Draytek VIGOR2820VSN User's Guide

Vigor2820 Series User’s Guide i

Vigor2820 Series User’s Guide x4.7 Request a certificate from a CA server on Windows CA Server... 253 4.8 Reque

Vigor2820 Series User’s Guide 90 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LA

Vigor2820 Series User’s Guide 91 33..55..22 IIPP GGrroouupp This page allows you to bind several IP objects into one IP group. Set to Factory D

Vigor2820 Series User’s Guide 92 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN or Any to display

Vigor2820 Series User’s Guide 93 Name Type a name for this profile. Protocol Specify the protocol(s) which this profile will apply to. Source/Dest

Vigor2820 Series User’s Guide 9433..55..44 SSeerrvviiccee TTyyppee GGrroouupp This page allows you to bind several service types into one group

Vigor2820 Series User’s Guide 9533..55..55 KKeeyywwoorrdd OObbjjeecctt You can set 200 keyword object profiles for choosing as black /white list

Vigor2820 Series User’s Guide 9633..55..66 KKeeyywwoorrdd GGrroouupp This page allows you to bind several keyword objects into one group. The keyw

Vigor2820 Series User’s Guide 9733..55..77 FFiillee EExxtteennssiioonn OObbjjeecctt This page allows you to set eight profiles which will be appl

Vigor2820 Series User’s Guide 98Type a name for such profile and check all the items of file extension that will be processed in the router. Finally,

Vigor2820 Series User’s Guide 99 Profile Name Type a name for this profile. Type a name for such profile and check all the items that not allowed to

Vigor2820 Series User’s Guide 11 PPrreeffaaccee Vigor2820 series is an ADSL and broadband router with WAN interface. It provides policy-based lo

Vigor2820 Series User’s Guide 10033..55..99 PP22PP OObbjjeecctt This page allows you to set 32 profiles for peer-to-peer application. These profil

Vigor2820 Series User’s Guide 101Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not allowe

Vigor2820 Series User’s Guide 102Type a name for such profile and check all the protocols that not allowed to be used in the host. Finally, click OK

Vigor2820 Series User’s Guide 103 Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not allow

Vigor2820 Series User’s Guide 104UURRLL CCoonntteenntt FFiilltteerr To provide an appropriate cyberspace to users, Vigor router equips with URL Co

Vigor2820 Series User’s Guide 10533..66..11 IIMM//PP22PP FFiilltteerr PPrrooffiillee You can define policy profiles for different policy of IM (I

Vigor2820 Series User’s Guide 10633..66..22 UURRLL CCoonntteenntt FFiilltteerr To provide an appropriate cyberspace to users, Vigor router equips

Vigor2820 Series User’s Guide 107 Profile Name Type the name for such profile. Priority It determines the action that this router will apply. Both

Vigor2820 Series User’s Guide 108All – All the actions (Pass and Block) will be recorded in Syslog. URL Access Control Enable URL Access Control -

Vigor2820 Series User’s Guide 109more efficiently the Vigor router perform. Web Feature Enable Restrict Web Feature - Check this box to make the k

Vigor2820 Series User’s Guide 211..22 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss Before you use the Vigor router, please get acquai

Vigor2820 Series User’s Guide 11033..66..33 WWeebb CCoonntteenntt FFiilltteerr We all know that the content on the Internet just like other types

Vigor2820 Series User’s Guide 111 Black/White List Enable – Check this box to enable the filtering mechanism with the condition of black/white list.

Vigor2820 Series User’s Guide 112All – All the actions (Pass and Block) will be recorded in Syslog. For this section, please refer to Web Content Fi

Vigor2820 Series User’s Guide 113Default session limit Defines the default session number used for each computer in LAN. Limitation List Displays a

Vigor2820 Series User’s Guide 114To activate the function of limit bandwidth, simply click Enable and set the default upstream and downstream limit.

Vigor2820 Series User’s Guide 11533..77..33 QQuuaalliittyy ooff SSeerrvviiccee Deploying QoS (Quality of Service) management to guarantee that al

Vigor2820 Series User’s Guide 116However, each node may take different attitude toward packets with high priority marking since it may bind with the

Vigor2820 Series User’s Guide 117OUT-apply to outgoing traffic only. BOTH- apply to both incoming and outgoing traffic. Check this box and click OK,

Vigor2820 Series User’s Guide 118 After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this

Vigor2820 Series User’s Guide 119Edit It allows you to edit source address information. Address Type – Determine the address type for the sourc

Vigor2820 Series User’s Guide 311..22..11 FFoorr VViiggoorr22882200 LED Status Explanation Blinking The router is powered on and running norma

