Item Description Private IP Port It indicates the source IP address and port of local PC Pseudo Port It indicates the temporary port of the router used for NAT Pe...

Страница 471: ...nd displayed on Diagnostics DNS Cache Table Available settings are explained as follows Item Description Clear Click this link to remove the result on the window Refresh Click it to reload the page Wh...

Страница 472: ...escription IPV4 IPV6 Choose the interface for such function Ping to Use the drop down list to choose the destination that you want to ping IP Address Type the IP address of the Host IP that you want t...

Страница 473: ...P session limit before invoking Data Flow Monitor If not a notification dialog box will appear to remind you enabling it Click Diagnostics and click Data Flow Monitor to open the web page You can clic...

Страница 474: ...ied PC accessing into Internet within 5 minutes Unblock The device with the IP address will be blocked for five minutes The remaining time will be shown on the session column Click it to cancel the IP...

Страница 475: ...k Reset to zero the accumulated RX TX received and transmitted data of WAN Click Refresh to renew the graph at any time The horizontal axis represents time Yet the vertical axis has different meanings...

Страница 476: ...dress of the host in the box and click Run The result of route trace will be shown on the screen or Available settings are explained as follows Item Description IPv4 IPv6 Click one of them to display...

Страница 477: ...ailable settings are explained as follows Item Description Enable Web Syslog Check this box to enable the function of Web Syslog Syslog Type Use the drop down list to specify a type of Syslog to be di...

Страница 478: ...for each event V VI II II I 1 1 1 13 3 I IP Pv v6 6 T TS SP PC C S St ta at tu us s IPv6 TSPC status web page could help you to diagnose the connection status of TSPC If TSPC has configured properly...

Страница 479: ...vironment to find out if there is any abnormal connection Information of IP traced and destination port used for SYN Flood UDP Flood and ICMP Flood attacks will be detected and shown respectively on d...

Страница 480: ...age will be blocked forever Available settings are explained as follows Item Description White Passing IP List Black Blocking IP List Type the IP address in this field and click Add It will be added t...

Страница 481: ...e Vigor router analyze how multiple packets in a specified file will be sent by a route policy Packet Information Specify the nature of the packets to be analyzed by Vigor router ICMP UDP TCP ANY Spec...

Страница 482: ...of analyzing The analyzed result will be shown on the page If required click export analysis to export the result as a file Note that the analysis was based on the current load balance route policy s...

Страница 483: ...hardware status 1 Check the power line and WLAN LAN cable connections Refer to I 2 Hardware Installation for details 2 Turn on the router Make sure the Activity LED blink once per second and the corr...

Страница 484: ...he link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s Info The example is based on Windows 7 As to the examples...

Страница 485: ...r2133 Series User s Guide 473 4 Select Internet Protocol Version 4 TCP IP and then click Properties 5 Select Obtain an IP address automatically and Obtain DNS server address automatically Finally clic...

Страница 486: ...ide 474 F Fo or r M Ma ac c O OS S 1 Double click on the current used Mac OS on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop d...

Страница 487: ...g the router correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista 7 The DOS command di...

Страница 488: ...Vigor2133 Series User s Guide 476...

Страница 489: ...on or not If not please install an additional switch for connecting both Vigor router and the modem offered by ISP Then check if the LEDs on Vigor router are on or not If the problem of LEDs cannot be...

Страница 490: ...r re e R Re es se et t You can reset the router to factory default via Web page Such function is available in Admin Mode only Go to System Maintenance and choose Reboot System on the web page The foll...

Страница 491: ...C Co on nt ta ac ct ti in ng g D Dr ra ay yT Te ek k If the router still cannot work correctly after trying many efforts please contact your dealer for further help right away For any questions pleas...

Страница 492: ...he difficulty is how to handle the traffics between two or more Ethernet switches Thus VLAN is suitable for some circumstances for example the rental apartment SOHO office and so on These clients may...

Страница 493: ...packet as the VID of Trunk port while forwarding the packets to another switch Bridge mode of WAN P1 and P2 are doing NAT flow to access to the internet but P3 and P4 will forward the packets between...

Страница 494: ...Vigor2133 Series User s Guide 482...

Страница 495: ...Vigor2133 Series User s Guide 483 LAN V VL LA AN N a ap pp pl li ic ca at ti io on ns s o on n V Vi ig go or r r ro ou ut te er r Multi Subnet VLAN of LAN...

Страница 496: ...ver LAN1 LAN2 LAN3 LAN4 However the traffics of the LAN port or SSID that are NOT being grouped in the same VLAN are unable to forward to each other The benefit of Port based is able to extend the wir...

Страница 497: ...to be isolated from your private network due to the security considerations it can be done by above settings However a switch support VLAN function is need if VLAN Tag enabled Triple Play Multi WAN N...

Страница 498: ...Vigor2133 Series User s Guide 486...

Страница 499: ...dge mode with VLAN Set top box STB or the other kinds of media devices are able to attach with Port4 or Port5 of LAN Those devices that attached with Port4 or Port5 are able to access the services net...

Страница 500: ...Vigor2133 Series User s Guide 488 This page is left blank...

Страница 501: ...Vigor2133 Series User s Guide 489 P Pa ar rt t I IX X T Te el ln ne et t C Co om mm ma an nd ds s...

Страница 502: ...Windows Features of Telnet Client has been turned on under Control Panel Programs Type cmd and press Enter The Telnet terminal will be open later In the following window type Telnet 192 168 1 1 as be...

Страница 503: ...ide 491 For users using previous Windows system e g 2000 XP simply click Start Run and type Telnet 192 168 1 1 in the Open box as below Next type admin admin for Account Password And type to get a lis...

Страница 504: ...PPE Profile 1 was setted T Te el ln ne et t C Co om mm ma an nd d c cs sm m a ap pp pe e s se et t It is used to configure group settings for IM P2P Protocol and Others in APP Enforcement Profile csm...

Страница 505: ...2 4 0 T Te el ln ne et t C Co om mm ma an nd d c cs sm m a ap pp pe e c co on nf fi ig g It is used to display the configuration status enabled or disabled for IM P2P Protocol Other applications csm a...

Страница 506: ...ac ce e It is used to configure APPE signature download interface csm appe interface AUTO WAN S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n P Pa ar ra am me et te er r D De es sc cr ri ip pt ti...

Страница 507: ...filter profile S Sy yn nt ta ax x csm ucf show csm ucf setdefault csm ucf msg MSG csm ucf obj INDEX n PROFILE_NAME l P B A N uac wf csm ucf obj INDEX n PROFILE_NAME csm ucf obj INDEX p VALUE csm ucf o...

