Draytek Vigor2862 Series Скачать руководство пользователя

Страница: 8 / 988

Vigor2862 Series User’s Guide

viii

V-1-1 VPN Client Wizard ......................................................................................................... 351

V-1-2 VPN Server Wizard ........................................................................................................ 358

V-1-3 Remote Access Control ................................................................................................. 362

V-1-4 PPP General Setup........................................................................................................ 363

V-1-5 IPsec General Setup ...................................................................................................... 365

V-1-6 IPsec Peer Identity ......................................................................................................... 366

V-1-7 OpenVPN ....................................................................................................................... 369

V-1-7-1 General Setup .......................................................................... 369

V-1-7-2 Client Config............................................................................ 370

V-1-8 Remote Dial-in User....................................................................................................... 372

V-1-9 LAN to LAN .................................................................................................................... 376

V-1-10 VPN Trunk Management ............................................................................................. 387

V-1-11 Connection Management............................................................................................. 397

Application Notes ..................................................................................................................... 398

A-1 How to Build a LAN-to-LAN VPN Between Vigor Routers via IPsec Main Mode ... 398

A-2 How to Build a LAN-to-LAN VPN Between Vigor Routers via IKEv2 ................. 403

V-2 SSL VPN .................................................................................................................................. 406

Web User Interface .................................................................................................................. 407

V-2-1 General Setup ................................................................................................................ 407

V-2-2 User Account.................................................................................................................. 408

V-2-3 User Group..................................................................................................................... 412

V-2-4 SSL Portal Online User .................................................................................................. 414

V-3 Certificate Management........................................................................................................... 415

Web User Interface .................................................................................................................. 416

V-3-1 Local Certificate ............................................................................................................. 416

V-3-2 Trusted CA Certificate.................................................................................................... 420

V-3-3 Certificate Backup .......................................................................................................... 422

Part VI Security ..............................................................................................................423

VI-1 Firewall ................................................................................................................................... 424

Web User Interface .................................................................................................................. 426

VI-1-1 General Setup ............................................................................................................... 426

VI-1-2 Filter Setup.................................................................................................................... 431

VI-1-3 Defense Setup .............................................................................................................. 441

VI-1-3-1 DoS Defense ............................................................................ 441

VI-1-3-2 Spoofing Defense...................................................................... 444

VI-1-4 Diagnose ....................................................................................................................... 445

Application Notes ..................................................................................................................... 448

A-1 How to Configure Certain Computers Accessing to Internet ........................ 448

VI-2 Central Security Management (CSM) .................................................................................... 452

Web User Interface .................................................................................................................. 453

VI-2-1 APP Enforcement Profile .............................................................................................. 453

VI-2-2 APPE Signature Upgrade ............................................................................................. 455

Содержание Vigor2862 Series

Страница 1: ......

Страница 2: ...Vigor2862 Series User s Guide ii Vigor2862 Series VDSL2 Security Firewall User s Guide Version 1 5 Firmware Version V3 9 0 For future update please visit DrayTek web site Date January 18 2019...

Страница 3: ...arrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep yo...

Страница 4: ...5 3 Quick Access for Common Used Menu 27 I 5 4 GUI Map 28 I 5 5 Web Console 29 I 5 6 Config Backup 30 I 5 7 Logout 30 I 5 8 Online Status 31 I 5 8 1 Physical Connection 31 I 5 8 2 Virtual WAN 33 I 6 Q...

Страница 5: ...113 II 1 2 17 Details Page for IPv6 Static IPv6 in WAN1 WAN2 114 II 1 2 18 Details Page for IPv6 6in4 Static Tunnel in WAN1 WAN2 116 II 1 2 19 Details Page for IPv6 6rd in WAN1 WAN2 118 II 1 3 Multi P...

Страница 6: ...lity 220 II 5 12 2 Config Sync 223 II 5 13 Local 802 1X General Setup 225 Application Notes 227 A 1 How to use High Availability 227 A 2 How to use DrayDDNS 235 A 3 How to Implement the LDAP AD Authen...

Страница 7: ...9 Bandwidth Management 310 III 1 10 AP Discovery 311 III 1 11 Airtime Fairness 312 III 1 12 Band Steering 314 III 1 13 Roaming 318 III 1 14 Station List 319 Part IV VoIP 321 IV 1 VoIP 322 Web User Int...

Страница 8: ...igor Routers via IKEv2 403 V 2 SSL VPN 406 Web User Interface 407 V 2 1 General Setup 407 V 2 2 User Account 408 V 2 3 User Group 412 V 2 4 SSL Portal Online User 414 V 3 Certificate Management 415 We...

Страница 9: ...uration Backup 491 VII 1 7 Syslog Mail Alert 495 VII 1 8 Time and Date 497 VII 1 9 SNMP 498 VII 1 10 Management 500 VII 1 11 Panel Control 504 VII 1 12 Self Signed Certificate 508 VII 1 13 Reboot Syst...

Страница 10: ...VII 5 1 General Setup 589 VII 5 1 1 General Settings 589 VII 5 1 2 IPsec VPN Settings 590 VII 5 2 CPE Management 591 VII 5 2 1 Managed Device List 591 VII 5 2 2 CPE Maintenance 594 VII 5 2 3 Google M...

Страница 11: ...t List 648 VII 8 Central Management External Devices 649 Part VIII Others 651 VIII 1 Objects Settings 652 Web User Interface 653 VIII 1 1 IP Object 653 VIII 1 2 IP Group 657 VIII 1 3 IPv6 Object 658 V...

Страница 12: ...9 Data Flow Monitor 709 XI 1 10 Traffic Graph 712 XI 1 11 VPN Graph 713 XI 1 12 Trace Route 714 XI 1 13 Syslog Explorer 715 XI 1 14 IPv6 TSPC Status 716 XI 1 15 DSL Status 717 XI 1 16 High Availabili...

Страница 13: ...Vigor2862 Series User s Guide xiii Index 962...

Страница 14: ......

Страница 15: ...P Pa ar rt t I I I In ns st ta al ll la at ti io on n This part will introduce Vigor router and guide to install the device in hardware and software...

Страница 16: ......

Страница 17: ...outside and control inside Object based firewall is flexible and allows your network be safe User Management implemented on your router firmware can allow you to prevent any computer from accessing y...

Страница 18: ...The QoS function is inactive On USB device is connected and ready for use Off No USB device is connected USB1 2 USB Blinking The data is transmitting On The router is ready to access Internet through...

Страница 19: ...connected with 10 100Mbps Switch on Rear Side Available for Vigor2862L Interface Description Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and...

Страница 20: ...The data is transmitting On The QoS function is active QoS Off The QoS function is inactive On USB device is connected and ready for use Off No USB device is connected USB Blinking The data is transmi...

Страница 21: ...need to setup WPS within 2 minutes On The VPN tunnel is active Off VPN services are disabled VPN Blinking Traffic is passing through VPN tunnel On The DMZ function is enabled Off The DMZ function is...

Страница 22: ...ssed and released the button twice 2 4G Off and 5G Off pressed and released the button three times When WPS function is enabled by web user interface press this button for more than 2 seconds to wait...

Страница 23: ...ll blink slowly while wireless traffic goes through ACT and WLAN LEDs blink quickly and simultaneously when WPS is working and will return to normal condition after two minutes You need to setup WPS w...

Страница 24: ...ice making network connection through WPS Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT L...

Страница 25: ...alled on the extension base before connecting to Vigor router There are two mounting holes for installing antennas with extension base on Vigor router Please install them as shown below Note if only o...

Страница 26: ...the left side There are two types of antennas provided for Vigor2862Ln Vigor2862Lac which must be installed in different locations carefully and correctly Wrong installation might cause bad signal of...

Страница 27: ...rter to the WAN port of router with Ethernet cable RJ 45 2 Connect one end of an Ethernet cable RJ 45 to one of the LAN ports of the router and the other end of the cable RJ 45 into the Ethernet port...

Страница 28: ...rovided on the Vigor router packaging box to enable you to space the screws correctly on the wall 2 Place the template on the wall and drill the holes according to the recommended instruction 3 Fit sc...

Страница 29: ...Cs connected this router can print documents via the router The example provided here is made based on Windows 7 For other Windows system please visit www DrayTek com Before using it please follow the...

Страница 30: ...er s Guide 14 4 A dialog will appear Click Add a local printer and click Next 5 In this dialog choose Create a new port In the field of Type of port use the drop down list to select Standard TCP IP Po...

Страница 31: ...User s Guide 15 6 In the following dialog type 192 168 1 1 router s LAN IP in the field of Hostname or IP Address and type 192 168 1 1 as the Port name Then click Next 7 Click Standard and choose Gene...

Страница 32: ...your system will ask you to choose right name of the printer that you installed onto the router Such step can make correct driver loaded onto your PC When you finish the selection click Next 9 Type a...

Страница 33: ...Vigor2862 Series User s Guide 17 10 Choose Do not share this printer and click Next 11 Then in the following dialog click Finish...

Страница 34: ...uide 18 12 The new printer has been added and displayed under Printers and Faxes Click the new printer icon and click Printer server properties 13 Edit the property of the new printer you have added b...

Страница 35: ...or choosing the correct protocol and LPR name The printer can be used for printing now Most of the printers with different manufacturers are compatible with vigor router Info Some printers with the fa...

Страница 36: ...he same subnet as the default IP address of Vigor router 192 168 1 1 For the detailed information please refer to the later section Trouble Shooting of the guide 2 Open a web browser on your PC and ty...

Страница 37: ...home page will be different slightly in accordance with the type of the router you have 5 The web page can be logged out according to the chosen condition The default setting is Auto Logout which mea...

Страница 38: ...dow will open to ask for username and password 2 Please type admin admin as Username Password for accessing into the web user interface with admin mode 3 Go to System Maintenance page and choose Admin...

Страница 39: ...uide 23 5 Now the password has been changed Next time use the new password to access the Web user interface for this router Info Even the password is changed the Username for logging onto the web user...

Страница 40: ...status including System Information IPv4 Internet Access IPv6 Internet Access Interface physical connection Security and Quick Access Click Dashboard from the main menu on the left side of the main pa...

Страница 41: ...ill be open for you to configure if required Port Color Description Black No USB device is connected USB Green A USB device is connected Black No VDSL ADSL connection Green ADSL connection is ready VD...

Страница 42: ...es User s Guide 26 I I 5 5 2 2 N Na am me e w wi it th h a a L Li in nk k A name with a link e g Router Name Current Time WAN1 4 and etc below means you can click it to open the configuration page for...

Страница 43: ...shboard You will find a group of common used functions grouped under Quick Access The function links of System Status Dynamic DDNS TR 069 User Management IM P2P Block Schedule Syslog Mail Alert LDAP R...

Страница 44: ...ss clients displayed with Host ID IP Address and MAC address indicates that the traffic would be transmitted through LAN port s and then the WAN port The purpose is to perform the traffic monitor of t...

Страница 45: ...lnet command via DOS prompt The changes made by using web console have the same effects as modified through web user interface The functions settings modified under Web Console also can be reviewed on...

Страница 46: ...way to store current used settings quickly by clicking the Config Backup icon It allows you to backup current settings as a file Such configuration file can be restored by using System Maintenance Con...

Страница 47: ...1 1 P Ph hy ys si ic ca al l C Co on nn ne ec ct ti io on n Such page displays the physical connection status such as LAN connection status WAN connection status ADSL information and so on P Ph hy ys...

Страница 48: ...rface WAN1 WAN2 WAN3 WAN4 Status Enable Yes in red means such interface is available but not enabled Yes in green means such interface is enabled Line Displays the physical connection VDSL ADSL Ethern...

Страница 49: ...led Yes in green means such interface is enabled No in red means such interface is not available Mode Displays the type of WAN connection e g TSPC Up Time Displays the total uptime of the interface IP...

Страница 50: ...ard is entering login password After typing the password please click Next On the next page as shown below please select the WAN interface that you use If DSL interface is used please choose WAN1 if E...

Страница 51: ...mber to all packets on the WAN while sending them out Please type the tag value and specify the priority for the packets sending by WAN1 Disable Disable the function of VLAN with tag Tag value Type th...

Страница 52: ...as the protocol For ADSL Only Such field is provided for ADSL only You have to choose encapsulation and type the values for VPI and VCI Or click Auto detect to find out the best values Fixed IP Click...

Страница 53: ...s Item Description Service Name Optional Enter the description of the specific network service Username Assign a specific valid user name provided by the ISP Note The maximum length of the user name y...

Страница 54: ...finished the above settings click Next for viewing summary of such connection 4 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown 5 N...

Страница 55: ...to choose for WAN1 interface Choose MPoA Static or Dynamic IP as the protocol For ADSL Only Such field is provided for ADSL only You have to choose encapsulation and type the values for VPI and VCI Or...

Страница 56: ...the next setting page Cancel Click it to give up the quick start wizard 2 Please type in the IP address mask gateway information originally provided by your ISP Then click Next for viewing summary of...

Страница 57: ...Ethernet is selected as Physical Mode In general Auto negotiation is suggested VLAN Tag insertion The settings configured in this field are available when Ethernet is selected as Physical Mode Disable...

Страница 58: ...Click PPPoE as the Internet Access Type Then click Next to continue Available settings are explained as follows Item Description Service Name Optional Enter the description of the specific network ser...

Страница 59: ...into the next setting page Cancel Click it to give up the quick start wizard 3 Please manually enter the Username Password provided by your ISP Click Next for viewing summary of such connection 4 Clic...

Страница 60: ...pen for you to specify Internet Access Type 2 Click PPTP L2TP as the Internet Access Type Then click Next to continue Available settings are explained as follows Item Description Username Assign a spe...

Страница 61: ...y IP address for the router Second DNS Type in secondary IP address for necessity in the future PPTP Server L2TP Server Type the IP address of the server Back Click it to return to previous setting pa...

Страница 62: ...pe 2 Click Static IP as the Internet Access type Simply click Next to continue Available settings are explained as follows Item Description WAN IP Type the IP address Subnet Mask Type the subnet mask...

Страница 63: ...art Wizard Setup OK will appear Then the system status of this protocol will be shown 5 Now you can enjoy surfing on the Internet E Et th he er rn ne et t W WA AN N2 2 D DH HC CP P 1 Choose WAN2 as th...

Страница 64: ...39 characters MAC Some Cable service providers specify a specific MAC address for access authentication In such cases you need to enter the MAC address Back Click it to return to previous setting pag...

Страница 65: ...e el le es ss s 2 2 4 4G G W WA AN N2 2 S St ta at ti ic c I IP P 1 Choose WAN2 as the WAN Interface and choose Wireless 2 4G as the Physical Mode Click the Next button The following page will be open...

Страница 66: ...of frequency of the Wireless AP Please notice that if this setting is modified the channel of Wireless LAN 2 4GHz would be also modified Security Mode The mode to connect to the Wireless AP Disable Th...

Страница 67: ...Discovery button to choose your Wireless AP You can also set the Wireless AP information directly and skip the next 2 steps 5 Click the Scan button of the popup window and wait for a few seconds 6 Sel...

Страница 68: ...the Security Mode is WEP type in the WEP Keys If the Security Mode is WPA PSK or WPA2 PSK type in the Pass Phrase Then click Next for next step 8 Click Finish A page of Quick Start Wizard Setup OK wil...

Страница 69: ...HCP as the Internet Access type Simply click Next to continue Available settings are explained as follows Item Description SSID The identification of the Wireless AP MAC Address Optional The MAC Addre...

Страница 70: ...d in PSK WPA2 PSK The Router connects to the wireless AP as a WPA2 client and the encryption key should be entered in PSK Back Click it to return to previous setting page Next Click it to get into the...

Страница 71: ...be filled automatically If the Security Mode is WEP type in the WEP Keys If the Security Mode is WPA PSK or WPA2 PSK type in the Pass Phrase Then click Next for next step 7 Click Finish A page of Qui...

Страница 72: ...ed as follows Item Description Internet Access Choose one of the selections as the protocol of accessing the internet 3G 4G USB Modem PPP mode SIM Pin code Type PIN code of the SIM card that will be u...

Страница 73: ...e Force Vigor router to connect Internet with the mode specified here If you choose 4G 3G 2G as network mode the router will choose a suitable one according to the actual wireless signal automatically...

Страница 74: ...use trial version of WCF directly without accessing into the server MyVigor located on http myvigor draytek com For using Web Content Filter Profile please refer to later section Web Content Filter Pr...

Страница 75: ...upgrade APPE signature automatically DT DDNS developed by DrayTek offers one year free charge service of dynamic DNS service for internal use 3 Setting confirmation page will be displayed as follows p...

Страница 76: ...register your Vigor router to MyVigor website for getting more service Please follow the steps below to finish the router registration 1 Please login the web configuration interface of Vigor router b...

Страница 77: ...to create your own one Please read the articles on the Agreement regarding user rights carefully while creating a user account 4 The following page will be displayed after you logging in MyVigor Type...

Страница 78: ...Vigor2862 Series User s Guide 62 6 After clicking OK you will see the following page Your router has been registered to myvigor website successfully...

Страница 79: ...egulated and ruled by router The design of network structure is related to what type of public IP addresses coming from your ISP When the data flow passing through the Network Address Translation NAT...

Страница 80: ...Vigor2862 Series User s Guide 64...

Страница 81: ...private addresses and the packets will be delivered to the correct host PC in the local area network Thus all the host PCs can share a common Internet connection G Ge et t Y Yo ou ur r P Pu ub bl li...

Страница 82: ...still can be used and Load Balance can be done in the router Besides 3G 4G USB Modem in WAN3 WAN4 also can be used as backup device Therefore when WAN1 and WAN2 are not available the router will use 3...

Страница 83: ...n port for proper operation Please configure WAN1 WAN2 WAN3 and WAN4 settings This webpage allows you to set general setup for WAN1 WAN2 WAN3 and WAN4 respectively In default WAN2 is disabled If you w...

Страница 84: ...eam and upstream rate of such WAN interface Active Mode Display whether such WAN interface is Active device or backup device Backup WAN Display the backup WAN interface for such WAN when it is disable...

Страница 85: ...is detected this field will display VDSL2 if ADSL is detected it will display ADSL DSL Mode Specify the physical mode VDSL or ADSL for such router manually DSL Modem Code Choose the correct DSL modem...

Страница 86: ...e Mode Active When will appear Please specify which WAN will be the Backup interface Any of the selected WAN disconnect Such backup WAN will be activated when any master WAN interface disconnects All...

Страница 87: ...rface Display Name Type the description for such WAN interface Physical Mode Choose Wireless 2 4G if you want to use wireless station mode to access Internet Otherwise choose Ethernet to access Intern...

Страница 88: ...lected WAN disconnect Such backup WAN will be activated when any master WAN interface disconnects All of the selected WAN disconnect Such backup WAN will be activated only when all master WAN interfac...

Страница 89: ...ose Yes to invoke the settings for this WAN interface Choose No to disable the settings for this WAN interface Display Name Type the description for such WAN interface Physical Mode Display the physic...

Страница 90: ...ivated as the main network connection Traffic Threshold When the data traffic of active WAN reaches the traffic threshold specified here the failover WAN will be enabled automatically to share the ove...

Страница 91: ...ion the users can set different WAN settings for WAN1 WAN2 WAN3 or LTE WAN4 for Internet Access Due to different Physical Mode for WAN interface the Access Mode for these connections also varies Refer...

Страница 92: ...e in WAN interface Note that Details Page will be changed slightly based on ADSL VDSL2 physical mode specified on WAN General Setup IPv6 This button will open different web page based on Physical Mode...

Страница 93: ...M Mo od de e V VD DS SL L2 2 To choose PPPoE as the accessing protocol of the Internet please select PPPoE from the WAN Internet Access WAN1 page The following web page will be shown Available setting...

Страница 94: ...ou choose Ping Detect as detection mode you have to type Primary or Secondary IP address in this field for pinging Ping Gateway IP If you choose Ping Detect as detection mode you also can enable this...

Страница 95: ...WAN IP Alias You can set up to 8 public IP addresses other than the current one you are using Dial Out Schedule Index 1 15 in Schedule Setup You can type in four sets of time schedule for your request...

Страница 96: ...settings click OK to save the settings I II I 1 1 2 2 2 2 D De et ta ai il ls s P Pa ag ge e f fo or r M MP Po oA A S St ta at ti ic c o or r D Dy yn na am mi ic c I IP P i in n W WA AN N1 1 P Ph hy...

Страница 97: ...Client Identifier Check the box to specify username and password as the DHCP client identifier for some ISP Username Type a name as username The maximum length of the user name you can set is 63 char...

Страница 98: ...n mode you have to type Primary or Secondary IP address in this field for pinging Ping Gateway IP If you choose Ping Detect as detection mode you also can enable this setting to use current WAN gatewa...

Страница 99: ...RFC1058 specifying how routers exchange routing tables information Click Enable RIP for activating this function Bridge Mode Enable Bridge Mode If the function is enabled the router will work as a br...

Страница 100: ...Modem Settings Set up the DSL parameters required by your ISP These settings configured here are specified for ADSL only Multi PVC channel The selections displayed here are determined by the page of I...

Страница 101: ...her network connection is alive or not through ARP Detect or Ping Detect Mode Choose ARP Detect or Ping Detect for the system to execute for WAN detection If you choose Ping Detect as the detection mo...

Страница 102: ...g it the detected value will be displayed in the field of MTU PPP MP Setup PPP Authentication Select PAP only or PAP or CHAP for PPP IP Assignment IPCP Usually ISP dynamically assigns IP address to yo...

Страница 103: ...u check this box PCs on the same network can use another set of PPPoE session different with the Host PC to access into Internet For Wireless LAN It is available for n model If you check this box PCs...

Страница 104: ...cessing protocol of the Internet select MPoA Static or Dynamic IP from the WAN Internet Access WAN1 page The following web page will appear Available settings are explained as follows Item Description...

Страница 105: ...ifier Check the box to specify username and password as the DHCP client identifier for some ISP Username Type a name as username The maximum length of the user name you can set is 63 characters Passwo...

Страница 106: ...n mode you have to type Primary or Secondary IP address in this field for pinging Ping Gateway IP If you choose Ping Detect as detection mode you also can enable this setting to use current WAN gatewa...

Страница 107: ...mation Protocol is abbreviated as RIP RFC1058 specifying how routers exchange routing tables information Click Enable RIP for activating this function Bridge Mode Enable Bridge Mode If the function is...

Страница 108: ...djusted in this page will be invalid ISP Access Setup Enter your allocated username password and authentication parameters according to the information provided by your ISP Username Type in the userna...

Страница 109: ...c transmit path Click Detect to open the following dialog Path MTU to Type the IP address as the specific transmit path MTU size start from Determine the starting point value of the packet Default set...

Страница 110: ...ed Then when a packet passes through Vigor router it will not be cancelled That is the client who sends out the packet will not be blocked by ISP Default MAC Address You can use Default MAC Address or...

Страница 111: ...ly and allows you type in IP address manually Obtain an IP address automatically Click this button to obtain the IP address automatically if you want to use Dynamic IP mode More Options It shows optio...

Страница 112: ...RP Detect Ping Detect or Always On for the system to execute for WAN detection If you choose Ping Detect as the detection mode you have to type required settings for the following items Primary Second...

Страница 113: ...tain ISP when TTL value becomes 0 If disabled TTL value will not be reduced Then when a packet passes through Vigor router it will not be cancelled That is the client who sends out the packet will not...

