Draytek Vigor 2950Gi User's Guide

Vigor2930 Series User’s Guide 211..22 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss Before you use the Vigor router, please get acquai

Vigor2930 Series User’s Guide 92 Profile Name Type a name for the CSM profile. Each profile can contain three objects settings, IM Object, P2P Objec

igor2930 Series User’s Guide 93 You can set eight profiles as URL content filter. Simply click the index number under Profile to open the following w

Vigor2930 Series User’s Guide 94matching with the conditions specified in URL Access Control and Web Feature below, such function can determine the p

igor2930 Series User’s Guide 95or a complete URL string. Multiple keywords within a frame are separated by space, comma, or semicolon. In addition, t

Vigor2930 Series User’s Guide 96previously for passing or blocking the file downloading. 33..66..33 WWeebb CCoonntteenntt FFiilltteerr PPrrooffi

igor2930 Series User’s Guide 97Activate Click it to access into MyVigor for activating WCF service. Setup Query Server It is recommend for you to use

Vigor2930 Series User’s Guide 98 Profile Name Type a name for such profile. Log None – There is no log file will be recorded for this profile. Pas

igor2930 Series User’s Guide 99If the web pages do not match with the specified feature set here, they will be processed with the categories listed o

Vigor2930 Series User’s Guide 100To activate the function of limit session, simply click Enable and set the default session limit. Enable Click thi

igor2930 Series User’s Guide 10133..77..22 BBaannddwwiiddtthh LLiimmiitt The downstream or upstream from FTP, HTTP or some P2P applications will o

igor2930 Series User’s Guide 311..22..11 FFoorr VViiggoorr22993300 LED Status Explanation Blinking The router is powered on and running normal

Vigor2930 Series User’s Guide 102Each/Shared Select Each to make each IP within the range of Start IP and End IP having the same speed defined in TX

igor2930 Series User’s Guide 103In a QoS-enabled network, or Differentiated Service (DiffServ or DS) framework, a DS domain owner should sign a Servi

Vigor2930 Series User’s Guide 104 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS

igor2930 Series User’s Guide 105check this box to push ACK of upload faster to speed the network traffic. Limited_bandwidth Ratio The ratio typed he

Vigor2930 Series User’s Guide 106 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Local

igor2930 Series User’s Guide 107Service Type It determines the service type of the data for processing with QoS control. It can also be edited. You

Vigor2930 Series User’s Guide 108 For adding a new service type, click Add to open the following page. Service Name Type in a new service for yo

igor2930 Series User’s Guide 10933..88 AApppplliiccaattiioonnss Below shows the menu items for Applications. 33..88..11 DDyynnaammiicc DDNNSS T

Vigor2930 Series User’s Guide 110Active Display if this account is active or inactive. View Log Display DDNS log status. Force Update Force the ro

igor2930 Series User’s Guide 111 33..88..22 SScchheedduullee The Vigor router has a built-in real time clock which can update itself manually or au

Vigor2930 Series User’s Guide 411..22..22 FFoorr VViiggoorr22993300nn LED Status Explanation Blinking The router is powered on and running nor

Vigor2930 Series User’s Guide 112Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the sch

igor2930 Series User’s Guide 113The built-in RADIUS client feature enables the router to assist the remote dial-in user or a wireless station and the

Vigor2930 Series User’s Guide 11433..88..44 UUPPnnPP The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices

igor2930 Series User’s Guide 115The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall appl

Vigor2930 Series User’s Guide 116 Wake by Two types provide for you to wake up the binded IP. If you choose Wake by MAC Address, you have to type th

igor2930 Series User’s Guide 11733..99 VVPPNN aanndd RReemmoottee AAcccceessss A Virtual Private Network (VPN) is the extension of a private net

Vigor2930 Series User’s Guide 118 Please choose a LAN-to-LAN Profile There are 32 VPN profiles for users to set. When you finish the mode and prof

igor2930 Series User’s Guide 119the choices for the client profile, please click Next. You will see different configurations based on the selection(s

Vigor2930 Series User’s Guide 120z When you choose L2TP, you will see the following graphic: z When you choose L2TP over IPSec (Nice to Have/Mus

igor2930 Series User’s Guide 121 Profile Name Type a name for such profile. The length of the file is limited to 10 characters. VPN Dial-Out Through

igor2930 Series User’s Guide 5LAN (1-4) Connecters for local networked devices. PWR Connecter for a power adapter.. ON/OFF Power Switch.