Страница 508: ...f obj INDEX uac e csm ucf obj INDEX uac d csm ucf obj INDEX uac a P B csm ucf obj INDEX uac i E D csm ucf obj INDEX uac o KEY_WORD_Object_Index csm ucf obj INDEX uac g KEY_WORD_Group_Index S Sy yn nt...

Страница 509: ...mp pl le e csm ucf obj 1 uac i E Log none Priority Select Bundle Pass URL Access Control Enable URL Access Control Action pass v Prevent web access from IP address No Obj NO Object Name No Grp NO Gro...

Страница 510: ...eb feature d It means to disable the restriction of web feature a Set the action of web feature P or B B Block The web access meets the web feature will be blocked P Pass The web access meets the web...

Страница 511: ...age MSG means the content less than 255 characters of the message itself setdefault It means to return to default settings for all of the profile obj It means to specify the object profile INDEX It me...

Страница 512: ...ames Sports Travel Leisure Recreation Fashin Beauty Business Job Search Web based Emai Chat Instant Messaging Anonymizers Forums Newsgroups Computers Technology Download Sites Streaming Media Download...

Страница 513: ...es Sports Travel Leisure Recreation Fashion Beauty T Te el ln ne et t C Co om mm ma an nd d c cs sm m d dn ns sf f It means to configure the settings regarding to DNS filter csm dnsf enable ON OFF csm...

Страница 514: ...page to describe that the page is not allowed to be visisted ON Enable the function of displaying message page OFF Disable the function of displaying message page SHOW Display the function of displayi...

Страница 515: ...ma an nd d d dd dn ns s t ti im me e Sets and displays the DDNS time S Sy yn nt ta ax x ddns time update in minutes S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description Update i...

Страница 516: ...defense function for a specific attack s ATTACK_0 It means to specify a name of the following attacks ip_option tcp_flag land teardrop smurf pingofdeath traceroute icmp_frag syn_frag unknow_proto fra...

Страница 517: ...ne as a fixed IP w ip address It means to assign WAN IP address for such connection Please type an IP address here for WAN port n netmask It means to assign netmask for WAN connection You have to type...

Страница 518: ...MTU 1000 1440 for USB DHCP mode E Ex xa am mp pl le e internet M 1 S tcom u username p password a 0 t 1 i 0 0 0 0 WAN1 Internet Mode set to PPPoE PPPoA WAN1 ISP Name set to tcom WAN1 Username set to...

Страница 519: ...ss Specify an IP address The system will set the one that you specified as the public subnet IP address E Ex xa am mp pl le e ip pubaddr ip addr public subnet IP address Now 192 168 0 1 ip pubaddr 192...

Страница 520: ...eans to create a new WAN IP address remove It means to delete an existed WAN IP address IP It means the auxiliary WAN IP address Join to NAT Pool 0 disable or 1 enable index Type the index number of t...

Страница 521: ...e PC must be fixed with the same LAN IP address network segment set by this command for accessing into the web user interface of the router Later modify the start addresses for the DHCP server T Te el...

Страница 522: ...indicates the direction for the arp function 0 1 2 3 4 5 0 disable to accept illegal source mac address 1 enable to accept illegal source mac address 2 disable to accept illegal dest mac address 3 ena...

Страница 523: ...e 1 w 1 2 c 18 v path1 T Te el ln ne et t C Co om mm ma an nd d i ip p p pi in ng g This command allows users to ping IP address of WAN1 WAN2 PVC3 PVC4 PVC5 for verifying if the WAN connection is OK o...

Страница 524: ...me out 4 168 95 90 66 50ms 5 211 22 38 134 50ms 6 220 128 2 62 50ms Trace complete T Te el ln ne et t C Co om mm ma an nd d i ip p t te el ln ne et t This command allows users to access specified devi...

Страница 525: ...Vigor2133 Series User s Guide 513 0 1 2 0 means disable 1 means first subnet and 2 means second subnet E Ex xa am mp pl le e ip rip 1 Set RIP LAN1...

Страница 526: ...setting for specified WAN interface 1 Enable the function of setting RIP of WAN IP 0 Disable the function E Ex xa am mp pl le e ip wanrip Valid ex ip wanrip ifno e 0 1 ifno 1 WAN1 3 PVC3 4 PVC4 5 PVC...

Страница 527: ...on netmask It means the netmask of the specified IP address gateway It means the gateway of the connected router ifno It means the connection interface 3 WAN1 rtype It means the type of the route defa...

Страница 528: ...on off display or get more information of the T_home service query It means to set IGMP general query interval The default value is 125000 ms ppp 0 No need to set IGMP with PPP header 1 Set IGMP with...

Страница 529: ...tion Off it will drop LEAVE if still clients on the same group separate It means to set IGMP packets being separated by NAT Bridge On The packets will be separated Off The packets will not be separate...

Страница 530: ...and allows users to set DMZ mode ip dmzswitch off ip dmzswitch private ip dmzswitch active_trueip S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description off It means to turn off DM...

Страница 531: ...access Internet through the router Unblock The specified IP can access Internet through the router add It means to add the session limits in an IP range del It means to delete the session limits in a...

Страница 532: ...for this command tx It means to set transmission rate for bandwidth limit rx It means to set receiving rate for bandwidth limit shared It means that the bandwidth will be shared for the IP range E Ex...

Страница 533: ...f the pair of binded one add It means to add one ip bindmac del It means to delete one ip bindmac IP It means to type the IP address for binding with specified MAC address MAC It means to type the MAC...

Страница 534: ...in several commands in one line General Setup for Policy Route i value Specify an index number for setting policy route profile Value 1 to 60 1 means to get a free policy index automatically e 0 1 0 D...

Страница 535: ...0 250 The default value is 150 I value Indicate the interface specified for the policy route profile Value Available interfaces include LAN1 LAN4 IP_Routed_Subnet DMZ_Subnet WAN1 WAN3 VPN_PROFILE_1 VP...

Страница 536: ...because the send to interface of the matched ip policy_rt i 1 o add 1 range s 192 168 1 10 S 192 168 1 20 2 ip_range d 202 211 100 10 D 202 211 100 20 g 202 211 100 1 I WAN1 T Te el ln ne et t C Co om...

Страница 537: ...nly same subnet packet z It means to update LAN DNS configuration to DNS cache E Ex xa am mp pl le e ip lanDNSRes i 1 n ftp drayTek com Configure Set1 s DomainName ftp drayTek com ip lanDNSRes i 1 n f...

