Draytek Vigor2930 Series Скачать руководство пользователя страница 2

Страница: 2 / 298

Vigor2930 Series User’s Guide

Vigor2930 Series

Dual-WAN Security Firewall

User’s Guide

Version: 2.0

Firmware Version: V3.3.0

Date: 22/10/2010

This publication contains information that is protected by copyright. No part may be reproduced, transmitted,

transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright

holders. The scope of delivery and other details are subject to change without prior notice.

Microsoft is a registered trademark of Microsoft Corp.

Windows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are trademarks of Microsoft Corp.

Apple and Mac OS are registered trademarks of Apple Inc.

Other products may be trademarks or registered trademarks of their respective manufacturers.

Содержание Vigor2930 Series

Страница 1: ......

Страница 2: ...bed stored in a retrieval system or translated into any language without written permission from the copyright holders The scope of delivery and other details are subject to change without prior notic...

Страница 3: ...ons on conservation of the environment Warranty We warrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from...

Страница 4: ...ate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will...

Страница 5: ...ging Password 15 2 2 Quick Start Wizard 17 2 2 1 PPPoE 18 2 2 2 PPTP L2TP 20 2 2 3 Static IP 21 2 2 4 DHCP 22 2 3 Service Activation Wizard 23 2 4 Online Status 26 2 5 Saving Configuration 28 3 Advanc...

Страница 6: ...ement 99 3 7 1 Sessions Limit 99 3 7 2 Bandwidth Limit 101 3 7 3 Quality of Service 102 3 8 Applications 109 3 8 1 Dynamic DNS 109 3 8 2 Schedule 111 3 8 3 RADIUS 112 3 8 4 UPnP 114 3 8 5 Wake on LAN...

Страница 7: ...3 15 3 Administrator Password 227 3 15 4 Configuration Backup 228 3 15 5 Syslog Mail Alert 230 3 15 6 Time and Date 231 3 15 7 Management 233 3 15 8 Reboot System 234 3 15 9 Firmware Upgrade 235 3 15...

Страница 8: ...4 9 Creating an Account for MyVigor 276 4 9 1 Creating an Account via Vigor Router 276 4 9 2 Creating an Account via MyVigor Web Site 280 5 Trouble Shooting 285 5 1 Checking If the Hardware Status Is...

Страница 9: ...ntrol inside Vigor2930 S series models support two ISDN ports ISDN S0 1 port is dedicated for ISDN phone and ISDN S0 2 port is configurable for ISDN line and phone if required It can support multiple...

Страница 10: ...ace for transmitting analog signal through Internet between Switching and router Such interface is also named with ISDN S0 extern in Germany ISDN NT Network Terminator is a port that used to connect g...

Страница 11: ...QoS On The QoS function is active LED on Connector On The port is connected Off The port is disconnected Left LED Green Blinking The data is transmitting On The port is connected with 100Mbps WAN 1 2...

Страница 12: ...e QoS function is active LED on Connector On The port is connected Off The port is disconnected Left LED Green Blinking The data is transmitting On The port is connected with 100Mbps WAN 1 2 Right LED...

Страница 13: ...igor2930 Series User s Guide 5 LAN 1 4 Connecters for local networked devices PWR Connecter for a power adapter ON OFF Power Switch...

Страница 14: ...this port is on hook Phone 1 2 Blinking A phone call comes LED on Connector On The port is connected Off The port is disconnected Left LED Green Blinking The data is transmitting On The port is conne...

Страница 15: ...igor2930 Series User s Guide 7 LAN 1 4 Connecters for local networked devices PWR Connecter for a power adapter ON OFF Power Switch...

Страница 16: ...eft LED Orange Blinking ISDN NT ISDN S0 intern mode is active and an ISDN phone adapter is not connected On A phone has been connected If not green LED will be off ISDN S0 1 Right LED Green Blinking A...

Страница 17: ...ns to blink rapidly than usual release the button Then the router will restart with the factory default configuration Restart Restart the router forcefully Phone 1 2 Connecters for PSTN phones ISDN S0...

Страница 18: ...onnector On ISDN NT ISDN S0 intern mode is active and an ISDN phone adapter is connected Left LED Orange Blinking ISDN NT ISDN S0 intern mode is active and an ISDN phone adapter is not connected On A...

Страница 19: ...ngs Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will res...

Страница 20: ...N LED Left or Right will light up according to the speed 100 or 10 of the device that it connected 3 Connect the telephone sets with phone lines for using VoIP function For the model without phone por...

Страница 21: ...0 2 as ISDN phone in VoIP Phone Settings the orange LED will light on to indicate ISDN2 S0 mode is selected And by using ISDN phone adapters coming from the router package the user can connect several...

Страница 22: ...Vigor2930 Series User s Guide 14 This page is left blank...

Страница 23: ...assword for this device you have to access into the web browse with default password first 1 Make sure your computer connects to the router correctly Notice You may either simply set up your computer...

Страница 24: ...and choose Administrator Password 5 Enter the login password the default is blank on the field of Old Password Type a new one in the field of New Password and retype it on the field of Retype New Pass...

Страница 25: ...s entering login password After typing the password please click Next On the next page as shown below please select the WAN interface that you use Choose Auto negotiation as the physical type for your...

Страница 26: ...net with a common broadband medium such as a single DSL line wireless device or cable modem All the users over the Ethernet can share a common connection PPPoE is used for most of DSL modem users All...

Страница 27: ...igor2930 Series User s Guide 19 Click Next for viewing summary of such connection Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown...

Страница 28: ...P P Click PPTP as the protocol Type in all the information that your ISP provides for this protocol Click Next for viewing summary of such connection Click Finish A page of Quick Start Wizard Setup OK...

Страница 29: ...IP as the protocol Type in all the information that your ISP provides for this protocol After finishing the settings in this page click Next to see the following page Click Finish A page of Quick Star...

Страница 30: ...protocol Type in all the information that your ISP provides for this protocol After finishing the settings in this page click Next to see the following page Click Finish A page of Quick Start Wizard...

Страница 31: ...he server MyVigor located on http myvigor draytek com For using Web Content Filter Profile please refer to section 3 6 3 Web Content Filter Profile for detailed information Now please follow the steps...

Страница 32: ...xt In this case Web Content Filter BPjM is selected 4 Setting confirmation page will be displayed as follows please click Next 5 Wait for a moment till the following page appears When such page appear...

Страница 33: ...according to your selection s The valid time for the free trial of these services is one month Later if you need to extend the license valid time you can also use the Service Activation Wizard again t...

Страница 34: ...tus WAN status ADSL Information and other status related to this router within one page If you select PPPoE PPTP as the protocol you will find out a link of Dial PPPoE PPPoA or Drop PPPoE PPPoA in the...