Страница 114: ...io button to close the connection through PPTP or L2TP Server Address Specify the IP address of the PPTP L2TP server if you enable PPTP L2TP client mode Specify Gateway IP Address Specify the gateway...

Страница 115: ...y action IP Address Assignment Method IPCP WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 32 public...

Страница 116: ...eb page will be shown Available settings are explained as follows Item Description Enable Disable Click Enable for activating this function If you click Disable this function will be closed and all th...

Страница 117: ...ket AP Discovery Click this button to open the Access Point Discovery window Let wireless 2 4GHz do AP discovery and choose the Wireless AP you wan to connect to SSID The identification of the Wireles...

Страница 118: ...as 012345678 or 64 Hexadecimal digits leading by 0x such as 0x321253abcde After finishing all the settings here please click OK to activate them I II I 1 1 2 2 9 9 D De et ta ai il ls s P Pa ag ge e...

Страница 119: ...command to restrict 3G band or do any special settings The maximum length of the string you can set is 47 characters Modem Dial String Such value is used to dial through USB mode Please use the defaul...

Страница 120: ...ection is on or off TTL Time to Live Set TTL value of PING operation Ping Interval Type the interval for the system to execute the PING operation Ping Retry Type the number of times that the system is...

Страница 121: ...not through ARP Detect or Ping Detect Mode Choose ARP Detect or Ping Detect for the system to execute for WAN detection If you choose Ping Detect as the detection mode you have to type required settin...

Страница 122: ...484 and etc automatically Detect Click it to detect a suitable MTU value Accept After clicking it the detected value will be displayed in the field of MTU Authentication Select PAP only or PAP or CHAP...

Страница 123: ...fied here If you choose 4G 3G 2G as network mode the router will choose a suitable one according to the actual wireless signal automatically APN Name APN means Access Point Name which is provided and...

Страница 124: ...whether network connection is alive or not through ARP Detect or Ping Detect Mode Choose ARP Detect or Ping Detect for the system to execute for WAN detection If you choose Ping Detect as the detectio...

Страница 125: ...r CHAP UserName Type the username optional The maximum length of the name you can set is 47 characters Password Type the password optional The maximum length of the password you can set is 62 characte...

Страница 126: ...he PPPoE mode connection which is available for the areas such as Taiwan hinet the Netherlands Australia and UK I II I 1 1 2 2 1 14 4 D De et ta ai il ls s P Pa ag ge e f fo or r I IP Pv v6 6 T TS SP...

Страница 127: ...roker Type the address for the tunnel broker IP FQDN or an optional port number WAN Connection Detection Such function allows you to verify whether network connection is alive or not through Ping Dete...

Страница 128: ...ssword assigned with the user name The maximum length of the password you can set is 19 characters Tunnel Broker It means a server of AICCU The server can provide IPv6 tunnels to sites or end users ov...

Страница 129: ...ettings are explained as follows Item Description DHCPv6 Client Configuration IAID Type a number as IAID DUID Display the DHCP unique ID used by such WAN interface Authentication Protocol Such protoco...

Страница 130: ...n this field for pinging TTL Time to Live If you choose Ping Detect as detection mode you have to type TTL value RIPng Protocol RIPng RIP next generation offers the same functions and benefits as IPv4...

Страница 131: ...entry Delete Click it to remove an existed entry Current IPv6 Address Table Display current interface IPv6 address Static IPv6 Gateway Configuration IPv6 Gateway Address Type your IPv6 gateway address...

Страница 132: ...ignored And all of the filter rules defined and enabled in Firewall menu will be activated Bridge Subnet Make a bridge between the selected LAN subnet and such WAN interface After finished the above...

Страница 133: ...connection is alive or not through Ping Detect Mode Choose Always On or Ping Detect for the system to execute for WAN detection Always On means no detection will be executed The network connection wil...

Страница 134: ...6rd prefix automatically from 6rd service provider The IPv4 WAN must be set as DHCP Static 6rd Set 6rd options manually IPv4 Border Relay Type the IPv4 addresses of the 6rd Border Relay for a given 6...

Страница 135: ...ction Always On means no detection will be executed The network connection will be on always Ping IP Hostname If you choose Ping Detect as detection mode you have to type IP address in this field for...

Страница 136: ...nel 2 Ethernet on WAN2 Channel 3 USB1 WAN3 Channels 5 through 10 can be bridged to one or more of the 3 LAN ports P2 through P4 In addition Channels 5 through 7 can be configured as virtual WANs WAN5...

Страница 137: ...lows Item Description Enable Channel 5 6 7 Check it to enable this channel WAN Type Specify a WAN type of the PVC Channel VLAN ADSL A PVC Channel will be created using an ADSL connection on WAN1 VDSL...

Страница 138: ...nnel The settings here will create a bridge between the LAN ports selected and the WAN The WAN interface of the bridge connection will be built upon the WAN type selected using the VLAN tag configured...

Страница 139: ...rname password and authentication parameters according to the information provided by your ISP ISP Name PPP Service Name Enter if your ISP requires this setting otherwise leave blank Username Name pro...

Страница 140: ...option to manually enter the IP address IP Address Type in the IP address Subnet Mask Type in the subnet mask Gateway IP Address Type in gateway IP address DNS Server IP Address Type in the primary IP...

Страница 141: ...ype is available The user will be able to select the physical WAN interface the channel shall use here General Settings VPI Available when WAN Type is ADSL Virtual Path Identifier Contact your ISP or...

Страница 142: ...g value Priority Choose the number to determine the packet priority for such VLAN The range is from 0 to 7 ATM OoS Configures the Quality of Service QoS of the ATM circuit QoS Type Select a proper QoS...

Страница 143: ...te ABR Available Bit Rate nrtVBR Non real time Variable Bit Rate rtVBR Real time Variable Bit Rate PCR It represents Peak Cell Rate The default setting is 0 SCR It represents Sustainable Cell Rate The...

Страница 144: ...l S Se et tu up p Or Item Description Index The WAN port Click to configure WAN Budget for a particular WAN Enable v WAN Budget is enabled on this WAN x WAN Budget is disabled on this WAN Quota The cu...

Страница 145: ...system to perform when the traffic has exceeded the budget limit Shutdown WAN interface All the outgoing traffic through such WAN interface will be terminated Using Notification Object The system wil...

Страница 146: ...is 7 days 20 means the whole cycle is 20 days When the time is up the router will reset the traffic record automatically Today is day Specify the day in the cycle as the starting point which Vigor rou...

Страница 147: ...sage If the WAN budget is exhausted a lock will be displayed on the page if Shutdown WAN interface is selected Which means no data transmission will be carried out Moreover the system will send out a...

Страница 148: ...connection which is also known as the triple play service This document is going to demonstrate how to configure the Multi PVC feature for triple play deployment There are two types of setup one is do...

Страница 149: ...WAN is an ADSL line d enable Add VLAN Header and enter the VLAN Tag and Priority as the service provider requires e check Enable for Bridge Mode and select the physical port member to which you re goi...

Страница 150: ...Vigor2862 Series User s Guide 134 O Op pe en n a a V Vi ir rt tu ua al l W WA AN N I In nt te er rf fa ac ce e 1 Go to WAN Multi PVC VLAN click on channel 5 6 or 7 to configure...

Страница 151: ...quires d enable Open WAN Interface for this Channel and select the kind of Application will be used on this channel Note this option is only available on channel 5 7 e set up the Internet Access type...

Страница 152: ...Vigor2862 Series User s Guide 136 4 Now you may use the virtual WAN interface for applications such as IGMP Proxy this can be done by selecting the WAN interface as PVC VLAN...

Страница 153: ...ither of the active WAN as their path therefore the traffic load is shared across the WAN interfaces For newer models which support Session based Load Balance the router can also do WAN aggregation wh...

Страница 154: ...ed in Failover mode the WAN interface will only be active when the primary WAN disconnects and will be down again when the primary WAN resume its service To configure a WAN interface in Failover mode...

Страница 155: ...plement an IPv6 address on Vigor Router s WAN 1 Before configuring IPv6 on WAN please make sure the router is connected to the IPv4 Internet 2 Go to WAN Internet Access click on IPv6 of the WAN interf...

Страница 156: ...k the status from the IPv6 tab on Online Status Physical Connection page 5 Furthermore Network Administrator may test the connectivity of IPv6 from the router by going to Diagnostics Ping Diagnosis an...

Страница 157: ...u un nn ne el l S Se et tu up p P Pr ro ot to oc co ol l C Cl li ie en nt t In this mode the IPv6 connectivity is provided by a tunnel broker on the IPv4 Internet through a tunnel set up by Tunnel Set...

Страница 158: ...for you you may configure that IPv6 address for WAN by doing the following steps 1 Set Connection Type to Static IPv6 2 Enter the IPv6 address and Prefix Length which provided by the ISP and click Add...

Страница 159: ...d manually To use 6in4 Static Tunnel you need sign up for a tunnel broker service and get an IPv6 address and routed IPv6 prefixes first Then configure the router as follows 1 Set Connection Type to 6...

Страница 160: ...the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assigns private IP address t...

Страница 161: ...St ta at ti ic c R Ro ou ut te e When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static routes function rather than other method You may simp...

Страница 162: ...d to restrict traffic coming in and going out of the computer VLANs on the other hand are usually set up using network switches or routers such as the Vigor2862 To communicate with the hosts outside o...

Страница 163: ...AN1 is configured with DHCP DHCPv6 in default If required please check the DHCP box for each LAN IP Address Display the IP address for each LAN item Such information is set in default and you can not...

Страница 164: ...nter LAN Routing matrix a selected checkbox means that the 2 intersecting LANs can communicate with each other When you finish the configuration please click OK to save and exit this page Info To conf...

Страница 165: ...CP server if you do not have a DHCP server for your network If you want to use another DHCP server in the network other than the Vigor Router s you can let Relay Agent help you to redirect the DHCP re...

Страница 166: ...o they may have a human friendly easy to remember name such as www yahoo com The DNS server converts the user friendly name into its equivalent IP address Primary IP Address You must specify a DNS ser...

Страница 167: ...DHCP and static assignment are used on a network it is important to exclude the static IP addresses from the DHCP IP pool For example if your LAN uses the 192 168 1 x subnet and you have 20 DHCP clien...

Страница 168: ...the subnet Default 255 255 255 0 24 DHCP Server Configuration Disable Server Let you manually assign IP address to every host in the LAN Enable Server Let the router assign IP address to every host in...

Страница 169: ...the Relay Agent can help to forward the DHCP request to the DHCP server DNS Server IP Address DNS stands for Domain Name System Every Internet host must have a unique IP address also they may have a h...

Страница 170: ...the Routing Information Protocol DHCP Server Configuration DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your network so it automatically dis...

Страница 171: ...ich can be assigned deleted or edited from above pool Set a list of MAC Address for 2nd DHCP server will help router to assign the correct IP address of the correct subnet to the correct host So those...

Страница 172: ...pe and refer to the following explanations for detailed information Below shows the settings page for IPv6 It provides 2 daemons for LAN side IPv6 address configuration One is SLAAC stateless and the...

Страница 173: ...tion is up or not Primary DNS Sever Type the IPv6 address for Primary DNS server Secondary DNS Server Type another IPv6 address for DNS server if required Disable DNS server will not be used Managemen...

Страница 174: ...odically and when requested by a node sending a Router Solicitation message These messages are required for IPv6 stateless auto configuration Disable Click it to disable router advertisement server Ho...

Страница 175: ...to carry IPv6 traffic After making changes on the Advance setting page click the OK button to retain the changes and return to the LAN IPv6 Setup page Be sure to click OK on the LAN IPv6 Setup page o...

Страница 176: ...h clear the data entry fields Enable Interface Option Number DataType and Data by clicking Reset After filling in the values click Add to create the new entry To add a DHCP option entry modeled after...

Страница 177: ...es for LAN side QoS You can assign each of VLANs to each of the different IP subnets that the router may also be operating to provide even more isolation The said functionality is tag based multi subn...

Страница 178: ...et VLAN Tag Enable Check the box to enable the function of VLAN with tag The router will add specific VLAN number to all packets on the LAN while sending them out Please type the tag value and specify...

Страница 179: ...solated It is only available when the VLAN functionality is enabled In the Inter LAN Routing matrix a selected checkbox means that the 2 intersecting LANs can communicate with each other Vigor2862 ser...

Страница 180: ...Series User s Guide 164 4 Click OK 5 Open LAN General Setup If you want to let the clients in both groups communicate with each other simply activate Inter LAN Routing by checking the box between LAN1...

Страница 181: ...P subnets on LAN Each can be independent isolated or common able to communicate with each other This is ideal for departmental or multi occupancy applications Info As for the VLAN applications refer t...

Страница 182: ...trol MAC address Click LAN and click Bind IP to MAC to open the setup page Available settings are explained as follows Item Description Enable Click this radio button to invoke this function However I...

Страница 183: ...for manipulation Sort Reorder the entry based on the IP address Refresh Refresh the ARP table listed below to obtain the newest ARP table information Add or Update to IP Bind List IP Address Type the...

Страница 184: ...existing list Info Before you select Strict Bind you have to bind one set of IP MAC address for one PC If not no one of the PCs can access into Internet And the web user interface of the router might...

Страница 185: ...from the menu bar of the Web UI to bring up the LAN Port Mirror configuration page Available settings are explained as follows Item Description Port Mirror Enables or disables LAN Port Mirroring Mirro...

Страница 186: ...ck the box to enable LAN 802 1x function Authentication Type External RADIUS An external RADIUS server is to be used for 802 1X authentication Go to Applications RADIUS TACACS External RADIUS to speci...

Страница 187: ...is only supported by certain firmware version I II I 3 3 1 1 S Se et tu up p When the data traffic is heavy and data transmission is getting slowly and slowly you can configure this page to accelerate...

Страница 188: ...f QoS Specific Hosts This sub item provides 5 hosts for adding NAT sessions into the PPA For the PPA only supports 128 sessions these hosts will share these sessions Therefore the performance will be...

Страница 189: ...Vigor2862 Series User s Guide 173...

Страница 190: ...ic IP address and the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes Save cost on applying publ...

Страница 191: ...ss domain name are recognized by all users Since the server is actually located inside the LAN the network well protected by NAT of the router and identified by its private IP address port the goal of...

Страница 192: ...e WAN Interface Display the WAN IP address used by the profile Protocol Display the transport layer protocol TCP or UDP Public Port Display the port number which will be redirected to the specified Pr...

Страница 193: ...means all the incoming data from any port will be redirected to specified range of IP address and port Public Port Specify which port can be redirected to the specified Private IP and Port of the inte...

Страница 194: ...xample the built in web user interface in the router is with default port 80 which may conflict with the web server in the local network http 192 168 1 13 80 Therefore you need to change the router s...

Страница 195: ...gle host in the LAN Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption DMZ Host allows a defined internal user to be tot...

Страница 196: ...ivate IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host When you have selected one private IP from the above dialog the IP address will be show...

Страница 197: ...Click this button and then a window will automatically pop up as depicted below The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in...

Страница 198: ...particular entry that you want to offer service in a local host You should click the appropriate index number to edit or clear the corresponding entry Enable Check the box to enable the open port prof...

Страница 199: ...will be used for this entry This setting is available when WAN IP Alias is configured Private IP Enter the private IP address of the local host or click Choose PC to select one Choose IP Click this b...

Страница 200: ...e configuration has taken effect open port keeps the ports opened forever Once the OK button is clicked and the configuration has taken effect port triggering will only attempt to open the ports once...

Страница 201: ...ocol Display the protocol of the triggering packets Source IP Display the name of the IP object Triggering Port Display the port of the triggering packets Incoming Protocol Display the protocol for th...

Страница 202: ...ease click OK to save the configuration I II I 4 4 5 5 A AL LG G ALG means Application Layer Gateway There are two methods provided by Vigor router RTSP Real Time Streaming Protocol ALG and SIP Sessio...

Страница 203: ...ecified private IP address S Sc ch he ed du ul le e The Vigor router has a built in clock which can update itself manually or automatically by means of Network Time Protocols NTP As a result you can n...

Страница 204: ...uter is NAT Traversal This enables applications inside the firewall to automatically open the ports that they need to pass through a router W Wa ak ke e o on n L LA AN N A PC client on LAN can be woke...

Страница 205: ...D Dy yn na am mi ic c D DN NS S A Ac cc co ou un nt t 1 Assume you have a registered domain name from the DDNS provider say hostname dyndns org and an account with username test and password test 2 O...

Страница 206: ...Enable Check the box to enable such account WAN Interface Display the WAN interface used Domain Name Display the domain name that you set on the setting page of DDNS setup 4 Select Index number 1 to...

Страница 207: ...channel for such account Service Provider Select the service provider for the DDNS account Service Type Select a service type Dynamic Custom or Static If you choose Custom you can modify the domain t...

Страница 208: ...for all Dynamic DNS providers You could get more detailed information from their websites Mail Extender If the mail server is defined with another name please type the name in this area Such mail ser...

Страница 209: ...s private IP this function can detect the public IP used by the NAT router and use the detected IP address for DDNS update There are two methods offered for you to choose WAN IP If it is selected and...

Страница 210: ...or2862 Series User s Guide 194 D De el le et te e a a D Dy yn na am mi ic c D DN NS S A Ac cc co ou un nt t Click the Index number you want to delete and then click Clear All button to delete the acco...

Страница 211: ...you can specify specific private IP address es to correspondent servers Thus even the remote PC is adopting public DNS as the DNS server the LAN DNS resolution on Vigor2862 series will respond the spe...

Страница 212: ...Available settings are explained as follows Item Description Enable Check this box to enable such profile Profile Type a name for such profile Note If you type a name here for LAN DNS and click OK to...

Страница 213: ...profile just created Or you can click index 2 to use this profile as conditional DNS forwarding Available settings are explained as follows Item Description Enable Check this box to enable such profil...

Страница 214: ...are explained as follows Item Description Interface There are four WAN interfaces allowed to be set with DNS security enabled Enable Check the box to enable the DNS security management Primary DNS Dis...

Страница 215: ...ngs are explained as follows Item Description Domain Type the domain name or IP address IPv4 IPv6 that you want to query Interface Specify the interface required for executing diagnose DNS Server Type...

Страница 216: ...In System Maintenance Time and Date menu press Inquire Time button to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is...

Страница 217: ...Internet Access or VPN and Remote Access LAN to LAN settings To add a schedule 1 Click any index say Index No 1 2 The detailed settings of the schedule with index 1 will be shown below Available sett...

Страница 218: ...t means the action applied such schedule will be executed every three days since the date defined on the Start Date 3 Click OK button to save the settings Example Suppose you want to control the PPPoE...

Страница 219: ...cation It enables centralized remote access authentication for network management Vigor router can be operated as a RADIUS client This web page is used to configure settings for external RADIUS server...

Страница 220: ...2138 Disconnect Message Port Set a port number for listenning the RADIUS disconnection message Update Interval Set a time interval for sending the accounting request to the RADIUS server RADIUS Server...

Страница 221: ...eck to enable internal RADIUS client feature Authentication Port Set a port number for internal RADIUS server RADIUS Client Access List Allow to configure that clients under specified domain IPv4 and...

Страница 222: ...uthentication user account and user password will be required for identity authentication Before configuring such page create at least one user profile in User Management User Profile first Select All...

Страница 223: ...Description Enable Check to enable TACACS feature Server IP Address Enter the IP address of TACACS server Destination Port The UDP port number that the TACACS server is using Shared Secret The TACACS...

Страница 224: ...y I II I 5 5 6 6 1 1 G Ge en ne er ra al l S Se et tu up p This page allows you to enable the function and specify general settings for LDAP server Available settings are explained as follows Item Des...

Страница 225: ...follows Item Description Name Type a name for such profile The length of the user name is limited to 19 characters Common Name Identifier Type or edit the common name identifier for the LDAP server T...

Страница 226: ...Vigor2862 Series User s Guide 210 After finished the above settings click OK to save and exit this page A new profile has been created...

Страница 227: ...Control Service or Connection Status Service Default WAN It is used to specify the WAN interface for applying such function The reminder as regards concern about Firewall and UPnP Can t work with Fire...

Страница 228: ...ent two versions v2 and v3 are supported by Vigor router Choose the correct version based on the IPTV service you subscribe General Query Interval Vigor router will periodically check which IP obtaini...

Страница 229: ...g all the settings here please click OK to save the configuration I II I 5 5 8 8 2 2 W Wo or rk ki in ng g G Gr ro ou up p Available settings are explained as follows Item Description Refresh Click th...

Страница 230: ...able settings are explained as follows Item Description Wake by Two types provide for you to wake up the binded IP If you choose Wake by MAC Address you have to type the correct MAC address of the hos...

Страница 231: ...hat the content is and when the SMS will be sent Available settings are explained as follows Item Description Index Check the box to enable such profile SMS Provider Use the drop down list to choose S...

Страница 232: ...ings SMS Mail Service Object If there is no object listed click Mail Service link to define a new one with specified service provider Mail Address Type the e mail address of the one who will receive t...

Страница 233: ...n e g IP setting If the host and user s computer have the plug in bonjour driver install they can utilize the service offered by the router by clicking the router name icon In short what the Clients u...

Страница 234: ...tem Maintenance Management Type a name as the Router Name and click OK 4 Next open Applications Bonjour Check the service that you want to use via Bonjour 5 Open the DNSSD page again The available ite...

Страница 235: ...Vigor2862 Series User s Guide 219 6 Now any page or document can be printed out through Vigor router installed with a printer...

Страница 236: ...andled by the failed component the primary router to the backup component the secondary router and the availability of network resources are preserved and partially failed transactions are recovered I...

Страница 237: ...undancy Method Select the redundancy method for high availability Hot Standby Such method is suitable when there is only one ISP account When this method is selected During normal operation the second...

Страница 238: ...ity ID i e the highest priority will be the primary router When multiple routers in a group are assigned the same priority ID routers with lower LAN IP addresses configured on the LAN General Setup pa...

Страница 239: ...n be enabled by Hot Standby redundancy method only Config Sync Interval Day Hour Minute The primary router will synchronize its configuration with secondary routers at every specified time interval Ex...

Страница 240: ...e primary device and the other Vigor2862 is the secondary device When the primary Vigor2862 breaks down the secondary device assumes the role of the primary device by taking over all responsibilities...

Страница 241: ...1X server At present such feature can be used for wireless and wired 802 1x authentication User Profile Select All Click to add all User Profiles to the 802 1X server All profiles will appear under th...

Страница 242: ...nal RADIUS will be changed as Disabled too even if it is enabled previously OK Click it to save the settings Clear Click it to remove previous setting configuration Cancel Click it to give up all sett...

Страница 243: ...N line to dial up and continue to provide Internet service to LAN clients Active Standby mode is almost same as Hot Standby mode only that in the Active Standby mode the Primary and Secondary connect...

Страница 244: ...for High Availability only and put all other LAN clients in LAN2 LAN5 e Update DDNS for dynamic WAN IP users enable this function so once the secondary router becomes primary and dials up the WAN it...

Страница 245: ...l IP and the LAN IP of secondary router Again for any routers with the same Priority ID their IP addresses will be compared so we suggest to use a IP with lower number on the Primary one b Gateway IP...

Страница 246: ...t IP addresses to avoid IP conflict Here is the example there are several LAN and all of them are under the protection of hardware redundancy 6 We have setup High Availability on both routers and befo...

Страница 247: ...ate via the Management Interface it s required to use the ports that belong to the Management Interface LAN LAN1 in this scenario We can check for this information in LAN VLAN In this scenario we can...

Страница 248: ...step 2 We may force to sync by clicking the Sync button The secondary router will reboot after the config sync 9 Now we may inspect if the secondary router received the configuration from the primary...

Страница 249: ...in ng g t th he e W WC CF F L Li ic ce en ns se e 11 Now the routers are set if you have WCF license you may create a group on MyVigor so these routers can share the same license a First login to myv...

Страница 250: ...under c Save the profile and we can see the group entry S Se en nd d t th he e N No ot ti if fi ic ca at ti io on n t to o N Ne et tw wo or rk k A Ad dm mi in ni is st tr ra at to or r We can set Vig...

Страница 251: ...DDNS service DrayDDNS We will provide a domain name for each Vigor Router this single domain name can record IP addresses of all WAN A Ac ct ti iv va at te e D Dr ra ay yD DD DN NS S L Li ic ce en ns...

Страница 252: ...ions Dynamic DNS Setup a Tick Enable Dynamic DNS Setup b Click an available profile index c Tick Enable Dynamic DNS Account d Select DrayTek Global www drayddns com as Service Provider e Select the WA...

Страница 253: ...om ma ai in n N Na am me e Currently only the domain name is allowed to be modified MyVigor website We will need to register the router to MyVigor server and log in to MyVigor website to modify it 1 P...

Страница 254: ...me e g XXXX25 and click Update 4 Vigor router will get the modified domain name when the it performs next DDNS updating We can click Sync domain to accelerate this process After few seconds the router...

Страница 255: ...Vigor2862 Series User s Guide 239...

Страница 256: ...face of the Vigor router 2 Open Applications Active Directory LDAP to get the following page for configuring LDAP related settings There are three types of bind type supported Simple Mode Just simply...

Страница 257: ...Vigor2862 Series User s Guide 241 and 4 Click OK to save the settings above 5 Open User Management General Setup Select User Based as the Mode option...

Страница 258: ...VPN and Remote Access PPP General Setup to check the profile s that will be authenticated with LDAP server After above configurations users belong to either rd1 or shrd group can access Internet afte...

Страница 259: ...ers to update your IP to the DDNS server We will take Changeip org and 3322 net as example Before setting please make sure that the WAN connection is up P Pa ar rt t A A C Ch ha an ng ge ei ip p o or...

Страница 260: ...Service API as dynamic dns update asp u jo p jo hostname j changeip org ip IP cmd update offline 0 In which IP is a value which will be replaced with the current interface IP address automatically wh...

Страница 261: ...an do the same job for us automatically 1 Please go to Applications Dynamic DNS to create a profile for Customized DDNS client 4 Set the Service Provider as User Defined 5 Set the Provider Host as mem...

Страница 262: ...Vigor2862 Series User s Guide 246 P Pa ar rt t C C E Ex xt te en nd d N No ot te e The customized Service Provider is also eligible with the ClouDNS net...

Страница 263: ...nterface Specify Interface Through dedicated interface WAN LAN VPN the data can be sent from the source IP to the destination IP Address Mapping Allows you specify the outgoing WAN IP address es for a...

Страница 264: ...ti ic c R Ro ou ut te e f fo or r I IP Pv v4 4 Available settings are explained as follows Item Description Index The number 1 to 30 under Index allows you to open next page to set up static route En...

Страница 265: ...rnal Router B 192 168 1 3 have set Main Router 192 168 1 1 as the default gateway for the Router A 192 168 1 2 Before setting Static Route user A cannot talk to user B for Router A can only forward re...

Страница 266: ...to enable this profile Destination IP Address Type an IP address as the destination of such static route Subnet Mask Type the subnet mask for such static route Network Interface Use the drop down lis...

Страница 267: ...e static route profile Destination Address Displays the destination address of the static route Set to Factory Default Clear all of the settings and return to factory default settings Viewing IPv6 Rou...

Страница 268: ...Vigor2862 Series User s Guide 252 Network Interface Use the drop down list to specify an interface for this static route When you finish the configuration please click OK to save and exit this page...

Страница 269: ...ption Index Click the number of index to access into the configuration web page Enable Check this box to enable this policy Protocol Display the protocol used for this policy Interface Display the int...

Страница 270: ...IP end for the specified WAN interface If this field is blank it means that all the source IPs inside the LAN will be passed through the WAN interface Destination IP Any Any IP can be treated as the d...

Страница 271: ...terface chosen here 4 Specify an interface and click Next The following page will appear only if you choose WAN1 WAN7 as Interface Available settings are explained as follows Item Description Force NA...

Страница 272: ...gs are explained as follows Item Description Enable Check this box to enable this policy Comment Type a brief explanation for such profile Protocol Use the drop down menu to choose a proper protocol f...

Страница 273: ...e drop down list to choose a preconfigured IP object group Country Object Use the drop dwon list to choose a preconfigured object Then all IPs within that country will be treated as the destination IP...

Страница 274: ...200 which means it has higher priority than the default route Failback When Failover to option is enabled Administrator could also enable Failback to clear the existing session on Failover interface a...

Страница 275: ...e how a single packet will be sent by a route policy Analyze multiple packets Choose such mode to make Vigor router analyze how multiple packets in a specified file will be sent by a route policy Pack...

Страница 276: ...nput File Select Click the download link to get a blank example file Then click such button to select that blank csv file for saving the result of analysis Analyze Click it to perform the job of analy...

Страница 277: ...ck the box to enable basic BGP function for local router Local AS Number Set the AS number for local router Hold Time Set the time interval in seconds to determine the peer is dead when the router is...

Страница 278: ...connection status for local router and neighboring router I II I 6 6 3 3 1 1 S St ta at ti ic c N Ne et tw wo or rk k This page allows you to configure up to eight neighboring routers for exchanging t...

Страница 279: ...WAN IP alias IP Refer to the following figure This document introduces how to set up address mapping with Route Policy When a WAN interface has multiple public IP addresses Administrator may specify...

Страница 280: ...face as WAN and then select Interface address from the drop down list The List can be edited in WAN IP Alias setting Enable Failover to other WAN so the traffic will be sent via other Interface when t...

Страница 281: ...set up route polices if the network administrator is trying to specify the gateway for the traffic that destined for a certain website To use a destination domain name as criteria just select Domain...

Страница 282: ...ts s If you manually enter the domain name in a route policy after clicking OK to apply the route policy those domain names will be given a number That means the router has automatically created stri...

Страница 283: ...1 100 200 152 255 255 255 248 for us and the gateway IP is 211 100 200 158 The public IP addresses we can use are between 211 100 200 153 to 211 100 200 157 The following shows how to set up a non NAT...

Страница 284: ...a Enable IP Routed Subnet b Enter the IP Address for the router Note that this could be the same as router s WAN IP c Enter the Subnet Mask according to ISP 3 For the host behind Vigor Router to obtai...

Страница 285: ...sk 255 255 255 248 Gateway IP 211 100 200 153 will be able to access Internet through Vigor Router R Ro ou ut ti in ng g U Us sa ag ge e L LA AN N We may also create a LAN subnet for routing usage Her...

Страница 286: ...outing Usage c Enter the IP Address for the router Note that this could be the same as router s WAN IP d Enter the Subnet Mask according to ISP 4 For DHCP Server Configuration we may either Disable DH...

Страница 287: ...ng g If PC with public IP address setting cannot access Internet after above configuration please check If the public IP address has been used by another device If the router s WAN Access Mode is Stat...

Страница 288: ...oad Balance Route Policy The following image is a screen shot of Load Balance Route policy page It lists all the policies and shows whether the policy is enabled what are the criteria to match and thr...

Страница 289: ...s WAN or VPN there are some more options Failover to Enables packet to be sent through other Interface or follow another Policy when detects a path failure in the original interface The above configur...

Страница 290: ...dministrator may set priority between 1 and 249 for this Route policy where smaller number indicates higher priority When two policies are having the same priority the first according to the policy in...

Страница 291: ...ilize this SIM card to provide more useful functions for user Now we have developed some useful functions for user such as sending SMS from a router to report router status rebooting router remotely v...

Страница 292: ...explained as follows Item Description Enable SMS Quota Limit Check the box to enable such feature Quota Limit Specify the maximum number of sending SMS for LTE When quota exceeded There are two action...

Страница 293: ...ycle duration by specifying the days and the hours Cycle duration Specify the days to reset the number of SMS sent For example 7 means the whole cycle is 7 days 20 means the whole cycle is 20 days Whe...

Страница 294: ...ease note that the SIM card can not receive new SMS when all SMS indexes are occupied Click the Simple Mode link or the Advanced Mode link below to switch between these two modes I II I 7 7 2 2 1 1 S...

Страница 295: ...Description Mark as Read Those SMS in unread state are shown in bold text If you want to change SMS into read state select them and click the OK button Checking the checkbox in title will select all u...

Страница 296: ...Guide 280 Message Content Display the full content of the message OK Return to previous page Delete Click it to delete all SMS of this message and return to previous page Next Click it to see the con...

Страница 297: ...can be an international phone number 8869123455678 or a general phone number 0912345678 Data Coding Scheme The router will automatically select a suitable Data Coding Scheme according to the current...

Страница 298: ...ion to reboot Vigor router remotely and get the router status via SMS Go to LTE Router Commands to get the following page Available settings are explained as follows Item Description Reboot on SMS Mes...

Страница 299: ...entering the password PIN specified in this field The password shall be composed by letters numbers and baseline Access Control List Check the box to type or modify up to 3 phone numbers The phone num...

Страница 300: ...s LTE WAN status IMEI International Mobile Equipment Identity of the embedded LTE module IMSI International Mobile Subscripber Identity of the LTE SIM card Access Tech Type of LTE connection CDMA GSM...

Страница 301: ...annel RX Rate Maximum TX RX link rate of LTE connection SMS Centre Number The phone number for SMS service of the LTE SIM card SMS Service status Whether the SMS service of the LTE SIM card is ready S...

Страница 302: ...Vigor2862 Series User s Guide 286 This page is left blank...

Страница 303: ...er s Guide 287 P Pa ar rt t I II II I W Wi ir re el le es ss s L LA AN N Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well...

Страница 304: ...ntegrated wireless local area network WLAN for 5 GHz 802 11ac or 2 4 5 GHz 802 11n WLAN applications It supports channel operations of 20 40 MHz at 2 4 GHz and 20 40 80 MHz at 5 GHz Vigor2862 ac serie...

Страница 305: ...ay consider using WPA for the most secure connection You should select the appropriate security mechanism according to your needs No matter which security suite you select they all will enhance the ov...

Страница 306: ...will open channels 52 56 60 64 100 104 108 112 116 120 124 128 132 136 and 140 At present we will not open DFS channels in the USA because we do not have plan for DFS certification in the USA Channels...

Страница 307: ...se for a company and specified for a guest AP for any wireless clients accessing into Internet Follow the steps listed below 1 Open Wizards Wireless Wizard 2 The screen of wireless wizard will be show...

Страница 308: ...tiated via 802 1x authentication Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by 0x such as 0x321253abcde Use the same SSID and Security Key as above Check the box t...

Страница 309: ...rame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Either 8 63 ASCII characters su...

Страница 310: ...field below or automatically negotiated via 802 1x authentication Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by 0x such as 0x321253abcde Next Click it to get into...

Страница 311: ...Check the box to enable wireless function Mode For 2 4GHz At present the router can connect to 11b Only 11g Only 11n Only 2 4 GHz Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneo...

Страница 312: ...different usage In default the first set of SSID will be enabled You can hide it for your necessity SSID Means the identification of the wireless LAN SSID can be any text numbers or various special ch...

Страница 313: ...oke it The password PSK of default security mode is provided and stated on the label pasted on the bottom of the router For the wireless client who wants to access into Internet through such router pl...

Страница 314: ...namically from RADIUS server with 802 1X protocol WPA PSK Accepts only WPA clients and the encryption key should be entered in PSK WPA2 PSK Accepts only WPA2 clients and the encryption key should be e...

Страница 315: ...be selected at a time The keys can be entered in ASCII or Hexadecimal Check the key you wish to use After finishing all the settings here please click OK to save the configuration I II II I 1 1 4 4 A...

Страница 316: ...ired to insert this MAC address into their access control list Attribute s Isolate the station from LAN select to isolate the wireless connection of the wireless client of the MAC address from LAN Com...

Страница 317: ...on with WPS supported It is the simplest way to build connection between wireless network clients and vigor router Users do not need to select any encryption mode and type any long encryption passphra...

Страница 318: ...rt PBC button of network card If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to connect to the vigor r...

Страница 319: ...de of the router Only WPA2 PSK and WPA PSK support WPS Configure via Push Button Click Start PBC to invoke Push Button style WPS setup procedure The router will wait for WPS requests from wireless cli...

Страница 320: ...ridge interface The application for the WDS Repeater mode is depicted as below The major difference between these two modes is that while in Repeater mode the packets received from one peer AP can be...

Страница 321: ...ollowing page will be shown Available settings are explained as follows Item Description Mode Choose the mode for WDS setting Disable mode will not invoke any WDS setting Bridge mode is designed to fu...

Страница 322: ...ses are allowed to be entered in this page at one time Yet please disable the unused link to get better performance If you want to invoke the peer MAC address remember to check Enable box in the front...

Страница 323: ...dwidth 20 the router will use 20Mhz for data transmission and receiving between the AP and the stations 20 40 Vigor Router will scan for nearby wireless AP and then use 20MHz if the number of AP is mo...

Страница 324: ...t over the power save mechanisms supported by Wi Fi networks It allows devices to take more time in sleeping state and consume less power to improve the performance by minimizing transmission latency...

Страница 325: ...d will not occupy the wireless network for a long time Available settings are explained as follows Item Description SSID Display the SSID that the wireless station will use it to connect with Vigor ro...

Страница 326: ...is determined according to the limitation of the wireless client Total Upload Limit It is available when Auto Adjustment is selected Type a value to define the maximum data traffic uploading for all...

Страница 327: ...ce of the APs on the wireless LAN Yet only the AP which is in the same channel of this router can be found Please click Scan to discover all the connected APs Available settings are explained as follo...

Страница 328: ...IEEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case...

Страница 329: ...ns 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Available settings are explained as follows Item Description Enable Airtime Fairness Try to assign sim...

Страница 330: ...hat frequency It helps to leave 2 4GHz band available for legacy clients and improves users experience by reducing channel utilization If dual band is detected the AP will let the wireless client conn...

Страница 331: ...ent is capable of dual band or not within the time limit Check Time If the wireless station does not have the capability of 5GHz network connection the system shall wait and check for several seconds...

Страница 332: ...box of Enable Band Steering and use the default value 15 for check time setting 3 Click OK to save the settings 4 Open Wireless LAN 2 4GHz General Setup and Wireless LAN 5GHz General Setup Configure...

Страница 333: ...d Wireless LAN 5GHz Security Configure Security as 12345678 for both pages Click OK to save the settings 6 Now Vigor router will let the wireless clients connect to less congested wireless LAN such as...

Страница 334: ...requirement and cut off the network connection for that wireless station to assist it to connect another Wireless AP to get better signal This option is to disable the roaming mechanism Strictly Mini...

Страница 335: ...eneral advanced neighbor will display different status information including IP address MAC address Associated with AID RSSI Rate BW PSM WMM PhMd MCS Venfor Approx Distance SSID Visit Time and so on A...

Страница 336: ...Vigor2862 Series User s Guide 320 This page is left blank...

Страница 337: ...Vigor2862 Series User s Guide 321 P Pa ar rt t I IV V V Vo oI IP P Voice over IP network VoIP enables you to use your broadband Internet connection to make toll quality voice calls over the Internet...

Страница 338: ...d the password field and the sign following them This is very similar to a URL so some may call it SIP URL SIP supports peer to peer direct calling and also calling via a SIP proxy server a role simil...

Страница 339: ...models also equip with automatic QoS assurance QoS Assurance assists to assign high priority to voice traffic via Internet You will always have the required inbound and outbound bandwidth that is prio...

Страница 340: ...del only 1 Open Wizards VoIP Wizard 2 The screen of VoIP Wizard will be shown as follows Available settings are explained as follows Item Description Set VoIP service provider domain VoIP service prov...

Страница 341: ...ed to configure Phone 2 settings simply check this box Next Click it to get into the next setting page Cancel Click it to give up the VoIP wizard 3 After finished the settings above click Next for vie...

Страница 342: ...the following page appears for you to configure secure phone IP call and set NAT Traversal Setting RTP for the VoIP function Available settings are explained as follows Item Description Secure Phone...

Страница 343: ...dial outgoing IP Calls and Vigor router could receive the incoming IP Calls A Ap pp pl li ic ca at ti io on n f fo or r S Se ec cu ur re e P Ph ho on ne e Enable SAS Voice Prompt for ex if vigor route...

Страница 344: ...incoming or outgoing calls do not match any entry on the phonebook the router will try to make the call being protected But if the call ends up unprotected e g peer side does not support ZRTP SRTP th...

Страница 345: ...destination using AccountName Domain Realm as identity Info Selection items for Ring Port will differ according to the router you have Available settings are explained as follows Item Description Inde...

Страница 346: ...ou can type similar name with the domain For example if the domain name is draytel org then you might set draytel 1 in this field Register via If you want to make VoIP call without register personal i...

Страница 347: ...ntication ID Check the box to invoke this function and enter the name or number used for SIP Authorization with SIP Registrar If this setting value is the same as Account Name it is not necessary for...

Страница 348: ...etting is 30 sec Ring Port Set Phone 1 and or Phone 2 as the default ring port s for this SIP account Ring Pattern Choose a ring tone type for the VoIP phone call Prefer Codec Select one of five codec...

Страница 349: ...n detect if the voice on both sides is active or not If not the router will do something to save the bandwidth for other using Click On to invoke this function click off to close the function After fi...

Страница 350: ...1 4 4 1 1 P Ph ho on ne e B Bo oo ok k In this section you can set your VoIP contacts in the phonebook It can help you to make calls quickly and easily by using speed dial Phone Number There are total...

Страница 351: ...on Backup Phone Number When the VoIP phone obstructs or the Internet breaks down for some reasons the backup phone will be dialed out to replace the VoIP phone number At this time the phone call will...

Страница 352: ...ne No action Add When you choose this mode the OP number will be added before the match prefix number for calling out through the specific route Strip When you choose this mode the partial or whole ma...

Страница 353: ...number is between 7 and 9 that number can apply the prefix number settings here Max Len Set the maximum length of the dial number for applying the prefix number settings Route Choose the one that you...

Страница 354: ...k the incoming calls without caller ID on the interface Phone port specified in the following window Such control also can be done based on preconfigured schedules For Block Unknown Domain this functi...

Страница 355: ...OUT both incoming and outgoing calls Barring Type Determine the type of the VoIP phone call URI URL or number Specific URI URL or Specific Number This field will be changed based on the type you sele...

Страница 356: ...ncoming phone call however you want to call back again for some reason Please dial number typed in this field to call back to that one Last Call Return Out Dial the number typed in this field to call...

Страница 357: ...calls from unknown domain Block Unknown Domain Deact Dial the number typed in this field to release this function Block IP Calls Act Dial the number typed in this filed to block all the incoming call...

Страница 358: ...PSTN phones Call Feature A brief description for call feature will be shown in this field for your reference Tone Display the tone settings that configured in the advanced settings page of Phone Index...

Страница 359: ...out disturbing by VoIP phone call During the period the one who dial in will listen busy tone yet the local user will not listen any ring tone Index 1 15 in Schedule Enter the index of schedule profil...

Страница 360: ...r users To set the sound pattern of the phone set simply choose a proper region to let the system find out the preset tone settings and caller ID type automatically Or you can adjust tone settings man...

Страница 361: ...oudness of the call waiting tone The smaller the number is the louder the tone is It is recommended for you to use the default setting Interdigit Timeout Type a value in this field to specify time lim...

Страница 362: ...o give another number to replace the plus sign for example can be replaced by 00 Then the above phone number will become 008865972727 When the callee receives such number he can use re dial function t...

Страница 363: ...eerID The present in call or out call peer ID the format may be IP or Domain Elapse hh mm ss The format is represented as hours minutes seconds Tx Pkts Total number of transmitted voice packets during...

Страница 364: ...48 I IV V 1 1 7 7 D Di ia ag gn no os st ti ic cs s VoIP Diagnostics is used for diagnosing if VoIP phone failure is caused by different tone or caller ID I IV V 1 1 7 7 1 1 C Ca al ll le er r I ID D...

Страница 365: ...manner that emulates the properties of a point to point private link It is a form of VPN that can be used with a standard Web browser A digital certificate works as an electronic ID which is issued b...

Страница 366: ...en home office and customer Secure connection between Teleworker staff on business trip and main office Exchange data between remote office and main office POS between chain store and headquarters S S...

Страница 367: ...guide to set the LAN to LAN profile for VPN dial out connection from server to client step by step 1 Open Wizards VPN Client Wizard The following page will appear Available settings are explained as...

Страница 368: ...he VPN client profile There are six types provided here Different type will lead to different configuration page After making the choices for the client profile please click Next You will see differen...

Страница 369: ...Vigor2862 Series User s Guide 353 When you choose IPsec you will see the following graphic When you choose SSL you will see the following graphic...

Страница 370: ...ose L2TP over IPsec Nice to Have or L2TP over IPsec Must you will see the following graphic Available settings are explained as follows Item Description Profile Name Type a name for such profile The l...

Страница 371: ...PN if WAN2 down If WAN2 failed the router will use WAN1 for VPN connection WAN2 Only Only establish VPN if WAN1 down If WAN1 failed the router will use WAN2 for VPN connection Always On Check to enabl...

Страница 372: ...ect PPTP or L2TP with or without IPsec policy above The length of the user name is limited to 11 characters Password This field is used to authenticate for connection when you select PPTP or L2TP with...

Страница 373: ...Remote Access Connection Management for viewing VPN Connection status Do another VPN Server Wizard Setup Click this radio button to set another profile of VPN Server through VPN Server Wizard View mo...

Страница 374: ...ite VPN Remote Dial in User You can manage remote access by maintaining a table of remote user profile so that users can be authenticated to dial in via VPN connection Please choose a LAN to LAN Profi...

Страница 375: ...n User selected 2 After making the choices for the server profile please click Next You will see different configurations based on the selection you made Here we take the examples of choosing Remote D...

Страница 376: ...length of the file is limited to 10 characters User Name This field is used to authenticate for connection when you select PPTP or L2TP with or without IPsec policy above The length of the name is li...

Страница 377: ...characters Local Network IP Enter the local network IP for TCP IP configuration Local Network Mask Enter the local network mask for TCP IP configuration 3 After finishing the configuration please cli...

Страница 378: ...ervice as you need If you intend to run a VPN server inside your LAN you should disable the VPN service of Vigor Router to allow VPN tunnel pass through as well as the appropriate NAT settings such as...

Страница 379: ...k to use the PAP protocol for authentication Dial In PPP Encryption MPPE Optional MPPE This option represents that the MPPE encryption method will be optionally employed in the router for the remote d...

Страница 380: ...l In Users when DHCP Disable set Enter a start IP address for the dial in PPP connection for LAN1 LAN2 LAN8 will be available if it is enabled Refer to LAN General Setup for enabling the LAN interface...

Страница 381: ...el establishment There are two encapsulation methods used in IPsec Transport and Tunnel The Transport mode will add the AH ESP payload and use original IP header to encapsulate the data payload only I...