Страница 538: ...N2 LAN4 WAN1 WAN2 USB VPN1 VPN32 ip6 addr a LAN1 LAN2 LAN4 WAN1 WAN2 USB VPN1 VPN32 ip6 addr v LAN1 LAN2 LAN4 WAN1 WAN2 USB ip6 addr o prefix prefix length WAN1 WAN2 USB ip6 addr l prefix prefix lengt...

Страница 539: ...one line a It means to show current DHCPv6 status s It means to ask the SIP S It means to ask the SIP name d It means to ask the DNS setting D It means to ask the DNS name n It means to ask NTP i It...

Страница 540: ...enable disable server DUID set by Link layer and time d It means to display the client DUID A parameter It means to set authentication protocol 0 Undefine 2 delayed protocol R parameter It means to s...

Страница 541: ...IPv6 address of the address pool r 1 0 It means to enable 1 or disable 0 auto_range d addr It means to set the first DNS IPv6 address D addr It means to set the second DNS IPv6 address m 1 0 It means...

Страница 542: ...n means different selections Default is WAN1 n 1 WAN1 n 2 WAN2 n 3 WAN3 n X WANx M n M means to set Internet Access Mode Mandatory and n means different modes represented by 0 5 n 0 Offline n 1 PPP n...

Страница 543: ...2nd DNS Server IP server IPv6 Addr t dhcp ra none It means to set ipv6 PPP WAN test mode for DHCP or RA V It means to view IPv6 Internet Access Profile k It means to dial the Tunnel on the WAN j It me...

Страница 544: ...S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description s It means to add a neighbour d It means to delete a neighbour a It means to show neighbour status inet6_addr Type an IPv6 ad...

Страница 545: ...Co om mm ma an nd d i ip p6 6 r ro ou ut te e This command allows you to set route for IPv6 connection S Sy yn nt ta ax x ip6 route s prefix prefix length gateway LAN1 LAN2 LAN4 WAN1 WAN2 USB VPN1 VP...

Страница 546: ...data_size S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description IPV6 address Host It means to specify the IPv6 address or host for ping LAN1 LAN2 LAN4 WAN1 WAN2 USB It means to s...

Страница 547: ...1 330 ms 3 2001 4DE0 A 1 330 ms 4 2001 4DE0 1000 34 1 340 ms 5 2001 7F8 1 A501 5169 1 330 ms 6 2001 4860 1 0 4B3 350 ms 7 2001 4860 8 0 2DAF 330 ms 8 2001 4860 2 0 66E 340 ms 9 Request timed out 10 2...

Страница 548: ...t means to set RA default lifetime i lifetme It means to set RA min interval time sec I lifetme It means to set RA MAX interval time sec h hoplimit It means to set RA hop limit m mtu auto It means to...

Страница 549: ...used to execute management through Internet index It means the number 1 2 and 3 allowed to be configured for IPv6 management remove It means to remove delete the specified index number with IPv6 setti...

Страница 550: ...ws you to set IPv6 settings for WAN interface with connection type of AICCU S Sy yn nt ta ax x ip6 aiccu i ifno r ip6 aiccu i ifno s S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Desc...

Страница 551: ...ax x D De es sc cr ri ip pt ti io on n Parameter Description h It is used to display the usage of such command l n It means to selete LAN interface to be set n 1 LAN1 n 2 LAN2 x LANx Default is LAN1 w...

Страница 552: ...ault is show all n 1 LAN1 n 2 LAN2 4 LAN4 n 5 DMZ E Ex xa am mp pl le e ip6 lan l 1 w 1 d 2001 4860 4860 8888 o 1 f 0 s 2 Set primary WAN1 Set 1st DNS server 2001 4860 4860 8888 Set Other Option Enabl...

Страница 553: ...settings add It means to add the session limit for an IPv6 range IP1 IP2 Specify a range for IPv6 addresses del It means to delete the session limit for an IPv6 range by first IP IP1 or del all E Ex...

Страница 554: ...th rate is Tx 2000K Rx 8000K bps T Te el ln ne et t C Co om mm ma an nd d i ip pf f v vi ie ew w IPF users to view the version of the IP filter to view set the log flag to view the running IP filter r...

Страница 555: ...og of passed packet Type 2 to display the log of blocked packet Type 3 to display the log of non matching packet p VALUE It means to setup actions for packet not matching any rule e g p 1 Type 0 to le...

Страница 556: ...Non Strict QOS Class None APP Enforcement None URL Content Filter None WEB Content Filter None DNS Filter None Load Balance policy Auto select CodePage ANSI 1252 Latin I Window size 65535 Session tim...

Страница 557: ...gle Address 2 Any Address 3 Range Address Example Set Subnet Address s u 0 192 168 1 10 255 255 255 0 Set Single Address s u 1 192 168 1 10 Set Any Address s u 2 Set Range Address s u 3 192 168 1 10 1...

Страница 558: ...d 3 Too Short F It means the Filter action you can specify 0 Pass Immediately 1 Block Immediately 2 Pass if no further match 3 Block if no further match m value It means to set the MAC Bind IP type 0...

Страница 559: ...United States 11 OEM 850 Multilingual Latin I 12 OEM 860 Portuguese 13 OEM 861 Icelandic 14 OEM 863 Canadian French 15 OEM 865 Nordic 16 ANSI OEM 874 Thai 17 ANSI OEM 932 Japanese Shift JIS 18 ANSI O...

Страница 560: ...T Te el ln ne et t C Co om mm ma an nd d i ip pf f f fl lo ow wt tr ra ac ck k This command is used to set and view flowtrack sessions S Sy yn nt ta ax x ipf flowtrack set re ipf flowtrack view f ipf...

Страница 561: ...lowtrack sessions state ipf flowtrack set e Current flow_enable 0 ipf flowtrack set e Curretn flow_enable 1 T Te el ln ne et t C Co om mm ma an nd d L Lo og g This command allows users to view log for...

Страница 562: ...0 0 0 0 Your IP 0 0 0 0 MORE q Quit Enter New Lines Space Bar Next Page T Te el ln ne et t C Co om mm ma an nd d m mn ng gt t f ft tp pp po or rt t This command allows users to set FTP port for manage...

Страница 563: ...n nd d m mn ng gt t t te el ln ne et tp po or rt t This command allows users to set telnet port for management S Sy yn nt ta ax x mngt telnetport Telnet port S Sy yn nt ta ax x D De es sc cr ri ip pt...