Страница 35: ...plays the IP address of the WAN interface GW IP Displays the IP address of the default gateway TX Packets Displays the total transmitted packets at the WAN interface TX Rate Displays the speed of tran...

Страница 36: ...words in red mean that the WAN connection of that interface WAN1 WAN2 is not ready for accessing Internet 2 2 5 5 S Sa av vi in ng g C Co on nf fi ig gu ur ra at ti io on n Each time you click OK on t...

Страница 37: ...55 255 From 192 168 0 0 to 192 168 255 255 W Wh ha at t a ar re e P Pu ub bl li ic c I IP P A Ad dd dr re es ss s a an nd d P Pr ri iv va at te e I IP P A Ad dd dr re es ss s As the router plays a rol...

Страница 38: ...communication service such as DSL Cable modem etc If any connection problem occurred on one of the ISP connections all the traffic will be guided and switched to the normal communication port for prop...

Страница 39: ...PoE and PPTP access modes in the Details Page of WAN Internet Access In addition there are three selections for you to choose for different purposes WAN2 Fail It means the connection for WAN1 will be...

Страница 40: ...Internet WAN2 is the optional WAN interface for accessing into the Internet when WAN 1 is inactive for some reason Display Name It shows the name of the WAN1 WAN2 that entered in general setup Physica...

Страница 41: ...by ISP in this field Password Type in the password provided by ISP in this field Index 1 15 in Schedule Setup You can type in four sets of time schedule for your request All the schedules can be set...

Страница 42: ...nment Method IPCP Usually ISP dynamically assigns IP address to you each time you connect to it and request In some case your ISP provides service to always assign you the same IP address whenever you...

Страница 43: ...or WAN2 The following web page will be shown Static or Dynamic IP DHCP Client Click Enable for activating this function If you click Disable this function will be closed and all the settings that you...

Страница 44: ...inging TTL Time to Live Displays value for your reference TTL value is set by telnet command MTU Mean maximum transmission unit of one packet The default value is 1442 WAN IP Network Settings This gro...

Страница 45: ...TP P L L2 2T TP P To use PPTP as the accessing protocol of the internet please choose Internet Access from WAN menu Then select PPTP mode for WAN2 The following web page will be shown PPTP L2TP Clien...

Страница 46: ...after passing through the time without any action This setting is active only when the Active on demand option for Active Mode is selected in WAN General Setup page IP Address Assignment Method IPCP F...

Страница 47: ...dress Type the IP address Subnet Mask Type the subnet mask 3 3 1 1 4 4 L Lo oa ad d B Ba al la an nc ce e P Po ol li ic cy y This router supports the function of load balancing It can assign traffic w...

Страница 48: ...or the start of the destination IP Dest IP End Display the IP address for the end of the destination IP Dest Port Start Display the IP address for the start of the destination port Dest Port End Displ...

Страница 49: ...eld is blank it means that all the source IPs inside the LAN will be passed through the WAN interface Dest IP Start Type the destination IP start for the specified WAN interface Dest IP End Type the d...

Страница 50: ...does is to translate the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assign...

Страница 51: ...t ta at ti ic c R Ro ou ut te e When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static routes function rather than other method You may simpl...

Страница 52: ...lt 192 168 1 1 1st Subnet Mask Type in an address code that determines the size of the network Default 255 255 255 0 24 For IP Routing Usage Click Enable to invoke this function The default setting is...

Страница 53: ...RIP information of the 2nd subnet with neighboring routers DHCP Server Configuration DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your netwo...

Страница 54: ...cally apply default DNS Server IP address 194 109 6 66 to this field Secondary IPAddress You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Serv...

Страница 55: ...that user A and B locating in different subnet can talk to each other via the router Assuming the Internet access has been configured and the router works properly z use the Main Router to surf the I...

Страница 56: ...nd continuously exchange of IP routing information with different subnets 2 Click the LAN Static Route and click on the Index Number 1 Check the Enable box Please add a static route as shown below whi...

Страница 57: ...ser can apply this function to monitor all traffics which user needs to check There are some advantages supported in this feature First it is more economical without other detecting equipments to be s...

Страница 58: ...esults 3 3 2 2 5 5 B Bi in nd d I IP P t to o M MA AC C This function is used to bind the IP and MAC address in LAN to have a strengthen control in network When this function is enabled all the assign...

Страница 59: ...ng Add below Add and Edit IP Address Type the IP address that will be used for the specified MAC address Mac Address Type the MAC address that is used to bind with the assigned IP address Refresh It i...

Страница 60: ...et without passing the web authentication If you check this box the function of web authentication will be disabled Account Setting Allow user login with the same account check this box to let the use...

Страница 61: ...Au ut th he en nt ti ic ca at ti io on n Before passing the web authentication from the router any user will be directed into the following screen whenever he tries to access into Internet via http or...

Страница 62: ...IP address thus you can have only one IP address on behalf of the entire internal hosts z Enhance security of the internal network by obscuring the IP address There are many attacks aiming victims bas...

Страница 63: ...o incoming traffic To use this function please go to NAT page and choose Port Redirection web page The Port Redirection Table provides 20 port mapping entries for the internal hosts Press any number u...

Страница 64: ...as the port redirection mode you will see two boxes on this field Simply type the required number on the first box The second one will be assigned automatically later Private IP Specify the private I...

Страница 65: ...rt of host in the LAN However other IP protocols for example Protocols 50 ESP and 51 AH do not travel on a fixed port Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any pr...

Страница 66: ...rnet Access PPPoE PPPoA or Internet Access MPoA you will find them in Aux WAN IP list for your selection Enable Check to enable the DMZ Host function Private IP Enter the private IP address of the DMZ...

Страница 67: ...igor2930 Series User s Guide 59 When you have selected one private IP from the above dialog the IP address will be shown on the following screen Click OK to save the setting...

Страница 68: ...relative number for the particular entry that you want to offer service in a local host You should click the appropriate index number to edit or clear the corresponding entry Comment Specify the name...

Страница 69: ...fered by the local host End Port Specify the ending port number of the service offered by the local host 3 3 3 3 4 4 A Ad dd dr re es ss s M Ma ap pp pi in ng g This page is used to map specific priva...

Страница 70: ...Display the status for the entry enable or disable Click the index number link to open the configuration page Enable Check to enable this entry Protocol Specify the transport layer protocol It could b...

Страница 71: ...ger the router to build an unwanted outgoing connection F Fi ir re ew wa al ll l F Fa ac ci il li it ti ie es s The users on the LAN are provided with secured protection by the following firewall faci...

Страница 72: ...and mitigate the DoS attack The attacks are usually categorized into two types the flooding type attacks and the vulnerability attacks The flooding type attacks will attempt to exhaust all your system...

Страница 73: ...able the Call Filter or Data Filter Under some circumstance your filter set can be linked to work in a serial manner So here you assign the Start Filter Set only Also you can configure the Log Flag se...

Страница 74: ...tent Filter Profile for applying with this router Please set at least one profile for anti virus in CSM Web Content Filter Profile web page first For troubleshooting needs you can specify to record in...

Страница 75: ...y as a secure firewall Vigor router will reject these fragmented packets to prevent attack unless you enable Accept large incoming fragmented UDP or ICMP Packets By checking this box you can play thes...

Страница 76: ...from Internet do not sense the existence of vigor router therefore they cannot attack the router 3 3 4 4 3 3 F Fi il lt te er r S Se et tu up p Click Firewall and click Filter Setup to open the setup...

Страница 77: ...Filter Rule index button to enter the Filter Rule setup page Check to enable the Filter Rule Check this box to enable the filter rule Comments Enter filter set comments description Maximum length is...

Страница 78: ...e Group and Objects as the Address Type From the IP Group drop down list choose the one that you want to apply Or use the IP Object drop down list to choose the object that you want Service Type Click...

Страница 79: ...match the rule Block Immediately Packets matching the rule will be dropped immediately Pass Immediately Packets matching the rule will be passed immediately Block If No Further Match A packet matching...

Страница 80: ...t Filter The default value for this setting is ANSI 1252 Latin I If you do not choose any codepage no decoding job of URL will be processed Please use the drop down list to choose a codepage If you do...

Страница 81: ...two IP filters call filter or data filter You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner Each filter set is composed by 7 filter rules which can...

Страница 82: ...SYN packets attempt to exhaust the limited resource of Vigor router By default the threshold and timeout values are set to 50 packets per second and 10 seconds respectively Enable UDP flood defense Ch...

Страница 83: ...broadcasting ICMP echo request Block trace router Check the box to enforce the Vigor router not to forward any trace route packets Block SYN fragment Check the box to activate the Block SYN fragment f...

Страница 84: ...owever the protocol types greater than 100 are reserved and undefined at this time Therefore the router should have ability to detect and reject this kind of packets Warning Messages We provide Syslog...

Страница 85: ...ntly Later we can select that object group that can apply it For example all the IPs in the same department can be defined with an IP object a range of IP address Besides you can define object profile...

Страница 86: ...e Determine the address type for the IP address Select Single Address if this object contains one IP address only Select Range Address if this object contains several IPs within a range Select Subnet...

Страница 87: ...Index column for settings in detail Name Type a name for this profile Maximum 15 characters are allowed Interface Choose WAN LAN or Any to display all the available IP objects with the specified inter...

Страница 88: ...detail Name Type a name for this profile Protocol Specify the protocol s which this profile will apply to Source Destination Port Source Port and the Destination Port column are available for TCP UDP...

Страница 89: ...are available for this service type the port number greater than this value is available the port number less than this value is available for this profile Below is an example of service type objects...

Страница 90: ...ll be shown in this box Selected Service Type Objects Click button to add the selected IP objects in this box 3 3 5 5 5 5 K Ke ey yw wo or rd d O Ob bj je ec ct t You can set 200 keyword object profil...

Страница 91: ...tion will be watched out and be passed blocked based on the configuration on Firewall settings 3 3 5 5 6 6 K Ke ey yw wo or rd d G Gr ro ou up p This page allows you to bind several keyword objects in...

Страница 92: ...7 7 F Fi il le e E Ex xt te en ns si io on n O Ob bj je ec ct t This page allows you to set eight profiles which will be applied in CSM URL Content Filter All the files with the extension names speci...

Страница 93: ...all the items of file extension that will be processed in the router Finally click OK to save this profile 3 3 5 5 8 8 I IM M O Ob bj je ec ct t You can define policy profiles for IM Instant Messenge...

Страница 94: ...e CSM profile Check for Disallow Check the items that disallow to use Any device that uses such profile might not be allowed to access into the forbidden items 3 3 5 5 9 9 P P2 2P P O Ob bj je ec ct t...

Страница 95: ...n detail Profile Name Type a name for the CSM profile Check for Disallow Check the items that disallow to use Any device that uses such profile might not be allowed to access into the forbidden items...

Страница 96: ...the page for you to choose to disallow people using Any computer controlled or passed through the router will be restricted by this profile if it tries to use the protocol to communicate with others S...

Страница 97: ...O Ob bj je ec ct t You can define policy profiles for Misc application The object profile s configured here will be seen and adopted in CSM IM P2P Profile page Set to Factory Default Clear all profile...

Страница 98: ...ries User s Guide 90 Profile Name Type a name for the CSM profile Check for Disallow Check the items that disallow to use Any device that uses such profile might not be allowed to access into the forb...

Страница 99: ...rs some industry may take reserve attitude in order to reduce employee misusage during office hour or prevent unknown security leak It is similar situation for corporation towards peer to peer applica...

Страница 100: ...hecks the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP headers only On the other hand Vigor router can pre...

Страница 101: ...with the conditions specified in URL Access Control and Web Feature below passing through When you choose this setting both configuration set in this page for URL Access Control and Web Feature will b...

Страница 102: ...ority for URL Access Control is higher than Restrict Web Feature If the web content match the setting set in URL Access Control the router will execute the action specified in this field and ignore th...

Страница 103: ...ssing into the corresponding webpage with the keywords listed on the box below Pass Allow accessing into the corresponding webpage with the keywords listed on the box below Block Restrict accessing in...

Страница 104: ...ion 4 1 for more information of creating MyVigor account Note If you have used Service Activation Wizard to activate WCF service you can skip this section WCF adopts the mechanism developed and offere...

Страница 105: ...f the URL has been accessed previously it will be stored for a short time about 1 second in the router to be accessed quickly if required Such item can provide accurate URL matching with faster rate L...

Страница 106: ...ck List Enable Activate white black list function for such profile Group Object Selections Click Edit to choose the group or object profile as the content of white black list Pass allow accessing into...

Страница 107: ...n 3 3 7 7 B Ba an nd dw wi id dt th h M Ma an na ag ge em me en nt t Below shows the menu items for Bandwidth Management 3 3 7 7 1 1 S Se es ss si io on ns s L Li im mi it t A PC with private IP addre...

Страница 108: ...he end IP address for limit session Maximum Sessions Defines the available session number for each host in the specific range of IP addresses If you do not set the session number in this field the sys...

Страница 109: ...ion of limit bandwidth Disable Click this button to close the function of limit bandwidth Default TX limit Define the default speed of the upstream for each computer in LAN Default RX limit Define the...

Страница 110: ...ble bandwidth which is called TCP slow start If other applications are not protected by QoS it will detract much from their performance in the overcrowded network This is especially essential to those...

Страница 111: ...etwork However each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners It s not easy to achieve...

Страница 112: ...upports 1M of downstream and 256K upstream please set 256kbps for this box The default value is 10000kbps Note The rate of outbound inbound must be smaller than the real bandwidth to ensure correct ca...

Страница 113: ...f you click OK in WAN1 WAN2 General Setup web page and click Setup again for WAN1 WAN2 on the Bandwith Management Quality of Service E Ed di it t t th he e C Cl la as ss s R Ru ul le e f fo or r Q Qo...

Страница 114: ...you to edit source address information Address Type Determine the address type for the source address For Single Address you have to fill in Start IP address For Range Address you have to fill in Sta...

Страница 115: ...nt for using by current QoS By the way you can set up to 20 rules for one Class If you want to edit an existed rule please select the radio button of that one and click Edit to open the rule edit page...

Страница 116: ...tion Click Single or Range as the Type If you select Range you have to type in the starting port number and the end porting number on the boxes below Port Number Type in the starting port number and t...

Страница 117: ...ee DDNS service to the DDNS service providers The router provides up to three accounts from three different DDNS service providers Basically Vigor routers are compatible with the DDNS services supplie...

Страница 118: ...ice provider for the DDNS account Service Type Select a service type Dynamic Custom Static If you choose Custom you can modify the domain that is choosen in the Domain Name field Domain Name Type in a...

Страница 119: ...tton to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is another way to set up time You can inquiry an NTP server a time...

Страница 120: ...be applied just once Weekdays Specify which days in one week should perform the schedule Example Suppose you want to control the PPPoE Internet access connection to be always on Force On from 9 00 to...

Страница 121: ...anagement Enable Check to enable RADIUS client feature Server IP Address Enter the IP address of RADIUS server Destination Port The UDP port number that the RADIUS server is using The default value is...

Страница 122: ...essenger to allow full use of the voice video and messaging features Enable UPNP Service Accordingly you can enable either the Connection Control Service or Connection Status Service After setting Ena...

Страница 123: ...you need to ensure that you have applied the latest service packs and patches Non privileged users can control some router functions including removing and adding port mappings The UPnP function dyna...

Страница 124: ...by IP Address you have to choose the correct IP address IP Address The IP addresses that have been configured in Firewall Bind IP to MAC will be shown in this drop down list Choose the IP address from...

Страница 125: ...ivate link Below shows the menu items for VPN and Remote Access Note This feature can be applied for ISDN remote dial in or ISDN LAN to LAN connection in i series models 3 3 9 9 1 1 V VP PN N C Cl li...

Страница 126: ...es for users to set When you finish the mode and profile selection please click Next to open the following page In this page you have to select suitable VPN type for the VPN client profile There are s...

Страница 127: ...ient profile please click Next You will see different configurations based on the selection s you made z When you choose PPTP None Encryption or PPTP Encryption you will see the following graphic z Wh...

Страница 128: ...Vigor2930 Series User s Guide 120 z When you choose L2TP you will see the following graphic z When you choose L2TP over IPSec Nice to Have Must you will see the following graphic...

Страница 129: ...gnature to invoke this function Use the drop down list to choose one of the certificates for using You have to configure one certificate at least previously in Certificate Management Local Certificate...

Страница 130: ...n click one of the radio buttons listed on the page and click Finish to execute the next action Go to the VPN Connection Management Click this radio button to access VPN and Remote Access Connection M...

Страница 131: ...Selection Choose the direction for the VPN server Site to Site VPN Remote Dial in User To set a LAN to LAN profile automatically please choose Site to Site VPN Remote Dial in User You can manage remo...

Страница 132: ...tem is available after you choose any one of dial in user account profiles Next you have to select suitable dial in type for the VPN server profile There are several types provided here similar to VPN...

Страница 133: ...d on the selection you made Here we take the example of choosing Remote Dial in User as the VPN Server Mode z When you check PPTP L2TP with IPSec Policy None you will see the following graphic z When...

Страница 134: ...he pre shared key again for confirmation Digital Signature X 509 Check the box of Digital Signature to invoke this function Use the drop down list to choose one of the certificates for using You have...

Страница 135: ...nnection status Do another VPN Server Wizard Setup Click this radio button to set another profile of VPN Server through VPN Server Wizard View more detailed configuration Click this radio button to ac...

Страница 136: ...upport the MPPE encryption algorithm the router will transmit no MPPE encrypted packets Otherwise the MPPE encryption scheme will be used to encrypt the data Require MPPE 40 128bits Selecting this opt...

Страница 137: ...ase 2 negotiation IPSec security methods including Authentication Header AH or Encapsulating Security Payload ESP for the following IKE exchange and mutual examination of the secure tunnel establishme...

Страница 138: ...ryption algorithm from Data Encryption Standard DES Triple DES 3DES and AES 3 3 9 9 6 6 I IP PS Se ec c P Pe ee er r I Id de en nt ti it ty y To use digital certificate for peer authentication in eith...

Страница 139: ...to accept the peer with matching value The field can be IP Address Domain or E mail Address The box under the Type will appear according to the type you select and ask you to fill in corresponding set...

Страница 140: ...rver through the built in RADIUS client function The following figure shows the summary table Set to Factory Default Click to clear all indexes Index Click the number below Index to access into the se...

Страница 141: ...ow the remote dial in user to make a PPTP VPN connection through the Internet You should set the User Name and Password of remote dial in user below IPSec Tunnel Allow the remote dial in user to make...

Страница 142: ...ivated Specify Remote Node Check the checkbox You can specify the IP address of the remote dial in user ISDN number or peer ID used in IKE aggressive mode Uncheck the checkbox This means the connectio...

Страница 143: ...tivated or not please open Draytek SSL VPN portal interface From the web page you will see the message to indicate that you have the privilege for the SSL Web Proxy If you haven t set any SSL VPN web...

Страница 144: ...ication Header AH means data will be authenticated but not be encrypted By default this option is invoked You can uncheck it to disable it High Encapsulating Security Payload ESP means payload data wi...

Страница 145: ...tunnels simultaneously The following figure shows the summary table Set to Factory Default Click to clear all indexes Name Indicate the name of the LAN to LAN profile The symbol represents that the p...

Страница 146: ...n Enable this profile Check here to activate this profile VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile This setting is useful for dial out only WAN1...

Страница 147: ...Specify the allowed call direction of this LAN to LAN profile Both initiator responder Dial Out initiator only Dial In responder only Always On or Idle Timeout Always On Check to enable router always...

Страница 148: ...comes one pure L2TP connection Must Specify the IPSec policy to be definitely applied on the L2TP connection User Name This field is applicable when you select ISDN PPTP or L2TP with or without IPSec...

Страница 149: ...oposals to create a protected secure channel Main mode is more secure than Aggressive mode since more exchanges are done in a secure channel to set up the IPSec session However the Aggressive mode is...

Страница 150: ...e set previously in Application Schedule web page and you can use the number that you have set in that web page Callback Function for S models only The callback function provides a callback service as...

Страница 151: ...eful for S model only In addition you can further set up Callback function below PPTP Allow the remote dial in user to make a PPTP VPN connection through the Internet You should set the User Name and...

Страница 152: ...Compression VJ Compression is used for TCP IP protocol header compression This field is applicable when you select ISDN PPTP or L2TP with or without IPSec policy above IKE Authentication Method This...

Страница 153: ...smission with any information Such function can ensure the data transmitted on VPN tunnel is really sent out from both sides This is an optional function However if one side wants to use it the peer m...

Страница 154: ...e WAN interface is enabled It is not available when both WAN interfaces are enabled You have to disable one WAN interface WAN 1 or WAN 2 on WAN General Setup for enabling such setting 3 3 9 9 9 9 V VP...

Страница 155: ...ch ha an ni is sm m VPN Load Balance Mechanism can set multiple VPN tunnels for using as traffic load balance tunnel It can assist users to do effective load sharing for multiple VPN tunnels according...

Страница 156: ...of VPN TRUNK VPN Backup mechanism profile Member1 on Backup Profile field Display the dial out profile selected from the Member1 drop down list below Active on Backup Profile field Yes means normal co...

Страница 157: ...rofile is enabled x means such profile is disabled Name Display the name of VPN TRUNK VPN Load Balance mechanism profile Member1 Display the dial out profile selected from the Member1 drop down list b...

Страница 158: ...to LAN dial out profiles configured in VPN and Remote Access LAN to LAN for you to choose for grouping under certain VPN TRUNK VPN Backup Load Balance mechanism profile No Index number of LAN to LAN d...

Страница 159: ...l out automatically within two seconds Therefore you can choose any one of members under VPN Load Balance for dialing out T Ti im me e f fo or r a ac ct ti iv va at ti in ng g V VP PN N T TR RU UN NK...

Страница 160: ...H Ho ow w c ca an n y yo ou u s se et t a a G GR RE E o ov ve er r I IP PS Se ec c p pr ro of fi il le e 1 Please go to LAN to LAN to set a profile with IPSec 2 If the router will be used as the VPN S...

Страница 161: ...ket alternatively Such method can reach the balance of packet transmission with fixed rate Weighted Round Robin Such method can reach the balance of packet transmission with flexible rate It can be di...

Страница 162: ...fragmented packets will be bound with such tunnel table if you choose No Fragmented packets will be bound with such tunnel table if you choose Yes Binding Protocol Any means when the source IP destina...

Страница 163: ...is field will display detailed information for Binding Tunnel Policy Below shows a successful binding tunnel policy for load balance Note To configure a successful binding tunnel you have to z Type Bi...

Страница 164: ...l be the top priority for the system to do VPN connection Detail Information This field will display detailed information for Environment Recovers Detection 3 3 9 9 1 10 0 C Co on nn ne ec ct ti io on...

Страница 165: ...agement with Index number and VPN Server IP address The VPN connection built by Backup Mode supports VPN backup function Dial Click this button to execute dial out function Refresh Seconds Choose the...

Страница 166: ...trusted CA servers Here you can manage generate and manage the local digital certificates and set trusted CA certificates Remember to adjust the time of Vigor router before using the certificate so t...

Страница 167: ...r router allows you to generate a certificate request and submit it the CA server then import it as Local Certificate If you have already gotten a certificate from a third party you may import it dire...

Страница 168: ...te It allows users to import the certificate whose extensions are usually pfx or p12 And these certificates usually need passwords Note PKCS12 is a standard for storing private keys and certificates s...

Страница 169: ...to view the detailed settings for certificate request Note You have to copy the certificate request information from above window Next access your CA server and enter the page of certificate request c...

Страница 170: ...ick IMPORT to open the following window Use Browse to find out the saved text file Then click Import The one you imported will be listed on the Trusted CA Certificate window Then click Import to use t...

Страница 171: ...mobility in VoIP structure Every one who wants to talk using his her SIP Uniform Resource Identifier SIP Address The standard format of SIP URI is sip user password host port Some fields may be optio...

Страница 172: ...u have to know your friend s IP Address The Vigor VoIP Routers will build connection between each other Please refer to the section 4 5 2 Our Vigor V models firstly apply efficient codecs designed to...

Страница 173: ...otal 60 index entries in the phonebook for you to store all your friends and family members SIP addresses Loop through and Backup Phone Number will be displayed if you are using Vigor 2930V for settin...

Страница 174: ...ess SIP URL Enter your friend s SIP Address Loop through For the model of Vigor 2930VSn the selection should be as the following Backup Phone Number When the VoIP phone is obstructs or the Internet br...

Страница 175: ...be deleted by the prefix number for calling out through the specific VoIP interface Take the above picture Prefix Table Setup web page as an example the OP number of 886 will be deleted completely fo...

Страница 176: ...ble Setup web page as an example if the dial number is between 7 and 9 that number can apply the prefix number settings here Max Len Set the maximum length of the dial number for applying the prefix n...

Страница 177: ...h mechanism ISDN means only ISDN phone call will be blocked with such mechanism Index 1 15 in Schedule Enter the index of schedule profiles to control the call barring according to the preconfigured s...

Страница 178: ...gured schedules For Block IP Address this function can block incoming calls coming from IP address Such controlling also can be done based on preconfigured schedules R Re eg gi io on na al l This page...

Страница 179: ...ified place Call Forward Deact Dial the number typed in this field to release the call forward function Call Forward Busy Act Dial the number typed in this field to forward all the incoming calls to t...

Страница 180: ...the number typed in this filed to block all the incoming calls from IP address Block IP Calls Deact Dial the number typed in this field to release this function Block Last Calls Act Dial the number ty...

Страница 181: ...igor2930 Series User s Guide 173...

Страница 182: ...ed vice versa There are ten internal lines with numbers 30 39 offered for ISDN S0 You can specify any one of them as ring port for specified SIP account By the way ISDN S0 can be used by mapping with...

Страница 183: ...Name The caller ID that you want to be displayed on your friend s screen Account Number Name Enter your account name of SIP Address e g every text before Authentication ID Check the box to invoke thi...

Страница 184: ...S Se et tt ti in ng gs s This page allows user to set phone settings for Phone1 Phone2 ISDN1 S0 and ISDN2 TE S0 respectively Phone List Port There are four phone ports provided here for you to configu...

Страница 185: ...n the advanced settings page of Phone Index RTP Symmetric RTP Check this box to invoke the function To make the data transmission going through on both ends of local router and remote router not misle...

Страница 186: ...s the incoming calls will be forwarded into SIP URL only when the local system is busy No answer means if the incoming calls do not receive any response they will be forwarded to the SIP URL by the ti...

Страница 187: ...negotiated with the peer party before each session and so may not be your default choice The default codec is G 729A B it occupies little bandwidth while maintaining good voice quality If your upstrea...

Страница 188: ...vanced setting is provided for fitting the telecommunication custom for the local area of the router installed Wrong tone settings might cause inconvenience for users To set the sound pattern of the p...

Страница 189: ...se the default setting DTMF DTMF Mode There are four DTMF modes for you to choose InBand Choose this one then the Vigor will send the DTMF tone as audio directly when you press the keypad on the phone...

Страница 190: ...o enable the function In the limited time that you set in this field if there is no response the connecting call will be closed automatically Call Forwarding There are four options for you to choose D...

Страница 191: ...ponse Click hook flash to pick up the waiting phone call Call Transfer Check this box to invoke this function Click hook flash to initiate another phone call When the phone call connection succeeds ha...

Страница 192: ...he character in this field for transferring The character that you can type can be and 0 9 To VoIP for ISDN The router is set by using VoIP call To change VoIP call into ISDN call please dial the char...

Страница 193: ...ngestion tone will be shown automatically on the page If you cannot find out a suitable one please choose User Defined and fill out the corresponding values for dial tone ringing tone busy tone conges...

Страница 194: ...is one then the Vigor will capture the keypad number you pressed and transform it to digital form then send to the other side the receiver will generate the tone according to the digital form it recei...

Страница 195: ...mo od de el l o on nl ly y Vigor2930VSn allows users to switch the function of ISDN2 port between TE or S0 mode Please use the drop down list to choose the one you want If you choose ISDN2 S0 please...

Страница 196: ...L only when the local system is busy No answer means if the incoming calls do not receive any response they will be forwarded to the SIP URL by the time out SIP URL Type in the SIP URL e g aaa draytel...

Страница 197: ...the data packet will contain 20 ms voice information Voice Active Detector This function can detect if the voice on both sides is active or not If not the router will do something to save the bandwid...

Страница 198: ...set the sound pattern of the phone set simply choose a proper region to let the system find out the preset tone settings and caller ID type automatically Or you can adjust tone settings manually if yo...

Страница 199: ...to eight with digits from zero to nine Check for VoIP to ISDN Calls Set a pin code for the router to authenticate which one is allowed to dial VoIP to ISDN call The figure that you can type in this fi...

Страница 200: ...status for the port of Phone1 Phone2 ISDN1 and ISDN2 The ISDN1 2 appears only when the router is equipped with ISDN interface ISDN1 means B1 channel for the physical ISDN port ISDN2 means B2 channel f...

Страница 201: ...r of received voice packets during this connection session Rx Losts Total number of lost packets during this connection session Rx Jitter The jitter of received voice packets In Calls The accumulating...

Страница 202: ...I Terminal Endpoint Identifier Point to Multipoint Configure ISDN port to use Dynamic TEI Own Number Enter your ISDN number that you got from ISDN service provider To have such number you have offer y...

Страница 203: ...DN phone with one of these 10 different internal MSN numbers Transparent means MSN on TE port can connect to NT port without limitation on the number among 30 39 Any means all the phones under ISDN1 S...

Страница 204: ...igured with internal MSN number 5972729 ringing When remote user calls you by dialing 5972720 the router will make all of ISDN phones under ISDN1 S0 port ringing When remote user calls you by dialing...

Страница 205: ...able disables the ISDN dial out function Dialup 64Kbps allows you to use one ISDN B channel for Internet access Dialup 128Kbps allows you to use both ISDN B channels for Internet access Dialup BOD for...

Страница 206: ...ocol during the PPP negotiation PPP MP Setup Link Type There are three link types provided here for different purpose Link Disable disables the ISDN dial out function Dialup 128Kbps allows you to use...

Страница 207: ...al Number Enter the ISDN access number provided by the ISP Username Enter the username provided by your ISP Password Enter the password provided by your ISP IP Address Assignment Method IPCP for secon...

Страница 208: ...required for WAN connection and some internal network resource has to be exposed for remote users such as FTP WWW Call Control Setup Dial Retry It specifies the dial retry counts per triggered packet...

Страница 209: ...our IDSN link type is Dial On Demand the connection will be initiated only when needed Bandwidth On Demand BOD Setup Bandwidth On Demand is for Multiple Link PPP ML PPP or MP The parameters are only a...

Страница 210: ...compliant with the standard IEEE 802 11n protocol To boost its performance further the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can f...

Страница 211: ...onnection You should select the appropriate security mechanism according to your needs No matter which security suite you select they all will enhance the over the air data protection and or privacy o...

Страница 212: ...present the router can connect to Mixed 11b 11g 11g Only 11b Only Mixed 11g 11n 11n Only and Mixed 11b 11g 11n stations simultaneously Simply choose Mix 11b 11g 11n mode Index 1 15 Set the wireless L...

Страница 213: ...ted channel is under serious interference If you have no idea of choosing the frequency please select Auto to let system determine for you Long Preamble This option is to define the length of the sync...

Страница 214: ...13 3 3 3 S Se ec cu ur ri it ty y This page allows you to set security with different modes for SSID 1 2 3 and 4 respectively After configuring the correct settings please click OK to save and invoke...

Страница 215: ...Accepts only WEP clients and the encryption key should be entered in WEP Key WEP 802 1x Only Accepts only WEP clients and the encryption key is obtained dynamically from RADIUS server with 802 1X pro...

Страница 216: ...ch as 012345678 or 64 Hexadecimal digits leading by 0x such as 0x321253abcde Type Select from Mixed WPA WPA2 or WPA2 only Pre Shared Key PSK Either 8 63 ASCII characters such as 012345678 or 64 Hexade...

Страница 217: ...above are allowed to access AP Enable Mac Access Filter Select to enable the MAC Address filter for wireless LAN identified with SSID 1 to 4 respectively All the clients expressed by MAC addresses li...

Страница 218: ...nts and vigor router Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time He she only needs to press a button on wireless clien...

Страница 219: ...o back Wireless LAN Security to choose WPA PSK or WPA2 PSK mode and access WPS again Below shows Wireless LAN WPS web page Enable WPS Check this box to enable WPS setting WPS Status Display related sy...

Страница 220: ...Please input the PIN code specified in wireless client you wish to connect and click Start PIN button The WLAN LED on the router will blink fast when WPS is in progress It will return to normal condit...

Страница 221: ...Bridge mode packets received from a WDS link will only be forwarded to local wired or wireless hosts In other words only Repeater mode can do WDS to WDS packet forwarding In the following examples ho...

Страница 222: ...lid or not Choose one of the types for the router WEP If you checked the box of Use the same WEP key you do not need to choose 64 bit or 128 bit as the Encryption Mode If you do not check that box you...

Страница 223: ...voke the peer MAC address remember to check Enable box in the front of the MAC address after typing Repeater If you choose Repeater as the connecting mode please type in the peer MAC address in these...

Страница 224: ...LAN Yet only the AP which is in the same channel of this router can be found Please click Scan to discover all the connected APs If you want the found AP applying the WDS settings please type in the A...

Страница 225: ...igor2930 Series User s Guide 217 Refresh Click this button to refresh the status of station list Add Click this button to add current selected MAC address into Access Control...

Страница 226: ...g rate for data upload Default value is 30 000 kbps Download Type the transmitting rate for data download Default value is 30 000 kbps 3 3 1 13 3 1 10 0 W We eb b P Po or rt ta al l L Lo og g i in n T...

Страница 227: ...ll be displayed on the screen for several seconds when the wireless users access into the web page through the router 3 3 1 14 4 S SS SL L V VP PN N An SSL VPN Secure Sockets Layer virtual private net...

Страница 228: ...ral certificates previously Otherwise choose Self signed to use the router s built in default certificate The default certificate can be used in SSL VPN server and HTTPS Web Proxy Encryption Key Algor...

Страница 229: ...private port mapping to random WAN port There are two restrictions for proxy web server for such selection 1 it is only used for WAN to LAN access the web server must be configured behind vigor route...

Страница 230: ...e If you haven t set any SSL Web Proxy Profile in SSL VPN SSL Web Proxy web page there is no check box but a link appeared below However if you have set several SSL Web Proxy Profiles in SSL VPN SSL W...

Страница 231: ...g status of SSL VPN Active User Display current user who visit SSL VPN server Host IP Display the IP address for the host Time out Display the time remaining for logging out Action You can click Drop...

Страница 232: ...n or firmware related information from this presentation Model Name Display the model name of the router Firmware Version Display the firmware version of the router Build Date Time Display the date an...

Страница 233: ...ction mode used currently IP Address Display the IP address of the WAN interface Default Gateway Display the assigned IP address of the default gateway Wireless LAN MAC Address Display the MAC address...

Страница 234: ...at users cannot change it The default CPE username and password are vigor and password You will need it when you configure VigorACS server ACS Server Such data must be typed according to the ACS Auto...

Страница 235: ...or schedule time for the router to send notification to CPE Or click Disable to close the mechanism of notification STUN Settings Disable The system will not send connection request binding message t...

Страница 236: ...at ti io on n B Ba ac ck ku up p B Ba ac ck ku up p t th he e C Co on nf fi ig gu ur ra at ti io on n Follow the steps below to backup your configuration 1 Go to System Maintenance Configuration Back...

Страница 237: ...Note Backup for Certification must be done independently The Configuration Backup does not include information of Certificate R Re es st to or re e C Co on nf fi ig gu ur ra at ti io on n 1 Go to Sys...

Страница 238: ...nd the corresponding message of firewall VPN User Access Call WAN Router DSL information to Syslog SMTP Server The IP address of the SMTP server Mail To Assign a mail address for sending mails out Ret...

Страница 239: ...Be reminded that in Network Information select the network adapter used to connect to the router Otherwise you won t succeed in retrieving information from the router 3 3 1 15 5 6 6 T Ti im me e a an...

Страница 240: ...uter s system time Use Internet Time Select to inquire time information from Time Server on the Internet using assigned protocol Time Protocol Select a time protocol Server IP Address Type the IP addr...

Страница 241: ...provided by the system to allow you managing the router from Internet Check the box es to specify Disable PING from the Internet Check the checkbox to reject all PING packets from the Internet For se...

Страница 242: ...munity Trap Timeout The default setting is 10 seconds 3 3 1 15 5 8 8 R Re eb bo oo ot t S Sy ys st te em m The Web Configurator may be used to restart your router Click Reboot System from System Maint...

Страница 243: ...draytek com Click System Maintenance Firmware Upgrade to launch the Firmware Upgrade Utility Click OK The following screen will appear Please execute the firmware upgrade utility first For the detaile...

Страница 244: ...tivating Web Content Filter Activate The Activate link brings you accessing into www vigorpro com to finish the activation of the account and the router Authentication Message As for authentication in...

Страница 245: ...gnostics 3 3 1 16 6 1 1 D Di ia al l o ou ut t T Tr ri ig gg ge er r Click Diagnostics and click Dial out Trigger to open the web page The internet connection e g ISDN PPPoE PPPoA etc is triggered by...

Страница 246: ...reload the page 3 3 1 16 6 3 3 A AR RP P C Ca ac ch he e T Ta ab bl le e Click Diagnostics and click ARP Cache Table to view the content of the ARP Address Resolution Protocol cache held in the router...

Страница 247: ...Address It displays the IP address assigned by this router for specified PC MAC Address It displays the MAC address for the specified PC that DHCP assigned IP address for it Leased Time It displays t...

Страница 248: ...the IP address UserName and Login Time for the users who passing the web authentication from this router 3 3 1 16 6 7 7 D Da at ta a F Fl lo ow w M Mo on ni it to or r This page displays the running...

Страница 249: ...s page manually Index Display the number of the data flow IP Address Display the IP address of the monitored device TX rate kbps Display the transmission speed of the monitored device RX rate kbps Dis...

Страница 250: ...Current Peak Speed Current means current transmission rate and receiving rate for WAN1 WAN Peak means the highest peak value detected by the router in data transmission Speed means line speed specifi...

Страница 251: ...Refresh to renew the graph at any time The following two figures display different charts by daily and weekly The horizontal axis represents time Yet the vertical axis has different meanings For WAN1...

Страница 252: ...AN interface that you want to ping through or choose Unspecified to be determined by the router automatically Ping to Use the drop down list to choose the destination that you want to ping IP Address...

Страница 253: ...P address of the host in the box and click Run The result of route trace will be shown on the screen Trace through Use the drop down list to choose the WAN interface that you want to ping through or c...

Страница 254: ...Vigor2930 Series User s Guide 246 This page is left blank...

Страница 255: ...rter According to the network structure as shown in the below illustration you may follow the steps to create a LAN to LAN profile These two networks LANs should NOT have the same network address Sett...

Страница 256: ...oth of VPN connections because any one of the parties may start the VPN connection 5 Set Dial Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial Out method...

Страница 257: ...ression for this Dial Out connection 6 Set Dial In settings to as shown below to allow Router B dial in to build VPN connection If an IPSec based service is selected you may further specify the remote...

Страница 258: ...rther specify the remote peer IP Address Username Password and VJ Compression for this Dial In connection 7 At last set the remote network IP subnet in TCP IP Network Settings so that Router A can dir...

Страница 259: ...P you have to set general settings in PPP General Setup For using IPSec based service such as IPSec or L2TP with IPSec Policy you have to set general settings in IPSec General Setup such as the pre sh...

Страница 260: ...hould further specify the remote peer IP Address IKE Authentication Method and IPSec Security Method for this Dial Out connection If a PPP based service is selected you should further specify the remo...

Страница 261: ...therwise it will apply the settings defined in IPSec General Setup above If a PPP based service is selected you should further specify the remote peer IP Address Username Password and VJ Compression f...

Страница 262: ...Vigor2930 Series User s Guide 254...

Страница 263: ...as shown in the below illustration you may follow the steps to create a Remote User Profile and install Smart VPN Client on the remote host Settings in VPN Router in the enterprise office 1 Go to VPN...

Страница 264: ...tings to as shown below to allow the remote user dial in to build VPN connection If an IPSec based service is selected you may further specify the remote peer IP Address IKE Authentication Method and...

Страница 265: ...Dial up Networking to create the PPTP tunnel to Vigor router For Win2000 XP please use Network and Dial up connections or Smart VPN Client complimentary software to help you create PPTP L2TP and L2TP...

Страница 266: ...uthentication method If the Pre Shared Key is selected it should be consistent with the one set in VPN router If a PPP based service is selected you should further specify the remote VPN server IP add...

Страница 267: ...t ti in ng g E Ex xa am mp pl le e Assume a teleworker sometimes works at home and takes care of children When working time he would use Vigor router at home to connect to the server in the headquarte...

Страница 268: ...n of QoS It is suggested to set the bandwidth value for inbound outbound as 80 85 of physical network speed provided by ISP to maximize the QoS performance 4 Return to previous page Enter the Name of...

Страница 269: ...ved bandwidth for HTTPS 7 Click Setup link for WAN1 8 Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic of VoIP influent other application Click OK 9 If the worker has c...

Страница 270: ...will set reserve bandwidth for 1 VPN tunnel 10 Click Edit to open a new window 11 First check the ACT box 12 Then click Edit of Local Address to set a worker s subnet address Click Edit of Remote Add...

Страница 271: ...ate IP address Subnet Mask is 192 168 1 1 255 255 255 0 The built in DHCP server is enabled so it assigns every local NATed host an IP address of 192 168 1 x starting from 192 168 1 10 You can just se...

Страница 272: ...Vigor2930 Series User s Guide 264 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage...

Страница 273: ...g Proxy draytel org Act as outbound proxy unhecked Display Name John Account Number Name 1234 Authentication ID unchecked Password Expiry Time use default value CODEC RTP DTMF Use default value John c...

Страница 274: ...se default value CODEC RTP DTMF Use default value John calls David He picks up the phone and dials 1111 DialPlan Phone Number for David Or He picks up the phone and dials 4321 David s Account Name Set...

Страница 275: ...in Realm blank Proxy blank Act as outbound proxy unchecked Display Name Arnor Account Name 1234 Authentication ID unchecked Password blank Expiry Time use default value CODEC RTP DTMF Use default valu...

Страница 276: ...computer Remember the place of storing the execution file 1 Go to www draytek com 2 Access into Support Downloads Please find out Firmware menu and click it Search the model you have and click on it...

Страница 277: ...rograms and choose Router Tools XXX Firmware Upgrade Utility 8 Type in your router IP usually 192 168 1 1 9 Click the button to the right side of Firmware file typing box Locate the files that you dow...

Страница 278: ...he firmware update is finished 4 4 7 7 R Re eq qu ue es st t a a c ce er rt ti if fi ic ca at te e f fr ro om m a a C CA A s se er rv ve er r o on n W Wi in nd do ow ws s C CA A S Se er rv ve er r 1 G...

Страница 279: ...Enter the information in the certificate request 3 Copy and save the X509 Local Certificate Requet as a text file and save it for later use 4 Connect to CA server via web browser Follow the instructio...

Страница 280: ...file Select Router Offline request or IPSec Offline request below Then you have done the request and the server now issues you a certificate Select Base 64 encoded certificate and Download CA certific...

Страница 281: ...igor2930 Series User s Guide 273 and you will find the below window showing BEGINE CERTIFICATE 6 You may review the detail information of the certificate by clicking View button...

Страница 282: ...ti if fi ic ca at te e a an nd d S Se et t a as s T Tr ru us st te ed d o on n W Wi in nd do ow ws s C CA A S Se er rv ve er r 1 Use web browser connecting to the CA server that you would like to retr...

Страница 283: ...d CA Certificate Click IMPORT button and browse the file to import the certificate cer file into Vigor router When finished click refresh and you will find the below illustration 4 You may review the...

Страница 284: ...m Web Content Filter Anti Intrusion and etc to filtering the web pages for the sake of protecting your system To access into MyVigor for getting more information please create an account for MyVigor 4...

Страница 285: ...es User s Guide 277 2 Click the Activate link A login page for MyVigor web site will pop up automatically 3 Click the link of Create an account now 4 Check to confirm that you accept the Agreement and...

Страница 286: ...Vigor2930 Series User s Guide 278 5 Type your personal information in this page and then click Continue 6 Choose proper selection for your computer and click Continue...

Страница 287: ...RT 8 Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor draytek com 9 Click the Activate my Account link to enable the account that you created The foll...

Страница 288: ...click Login Your account has been activated You can access into MyVigor server to activate the service e g WCF that you want 4 4 9 9 2 2 C Cr re ea at ti in ng g a an n A Ac cc co ou un nt t v vi ia a...

Страница 289: ...User s Guide 281 2 Check to confirm that you accept the Agreement and click Accept 3 Type your personal information in this page and then click Continue 4 Choose proper selection for your computer and...

Страница 290: ...ART 6 Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor draytek com 7 Click the Activate my Account link to enable the account that you created The fol...

Страница 291: ...password that you just created in the fields of UserName and Password Then type the code in the box of Auth Code according to the value displayed on the right side of it Now click Login Your account h...

Страница 292: ...Vigor2930 Series User s Guide 284 This page is left blank...

Страница 293: ...cking to factory default setting if necessary If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 5 5 1 1 C Ch he ec c...

Страница 294: ...er trying the above section if the link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s The example is based on Wi...

Страница 295: ...ically and Obtain DNS server address automatically F Fo or r M Ma ac c O OS S 1 Double click on the current used Mac OS on the desktop 2 Open the Application folder and get into Network 3 On the Netwo...

Страница 296: ...ter correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista The DOS command dialog will a...

Страница 297: ...ometimes a wrong connection can be improved by returning to the default settings Try to reset the router by software or hardware Warning After pressing factory default setting you will loose all setti...

Страница 298: ...Then the router will restart with the default configuration After restore the factory default setting you can configure the settings for the router again to fit your personal request 5 5 6 6 C Co on n...

Результаты поиска

Содержание Vigor2930 Series

Отзывы:

Похожие инструкции для Vigor2930 Series

Бренды по названию

Популярные бренды

Draytek Vigor2930 Series, Руководство пользователя

Результаты поиска

Содержание Vigor2930 Series

Отзывы:

Похожие инструкции для Vigor2930 Series

Бренды по названию

Популярные бренды