Vigor2820 Series User’s Guide 120 After you click the Edit link, you will see the following page. For adding a new service type, click Add to open

Vigor2820 Series User’s Guide 12133..88 AApppplliiccaattiioonnss Below shows the menu items for Applications. 33..88..11 DDyynnaammiicc DDNNSS

Vigor2820 Series User’s Guide 122Index Click the number below Index to access into the setting page of DDNS setup to set account(s). WAN Interface

Vigor2820 Series User’s Guide 123Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu, uncheck Enable Dynamic DNS Setup, an

Vigor2820 Series User’s Guide 124 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the sc

Vigor2820 Series User’s Guide 1252. Configure the PPPoE always on from 9:00 to 18:00 for whole week. 3. Configure the Force Down from 18:00 to next

Vigor2820 Series User’s Guide 12633..88..44 UUPPnnPP The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices

Vigor2820 Series User’s Guide 127The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall app

Vigor2820 Series User’s Guide 12833..88..55 IIGGMMPP IGMP is the abbreviation of Internet Group Management Protocol. It is a communication protocol

Vigor2820 Series User’s Guide 12933..88..66 WWaakkee oonn LLAANN A PC client on LAN can be woken up by the router it connects. When a user wants

Vigor2820 Series User’s Guide 4 Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is bli

Vigor2820 Series User’s Guide 13033..99 VVPPNN aanndd RReemmoottee AAcccceessss A Virtual Private Network (VPN) is the extension of a private ne

Vigor2820 Series User’s Guide 13133..99..22 PPPPPP GGeenneerraall SSeettuupp This submenu only applies to PPP-related VPN connections, such as PP

Vigor2820 Series User’s Guide 132Assigned IP Address Enter a specific IP address for the dial-in PPP connection. You should choose an IP address fro

Vigor2820 Series User’s Guide 133Confirm Pre-Shared Key- Retype the characters to confirm the pre-shared key. IPSec Security Method Medium - Authent

Vigor2820 Series User’s Guide 134 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity.

Vigor2820 Series User’s Guide 13533..99..55 RReemmoottee DDiiaall--iinn UUsseerr You can manage remote access by maintaining a table of remote us

Vigor2820 Series User’s Guide 136 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limi

Vigor2820 Series User’s Guide 137aggressive mode). Uncheck the checkbox-This means the connection type you select above will apply the authenticati

Vigor2820 Series User’s Guide 13833..99..66 LLAANN ttoo LLAANN Here you can manage LAN-to-LAN connections by maintaining a table of connection pr

Vigor2820 Series User’s Guide 139 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activ

Vigor2820 Series User’s Guide 511..22..22 FFoorr VViiggoorr22882200nn LED Status Explanation Blinking The router is powered on and running nor

Vigor2820 Series User’s Guide 140WAN1 Only - While connecting, the router will use WAN1 as the only channel for VPN connection. WAN2 First - While

Vigor2820 Series User’s Guide 141IPSec Tunnel Build an IPSec VPN connection to the server through Internet. L2TP with … Build a L2TP VPN connection

Vigor2820 Series User’s Guide 142 IKE phase 1 mode -Select from Main mode and Aggressive mode. The ultimate outcome is to exchange security proposal

Vigor2820 Series User’s Guide 143the remote router. This feature is useful for s model only. Allowed Dial-In Type Determine the dial-in connection

Vigor2820 Series User’s Guide 144becomes one pure L2TP connection. Must - Specify the IPSec policy to be definitely applied on the L2TP connection.

Vigor2820 Series User’s Guide 145exhausted, the function will be disabled automatically. Callback Budget (Unit: minutes)- Specify the time budget for

Vigor2820 Series User’s Guide 14633..99..77 CCoonnnneeccttiioonn MMaannaaggeemmeenntt You can find the summary table of all VPN connections. You m

Vigor2820 Series User’s Guide 14733..1100 CCeerrttiiffiiccaattee MMaannaaggeemmeenntt A digital certificate works as an electronic ID, which is is

Vigor2820 Series User’s Guide 148 Type in all the information that the window request. Then click Generate again. Import Click this button to import

Vigor2820 Series User’s Guide 14933..1100..22 TTrruusstteedd CCAA CCeerrttiiffiiccaattee Trusted CA certificate lists three sets of trusted CA ce

Vigor2820 Series User’s Guide 6 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" button for 2 seconds to

Vigor2820 Series User’s Guide 15033..1100..33 CCeerrttiiffiiccaattee BBaacckkuupp Local certificate and Trusted CA certificate for this router can

Vigor2820 Series User’s Guide 151registration messages to validate. Then, both parties’ SIP proxies will forward the sequence of messages to caller t

Vigor2820 Series User’s Guide 15233..1111..11 DDiiaallPPllaann This page allows you to set phone book and digit map for the VoIP function. Click th

Vigor2820 Series User’s Guide 153 Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number

Vigor2820 Series User’s Guide 154Loop through For the model of Vigor 2820Vn, the selection should be as the following: Backup Phone Number When t

Vigor2820 Series User’s Guide 155DDiiggiitt MMaapp For the convenience of user, this page allows users to edit prefix number for the SIP account wi

Vigor2820 Series User’s Guide 156specific VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03

Vigor2820 Series User’s Guide 157 Enable Click this to enable this entry. Call Direction Determine the direction for the phone call, IN – incoming

Vigor2820 Series User’s Guide 158 For Block Unknown Domain – this function can block incoming calls (through Phone port) from unrecognized domain tha

Vigor2820 Series User’s Guide 159RReeggiioonnaall This page allows you to process incoming or outgoing phone calls by regional. Default values (comm

Vigor2820 Series User’s Guide 711..22..33 FFoorr VViiggoorr22882200VV LED Status Explanation Blinking The router is powered on and running nor

Vigor2820 Series User’s Guide 160Hide caller ID [Act] Dial the number typed in this field to make your phone number (ID) not displayed on the displa

Vigor2820 Series User’s Guide 16133..1111..22 SSIIPP AAccccoouunnttss In this section, you set up your own SIP settings. When you apply for an acc

Vigor2820 Series User’s Guide 162For Vigor2820VS/Vigor2820VSn models, you will see the following page: Index Click this link to access into next pa

Vigor2820 Series User’s Guide 163Account Name Display the account name of SIP address before @. Ring Port Specify which port will ring when receivi

Vigor2820 Series User’s Guide 164The system will select a proper way for your VoIP call. SIP Port Set the port number for sending/receiving SIP mes

Vigor2820 Series User’s Guide 165can specify one of them or choose Any as ring port for specified SIP account. By the way, ISDN-S0 can be used by map

Vigor2820 Series User’s Guide 166For Vigor2820VS/Vigor2820VSn models, you will see the following page: Phone List Port – For Vigor2820V/Vigor2820Vn

Vigor2820 Series User’s Guide 167Disable Port The router can support up to 4 VoIP calls simultaneously. In general, only 3 VoIP calls can be dialed

Vigor2820 Series User’s Guide 168DDeettaaiilleedd SSeettttiinnggss ffoorr PPhhoonnee PPoorrtt Click the number link for Phone port, you can acce

Vigor2820 Series User’s Guide 169Index (1-15) in Schedule - Enter the index of schedule profiles to control the DND mode according to the preconfigur

Vigor2820 Series User’s Guide 8 Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinki

Vigor2820 Series User’s Guide 170Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choo

Vigor2820 Series User’s Guide 171 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP

Vigor2820 Series User’s Guide 172DDeettaaiilleedd SSeettttiinnggss ffoorr IISSDDNN11--SS00 PPoorrtt Click the number link of Index 2 (ISDN1-S0),

Vigor2820 Series User’s Guide [email protected]) as the site for call forwarded. Time Out – Set the time out for the call forwarding. The default sett

Vigor2820 Series User’s Guide 174invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six gro

Vigor2820 Series User’s Guide 175 Region Select the proper region which you are located. The common settings of Caller ID Type, Dial tone, Ringing t

Vigor2820 Series User’s Guide 176recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1

Vigor2820 Series User’s Guide 177 DDeettaaiilleedd SSeettttiinnggss ffoorr IISSDDNN22--TTEE PPoorrtt ((AAvvaaiillaabbllee ffoorr VVSSnn mmo

Vigor2820 Series User’s Guide 178 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up th

Vigor2820 Series User’s Guide 179profiles. Refer to section 3.11.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check thi

Vigor2820 Series User’s Guide 911..22..44 FFoorr VViiggoorr22882200VVnn LED Status Explanation Blinking The router is powered on and runnin

Vigor2820 Series User’s Guide 180Loop Through to ISDN1-S0 Port – Choose this radio button to make all the calls controlled by ISDN line. In addition,

Vigor2820 Series User’s Guide 181 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP

Vigor2820 Series User’s Guide 182 Payload Type (rfc2833) - Choose a number from 96 to 127, the default value was 101. This setting is available for t

Vigor2820 Series User’s Guide 183waiting for remote user’s answer. ALERTING - Indicates that a call is coming. ACTIVE-Indicates that the VoIP connect

Vigor2820 Series User’s Guide 18433..1122..22 GGeenneerraall SSeettttiinnggss This web page allows you to enable ISDN function. ISDN Port Click

Vigor2820 Series User’s Guide 185default, MSN function is disabled. If you leave the fields blank, all incoming calls will be accepted without number

Vigor2820 Series User’s Guide 186AApppplliiccaattiioonn EExxaammppllee You got ISDN numbers with 5972720~5972729 from your ISP, and you try to conn

Vigor2820 Series User’s Guide 18733..1122..33 DDiiaall ttoo SSiinnggllee//DDuuaall IISSPPss Select Dialing to a Single ISP if you access the Int

Vigor2820 Series User’s Guide 188IP Address Assignment Method (IPCP) In most environments, you should not change these settings as most ISPs provide

Vigor2820 Series User’s Guide 189Primary ISP Setup ISP Name - Enter your ISP name. Dial Number -Enter the ISDN access number provided by your ISP. U

Vigor2820 Series User’s Guide ii

Vigor2820 Series User’s Guide 10 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" button for 2 seconds

Vigor2820 Series User’s Guide 190 Click Dial ISDN. Wait for a moment after clicking the dial link. Then, a successful ISDN connection will be shown a

Vigor2820 Series User’s Guide 19133..1122..44 CCaallll CCoonnttrrooll Some applications require that the router (only for the ISDN models) be remo

Vigor2820 Series User’s Guide 192method for PPP/MP connections. Normally you can set it to PAP/CHAP for better compatibility. TCP Header Compression

Vigor2820 Series User’s Guide 193In an Infrastructure Mode of wireless network, Vigor wireless router plays a role as an Access Point (AP) connecting

Vigor2820 Series User’s Guide 194Manage Wireless Stations - Station List will display all the station in your wireless network and the status of thei

Vigor2820 Series User’s Guide 195Mode At present, the router can connect to 11b Only, 11g Only, 11n Only, Mixed(11b+11g), Mixed(11g+11n) and Mixed (

Vigor2820 Series User’s Guide 196 Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless net

Vigor2820 Series User’s Guide 197Download – Type the transmitting rate for data download. Default value is 30,000 kbps. 33..1133..33 SSeeccuurriitty

Vigor2820 Series User’s Guide 198WPA2/802.1x Only- Accepts only WPA2 clients and the encryption key is obtained dynamically from RADIUS server with 8

Vigor2820 Series User’s Guide 199 Enable Max Access Filter Select to enable the MAC Address filter for wireless LAN identified with SSID 1 to 4 re

Vigor2820 Series User’s Guide 1111..22..55 FFoorr VViiggoorr22882200VVSS LED Status Explanation Blinking The router is powered on and running

Vigor2820 Series User’s Guide 20033..1133..55 WWPPSS WPS (Wi-Fi Protected Setup) provides easy procedure to make network connection between wireles

Vigor2820 Series User’s Guide 201z If you want to use PIN code, you have to know the PIN code specified in wireless client. Then provide the PIN cod

Vigor2820 Series User’s Guide 202Authentication Mode Display current authentication mode of the router. Only WPA2/PSK and WPA/PSK support WPS. Confi

Vigor2820 Series User’s Guide 203 The major difference between these two modes is that: while in Repeater mode, the packets received from one peer AP

Vigor2820 Series User’s Guide 204 Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to ful

Vigor2820 Series User’s Guide 205Key - Type 8 ~ 63 ASCII characters or 64 hexadecimal digits leading by “0x”. Bridge If you choose Bridge as the con

Vigor2820 Series User’s Guide 206Aggregation MSDU Aggregation MSDU can combine frames with different sizes. It is used for improving MAC layer’s perf

Vigor2820 Series User’s Guide 207however, the difference between AC_BE and AC_BK categories must be greater. Txop It means transmission opportunity.

Vigor2820 Series User’s Guide 208Statistics It displays the statistics for the channels used by APs. Add to If you want the found AP applying the

Vigor2820 Series User’s Guide 20933..1144 UUSSBB AApppplliiccaattiioonn USB diskette can be regarded as a server. By way of Vigor router, clients

Vigor2820 Series User’s Guide 12 On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On T

Vigor2820 Series User’s Guide 21033..1144..22 FFTTPP UUsseerr MMaannaaggeemmeenntt This page allows you to set profiles for FTP users. Any user w

Vigor2820 Series User’s Guide 211Password Type the password for FTP users for accessing FTP server. Later, you can open FTP client software and type

Vigor2820 Series User’s Guide 212Free Capacity It displays the free space of the USB diskette. Click Refresh at any time to get new status for free

Vigor2820 Series User’s Guide 213 Model Name Display the model name of the router. Firmware Version Display the firmware version of the router. Bu

Vigor2820 Series User’s Guide 214Firmware Version It indicates information about equipped WLAN miniPCi card. This also helps to provide availabili

Vigor2820 Series User’s Guide 21533..1155..33 AAddmmiinniissttrraattoorr PPaasssswwoorrdd This page allows you to set new password. Old Password

Vigor2820 Series User’s Guide 2163. In Save As dialog, the default filename is config.cfg. You could give it another name by yourself. 4. Click Sa

Vigor2820 Series User’s Guide 21733..1155..55 SSyysslloogg//MMaaiill AAlleerrtt SysLog function is provided for users to monitor router. There is

Vigor2820 Series User’s Guide 218For viewing the Syslog, please do the following: 1. Just set your monitor PC’s IP address in the field of Server IP

Vigor2820 Series User’s Guide 219Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the bro

Vigor2820 Series User’s Guide 1311..22..66 FFoorr VViiggoorr22882200VVSSnn LED Status Explanation Blinking The router is powered on and runnin

Vigor2820 Series User’s Guide 22033..1155..77 MMaannaaggeemmeenntt This page allows you to manage the settings for access control, access list, por

Vigor2820 Series User’s Guide 221Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host

Vigor2820 Series User’s Guide 22233..1155..99 FFiirrmmwwaarree UUppggrraaddee Before upgrading your router firmware, you need to install the Rou

Vigor2820 Series User’s Guide 22333..1166 DDiiaaggnnoossttiiccss Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor

Vigor2820 Series User’s Guide 22433..1166..22 RRoouuttiinngg TTaabbllee Click Diagnostics and click Routing Table to open the web page. Refresh

Vigor2820 Series User’s Guide 22533..1166..44 DDHHCCPP TTaabbllee The facility provides information on IP address assignments. This information is

Vigor2820 Series User’s Guide 226Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representi

Vigor2820 Series User’s Guide 22733..1166..77 DDaattaa FFllooww MMoonniittoorr This page displays the running procedure for the IP address moni

Vigor2820 Series User’s Guide 228Action Block - can prevent specified PC accessing into Internet within 5 minutes. Unblock – the device with the IP

Vigor2820 Series User’s Guide 22933..1166..99 TTrraaccee RRoouuttee Click Diagnostics and click Trace Route to open the web page. This page allows

Vigor2820 Series User’s Guide 14On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On Th

Vigor2820 Series User’s Guide 230 This page is left blank.

Vigor2820 Series User’s Guide 2314 AApppplliiccaattiioonn aanndd EExxaammpplleess 44..11 CCrreeaattee aa LLAANN--ttoo--LLAANN CCoonnnneecctti

Vigor2820 Series User’s Guide 232general settings in IPSec General Setup, such as the pre-shared key that both parties have known. 3. Go to LAN-to

Vigor2820 Series User’s Guide 233 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP

Vigor2820 Series User’s Guide 234 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and

Vigor2820 Series User’s Guide 2352. Then, for using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup.

Vigor2820 Series User’s Guide 236If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Met

Vigor2820 Series User’s Guide 237 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and

Vigor2820 Series User’s Guide 23844..22 CCrreeaattee aa RReemmoottee DDiiaall--iinn UUsseerr CCoonnnneeccttiioonn BBeettwweeeenn tthhee TTee

Vigor2820 Series User’s Guide 239 3. Go to Remote Dial-In User. Click on one index number to edit a profile. 4. Set Dial-In settings to as shown b

Vigor2820 Series User’s Guide 1511..33 HHaarrddwwaarree IInnssttaallllaattiioonn Before starting to configure the router, you have to connect yo

Vigor2820 Series User’s Guide 240If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and V

Vigor2820 Series User’s Guide 241 3. In Step 2. Connect to VPN Server, click Insert button to add a new entry. If an IPSec-based service is sele

Vigor2820 Series User’s Guide 242 If a PPP-based service is selected, you should further specify the remote VPN server IP address, Username, Passwor

Vigor2820 Series User’s Guide 24344..33 QQooSS SSeettttiinngg EExxaammppllee Assume a teleworker sometimes works at home and takes care of childr

Vigor2820 Series User’s Guide 244 5. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will s

Vigor2820 Series User’s Guide 245 8. If the worker has connected to the headquarter using host to host VPN tunnel. (Please refer to Chapter 3 VPN fo

Vigor2820 Series User’s Guide 246 10. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headqua

Vigor2820 Series User’s Guide 247 To use another DHCP server in the network rather than the built-in one of Vigor Router, you have to change the sett

Vigor2820 Series User’s Guide 24844..55 CCaalllliinngg SScceennaarriioo ffoorr VVooIIPP ffuunnccttiioonn 44..55..11 CCaalllliinngg vviiaa SS

Vigor2820 Series User’s Guide 249Example 2: Both John and David have SIP Addresses from the same service provider. John’s SIP URL: [email protected] ,

Vigor2820 Series User’s Guide 16 Caution: Each of the Phone ports can be connected to an analog phone only. Do not connect the phone ports to the tel

Vigor2820 Series User’s Guide 25044..55..22 PPeeeerr--ttoo--PPeeeerr CCaalllliinngg Example 3: Arnor and Paulin have Vigor routers respectively, t

Vigor2820 Series User’s Guide 25144..66 UUppggrraaddee FFiirrmmwwaarree ffoorr YYoouurr RRoouutteerr Before upgrading your router firmware, you

Vigor2820 Series User’s Guide 2525. Double click on the router tool icon. The setup wizard will appear. 6. Follow the onscreen instructions to i

Vigor2820 Series User’s Guide 25310. Click Send. 11. Now the firmware update is finished. 44..77 RReeqquueesstt aa cceerrttiiffiiccaattee ffr

Vigor2820 Series User’s Guide 2542. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate r

Vigor2820 Series User’s Guide 255Select Advanced request. Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request us

Vigor2820 Series User’s Guide 256you will find the below window showing “------BEGINE CERTIFICATE------...” 6. You may review the detail informat

Vigor2820 Series User’s Guide 25744..88 RReeqquueesstt aa CCAA CCeerrttiiffiiccaattee aanndd SSeett aass TTrruusstteedd oonn WWiinnddoowwss

Vigor2820 Series User’s Guide 2582. In Choose file to download, click CA Certificate Current and Base 64 encoded, and Download CA certificate to sav

Vigor2820 Series User’s Guide 2595 TTrroouubbllee SShhoooottiinngg This section will guide you to solve abnormal situations if you cannot access i

Vigor2820 Series User’s Guide 1711..55 PPrriinntteerr IInnssttaallllaattiioonn You can install a printer onto the router for sharing printing. All

Vigor2820 Series User’s Guide 26055..22 CChheecckkiinngg IIff tthhee NNeettwwoorrkk CCoonnnneeccttiioonn SSeettttiinnggss oonn YYoouurr CCoo

Vigor2820 Series User’s Guide 2614. Select Obtain an IP address automatically and Obtain DNS server address automatically. FFoorr MMaaccOOss 1.

Vigor2820 Series User’s Guide 26255..33 PPiinnggiinngg tthhee RRoouutteerr ffrroomm YYoouurr CCoommppuutteerr The default gateway IP address o

Vigor2820 Series User’s Guide 263 55..44 CChheecckkiinngg IIff tthhee IISSPP SSeettttiinnggss aarree OOKK oorr NNoott Click WAN>> In

Vigor2820 Series User’s Guide 264FFoorr MMPPooAA UUsseerrss 1. Check if the Enable option is selected. 2. Check if DSL Modem Settings is set ap

Vigor2820 Series User’s Guide 265 FFoorr PPPPTTPP UUsseerrss 1. Check if the Enable option for PPTP Link is selected. 2. Check if PPTP Server

Vigor2820 Series User’s Guide 266CChheecckk iiff UUSSBB LLEEDD lliigghhttss oonn oorr ooffff You have to wait about 15 seconds after insertin

Vigor2820 Series User’s Guide 267Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using fa

Vigor2820 Series User’s Guide 268 This page is left blank.

Vigor2820 Series User’s Guide 269AAppppeennddiixx:: HHaarrddwwaarree SSppeecciiffiiccaattiioonnss Operating : 0°C ~ 45°C Temperature Storage : -25

Vigor2820 Series User’s Guide 183. Open File->Add a New Computer. A welcome dialog will appear. Please click Next. 4. Click Local printer

Vigor2820 Series User’s Guide 196. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type I

Vigor2820 Series User’s Guide iii Vigor2820 Series ADSL2/2+ Security Firewall User’s Guide Version: 3.0 Date: 30/07/2009

Vigor2820 Series User’s Guide 209. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step c

Vigor2820 Series User’s Guide 21Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know wheth

Vigor2820 Series User’s Guide 22 This page is left blank.

Vigor2820 Series User’s Guide 232 CCoonnffiigguurriinngg BBaassiicc SSeettttiinnggss For use the router properly, it is necessary for you to chan

Vigor2820 Series User’s Guide 24 Note: The home page will change slightly in accordance with the router you have. 4. Go to System Maintenance page a

Vigor2820 Series User’s Guide 2522..22 QQuuiicckk SSttaarrtt WWiizzaarrdd If your router can be under an environment with high speed NAT, the con

Vigor2820 Series User’s Guide 26 In the Quick Start Wizard, you can configure the router to access the Internet with different protocol/modes such as

Vigor2820 Series User’s Guide 27If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown:

Vigor2820 Series User’s Guide 2822..22..22 11448833 BBrriiddggeedd IIPP Click 1483 Bridged IP as the protocol. Type in all the information that y

Vigor2820 Series User’s Guide 2922..22..33 11448833 RRoouutteedd IIPP Click 1483 Routed IP as the protocol. Type in all the information that your

Vigor2820 Series User’s Guide ivCopyright Information Copyright Declarations Copyright 2009 All rights reserved. This publication contains informati

Vigor2820 Series User’s Guide 3022..33 OOnnlliinnee SSttaattuuss The online status shows the system status, WAN status, ADSL Information and other

Vigor2820 Series User’s Guide 31Online status for Static IP (for WAN1) Online status for DHCP (WAN1)

Vigor2820 Series User’s Guide 32Online status for ISDN enabled Detailed explanation is shown below: Primary DNS Displays the IP address of the prim

Vigor2820 Series User’s Guide 33RX Rate Displays the speed of received octets at the ISDN interface. Up Time Displays the total uptime of the inter

Vigor2820 Series User’s Guide 34 This page is left blank.

Vigor2820 Series User’s Guide 353AAddvvaanncceedd WWeebb CCoonnffiigguurraattiioonn After finished basic configuration of the router, you can acce

Vigor2820 Series User’s Guide 3633..11..22 NNeettwwoorrkk CCoonnnneeccttiioonn bbyy 33GG UUSSBB MMooddeemm For 3G mobile communication through

Vigor2820 Series User’s Guide 37 Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN i

Vigor2820 Series User’s Guide 38determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN interface, please choo

Vigor2820 Series User’s Guide 3933..11..44 IInntteerrnneett AAcccceessss For the router supports dual WAN function, the users can set different WA

Vigor2820 Series User’s Guide vEuropean Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Township, HsinCh

Vigor2820 Series User’s Guide 40 Enable/Disable Click Enable for activating this function. If you click Disable, this function will be closed and all

Vigor2820 Series User’s Guide 41PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connection

Vigor2820 Series User’s Guide 42In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use t

Vigor2820 Series User’s Guide 43 DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for building DSL connection to y

Vigor2820 Series User’s Guide 44a Single ISP to create the backup profile. None - Disable the backup function. Packet Trigger -The backup line is

Vigor2820 Series User’s Guide 45Then click OK to exit the dialog. IP Address – Type in the private IP address. Subnet Mask – Type in the subnet mas

Vigor2820 Series User’s Guide 46 Enable/Disable Click Enable for activating this function. If you click Disable, this function will be closed and all

Vigor2820 Series User’s Guide 47Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Ti

Vigor2820 Series User’s Guide 48SSttaattiicc oorr DDyynnaammiicc IIPP ffoorr WWAANN22 For static IP mode, you usually receive a fixed public IP

Vigor2820 Series User’s Guide 49Detection Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choos

Vigor2820 Series User’s Guide vi

Vigor2820 Series User’s Guide 50if you want to use Static IP mode. IP Address: Type the IP address. Subnet Mask: Type the subnet mask. Gateway IP Add

Vigor2820 Series User’s Guide 51ISDN Dial Backup Setup This setting is available for the routers supporting ISDN function only. Before utilizing the

Vigor2820 Series User’s Guide 52address in the box of Fixed IP Address. Fixed IP Address -Type a fixed IP address. WAN IP Network Settings Obtain an

Vigor2820 Series User’s Guide 53 33..11..55 MMuullttii--PPVVCCss This router allows you to create multi-PVCs for different data transferring for us

Vigor2820 Series User’s Guide 54Encapsulation Choose a proper type for this channel. The types will be different according to the protocol setting t

Vigor2820 Series User’s Guide 55AATTMM QQooSS Such configuration is applied to upstream packets. Such information will be provided by ISP. Please c

Vigor2820 Series User’s Guide 56PPoorrtt--bbaasseedd BBrriiddggee General page lets you set the first PVC. As to set the second PVC line, please cl

Vigor2820 Series User’s Guide 5733..11..66 LLooaadd--BBaallaannccee PPoolliiccyy This router supports the function of load balancing. It can assig

Vigor2820 Series User’s Guide 58Dest Port Start Displays the IP address for the start of the destination port. Dest Port End Displays the IP addres

Vigor2820 Series User’s Guide 59Dest Port End Type the destination port end for the destination IP. If this field is blank, it means that all the de

Vigor2820 Series User’s Guide viiTTaabbllee ooff CCoonntteennttss 1 Preface ...

Vigor2820 Series User’s Guide 60 WWhhaatt iiss RRoouuttiinngg IInnffoorrmmaattiioonn PPrroottooccooll ((RRIIPP)) Vigor router will exchange rou

Vigor2820 Series User’s Guide 6133..22..22 GGeenneerraall SSeettuupp This page provides you the general settings for LAN. Click LAN to open the LA

Vigor2820 Series User’s Guide 62server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.135.240.1, the starting I

Vigor2820 Series User’s Guide 63the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server. DNS

Vigor2820 Series User’s Guide 64Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference

Vigor2820 Series User’s Guide 65the router, and continuously exchange of IP routing information with different subnets. 2. Click the LAN - Static Ro

Vigor2820 Series User’s Guide 6633..22..44 VVLLAANN Virtual LAN function provides you a very convenient way to manage hosts by grouping them based

Vigor2820 Series User’s Guide 67 To remove VLAN, uncheck the needed box and click OK to save the results. 33..22..55 BBiinndd IIPP ttoo MMAACC

Vigor2820 Series User’s Guide 68Strict Bind Click this radio button to block the connection of the IP/MAC which is not listed in IP Bind List. ARP

Vigor2820 Series User’s Guide 69On NAT page, you will see the private IP address defined in RFC-1918. Usually we use the 192.168.1.0/24 subnet for th

Vigor2820 Series User’s Guide viii3.3.3 Open Ports...

Vigor2820 Series User’s Guide 70 Press any number under Index to access into next page for configuring port redirection. Enable Check this box to e

Vigor2820 Series User’s Guide 71Private IP Specify the private IP address of the internal host providing the service. If you choose Range as the por

Vigor2820 Series User’s Guide 72 The inherent security properties of NAT are somewhat bypassed if you set up DMZ host. We suggest you to add addition

Vigor2820 Series User’s Guide 73Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this but

Vigor2820 Series User’s Guide 7433..33..33 OOppeenn PPoorrttss Open Ports allows you to open a range of ports for the traffic of special applicati

Vigor2820 Series User’s Guide 75 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. W

Vigor2820 Series User’s Guide 7633..44 FFiirreewwaallll 33..44..11 BBaassiiccss ffoorr FFiirreewwaallll While the broadband users demand more b

Vigor2820 Series User’s Guide 77 SSttaatteeffuull PPaacckkeett IInnssppeeccttiioonn ((SSPPII)) Stateful inspection is a firewall architecture th

Vigor2820 Series User’s Guide 7833..44..22 GGeenneerraall SSeettuupp General Setup allows you to adjust settings of IP Filter and common options.

Vigor2820 Series User’s Guide 79the Log box. It will be sent to Syslog server. Please refer to section 3.14.5 Syslog/Mail Alert for more detailed inf

Vigor2820 Series User’s Guide ix3.12.1 Basic Concept...

Vigor2820 Series User’s Guide 80(0~65535). The more the value is, the better the performance will be. However, if the network is not stable, small va

Vigor2820 Series User’s Guide 81Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the button will open Edit Filter Rule web

Vigor2820 Series User’s Guide 82 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Addres

Vigor2820 Series User’s Guide 83use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Protocol -

Vigor2820 Series User’s Guide 84will be sent to Syslog server. Please refer to section 3.14.5 Syslog/Mail Alert for more detailed information. Web Co

Vigor2820 Series User’s Guide 85Window size – It determines the size of TCP protocol (0~65535). The more the value is, the better the performance wil

Vigor2820 Series User’s Guide 8633..44..44 DDooSS DDeeffeennssee As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defen

Vigor2820 Series User’s Guide 87detecting this malicious exploration behavior by monitoring the port-scanning Threshold rate, the Vigor router will s

Vigor2820 Series User’s Guide 88indicate the protocol type running over the upper layer. However, the protocol types greater than 100 are reserved an

Vigor2820 Series User’s Guide 8933..55 OObbjjeeccttss SSeettttiinngg For IPs in a range and service ports in a limited range usually will be appli