Страница 564: ...am mp pl le e mngt noping off No Ping Packet Out is OFF T Te el ln ne et t C Co om mm ma an nd d m mn ng gt t d de ef fe en ns se ew wo or rm m This command can block specified port for passing throu...

Страница 565: ...reference enable It means to allow the system administrators to login from the Internet disable It means to deny the system administrators to login from the Internet http https ftp telnet ssh t r069...

Страница 566: ...of IP object which is allowed to acces vigor router E It means to enable 1 disable 0 a specific IP to access vigor router f It means to flush all of the settings d It means to restore the factory defa...

Страница 567: ...tor can login from a specific host or network A maximum of three IPs subnet masks is allowed S Sy yn nt ta ax x mngt accesslist list mngt accesslist add index IP Object Index mngt accesslist remove in...

Страница 568: ...by typing a proper name max 23 characters n IP address It means to set the IPv4 address of the host that will receive the trap community T seconds It means to set the trap timeout 0 999 V It means to...

Страница 569: ...4 LAN4 IP address Type the private IP address for the specified LAN interface E Ex xa am mp pl le e msubnet addr 2 192 168 5 1 Set LAN2 subnet IP address done This setting will take effect after reboo...

Страница 570: ...ool Count 50 T Te el ln ne et t C Co om mm ma an nd d m ms su ub bn ne et t d dh hc cp ps s This command allows you to enable or disable DHCP server for the subnet S Sy yn nt ta ax x msubnet dhcps 2 3...

Страница 571: ...router T Te el ln ne et t C Co om mm ma an nd d m ms su ub bn ne et t g ga at te ew wa ay y This command is used to configure an IP address as the gateway used for subnet S Sy yn nt ta ax x msubnet g...

Страница 572: ...es S Sy yn nt ta ax x msubnet talk 1 2 3 4 1 2 3 4 On Off S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description 1 2 3 4 It means LAN interface 1 LAN1 2 LAN2 3 LAN3 4 LAN4 On Off O...

Страница 573: ...d d m ms su ub bn ne et t p pp pp pi ip p This command is used to configure a starting IP address for PPP connection S Sy yn nt ta ax x msubnet pppip 2 3 4 Start IP S Sy yn nt ta ax x D De es sc cr ri...

Страница 574: ...0 count 1 B node 2 P node 4 M node 8 H node msubnet nodetype 2 1 Set LAN2 Dhcp Node Type done msubnet nodetype msubnet nodetype 2 3 4 count Now LAN2 1 LAN3 0 LAN4 0 count 1 B node 2 P node 4 M node 8...

Страница 575: ...t means LAN interface 2 LAN2 3 LAN3 4 LAN4 WINS IP Type the IP address as the WINS IP E Ex xa am mp pl le e msubnet secWINS 2 192 168 3 89 Set LAN2 Dhcp Secondary WINS IP done msubnet secWINS msubnet...

Страница 576: ...ti io on n Parameter Description interface Available settings include LAN1 LAN4 IP_Routed_Subnet value 1000 1492 Bytes E Ex xa am mp pl le e msubnet mtu LAN1 1492 Set LAN1 subnet mtu as 1492 msubnet...

Страница 577: ...define an interface for the IP object INTERFACE 0 means any INTERFACE 1 means LAN INTERFACE 3 means WAN Example object ip obj 8 i 0 s INVERT It means to set invert seletion for the object profile INV...

Страница 578: ...for all profiles INDEX It means the index number of the specified group profile v It means to view the information of the specified group profile Example object ip grp 1 v n NAME It means to define a...

Страница 579: ...Vigor2133 Series User s Guide 567 8 0 9 0 10 0 11 0 object ip grp 2 a 1 2 IP Group Profile 2 Name First Interface Lan Included ip object index 0 0 1 0 2 0 3 0 4 0 5 0 6 0 7 0 8 0 9 0 10 0 11 0 Set ok...

Страница 580: ...ME Type a name with less than 15 characters Example object ipv6 obj 9 n bruce s INVERT It means to set invert seletion for the object profile INVERT 0 means disableing the function INVERT 1 means enab...

Страница 581: ...ipv6 grp INDEX v ipv6 grp INDEX n NAME ipv6 grp INDEX a IP_OBJ_INDEX S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description setdefault It means to return to default settings for al...

Страница 582: ...s sc cr ri ip pt ti io on n Parameter Description setdefault It means to return to default settings for all profiles INDEX It means the index number of the specified service object profile v It means...

Страница 583: ...range 1 65565 for TCP UDP END_P type a port number to indicate destination port Example object service obj 3 d 1 100 200 E Ex xa am mp pl le e object service obj 1 n limit object service obj 1 p 255...

Страница 584: ...3 0 4 0 5 0 6 0 7 0 object service grp 1 a 1 2 Service Group Profile 1 Name Grope_1 Included service object index 0 1 1 2 2 0 3 0 4 0 5 0 6 0 7 0 T Te el ln ne et t C Co om mm ma an nd d o ob bj je e...

Страница 585: ...om mm ma an nd d o ob bj je ec ct t f fe e This command is used to create File Extension Object profile S Sy yn nt ta ax x object fe show object fe setdefault object fe obj INDEX v object fe obj INDE...

Страница 586: ...ip bas bat com exe inf pif reg scr torrent Example object fe obj 1 e bmp E Ex xa am mp pl le e object fe obj 1 n music object fe obj 1 e Audio object fe obj 1 v Profile Index 1 Profile Name music Imag...

Страница 587: ...formation of the specified SMS object profile n NAME It means to define a name for the SMS object profile NAME Type a name with less than 15 characters s Service Provider It means to specify the numbe...

Страница 588: ...m ma ai il l This command is used to create mail object profile S Sy yn nt ta ax x object mail show object mail setdefault object mail obj INDEX v object mail obj INDEX n Profile Name object mail obj...

Страница 589: ...Password Type a password for authentication The maximum length of the password you can set is 31 characters I Sending Interval Define the interval for the system to send the SMS out The unit is secon...

Страница 590: ...rt 4 WAN Budget 2133 5 CVM 2133 status For WAN 1 Disconnected 2 Reconnected For VPN Tunnel 1 Disconnected 2 Reconnected For Temperature Alert 1 Out of Range For WAN Budget 2133 1 Limit Reached For CVM...

Страница 591: ...r minute It means to set the starting time of the profile hour Must be between 0 23 minute Must be between 0 59 For example To set Start Time 10 20 type object schedule set 1 T 10 20 d hour minute It...