Vigor2930 Series User’s Guide 122connection. Remote Network Mask Please type the network mask (according to the real location of the remote host) for

igor2930 Series User’s Guide 12333..99..22 VVPPNN SSeerrvveerr WWiizzaarrdd Such wizard is used to configure VPN settings for VPN server. Such wi

Vigor2930 Series User’s Guide 124 Please choose a Dial-in User Accounts This item is available when you choose Remote Dial-in User (Teleworker) as

igor2930 Series User’s Guide 125After making the choices for the server profile, please click Next. You will see different configurations based on th

Vigor2930 Series User’s Guide 126z When you check IPSec, you will see the following graphic: Profile Name Type a name for such profile. The length

igor2930 Series User’s Guide 127After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no

Vigor2930 Series User’s Guide 128The Vigor router will not accept the ISDN dial-in connection if the box of Enable ISDN Dial-in is not checked. 33..9

igor2930 Series User’s Guide 129Start IP Address Enter a start IP address for the dial-in PPP connection. You should choose an IP address from the l

Vigor2930 Series User’s Guide 130Method (LAN-to-LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and IPSe

igor2930 Series User’s Guide 131 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity.

Vigor2930 Series User’s Guide 611..22..33 FFoorr VViiggoorr22993300VVnn LED Status Explanation Blinking The router is powered on and running n

Vigor2930 Series User’s Guide 13233..99..77 RReemmoottee DDiiaall--iinn UUsseerr You can manage remote access by maintaining a table of remote us

igor2930 Series User’s Guide 133 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limita

Vigor2930 Series User’s Guide 134becomes one pure L2TP connection. Must -Specify the IPSec policy to be definitely applied on the L2TP connection. SS

igor2930 Series User’s Guide 135the router. Block – This is default setting. Click this button to let multicast packets be blocked by the router. SSL

Vigor2930 Series User’s Guide 136PIN Code – Type the code for authentication (e.g, 1234). Secret – Use the 32 digit-secret number generated by mOTP i

igor2930 Series User’s Guide 13733..99..88 LLAANN ttoo LLAANN Here you can manage LAN-to-LAN connections by maintaining a table of connection pro

Vigor2930 Series User’s Guide 138 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activa

igor2930 Series User’s Guide 139router will use another WAN interface instead. WAN1 Only - While connecting, the router will use WAN1 as the only cha

Vigor2930 Series User’s Guide 140sending PING packets to the remote host, the Vigor router can know the true existence of this VPN connection and rea

igor2930 Series User’s Guide 141from below: DES without Authentication -Use DES encryption algorithm and not apply any authentication scheme. DES w

igor2930 Series User’s Guide 7LAN (1-4) Connecters for local networked devices. PWR Connecter for a power adapter. ON/OFF Power Switch.

Vigor2930 Series User’s Guide 142You may specify a value in between 600 and 86400 seconds. Perfect Forward Secret (PFS)-The IKE Phase 1 key will be r

igor2930 Series User’s Guide 143 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN co

Vigor2930 Series User’s Guide 144alone or with IPSec. Select from below: None - Do not apply the IPSec policy. Accordingly, the VPN connection employ

igor2930 Series User’s Guide 145model only). The remote user will be charged the connection fee by the telecom. Check to enable Callback function-Ena

Vigor2930 Series User’s Guide 146modify the settings if required. More - Add a static route to direct all traffic destined to more Remote Network IP

igor2930 Series User’s Guide 147¾ The web page is simple to understand and easy to configure ¾ Filly compliant with VPN Server LAN Sit Single/Multi

Vigor2930 Series User’s Guide 148 Backup Profile List Set to Factory Default - Click to clear all VPN TRUNK-VPN Backup mechanism profile. No – The

igor2930 Series User’s Guide 149profile selected from the Member2 drop down list below. Advanced – This button is only available when there is one pr

Vigor2930 Series User’s Guide 150 Detailed information for this dialog, see later section - Advanced Load Balance and Backup. General Setup Status-

igor2930 Series User’s Guide 151LAN-to-LAN will be displayed in blue. Edit Click this button to save the changes to the Status (Enable or Disable), p

Vigor2930 Series User’s Guide 811..22..44 FFoorr VViiggoorr22993300VVSS LED Status Explanation Blinking The router is powered on and running n

Vigor2930 Series User’s Guide 1524. Take a look for LAN-to-LAN profiles. Index 1 is chosen as Member1; index 2 is chosen as Member2. For such reason

igor2930 Series User’s Guide 153AAddvvaanncceedd LLooaadd BBaallaannccee aanndd BBaacckkuupp After setting profiles for load balance, you can ch

Vigor2930 Series User’s Guide 154considered by DrayOS system, the system can adjust dynamically for bandwidth of both VPN tunnels. In most cases, VPN

igor2930 Series User’s Guide 155match with the settings specified here and IGMP Service Port also fits the number here, such binding tunnel table can

Vigor2930 Series User’s Guide 156Advanced Backup Profile Name List the backup profile name. ERD Mode ERD means “Environment Recovers Detection”. N

igor2930 Series User’s Guide 157backup function. Backup Mode This filed displays the profile name saved in VPN TRUNK Management (with Index number