Страница 382: ...ion Confirm Pre Shared Key Retype the characters to confirm the pre shared key Note Any packets from the remote dial in user which does not match the rule defined in VPN and Remote Access Remote Dial...

Страница 383: ...ss into the setting page of IPsec Peer Identity Enable Check the box to enable such profile Name Display the profile name of that index Click each index to edit one peer digital certificate There are...

Страница 384: ...ck to check one specific field of digital signature to accept the peer with matching value The field can be IP Address Domain or E mail Address The box under the Type will appear according to the type...

Страница 385: ...rovide you with a scalable client server mode permitting multi client to connect to a single OpenVPN Server process over a single TCP or UDP port V V 1 1 7 7 1 1 G Ge en ne er ra al l S Se et tu up p...

Страница 386: ...via OpenVPN tunnel between the server and the client can be connected successfully Available settings are explained as follows Item Description Remote Server Click IP and use the drop down list to spe...

Страница 387: ...Series User s Guide 371 provider Export The settings in this page can be saved as a file after clicking such button Later the downloaded file can be imported to the VPN client for building OpenVPN co...

Страница 388: ...lf or over IPsec and corresponding security methods etc The router provides 32 access accounts for dial in users Besides you can extend the user accounts to the RADIUS server through the built in RADI...

Страница 389: ...uide you to fill all the necessary fields Available settings are explained as follows Item Description User account and Authentication Enable this account Check the box to enable this function Idle Ti...

Страница 390: ...both sides of VPN Tunnel while connecting Block When there is conflict occurred between the hosts on both sides of VPN Tunnel in connecting such function can block data transmission of Netbios Naming...

Страница 391: ...nels and L2TP with IPsec Policy when you specify the remote node Check the Medium DES 3DES or AES box as the security method Medium Authentication Header AH means data will be authenticated but not be...

Страница 392: ...orresponding security methods etc The following figure shows the summary table according to the item All Trunk selected for View Available settings are explained as follows Item Description View All C...

Страница 393: ...ned into VPN Load Balance and VPN Backup mechanism If there is no profile joined yet this page will be shown as follows To edit each profile 1 Click each index to edit each profile and you will get th...

Страница 394: ...First or LTE First WAN4 First While connecting the router will use WAN1 WAN2 WAN3 or LTE WAN4 as the first channel for VPN connection If WAN1 WAN2 WAN3 or LTE WAN4 fails the router will use another W...

Страница 395: ...case of abnormal VPN IPsec tunnel disruption For details please refer to the note below Check to enable the transmission of PING packets to a specified IP address Enable PING to keep alive is used to...

Страница 396: ...IPsec Policy Pre Shared Key Input 1 63 characters as pre shared key Digital Signature X 509 Select one predefined Profiles set in the VPN and Remote Access IPsec Peer Identity Peer ID Select one of th...

Страница 397: ...IKE phase 2 proposal To propose the local available algorithms to the VPN peers and get its feedback to find a match Three combinations are available for both modes We suggest you select the combinat...

Страница 398: ...hrough the Internet You can select to use L2TP alone or with IPsec Select from below None Do not apply the IPsec policy Accordingly the VPN connection employed the L2TP without IPsec policy can be vie...

Страница 399: ...nature to invoke this function and select one predefined Profiles set in the VPN and Remote Access IPsec Peer Identity Local ID Specify which one will be inspected first Alternative Subject Name First...

Страница 400: ...Vigor router will get a remote Gateway PPP IP address from the remote router during the IPCP negotiation phase If the PPP IP address is fixed by remote side specify the fixed IP address here Do not c...

Страница 401: ...e options under TCP IP Network Settings will be changed as shown below Remote Network IP Remote Network Mask Add a static route to direct all traffic destined to this Remote Network IP Address Remote...

Страница 402: ...Vigor2862 Series User s Guide 386 specify the local IP address and the mapping virtual IP address 2 After finishing all the settings here please click OK to save the configuration...

Страница 403: ...e activated when initial connection of single VPN tunnel is off line Before setting VPN TRUNK VPN Backup mechanism backup profile please configure at least two sets of LAN to LAN profiles with fully c...

Страница 404: ...bled Name Display the name of VPN TRUNK VPN Backup mechanism profile Member1 Display the dial out profile selected from the Member1 drop down list below Active Yes means normal condition No means the...

Страница 405: ...ofile is disabled Name Display the name of VPN TRUNK VPN Load Balance mechanism profile Member1 Display the dial out profile selected from the Member1 drop down list below Active Yes means normal cond...

Страница 406: ...ofiles in LAN to LAN will be displayed in blue Update Click this button to save the changes to the Status Enable or Disable profile name member1 or member2 Delete Click this button to delete the selec...

Страница 407: ...button type a name for such profile e g 071023 choose one of the LAN to LAN profiles from Member1 drop down list choose one of the LAN to LAN profiles from Member2 drop down list and click Add at last...

Страница 408: ...er 192 168 50 200 in the field of Peer GRE IP A Ad dv va an nc ce ed d L Lo oa ad d B Ba al la an nc ce e a an nd d B Ba ac ck ku up p After setting profiles for load balance you can choose any one of...

Страница 409: ...rate It can be divided into Auto Weighted and According to Speed Ratio Auto Weighted can detect the device speed 10Mbps 100Mbps and switch with fixed value ratio 3 7 for packet transmission If the tr...

Страница 410: ...uch binding tunnel table can be established UDP means when the source IP destination IP destination port and fragment conditions match with the settings specified here and UDP Service Port also fits t...

Страница 411: ...ng Des IP range Start and End Choose TCP UDP IGMP ICMP or Other as Binding Protocol A Ad dv va an nc ce ed d B Ba ac ck ku up p Available settings are explained as follows Item Description Profile Nam...

Страница 412: ...eing activated alternatively Resume when VPN connection breaks down or disconnects Member 1 will be the top priority for the system to do VPN connection Detail Information This field will display deta...

Страница 413: ...General Mode This filed displays the profile configured in LAN to LAN with Index number and VPN Server IP address The VPN connection built by General Mode does not support VPN backup function Backup...

Страница 414: ...how to set up Main mode IPsec Tunnel between two Vigor Routers IPsec VPN with Main mode use the IP address of VPN client as identifier and the IP address must be set on VPN server therefore if the VPN...

Страница 415: ...e has IPsec Tunnel enabled e Enable Specify Remote VPN Gateway and enter Peer VPN Server IP as the public IP of VPN client router f Click on IKE Pre Shared Key and enter the Pre shared Key g Select th...

Страница 416: ...e e S Se et tu up p 1 Create a Dial out profile to VPN server Go to VPN and Remote Access LAN to LAN click on an available index to add a new profile 2 Setup the dial out profile In Common Settings a...

Страница 417: ...same Pre Shared key as VPN Server g Click on Advanced in IPsec Security Method In IKE advanced settings h Select Main Mode for IKE phase 1 mode i Make sure phase 1 and phase 2 proposal are using the s...

Страница 418: ...li is sh hm me en nt t To initiate the VPN connection go to VPN and Remote Access Connection Management on VPN Client Select the profile to VPN Sever and click Dial If all the settings are matched th...

Страница 419: ...tion establishing speed Support newer and more complicated secure ciphers to make the connection more secure Using new connection progress and discard the PPP IKEv2 provides the faster establishing sp...

Страница 420: ...the IP address of LAN_C as Remote Network IP and Remote Network Mask e Click OK V VP PN N C Cl li ie en nt t S Se et tt ti in ng gs s 1 Go to VPN and Remote Access LAN to LAN and click an available i...

Страница 421: ...nput the IP address of LAN_S as Remote Network IP and Remote Network Mask Click OK to save the profile V VP PN N T Tu un nn ne el l E Es st ta ab bl li is sh hm me en nt t To initiate the VPN connecti...

Страница 422: ...tion protocol on the Internet most networks have few restrictions on SSL traffic and as a result SSL VPN is more likely to work when other VPN technologies experience difficulties due to obstacles suc...

Страница 423: ...is is separate from the management port which is configured in System Maintenance Management The default setting is 443 Server Certificate When the client does not set any certificate default certific...

Страница 424: ...as your online bank The SSL VPN can be operated in either full tunnel mode or proxy mode Now Vigor2862 series allows up to 16 simultaneous incoming users SSL VPN authentication and permissions manage...

Страница 425: ...Psec policy above The length of the name password is limited to 23 characters Password This field is applicable when you select PPTP or L2TP with or without IPsec policy above The length of the name p...

Страница 426: ...mote Node Select this option to specify the remote IP address ISDN number or peer ID used in IKE aggressive mode used to authenticate the remote dial in user If this option is not selected the authent...

Страница 427: ...licy Select any combination of Medium DES 3DES and AES security methods as desired Medium Authentication Header AH Data will be authenticated but not be encrypted By default this option is enabled You...

Страница 428: ...AP server These profiles will be used by applications such as User Management VPN and etc Each item is explained as follows Item Description Set to Factory Default Click to clear all profiles Index Cl...

Страница 429: ...es that are configured and enabled will be listed in the Available User Account in the left box To add a user profile to a group select it from the left box and click the button and it will be moved t...

Страница 430: ...iew logging status of SSL VPN Available settings are explained as follows Item Description Active User Display the name of the user who is connected to the SSL VPN server Host IP Display the IP addres...

Страница 431: ...or router support digital certificates conforming to standard X 509 Any entity wants to utilize digital certificates should first request a certificate issued by a CA server It should also retrieve ce...

Страница 432: ...import a saved file as the certification information Refresh Click this button to refresh the information listed below View Click this button to view the detailed settings for certificate request Dele...

Страница 433: ...T Vigor router allows you to generate a certificate request and submit it the CA server then import it as Local Certificate If you have already gotten a certificate from a third party you may import i...

Страница 434: ...s OK Upload PKCS12 Certificate It allows users to import the certificate whose extensions are usually pfx or p12 And these certificates usually need passwords Note that PKCS12 is a standard for storin...

Страница 435: ...tings for certificate request Info You have to copy the certificate request information from above window Next access your CA server and enter the page of certificate request copy the information into...

Страница 436: ...from a trusted root certificate authority is complicated and time consuming Therefore Vigor router offers a mechanism which allows you to generate root CA to save time and provide convenience for gen...

Страница 437: ...the following window Use Browse to find out the saved text file Then click Import The one you imported will be listed on the Trusted CA Certificate window For viewing each trusted CA certificate click...

Страница 438: ...ficate for this router can be saved within one file Please click Backup on the following screen to save them If you want to set encryption password for these certificates please type characters in bot...

Страница 439: ...ity has been always the most concerned The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders It also restricts users in the local network from...

Страница 440: ...es unsolicited incoming data Selectable Denial of Service DoS Distributed DoS DDoS attacks protection I IP P F Fi il lt te er rs s Depending on whether there is an existing Internet connection or in o...

Страница 441: ...xhaust all your system s resource while the vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system The DoS Defense function enables...

Страница 442: ...er Under some circumstance your filter set can be linked to work in a serial manner So here you assign the Start Filter Set only Also you can configure the Log Flag settings Apply IP filter to VPN inc...

Страница 443: ...hecking for data transmission Such feature is enabled in default All the packets while transmitting through Vigor router will be filtered by firewall If the firewall system e g content filter server d...

Страница 444: ...ttings are explained as follows Item Description Filter Select Pass or Block for the packets that do not match with the filter rules Sessions Control The number typed here is the total sessions of the...

Страница 445: ...tent Filter for applying with this router Please set at least one profile for choosing in CSM URL Content Filter web page first Or choose Create New from the drop down list in this page to create a ne...

Страница 446: ...do not have any idea of choosing suitable codepage please open Syslog From Codepage Information of Setup dialog you will see the recommended codepage listed on the dialog box Window size It determine...

Страница 447: ...k Active to enable the rule Available settings are explained as follows Item Description Filter Rule Click a button numbered 1 7 to edit the filter rule Click the button will open Edit Filter Rule web...

Страница 448: ...le To use Wizard Mode simple do the following steps 1 Click the Wizard Mode radio button 2 Click Index 1 The setting page will appear as follows Available settings are explained as follows Item Descri...

Страница 449: ...ere is no profile for you to select please choose Create New from the drop down list in this page to create a new profile All the hosts in LAN must follow the standard configured in the APP Enforcemen...

Страница 450: ...erver Please refer to section Syslog Mail Alert for more detailed information DNS Filter Select one of the DNS Filter profile settings created in CSM DNS Filter for applying with this router Please se...

Страница 451: ...acter long Schedule Profile Set PCs on LAN to work at certain time interval only You may choose up to 4 schedules out of the 15 schedules pre defined in Applications Schedule setup The default setting...

Страница 452: ...oose Any Address Single Address Range Address Subnet Address as the Address Type and type them in this dialog In addition if you want to use the IP range from defined groups or objects please choose G...

Страница 453: ...ts except the range defined here are available for this service type the port number greater than this value is available the port number less than this value is available for this profile Service Gro...

Страница 454: ...ected in User Management General Setup The general firewall rule will be applied to the user user group all users specified here Note When there is no user profile or group profile existed Create New...

Страница 455: ...Filter profile settings created in CSM DNS Filter for applying with this router Please set at least one profile in CSM Web Content Filter web page first Or click the DNS Filter link from the drop down...

Страница 456: ...e data flow which matched with the firewall rule DrayTek Banner Please uncheck this box and the following screen will not be shown for the unreachable web page The default setting is Enabled Strict Se...

Страница 457: ...elect all the items listed below White Black List Option Set white black list of IPv4 IPv6 address Enable SYN flood defense Check the box to activate the SYN flood defense function Once detecting the...

Страница 458: ...the port scanning Threshold rate the Vigor router will send out a warning By default the Vigor router sets the threshold as 2000 packets per second That means when 2000 packets per second received the...

Страница 459: ...olves the perpetrator sending overlapping packets to the target hosts so that those target hosts will hang once they re construct the packets The Vigor routers will block any packets realizing this at...

Страница 460: ...User s Guide 444 After finishing all the settings here please click OK to save the configuration V VI I 1 1 3 3 2 2 S Sp po oo of fi in ng g D De ef fe en ns se e Click the Spoofing Defense tab to ope...

Страница 461: ...escription Mode To have a firewall rule test specify the service type ICMP UDP TCP of the packet and type of the IP address IPv4 IPv6 Direction Set the way from WAN or from LAN that Vigor router recei...

Страница 462: ...rection from Computer A to B or from the B to A for the second packet Protocol It displays the mode selected above and the sate If required click the mode link to configure advanced setting The common...

Страница 463: ...s User s Guide 447 The following figure shows the test result after clicking Analyze Processing state for the fuctions MAC Filter QoS User management etc related to the firewall will be displayed by g...

Страница 464: ...168 1 20 accessing to Internet through Vigor router Others e g 192 168 1 31 and 192 168 1 32 outside the range can get the source from LAN only The way we can use is to set two rules under Firewall Fo...

Страница 465: ...Filter Rule 7 If Block If No Further Match for is selected for Filter the firewall of the router would check the packets with the rules starting from Rule 3 to Rule 7 The packets not matching with the...

Страница 466: ...Type 192 168 1 10 in the field of Start IP and type 192 168 1 20 in the field of End IP Then click OK to save the settings The computers within the range can access into the Internet 7 Now check the...

Страница 467: ...Series User s Guide 451 8 Both filter rules have been created Click OK Now all the settings are configured well Only the computers with the IP addresses within 192 168 1 10 192 168 1 20 can access to...

Страница 468: ...ecks the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP headers only On the other hand Vigor router can prev...

Страница 469: ...ing Stream Remote Control Web HD application This page allows you to set 32 profiles for different requirements The APP Enforcement Profile will be applied in Default Rule of Firewall General Setup fo...

Страница 470: ...rofile The maximum length of the name you can set is 15 characters Select All Click it to choose all of the items in this page Clear All Uncheck all the selected boxes Enable Check the box to select t...

Страница 471: ...m Description Upgrade Setting APPE Module Version Display current version status of APPE signature New version from the Internet Download button is available only when Vigor router detects new APPE ve...

Страница 472: ...or the system completing the process Upgrade Automatically Scheduled Update Check the box to make Vigor router upgrading the APPE signature based on the schedule configured here After finishing all th...

Страница 473: ...based on the fields of TCP IP headers only On the other hand Vigor router can prevent user from accidentally downloading malicious codes from web pages It s very common that malicious codes conceal i...

Страница 474: ...When you choose this setting both configuration set in this page for URL Access Control and Web Feature will be inactive Both Block The router will block all the packages that match with the condition...

Страница 475: ...ited before Action This setting is available only when Either URL Access Control First or Either Web Feature First is selected Pass Allow accessing into the corresponding webpage with the keywords lis...

Страница 476: ...re it will be processed with reverse action File Extension Profile Choose one of the profiles that you configured in Object Setting File Extension Objects previously for passing or blocking the file d...

Страница 477: ...u have to click Activate to satisfy your request Be aware that service provider matching with Vigor router currently offers a period of time for trial version for users to experiment If you want to pu...

Страница 478: ...erver Setup Test Server It is recommended for you to use the default setting auto selected Find more Click it to open http myvigor draytek com for searching another qualified and suitable server Cache...

Страница 479: ...You can type the message manually for your necessity or click Default Message button to get the default text displayed on the field of Administration Message Eight profiles are provided here as Web c...

Страница 480: ...he web pages do not match with the specified feature set here they will be processed with the categories listed on the box below Block restrict accessing into the corresponding webpage with the charac...

Страница 481: ...g 168 95 1 1 on router or external DNS server e g 8 8 8 8 If the router server is used DNS Filter General Setting will be applied to DNS query from clients on LAN However if the external DNS server i...

Страница 482: ...Block Only the log about Block will be recorded in Syslog All All the actions Pass and Block will be recorded in Syslog Web Content Filter Set the filtering conditions URL Content Filter Set the filt...

Страница 483: ...everal useful services such as Anti Spam Web Content Filter Anti Intrusion and etc to filtering the web pages for the sake of protecting your system To access into MyVigor for getting more information...

Страница 484: ...s Guide 468 2 Click the Activate link A login page for MyVigor web site will pop up automatically 3 Click the link of Create an account now 4 The system will ask if you are 16 years old or over If yes...

Страница 485: ...I am under 16 years old to get the following page Then click I and my legal guardian agree 5 After reading the terms of service privacy policy click Agree 6 In the following page enter your personal i...

Страница 486: ...ated an account successfully 9 Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor draytek com 10 Click the Activate my Account link to enable the accoun...

Страница 487: ...he following page please type in the account and password that you just created in the fields of UserName and Password 12 Now click Login Your account has been activated You can access into MyVigor se...

Страница 488: ...service Web Content Filter and URL Content Filter Web Content Filter Benefits Easily and quickly implement the category website that you want to block Note License is required URL Content Filter Benef...

Страница 489: ...outer the web page would be blocked and the following message would be displayed instead II Via URL Content Filter A Block the web page containing the word of Facebook 1 Open Object Settings Keyword O...

Страница 490: ...Guide 474 3 Open CSM URL Content Filter Profile Click an index number to open the setting page 4 Configure the settings as the following figure 5 When you finished the above steps click OK Then open...

Страница 491: ...the field of URL Content Filter Now users cannot open any web page with the word facebook inside B Disallow users to play games on Facebook 1 Open Object Settings Keyword Object Click an index number...

Страница 492: ...page 4 Configure the settings as the following figure 5 When you finished the above steps please open Firewall General Setup 6 Click the Default Rule tab Choose the profile just configured from the d...

Страница 493: ...ing Configuration Backup Syslog Mail Alert Time and Date Management Reboot System Firmware Upgrade and Activation It is used to control the bandwith of data transmission through configuration of Sessi...

Страница 494: ...l items that you have to know the way of configuration System Status TR 069 Administrator Password User Password Login Page Greeting Configuration Backup Syslog Mail Alert Time and Date Management Reb...

Страница 495: ...ted information from this presentation Available settings are explained as follows Item Description Model Name Display the model name of the router Firmware Version Display the firmware version of the...

Страница 496: ...ay the connection type IP Address Display the IP address of the WAN interface Default Gateway Display the assigned IP address of the default gateway IPv6 Address Display the IPv6 address for LAN Scope...

Страница 497: ...is very convenient for an administrator to manage a TR 069 device through an Auto Configuration Server e g VigorACS Available settings are explained as follows Item Description Tr069 Click Enable to a...

Страница 498: ...close the mechanism of notification STUN Settings Disable The default is Disable Enable Please type the relational settings listed below Server Address Type the IP address of the STUN server Server Po...

Страница 499: ...rease the bandwidth setting for that CPE or not Disable The default is Disable Enable Click it to enable such feature Time Period Choose the time interval 15 mins 30 mins 1hour 3 hours or 6 hours for...

Страница 500: ...llows Item Description Administrator Password The administrator can login web user interface of Vigor router to modify all of the settings to fit the requirements Old Password Type in the old password...

Страница 501: ...tor Local User Usually the system administrator has the highest privilege to modify the settings on the web user interface of the Vigor router However in some cases it might be necessary to have other...

Страница 502: ...ly check the box to enable the following settings Administrator LDAP Setting Enable LDAP AD login for admin users If it is enabled any user can access into the web user interface of Vigor router throu...

Страница 503: ...ease use the new password to access into the web user interface again Below shows an example for accessing into User Operation with User Password 1 Open System Maintenance User Password 2 Check the bo...

Страница 504: ...ith User Mode will be shown as follows Settings to be configured in User Mode will be less than settings in Admin Mode Only basic configuration settings will be available in User Mode Info Setting in...

Страница 505: ...requirement Available settings are explained as follows Item Description Enable Check this box to enable the login customization function Login Page Title Type a brief description e g Welcome to DrayT...

Страница 506: ...Vigor2862 Series User s Guide 490 Below shows an example of login customization with the information typed in Login Description and Bulletin...

Страница 507: ...w to backup your configuration 1 Go to System Maintenance Configuration Backup The following page will be popped up as shown below Available settings are explained as follows Item Description Restore...

Страница 508: ...ored to a USB connecting to Vigor router as a backup Backup folder Set the path for downloading Periodicity backup Set the circle duration for backup Backup after change configuration Backup will be e...

Страница 509: ...ing examples The Mac or Linux platform will appear different windows but the backup function is still available Info Backup for Certification must be done independently The Configuration Backup does n...

Страница 510: ...494 2 Click Choose File button to choose the correct configuration file for uploading to the router 3 Click Restore button and wait for few seconds the following picture will tell you that the restor...

Страница 511: ...agement If there is no name here simply lick the link to access into System Maintenance Management to set the router name Server IP Address The IP address of the Syslog server Destination Port Assign...

Страница 512: ...on Password Type the password for authentication Enable E mail Alert Check the box to send alert message to the e mail box while the router detecting the item s you specify here Click OK to save these...

Страница 513: ...outer s system time Use Internet Time Select to inquire time information from Time Server on the Internet using assigned protocol Time Server Type the web site of the time server Priority Choose Auto...

Страница 514: ...1 9 9 S SN NM MP P This page allows you to configure settings for SNMP and SNMPV3 services The SNMPv3 is more secure than SNMP through the encryption method support AES and DES and authentication met...

Страница 515: ...ngth of the text is limited to 23 characters Notification Host IP IPv4 Set the IPv4 address of the host that will receive the trap community Notification Host IP IPv6 Set the IPv6 address of the host...

Страница 516: ...ment Port Setup TLS SSL Encryption Setup CVM Access Control and Device Management The management pages for IPv4 and IPv6 protocols are different F Fo or r I IP Pv v4 4 Available settings are explained...

Страница 517: ...bject profile Related IP with Subnet Mask will appear automatically Management Port Setup User Define Ports Check to specify user defined port numbers for the Telnet HTTP HTTPS FTP TR 069 and SSH serv...

Страница 518: ...o enable the function of Central Management AP If unchecked menu items related to Central Management AP will be hidden Device Management Check the box to enable the device management function for Vigo...

Страница 519: ...Type the index number of the IPv6 object profile Related IP address will appear automatically After finished the above settings click OK to save the configuration F Fo or r L LA AN N Available settin...

Страница 520: ...vailable settings are explained as follows Item Description Refresh Click to refresh the page to display the latest information Enable LED Select to enable front panel LEDs Enable Sleep Mode Turn off...

Страница 521: ...ory Reset and Wireless ON OFF WPS buttons on the front panel are enabled by default and can be enabled or disabled if required Disabling the Factory Reset button will prevent tampering by unauthorized...

Страница 522: ...B The USB ports can be individually enabled or disabled When a USB port is disabled attached devices will not be recognized by the router Available settings are explained as follows Item Description...

Страница 523: ...atus Shows the status of the USB port Link Up An active Ethernet device is connected to the port Link Down No active Ethernet device is detected The LAN port is disabled Speed Shows the negotiated spe...

Страница 524: ...self signed certificate is signed with its own private key The self signed certificate will be applied in SSL VPN HTTPS and so on In addition it can be created for free by using a wide variety of too...

Страница 525: ...Vigor2862 Series User s Guide 509...

Страница 526: ...hedule web page and you can use the number that you have set in that web page If you want to reboot the router using the current configuration check Using current configuration and click Reboot Now To...

Страница 527: ...eed to firmware upgrade Click the button of Check The Latest Firmware to open a pop up window displaying the newest firmware version released for such Vigor router Choose the one you need and click Do...

Страница 528: ...period of time Backup manually Click this option and click OK firmware backup will be performed immediately Firmware Version Display recent firmware backup version Last backup Display the time of rec...

Страница 529: ...Click System Maintenance Activation to open the following page for accessing http myvigor draytek com Available settings are explained as follows Item Description Activate via Interface Choose WAN in...

Страница 530: ...Vigor2862 Series User s Guide 514...

Страница 531: ...ternal RADIUS server for the user profile Uncheck the box to turn off ecurity authentication service offered by internal RADIUS server for the user profile If you check the box next to such item all o...

Страница 532: ...C Co on nt tr ro ol l There are nine groups of setting information which can be displayed on Dashboard as a reference for administrator user Except for Front Panel and System Information the settings...

Страница 533: ...d traffic can be throttled back to a lower speed If there s no defined priority to specify which packets should be discarded or in another term dropped from an overflowing queue packets of sensitive a...

Страница 534: ...the backbone will do the same checking before executing treatments in order to ensure service level consistency throughout the whole QoS enabled network However each node may take different attitude...

Страница 535: ...nagement menu click Sessions Limit to open the web page To activate the function of limit session simply click Enable and set the default session limit Available settings are explained as follows Item...

Страница 536: ...t for each index Add Adds the specific session limitation onto the list above Edit Allows you to edit the settings for the selected limitation Delete Remove the selected settings existing on the limit...

Страница 537: ...e Click this button to activate the function of limit bandwidth Disable Click this button to close the function of limit bandwidth Default TX limit Define the default speed of the upstream for each co...

Страница 538: ...his field the system will use the default speed for the specific limitation you set for each index Add Add the specific speed limitation onto the list above Edit Allow you to edit the settings for the...

Страница 539: ...LTE interface Direction Define which traffic the QoS Control settings will apply to IN apply to incoming traffic only OUT apply to outgoing traffic only BOTH apply to both incoming and outgoing traffi...

Страница 540: ...oIP SIP RTP When this feature is enabled the VoIP SIP UDP packets will be sent with highest priority SIP UDP Port Set a port number used for SIP This page allows to configure general QoS settings of t...

Страница 541: ...P application Outbound TCP ACK Prioritize The difference in bandwidth between download and upload are great in ADSL2 environment For the download speed might be impacted by the uploading TCP ACK you c...

Страница 542: ...e following page Now you can define the name for that Class In this case Test is used as the name of Class Index 1 3 For adding a new rule click Add to open the following page Available settings are e...

Страница 543: ...in Start IP address and Subnet Mask DiffServ CodePoint All the packets of data will be divided with different levels and will be processed according to the level type by the system Please assign one...

Страница 544: ...dit link under Service Type field 2 After you click the Edit link you will see the following page 3 For adding a new service type click Add to open the following page Available settings are explained...

Страница 545: ...ed service type please select the radio button of that one and click Edit Edit for modification R Re et ta ag g t th he e P Pa ac ck ke et ts s f fo or r I Id de en nt ti if fi ic ca at ti io on n Pac...

Страница 546: ...on of QoS adjustment on Inbound Outbond bandwidth and bandwidth ratio Vigor router can perform the bandwidth management for the protocols streaming remote control web HD and so on Click Bandwidth Mana...

Страница 547: ...tocols Clear All Click it to de select all of the protocols Apply to all Choose one of the actions from the drop down list It is prepared for applying to all protocols Apply Click it to make the selec...

Страница 548: ...t technology QoS Quality of Service helps you to well allocate the bandwidth upon your demand of Voice Video or Data transferring Let s see how to get the optimum bandwidth per your request by using D...

Страница 549: ...P for such class and click Add 4 Check the box of ACT Click Edit to specify the local address 5 In the pop up window choose Range Address as the Address Type and type the start IP address and end IP a...

Страница 550: ...Guide 534 6 Click OK again to save the settings 7 The class rule for VoIP has been set Click OK to return to previous page 8 Do the same steps to add class rules for IPTV and Data Email with IP addre...

Страница 551: ...535 9 Assuming you get 2MB 512Kb Internet line You can check Enable of WAN1 to set up the bandwidth for different groups among VoIP IPTV and Data Email 10 Enter 30 50 and 15 in the boxes for VoIP IPT...

Страница 552: ...Vigor2862 Series User s Guide 536 11 Click the WAN1 link and check the box of Enable UDP Bandwidth Control 12 Click OK to save the settings The class rules for WAN1 are defined as shown below...

Страница 553: ...ser account Network administrator can give different firewall policies or rules for different hosts with different User Management accounts This is more flexible and convenient for network management...

Страница 554: ...ence the contents of the filter rule s applied to every user Available settings are explained as follows Item Description Mode There are two modes offered here for you to choose Each mode will bring d...

Страница 555: ...pixel to have an image of enterprise or have the effect of advertisement Login Page Greeting Such link allows you to access into the setting page for login greeting For detailed information refer to S...

Страница 556: ...files up to 200 which will be applied for users controlled under User Management Simply open User Management User Profile To set the user profile please click any index number link to open the followi...

Страница 557: ...r passes the authentication he she can access Internet via this router However the accessing operation will be restricted with the conditions configured in this user profile The maximum length of the...

Страница 558: ...rules pre configured in Firewall can be adopted for such user profile Create New Policy If you choose such item the following page will be popped up for you to define another filter rule as a new pol...

Страница 559: ...can access Internet through any browser on Windows Note that Alert Tool can be downloaded from DrayTek web site Telnet If it is selected the user can use Telnet command to perform the authentication j...

Страница 560: ...quota automatically according to the factory quota settings Default Time Quota Type the value for the time manually Default Data Quota Type the value for the data manually Quota reset when login perm...

Страница 561: ...umber link to open the following page Available settings are explained as follows Item Description Name Type a name for this user group Available User Objects You can gather user profiles objects from...

Страница 562: ...n Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically Refresh Click this link to refresh this page manually Index D...

Страница 563: ...ay the quota for data transmission Idle Time Display the idle timeout setting for such profile Action Block can avoid specified user accessing into Internet Unblock allow the user to access into Inter...

Страница 564: ...th User Management authentication function before a valid username and password have been correctly supplied a particular client will not be allowed to access Internet through the router There are thr...

Страница 565: ...n some web browsers will display warning messages With Microsoft Internet Explorer you may get the following warning message Please press Continue to this website not recommended With Mozilla Firefox...

Страница 566: ...appear Input the user name and the password for your account defined in User Management and click Login If the authentication is successful the client will be redirected to the original web site that...

Страница 567: ...on you access an external web site to trigger the authentication You may also directly access the router s Web UI for authentication Both HTTP and HTTPS are supported for example http 192 168 1 1 or h...

Страница 568: ...k com You may change it if you want For example you will get the following welcome message if you enter Login Successful in the Welcome Message table Also you will get a Tracking Window if you don t b...

Страница 569: ...eate a user profile in User Management with chaochen test as username password while a VPN Remote Dial in user profile with the same username chaochen but a different password 1234 you will always get...

Страница 570: ...count name for the authentication 2 Type the password for authentication and press Enter The message User login successful will be displayed with the expired time if configured Info Here expired time...

Страница 571: ...which means this account has no time quota If the Time Quota is enabled and time is not 0 minute You will get the following message The expired time is shown after you login After you run out the ava...

Страница 572: ...again Authentication via VigorPro Alert Notice Tool allows user to setup the re authentication interval so that the utility will send authentication requests periodically This will keep the client hos...

Страница 573: ...le e 1 1 U Us se er rs s c ca an n s se ee e t th he e m me es ss sa ag ge e f fo or r l la an nd di in ng g p pa ag ge e a af ft te er r l lo og gg gi in ng g i in nt to o I In nt te er rn ne et t s...

Страница 574: ...ck OK to save the settings 5 Open any browser e g FireFox Internet Explorer The logging page will appear and asks for username and password Please type the correct username and password 6 Click Login...

Страница 575: ...in ng g i in nt to o I In nt te er rn ne et t s su uc cc ce es ss sf fu ul ll ly y 1 In the field of Landing Page please type the words as below body stats 1 script language javascript window locatio...

Страница 576: ...rowser e g FireFox Internet Explorer The logging page will appear and asks for username and password Please type the correct username and password 5 Click Login If the logging is successful you will b...

Страница 577: ...ts and promotional materials and broadcast of public service announcements W We eb b U Us se er r I In nt te er rf fa ac ce e V VI II I 4 4 1 1 P Pr ro of fi il le e S Se et tu up p Select Profile Set...

Страница 578: ...n This mode does not perform any authentication The user will be redirected to the landing page The user can then leave the landing page to visit other websites C Cl li ic ck k t th hr ro ou ug gh h T...

Страница 579: ...r to receive a PIN by SMS After they have authenticated themselves by entering the PIN they will be redirected to the landing page indicating that they have been granted Internet access S So oc ci ia...

Страница 580: ...r ro of fi il le e 1 1 L Lo og gi in n M Me et th ho od d Click the index link e g 1 of the selected profile to display the following page Available settings are explained as follows Item Description...

Страница 581: ...he configuration on this page and proceed to the next page If you have chosen Skip Login as the Login Mode skip to step 4 Whitelisting below Otherwise proceed to configure the login page by following...

Страница 582: ...Vigor2862 Series User s Guide 566 Available settings are explained as follows Item Description Choose Login Select either Color Background or Image Background as the login...

Страница 583: ...he RGB value Click Preview to preview the selected color Opacity 10 100 Available when Image Background is selected Set the opacity of the background image Background Image Available when Image Backgr...

Страница 584: ...r the text to be displayed in the Terms and Conditions pop up window Accept Button Description Enter the text to be displayed on the accept button Accept Button Color Select the color of the accept bu...

Страница 585: ...see only settings that are relevant to the selected login mode s Settings that are common to Facebook Google and PIN authentication are Item Description Welcome Message Enter the text to be displayed...

Страница 586: ...above Refer to section A 1 How to create a Facebook App ID for Web Portal Authentication for details If you have selected Google login these settings will appear Item Description Google Login Descript...

Страница 587: ...rovider used to send PIN notifications SMS providers are configured in Objects Setting SMS Mail Service Object Enter PIN Description Enter message to be displayed in the PIN textbox to prompt the user...

Страница 588: ...to the next page Cancel Click to abort the configuration process and return to the profile summary page 2 2n nd d s st ta ag ge e P Pa ag ge e f fo or r P PI IN N L Lo og gi in n If you have selected...

Страница 589: ...tem Description Back Button Description Enter text for the label of the hyperlink to return to the previous page PIN Code Message Enter text to be displayed as the body text on the page Default Countr...

Страница 590: ...summary page 4 4 W Wh hi it te el li is st t S Se et tt ti in ng g In this step you can configure the whitelist settings Users are allowed to send and receive traffic that satisfies whitelist settings...

Страница 591: ...the configuration on this page and proceed to the next page Cancel Click to abort the configuration process and return to the profile summary page 5 5 M Mo or re e O Op pt ti io on ns s In this step...

Страница 592: ...he operating system s built in Captive Portal Detection Landing Page After Authentication Specifies the webpage that will be displayed after the user has successfully authenticated Fixed URL The user...

Страница 593: ...vailable settings are explained as follows Item Description Select Columns to Filter Users Simply specify the profile and the login method for filtering users who want to access Internet through the l...

Страница 594: ...ogin Info online offline status for the device can be send on the field of Devices and historical information for device login will be shown on the field of Login History In addition to forcefully log...

Страница 595: ...base Clear User Info The user information will be displayed on the page of User Info You can delete the information by clicking this button Notification and Action when Storage Exceeded Notification D...

Страница 596: ...ment introduces how to create Facebook APP and generate the APP ID and APP secret that can be used in Web Portal setup 1 Register as FB Developer Go to https developers facebook com and login the FB a...

Страница 597: ...igor2862 Series User s Guide 581 6 Add a New App Click on My Apps Add a New App Choose Website platform 7 Click Skip and Create App ID on first use Type Display Name Choose Category Click Create App I...

Страница 598: ...Vigor2862 Series User s Guide 582 8 Pops up security check window select the answer and then click Submit to finish the process...

Страница 599: ...Add Platform on My Apps Go to Settings then click Add Platform 11 Choose Website in Select Platform window 12 Enter the Site URL as http portal draytek com Note If you change http port in the vigor pl...

Страница 600: ...4 13 Set up Client OAuth Go to Settings Advanced Client OAuth Settings enter http portal draytek com in Valid OAuth redirect URIs and save changes 14 Go to My Apps Status Review and switch available s...

Страница 601: ...Vigor2862 Series User s Guide 585...

Страница 602: ...LAN clients by their Google or Facebook account This document introduces how to create Facebook APP and generate the APP ID and APP secret that can be used in Web Portal setup 1 Create Developer proj...

Страница 603: ...er name Set Authorized JavaScript origins and Authorized redirect URLs as http portal draytek com and click Create Note If you change http port in the vigor please add http port in URLs For example we...

Страница 604: ...PN N Vigor2862 can build virtual private network VPN between itself and any other TR 069 CPE by the function of central VPN management In addition it can be treated as a server called CVM server whic...

Страница 605: ...nism V VI II I 5 5 1 1 1 1 G Ge en ne er ra al l S Se et tt ti in ng gs s To enable the CVM feature the first thing you have to do is enabling CVM port or CVM SSL Port Available settings are explained...

Страница 606: ...ent is operated through IPsec VPN connection Available settings are explained as follows Item Description IPsec Mode Choose Aggressive or Main as the IPsec Mode Security Method Choose one of the follo...

Страница 607: ...seen with icons from this page Before using such feature make sure the CVM port has been enabled and configured properly V VI II I 5 5 2 2 1 1 M Ma an na ag ge ed d D De ev vi ic ce e L Li is st t Th...

Страница 608: ...naged by Vigor2862 series Edit To modify the name and location of specific CPE click the one you want and click the Edit button A pop up window will appear Simply change the name and or location manua...

Страница 609: ...played in such field Add Move the selected device from Unmanaged Devices List to Managed Devices List IP Address Display the IP address of the remote device Mac Address Display the MAC address of the...

Страница 610: ...xplained as follows Item Description Refresh Click it to refresh current page USB Disk It means a USB disk connecting to Vigor2862 It means no USB disk connecting to Vigor2862 Disk Usage When a USB di...

Страница 611: ...rs Info When restoring configuration to a CPE make sure the configuration file you selected was backup from this CPE before Because restoring from another device s configuration file may cause serious...

Страница 612: ...ne Firmware Upgrade It means such profile will be used for firmware upgrade File Path When Config Restore is selected as Action Type click Select to upload a configuration file from the connected USB...

Страница 613: ...Vigor2862 Series User s Guide 597...

Страница 614: ...N to LAN profile It is generated automatically when you click the PPTP IPsec Advanced button to build the VPN connection between Vigor2862 and remote CPE Type Display the dial in type and the authenti...

Страница 615: ...you want to display the related information on the following table Stop record when fulls when the capacity of CVM log is full the system will stop recording Always record the new event only the newes...

Страница 616: ...series For this section we use Vigor2850 series as the example All the CPE configuration will be done through Vigor2850 series C Co on nf fi ig gu ur re e C CV VM M S Se et tt ti in ng gs s o on n V...

Страница 617: ...ample IE Mozilla Firefox or Netscape and type http 192 168 1 1 2 Open System Maintenance TR 069 3 In the field of ACS Server type the URL IP address with port number of Vigor2862 series and type the s...

Страница 618: ...management access control and click OK 6 Open WAN Internet Access Use the drop down list of Access Mode on WAN1 to select MPoA RFC1483 2684 Then click Details Page 7 Click Specify an IP address Type c...

Страница 619: ...n to the web user interface of Vigor2862 series 2 Open Central VPN Management VPN Management Now there is one CPE displayed on the field of Unmanaged Devices List 3 Choose the one Vigor2850 from Unman...

Страница 620: ...or r2 28 86 62 2 s se er ri ie es s When a remote device is managed by Vigor2862 series it is easy to build VPN between these two devices 1 Access into the web user interface of Vigor2862 series 2 Op...

Страница 621: ...VPN will be generated automatically You can access into VPN and Remote Access LAN to LAN of the remote device for viewing the detailed information Note The profile name is created automatically by th...

Страница 622: ...r the device e g Vigor2850 managed by Vigor2862 series Vigor2850 as an example is chosen for Vigor2862 to perform the CPE firmware upgrade remotely in this case 1 Plug in USB storage disk onto Vigor28...

Страница 623: ...o perform firmware upgrade from Device Name drop down list From the Action Type choose Firmware Upgrade Type the file path of the newest firmware or click Select to locate it Specify the Schedule prof...

Страница 624: ...the managed device if the firmware upgrade is successful or not Click Managed Devices List Click the icon of Vigor2850 and click Edit and view the software version Another way to check if the firmware...

Страница 625: ...st wireless coverage will be clearly indicated through simulated signal strength A AP P M Ma ai in nt te en na an nc ce e Vigor router can execute configuration backup configuration restoration firmwa...

Страница 626: ...Da as sh hb bo oa ar rd d This page shows VigorAP s information about Status Event Log Total Traffic or Station Number by displaying VigorAP icon text and histogram Just move and click your mouse cur...

Страница 627: ...router will be displayed here IP Address Display the true IP address of the access point SSID Display the SSID configured for the access point s connected to Vigor2862 Ch Display the channel used by t...

Страница 628: ...by such wireless profile Security Display the security mode selected by such wireless profile Multi SSID Enable means multiple SSIDs more than one are active Disable means only SSID1 is active WLAN A...

Страница 629: ...pplied to the selected access point immediately Later the access point will reboot To Local WLAN Profile configured in this page is specified for VigorAP connected to Vigor router If required these se...

Страница 630: ...de 614 H Ho ow w t to o e ed di it t t th he e w wi ir re el le es ss s L LA AN N p pr ro of fi il le e 1 Select the WLAN profile index number 1 to 5 you want to edit 2 Click the index number link to...

Страница 631: ...er s Guide 615 Info The function of Auto Provision is available for the default WLAN profile 3 After finished the general settings configuration click Next to open the following page for 2 4G wireless...

Страница 632: ...ove web page configuration click Next to open the following page for 5G wireless security settings 5 When you finished the above web page configuration click Finish to exit and return to the first pag...

Страница 633: ...e Others functions e g Config Restore Firmware Upgrade Remote Reboot can be performed to more than one AP at one time by using Vigor2862 Available settings are explained as follows Item Description Ac...

Страница 634: ...ing and dropping available VigorAP icon from the list to the floor plan the placement with the best wireless coverage will be clearly indicated through simulated signal strength Available settings are...

Страница 635: ...age Available settings are explained as follows Item Description Location Profile Name Type a name e g 3F for the AP map profile Upload Map Click the Select button to choose an image file only JPG and...

Страница 636: ...w a red line for length width Then type the value on the pop up dialog to determine the real distance The values for length and width will be displayed on the web page 4 Click Next to open the web pag...

Страница 637: ...s Guide 621 5 Select the AP you need drag and drop an AP icon from upper end to the map on the bottom 6 Check the box of Show AP Coverage and choose 2 4GHz or 5GHz of wireless signal for the AP locat...

Страница 638: ...Vigor2862 Series User s Guide 622 7 Adjust the AP on the map to find out which place can have the best wireless coverage At last click Save...

Страница 639: ...se one of the managed Access Points LAN A or LAN B daily or weekly for viewing data transmission chart Click Refresh to renew the graph at any time The horizontal axis represents time the vertical axi...

Страница 640: ...imum temperature minimum temperature and average temperature V VI II I 6 6 8 8 R Ro og gu ue e A AP P D De et te ec ct ti io on n It displays the access point scanned by Vigor router In which the APs...

Страница 641: ...lay the encryption mode used by the access point Signal Display the signal strength represented by percentage sent by the access point Beacon Period Display the period time of the beacon The beacon si...

Страница 642: ...AP shall be treated as rogue AP simply click Add to change its classification from unknown to Rogue Delete From Rogue APs If you want to change the classification of the rogue AP simply choose the on...

Страница 643: ...g for all of the APs managed by Vigor router will be shown on this page It is userful for troubleshooting if required V VI II I 6 6 1 10 0 T To ot ta al l T Tr ra af ff fi ic c Such page will display...

Страница 644: ...what mode of wireless connection 2 4G WLAN or 5G WLAN used by wireless clients to access into Internet through VigorAP V VI II I 6 6 1 12 2 L Lo oa ad d B Ba al la an nc ce e The parameters configured...

Страница 645: ...reshold Upload Limit Use the drop down list to specify the traffic limit for uploading Download Limit Use the drop down list to specify the traffic limit for downloading Action When Threshold Exceeded...

Страница 646: ...862 Series User s Guide 630 V VI II I 6 6 1 13 3 F Fu un nc ct ti io on n S Su up pp po or rt t L Li is st t List the AP management functions that the Access Points support under different firmware ve...

Страница 647: ...he access points linked to Vigor2862 1 Open External Devices Access Point Devices Vigor2862 will detect the AP connecting to the router automatically and display as below In this case a device named w...

Страница 648: ...sary for you to manually apply wireless profiles for APs respectively Such feature will be convenient for people who want to quickly deploy multiple Vigor APs in a large exhibition to reach the goal o...

Страница 649: ...modify related settings for 5G SSID of managed AP Continue to make any changes you want After finished all of the changes simply click Finish 6 Now the AP represented with AP800_00507F6EE4980 detecte...

Страница 650: ...t one time V VI II I 7 7 1 1 S St ta at tu us s V VI II I 7 7 1 1 1 1 S Sw wi it tc ch h S St ta at tu us s Such page displays information including Group Switch name IP address model System Up Time P...

Страница 651: ...the name link of VigorSwitch You can click the name link to access into the switch profile IP Address Display the IP address of VigorSwitch Model Display the model name of VigorSwitch System Up Time D...

Страница 652: ...wi it tc ch h H Hi ie er ra ar rc ch hy y Such page displays the hierarchy of VigorSwitch es managed under Vigor2862 Please note that Shutdown Port is available for LAN port of VigorSwitch connects to...

Страница 653: ...nnected VigorSwitch will have one setting profile If there are many switches connected to Vigor2862 different index number will be used to represent different VigorSwitch Name Display the user defined...

Страница 654: ...d is unavailable Login Password Display the original login password for the VigorSwitch However if Group Password in Central Management Switch Group is configured with other string then such field is...

Страница 655: ...configuration Then click Port tab to access the following page Available settings are explained as follows Item Description Description If required type a brief description to explain the device conne...

Страница 656: ...ate egress rate for the selected VigorSwitch After clicking Save the value modified in this page will be written to VigorSwitch and enabled 4 Click Save to save the changes and then click Send to Devi...

Страница 657: ...g to Vigor2862 series All of the switches under the same group can be accessed into via such group password Existing Switch Display all of the VigorSwitch devices connecting to Vigor2862 Member Switch...

Страница 658: ...e Four actions including configuration backup configuration restore remote reboot and factory reset are offered by Vigor2862 to perform on VigorSwitch File Path Click the button to find out the requir...

Страница 659: ...ll be recorded to the database or the system will send an alert to the specified device via e mail or SMS to warn the user V VI II I 7 7 5 5 1 1 A Al le er rt t S Se et tu up p This page is used to de...

Страница 660: ...nabled in default Send Notification If it is checked Vigor router s system will send notification to specified phone number via SMS SMS Email Service Object Choose the SMS object which will get the SM...

Страница 661: ...ent At present Cold Start Warm Start Disconnect and Reconnect will be treated as alert events Level Specify the severity level for each incident To defined more severity level for choosing in this pag...

Страница 662: ...o four levels No Alert Minor Alert Moderate Alert and Major Alert Check the one s you want to check in Alert Logs list Type Check the type switch port of the log to be displayed in Alert Logs list Swi...

Страница 663: ...ox to make the database in USB disk to record the alert logs and traffic history Notification and Action when Storage Exceeded Notification Don t send notification No notification will be sent out whe...

Страница 664: ...Vigor2862 Series User s Guide 648 V VI II I 7 7 7 7 S Su up pp po or rt t L Li is st t This page lists all models of VigorSwitch which can be managed by Vigor2862 via Central Management Switch...

Страница 665: ...able settings are explained as follows Item Description External Device Syslog Check this box to display information of the detected device on Syslog External Device Auto Discovery Check this box to d...

Страница 666: ...Vigor2862 Series User s Guide 650 When you finished the configuration click OK to save it Info Only DrayTek products can be detected by this function...

Страница 667: ...dress service type keyword file extension and others These pre defined objects can be applied in CSM USB device connected on Vigor router can be regarded as a server or WAN interface By way of Vigor r...

Страница 668: ...ies User s Guide 652 V VI II II I 1 1 O Ob bj je ec ct ts s S Se et tt ti in ng gs s Define objects such as IP address service type keyword file extension and others These pre defined objects can be a...

Страница 669: ...ed range usually will be applied in configuring router s settings therefore we can define them with objects and bind them with groups for using conveniently Later we can select that object group for a...

Страница 670: ...Subnet Address Mac Address or all that IP object with the selected type will be shown on this page Set to Factory Default Clear all profiles Search Type a string of the IP object that you wan to sear...

Страница 671: ...wnload to store the default CSM template a table without any input data to your hard disk Download Download the CSV file from Vigor router and store in your hard disk Restore IP Object Select Click it...

Страница 672: ...bject contains any IP address Select Mac Address if this object contains Mac address MAC Address Type the MAC address of the network card which will be controlled Start IP Address Type the start IP ad...

Страница 673: ...s are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile To set a new pr...

Страница 674: ...interface chosen above will be shown in this box Selected IP Objects Click button to add the selected IP objects in this box 3 After finishing all the settings here please click OK to save the config...

Страница 675: ...dress if this object contains several IPv6s within a range Select Subnet Address if this object contains one subnet for IPv6 address Select Any Address if this object contains any IPv6 address Select...

Страница 676: ...6 6 G Gr ro ou up p This page allows you to bind several IPv6 objects into one IPv6 group Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Index D...

Страница 677: ...profile Maximum 15 characters are allowed Available IPv6 Objects All the available IPv6 objects with the specified interface chosen above will be shown in this box Selected IPv6 Objects Click button t...

Страница 678: ...bj je ec ct t You can set up to 96 sets of Service Type Objects with different conditions Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Index...

Страница 679: ...columns are available for TCP UDP protocol It can be ignored for other protocols The filter rule will filter out any port number when the first and last value are the same it indicates one port when t...

Страница 680: ...1 6 6 S Se er rv vi ic ce e T Ty yp pe e G Gr ro ou up p This page allows you to bind several service types into one group Available settings are explained as follows Item Description Set to Factory...

Страница 681: ...ngs are explained as follows Item Description Name Type a name for this profile Maximum 15 characters are allowed Available Service Type Objects All the available service objects that you have added o...

Страница 682: ...et 200 keyword object profiles for choosing as black white list in CSM URL Web Content Filter Profile Available settings are explained as follows Item Description Set to Factory Default Clear all prof...

Страница 683: ...are explained as follows Item Description Name Type a name for this profile e g game Maximum 15 characters are allowed Contents Type the content for such profile For example type gambling as Contents...

Страница 684: ...ngs are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile Objects Displ...

Страница 685: ...box 3 After finishing all the settings please click OK to save the configuration V VI II II I 1 1 9 9 F Fi il le e E Ex xt te en ns si io on n O Ob bj je ec ct t This page allows you to set eight prof...

Страница 686: ...s 2 The configuration page will be shown as follows Available settings are explained as follows Item Description Profile Name Type a name for this profile The maximum length of the name you can set is...

Страница 687: ...e Each item is explained as follows Item Description Set to Factory Default Clear all of the settings and return to factory default settings Index Display the profile number that you can configure Pro...

Страница 688: ...use to register to selected SMS provider The maximum length of the name you can set is 31 characters Password Type a password that the sender can use to register to selected SMS provider The maximum...

Страница 689: ...o make customized SMS service The profile name for Index 9 and Index 10 are fixed You can click the number e g 9 under Index column for configuration in details Available settings are explained as fol...

Страница 690: ...e router will send out Sending Interval Type the shortest time interval for the system to send SMS After finishing all the settings here please click OK to save the configuration M Ma ai il l S Se er...

Страница 691: ...pe the IP address of the mail server SMTP Port Type the port number for SMTP server Sender Address Type the e mail address of the sender Use SSL Check this box to use port 465 for SMTP server for some...

Страница 692: ...I 1 1 1 11 1 N No ot ti if fi ic ca at ti io on n O Ob bj je ec ct t This page allows you to set ten profiles which will be applied in Application SMS Mail Alert Service You can set an object with dif...

Страница 693: ...is 15 characters Category Display the types that will be monitored Status Display the status for the category You can check the box to be monitored For example the check box of CPE firmware upgrade f...

Страница 694: ...s are explained as follows Item Description Add Click it to open the following page for adding a new string object Set to Factory Default Click it to clear all of the settings in this page Index Displ...

Страница 695: ...ked by the Vigor router s Firewall The country object by grouping IP addresses for multiple countries can be applied by other functions such as router policy destination refer to the following figure...

Страница 696: ...or such profile The maximum length of the name you can set is 15 characters Available Country Selected Country Select any country from Available Country Click to move the selected country and place on...

Страница 697: ...Log into the web user interface of Vigor router 2 Configure relational objects first Open Object Settings SMS Mail Server Object to get the following page Index 1 to Index 8 allows you to choose the b...

Страница 698: ...ofile setting 5 Open Object Settings Notification Object to configure the event conditions of the notification 6 Choose any index number e g Index 1 in this case to configure conditions for sending th...

Страница 699: ...choose SMS Provider and the Notify Profile specify the time of sending SMS Then type the phone number in the field of Recipient the one who will receive the SMS 9 Click OK to save the settings Later...

Страница 700: ...P Pr ro ov vi id de er r Choose one of the Index numbers 9 or 10 allowing you to customize the SMS Provider In the web page type the URL string of the SMS provider and type the username and password...

Страница 701: ...USB Application you can type the IP address of the Vigor router and username password created in USB Application USB User Management on the client software Then the client can use the FTP site USB st...

Страница 702: ...e USB storage disk into the Vigor router please make sure the memory format for the USB storage disk is FAT16 or FAT32 It is recommended for you to use FAT32 for viewing the filename completely FAT16...

Страница 703: ...ers Both them cannot contain any of the following Workgroup Name Type a name for the workgroup Host Name Type the host name for the router Printer Server Enable Click it to make Vigor router act as a...

Страница 704: ...Note FTP Passive mode is not supported by Vigor Router Please disable the mode on the FTP client Password Type the password for FTP SMB users for accessing FTP server Later you can open FTP client sof...

Страница 705: ...u have to insert a USB storage disk into the USB interface of the Vigor router Otherwise you cannot save the configuration V VI II II I 2 2 3 3 F Fi il le e E Ex xp pl lo or re er r File Explorer offe...

Страница 706: ...rst And then remove the USB device later Available settings are explained as follows Item Description Connection Status If there is no USB device connected to Vigor router No Disk Connected will be sh...

Страница 707: ...communications room is overheating During summer in particular it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures The inclu...

Страница 708: ...t Choose the display unit of the temperature There are two types for you to choose Alarm Settings Enable Syslog Alarm The temperature log will be recorded on Syslog if it is enabled Upper temperature...

Страница 709: ...s User s Guide 693 V VI II II I 2 2 6 6 M Mo od de em m S Su up pp po or rt t L Li is st t Such page provides the information about the brand name and model name of the USB modems which are supported...

Страница 710: ...uide 694 V VI II II I 2 2 7 7 S SM MB B C Cl li ie en nt t S Su up pp po or rt t L Li is st t SMB Client Support List provides the test status information for applications with file sharing operated u...

Страница 711: ...USB Applicaiton File Explorer If it is necessary for you to delete copy files on the device or write paste files to the devcie it must be done through SMB server or FTP server SMB service is based on...

Страница 712: ...Vigor2862 Series User s Guide 696...

Страница 713: ...User Management Click Enable to enable FTP SMB User account Here we add a new account user1 and assign authorities Read Write and List to it 4 Click OK to save the configuration 5 Make sure the FTP s...

Страница 714: ...B Application USB Device Status The information for FTP server will be shown as below Now users in LAN of Vigor2862 can access into the USB storage device by typing ftp 192 168 1 1 on any browser They...

Страница 715: ...e 699 P Pa ar rt t X XI I T Tr ro ou ub bl le es sh ho oo ot ti in ng g This part will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and fin...

Страница 716: ...to check your basic installation status stage by stage Checking if the hardware status is OK or not Checking if the network connection settings on your computer are OK or not Pinging the router from...

Страница 717: ...router X XI I 1 1 1 1 D Di ia al l o ou ut t T Tr ri ig gg ge er ri in ng g Click Diagnostics and click Dial out Triggering to open the web page The internet connection e g PPPoE is triggered by a pac...

Страница 718: ...Click it to reload the page X XI I 1 1 2 2 R Ro ou ut ti in ng g T Ta ab bl le e Click Diagnostics and click Routing Table to open the web page Available settings are explained as follows Item Descri...

Страница 719: ...ss Resolution Protocol cache held in the router The table shows a mapping between an Ethernet hardware address MAC Address and an IP address Available settings are explained as follows Item Descriptio...

Страница 720: ...g between an Ethernet hardware address MAC Address and an IPv6 address This information is helpful in diagnosing network problems such as IP address conflicts etc Click Diagnostics and click IPv6 Neig...

Страница 721: ...Table to open the web page Available settings are explained as follows Item Description Index It displays the connection item number IP Address It displays the IP address assigned by this router for s...

Страница 722: ...settings are explained as follows Item Description Private IP Port It indicates the source IP address and port of local PC Pseudo Port It indicates the temporary port of the router used for NAT Peer...

Страница 723: ...displayed on Diagnostics DNS Cache Table Available settings are explained as follows Item Description Clear Click this link to remove the result on the window Refresh Click it to reload the page When...

Страница 724: ...agnostics and click Ping Diagnosis to open the web page or Available settings are explained as follows Item Description IPV4 IPV6 Choose the interface for such function Ping through Use the drop down...

Страница 725: ...result on the window X XI I 1 1 9 9 D Da at ta a F Fl lo ow w M Mo on ni it to or r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of sever...

Страница 726: ...the system automatically Refresh Click this link to refresh this page manually Index Display the number of the data flow IP Address Display the IP address of the monitored device TX rate kbps Display...

Страница 727: ...S Use the drop down list to change the priority in data transmission for the specified IP address host Current Peak Speed Current means current transmission rate and receiving rate for WAN interface P...

Страница 728: ...eset to zero the accumulated RX TX received and transmitted data of WAN Click Refresh to renew the graph at any time The horizontal axis represents time Yet the vertical axis has different meanings Fo...

Страница 729: ...Vigor2862 Series User s Guide 713 X XI I 1 1 1 11 1 V VP PN N G Gr ra ap ph h Click Diagnostics and click VPN Graph to open the web page...

Страница 730: ...e routes from router to the host Simply type the IP address of the host in the box and click Run The result of route trace will be shown on the screen or Available settings are explained as follows It...

Страница 731: ...eb b S Sy ys sl lo og g This page displays the time and message for User Firewall call WAN VPN settings You can check Enable Web Syslog specify the type of Syslog and choose the display mode you want...

Страница 732: ...age disk Available settings are explained as follows Item Description Time Display the time of the event occurred Log Type Display the type of the record Message Display the information for each event...

Страница 733: ...All of the routers under the same DARP DrayTek Address resolution Protocol group can be viewed in such page However only partial information of the router status will be displayed Vigor routers with...

Страница 734: ...the primary router in HA Secondary means such router stands for the secondary router in HA Stable No means the primary router has not been determined yet DARP is negotiating YES means the primary rout...

Страница 735: ...s se er r L Li is st t Such page displays authentication jobs made by Internal RADIUS or Local 802 1X When the mouse cursor moves to the name link under User Name the connection message including auth...

Страница 736: ...or All to display related authentication information log Display Mode Choose the mode you want to display the related information on the following table Stop record when fulls When the capacity of CVM...

Страница 737: ...onment to find out if there is any abnormal connection Information of IP traced and destination port used for SYN Flood UDP Flood and ICMP Flood attacks will be detected and shown respectively on diff...

Страница 738: ...following web page will be blocked forever Available settings are explained as follows Item Description Blocking IP Type the IP address in this field and click add It will be added to the IP List and...

Страница 739: ...router can be traced or Available settings are explained as follows Item Description Mode Analyze a single packet Choose such mode to make Vigor router analyze how a single packet will be sent by a r...

Страница 740: ...age Input File It is available when Analyze multiple packets is selected as Mode Select Click the download link to get a blank example file Then click such button to select that blank csv file for sav...

Страница 741: ...hardware status 1 Check the power line and WLAN LAN cable connections Refer to I 2 Hardware Installation for details 2 Turn on the router Make sure the ACT LED blink once per second and the correspon...

Страница 742: ...link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s Info The example is based on Windows 7 As to the examples for...

Страница 743: ...r2862 Series User s Guide 727 4 Select Internet Protocol Version 4 TCP IP and then click Properties 5 Select Obtain an IP address automatically and Obtain DNS server address automatically Finally clic...

Страница 744: ...ide 728 F Fo or r M Ma ac c O OS S 1 Double click on the current used Mac OS on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop d...

Страница 745: ...he router correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista 7 The DOS command dialo...

Страница 746: ...Vigor2862 Series User s Guide 730...

Страница 747: ...value configured in Vigor router Check if the LEDs on Vigor router are on or not If not please install an additional switch for connecting both Vigor router and the modem offered by ISP Then check if...

Страница 748: ...c co on nn ne ec ct ti io on n d do oe es s n no ot t w wo or rk k Check the PIN Code of SIM card is disabled or not Please use the utility of 3G 4G USB Modem to disable PIN code and try again If it s...

Страница 749: ...The password of factory default is null S So of ft tw wa ar re e R Re es se et t You can reset the router to factory default via Web page Such function is available in Admin Mode only Go to System Ma...

Страница 750: ...or the router again to fit your personal request X XI I 8 8 C Co on nt ta ac ct ti in ng g D Dr ra ay yT Te ek k If the router still cannot work correctly after trying many efforts please contact your...

Страница 751: ...he difficulty is how to handle the traffics between two or more Ethernet switches Thus VLAN is suitable for some circumstances for example the rental apartment SOHO office and so on These clients may...

Страница 752: ...packet as the VID of Trunk port while forwarding the packets to another switch Bridge mode of WAN P1 and P2 are doing NAT flow to access to the internet but P3 and P4 will forward the packets between...

Страница 753: ...Vigor2862 Series User s Guide 737...

Страница 754: ...Vigor2862 Series User s Guide 738 LAN V VL LA AN N a ap pp pl li ic ca at ti io on ns s o on n V Vi ig go or r r ro ou ut te er r Multi Subnet VLAN of LAN...

Страница 755: ...ver LAN1 LAN2 LAN3 LAN4 However the traffics of the LAN port or SSID that are NOT being grouped in the same VLAN are unable to forward to each other The benefit of Port based is able to extend the wir...

Страница 756: ...to be isolated from your private network due to the security considerations it can be done by above settings However a switch support VLAN function is need if VLAN Tag enabled Triple Play Multi WAN N...

Страница 757: ...Vigor2862 Series User s Guide 741...

Страница 758: ...dge mode with VLAN Set top box STB or the other kinds of media devices are able to attach with Port4 or Port5 of LAN Those devices that attached with Port4 or Port5 are able to access the services net...

Страница 759: ...Vigor2862 Series User s Guide 743 P Pa ar rt t X X T Te el ln ne et t C Co om mm ma an nd ds s...

Страница 760: ...Windows Features of Telnet Client has been turned on under Control Panel Programs Type cmd and press Enter The Telnet terminal will be open later In the following window type Telnet 192 168 1 1 as be...

Страница 761: ...ide 745 For users using previous Windows system e g 2000 XP simply click Start Run and type Telnet 192 168 1 1 in the Open box as below Next type admin admin for Account Password And type to get a lis...

Страница 762: ...L setting S Sy yn nt ta ax x adsl status more counts hlog qln snr bandinfo olr E Ex xa am mp pl le e adsl status ATU R Info hw annex A f w annex Unknown Running Mode T1 413 State TRAINING DS Actual Ra...

Страница 763: ...4 Multi 5 ADSL2 7 ADSL2_AnnexM 8 ADSL2 14 ADSL2 _AnnexM acqIP It means the way to acquire IP address Type the number to determine the IP address by specifying or assigned dynamically by DHCP server 0...

Страница 764: ...bridge status save It means to save the configuration to flash enable It means to enable the Multi VLAN function disable It means to disable the Multi VLAN function on off It means to turn on off brid...

Страница 765: ...mode DSL debug tool mode is off adsl idle tcpmessage Set DSL debug tool mode on Please reboot system to take effect adsl idle tcpmessage_off Set DSL debug tool mode off Please reboot system to take e...

Страница 766: ...vel 5 for F5 End to End VC level chklink Check the DSL connection Log_on log_off Enable or disable the OAM log for debug E Ex xa am mp pl le e adsl oamlb chklink on OAM checking dsl link is ON adsl oa...

Страница 767: ...remove ADSL mode set It means to use default settings plus the new added ADSL mode default It means to use default settings show It means to display current setting adsl_mode There are three modes to...

Страница 768: ...em g vector status trellis retx default us ds bi us upstream ds downstream bi bidirection aelem and g vector can be only on off value The value shall be hex digits bitswap 0 2 sra 0 2 3 4 on off Type...

Страница 769: ...79612f21 adsl vendorid on set vid0 vid1 User define CPE Vendor ID is ON T Te el ln ne et t C Co om mm ma an nd d a ad ds sl l a at tm m This command can set QoS parameter for ATM S Sy yn nt ta ax x a...

Страница 770: ...Display a table for PVC binding group 1 It means to clear specific PVC binding E Ex xa am mp pl le e adsl pvcbinding 3 5 set done bind pvc3 to pvc5 The above example means PVC3 has been bound to PVC5...

Страница 771: ...able Rate 0 bps US Attainable Rate 0 bps DS Path Mode Fast US Path Mode Fast DS Interleave Depth 0 US Interleave Depth 0 NE Current Attenuation 0 dB Cur SNR Margin 0 dB DS actual PSD 0 0 dB US actual...

Страница 772: ...ow it is on continuous sending mode and vdsl2 2 led is always ON 5 Use vdsl reboot to restart dsl to normal mode T Te el ln ne et t C Co om mm ma an nd d v vd ds sl l r re eb bo oo ot t This command c...

Страница 773: ...s trellis retx default us ds bi us upstream ds downstream bi bidirection aelem and g vector can be only on off value The value shall be hex digits bitswap 0 2 sra 0 2 3 4 on off Type on for enabling s...

Страница 774: ...d d v vd ds sl l i in nv ve en nt to or ry y This command is used to display information about CO or CPE S Sy yn nt ta ax x vdsl inventory co cpe S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n P...

Страница 775: ...o om mm ma an nd d c cs sm m a ap pp pe e s se et t It is used to configure group settings for IM P2P Protocol and Others in APP Enforcement Profile csm appe set i INDEX v GROUP e AP_IDX d AP_IDX a AP...

Страница 776: ...how t Type Index Name Version Advance Advanced Option M essage F ile Transfer G ame C onference and O ther Activities PROTOCOL 52 DB2 PROTOCOL 53 DNS PROTOCOL 54 FTP PROTOCOL 55 HTTP 1 1 PROTOCOL 56 I...

Страница 777: ...isable OTHERS TUNNEL 83 PGPNet Disable OTHERS TUNNEL 84 Ping Tunnel Disable Total 66 APPs T Te el ln ne et t C Co om mm ma an nd d c cs sm m a ap pp pe e i in nt te er rf fa ac ce e It is used to conf...

Страница 778: ...filter profile S Sy yn nt ta ax x csm ucf show csm ucf setdefault csm ucf msg MSG csm ucf obj INDEX n PROFILE_NAME l P B A N uac wf csm ucf obj INDEX n PROFILE_NAME csm ucf obj INDEX p VALUE csm ucf o...

Страница 779: ...Name game Log none Priority Select Bundle Pass Enable URL Access Control Action pass Prevent web access from IP address No Obj NO Object Name No Grp NO Group Name T Te el ln ne et t C Co om mm ma an n...

Страница 780: ...any IP address will be blocked D Disable the function o Set the keyword object KEY_WORD_Object_Index Specify the index number of the object profile g Set the keyword group KEY_WORD_Group_Index Specif...

Страница 781: ...SM profile e It means to enable the restriction of web feature d It means to disable the restriction of web feature a Set the action of web feature P or B B Block The web access meets the web feature...

Страница 782: ...Description show It means to display the web content filter profiles Look It means to display the license information of WCF Cache It means to set the cache level for the profile Server WCF_SERVER It...

Страница 783: ...ranc Illegal Drug Nudity Pornography Sexually Explicit Weapons Violence School Cheating Sex Education Tasteless Child Abuse Imges Entertainment Games Sports Travel Leisure Recreation Fashin Beauty Bus...

Страница 784: ...v Tasteless v Child Abuse Images leisure Group Entertainment Games Sports Travel Leisure Recreation Fashion Beauty T Te el ln ne et t C Co om mm ma an nd d c cs sm m d dn ns sf f It means to configure...

Страница 785: ...ckpage DNS sends block page for redirect port When a web page is blocked by DNS filter the router system will send a message page to describe that the page is not allowed to be visisted ON Enable the...

Страница 786: ...w 1000 T Te el ln ne et t C Co om mm ma an nd d d do os s This command allows users to configure the settings for DoS defense system S Sy yn nt ta ax x dos V D A dos s ATTACK_F THRESHOLD TIMEOUT dos a...

Страница 787: ...an nd d I In nt te er rn ne et t This command allows you to configure detailed settings for WAN connection S Sy yn nt ta ax x internet W n M n command parameter S Sy yn nt ta ax x D De es sc cr ri ip...

Страница 788: ...l string Set PPP mode Modem Dial String max 31 characters v service name Set PPP mode Service Name max 23 characters m ppp username Set PPP mode PPP Username max 63 characters o ppp password Set PPP m...

Страница 789: ...nable Disable S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description Enable Enable the function Disable Disable the function E Ex xa am mp pl le e ip 2ndsubnet enable 2nd subnet en...

Страница 790: ...bnet mask E Ex xa am mp pl le e ip pubmask ip pubmask public subnet mask Now 255 255 255 0 ip pubmask 255 255 0 0 Set public subnet mask done T Te el ln ne et t C Co om mm ma an nd d i ip p a au ux x...

Страница 791: ...nd d i ip p a ad dd dr r This command allows users to set add a specified LAN IP your router S Sy yn nt ta ax x ip addr IP address S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Descr...

Страница 792: ...ws users to review current status for the arp table arp accept allows to accept or reject the source destination MAC address arp setCacheLife allows users to configure the duration in which ARP caches...

Страница 793: ...r c option number x option value ip dhcpc option u idx unmber ip dhcpc release wan number ip dhcpc renew wan number ip dhcpc status S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Descr...

Страница 794: ...IP address It means the WAN IP address WAN1 PVC3 PVC4 PVC5 It means the WAN port PVC that the above IP address passes through E Ex xa am mp pl le e ip ping 172 16 3 229 WAN1 Pinging 172 16 3 229 with...

Страница 795: ...ddress Port S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description IP address Type the WAN or LAN IP address of the remote device Port Type a port number e g 23 Available settings...

Страница 796: ...erface 1 Enable the function of setting RIP of WAN IP 0 Disable the function E Ex xa am mp pl le e ip wanrip Valid ex ip wanrip ifno e 0 1 ifno 1 WAN1 2 WAN2 3 PVC3 4 PVC4 5 PVC5 e 0 1 0 disable 1 ena...

Страница 797: ...ddress of the destination netmask It means the netmask of the specified IP address gateway It means the gateway of the connected router ifno It means the connection interface 3 WAN1 5 WAN3 6 WAN4 7 WA...

Страница 798: ...e proxy server for using On off show help It means to turn on off display or get more information of the T_home service query It means to set IGMP general query interval The default value is 125000 ms...

Страница 799: ...or exceeding session limit and set how many seconds the IP session block works S Sy yn nt ta ax x ip session on ip session off ip session default num ip session defaultp2p num ip session status ip ses...

Страница 800: ...sion number is 100 T Te el ln ne et t C Co om mm ma an nd d i ip p b ba an nd dw wi id dt th h This command allows users to set maximum bandwidth limit number for the specified IP S Sy yn nt ta ax x i...

Страница 801: ...ndmac strict_on ip bindmac show ip bindmac add IP MAC Comment ip bindmac del IP all S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description on It means to turn on IP bandmac policy...

Страница 802: ...eries User s Guide 786 E Ex xa am mp pl le e ip bindmac add 192 168 1 46 00 50 7f 22 33 55 just for test ip bindmac show ip bind mac function is turned ON IP 192 168 1 46 bind MAC 00 50 7f 22 33 55 Co...

Страница 803: ...in several commands in one line General Setup for Policy Route i value Specify an index number for setting policy route profile Value 1 to 60 1 means to get a free policy index automatically e 0 1 0 D...

Страница 804: ...olicy route profile Value Type a number 0 250 The default value is 150 I value Indicate the interface specified for the policy route profile Value Available interfaces include LAN1 LAN8 IP_Routed_Subn...

Страница 805: ...iagnose s 192 168 1 100 d any p any t ICMP Matched Route Priority No_Match Matched Policy Priority Policy_1 200 Conclusion The packet was dropped because the send to interface of the mat ched policy p...

Страница 806: ...ma an nd d i ip p6 6 a ad dd dr r This command allows users to set the IPv6 address for your router S Sy yn nt ta ax x ip6 addr s prefix prefix length LAN WAN1 WAN2 iface ip6 addr d prefix prefix leng...

Страница 807: ...s It means to ask the SIP S It means to ask the SIP name d It means to ask the DNS setting D It means to ask the DNS name n It means to ask NTP i It means to ask NIS I It means to ask NIS name p It me...

Страница 808: ...d request IA_PD whose IAID equals to 2008 ip6 dhcp client WAN2 n 1023456 ip6 dhcp client WAN2 a Interface WAN2 has following DHCPv6 client settings DHCPv6 client enabled request IA_NA whose IAID equal...

Страница 809: ...to configure settings for accessing Internet S Sy yn nt ta ax x ip6 internet W n M n command parameter S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description W n W means to set WA...

Страница 810: ...6 address for first DNS server D server It means to set the secondary DNS Server IP server type an IPv6 address for second DNS server t dhcp ra none It means to set IPv6 PPP WAN test mode for DHCP or...

Страница 811: ...neighbour d It means to delete a neighbour a It means to show neighbour status inet6_addr Type an IPv6 address eth_addr Type submask address LAN WAN1 WAN2 Specify an interface for the neighbor E Ex x...

Страница 812: ...ed T Te el ln ne et t C Co om mm ma an nd d i ip p6 6 r ro ou ut te e This command allows you to S Sy yn nt ta ax x ip6 route s prefix prefix length gateway LAN WAN1 WAN2 iface D ip6 route d prefix pr...

Страница 813: ...t ta ax x ip6 ping IPV6 address Host LAN WAN1 WAN2 S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description IPV6 address Host It means to specify the IPv6 address or host for ping LA...

Страница 814: ...1 7F8 1 A501 5169 1 330 ms 6 2001 4860 1 0 4B3 350 ms 7 2001 4860 8 0 2DAF 330 ms 8 2001 4860 2 0 66E 340 ms 9 Request timed out 10 2001 4860 4860 8888 350 ms Trace complete T Te el ln ne et t C Co om...

Страница 815: ...is not a default router and should not appear on the default router list Type the number unit second you want V It means to show the RADVD configuration r It means RA default test r num It means RA t...

Страница 816: ...e ip6 mngt list add 1 FE80 250 7FFF FE12 1010 128 ip6 mngt list add 2 FE80 250 7FFF FE12 1020 128 ip6 mngt list add 3 FE80 250 7FFF FE12 2080 128 ip6 mngt list IPv6 Access List Index IPv6 Prefix Prefi...

Страница 817: ...ri ip pt ti io on n Parameter Description ifno It means the connection interface 1 WAN1 2 WAN2 add It means to add an IPv6 address which can be used to execute management through Internet prefix It me...

Страница 818: ...ew VcdhrtzZ S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description V It means to show the version of this IP filter c It means to show the running call filter rules d It means to s...

Страница 819: ...f blocked packet Type 3 to display the log of non matching packet p VALUE It means to setup actions for packet not matching any rule e g p 1 Type 0 to let all the packets pass Type 1 to block all the...

Страница 820: ...rule s r command parameter ipf rule s r v S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description s Such word means Filter Set range form 1 12 r Such word means Filter Rule range fr...

Страница 821: ...ect g indicates group obj indicates index number of object or index number of group Available settings range from 1 192 For example d g 1 means the first destination IP group profile S o g obj It mean...

Страница 822: ...age 0 None 1 ANSI 1250 Central Europe 2 ANSI 1251 Cyrillic 3 ANSI 1252 Latin I 4 ANSI 1253 Greek 5 ANSI 1254 Turkish 6 ANSI 1255 Hebrew 7 ANSI 1256 Arabic 8 ANSI 1257 Baltic 9 ANSI 1258 Viet Nam 10 OE...

Страница 823: ...sable CodePage ANSI 1252 Latin I Window size 65535 Session timeout 1440 DrayTek Banner Enable Strict Security Checking APP Enforcement T Te el ln ne et t C Co om mm ma an nd d i ip pf f f fl lo ow wt...

Страница 824: ...o 0 REPLY 8 8 8 8 53 192 168 1 11 15073 ifno 3 proto 17 age 93025100 2000 flag 203 ORIGIN 192 168 1 11 7247 8 8 8 8 53 ifno 0 REPLY 8 8 8 8 53 192 168 1 11 7247 ifno 3 proto 17 age 93020100 7000 flag...

Страница 825: ...880fdd4 Client IP 0 0 0 0 Your IP 0 0 0 0 Next server IP 0 0 0 0 Relay agent IP 0 0 0 0 25 36 49 580 DHCP WAN 5 Len 548XID 0x7880fdd4 Client IP 0 0 0 0 Your IP 0 0 0 0 Next server IP 0 0 0 0 Relay age...

Страница 826: ...tpsport Https port S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description Https port It means to type the number for HTTPS port The default setting is 443 E Ex xa am mp pl le e mng...

Страница 827: ...ption enable It means to activate FTP server function disable It means to inactivate FTP server function E Ex xa am mp pl le e mngt ftpserver enable FTP server has been enabled mngt ftpserver disable...

Страница 828: ...f It means to inactivate the function of defense worm packet out add port It means to add a new TCP port for block del port It means to delete a TCP port for block viewlog It means to display a log of...

Страница 829: ...en enabled mngt rmtcfg ftp on FTP server has been enabled T Te el ln ne et t C Co om mm ma an nd d m mn ng gt t l la an na ac cc ce es ss s This command allows users to manage accessing into Vigor rou...

Страница 830: ...ess the router T Te el ln ne et t C Co om mm ma an nd d m mn ng gt t e ec ch ho oi ic cm mp p This command allows users to reject or accept PING packets from the Internet S Sy yn nt ta ax x mngt echoi...

Страница 831: ...255 255 0 T Te el ln ne et t C Co om mm ma an nd d m mn ng gt t s sn nm mp p This command allows you to configure SNMP for management S Sy yn nt ta ax x mngt snmp command parameter S Sy yn nt ta ax x...

Страница 832: ...multi subnet S Sy yn nt ta ax x msubnet switch 2 3 4 5 6 On Off S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description 2 3 4 5 6 It means LAN interface 2 LAN2 3 LAN3 4 LAN4 5 LAN5...

Страница 833: ...ax x msubnet nmask 2 3 4 5 6 IP address S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description 2 3 4 5 6 It means LAN interface 2 LAN2 3 LAN3 4 LAN4 5 LAN5 6 LAN6 IP address Type...

Страница 834: ...cription 2 3 4 5 6 It means LAN interface 2 LAN2 3 LAN3 4 LAN4 5 LAN5 6 LAN6 On Off On means enabling the DHCP server for the specified LAN interface Off means disabling the DHCP server E Ex xa am mp...

Страница 835: ...o configure an IP address as the gateway used for subnet S Sy yn nt ta ax x msubnet gateway 2 3 4 Gateway IP S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description 2 3 4 5 6 It mea...

Страница 836: ...msubnet talk 1 2 3 4 5 6 1 2 3 4 5 6 On Off S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description 1 2 3 4 5 6 It means LAN interface 1 LAN1 2 LAN2 3 LAN3 4 LAN4 5 LAN5 6 LAN6 On O...

Страница 837: ...d to reboot the router msubnet startip msubnet startip 2 3 4 5 6 Gateway IP Now LAN2 192 168 2 90 LAN3 192 168 3 10 LAN4 192 168 4 10 LAN5 192 168 5 1 0 LAN6 192 168 6 10 T Te el ln ne et t C Co om mm...

Страница 838: ...4 5 6 It means LAN interface 2 LAN2 3 LAN3 4 LAN4 5 LAN5 6 LAN6 count Choose the following number for specifying different node type 1 B node 2 P node 4 M node 8 H node 0 Not specify any type for nod...

Страница 839: ...4 5 6 WINS IP Now LAN2 192 168 3 5 LAN3 0 0 0 0 LAN4 0 0 0 0 LAN5 0 0 0 0 LAN6 0 0 0 0 T Te el ln ne et t C Co om mm ma an nd d m ms su ub bn ne et t s se ec cW WI IN NS S This command is used to conf...

Страница 840: ...ver E Ex xa am mp pl le e msubnet tftp msubnet tftp 2 3 4 5 6 TFTP server name Now LAN2 LAN3 LAN4 LAN5 LAN6 msubnet tftp 2 publish Set LAN2 TFTP Server Name done msubnet tftp msubnet tftp 2 3 4 5 6 TF...

Страница 841: ...rofile S Sy yn nt ta ax x object ip obj setdefault object ip obj INDEX v object ip obj INDEX n NAME object ip obj INDEX i INTERFACE object ip obj INDEX s INVERT object ip obj INDEX a TYPE START_IP END...

Страница 842: ...t ip obj 1 a 1 192 168 1 45 object ip obj 1 v IP Object Profile 1 Name marketing Interface Any Address type single Start ip address 192 168 1 45 End Mask ip address 0 0 0 0 Invert Selection 0 T Te el...

Страница 843: ...IP object profiles for the group profile Example object ip grp 3 a 1 2 3 4 5 The IP object profiles with index number 1 2 3 4 and 5 will be group under such profile E Ex xa am mp pl le e object ip gr...

Страница 844: ...ype a name with less than 15 characters Example object ip obj 9 n bruce i INTERFACE It means to define an interface for the IP object INTERFACE 0 means any INTERFACE 1 means LAN INTERFACE 3 means WAN...

Страница 845: ...all profiles INDEX It means the index number of the specified group profile v It means to view the information of the specified group profile Example object ip grp 1 v n NAME It means to define a nam...

Страница 846: ...t ti io on n Parameter Description setdefault It means to return to default settings for all profiles INDEX It means the index number of the specified service object profile v It means to view the inf...

Страница 847: ...D_P type a port number to indicate destination port Example object service obj 3 d 1 100 200 E Ex xa am mp pl le e object service obj 1 n limit object service obj 1 p 255 object service obj 1 s 1 120...

Страница 848: ...object index 0 0 1 0 2 0 3 0 4 0 5 0 6 0 7 0 object service grp 1 a 1 2 Service Group Profile 1 Name Grope_1 Included service object index 0 1 1 2 2 0 3 0 4 0 5 0 6 0 7 0 T Te el ln ne et t C Co om mm...

Страница 849: ...ln ne et t C Co om mm ma an nd d o ob bj je ec ct t f fe e This command is used to create File Extension Object profile S Sy yn nt ta ax x object fe show object fe setdefault object fe obj INDEX v obj...

Страница 850: ...lb ole tlb viv vrm ace arj bzip2 bz2 cab gz gzip rar sit zip bas bat com exe inf pif reg scr Example object fe obj 1 e bmp E Ex xa am mp pl le e object fe obj 1 n music object fe obj 1 e Audio object...

Страница 851: ...ns the number of LAN port and WAN port AN 10H It means the physical type for the specific port AN auto negotiate 100F 100M Full Duplex 100H 100M Half Duplex 10F 10M Full Duplex 10H 10M Half Duplex sta...

Страница 852: ...all settings E Ex xa am mp pl le e portmaptime t 86400 u 300 i 10 portmaptime l Current setting TCP Timeout 86400 sec UDP Timeout 300 sec IGMP Timeout 10 sec TCP WWW Timeout 60 sec TCP SYN Timeout 60...

Страница 853: ...m 1 p 1 b 0 Set ok The PPA mode is Auto You need to set the Manual mode first TWO way accleration is disable ppa v PPA mode is Auto PPA Protocol TCP 1 UDP 0 PPA two way disable PPA time is 10 PPA rang...

Страница 854: ...in apply to incoming traffic only 2 out apply to outgoing traffic only 3 both apply to both incoming and outgoing traffic Default is enable for outgoing traffic i bandwidth It means to set inbound ban...

Страница 855: ...and 3 The default setting is class 1 n name It means to type a name for the class a It means to add rule for specified class e no It means to edit specified rule no type the index number for the rule...

Страница 856: ...p pl le e qos class c 2 n draytek a m 1 l 192 168 1 50 192 168 1 80 Following setting will set in the class2 class 2 name set to draytek Add a rule in class2 Class2 the 1 rule enabled Set local addres...

Страница 857: ...displays current status of LAN IP address settings E Ex xa am mp pl le e show lan The LAN settings ip mask dhcp star_ip pool gateway V LAN1 192 168 1 1 255 255 255 0 V 192 168 1 10 200 192 168 1 1 X L...

Страница 858: ...ary DNS Not set Secondary DNS Not set T Te el ln ne et t C Co om mm ma an nd d s sh ho ow w o op pe en np po or rt t This command displays current status of open port setting E Ex xa am mp pl le e sho...

Страница 859: ...me e This command displays the reuse time of NAT session Level0 It is the default setting Level1 It will be applied when the NAT sessions are smaller than 25 of the default setting Level2 It will be a...

Страница 860: ...ING TX Block 0 RX Block 0 Corrected Blocks 0 Uncorrected Blocks 0 UP Speed 0 Down Speed 0 SNR Margin 0 Loop Att 0 T Te el ln ne et t C Co om mm ma an nd d s sh ho ow w a ad ds sl l This command displa...

Страница 861: ...n nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description reset It means to reset the transmitted received bytes to Zero interface It means to specify WAN1 WAN5 including multi PVC interfac...

Страница 862: ...X XX XX XX all ALL S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description start It means the starting point of the IP address pool for the DHCP server IP address It means to specif...

Страница 863: ...le e srv dhcp dns1 168 95 1 1 srv dhcp dns1 DNS IP address Now 168 95 1 1 IP Routed Subnet dns same as NAT Subnet dns T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p d dn ns s2 2 This...

Страница 864: ...dhcp frcdnsmanl on Domain name server now is using manual settings srv dhcp frcdnsmanl off Domain name server now is using auto settings T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp...

Страница 865: ...ys reboot command to reboot router T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p o on n This function allows users to turn on DHCP server It needs rebooting router please type sys re...

Страница 866: ...server as the starting point E Ex xa am mp pl le e srv dhcp startip 192 168 1 53 This setting will take effect after rebooting Please use sys reboot command to reboot the router T Te el ln ne et t C C...

Страница 867: ...ns the lease time that DHCP server can use The unit is second E Ex xa am mp pl le e srv dhcp leasetime srv dhcp leasetime Lease Time sec Now 86400 T Te el ln ne et t C Co om mm ma an nd d s sr rv v d...

Страница 868: ...hcp primWINS 192 168 1 88 srv dhcp primWINS srv dhcp primWINS WINS IP address srv dhcp primWINS clear Now 192 168 1 88 T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p s se ec cW WI IN...

Страница 869: ...p t tf ft tp p This command can set the TFTP server as the DHCP server S Sy yn nt ta ax x srv dhcp tftp TFTP server name S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description TFTP...

Страница 870: ...t means to set option number Available number ranges from 0 to 255 v It means to set option number by typing string a It means to set the option value by specifying the IP address x It means to set op...

Страница 871: ...eral commands in one line e It means to enable disable such feature 1 enable 0 disable i It means to specify the private IP address of the DMZ host r It means to remove DMZ host setting v It means to...

Страница 872: ...disable the open port rule profile 0 disable 1 enable c comment It means to type the description less than 23 characters for the defined network service i local ip It means to set the IP address for...

Страница 873: ...De es sc cr ri ip pt ti io on n Parameter Description Add idx It means to add a new port redirection table with an index number Available index number is from 1 to 10 serv name It means to type one n...

Страница 874: ...4 0 0 0 2 5 0 0 0 2 6 0 0 0 2 7 0 0 0 2 8 0 0 0 2 9 0 0 0 2 10 0 0 0 2 11 0 0 0 2 12 0 0 0 2 13 0 0 0 2 14 0 0 0 2 15 0 0 0 2 16 0 0 0 2 17 0 0 0 2 18 0 0 0 2 19 0 0 0 2 20 0 0 0 2 Protocol 0 Disable...

Страница 875: ...rection setting open port and DMZ settings E Ex xa am mp pl le e srv nat showall Index Proto WAN IP Port Private IP Port Act R01 TCP 0 0 0 0 80 192 168 1 11 100 Y O01 TCP 0 0 0 0 23 83 192 168 1 100 2...

Страница 876: ...w wi it tc ch h o of ff f This command is used to turn off the auto discovery for external devices E Ex xa am mp pl le e switch off Disable External Device auto discovery T Te el ln ne et t C Co om mm...

Страница 877: ...er account and specify LDAP server The server will authenticate the local user who wants to access into the web user interface of Vigor router S Sy yn nt ta ax x sys adminuser option sys adminuser edi...

Страница 878: ...Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description e enable It is used to disable enable bonjour service 0 disable 1 enable h enable It is used to disable enable http web servic...

Страница 879: ...s Profile version 3 0 0 Status 1 0x491e5e6c sys cfg default T Te el ln ne et t C Co om mm ma an nd d s sy ys s c cm md dl lo og g This command displays the history of the commands that you have typed...

Страница 880: ...e sys domainname wan1 clever sys domainname wan2 intellegent sys domainname sys domainname wan1 wan2 Domain Name Suffix max 40 characters sys domainname wan1 wan2 clear Now wan1 clever wan2 intellige...

Страница 881: ...This command can set and remove the name for the router when DHCP mode is selected for WAN S Sy yn nt ta ax x sys name wan1 ASCII string sys name wan1 clear S Sy yn nt ta ax x D De es sc cr ri ip pt...

Страница 882: ...ot t This command allows users to restart the router automatically within a certain time S Sy yn nt ta ax x sys autoreboot on off hour s S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter...

Страница 883: ...ys version Router Model Vigor2862Vn Version 3 7 4 1 English Profile version 3 0 0 Status 1 0x49165e6c Router IP 192 168 1 1 Netmask 255 255 255 0 Firmware Build Date Time Mar 20 2014 14 09 50 Router N...

Страница 884: ...ri ip pt ti io on n Parameter Description on It means to turn on pulling buffer off It means to turn off pulling buffer E Ex xa am mp pl le e sys pollbuf on Buffer polling is on sys pollbuf off Buffe...

Страница 885: ...m It means to get parameter notification value setnoti parm value It means to set parameter notification value log It means to display the TR 069 log debug on off on turn on the function of sending de...

Страница 886: ...andwidth InternetGatewayDevice X_00507F_Applications InternetGatewayDevice X_00507F_VPN InternetGatewayDevice X_00507F_VoIP InternetGatewayDevice X_00507F_WirelessLAN InternetGatewayDevice X_00507F_Sy...

Страница 887: ...nse message licauth It means the license authentication time setting regser It means the license register server setting licera It means to erase license setting licifno It means license and signature...

Страница 888: ...e Default setting is on for DSL voip_feature on off vf_name It means VoIP feature Type on to enable the feature or type off to disable the feature vf_name available settings include DRVTAPI DRVVMMC DR...

Страница 889: ...t tm ma ai il l This command is used to display current settings for sending test mail E Ex xa am mp pl le e testmail Send out test mail Mail Alert Disable SMTP_Server 0 0 0 0 Mail to Return Path T Te...

Страница 890: ...service must be enabled first E Ex xa am mp pl le e upnp on UPNP start upnp service SERVICE TABLE1 serviceType urn schemas microsoft com service OSInfo 1 serviceId urn microsoft com serviceId OSInfo1...

Страница 891: ...on1 sid d9cd47a5 d9c9 4d3d 8043 d03a82f27983 eventKey 1 ToSendEventKey 1 T Te el ln ne et t C Co om mm ma an nd d u up pn np p t tm mp pv vs s This command can display current status of temp Virtual S...

Страница 892: ...d name and model name of the USB modems which are supported by Vigor router E Ex xa am mp pl le e usb list Brand Module Standard Aiko Aiko 83D 3 5G Y BandRich Bandluxe C170 3 5G Y BandRich Bandluxe C2...

Страница 893: ...able Vigor Bridge Function T Te el ln ne et t C Co om mm ma an nd d v vi ig gb br rg g o of ff f This command can disable vigor bridge function E Ex xa am mp pl le e vigbrg off Disable Vigor Bridge Fu...

Страница 894: ...g w wa an n1 1o on n This command is used to enable the bridge WAN1 management E Ex xa am mp pl le e vigbrg wan1on Enable Vigor Bridge Wan1 management T Te el ln ne et t C Co om mm ma an nd d v vi ig...

Страница 895: ...dge to LAN 1 mode OFF WAN 2 full bridge to LAN 5 mode ON WAN 5 full bridge to LAN 1 mode OFF WAN 6 full bridge to LAN 1 mode OFF WAN 7 full bridge to LAN 1 mode OFF WAN 8 full bridge to LAN 1 mode OFF...

Страница 896: ...al 1 0 S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description voip dialplan block n It means the index number of the VoIP settings n 1 20 command parameter The available commands w...

Страница 897: ...umber Hotkey to enable call forwarding all function f number Hotkey to enable call forwarding busy function C number Hotkey to enable call forwarding no answer function c number Hotkey to disable call...

Страница 898: ...y to Disable DND Function 79 Hotkey to Enable Block Anonymous Calls Function 77 Hotkey to Disable Block Anonymous Calls Function 87 Hotkey to Enable Block Unknow Domain Calls Function 40 Hotkey to Dis...

Страница 899: ...ended for you to use the default setting Channel Available channel number 1 2 AbsoluteValue AbsoluteValue In 1 dB increments with 1 corresponding to 6 dBm Range 1 to 30 voip dsp EchoCanceler type This...

Страница 900: ...rresponding to 500ms That is to say Value 6 is corresponding 3000ms i e 3 seconds Timer 1 20 Vigor voip dsp timer 20 Set the timer 20 Voip dsp debugMsg Avaible settings include clrev clear phone hook...

Страница 901: ...for a country patten_num 1 Australia Ring Pattern cadenceOneOn 400 cadenceOneOff 200 cadenceTwoOn 400 cadenceTwoOff 2000 patten_num 2 Denmark Ring Pattern cadenceOneOn 1000 cadenceOneOff 4000 voip ds...

Страница 902: ...ct caller ID type It is available only for the model with FXO port voip dsp cidplusdigit 1 0 channel value Set the substitution 0 9 for digit in caller ID 1 enable the substitution 0 disable the subst...

Страница 903: ...dsp setCidDetGain tx 1 Current CID Detect Tx Gain 1 Rx Gain 6 voip dsp setCidDetGain rx 3 Current CID Detect Tx Gain 1 Rx Gain 3 T Te el ln ne et t C Co om mm ma an nd d v vo oi ip p r rt tp p S Sy yn...

Страница 904: ...es the start end port for RTP stream value The default value is 10050 15000 voip rtp symmetric value Make the data transmission going through on both ends of local router and remote router not mislead...

Страница 905: ...The default value is 5060 d domain Set the domain name or IP address of the SIP Registrar server The maximum is 63 characters y proxy Set domain name or IP address of SIP proxy server The maximum is...

Страница 906: ...is used such function will be disabled k num1 num2 Set backup wan list first wan second wan range 1 to 4 v View current status for account settings Voip sip calllog Display current status for SIP cal...

Страница 907: ...able 1 enable v View current settings voip sip misc Allows users to set miscellaneous settings for the device c enable Enable compact header to shorten the packet 0 disable 1 enable s enable Change in...

Страница 908: ...users to set NAT Traversal Setting s server Set the IP address for STUN server t sec Set ping interval for SIP account Sec 6 600 i ip Indicate external IP address v View current settings for SIP NAT E...

Страница 909: ...p 0 SAS voice prompt is disabled T Te el ln ne et t C Co om mm ma an nd d v vp pn n l l2 2l ls se et t This command allows users to set advanced parameters for LAN to LAN function S Sy yn nt ta ax x...

Страница 910: ...ns se et t This command allows users to configure setting for remote dial in VPN profile S Sy yn nt ta ax x vpn dinset list index vpn dinset list index on off vpn dinset list index motp on off vpn din...

Страница 911: ...1234 Secret e759bb6f0e94c7ab4fe6 Idle Timeout 300 sec T Te el ln ne et t C Co om mm ma an nd d v vp pn n s su ub bn ne et t This command allows users to specify a subnet selection for the specified re...

Страница 912: ...s the IP address to dial to usr pwd It means the user and the password required for the PPTP connection nip nmask It means the remote network IP and the mask e g vpn setup 1 name1 pptp_out 1 2 3 4 vig...

Страница 913: ...ange Log Profile Index 1 Profile Name name1 Username vigor Password 1234 Pre share Key abc Call Direction Dial In Type of Server ISDN PPTP IPSec L2TP Dial from 1 2 3 4 Remote NEtwork IP 192 168 1 0 Re...

Страница 914: ...e the function and PING IP 1 2 3 4 to keep alive For Dial Out Settings ctype It means Type of Server I am calling ctype t means PPTP ctype s means IPSec ctype l means L2TP IPSec Policy None ctype l1 m...

Страница 915: ...address of 203 12 23 48 Type off means any remote IP is allowed to dial in peerid It means the peer ID for Remote VPN Gateway Type draytek means the word is used as local ID iname It means Dial in Us...

Страница 916: ...m mr ro ou ut te e This command allows users to list add or delete static routes for a certain LAN to LAN VPN profile S Sy yn nt ta ax x vpn mroute index list vpn mroute index add network ip mask vpn...

Страница 917: ...s to list Network Settings of the specified profile index It means the index number of the profile Available index numbers 1 32 E Ex xa am mp pl le e vpn list 32 all Common Settings Profile Name Profi...

Страница 918: ...types to be selected on off on enable VPN remote setting off disable VPN remote setting E Ex xa am mp pl le e vpn remote PPTP on Set PPTP VPN Service On Please restart the router T Te el ln ne et t C...

Страница 919: ...ansmission of Netbios Naming Packet inside the tunnel E Ex xa am mp pl le e vpn NetBios set H2l 1 Pass Remote Dial In Profile Index 1 NetBios Block Pass PASS T Te el ln ne et t C Co om mm ma an nd d v...

Страница 920: ...tus and Leakage List of free L Buffer 95 minimum 94 leak 1 of free M Buffer 529 minimum 529 leak 3 of free S Buffer 1199 minimum 1198 leak 1 of free Msgid Buffer 1024 minimum 1024 T Te el ln ne et t C...

Страница 921: ...d subnet is allowed to pass VPN tunnel T Te el ln ne et t C Co om mm ma an nd d v vp pn n p pa as ss s2 2n na at t This command allows users to determine if the packets passing through by NAT or not w...

Страница 922: ...rs to adjust the size of MTU for WAN1 WAN2 S Sy yn nt ta ax x wan mtu value wan mtu2 value S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description value It means the number of MTU f...

Страница 923: ...ction E Ex xa am mp pl le e wan enable WAN WAN1 enabled T Te el ln ne et t C Co om mm ma an nd d w wa an n f fo or rw wa ar rd d This command allows you to enable or disable the function of WAN forwar...

Страница 924: ...em m w wa an n m mo od de em m2 2 This command wan modem allows you to configure 3G 4G USB Modem PPP mode of WAN3 The command wan modem2 allows you to configure 3G 4G USB Modem PPP mode of WAN4 S Sy...

Страница 925: ...0x0 0x0 and the router specifies WAN interface by USB port status Display current status of USB modem E Ex xa am mp pl le e wan modem pin 0000 wan modem status Modem Link Speed 0 Current Signal Streng...

Страница 926: ...tting S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description auth 0 1 Set PPP authentication of LTE WAN 0 None 1 PAP or CHAP band Display working band information for LTE network c...

Страница 927: ...c 0 1 Set whether to reply with MAC address 0 no 1 yes e 0 1 Enable or disable Reboot on SMS Message function 0 disable 1 enable f 0 1 Set whether to reply with WAN1 IP address 0 no 1 yes g 0 1 Set w...

Страница 928: ...d de et te ec ct t This command allows you to configure WAN connection detection When Ping Detection is enabled for Static IP or DHCP or PPPoE mode Router pings specified IP addresses to detect the WA...

Страница 929: ...interval Set the interval between each ping operation Available setting is between 1 and 3600 The unit is second interval Type a value retry retry Set how many ping operations are retried before the R...

Страница 930: ...vl la an n This command allows you to configure multi VLAN for WAN and LAN It supports pure bridge mode modem mode between Ethernet WAN and LAN port 2 4 S Sy yn nt ta ax x wan mvlan pvc_no status save...

Страница 931: ...5 p6 Service Type Tag Priority Keep Tag 7 ON 0 0 1 1 0 0 Normal 0 OFF 0 OFF T Te el ln ne et t C Co om mm ma an nd d w wa an n m mu ul lt ti if fn no o This command allows you to specify a channel in...

Страница 932: ...on of tagging on WAN interface stat Display current VLAN status E Ex xa am mp pl le e wan vlan stat Interface Pri Tag Enabled WAN1 ADSL 0 0 WAN1 VDSL 0 0 WAN2 0 0 T Te el ln ne et t C Co om mm ma an n...

Страница 933: ...e executed Different numbers represent different actions 1 shotdown wan 2 send mail alert 4 send sms alert For example if you type 5 5 1 4 the system will send SMS alert when WAN shotdown is detected...

Страница 934: ...ect It must be an IPv6 IP address IPv6 address Type the IPv6 address of the target s base_size Specify the size of MTU base_size Available setting is 1000 1500 E Ex xa am mp pl le e wan detect_mtu6 w...

Страница 935: ...For example to configure google APP key you can type hsportal p 1 g i this_is_app_key Profile 1 set google login disabled OK r Configure landing page mode 0 fixed URL 1 user request 2 bulletin E g hsp...

Страница 936: ...2 ssid3 ssid4 isolate It means to associate a MAC address to certain SSID interfaces access control settings The isolate setting will limit the wireless client s network capabilities to accessing the...

Страница 937: ...eans to display what the current wireless mode is channel number It means the channel of frequency of the wireless LAN The available settings are 0 1 2 3 4 5 6 7 8 9 10 11 12 and 13 number 0 means Aut...

Страница 938: ...ID4 enable It means to enable the function of the rate control for the specified SSID 0 disable and 1 enable upload It means to configure the rate control for data upload The unit is kbps download It...

Страница 939: ...means to enhance the performance in data transmission about 40 more by enabling Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the sa...

Страница 940: ...et time 5 del Remove white list block list e g wl scan del wlist 001122aabbcc filter Set which filter you want ssid scanning the AP based on SSID setting channel scanning the AP based on channel setti...

Страница 941: ...11 22 aa bb cc 0d 0 58 26 0d 0 0 T Te el ln ne et t C Co om mm ma an nd d w wl l i is so o_ _v vp pn n This command allows users to activate the function of VPN isolation S Sy yn nt ta ax x wl iso_vp...

Страница 942: ...ess point bss It means to set WMM for wireless clients ack It means to map to the Ack policy settings of AP WMM enable It means to enable the WMM for each SSID 0 disable 1 enable Apsd value It means t...

Страница 943: ...op 0 APACM 0 QueIdx 1 APAifsn 7 APCwmin 4 APCwmax 10 APTxop 0 APACM 0 QueIdx 2 APAifsn 1 APCwmin 3 APCwmax 4 APTxop 94 APACM 0 QueIdx 3 APAifsn 1 APCwmin 2 APCwmax 3 APTxop 47 APACM 0 QueIdx 0 BSSAifs...

Страница 944: ...for GI_800 and 1 for GI_4001 wl ht badecline value The value you can type is 0 for disabling and 1 for enabling wl ht autoba value The value you can type is 0 for disabling and 1 for enabling wl ht rd...

Страница 945: ...tings are d Disable b Bridge r Repeapter security value It means to configure security mode with encrypted keys for WDS mode Available settings are disable No security wep WEP wpapsk key WPA PSK wpa2p...

Страница 946: ...pcli security mode wl apcli ssid ssid_name wl apcli bssid mac address S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description show Display current status of wireless AP client enabl...

Страница 947: ...r disable wireless button control S Sy yn nt ta ax x wl btnctl value S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description value 0 disable 1 enable E Ex xa am mp pl le e wl btnctl...

Страница 948: ...802 1X type is Local 802 1X T Te el ln ne et t C Co om mm ma an nd d w wl l b bn nd ds st tr rg g This command allows users to configure settings for Band Steering 2 4GHz S Sy yn nt ta ax x wl bndstrg...

Страница 949: ...active station number achieves this number the airtime fairness function will be applied Available values will be 2 to 64 show Display current status enable or disable and triggering client number fo...

Страница 950: ...i io on n Parameter Description enable ssid1 ssid2 ssid3 ssid4 It means to enable the settings for SSID1 SSID2 SSID3 and SSID4 disable ssid1 ssid2 ssid3 ssid4 It means to disable the settings for SSID...

Страница 951: ...s Isolate the station from LAN T Te el ln ne et t C Co om mm ma an nd d w wl l_ _d du ua al l a ap ps sc ca an n This command is used to scan Access Point installed near the location of Vigor router...

Страница 952: ...nfig ratectl show wl_dual config isolate lan ssid_num enable wl_dual config isolate member ssid_num enable wl_dual config isolate vpn ssid_num enable wl_dual config isolate show S Sy yn nt ta ax x D D...

Страница 953: ...download The unit is kbps example wl dual config ratectl 1 1 25 25 ratectl show It means to display the data transmission rate upload and download for SSID1 SSID2 SSID3 and SSID4 isolate lan ssid_num...

Страница 954: ...t ta ax x wl_dual security SSID_NUMBER mode key index wl_dual security show S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description Security SSID_NUMBER mode key index SSID_NUMBER T...

Страница 955: ...accessing Internet via Vigor router S Sy yn nt ta ax x wl dual stalist E Ex xa am mp pl le e wl_dual stalist 5G Wireless Station List Index Status IP Address MAC Address Associated with Status Codes...

Страница 956: ...ring or 64 Hexadecimal digit format e g wl_dual wds security disable wl_dual wds security wep 12345 wl_dual wds security wpa2psk 12345678 ap value It means to enable or disable the AP function Value 1...

Страница 957: ...rameters T Te el ln ne et t C Co om mm ma an nd d w wl l_ _d du ua al l w wp ps s This command allows users to configure WPS for wireless connection 5GHz S Sy yn nt ta ax x wl_dual wps enable value wl...

Страница 958: ...1x E Ex xa am mp pl le e wl_dual set8021x t 1 Note Please restart 5G wireless after you set the parameters wl_dual set8021x v 802 1X type is Local 802 1X T Te el ln ne et t C Co om mm ma an nd d w wl...

Страница 959: ...r wl_dual apcli show Wireless 5G AP Clinet is enabled Current SSID is Security Mode disable Wireless 5G client is disconnected data rate mode signal 0 wl_dual apcli ssid carrie Note Please restart wir...

Страница 960: ...rs restart wl_dual drayrs show S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description set mode rs_low rs_low_security delta Select a mode for roaming 0 disable 1 Strictly Minimum R...

Страница 961: ...follows i address client IPv4 address domain m mask client IPv4 mask p prefix client IPv6 prefix l length client IPv6 prefix length s secret shared secret ex radius client add 1 i 192 168 1 1 m 255 25...

Страница 962: ...is 1 set_localdot1x_phase2 Only support MS CHAPv2 now The method_idx for such phase2 is 1 options e method_idx set method e g local_8021x set_localdot1x_phase1 e 1 d delete mehod e g local_8021x set_...

Страница 963: ...eans any source IP address can pass through NAT and wake up the LAN client This command will allow the user to choose whether WoL packets can be passed from the Internet to the LAN network from a spec...

Страница 964: ...pass l all l userl l ip Show online user all all of the users will be displayed on the screen user name type the user name that you want to view on the screen ip type the IP address that you want to...

Страница 965: ...g q 200 r It means to set data quota e g r 1000 w It means to specify the data quota unit MB GB e g w MB s It means to set schedule index Available settings are sch_idx1 sch_idx2 sch_idx3 and sch_idx4...

Страница 966: ...traceable v to display all of the traceable APS with speficed index number Use appqos untraceable v to display all of the untraceable APS with speficed index number e It menas to enable QoS for applic...

Страница 967: ...VigorAP registered to Vigor2862 S Sy yn nt ta ax x apm show apm clear apm discover apm query S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description show It displays current inform...

Страница 968: ...index number in this field It is the original APM profile to be cloned to other APM profile to index Type an index number in this file It is the target profile which will clone the parameters settings...

Страница 969: ...o set the load balance configuration file for APM Show It shows the configuration value value You need to type 10 numbers in this field Each number represents different setting value 1 The first numbe...

Страница 970: ...6 Download limit 0 7 Enable disassociation by idle time 0 8 Enable disassociation by Signal strength 0 9 Traffic limit unit upload 0 10 Traffic limit unit download 0 flag 0 apm lbcfg set 1 1 0 15 0 0...

Страница 971: ...a ap ps sy ys sl lo og g This command is used to display the AP syslog data coming form VigorAP S Sy yn nt ta ax x apm apsyslog AP_Index S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter...

Страница 972: ...De es sc cr ri ip pt ti io on n Parameter Description AP_Index Specify the index number which represents VigorAP E Ex xa am mp pl le e apm stanum Show the APM AP Station Number data apm stanum AP_Inde...

Страница 973: ...g Sync Interval for HA Minimum interval is 15 minutes M Minute Setting range is 0 15 30 45 e g ha set I M 30 H Hour Setting range is from 0 to 23 e g ha set I H 12 D Day Setting range is from 0 to 30...

Страница 974: ...irtual IPv6 LAN1 On FE80 200 5EFF FE00 101 LAN2 On FE80 200 5EFF FE00 101 LAN3 On FE80 200 5EFF FE00 101 LAN4 On FE80 200 5EFF FE00 101 LAN5 On FE80 200 5EFF FE00 101 LAN6 On FE80 200 5EFF FE00 101 DM...

Страница 975: ...x D De es sc cr ri ip pt ti io on n Parameter Description LAN_port Specify the LAN port number 1 to 6 E Ex xa am mp pl le e swm show If you connected a VigorSwitch but does not display here Please che...

Страница 976: ...swm post 1 Start post cfg to LAN 1 external switch with currect settings Please wait a few seconds Result OK T Te el ln ne et t C Co om mm ma an nd d s sw wm m a au ut th h This command is used to dis...

Страница 977: ...ical connect port as trunk port and let it join each VLAN group Before using such command please use swm show to check valid VLAN index firstly T Te el ln ne et t C Co om mm ma an nd d b ba ac ck ku u...

Страница 978: ...47 263 ADSL VDSL2 68 Advance Mode 432 Advanced Mode 279 Advanced Setting 307 Aggregation MSDU 307 AH 411 Airtime Fairness 312 ake on LAN 214 Always On 70 73 96 100 110 111 112 114 115 117 119 123 Anal...

Страница 979: ...e 83 91 97 114 116 Bridge Subnet 91 97 114 116 Brute Force Protection 501 Cache 462 Call Barring 338 Call Direction 339 378 Call Filter 424 Call Forward 340 Call Forwarding 332 Call Transfer 343 Call...

Страница 980: ...Details Static IP or Dynamic IP 94 Details Static or Dynamic IP 100 Determine Real WAN IP 192 DFS Restrictions 290 DHCP 47 53 DHCP Client Identifier 81 89 DHCP Server Configuration 149 152 154 DHCP Se...

Страница 981: ...100 149 152 General Setup 67 Google Map 596 GRE 383 Green Field 307 Group ID 213 222 Guard Interval 307 GUI Map 28 Hardware Acceleration 171 Hardware Installation 11 Hide caller ID 341 Hide SSID 296...

Страница 982: ...N Routed Prefix 117 LAN to LAN 376 Landing Page 539 543 LAN General Setup 146 Last Call Return 340 LDAP Active Directory 413 LDAP Active Directory Setup 187 Lease Time 149 152 154 Line Speed 68 69 71...

Страница 983: ...sal 211 327 331 Neighbor AP Detection 624 Netbios Naming Packet 409 Network Configuration 148 152 154 Network Interface 252 Network Mode 105 107 Notification Object 676 NS Detect 114 Objects Settings...

Страница 984: ...ter Server 687 Priority 35 70 72 162 247 258 Priority ID 222 Private IP 177 Private IP Address 65 Private Port 177 Production Registration 60 Protocol 84 222 Protocol Processing Engine PPE 171 Provide...

Страница 985: ...icate 508 Send SMS 281 Sensor 691 Server Address 98 Server Response 192 Service 185 Service Activation Wizard 58 Service API 191 Service Name 37 92 103 177 Service Provider 191 193 672 Service Type 19...

Страница 986: ...r Profile 225 Syslog Alarm 692 Syslog Explorer 715 Syslog Mail Alert 495 System Maintenance 478 System time set 200 T 38 Fax 343 TACACS 413 Tag value 35 70 72 Tagged VLAN 161 TCP Temperature Sensor 62...

Страница 987: ...tector 333 VoIP 321 VoIP Wizard 324 Volume Gain 345 VPI 88 VPN 349 588 VPN and Remote Access 350 VPN Backup 387 VPN Client Wizard 351 VPN Dial Out Through 355 VPN Graph 713 VPN Load Balance 387 VPN Ma...

Страница 988: ...ies User s Guide 972 Wildcard 192 Wired 802 1x 170 Wireless 2 4 5G 71 Wireless LAN 287 Wireless Wizard 291 Wizard Mode 432 WLAN Isolation 289 WLAN Profile 612 WMM Capable 308 WPA 289 298 WPS 290 301 Z...

Результаты поиска

Содержание Vigor2862 Series

Отзывы:

Похожие инструкции для Vigor2862 Series

Бренды по названию

Популярные бренды

Draytek Vigor2862 Series, Руководство пользователя

Результаты поиска

Содержание Vigor2862 Series

Отзывы:

Похожие инструкции для Vigor2862 Series

Бренды по названию

Популярные бренды