Страница 592: ...4 18 Start Time hh mm 8 1 Duration Time hh mm 2 30 Action Force On Idle Timeout 0 minute s max 255 0 for default How Often v Weekdays Sun v Mon Tue v Wed Thu Fri Sat T Te el ln ne et t C Co om mm ma a...

Страница 593: ...Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description command parameter The available commands with parameters are listed below means that you can type in several commands in one l...

Страница 594: ...dware acceleration M enable disable Enable disable the multicast hardware acceleration S Show multicast table in hardware acceleration v view Show PPA_WAN_Table and PPA_LAN_Table for reference c Clean...

Страница 595: ...ta ax x D De es sc cr ri ip pt ti io on n Parameter Description command parameter The available commands with parameters are listed below means that you can type in several commands in one line h Type...

Страница 596: ...s It means that you can type in several commands in one line E Ex xa am mp pl le e qos setup m 3 i 9500 o 8500 r 3 20 u 1 p 50 t 1 WAN1 QOS mode is both Wan 1 is XDSL model don t need to set up Wan 1...

Страница 597: ...3 9 addr1 addr2 It means Range address Please specify the IP addresses for example l 172 16 3 9 172 16 3 50 addr1 subnet It means the subnet address with start IP address Please type the subnet and t...

Страница 598: ...ice t type It means protocol type 6 tcp default 17 udp 0 tcp udp 1 254 other p port It means service port The typing format must be start end ex 510 330 l List user defined types no means the index nu...

Страница 599: ...1 255 255 255 0 V 192 168 2 10 100 192 168 2 1 X LAN3 192 168 3 1 255 255 255 0 V 192 168 3 10 100 192 168 3 1 X LAN4 192 168 4 1 255 255 255 0 V 192 168 4 10 100 192 168 4 1 X Route 192 168 0 1 255...

Страница 600: ...Secondary DNS Not set LAN2 Primary DNS Not set LAN2 Secondary DNS Not set LAN3 Primary DNS Not set LAN3 Secondary DNS Not set LAN4 Primary DNS Not set LAN4 Secondary DNS Not set T Te el ln ne et t C...

Страница 601: ...0 0 MORE q Quit Enter New Lines Space Bar Next Page T Te el ln ne et t C Co om mm ma an nd d s sh ho ow w p po or rt tm ma ap p This command displays the table of NAT Active Sessions E Ex xa am mp pl...

Страница 602: ...el ln ne et t C Co om mm ma an nd d s sh ho ow w s st ta at tu us s This command displays current status of LAN and WAN connections E Ex xa am mp pl le e show status System Uptime 25 40 53 LAN Status...

Страница 603: ...0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0...

Страница 604: ...set access LAN or LANWAN S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description enable disable Enable or disable the SMB service show status Display current status of SMB service S...

Страница 605: ...2 3 4 v It menas to view current status E Ex xa am mp pl le e srv dhcp dhcp2 l 1 e 1 srv dhcp dhcp2 v 2nd DHCP server flag status Server works on specified MAC address ON Server works on specified LAN...

Страница 606: ...blic status Index MAC Address T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p d dn ns s1 1 This command allows users to set Primary IP Address for DNS Server in LAN S Sy yn nt ta ax x...

Страница 607: ...d Subnet DNS must be the same as NAT Subnet DNS E Ex xa am mp pl le e srv dhcp dns2 lan1 168 95 1 1 srv dhcp dns2 lan1 DNS IP address Now 168 95 1 1 T Te el ln ne et t C Co om mm ma an nd d s sr rv v...

Страница 608: ...rver S Sy yn nt ta ax x srv dhcp ipcnt srv dhcp ipcnt IP counts S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description It means to display current used IP count number IP counts It...

Страница 609: ...srv dhcp startip IP address S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description It means to display current used start IP address IP address It means the IP address that you ca...

Страница 610: ...ns the lease time that DHCP server can use The unit is second E Ex xa am mp pl le e srv dhcp leasetime srv dhcp leasetime Lease Time sec Now 86400 T Te el ln ne et t C Co om mm ma an nd d s sr rv v d...

Страница 611: ...hcp primWINS 192 168 1 88 srv dhcp primWINS srv dhcp primWINS WINS IP address srv dhcp primWINS clear Now 192 168 1 88 T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p s se ec cW WI IN...

Страница 612: ...ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p t tf ft tp p This command can set the TFTP server as the DHCP server S Sy yn nt ta ax x srv dhcp tftp TFTP server name S Sy yn nt ta ax x D De e...

Страница 613: ...m option feature 1 enable 0 disable i lan number It means to specify the LAN interface 1 lan1 a all lan r routed subnet s Next Server IP Address It means to specify the IP address for the server optio...

Страница 614: ...ral commands in one line e It means to enable disable such feature 1 enable 0 disable i It means to specify the private IP address of the DMZ host r It means to remove DMZ host setting v It means to d...

Страница 615: ...disable 1 enable c comment It means to type the description less than 23 characters for the defined network service i local ip It means to set the IP address for local computer Local ip Type an IP add...

Страница 616: ...meter Description Add idx It means to add a new port redirection table with an index number Available index number is from 1 to 40 serv name It means to type one name as service name proto It means to...

Страница 617: ...0 0 2 10 0 0 0 2 11 0 0 0 2 12 0 0 0 2 13 0 0 0 2 14 0 0 0 2 15 0 0 0 2 16 0 0 0 2 17 0 0 0 2 18 0 0 0 2 19 0 0 0 2 20 0 0 0 2 Protocol 0 Disable 6 TCP 17 UDP T Te el ln ne et t C Co om mm ma an nd d...

Страница 618: ...o set to factory default srv nat trigger view It will show all port trigger settings n It means the rule number for the profiles command parameter The available commands with parameters are listed bel...

Страница 619: ...23 83 Y O01 0 0 0 0 0 0 192 168 1 56 0 0 Y O01 0 0 0 0 0 0 192 168 1 56 0 0 Y O01 0 0 0 0 0 0 192 168 1 56 0 0 Y O01 0 0 0 0 0 0 192 168 1 56 0 0 Y O01 0 0 0 0 0 0 192 168 1 56 0 0 Y O01 0 0 0 0 0 0 1...

Страница 620: ...to discovery status Disable No Respond to External Device Enable T Te el ln ne et t C Co om mm ma an nd d s sw wi it tc ch h n no ot t_ _r re es sp po on nd d This command is used to detect the extern...

Страница 621: ...x D De es sc cr ri ip pt ti io on n Parameter Description idx It means the index number of each item shown on the table The range is from 1 to 8 f It means to clear all of the data E Ex xa am mp pl le...