Vigor2930 Series User’s Guide 15833..1100 CCeerrttiiffiiccaattee MMaannaaggeemmeenntt A digital certificate works as an electronic ID, which is is

igor2930 Series User’s Guide 159 Note: Please be noted that “Common Name” must be configured with rotuer’s WAN IP or domain name. After clicking GE

Vigor2930 Series User’s Guide 160 Upload Local Certificate It allows users to import the certificate which is generated by vigor router and signed

igor2930 Series User’s Guide 161REFRESH Click this button to refresh the information listed below. View Click this button to view the detailed settin

igor2930 Series User’s Guide 9On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On The

Vigor2930 Series User’s Guide 16233..1100..22 TTrruusstteedd CCAA CCeerrttiiffiiccaattee Trusted CA certificate lists three sets of trusted CA ce

igor2930 Series User’s Guide 16333..1100..33 CCeerrttiiffiiccaattee BBaacckkuupp Local certificate and Trusted CA certificate for this router can

Vigor2930 Series User’s Guide 164registration messages to validate. Then, both parties’ SIP proxies will forward the sequence of messages to caller t

igor2930 Series User’s Guide 165 PPhhoonnee BBooookk In this section, you can set your VoIP contacts in the “phonebook”. It can help you to make ca

Vigor2930 Series User’s Guide 166Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your friend can easily k

igor2930 Series User’s Guide 167 Enable Check this box to invoke this setting. Prefix Number The phone number set here is used to add, strip, or re

Vigor2930 Series User’s Guide 168SIP server. OP Number The front number you type here is the first part of the account number that you want to exec

igor2930 Series User’s Guide 169 Enable Click this to enable this entry. Call Direction Determine the direction for the phone call, IN – incoming c

Vigor2930 Series User’s Guide 170 For Block Unknown Domain – this function can block incoming calls from unrecognized domain that is not specified in

igor2930 Series User’s Guide 171 Last Call Return [Miss] Sometimes, people might miss some phone calls. Please dial number typed in this field to kn

Vigor2930 Series User’s Guide 1011..22..55 FFoorr VViiggoorr22993300VVSSnn LED Status Explanation Blinking The router is powered on and runnin

Vigor2930 Series User’s Guide 172Call Waiting [Act] Dial the number typed in this field to make all the incoming calls waiting for your answer. Call

igor2930 Series User’s Guide 173

Vigor2930 Series User’s Guide 174Index Click this link to access into next page for setting SIP account. Profile Display the profile name of the ac

igor2930 Series User’s Guide 175Register via If you want to make VoIP call without register personal information, please choose None and check the b

Vigor2930 Series User’s Guide 176Ring Port Set Phone1, Phone2, ISDN1-S0 or ISDN-TE as the default ring port for this SIP account. If you choose Phon

igor2930 Series User’s Guide 177If you want to enable function of ISDN On-Net/Off-Net, you have to choose ISDN2-TE. Call Feature – A brief descriptio

Vigor2930 Series User’s Guide 178 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up th

igor2930 Series User’s Guide 179detailed configuration. Index (1-60) in Phone Book - Enter the index of phone book profiles. Refer to section 3.11.1

Vigor2930 Series User’s Guide 180Play dial tone only when account registered - Check this box to invoke the function. Default Call Route It determin

igor2930 Series User’s Guide 181 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP

igor2930 Series User’s Guide 11(Green) Off The port is disconnected with 10Mbps. On The port is connected. Off The port is disconnected. Left LED

Vigor2930 Series User’s Guide 182DDeettaaiilleedd SSeettttiinnggss ffoorr IISSDDNN11--SS00 PPoorrtt Click the number link of Index 3 (ISDN1-S0),

igor2930 Series User’s Guide [email protected]) as the site for call forwarded. Time Out – Set the time out for the call forwarding. The default setti

Vigor2930 Series User’s Guide 184invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six gro

igor2930 Series User’s Guide 185 Region Select the proper region which you are located. The common settings of Caller ID Type, Dial tone, Ringing to

Vigor2930 Series User’s Guide 186Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number fr

igor2930 Series User’s Guide 187 DDeettaaiilleedd SSeettttiinnggss ffoorr IISSDDNN22--TTEE PPoorrtt ((AAvvaaiillaabbllee ffoorr VVSSnn mmoo

Vigor2930 Series User’s Guide 188 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up th

igor2930 Series User’s Guide 189profiles. Refer to section VoIP>>DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check

Vigor2930 Series User’s Guide 190configured. In addition, you can specify which port (both phone 1 and phone 2, phone 1 only or phone 2 only) will ri

igor2930 Series User’s Guide 191 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP

Vigor2930 Series User’s Guide ii Vigor2930 Series Dual-WAN Security Firewall User’s Guide Version: 2.0 Firmware Version: V3.3.0 Date:

Vigor2930 Series User’s Guide 1211..33 HHaarrddwwaarree IInnssttaallllaattiioonn Before starting to configure the router, you have to connect yo

Vigor2930 Series User’s Guide 192Payload Type (rfc2833) - Choose a number from 96 to 127, the default value was 101. This setting is available for th

igor2930 Series User’s Guide 193ALERTING - Indicates that a call is coming. ACTIVE-Indicates that the VoIP connection is launched. Codec Indicates t

Vigor2930 Series User’s Guide 19433..1122..22 GGeenneerraall SSeettttiinnggss This web page allows you to enable ISDN function. ISDN Port Click

igor2930 Series User’s Guide 195provides ten fields for MSN numbers. Note that MSN service must be acquired from your local telecom operators. By def

Vigor2930 Series User’s Guide 196AApppplliiccaattiioonn EExxaammppllee You got ISDN numbers with 5972720~5972729 from your ISP, and you try to conn

igor2930 Series User’s Guide 19733..1122..33 DDiiaall ttoo SSiinnggllee//DDuuaall IISSPPss Select Dialing to a Single ISP if you access the Inte

Vigor2930 Series User’s Guide 198IP Address Assignment Method (IPCP) In most environments, you should not change these settings as most ISPs provide

igor2930 Series User’s Guide 199Primary ISP Setup ISP Name - Enter your ISP name. Dial Number -Enter the ISDN access number provided by your ISP. Us

Vigor2930 Series User’s Guide 200 33..1122..44 CCaallll CCoonnttrrooll Some applications require that the router (only for the ISDN models) be re

igor2930 Series User’s Guide 201To remotely make the server to be available on the Internet, i.e. make the router in the head office activating its I

igor2930 Series User’s Guide 1311..44 IISSDDNN PPhhoonnee AAddaapptteerr IInnssttaallllaattiioonn Such information is provided for Vigor2930 S m

Vigor2930 Series User’s Guide 20233..1133 WWiirreelleessss LLAANN This function is used for “n” models only. 33..1133..11 BBaassiicc CCoonncceep

igor2930 Series User’s Guide 203WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit o

Vigor2930 Series User’s Guide 20433..1133..22 GGeenneerraall SSeettuupp By clicking the General Settings, a new web page will appear so that you c

igor2930 Series User’s Guide 205wireless LAN. Depending on the wireless utility, the user may only see the information except SSID or just cannot see

Vigor2930 Series User’s Guide 206 Note: * means the real transmission rate depends on the environment of the network. 33..1133..33 SSeeccuurriit

igor2930 Series User’s Guide 207 Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP-Accepts

Vigor2930 Series User’s Guide 208WPA2/802.1x Only- Accepts only WPA2 clients and the encryption key is obtained dynamically from RADIUS server with 8

igor2930 Series User’s Guide 209 Policy Select to enable any one of the following policy. Activate MAC address filter- Allow to set MAC address

Vigor2930 Series User’s Guide 210Delete Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Cancel Give u

igor2930 Series User’s Guide 211vigor router. For WPS is supported in WPA-PSK or WPA2-PSK mode, if you do not choose such mode in Wireless LAN>&g

Vigor2930 Series User’s Guide 14 This page is left blank.

Vigor2930 Series User’s Guide 212Authentication Mode Display current authentication mode of the router. Only WPA2/PSK and WPA/PSK support WPS. Confi

igor2930 Series User’s Guide 213The application for the WDS-Repeater mode is depicted as below: The major difference between these two modes is th

Vigor2930 Series User’s Guide 214 Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to ful

igor2930 Series User’s Guide 215encryption mode as WPA or WPA2 to establish your WDS system between AP and the router. Key - Type 8 ~ 63 ASCII charac

Vigor2930 Series User’s Guide 21633..1133..77 AAPP DDiissccoovveerryy Vigor router can scan all regulatory channels and find working APs in the ne

igor2930 Series User’s Guide 217 Refresh Click this button to refresh the status of station list. Add Click this button to add current selected MAC

Vigor2930 Series User’s Guide 21833..1133..99 RRaattee CCoonnttrrooll This page allows you to control the upload and download rate of each wireles

igor2930 Series User’s Guide 219 Disable Click this button to close this function. Redirect to URL Any user who wants to access into Internet throu

Vigor2930 Series User’s Guide 220 Port Such port is set for SSL VPN server. It will not affect the HTTPS Port configuration set in System Maintenanc

igor2930 Series User’s Guide 221 Name Type name of the profile. URL Type the address (function variation or IP address) or path of the proxy serv

igor2930 Series User’s Guide 152 CCoonnffiigguurriinngg BBaassiicc SSeettttiinnggss For use the router properly, it is necessary for you to chang

