Draytek VIGOR2910 Guida Utente

Vigor2910 Series User’s Guide x4.2 Create a Remote Dial-in User Connection Between the Teleworker and Headquarter... 224 4.3 QoS Setting Example..

Vigor2910 Series User’s Guide 90z Scheduling: Based on classification of service level to assign packets to queues and associated service types The

Vigor2910 Series User’s Guide 91This page displays the QoS settings result of the WAN interface. Click the Setup link to access into next page for th

Vigor2910 Series User’s Guide 92 Reserved Bandwidth Ratio It is reserved for the group index in the form of ratio of reserved bandwidth to upstream

Vigor2910 Series User’s Guide 93 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Source

Vigor2910 Series User’s Guide 94Service Type It determines the service type of the data for processing with QoS control. It can also be edited. You

Vigor2910 Series User’s Guide 95 For adding a new rule, click Add to open the following page. If you want to edit an existed service type, please sel

Vigor2910 Series User’s Guide 9633..88 AApppplliiccaattiioonnss Below shows the menu items for Applications. 33..88..11 DDyynnaammiicc DDNNSS T

Vigor2910 Series User’s Guide 97Index Click the number below Index to access into the setting page of DDNS setup to set account(s). WAN Interface D

Vigor2910 Series User’s Guide 98Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu, uncheck Enable Dynamic DNS Setup, and

Vigor2910 Series User’s Guide 99 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the sch

Vigor2910 Series User’s Guide 11 PPrreeffaaccee The Vigor2910 series router provides Dual-WAN interface (which is a configuration second WAN) for I

Vigor2910 Series User’s Guide 1003. Configure the Force Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE

Vigor2910 Series User’s Guide 10133..88..44 UUPPnnPP The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices

Vigor2910 Series User’s Guide 102The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall app

Vigor2910 Series User’s Guide 10333..88..55 IIGGMMPP IGMP is the abbreviation of Internet Group Management Protocol. It is a communication protoc

Vigor2910 Series User’s Guide 104Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box

Vigor2910 Series User’s Guide 10533..99 VVPPNN aanndd RReemmoottee AAcccceessss A Virtual Private Network (VPN) is the extension of a private ne

Vigor2910 Series User’s Guide 106 Please choose a LAN-to-LAN Profile There are 32 VPN tunnels for users to set. When you finish the mode and profi

Vigor2910 Series User’s Guide 107the choices for the client profile, please click Next. You will see different configurations based on the selection(

Vigor2910 Series User’s Guide 108 z When you choose L2TP over IPSec (Nice to Have), you will see the following graphic: z When you choose L2TP o

Vigor2910 Series User’s Guide 109 Profile Name Type a name for such profile. The length of the file is limited to 10 characters. VPN Connection

Vigor2910 Series User’s Guide 211..22..11 FFoorr VViiggoorr22991100 LLEEDD EExxppllaannaattiioonn LED Status Explanation Blinking The route

Vigor2910 Series User’s Guide 110Profiles (set from VPN and Remote Access>>IPSec Peer Identity). IPSec Security Method Medium - Authentication

Vigor2910 Series User’s Guide 11133..99..22 VVPPNN SSeerrvveerr WWiizzaarrdd Such wizard is used to configure VPN settings for VPN server. Such w

Vigor2910 Series User’s Guide 112 Please choose a Dial-in User Accounts This item is available when you choose Remote Dial-in User (Teleworker) as

Vigor2910 Series User’s Guide 113 Profile Name Type a name for such profile. The length of the file is limited to 10 characters. User Name This

Vigor2910 Series User’s Guide 114 z When you check IPSec, you will see the following graphic: After finishing the configuration, please click Next.

Vigor2910 Series User’s Guide 115 Go to the VPN Connection Management Click this radio button to access VPN and Remote Access>>Connection Manag

Vigor2910 Series User’s Guide 116Enable L2TP VPN Service Check this box to activate the VPN service through L2TP protocol. Enable ISDN Dial-IN This

Vigor2910 Series User’s Guide 117authentication. You should further specify the User Name and Password of the mutual authentication peer. Start IP Ad

Vigor2910 Series User’s Guide 118IKE Authentication Method This usually applies to those are remote dial-in user or node (LAN to LAN) which uses dy

Vigor2910 Series User’s Guide 119 Profile Name Type in a name in this file. Enable this account-Check this box to enable such profile. Accept Any Pe

Vigor2910 Series User’s Guide 311..22..22 FFoorr VViiggoorr22991100GG LLEEDD EExxppllaannaattiioonn LED Status Explanation Blinking The

Vigor2910 Series User’s Guide 12033..99..77 RReemmoottee DDiiaall--iinn UUsseerr You can manage remote access by maintaining a table of remote

Vigor2910 Series User’s Guide 121 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limi

Vigor2910 Series User’s Guide 122aggressive mode). Uncheck the checkbox-This means the connection type you select above will apply the authenticati

Vigor2910 Series User’s Guide 123Specify the callback number-The option is for extra security. Once enabled, the router will ONLY call back to the sp

Vigor2910 Series User’s Guide 124 Click each index to edit each profile and you will get the following page. Each LAN to LAN profile includes 4 subgr

Vigor2910 Series User’s Guide 125Profile Name Specify a name for the profile of the LAN to LAN connection. Enable this profile Check here to activa

Vigor2910 Series User’s Guide 126the state of a VPN connection for router’s judgment of redial. Normally, if any one of VPN peers wants to disconnec

Vigor2910 Series User’s Guide 127IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy. Medium Authen

Vigor2910 Series User’s Guide 128 IKE phase 2 proposal-To propose the local available algorithms to the VPN peers, and get its feedback to find a ma

Vigor2910 Series User’s Guide 129 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN to L

Vigor2910 Series User’s Guide 411..22..33 FFoorr VViiggoorr22991100ii LLEEDD EExxppllaannaattiioonn LED Status Explanation Blinking The r

Vigor2910 Series User’s Guide 130connection employed the L2TP without IPSec policy can be viewed as one pure L2TP connection. Nice to Have- Apply t

Vigor2910 Series User’s Guide 131Callback number-The option is for extra security. Once enabled, the router will ONLY call back to the specified Call

Vigor2910 Series User’s Guide 132More Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask thr

Vigor2910 Series User’s Guide 13333..99..99 VVPPNN BBaacckkuupp MMaannaaggeemmeenntt VPN Backup Management is a backup mechanism to set multiple

Vigor2910 Series User’s Guide 134Name (on Backup Profile field) Display the name of VPN TRUNK profile. Member1 (on Backup Profile field) Display the

Vigor2910 Series User’s Guide 135TTiimmee ffoorr aaccttiivvaattiinngg VVPPNN BBaacckkuupp pprrooffiillee VPN TRUNK backup will be activated aut

Vigor2910 Series User’s Guide 13633..99..1100 CCoonnnneeccttiioonn MMaannaaggeemmeenntt You can find the summary table of all VPN connections. You

Vigor2910 Series User’s Guide 137Refresh Seconds Choose the time for refresh the dial information among 5, 10, and 30. Refresh Click this button to

Vigor2910 Series User’s Guide 13833..1100 CCeerrttiiffiiccaattee MMaannaaggeemmeenntt A digital certificate works as an electronic ID, which is is

Vigor2910 Series User’s Guide 139 Type in all the information that the window request. Then click Generate again. Import Click this button to import

Vigor2910 Series User’s Guide 511..22..44 FFoorr VViiggoorr22991100VV LLEEDD EExxppllaannaattiioonn LED Status Explanation Blinking The rou

Vigor2910 Series User’s Guide 14033..1100..22 TTrruusstteedd CCAA CCeerrttiiffiiccaattee Trusted CA certificate lists three sets of trusted CA ce

Vigor2910 Series User’s Guide 14133..1100..33 CCeerrttiiffiiccaattee BBaacckkuupp Local certificate and Trusted CA certificate for this router can

Vigor2910 Series User’s Guide 14233..1111 VVooIIPP Voice over IP network (VoIP) enables you to use your broadband Internet connection to make toll

Vigor2910 Series User’s Guide 143only have to using dial plan or directly dial your friend’s account name if you are with the same SIP Registrar. Ple

Vigor2910 Series User’s Guide 144 Click any index number to display the dial plan setup page. Enable Click this to enable this entry. Phone Number

Vigor2910 Series User’s Guide 145This page will differ for different models. Below is a sample page obtained from Vigor 2910VGi. The selection of Loo

Vigor2910 Series User’s Guide 146type in backup phone number (PSTN number) for this VoIP phone setting. DDiiggiitt MMaapp For the convenience of us

Vigor2910 Series User’s Guide 147SIP server. OP Number The front number you type here is the first part of the account number that you want to exec

Vigor2910 Series User’s Guide 148Profile Display the profile name of the account. Domain/Realm Display the domain name or IP address of the SIP reg

Vigor2910 Series User’s Guide 149 Profile Name Assign a name for this profile for identifying. You can type similar name with the domain. For exampl

Vigor2910 Series User’s Guide 611..22..55 FFoorr VViiggoorr22991100VVGG LLEEDD EExxppllaannaattiioonn LED Status Explanation Blinking The ro

Vigor2910 Series User’s Guide 150Authentication ID Check the box to invoke this function and enter the name or number used for SIP Authorization wit

Vigor2910 Series User’s Guide 151 33..1111..33 PPhhoonnee SSeettttiinnggss This page allows user to set phone settings for VoIP 1 and VoIP 2 respe

Vigor2910 Series User’s Guide 152DTMF Relay – Display DTMF mode that configured in the advanced settings page of Phone Index. RTP Symmetric RTP – Ch

Vigor2910 Series User’s Guide 153DDeettaaiilleedd SSeettttiinnggss ffoorr VVooIIPP 11 aanndd 22 Click the number 1 or 2 link under Index colum

Vigor2910 Series User’s Guide 154Index (1-15) in Schedule - Enter the index of schedule profiles to control the DND mode according to the preconfigur

Vigor2910 Series User’s Guide 155Play dial tone only when account registered - Check this box to invoke the function. Default Call Route It determin

Vigor2910 Series User’s Guide 156 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP

Vigor2910 Series User’s Guide 157useful when the network traffic congestion occurs and it still can remain the accuracy of DTMF tone. SIP INFO- Cho

Vigor2910 Series User’s Guide 158only when the local system is busy. No answer means if the incoming calls do not receive any response, they will be

Vigor2910 Series User’s Guide 159something to save the bandwidth for other using. Click On to invoke this function; click off to close the function.

Vigor2910 Series User’s Guide 711..22..66 FFoorr VViiggoorr22991100VVGGii LLEEDD EExxppllaannaattiioonn LED Status Explanation Blinking

Vigor2910 Series User’s Guide 160page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for di

Vigor2910 Series User’s Guide 161 Payload Type (rfc2833) - Choose a number from 96 to 127, the default value was 101. This setting is available for t

Vigor2910 Series User’s Guide 162for the physical ISDN port. Be aware that ISDN1/2 port is available for the users living in Europe and using Vigor 2

Vigor2910 Series User’s Guide 16333..1122..11 GGeenneerraall SSeettuupp This page provides some basic ISDN settings such as enabling the ISDN port

Vigor2910 Series User’s Guide 16433..1122..22 DDiiaalliinngg ttoo aa SSiinnggllee IISSPP If you access the Internet via a single ISP, press thi

Vigor2910 Series User’s Guide 165Yes to invoke this function and enter the IP address in the field of Fixed IP Address. Fixed IP Address Type the IP

Vigor2910 Series User’s Guide 166 As depicted in the above application scenario, the Virtual TA client can make an outgoing call or accept an incomin

Vigor2910 Series User’s Guide 167IInnssttaallll aa VViirrttuuaall TTAA CClliieenntt 1. Insert the CD-ROM bundled with your Vigor router. Find V

Vigor2910 Series User’s Guide 168Click the Virtual TA Login tab to launch the login box. Enter the Username/Password and then click OK. After a shor

Vigor2910 Series User’s Guide 16933..1122..55 CCaallll CCoonnttrrooll Some applications require that the router (only for the ISDN models) be remo

Vigor2910 Series User’s Guide 811..33 HHaarrddwwaarree IInnssttaallllaattiioonn Before starting to configure the router, you have to connect your

Vigor2910 Series User’s Guide 170PPP Authentication It specifies the PPP authentication method for PPP/MP connections. Normally you can set it to PA

Vigor2910 Series User’s Guide 17133..1133 WWiirreelleessss LLAANN This function is used for G models only. 33..1133..11 BBaassiicc CCoonncceeppt

Vigor2910 Series User’s Guide 172WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit

Vigor2910 Series User’s Guide 173Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wir

Vigor2910 Series User’s Guide 17433..1133..22 GGeenneerraall SSeettttiinnggss By clicking the General Settings, a new web page will appear so that

Vigor2910 Series User’s Guide 175selected channel is under serious interference. Hide SSID Check it to prevent from wireless sniffing and make it

Vigor2910 Series User’s Guide 17633..1133..33 SSeeccuurriittyy By clicking the Security Settings, a new web page will appear so that you could conf

Vigor2910 Series User’s Guide 177either Mixed or WPA2 only in the field below. Since the key will be auto-negotiated during authentication, the field

Vigor2910 Series User’s Guide 17833..1133..44 AAcccceessss CCoonnttrrooll For additional security of wireless access, the Access Control facility

Vigor2910 Series User’s Guide 179OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. 33..1133..55 WW

Vigor2910 Series User’s Guide 911..44 PPrriinntteerr IInnssttaallllaattiioonn You can install a printer onto the router for sharing printing. All

Vigor2910 Series User’s Guide 180In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through

Vigor2910 Series User’s Guide 181Security There are three types for security, Disable, WEP and Pre-shared key. The setting you choose here will make

Vigor2910 Series User’s Guide 18233..1133..66 AAPP DDiissccoovveerryy Vigor router can scan all regulatory channels and find working APs in the ne

Vigor2910 Series User’s Guide 18333..1133..77 SSttaattiioonn LLiisstt Station List provides the knowledge of connecting wireless clients now alo

Vigor2910 Series User’s Guide 18433..1133..88 SSttaattiioonn RRaattee CCoonnttrrooll This page allows you to control the upload and download rate

Vigor2910 Series User’s Guide 185example, force the wireless user(s) in hotel to access into the web page that the hotel wants the user(s) to visit.

Vigor2910 Series User’s Guide 186P1 – P4 Check the box to make the computer connecting to the port being grouped in specified VLAN. Be aware that ea

Vigor2910 Series User’s Guide 1877890 in the boxes of W_VLAN1. Users can configure fifteen groups of wireless VLAN in this page. Enable Check this

Vigor2910 Series User’s Guide 188Disable broadcast and multicast traffic Check this box to prevent broadcast and multicast traffic forwarding to all

Vigor2910 Series User’s Guide 1895. You can go to Diagnostics>>Wireless VLAN Online Station Table for viewing the connection status whenever y

Vigor2910 Series User’s Guide ii

Vigor2910 Series User’s Guide 103. Open File->Add a New Computer. A welcome dialog will appear. Please click Next. 4. Click Local printer

Vigor2910 Series User’s Guide 190The VLAN >> VALN Cross Setup allows you to set a communication bridge between computers in Wireless VLAN and w

Vigor2910 Series User’s Guide 19133..1144..44 WWiirreelleessss RRaattee CCoonnttrrooll Rate Control manages the transmission rate of data in and

Vigor2910 Series User’s Guide 19233..1155 UUSSBB AApppplliiccaattiioonn USB diskette can be regarded as an FTP server. By way of Vigor router, cli

Vigor2910 Series User’s Guide 19333..1155..22 FFTTPP UUsseerr MMaannaaggeemmeenntt This page allows you to set profiles for FTP users. Any user w

Vigor2910 Series User’s Guide 194password specified here for accessing into USB storage diskette. Confirm Password Type the password again to make

Vigor2910 Series User’s Guide 195IP Address It displays the IP address of the user’s host which connecting to the FTP server. When you insert USB di

Vigor2910 Series User’s Guide 19633..1166..11 SSyysstteemm SSttaattuuss The System Status provides basic network settings of Vigor router. It incl

Vigor2910 Series User’s Guide 19733..1166..22 TTRR--006699 SSeettttiinngg Vigor router with TR-069 is available for matching with VigorACS server.

Vigor2910 Series User’s Guide 198ACS Server for authentication. For example, if you want to use such CPE with VigorACS, you can type as the following

Vigor2910 Series User’s Guide 199New Password Type in new password in this filed. Confirm New Password Type in the new password again. When you cli

Vigor2910 Series User’s Guide 116. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type I

Vigor2910 Series User’s Guide 200 4. Click Save button, the configuration will download automatically to your computer as a file named config.cfg. T

Vigor2910 Series User’s Guide 20133..1166..55 SSyysslloogg//MMaaiill AAlleerrtt SysLog function is provided for users to monitor router. There is

Vigor2910 Series User’s Guide 202 3. From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select

Vigor2910 Series User’s Guide 20333..1166..66 TTiimmee aanndd DDaattee It allows you to specify where the time of the router should be inquired f

Vigor2910 Series User’s Guide 20433..1166..77 MMaannaaggeemmeenntt This page allows you to manage the settings for access control, access list, por

Vigor2910 Series User’s Guide 205Get Community Set the name for getting community by typing a proper character. The default setting is public. Set C

Vigor2910 Series User’s Guide 20633..1166..99 FFiirrmmwwaarree UUppggrraaddee Before upgrading your router firmware, you need to install the Rou

Vigor2910 Series User’s Guide 20733..1177 DDiiaaggnnoossttiiccss Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor

Vigor2910 Series User’s Guide 20833..1177..22 RRoouuttiinngg TTaabbllee Click Diagnostics and click Routing Table to open the web page. Refresh

Vigor2910 Series User’s Guide 20933..1177..44 DDHHCCPP TTaabbllee The facility provides information on IP address assignments. This information is

Vigor2910 Series User’s Guide 129. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step c

Vigor2910 Series User’s Guide 210Peer IP:Port It indicates the destination IP address and port of remote host. Interface It indicates the interfa

Vigor2910 Series User’s Guide 21133..1177..77 WWeebb AAuutthheennttiiccaattiioonn TTaabbllee This page displays the IP address, UserName and Lo

Vigor2910 Series User’s Guide 212 Enable Data Flow Monitor Check this box to enable this function. Refresh Seconds Use the drop down list to choose

Vigor2910 Series User’s Guide 213Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the se

Vigor2910 Series User’s Guide 214 The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1/WAN2 Bandwidth chart, t

Vigor2910 Series User’s Guide 21533..1177..1100 PPiinngg DDiiaaggnnoossiiss Click Diagnostics and click Ping Diagnosis to pen the web page. Pin

Vigor2910 Series User’s Guide 216 Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecifie

Vigor2910 Series User’s Guide 2174 AApppplliiccaattiioonn aanndd EExxaammpplleess 44..11 CCrreeaattee aa LLAANN ttoo LLAANN CCoonnnneecctti

Vigor2910 Series User’s Guide 218set general settings in IPSec General Setup, such as the pre-shared key that both parties have known. 3. Go to LA

Vigor2910 Series User’s Guide 219 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP

Vigor2910 Series User’s Guide 13Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know wheth

Vigor2910 Series User’s Guide 220 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and

Vigor2910 Series User’s Guide 2211. Go to VPN and Remote Access and select Remote Access Control to enable the necessary VPN service and click OK.

Vigor2910 Series User’s Guide 222If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Met

Vigor2910 Series User’s Guide 223 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and

Vigor2910 Series User’s Guide 22444..22 CCrreeaattee aa RReemmoottee DDiiaall--iinn UUsseerr CCoonnnneeccttiioonn BBeettwweeeenn tthhee TTee

Vigor2910 Series User’s Guide 225 3. Go to Remote Dial-In Users. Click on one index number to edit a profile. 4. Set Dial-In settings to as shown

Vigor2910 Series User’s Guide 226 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel

Vigor2910 Series User’s Guide 2273. In Step 2. Connect to VPN Server, click Insert button to add a new entry. If an IPSec-based service is select

Vigor2910 Series User’s Guide 228server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. 4.

Vigor2910 Series User’s Guide 229 3. Set Inbound/Outbound bandwidth. Note: The rate of outbound/inbound must be smaller than the real bandwidth to

Vigor2910 Series User’s Guide 14 This page is left blank.

Vigor2910 Series User’s Guide 2306. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set

Vigor2910 Series User’s Guide 231Class Name of Index 3. In this index, he will set reserve bandwidth for 1 VPN tunnel. 10. Click edit to open a n

Vigor2910 Series User’s Guide 23244..44 LLAANN –– CCrreeaatteedd bbyy UUssiinngg NNAATT An example of default setting and the corresponding de

Vigor2910 Series User’s Guide 233 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage.

Vigor2910 Series User’s Guide 23444..55 CCaalllliinngg SScceennaarriioo ffoorr VVooIIPP ffuunnccttiioonn 44..55..11 CCaalllliinngg vviiaa SS

Vigor2910 Series User’s Guide 235Example 2: Both John and David have SIP Addresses from the same service provider. John’s SIP URL: [email protected] ,

Vigor2910 Series User’s Guide 23644..55..22 PPeeeerr--ttoo--PPeeeerr CCaalllliinngg Example 3: Arnor and Paulin have Vigor routers respectively. T

Vigor2910 Series User’s Guide 23744..66 UUppggrraaddee FFiirrmmwwaarree ffoorr YYoouurr RRoouutteerr Before upgrading your router firmware, you

Vigor2910 Series User’s Guide 2385. Double click on the router tool icon. The setup wizard will appear. 6. Follow the onscreen instructions to i

Vigor2910 Series User’s Guide 23910. Click Send. 11. Now the firmware update is finished. 44..77 RReeqquueesstt aa cceerrttiiffiiccaattee ffr

Vigor2910 Series User’s Guide 152 CCoonnffiigguurriinngg BBaassiicc SSeettttiinnggss For use the router properly, it is necessary for you to chan

Vigor2910 Series User’s Guide 2402. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate r

Vigor2910 Series User’s Guide 241Select Advanced request. Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request us

Vigor2910 Series User’s Guide 242and you will find the below window showing “------BEGINE CERTIFICATE------...” 6. You may review the detail info

Vigor2910 Series User’s Guide 24344..88 RReeqquueesstt aa CCAA CCeerrttiiffiiccaattee aanndd SSeett aass TTrruusstteedd oonn WWiinnddoowwss

Vigor2910 Series User’s Guide 2442. In Choose file to download, click CA Certificate Current and Base 64 encoded, and Download CA certificate to sav

Vigor2910 Series User’s Guide 24544..99 VVPPNN BBaacckkuupp AApppplliiccaattiioonn You can change, disable or delete VPN Backup profile(s). Yet,

Vigor2910 Series User’s Guide 246WWeebb PPaaggee CChhaannggeess ffoorr VVPPNN BBaacckkuupp Corresponding web page (LAN to LAN) will be change

Vigor2910 Series User’s Guide 247 After adding a new VPN Backup profile, it will be listed in Backup Mode drop-down list for you to choose for dialin

Vigor2910 Series User’s Guide 248 However, if the connection is off-line, Router A will use Member 2 VPN tunnel (with L2TP over IPSec) instead to con

Vigor2910 Series User’s Guide 24944..1100 EERRDD MMeecchhaanniissmm ffoorr VVPPNN BBaacckkuupp To use ERD (Environment Recovery Detection) mech

Vigor2910 Series User’s Guide 163. Now, the Main Screen will pop up. Notice that the main screen differs according to the model of the router that y

Vigor2910 Series User’s Guide 250Request Background: Some of users think it is not really environment recovery detection to borrow VPN tunnels from b

Vigor2910 Series User’s Guide 2515 TTrroouubbllee SShhoooottiinngg This section will guide you to solve abnormal situations if you cannot access i

Vigor2910 Series User’s Guide 252FFoorr WWiinnddoowwss  The example is based on Windows XP. As to the examples for other operation systems, please

Vigor2910 Series User’s Guide 2534. Select Obtain an IP address automatically and Obtain DNS server address automatically. FFoorr MMaaccOOss 1.

Vigor2910 Series User’s Guide 25455..33 PPiinnggiinngg tthhee RRoouutteerr ffrroomm YYoouurr CCoommppuutteerr The default gateway IP address o

Vigor2910 Series User’s Guide 255

Vigor2910 Series User’s Guide 25655..44 CChheecckkiinngg IIff tthhee IISSPP SSeettttiinnggss aarree OOKK oorr NNoott Click WAN>> Inte

Vigor2910 Series User’s Guide 257 55..55 PPrroobblleemmss ffoorr 33GG NNeettwwoorrkk CCoonnnneeccttiioonn When you have trouble in using 3G n

Vigor2910 Series User’s Guide 258 TTrraannssmmiissssiioonn RRaattee iiss nnoott ffaasstt eennoouugghh Please connect your Notebook with 3G USB

Vigor2910 Series User’s Guide 259 HHaarrddwwaarree RReesseett While the router is running (ACT LED blinking), press the Factory Reset button and ho

Vigor2910 Series User’s Guide 1722..22 QQuuiicckk SSttaarrtt WWiizzaarrdd If your router can be under an environment with high speed NAT, the con

Vigor2910 Series User’s Guide 18On the next page as shown below, please select the appropriate Internet access type according to the information from

Vigor2910 Series User’s Guide 19User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the I

Vigor2910 Series User’s Guide iii Vigor2910 Dual-WAN Security Router User’s Guide Version: 4.0 Firmware Version: V3.2.4 Date: 11/05/20

Vigor2910 Series User’s Guide 2022..22..22 PPPPTTPP Click PPTP as the protocol. Type in all the information that your ISP provides for this protoco

Vigor2910 Series User’s Guide 2122..22..33 SSttaattiicc IIPP Click Static IP as the protocol. Type in all the information that your ISP provides f

Vigor2910 Series User’s Guide 2222..22..44 LL22TTPP Click L2TP as the protocol. Type in all the information that your ISP provides for this protoco

Vigor2910 Series User’s Guide 2322..22..55 DDHHCCPP Click DHCP as the protocol. Type in all the information that your ISP provides for this protoco

Vigor2910 Series User’s Guide 2422..33 OOnnlliinnee SSttaattuuss The online status shows the system status, WAN status, ADSL Information and other

Vigor2910 Series User’s Guide 25Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS.

Vigor2910 Series User’s Guide 2622..44 SSaavviinngg CCoonnffiigguurraattiioonn Each time you click OK on the web page for saving the configuration

Vigor2910 Series User’s Guide 273AAddvvaanncceedd WWeebb CCoonnffiigguurraattiioonn After finished basic configuration of the router, you can acce

Vigor2910 Series User’s Guide 2833..11..22 NNeettwwoorrkk CCoonnnneeccttiioonn bbyy 33GG UUSSBB MMooddeemm For 3G mobile communication through

Vigor2910 Series User’s Guide 29 Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN int

Vigor2910 Series User’s Guide ivCopyright Information Copyright Declarations Copyright 2010 All rights reserved. This publication contains informati

Vigor2910 Series User’s Guide 30Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According

Vigor2910 Series User’s Guide 3133..11..44 IInntteerrnneett AAcccceessss For the router supports dual WAN function, the users can set different WA

Vigor2910 Series User’s Guide 32DDeettaaiillss PPaaggee ffoorr PPPPPPooEE To use PPPoE as the accessing protocol of the internet, please choose I

Vigor2910 Series User’s Guide 33None - Disable the backup function. Packet Trigger -The backup line is not on until a packet from a local host trigge

Vigor2910 Series User’s Guide 34address in the box of Fixed IP Address. Default MAC Address – You can use Default MAC Address or specify another MA

Vigor2910 Series User’s Guide 35 Due to the absence of the ISDN interface in some models, the ISDN dial backup feature and its associated setup optio

Vigor2910 Series User’s Guide 36 Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dyn

Vigor2910 Series User’s Guide 37DDeettaaiillss PPaaggee ffoorr PPPPTTPP//LL22TTPP To use PPTP as the accessing protocol of the internet, please c

Vigor2910 Series User’s Guide 38information. None - Disable the backup function. Packet Trigger -The backup line is not on until a packet from a loc

Vigor2910 Series User’s Guide 39WAN IP Network Settings Obtain an IP address automatically – Click this button to obtain the IP address automatically

Vigor2910 Series User’s Guide vEuropean Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Township, HsinCh

Vigor2910 Series User’s Guide 4033..11..55 LLooaadd--BBaallaannccee PPoolliiccyy This router supports the function of load balancing. It can assig

Vigor2910 Series User’s Guide 41 Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the

Vigor2910 Series User’s Guide 4233..22 LLAANN Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network s

Vigor2910 Series User’s Guide 43 WWhhaatt iiss RRoouuttiinngg IInnffoorrmmaattiioonn PPrroottooccooll ((RRIIPP)) Vigor router will exchange rou

Vigor2910 Series User’s Guide 4433..22..22 GGeenneerraall SSeettuupp This page provides you the general settings for LAN. Click LAN to open the LA

Vigor2910 Series User’s Guide 45 Start IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses.

Vigor2910 Series User’s Guide 46of the router, which means the router is the default gateway. DHCP Server IP Address for Relay Agent - Set the IP add

Vigor2910 Series User’s Guide 47Index The number (1 to 10) under Index allows you to open next page to set up static route. Destination Address

Vigor2910 Series User’s Guide 48Note: There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The first is that the LAN inter

Vigor2910 Series User’s Guide 4933..22..44 BBiinndd IIPP ttoo MMAACC This function is used to bind the IP and MAC address in LAN to have a stren

Vigor2910 Series User’s Guide vi

Vigor2910 Series User’s Guide 50Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the ta

Vigor2910 Series User’s Guide 51 Share vpn remote dial in profile – you can share the account set in remote VPN dial-in profiles. Click this button

Vigor2910 Series User’s Guide 52 33..33 NNAATT Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that o

Vigor2910 Series User’s Guide 53 The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Po

Vigor2910 Series User’s Guide 54 Mode Two options are provided here for you to choose. To set a range for the specific service, select Range. Servic

Vigor2910 Series User’s Guide 55 33..33..22 DDMMZZ HHoosstt As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic on

Vigor2910 Series User’s Guide 56The inherent security properties of NAT are somewhat bypassed if you set up DMZ host. We suggest you to add additiona

Vigor2910 Series User’s Guide 57Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this but

Vigor2910 Series User’s Guide 5833..33..33 OOppeenn PPoorrttss Open Ports allows you to open a range of ports for the traffic of special applicati

Vigor2910 Series User’s Guide 59To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each ind

Vigor2910 Series User’s Guide viiTTaabbllee ooff CCoonntteennttss 1 Preface ...

Vigor2910 Series User’s Guide 60to Internet. You can use address mapping function to achieve this demand. Simply type 192.168.1.10 as the Private IP;

Vigor2910 Series User’s Guide 61IP to connect to Internet. If you want to choose any one of the Public IP settings, you must specify some IP addres

Vigor2910 Series User’s Guide 62 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LA

Vigor2910 Series User’s Guide 6333..44..22 IIPP GGrroouupp This page allows you to bind several IP objects into one IP group. Set to Factory De

Vigor2910 Series User’s Guide 6433..44..33 SSeerrvviiccee TTyyppee OObbjjeecctt You can set up to 96 sets of Service Type Objects with differen

Vigor2910 Series User’s Guide 65(!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when the

Vigor2910 Series User’s Guide 66 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Objects page. All

Vigor2910 Series User’s Guide 67 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device

Vigor2910 Series User’s Guide 68 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device

Vigor2910 Series User’s Guide 69 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device

Vigor2910 Series User’s Guide viii3.3.2 DMZ Host...

Vigor2910 Series User’s Guide 70For example, an ActiveX control object is usually used for providing interactive web feature. If malicious code hides

Vigor2910 Series User’s Guide 71 Profile Name Type a name for the CSM profile. Each profile can contain three objects settings, IM Object, P2P Objec

Vigor2910 Series User’s Guide 72 Enable URL Access Control Check the box to activate URL Access Control. Black List (block those matching keyword) Cl

Vigor2910 Series User’s Guide 73 You must clear your browser cache first so that the URL content filtering facility operates properly on a web page

Vigor2910 Series User’s Guide 7433..55..33 WWeebb CCoonntteenntt FFiilltteerr PPrrooffiillee We all know that the content on the Internet just l

Vigor2910 Series User’s Guide 7533..66 FFiirreewwaallll 33..66..11 BBaassiiccss ffoorr FFiirreewwaallll While the broadband users demand more b

Vigor2910 Series User’s Guide 76IIPP FFiilltteerrss Depending on whether there is an existing Internet connection, or in other words “the WAN link

Vigor2910 Series User’s Guide 77DDeenniiaall ooff SSeerrvviiccee ((DDooSS)) DDeeffeennssee The DoS Defense functionality helps you to detect and

Vigor2910 Series User’s Guide 78 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data

Vigor2910 Series User’s Guide 7933..66..33 FFiilltteerr SSeettuupp Click Firewall and click Filter Setup to open the setup page. To edit or add a

Vigor2910 Series User’s Guide ix3.12 ISDN...

Vigor2910 Series User’s Guide 80 Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/descri

Vigor2910 Series User’s Guide 81Address/Range Address/Subnet Address as the Address Type and type them in this dialog. In addition, if you want to us

Vigor2910 Series User’s Guide 82Service Group/Object - Use the drop down list to choose the one that you want. Fragments Specify the action for fr

Vigor2910 Series User’s Guide 83EExxaammppllee As stated before, all the traffic will be separated and arbitrated using on of two IP filters: call f

Vigor2910 Series User’s Guide 8433..66..44 DDooSS DDeeffeennssee As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defen

Vigor2910 Series User’s Guide 85port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the thresho

Vigor2910 Series User’s Guide 86SYN packets with the identical source and destination addresses, as well as the port number to victims. Block Unknown

Vigor2910 Series User’s Guide 8733..77 BBaannddwwiiddtthh MMaannaaggeemmeenntt Below shows the menu items for Bandwidth Management. 33..77..11 S

Vigor2910 Series User’s Guide 88Maximum Sessions Defines the available session number for specific range of IP addresses. If you do not set the sess

Vigor2910 Series User’s Guide 89Default TX limit Define the default speed of the upstream for each computer in LAN. Default RX limit Define the def