Страница 622: ...Type a new name for local user Password Type a password for local user delete INDEX Delete a local user account view INDEX Show the user account password detail information E Ex xa am mp pl le e sys...

Страница 623: ...s to display current profile version and status E Ex xa am mp pl le e sys cfg status Profile version 3 0 0 Status 1 0x4845af2c sys cfg default T Te el ln ne et t C Co om mm ma an nd d s sy ys s c cm m...

Страница 624: ...the system The maximum number of characters that you can set is 39 clear It means to remove the domain name of the system E Ex xa am mp pl le e sys domainname wan1 clever sys domainname wan2 intelleg...

Страница 625: ...y ys s n na am me e This command can set and remove the name for the router when DHCP mode is selected for WAN S Sy yn nt ta ax x sys name wan1 ASCII string sys name wan1 clear S Sy yn nt ta ax x D De...

Страница 626: ...reboot T Te el ln ne et t C Co om mm ma an nd d s sy ys s a au ut to or re eb bo oo ot t This command allows users to restart the router automatically within a certain time S Sy yn nt ta ax x sys aut...

Страница 627: ...t C Co om mm ma an nd d s sy ys s q qr ry yb bu uf f This command can display the system memory status and leakage list E Ex xa am mp pl le e sys qrybuf System Memory Status and Leakage List Buf sk_bu...

Страница 628: ...ffer polling is on sys pollbuf off Buffer polling is off T Te el ln ne et t C Co om mm ma an nd d s sy ys s b br ri it ta as sk k This command can improve triple play quality S Sy yn nt ta ax x sys br...

Страница 629: ...m It means to get parameter notification value setnoti parm value It means to set parameter notification value log It means to display the TR 069 log debug on off on turn on the function of sending de...

Страница 630: ...F_VoIP InternetGatewayDevice X_00507F_WirelessLAN InternetGatewayDevice X_00507F_System InternetGatewayDevice X_00507F_Status InternetGatewayDevice X_00507F_Diagnostics MORE q Quit Enter New Lines Spa...

Страница 631: ...le commands with parameters are listed below means that you can type in several commands in one line e 0 1 Enable 1 or disable 0 the function of RTSP ALG p 0 1 Set the listening port 1 65535 for RTSP...

Страница 632: ...n time setting regser It means the license register server setting licera It means to erase license setting licifno It means license and signature download interface setting lic_wiz set reg qry It mea...

Страница 633: ...isable 0 daylight saving t 0 1 2 Specify the saving type for daylight setting 0 Default 1 Time range 2 Yearly s year month day hour Set the detailed settings of the starting day for time range type ye...

Страница 634: ...the DNS cache table 0 No limit N Greater than or equal to 5 c Clear the DNS cache table E Ex xa am mp pl le e sys dnsCacheTbl l DNS Cache Table List sys dnsCacheTbl t 65 Set TTL limit 65 seconds When...

Страница 635: ...ameter Description command parameter The available commands with parameters are listed below means that you can type in several commands in one line e 0 1 Enable 1 or disable 0 the mail alert function...

Страница 636: ...Disable Mode Limited T Te el ln ne et t C Co om mm ma an nd d s sy ys s t ti im me e This command is used to configure system time and date S Sy yn nt ta ax x sys time server domain sys time inquire...

Страница 637: ...00 Athens Istanbul Minsk 38 GMT 02 00 Jerusalem 39 GMT 02 00 Harare Pretoria 40 GMT 03 00 Volgograd 41 GMT 03 00 Baghdad Kuwait Riyadh 42 GMT 03 00 Nairobi 43 GMT 03 00 Moscow St Petersburg 44 GMT 03...

Страница 638: ...e commands with parameters are listed below means that you can type in several commands in one line command 0 Front Panel 1 System Information 2 IPv4 LAN Information 3 IPv4 Internet Access 4 IPv6 Inte...

Страница 639: ...ExternalPort 21 PortMapProtocol TCP The tmpvirtual server index 0 PortMapLeaseDuration 0 PortMapEnabled 0 Ftp Example MICROSOFT 1 InternalClient 0 0 0 0 RemoteHost 0 0 0 0 InternalPort 0 ExternalPort...

Страница 640: ...ow all UPnP services subscribed E Ex xa am mp pl le e upnp on UPNP start upnp subscribe 1 serviceType urn schemas microsoft com service OSInfo 1 2 serviceType urn schemas upnp org service WANCommonInt...

Страница 641: ...This command is use to display the information about the brand name and model name of the USB modems which are supported by Vigor router E Ex xa am mp pl le e usb devstat USB Port1 No device USB Port...

Страница 642: ...e el ln ne et t C Co om mm ma an nd d v vi ig gb br rg g s se et t This command is to configure specified WAN as bridge mode S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n vigbrg set v IP versio...

Страница 643: ...a at tu us s This command can display the existed WAN connection status for the modem change from ADSL router into bridge modem including index number MAC address Stamp Time PVC VLAN port for Vigor Br...

Страница 644: ...4 s1 s2 s3 s4 3 V V V T Te el ln ne et t C Co om mm ma an nd d v vl la an n o of ff f This command allows you to disable VLAN function S Sy yn nt ta ax x vlan off E Ex xa am mp pl le e vlan off VLAN i...

Страница 645: ...rrent status for VLAN S Sy yn nt ta ax x vlan status E Ex xa am mp pl le e vlan status VLAN is Enable VLAN Enable VID Pri p1 p2 p3 p4 s1 s2 s3 s4 subnet 0 OFF 0 0 1 LAN1 1 OFF 0 2 1 LAN1 2 OFF 0 0 1 L...

Страница 646: ...de E Ex xa am mp pl le e vlan submode status vlan subnet mode normal mode vlan submode on vlan subnet mode modified to promiscuous mode vlan submode status vlan subnet mode promiscuous mode T Te el ln...

Страница 647: ...id 1 4095 VLAN1 vid 4095 T Te el ln ne et t C Co om mm ma an nd d v vl la an n s sy ys sv vi id d This command is used to modify and show the scope reserved 78 of the VLAN IDs used internally by the s...

Страница 648: ...al for main mode auto index It means to choose default proposals proposal index It means to choose specified proposal aggressive It means the chosen DH group for aggressive mode pfs It means perfect f...

Страница 649: ...p on off It means to enable or disable the authentication with mOTP function on Enable off Disable pin_secret pin secret It means to set PIN code with secret pin Type the code for authentication e g 1...