Vigor2930 Series User’s Guide 222 You can find out the link of Set SSL Web Proxy on the profile setting page. If you haven’t set any SSL Web Proxy Pr

igor2930 Series User’s Guide 223 33..1144..44 OOnnlliinnee UUsseerr SSttaattuuss If you have finished the configuration of SSL Web Proxy (server)

Vigor2930 Series User’s Guide 224Below shows the menu items for System Maintenance. 33..1155..11 SSyysstteemm SSttaattuuss The System Status prov

igor2930 Series User’s Guide 2251st Subnet Mask Display the subnet mask address of the LAN interface. DHCP Server Display the current status of DHC

Vigor2930 Series User’s Guide 22633..1155..22 TTRR--006699 SSeettttiinngg Vigor router with TR-069 is available for matching with VigorACS server.

igor2930 Series User’s Guide 227Username/Password - Type username and password for ACS Server for authentication. For example, if you want to use suc

Vigor2930 Series User’s Guide 228New Password Type in new password in this filed. Confirm Password Type in the new password again. When you click O

igor2930 Series User’s Guide 229 4. Click Save button, the configuration will download automatically to your computer as a file named config.cfg. Th

Vigor2930 Series User’s Guide 23033..1155..55 SSyysslloogg//MMaaiill AAlleerrtt SysLog function is provided for users to monitor router. There is

igor2930 Series User’s Guide 231 3. From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select

Vigor2930 Series User’s Guide 16 Note: The home page will change slightly in accordance with the router you have. 4. Go to System Maintenance page

Vigor2930 Series User’s Guide 232 Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the br

igor2930 Series User’s Guide 23333..1155..77 MMaannaaggeemmeenntt This page allows you to manage the settings for access control, access list, port

Vigor2930 Series User’s Guide 234Get Community Set the name for getting community by typing a proper character. The default setting is public. Set C

igor2930 Series User’s Guide 23533..1155..99 FFiirrmmwwaarree UUppggrraaddee Before upgrading your router firmware, you need to install the Rout

Vigor2930 Series User’s Guide 236 Activate via Interface Choose WAN interface used by such device for activating Web Content Filter. Activate The

igor2930 Series User’s Guide 23733..1166 DDiiaaggnnoossttiiccss Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor

Vigor2930 Series User’s Guide 23833..1166..22 RRoouuttiinngg TTaabbllee Click Diagnostics and click Routing Table to open the web page. Refresh

igor2930 Series User’s Guide 23933..1166..44 DDHHCCPP TTaabbllee The facility provides information on IP address assignments. This information is

Vigor2930 Series User’s Guide 240#Pseudo Port It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination

igor2930 Series User’s Guide 241 Enable Data Flow Monitor Check this box to enable this function. Refresh Seconds Use the drop down list to choose t

igor2930 Series User’s Guide 1722..22 QQuuiicckk SSttaarrtt WWiizzaarrdd If your router can be under an environment with high speed NAT, the conf

Vigor2930 Series User’s Guide 242minutes. The remaining time will be shown on the session column. Current /Peak/Speed Current means current transmi

igor2930 Series User’s Guide 24333..1166..88 TTrraaffffiicc GGrraapphh Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1

Vigor2930 Series User’s Guide 24433..1166..99 PPiinngg DDiiaaggnnoossiiss Click Diagnostics and click Ping Diagnosis to pen the web page. Pin

igor2930 Series User’s Guide 24533..1166..1100 TTrraaccee RRoouuttee Click Diagnostics and click Trace Route to open the web page. This page allow

Vigor2930 Series User’s Guide 246 This page is left blank.

igor2930 Series User’s Guide 2474 AApppplliiccaattiioonn aanndd EExxaammpplleess 44..11 CCrreeaattee aa LLAANN--ttoo--LLAANN CCoonnnneeccttii

Vigor2930 Series User’s Guide 248parties have known. 3. Go to LAN-to-LAN. Click on one index number to edit a profile. 4. Set Common Settings as

igor2930 Series User’s Guide 249 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP

Vigor2930 Series User’s Guide 250 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and

igor2930 Series User’s Guide 251Settings in Router B in the remote office: 1. Go to VPN and Remote Access and select Remote Access Control to enable

Vigor2930 Series User’s Guide 18 In the Quick Start Wizard, you can configure the router to access the Internet with different protocol/modes such as

Vigor2930 Series User’s Guide 2525. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out meth

igor2930 Series User’s Guide 253If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method

Vigor2930 Series User’s Guide 254

igor2930 Series User’s Guide 25544..22 CCrreeaattee aa RReemmoottee DDiiaall--iinn UUsseerr CCoonnnneeccttiioonn BBeettwweeeenn tthhee TTeel

Vigor2930 Series User’s Guide 256 3. Go to Remote Dial-In User. Click on one index number to edit a profile. 4. Set Dial-In settings to as shown b

igor2930 Series User’s Guide 257If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ

Vigor2930 Series User’s Guide 2583. In Step 2. Connect to VPN Server, click Insert button to add a new entry. If an IPSec-based service is select

igor2930 Series User’s Guide 259server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. 4.

Vigor2930 Series User’s Guide 260 3. Set Inbound/Outbound bandwidth. Note: The rate of outbound/inbound must be smaller than the real bandwidth to

igor2930 Series User’s Guide 2616. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set

igor2930 Series User’s Guide 19Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear

Vigor2930 Series User’s Guide 262Class Name of Index 3. In this index, he will set reserve bandwidth for 1 VPN tunnel. 10. Click Edit to open a n

igor2930 Series User’s Guide 26344..44 LLAANN –– CCrreeaatteedd bbyy UUssiinngg NNAATT An example of default setting and the corresponding dep

Vigor2930 Series User’s Guide 264 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage.

igor2930 Series User’s Guide 26544..55 CCaalllliinngg SScceennaarriioo ffoorr VVooIIPP ffuunnccttiioonn 44..55..11 CCaalllliinngg vviiaa SSI

Vigor2930 Series User’s Guide 266Example 2: Both John and David have SIP Addresses from the same service provider. John’s SIP URL: [email protected] ,

igor2930 Series User’s Guide 26744..55..22 PPeeeerr--ttoo--PPeeeerr CCaalllliinngg Example 3: Arnor and Paulin have Vigor routers respectively, th

Vigor2930 Series User’s Guide 26844..66 UUppggrraaddee FFiirrmmwwaarree ffoorr YYoouurr RRoouutteerr Before upgrading your router firmware, you

igor2930 Series User’s Guide 2695. Double click on the router tool icon. The setup wizard will appear. 6. Follow the onscreen instructions to in

Vigor2930 Series User’s Guide 27010. Click Send. 11. Now the firmware update is finished. 44..77 RReeqquueesstt aa cceerrttiiffiiccaattee f

igor2930 Series User’s Guide 2712. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate re

Vigor2930 Series User’s Guide 2022..22..22 PPPPTTPP//LL22TTPP Click PPTP as the protocol. Type in all the information that your ISP provides for th

Vigor2930 Series User’s Guide 272Select Advanced request. Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request us

igor2930 Series User’s Guide 273and you will find the below window showing “------BEGINE CERTIFICATE------...” 6. You may review the detail infor

Vigor2930 Series User’s Guide 27444..88 RReeqquueesstt aa CCAA CCeerrttiiffiiccaattee aanndd SSeett aass TTrruusstteedd oonn WWiinnddoowwss

igor2930 Series User’s Guide 2752. In Choose file to download, click CA Certificate Current and Base 64 encoded, and Download CA certificate to save

Vigor2930 Series User’s Guide 27644..99 CCrreeaattiinngg aann AAccccoouunntt ffoorr MMyyVViiggoorr The website of MyVigor (a server located on

igor2930 Series User’s Guide 2772. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Crea

Vigor2930 Series User’s Guide 2785. Type your personal information in this page and then click Continue. 6. Choose proper selection for your compu

igor2930 Series User’s Guide 2797. Now you have created an account successfully. Click START. 8. Check to see the confirmation email with the titl

Vigor2930 Series User’s Guide 28010. When you see the following page, please type in the account and password (that you just created) in the fields o

igor2930 Series User’s Guide 2812. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page

igor2930 Series User’s Guide 2122..22..33 SSttaattiicc IIPP Click Static IP as the protocol. Type in all the information that your ISP provides fo

Vigor2930 Series User’s Guide 2825. Now you have created an account successfully. Click START. 6. Check to see the confirmation email with the tit

igor2930 Series User’s Guide 2838. When you see the following page, please type in the account and password (that you just created) in the fields of

Vigor2930 Series User’s Guide 284 This page is left blank.

igor2930 Series User’s Guide 2855 TTrroouubbllee SShhoooottiinngg This section will guide you to solve abnormal situations if you cannot access in

Vigor2930 Series User’s Guide 28655..22 CChheecckkiinngg IIff tthhee NNeettwwoorrkk CCoonnnneeccttiioonn SSeettttiinnggss oonn YYoouurr CCoo

igor2930 Series User’s Guide 2874. Select Obtain an IP address automatically and Obtain DNS server address automatically. FFoorr MMaacc OOSS 1.

Vigor2930 Series User’s Guide 28855..33 PPiinnggiinngg tthhee RRoouutteerr ffrroomm YYoouurr CCoommppuutteerr The default gateway IP address o

igor2930 Series User’s Guide 289 55..44 CChheecckkiinngg IIff tthhee IISSPP SSeettttiinnggss aarree OOKK oorr NNoott Click WAN>> Int

Vigor2930 Series User’s Guide 290 HHaarrddwwaarree RReesseett While the router is running (ACT LED blinking), press the Factory Reset button and h

Vigor2930 Series User’s Guide iiiCopyright Information Copyright Declarations Copyright 2010 All rights reserved. This publication contains informat

Vigor2930 Series User’s Guide 2222..22..44 DDHHCCPP Click DHCP as the protocol. Type in all the information that your ISP provides for this protoco

igor2930 Series User’s Guide 2322..33 SSeerrvviiccee AAccttiivvaattiioonn WWiizzaarrdd Service Activation Wizard can guide you to set WCF (Web Co

Vigor2930 Series User’s Guide 243. In the following page, you can activate the Web content filter service at the same time or individually. When you

igor2930 Series User’s Guide 256. Now, the web page will display the service that you have activated according to your selection(s). The valid time

Vigor2930 Series User’s Guide 2622..44 OOnnlliinnee SSttaattuuss The online status shows the system status, WAN status, ADSL Information and other

igor2930 Series User’s Guide 27Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS.

Vigor2930 Series User’s Guide 28Dial ISDN Allows you to dial ISDN connection. Drop B1/B2 Allows you to drop B1 or B2 connection. Note: The words in

igor2930 Series User’s Guide 293AAddvvaanncceedd WWeebb CCoonnffiigguurraattiioonn After finished basic configuration of the router, you can acces

Vigor2930 Series User’s Guide 30Below shows the menu items for Internet Access. 33..11..22 GGeenneerraall SSeettuupp This section will introduce

igor2930 Series User’s Guide 31Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system. Loa

Vigor2930 Series User’s Guide ivEuropean Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Township, HsinC

Vigor2930 Series User’s Guide 3233..11..33 IInntteerrnneett AAcccceessss For the router supports dual WAN function, the users can set different WA

igor2930 Series User’s Guide 33DDeettaaiillss PPaaggee ffoorr PPPPPPooEE To use PPPoE as the accessing protocol of the internet, please choose In

Vigor2930 Series User’s Guide 34Detection Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choos

igor2930 Series User’s Guide 35After finishing all the settings here, please click OK to activate them. DDeettaaiillss PPaaggee ffoorr SSttaattiic

Vigor2930 Series User’s Guide 36PING to the IP - If you enable the PING function, please specify the IP address for the system to PING it for keeping

igor2930 Series User’s Guide 37Subnet Mask: Type the subnet mask. Gateway IP Address: Type the gateway IP address. Default MAC Address : Click this r

Vigor2930 Series User’s Guide 38ISDN Dial Backup Setup This setting is available for the routers supporting ISDN function only. Before utilizing the

igor2930 Series User’s Guide 39Default MAC Address – Click this radio button to use default MAC address for the router. Specify a MAC Address - Some

Vigor2930 Series User’s Guide 40Protocol Use the drop-down menu to change the protocol for the WAN interface. WAN Use the drop-down menu to change

igor2930 Series User’s Guide 41Binding WAN interface Choose the WAN interface (WAN1 or WAN2) for binding. You can check the box of Auto failover to o

Vigor2930 Series User’s Guide vTTaabbllee ooff CCoonntteennttss 1 Preface ...

Vigor2930 Series User’s Guide 4233..22 LLAANN Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network s

igor2930 Series User’s Guide 43 WWhhaatt iiss RRoouuttiinngg IInnffoorrmmaattiioonn PPrroottooccooll ((RRIIPP)) Vigor router will exchange rout

Vigor2930 Series User’s Guide 4433..22..22 GGeenneerraall SSeettuupp This page provides you the general settings for LAN. Click LAN to open the LA

igor2930 Series User’s Guide 45 Start IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. I

Vigor2930 Series User’s Guide 46of the router, which means the router is the default gateway. DHCP Server IP Address for Relay Agent - Set the IP add

igor2930 Series User’s Guide 47Index The number (1 to 10) under Index allows you to open next page to set up static route. Destination Address

Vigor2930 Series User’s Guide 48Note: There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The first is that the LAN inter

igor2930 Series User’s Guide 4933..22..44 VVLLAANN ((MMoonniittoorr)) Virtual LAN function provides you a very convenient way to manage hosts by g

Vigor2930 Series User’s Guide 50 2. After checking the box to enable VLAN function, you will check the table according to the needs as shown below.

igor2930 Series User’s Guide 51 Enable Click this radio button to invoke this function. However, IP/MAC which is not listed in IP Bind List also can

Vigor2930 Series User’s Guide vi3.3.3 Open Ports...

Vigor2930 Series User’s Guide 52Note: Before you select Strict Bind, you have to bind one set of IP/MAC address for one PC. If not, no one of the PCs

igor2930 Series User’s Guide 53Click Disable to disable the timeout feature. Welcome Message Such message will be displayed on the redirect page when

Vigor2930 Series User’s Guide 5433..33 NNAATT Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that on

igor2930 Series User’s Guide 55 The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Por

Vigor2930 Series User’s Guide 56 Enable Check this box to enable such port redirection setting. Mode Two options (Single and Range) are provided he

igor2930 Series User’s Guide 57You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead

Vigor2930 Series User’s Guide 58The inherent security properties of NAT are somewhat bypassed if you set up DMZ host. We suggest you to add additiona

igor2930 Series User’s Guide 59 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Cl

Vigor2930 Series User’s Guide 6033..33..33 OOppeenn PPoorrttss Open Ports allows you to open a range of ports for the traffic of special applicati

igor2930 Series User’s Guide 61 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WA

Vigor2930 Series User’s Guide vii3.12 ISDN...

Vigor2930 Series User’s Guide 62 Protocol Display the protocol used for this address mapping. Public IP Display the public IP address selected for

igor2930 Series User’s Guide 63specify some IP addresses in the IP Alias List of the Static/DHCP Configuration page first. If you did not type in any

Vigor2930 Series User’s Guide 64The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic re

igor2930 Series User’s Guide 652. UDP flood attack 3. ICMP flood attack 4. TCP Flag scan 5. Trace route 6. IP options 7. Unknown protocol 8. Land att

Vigor2930 Series User’s Guide 66filter rules. APP Enforcement Select one of the APP Enforcement settings (created in CSM>> APP Enforcement Prof

igor2930 Series User’s Guide 67 Window size – It determines the size of TCP protocol (0~65535). The more the value is, the better the performance wil

Vigor2930 Series User’s Guide 68 PCs with subnet “172.16.x.x” connected under Vigor router will be protected by security settings enabled and configu

igor2930 Series User’s Guide 69Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the button will open Edit Filter Rule web

Vigor2930 Series User’s Guide 70 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Addres

igor2930 Series User’s Guide 71choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to

Vigor2930 Series User’s Guide viii4.5.1 Calling via SIP Sever...

Vigor2930 Series User’s Guide 72SysLog For troubleshooting needs you can specify the filter log and/or CSM log here. Check the corresponding box to e

igor2930 Series User’s Guide 73EExxaammppllee As stated before, all the traffic will be separated and arbitrated using on of two IP filters: call fi

Vigor2930 Series User’s Guide 7433..44..44 DDooSS DDeeffeennssee As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defen

igor2930 Series User’s Guide 75and 10 seconds, respectively. Enable PortScan detection Port Scan attacks the Vigor router by sending lots of packets

Vigor2930 Series User’s Guide 76Block ICMP Fragment Check the box to activate the Block ICMP fragment function. Any ICMP packets with more fragment

igor2930 Series User’s Guide 7733..55 OObbjjeeccttss SSeettttiinnggss For IPs in a range and service ports in a limited range usually will be appl

Vigor2930 Series User’s Guide 78 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LA

igor2930 Series User’s Guide 7933..55..22 IIPP GGrroouupp This page allows you to bind several IP objects into one IP group. Set to Factory Def

Vigor2930 Series User’s Guide 8033..55..33 SSeerrvviiccee TTyyppee OObbjjeecctt You can set up to 96 sets of Service Type Objects with differen

igor2930 Series User’s Guide 81(!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when the f

igor2930 Series User’s Guide 11 PPrreeffaaccee Vigor2930 is a broadband router with dual-WAN interface. It provides policy-based load-balance, fail

Vigor2930 Series User’s Guide 82 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Objects page. All

igor2930 Series User’s Guide 83 Name Type a name for this profile, e.g., game. Contents Type the content for such profile. For example, type gambli

Vigor2930 Series User’s Guide 84 Name Type a name for this group. Available Keyword Objects You can gather keyword objects from Keyword Object page

igor2930 Series User’s Guide 85 Profile Name Type a name for this profile. Type a name for such profile and check all the items of file extension

Vigor2930 Series User’s Guide 86Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Profile Name

igor2930 Series User’s Guide 87 Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Profile Name

Vigor2930 Series User’s Guide 88 33..55..1100 PPrroottooccooll OObbjjeecctt This page allows you to set 32 profiles for applications in protocol

igor2930 Series User’s Guide 8933..55..1111 MMiisscc OObbjjeecctt You can define policy profiles for Misc application. The object profile(s) confi

Vigor2930 Series User’s Guide 90 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device

igor2930 Series User’s Guide 9133..66 CCSSMM CSM is an abbreviation of Content Security Management which is used to control IM/P2P usage, filter