Страница 650: ...key on off It means to enable disable the pre shared key for IKE authentication method on enable off disable assignkey Pre_Shared_Key Assign the pre shared key Pre_Shared_Key Type a string digsig on o...

Страница 651: ...means LAN1 2 it means LAN2 3 it means LAN3 4 it means LAN4 E Ex xa am mp pl le e vpn subnet 1 2 T Te el ln ne et t C Co om mm ma an nd d v vp pn n s se et tu up p This command allows users to setup V...

Страница 652: ...rofile name It means the name of the profile ip It means the IP address to dial to usr pwd It means the user and the password required for the L2TP connection nip nmask It means the remote network IP...

Страница 653: ...nnpkt It means the NetBios Naming Packet on Enable the function to pass the packet off Disable the function to block the packet dir It means the call direction Available settings are b o and i b Both...

Страница 654: ...espaa means ESP AES without with Authentication sch It means Index 1 15 in Schedule Setup sch 1 3 5 7 Set schedule 1 3 5 7 rcallb It means Require Remote to Callback rcallb on off means to enable dis...

Страница 655: ...IP Direction rip d means to set RIP Direction as Disable rip t means to set RIP Direction as TX rip r means to set RIP Direction as RX rip b means to set RIP Direction as Both mode It means the option...

Страница 656: ...vpn list index all vpn list index com vpn list index out vpn list index in vpn list index net S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description all It means to list configurat...

Страница 657: ...keep alive off T Te el ln ne et t C Co om mm ma an nd d v vp pn n r re em mo ot te e This command allows users to enable or disable PPTP IPSec L2TP VPN service S Sy yn nt ta ax x vpn remote PPTP IPSe...

Страница 658: ...ounts L2l means LAN to LAN Profile Specify which one will be applied by NetBios index The index number of the profile Block Pass Pass Have an inquiry for data transmission between the hosts located on...

Страница 659: ...et 1 1400 VPN TCP maximum segment size MSS PPTP 1400 L2TP 1360 IPSec 1360 L2TP over IPSec 1360 vpn mss show VPN TCP maximum segment size MSS PPTP 1400 L2TP 1360 IPSec 1360 L2TP over IPSec 1360 T Te el...

Страница 660: ...s coming from the second subnet passing through current used VPN tunnel S Sy yn nt ta ax x vpn pass2nd on vpn pass2nd off S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description on...

Страница 661: ...mber of VPN profile E 0 1 It means to enable disable the IpsecWithSameSubnet 0 Disable 1 Enable e 1 2 3 4 It means to translate LAN subnet to virtual subnet 1 LAN1 2 LAN2 3 LAN3 4 LAN4 I IP address Se...

Страница 662: ...just the size of MTU for WAN1 S Sy yn nt ta ax x wan mtu value S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description value It means the number of MTU for PPP The available range i...

Страница 663: ...ti io on n Parameter Description on off It means to enable or disable DF E Ex xa am mp pl le e wan DF_check on DF bit check enable wan DF_check off DF bit check disable reset DF bit T Te el ln ne et t...

Страница 664: ...Bps 0 Primary DNS 0 0 0 0 Secondary DNS 0 0 0 0 PVC_WAN3 Offline stall N Mode Up Time 00 00 00 IP GW IP TX Packets 0 TX Rate Bps 0 RX Packets 0 RX Rate Bps 0 PVC_WAN4 Offline stall N Mode Up Time 00 0...

Страница 665: ...trace route If you do not set any value for ttl here or just type 0 here the system will use default setting 255 as the ttl value interval Interval Set the interval between each ping operation Availab...

Страница 666: ...e priority for the VALN setting Range is from 0 to 7 px It means LAN port Available setting number is from 2 to 4 Port number 1 is locked for NAT usage keeptag It means Multi VLAN packets will keep th...

Страница 667: ...nable Specified WAN interface will be tagged Disable Disable the function of tagging on WAN interface pri value It means the priority for such VLAN The value shall be 0 7 stat Display current VLAN sta...

Страница 668: ...D De es sc cr ri ip pt ti io on n Parameter Description I Host IP address Specify the IPv6 target to detect If can be an IPv4 address or domain name Host IP address Type the IP address domain name of...

Страница 669: ...lean It means to clean all access control setting E Ex xa am mp pl le e wl acl showmode ssid1 none ssid2 none ssid3 none ssid4 none wl acl add 00 50 70 ff 12 70 Set Done wl acl add 00 50 70 ff 12 70 s...

Страница 670: ...function at the same time 0 disable the function 1 enable the funciton ssid ssid_num enable ssid_name hidden_ssid It means to set the name of the SSID hide the SSID if required ssid_num Type 1 2 3 or...

Страница 671: ...sid 1 enable dray SSID Enable Hide_SSID Name 1 1 0 dray Note Please restart wireless after you set the parameters wl config security 1 wpa1x Configured Wlan Security Setting SSID1 Mode wpa1x Wireless...

Страница 672: ...ers to perform AP scanning S Sy yn nt ta ax x wl scan start wl scan set wlist blist stime MAC wl scan del wlist blist MAC wl scan filter ssid channel mac wl scan show 0 1 2 3 S Sy yn nt ta ax x D De e...

Страница 673: ...tamgt show ssid_num wl stamgt set ssid_num c r wl stamgt reset ssid_num S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description enable disable It means to enable disable the station...

Страница 674: ...nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description wl wpa Type 1 2 3 to represent different WPA modes 1 means WPA WPA2 2 means WPA2 Only 3 means WPA Only E Ex xa am mp pl le e wl wpa 1...

Страница 675: ...Txop It means transmission opportunity Specify the value ranging from 0 to 65535 ACM It can restrict stations from using specific category class if it is enabled 0 disable 1 enable E Ex xa am mp pl l...

Страница 676: ...for GI_800 and 1 for GI_4001 wl ht badecline value The value you can type is 0 for disabling and 1 for enabling wl ht autoba value The value you can type is 0 for disabling and 1 for enabling wl ht rd...

Страница 677: ...tings are d Disable b Bridge r Repeapter security value It means to configure security mode with encrypted keys for WDS mode Available settings are disable No security wep WEP wpapsk key WPA PSK wpa2p...

Страница 678: ...This command allows you to enable or disable wireless button control S Sy yn nt ta ax x wl btnctl value S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description value 0 disable 1 ena...

Страница 679: ...rtfns enable value wl artfns trg_num value wl artfns show S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description enable value It means to enable wireless airtime fairness function...

Страница 680: ...t xx xx xx xx xx xx or xx xx xx xx xx xx or xx xx xx xx xx xx isolate It means to isolate the wireless connection of the wireless client identified with the MAC address from LAN del MAC It means to de...

Страница 681: ...wl_dual apscan show 5G Access Point List BSSID Channel SSID T Te el ln ne et t C Co om mm ma an nd d w wl l_ _d du ua al l c ca ar rd dm ma ac c E Ex xa am mp pl le e wl_dual cardmac Card MAC 54 2a a2...

Страница 682: ...instead of long preamble with 128 bit sync field However some original 11b wireless network devices only support long preamble 0 disable to use long preamble 1 enable to use long preamble preamble sho...

Страница 683: ...ans to display the status of wireless isolation E Ex xa am mp pl le e wl_dual config mode 11a Current mode is 11a Note Please restart 5G wireless after you set the channel wl_dual config channel 60 Cu...

Страница 684: ...eys must be in 5 13 ASCII text string or 10 26 Hexadecimal digit format WPA keys must be in 8 63 ASCII text string or 64 Hexadecimal digit format show It means to display current mode selection for ea...

Страница 685: ...e value It means to specify connection mode for WDS value Available settings are d Disable b Bridge r Repeapter security value It means to configure security mode with encrypted keys for WDS mode Avai...

Страница 686: ...rst wl_dual wds hello 1 Note Please restart router after you set the parameters wl dual wds mode b wl dual wds security wep wl_dual wds show 5G Wireless WDS Setting Mode Bridge Security WEP AP Functio...

Страница 687: ...apcli show wl_dual apcli enable value wl_dual apcli security mode wl_dual apcli ssid ssid_name wl_dual apcli bssid S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description show Displ...

Страница 688: ...ln ne et t C Co om mm ma an nd d w wl l_ _d du ua al l a ar rt tf fn ns s This command allows users to configure airtime fairness function for wireless 5GHz connection S Sy yn nt ta ax x wl_dual artfn...

Страница 689: ...Enable 1 or disable 0 the RADIUS server authport port number Configure the port number for authentication Port number Available range is from 0 to 65535 Default value is 1812 set_auth_method method i...

Страница 690: ...s Subnets will be eligible to pass through NAT and wake up the LAN client You also need to set NAT rule for LAN client S Sy yn nt ta ax x wol up MAC Address wol fromWan on off any wol fromWan_Setting...

Страница 691: ...e the user name that you want to get clear corresponding record all all of the records will be removed d Set User management function in Rule Based mode e Set User management function in User Based mo...

Страница 692: ...time quota of the user profile e g q 200 r Param It means to set data quota e g r 1000 s Param It means to set schedule index Available settings are sch_idx1 sch_idx2 sch_idx3 and sch_idx4 t Param It...

Страница 693: ...00 r It means to set account data quota e g r 1000 t It means to enable disable time quota limitation for user account 0 Disable 1 Enable w It means to set data quota unit MB GB E Ex xa am mp pl le e...

Страница 694: ...et to Enable appqos traceable e 68 2 TELNET ENABLED QoS Class 2 T Te el ln ne et t C Co om mm ma an nd d n na an nd d b ba ad d n na an nd d u us sa ag ge e NAND usage is used to display NAND Flash us...

Страница 695: ...l ln ne et t C Co om mm ma an nd d a ap pm m p pr ro of fi il le e This command allows to configure wireless profiles to be used in Central AP Management S Sy yn nt ta ax x apm profile clone from inde...

Страница 696: ...eCtrl U D 0 Default DrayTek LAN A WPA WPA2 PSK x DrayTek LAN B WPA WPA2 PSK x 1 2 forcarrie DrayTek Disable x 3 4 T Te el ln ne et t C Co om mm ma an nd d a ap pm m c ca ac ch he e This command is use...

Страница 697: ...traffic limit 0 disable traffic limit 4 The forth number means the limit num of station Available range is 3 64 5 The fifth number means the upload limit function 1 enable upload limit 0 disable uplo...

Страница 698: ...56 09 syslog APM Send Rogue AP Detection data 8d 03 00 42 kernel 60 fa cd 55 f5 ea had disassociated 8d 03 03 12 syslog APM Run AP Detection Discovery 8d 03 06 09 syslog APM Send Rogue AP Detection d...

Страница 699: ...apm stanum 1 Idx Nearby 2 4 5G Conn 2 4 5G 1 2 5 0 0 2 2 5 1 0 3 2 5 1 0 T Te el ln ne et t C Co om mm ma an nd d b ba ac ck ku up pm mo od de e This command is used to backup the firmware to the rou...

Страница 700: ...Interfaces 100 Apply the Class Rule 102 APSD Capable 176 ARP Cache Table 431 ARP Detect 45 47 ARP Table 95 Auth Type 122 Authentication Mode 171 Auto Logout 15 Auto ULA Prefix 87 Auto Update interval...

Страница 701: ...ifier 48 DHCP Server Configuration 80 82 84 DHCP Server IP Address 80 82 DHCP Table 433 DHCPv6 Stateful 86 DHCPv6 Server 87 Diagnostics 428 429 Dial out Triggering 429 Digital Signature 190 204 Displa...

Страница 702: ...General Setup 199 IPsec Tunnel 203 IPTV 67 IPv4 Border Relay 62 IPv4 Mask Length 63 IPv6 Address 59 IPv6 Gateway Address 59 IPv6 Group 393 IPv6 Neighbour Table 432 IPv6 Object 391 IPv6 TSPC Status 44...

Страница 703: ...195 Physical Connection 22 Physical Members 65 Physical Mode 41 42 43 Physical Type 41 42 PIN Code 224 Ping Detect 45 47 52 54 56 57 59 60 63 Ping Diagnosis 436 Ping Gateway IP 45 47 Ping Interval 45...

Страница 704: ...ver Address 50 Server Certificate 222 Server IP Address 130 Server Response 122 Service 116 Service Activation Wizard 34 Service API 121 Service Name 107 Service Provider 121 404 Service Type Group 39...

Страница 705: ...cal Address ULA configuration 87 UPnP 118 131 URL Access Control 273 URL Content Filter 245 266 URL Content Filter Profile 271 URL Redirect 99 USB Application 414 USB Device Status 419 USB General Set...

Страница 706: ...er 245 266 Web Content Filter Profile 275 Web Feature 274 Web Portal Setup 98 177 WEP 157 166 white black list 167 Wildcard 122 Wired 802 1x 97 Wireless LAN 155 Wireless Wizard 159 Wizard Mode 248 WLA...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды