Manuale d’uso / di manutenzione del prodotto 2910 del fabbricante Draytek
Vai alla pagina of 235
Vigor2910 Dual-WAN Security Router User’s Guide Version: 3.2 Date: 2007/10/01 Copyright 2007 All rights reserve d. This publication contains information th at is protected by copyright.
Vigor2910 Series User’s Guide ii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation .
Vigor2910 Series User’s Guide iii 3.4 Objects and Groups ......................................................................................................... ..... 57 3.4.1 IP Object .............................................................
Vigor2910 Series User’s Guide iv 3.12.4 Access Control .......................................................................................................... .. 158 3.12.5 WDS......................................................................
Vigor2910 Series User’s Guide v 5 T rouble Shoot ing ........................................................................................... 221 5.1 Checking If the Hardware S tatus Is OK or No t..................................................
.
Vigor2910 Series User’s Guide 1 1 P P r r e e f f a a c c e e The Vigor2910 series router provides Dual-WAN interface (which is a configuration second WAN) for Internet access to make the Internet connection more reliable. The wireless LAN supports more secure features and the transmission speed is up to 108Mbps (SuperG TM ).
Vigor2910 Series User’s Guide 2 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powered of f.
Vigor2910 Series User’s Guide 3 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powe red off.
Vigor2910 Series User’s Guide 4 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 i i L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powered of f.
Vigor2910 Series User’s Guide 5 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powe red off.
Vigor2910 Series User’s Guide 6 1 1 . . 2 2 . . 5 5 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is p owered off.
Vigor2910 Series User’s Guide 7 1 1 . . 2 2 . . 6 6 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V G G i i L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly.
Vigor2910 Series User’s Guide 8 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect this device to a router/modem with an Ethernet cable.
Vigor2910 Series User’s Guide 9 1 1 . . 4 4 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router.
Vigor2910 Series User’s Guide 10 3. Open File->Add a New Computer . A welcome dialog will appear. Please click Next . 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port .
Vigor2910 Series User’s Guide 11 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port nam e. Then, click Next . 7. Click Standard and choose Generic Network Card.
Vigor2910 Series User’s Guide 12 9. Now, your system will ask you t o choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC.
Vigor2910 Series User’s Guide 13 Note 1: Some printers with the fax/scanning or othe r additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.
Vigor2910 Series User’s Guide 14.
Vigor2910 Series User’s Guide 15 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings.
Vigor2910 Series User’s Guide 16 3. Now, the Main Screen will pop up. Notice that the main screen differs according to the model of the router that you have. Below is an example. 4. Go to System Maintenance page and choose Administrator Password . 5.
Vigor2910 Series User’s Guide 17 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y.
Vigor2910 Series User’s Guide 18 On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. Fo r example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step.
Vigor2910 Series User’s Guide 19 User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password for confirmation. Click Next for viewing summary of such connection.
Vigor2910 Series User’s Guide 20 2 2 . . 2 2 . . 2 2 P P P P T T P P Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear.
Vigor2910 Series User’s Guide 21 2 2 . . 2 2 . . 3 3 S S t t a a t t i i c c I I P P Click Static IP as the protocol. Type in all the inform ation that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page.
Vigor2910 Series User’s Guide 22 2 2 . . 2 2 . . 4 4 L L 2 2 T T P P Click L2TP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish.
Vigor2910 Series User’s Guide 23 2 2 . . 2 2 . . 5 5 D D H H C C P P Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish.
Vigor2910 Series User’s Guide 24 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE as the protocol, you will find out a button of Dial PPPoE or Dial PPPoE i n the Online Status web page.
Vigor2910 Series User’s Guide 25 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface.
Vigor2910 Series User’s Guide 26 2 2 . . 4 4 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you.
Vigor2910 Series User’s Guide 27 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease.
Vigor2910 Series User’s Guide 28 3 3 . . 1 1 . . 2 2 N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n b b y y 3 3 G G U U S S B B M M o o d d e e m m For 3G mobile communication through Access Point is popular more and more, Vigor 2910 adds the function of 3G network connection for such purpose.
Vigor2910 Series User’s Guide 29 Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface.
Vigor2910 Series User’s Guide 30 Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed .
Vigor2910 Series User’s Guide 31 3 3 . . 1 1 . . 4 4 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent Physical Mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly.
Vigor2910 Series User’s Guide 32 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E To use PPPoE as the accessing protocol of the internet, please choose Internet Acce ss fro m WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown.
Vigor2910 Series User’s Guide 33 Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. WAN Connection Detection Such function allows you to ve rify whether network connection is alive or not through ARP Detect or Ping Detect.
Vigor2910 Series User’s Guide 34 Specify a MAC Address – Type the MAC address f or the router manually. After finishing all the settings here, please click OK to activate them.
Vigor2910 Series User’s Guide 35 None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection.
Vigor2910 Series User’s Guide 36 Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dynamic IP mode. Router Name : Type in the router name provided by ISP. Domain Name : Type in the domain name that you have assigned.
Vigor2910 Series User’s Guide 37 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P T T P P / / L L 2 2 T T P P To use PPTP as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPTP mode for WAN2.
Vigor2910 Series User’s Guide 38 PPP Setup PPP Authentication - Select PAP only or PAP or CHAP for PPP. Idle Timeout - Set the timeout for breaking down the Internet after passing through the time without any action. This setting is active only when the Active on demand option for Active Mode is selected in WAN>> General Setup page.
Vigor2910 Series User’s Guide 39 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P To use PPP (for 3G USB Modem) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPP mode for WAN2.
Vigor2910 Series User’s Guide 40 Index Click the number of index to access into the load-balance policy configuration web page. Enable Check this box to enable this policy. Protocol Use the drop-down menu to change the protocol for t he WAN interface.
Vigor2910 Series User’s Guide 41 Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. Binding WAN interface Choose the WAN interface (WAN1 or WAN2) for binding. Src IP Start Type the source IP start for the specified WAN interface.
Vigor2910 Series User’s Guide 42 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 .
Vigor2910 Series User’s Guide 43 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing.
Vigor2910 Series User’s Guide 44 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in private IP address for connecting to a local private network (Default: 192.
Vigor2910 Series User’s Guide 45 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.
Vigor2910 Series User’s Guide 46 of the router , which means the router is the default gateway . DHCP Server IP Addr ess for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server .
Vigor2910 Series User’s Guide 47 Index The number (1 to 10) unde r Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference.
Vigor2910 Series User’s Guide 48 Note : There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subnet (192. 168.1.0/24).
Vigor2910 Series User’s Guide 49 3 3 . . 2 2 . . 4 4 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthen control i n network. When this functi on is enabled, all the assigne d IP and MAC address binding together cannot be changed.
Vigor2910 Series User’s Guide 50 Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List . Edit It allows you to edit and modify the selected IP address and MAC address that you create before.
Vigor2910 Series User’s Guide 51 Since the server is actually located inside th e LAN, the network well protected by NAT of the router, and identified by its private IP address/port, the goal of Po .
Vigor2910 Series User’s Guide 52 Public Port Specify which port can be redirected to the specified Private IP and Port of the internal host. If you choose Range as the port redirection mode, you will see two boxes on this field. Simply type the required number on the first box.
Vigor2910 Series User’s Guide 53 clients will continue to work w ithout inappropriate interruption. DMZ Ho s t allows a defined internal user to be totally exposed to th e Internet, which usually helps some special applications such as Netmeeting or Internet Games etc.
Vigor2910 Series User’s Guide 54 MAC Address of the True IP DMZ Host If you choose Active True IP as the selection for DMZ host, please type in MAC address in these fields.
Vigor2910 Series User’s Guide 55 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc.
Vigor2910 Series User’s Guide 56 To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Enable Open Ports Check to enable this entry.
Vigor2910 Series User’s Guide 57 3 3 . . 4 4 O O b b j j e e c c t t s s a a n n d d G G r r o o u u p p s s For IPs in a range and service ports in a limited range usually will be applied in configuri ng router’s settings, therefore we can define them with objects and bind them with groups for using conveniently.
Vigor2910 Series User’s Guide 58 Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address.
Vigor2910 Series User’s Guide 59 3 3 . . 4 4 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail.
Vigor2910 Series User’s Guide 60 3 3 . . 4 4 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail.
Vigor2910 Series User’s Guide 61 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when th e first and last values are different, it indicates that all the ports except the range defined here are available for this service type.
Vigor2910 Series User’s Guide 62 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Objects page. All the available IP objects will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box.
Vigor2910 Series User’s Guide 63 Profile Name Type a name for the CSM profile. The profile name will be shown on the Content Security Management drop down list in the pages of Firewall>>General Setup and Firewall>>Edit Filter Set>>Edit Filter Rule.
Vigor2910 Series User’s Guide 64 3 3 . . 5 5 F F i i r r e e w w a a l l l l 3 3 . . 5 5 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned.
Vigor2910 Series User’s Guide 65 I I P P F F i i l l t t e e r r s s Depending on whether there is an existing Internet connection, or in other words “the WAN link status is up or down”, the IP filter architecture categorizes traffic into two: Call Filter and Data Filter .
Vigor2910 Series User’s Guide 66 C C o o n n t t e e n n t t S S e e c c u u r r i i t t y y M M a a n n a a g g e e m m e e n n t t ( ( C C S S M M ) ) As the popularity of all kinds of instant messenger application arises, communication cannot become much easier.
Vigor2910 Series User’s Guide 67 W W e e b b F F i i l l t t e e r r i i n n g g We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible pare nt or employer, you should protect those in your trust against the hazards.
Vigor2910 Series User’s Guide 68 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter.
Vigor2910 Series User’s Guide 69 Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the button will open Edit Filter Rule web page. For the detailed information, refer to the following page. Active Enable or disable the filter rule.
Vigor2910 Series User’s Guide 70 Applications >> Schedule setup. The default setting of this filed is blank and the function will always work. Direction Set the direction of packet flow (LAN->WAN/WAN->LAN).
Vigor2910 Series User’s Guide 71 To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In ad dition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type.
Vigor2910 Series User’s Guide 72 For troubleshooting needs, you can specify to record Filter information by checking the Syslog box. It will be sent to Syslog server . Please refer to secti on 3.14.4 Syslog/Mail Alert for m ore detailed information.
Vigor2910 Series User’s Guide 73.
Vigor2910 Series User’s Guide 74 3 3 . . 5 5 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default.
Vigor2910 Series User’s Guide 75 port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the box to activate the Block IP options function.
Vigor2910 Series User’s Guide 76 SYN packets with the identical source and destination addresses, as well as the port number to victims. Block Unknown Protocol Check the box to activate the Block Unknown Protocol function. Individual IP packet has a protocol field in the datagram header to indicate the protocol type running over the upper layer.
Vigor2910 Series User’s Guide 77 3 3 . . 5 5 . . 5 5 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r Based on the list of user defined keywords, the URL Content Filter facility in Vigor router inspects the URL string in every outgoing HTTP request.
Vigor2910 Series User’s Guide 78 decline the connection request to the website whose URL string matched to any user-defined keyword. It should be noticed that the more simplified the blocking ke yword list, the more efficiently the Vigor router perform.
Vigor2910 Series User’s Guide 79 3 3 . . 5 5 . . 6 6 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r Click Firewall and click Web Content Filter to open the setup page. For this section, please refer to Web Content Filter user’s guide.
Vigor2910 Series User’s Guide 80 3 3 . . 6 6 B B a a n n d d w w i i d d t t h h M M a a n n a a g g e e m m e e n n t t Below shows the menu items for Bandwidth Management. 3 3 . . 6 6 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router.
Vigor2910 Series User’s Guide 81 Maximum Sessions Defines the available session number for specific range of IP addresses. If you do not set the session number in this field, the system will use the defa ult session limit for the specific limitation you set for each index.
Vigor2910 Series User’s Guide 82 Limitation List Display a list of specific limitations that you set on this web page. Start IP Define the start IP address for limit bandwidth. End IP Define the end IP address for limit bandwidth. TX limit Define the limitation for the speed of the upstream.
Vigor2910 Series User’s Guide 83 In a QoS-enabled network, or Differentiated Service (DiffServ or DS) framework, a DS domain owner should sign a Service License Agreement (SLA) with other DS domain owners to define the service level provided to ward traffic from different domains.
Vigor2910 Series User’s Guide 84 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN- apply to incoming traffic only. OUT- apply to outgoing traffic only.
Vigor2910 Series User’s Guide 85 On Line Statistics Display an online statistics for quality of service for your reference. E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity.
Vigor2910 Series User’s Guide 86 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Source Address Click the SrcEdit button to set the source address for the rule. Destination Address Click the DestEdit button to set the destination address for the rule.
Vigor2910 Series User’s Guide 87 E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field.
Vigor2910 Series User’s Guide 88 Service Name Type in a new service for your request. Service Type Choose the t ype (TCP, UDP or TCP/UDP) for the new service. Port Configuration Click Single or Range . If you select Range, you have to type in the starting port number and the end porting num ber on the boxes below.
Vigor2910 Series User’s Guide 89 3 3 . . 7 7 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 7 7 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP.
Vigor2910 Series User’s Guide 90 Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. View Log Display DDNS log status. Force Update Force the router updates its information to DDNS server.
Vigor2910 Series User’s Guide 91 In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. 3 3 . . 7 7 . . 2 2 S S c c h h e e d d u u l l e e The Vigor router has a built-in real time clock which can update itself manually or automatically by means of Network Time Protocols (NTP).
Vigor2910 Series User’s Guide 92 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule.
Vigor2910 Series User’s Guide 93 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE In ternet access profile.
Vigor2910 Series User’s Guide 94 3 3 . . 7 7 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system.
Vigor2910 Series User’s Guide 95 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Softw are Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will blo ck the accessing ability of some network ports.
Vigor2910 Series User’s Guide 96 Wake by Two types provide for you to wake up the binded IP . If you choose Wake by MAC Address, you have to type the correct MAC address of the host in MAC Address boxes. If you choose Wake by IP Address, you have to choose the correct IP address.
Vigor2910 Series User’s Guide 97 3 3 . . 8 8 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet.
Vigor2910 Series User’s Guide 98 Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol. PAP or CHAP Selecting this option means the router will attem pt to authenticate dial-in users with th e CHAP protocol first.
Vigor2910 Series User’s Guide 99 3 3 . . 8 8 . . 3 3 I I P P S S e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPSec General Setup, there are two major parts of configuration.
Vigor2910 Series User’s Guide 100 active. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. 3 3 .
Vigor2910 Series User’s Guide 101 Profile Name Type in a name in this file. Enable this account Check this box to enable su ch profile. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value.
Vigor2910 Series User’s Guide 102 3 3 . . 8 8 . . 5 5 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection.
Vigor2910 Series User’s Guide 103 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds.
Vigor2910 Series User’s Guide 104 select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. Password This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above.
Vigor2910 Series User’s Guide 105 3 3 . . 8 8 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles.
Vigor2910 Series User’s Guide 106 Click each index to edit each profile and y ou will get the following page. Each LAN-to-LAN profile includes 4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields.
Vigor2910 Series User’s Guide 107 VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router will use WAN1 as the first channel for VPN connection.
Vigor2910 Series User’s Guide 108 of remote server. You can further set up Callback (CBCP) function below. This feature is useful for i model only. PPTP Build a PPTP VPN connection to the server through the Internet. You should set the identity like User Name and Password below for the authentication of remote server.
Vigor2910 Series User’s Guide 109 algorithm and apply MD5 or SHA-1 authentication algorithm. AES without Authentication -Use AES encryption algorithm and not apply any authentication scheme. AES with Authentication- Use AES encryption algorithm and apply MD5 or SHA-1 authentication algorithm.
Vigor2910 Series User’s Guide 110 IKE phase 2 proposal- To propose the local available algorithms to the VPN peers, and get its feedback to find a match. Three combinations are available for both modes. We suggest you select the combination that covers the most algorithms.
Vigor2910 Series User’s Guide 111 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN connection. You should set the User Name and Password of remote dial-in user below. This feature is useful for i model only.
Vigor2910 Series User’s Guide 112 VPN Gateway peer ID (should be the same with the ID setting in dial-in type) by checking the box. Enter Peer ISDN number if you select ISDN above (This feature is useful for i model only.). Also, you should further specify the corresponding security methods on the right side.
Vigor2910 Series User’s Guide 113 automatically per callback connection. The default value 0 means no limitation of callback period. My WAN IP This field is only applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. The default value is 0.
Vigor2910 Series User’s Guide 114 3 3 . . 8 8 . . 7 7 V V P P N N T T R R U U N N K K M M a a n n a a g g e e m m e e n n t t VPN TRUNK Management is a backup mechanis m to set multiple VPN tunnels for using as backup tunnel. It can assure the network connection would not be cut off due to network environment blocked by any reason.
Vigor2910 Series User’s Guide 115 field) ”x” means such profile is disabled. Name (on Backup Profile field) Display the name of VPN TRUNK profile. Member1 (on Backup Profile field) Display the dial-out profile selected from the Member1 drop down list below.
Vigor2910 Series User’s Guide 116 T T i i m m e e f f o o r r a a c c t t i i v v a a t t i i n n g g V V P P N N T T R R U U N N K K p p r r o o f f i i l l e e VPN TRUNK backup will be activated automati cally after the initial connection of single VPN Tunnel off-line.
Vigor2910 Series User’s Guide 117 3 3 . . 8 8 . . 8 8 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button.
Vigor2910 Series User’s Guide 118 Refresh Seconds Choose the time for refresh the dial inform ation among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. Note: The status of LAN to LAN for ISDN is shown on the page of Online Status .
Vigor2910 Series User’s Guide 119 3 3 . . 9 9 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc.
Vigor2910 Series User’s Guide 120 Type in all the information that the window request. Then click Generate again. Import Click this button to im port a saved file as the certification information. Refresh Click this button to refresh the information listed below.
Vigor2910 Series User’s Guide 121 3 3 . . 9 9 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window.
Vigor2910 Series User’s Guide 122 3 3 . . 9 9 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them .
Vigor2910 Series User’s Guide 123 3 3 . . 1 1 0 0 V V o o I I P P Voice over IP network (VoIP) enables you to use your broadband Internet connection to make toll quality voice calls over the Internet. There are many different call signaling protocols, methods by which VoIP devices can talk to each other.
Vigor2910 Series User’s Guide 124 only have to using dial plan or directly dial your friend’s account name if you are with the same SIP Registrar. Please refer to the section 4.5.1. z Peer-to-Peer Before calling, you have to know your friend’s IP Address.
Vigor2910 Series User’s Guide 125 Click any index number to display the dial plan setup page. Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen.
Vigor2910 Series User’s Guide 126 This page will differ for different models. Below is a sample page obtained from Vigor 2910VGi. The selection of Loop through and Backup Phone Number is only available for 2910VGi model. Enable Click this to enable this entry.
Vigor2910 Series User’s Guide 127 D D i i g g i i t t M M a a p p For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface.
Vigor2910 Series User’s Guide 128 SIP server. OP Number The front number you type here is the first part of the account number that you want to execute special function (according to the chosen mode) by using the prefix num ber. Min Len Set the minimal length of the dial number for appl ying the prefix number settings.
Vigor2910 Series User’s Guide 129 Profile Display the profile name of the account. Domain/Realm Display the domain name or IP address of the SIP registrar server. Proxy Display the domain name or IP address of the SIP proxy server. Account Name Display the account name of SIP address before @.
Vigor2910 Series User’s Guide 130 The system will select a proper way for your VoIP call. SIP Port Set the port number for sending/receiving SIP message for building a session. The default value is 5060. Your peer must set the same value in his/her Registrar.
Vigor2910 Series User’s Guide 131 Ring Pattern Choose a ring tone type for the VoIP phone call. Below shows successful SIP accounts for your reference. 3 3 . . 1 1 0 0 . . 3 3 P P h h o o n n e e S S e e t t t t i i n n g g s s This page allows user to set phone settings for VoIP 1 and VoIP 2 respectively.
Vigor2910 Series User’s Guide 132 shown in this field for your reference. You can click the number below the Index field to change it for each phone port. Tone - Display the tone settings that configured in the advanced settings page of Phone Index.
Vigor2910 Series User’s Guide 133 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically.
Vigor2910 Series User’s Guide 134 profiles. Refer to section 3.10.1 DialPlan – Phone Book for detailed configuration. Call Waiting Check this box to invoke this function. A notice sound will appear to tell the user new phone call is waiting for your response.
Vigor2910 Series User’s Guide 135 To change ISDN call into VoIP call, please dial the character in this field for transferring. The character that you can type can be *, #, and 0~9. To VoIP (for ISDN) - The router is set by using VoIP call. To change VoIP call into ISDN call, please dial the character in this field for transferring.
Vigor2910 Series User’s Guide 136 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Caller ID Type There are several standards provided here for displaying the caller ID on the panel of the telephone set.
Vigor2910 Series User’s Guide 137 to the remote end with SIP message. Payload Type (rfc2833) Choose a number from 96 to 127, the default value was 101.
Vigor2910 Series User’s Guide 138 SIP URL – Type in the SIP URL (e.g., aaa@draytel.org or abc@iptel.org) as the site for call forwarded. Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) mode Set a period of peace time without disturbing by VoIP phone call.
Vigor2910 Series User’s Guide 139 invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile names for the accounts as the default one for this phone setting.
Vigor2910 Series User’s Guide 140 User Defined and fill out the corresponding values for dial tone, ringing tone, busy to ne, congestion tone by yourself for VoIP phone. Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication.
Vigor2910 Series User’s Guide 141 Payload Type (rfc2833) - Choose a nu mber from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. Disallow VoIP to ISDN Calls with the Following Prefixes Set the prefix of the phone number to forbid the user dialing through VoIP to ISDN.
Vigor2910 Series User’s Guide 142 2910VGi only. For other V models, only the status for VoIP1 and VoIP2 will be shown in this page. Status It shows the VoIP connection status. IDLE - Indicates that the VoIP function is idle. HANG_UP - Indicates that the connection is not established (busy tone).
Vigor2910 Series User’s Guide 143 ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local ISDN network, you should choose the correct country code. Own Number Enter your ISDN number. Every outgoing call will carry the number to the receiver.
Vigor2910 Series User’s Guide 144 3 3 . . 1 1 1 1 . . 2 2 D D i i a a l l i i n n g g t t o o a a S S i i n n g g l l e e I I S S P P If you access the Internet via a single ISP, press this link. ISP Name Enter your ISP name. Dial Number Enter the ISDN access number provided by your ISP.
Vigor2910 Series User’s Guide 145 Yes t o invoke this function and enter the IP address in the field of Fixed IP Address . Fixed IP Address Type the IP address. 3 3 . . 1 1 1 1 . . 3 3 D D i i a a l l i i n n g g t t o o D D u u a a l l I I S S P P s s If you have more than one ISP, press this link to confi gure two ISP dialup profiles.
Vigor2910 Series User’s Guide 146 As depicted in the above application scenario , the V irtual T A client can make an outgoing call or accept an incoming call to/from a peer F AX machine or ISDN T A, etc. Before describing the configuration of Virtua l TA in the Vigor routers, please heed the following limitations.
Vigor2910 Series User’s Guide 147 I I n n s s t t a a l l l l a a V V i i r r t t u u a a l l T T A A C C l l i i e e n n t t 1. Insert the CD-ROM bundled with your V igor router . Find VT A Client tool in the Utility menu and click on the Install button.
Vigor2910 Series User’s Guide 148 Click the V irtual T A Login tab to launch the login box. Enter the Username/Password and then click OK . After a short time, the VT icon text will turn green.
Vigor2910 Series User’s Guide 149 3 3 . . 1 1 1 1 . . 5 5 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router ( only for the ISDN m odels) be remotely activated, or be able to dial up to the ISP via the ISDN interface.
Vigor2910 Series User’s Guide 150 PPP Authentication It specifies th e PPP authentication method for PPP/MP connections. Normally you can set it to PA P / C H A P for better compatibility . TCP Header Compression VJ Compr ession - It is used for TCP/IP protocol header compression.
Vigor2910 Series User’s Guide 151 3 3 . . 1 1 2 2 W W i i r r e e l l e e s s s s L L A A N N This function is used for G models only. 3 3 . . 1 1 2 2 . . 1 1 B B a a s s i i c c C C o o n n c c e e p p t t s s Over recent years, the market for wireless co mmunications has enjoyed tremendous growth.
Vigor2910 Series User’s Guide 152 WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit ke y. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys.
Vigor2910 Series User’s Guide 153 Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons. To isolate means neither of the parties can access each othe r.
Vigor2910 Series User’s Guide 154 3 3 . . 1 1 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information.
Vigor2910 Series User’s Guide 155 selected channel is under serious interference. Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN.
Vigor2910 Series User’s Guide 156 3 3 . . 1 1 2 2 . . 3 3 S S e e c c u u r r i i t t y y By clicking the Security Settings , a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose.
Vigor2910 Series User’s Guide 157 either Mixed or WPA2 only in the field below. Since the key will be auto-negotiated during authentication, the field of key setting below will be not available for input.
Vigor2910 Series User’s Guide 158 3 3 . . 1 1 2 2 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l For additional security of wireless access, the Access Control facility allows you to restrict the network access right by controlling the wire less LAN MAC address of client.
Vigor2910 Series User’s Guide 159 OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. 3 3 . . 1 1 2 2 . . 5 5 W W D D S S WDS means Wireless Distribution Syste m. It is a protocol for connecting two access points (AP) wirelessly.
Vigor2910 Series User’s Guide 160 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2.
Vigor2910 Series User’s Guide 161 Security There are thr ee types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Check this box to use the same key set in Security Settings page.
Vigor2910 Series User’s Guide 162 If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page and click Add . Later, the MAC address of the AP will be added to the page of WDS setting. 3 3 . . 1 1 2 2 .
Vigor2910 Series User’s Guide 163 3 3 . . 1 1 2 2 . . 8 8 S S t t a a t t i i o o n n R R a a t t e e C C o o n n t t r r o o l l This page allows you to cont rol the upload and download rate of each wireless client (station). Please check the box of Enable to invoke this setting.
Vigor2910 Series User’s Guide 164 Enable Check this box to enable this function (for VLAN Configuration). P1 – P4 Check the box to make the com puter connecting to the port being grouped in specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box.
Vigor2910 Series User’s Guide 165 The VLAN >> Wireless VALN allows you to configure Wireless VLAN settings through wireless connection to achieve the above intention. Sim ply type Login ID and password with City and 1234 in the boxes of W_VLAN0.
Vigor2910 Series User’s Guide 166 Password Type password for different groups of W_VLAN with 1 to 11 characters. Details Click this button to set additional attributes settings for W_VLAN. Activated Date – Use the drop down lists to set the activated date for the wireless VLAN.
Vigor2910 Series User’s Guide 167 4. When the accessing is successful, the following screen will appear. Note: The floating window with connection tim e will be shown on the screen till you logout. 5. You can go to Diagnostics>>Wireless VLAN Online Station for viewing the connection status whenever you want.
Vigor2910 Series User’s Guide 168 3 3 . . 1 1 3 3 . . 3 3 V V L L A A N N C C r r o o s s s s S S e e t t u u p p This function allows the router to integr ate VLAN and W_VLAN for managing different computers (notebooks). See the following picture for an exam ple.
Vigor2910 Series User’s Guide 169 Enable Check this box to invoke VLAN Cross Setup function. VLAN0-3 It represents the groups of virtual LAN connected by Ethernet interface. W_VLAN0-15 It represents the groups of wireless VLAN communicated by wireless interface.
Vigor2910 Series User’s Guide 170 3 3 . . 1 1 4 4 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade.
Vigor2910 Series User’s Guide 171 DHCP Server Display the current status of DHCP server of the LAN interface. MAC Address Display the MAC address of the WAN Interface. IP Address Display the IP address of the WAN interface. Default Gateway Display the assigned IP address of the default gateway.
Vigor2910 Series User’s Guide 172 VigorACS}:8080/ACSServer/services/ACSServlet If the connected CPE does not need to be authenticated please set URL as the following: http://{IP address of VigorACS}:8080/ACSServer/services/UnAuthACSServ let Username/Password Type username and password for ACS Server for authentication.
Vigor2910 Series User’s Guide 173 2. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. 3. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself.
Vigor2910 Series User’s Guide 174 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Go to System Maintenance >> Configuration Backup . The following windows will be popped-up, as shown below. 2. Click Browse button to choose the correct confi guration file for uploading to the router.
Vigor2910 Series User’s Guide 175 Enable syslog message Check the box listed on this web page to send the corresponding message of firewall, VPN, User Access, Call, WAN, Router/DSL information to Syslog. SMTP Server The IP address of the SMTP server.
Vigor2910 Series User’s Guide 176 3 3 . . 1 1 4 4 . . 6 6 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from.
Vigor2910 Series User’s Guide 177 3 3 . . 1 1 4 4 . . 7 7 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. For example, as to management ac cess control, the port number is used to send/receive SIP message for building a session.
Vigor2910 Series User’s Guide 178 Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a pr oper name.
Vigor2910 Series User’s Guide 179 3 3 . . 1 1 4 4 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools.
Vigor2910 Series User’s Guide 180 3 3 . . 1 1 5 5 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router.
Vigor2910 Series User’s Guide 181 3 3 . . 1 1 5 5 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page.
Vigor2910 Series User’s Guide 182 3 3 . . 1 1 5 5 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc.
Vigor2910 Series User’s Guide 183 Peer IP:Port It indicates the destination IP address and port of remote host. Interface It indicates the interface of the WAN connection.
Vigor2910 Series User’s Guide 184 Enable Data Flow Monitor Check this box to enable this function. Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh th is page manually.
Vigor2910 Series User’s Guide 185 minutes. The remaining time will be shown on the session column. 3 3 . . 1 1 3 3 . . 8 8 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1 Bandwidth/WAN2 Bandwidth or Sessions for viewing different traffic graph.
Vigor2910 Series User’s Guide 186 3 3 . . 1 1 5 5 . . 9 9 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determ ined by the router automatically.
Vigor2910 Series User’s Guide 187 Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically. Host/IP Address It indicates the IP address of the host.
Vigor2910 Series User’s Guide 188 This page is left blank..
Vigor2910 Series User’s Guide 189 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A .
Vigor2910 Series User’s Guide 190 set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection.
Vigor2910 Series User’s Guide 191 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection.
Vigor2910 Series User’s Guide 192 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Settings in Router B in the remote office: 1.
Vigor2910 Series User’s Guide 193 parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection.
Vigor2910 Series User’s Guide 194 Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection.
Vigor2910 Series User’s Guide 195 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets des tined to the remote network to Router A via the VPN connection.
Vigor2910 Series User’s Guide 196 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w .
Vigor2910 Series User’s Guide 197 3. Go to Remote Dial-In Users . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection.
Vigor2910 Series User’s Guide 198 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel t o Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel.
Vigor2910 Series User’s Guide 199 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router.
Vigor2910 Series User’s Guide 200 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children.
Vigor2910 Series User’s Guide 201 3. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserve bandwidth for HTTPS. And click Basic button on the right. 4. Click Setup link for W AN1. Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic of V oIP influent other application.
Vigor2910 Series User’s Guide 202 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/ Subnet Mask is 192.
Vigor2910 Series User’s Guide 203 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage..
Vigor2910 Series User’s Guide 204 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers.
Vigor2910 Series User’s Guide 205 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.
Vigor2910 Series User’s Guide 206 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respectively, they can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling.
Vigor2910 Series User’s Guide 207 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools.
Vigor2910 Series User’s Guide 208 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility .
Vigor2910 Series User’s Guide 209 14. Click Send . 15. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a .
Vigor2910 Series User’s Guide 210 1. Go to Certificate Management and choose Local Certificate . 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.
Vigor2910 Series User’s Guide 211 4. Connect to CA server via web browser. Follo w the instruction to subm it the request. Below we take a Windows 2000 CA server for example.
Vigor2910 Series User’s Guide 212 Then you have done the request and the ser ver now issues you a certificate. Select Base 64 encoded certificate and Download CA certificate . Now you should get a certificate (.cer file) and save it. 5. Back to Vigor router, go to Local Certificate .
Vigor2910 Series User’s Guide 213 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1.
Vigor2910 Series User’s Guide 214 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.
Vigor2910 Series User’s Guide 215 4 4 . . 9 9 V V P P N N T T R R U U N N K K A A p p p p l l i i c c a a t t i i o o n n You can change, disable or delete VPN TRUNK backup profile(s). Yet, the relational web pages in LAN-to-LAN also will be change d slightly.
Vigor2910 Series User’s Guide 216 W W e e b b P P a a g g e e C C h h a a n n g g e e s s f f o o r r V V P P N N T T R R U U N N K K Corresponding web page (LAN-to-LAN) will be changed if VPN TRUNK is enabled. Refer to the following figures. Dial-in call direction and Idle Timeout will be dimmish and cannot be used.
Vigor2910 Series User’s Guide 217 After adding a new VPN TRUNK profile, it will be listed in Backup Mode drop-down list for you to choose for dialing. Examples for VPN TRUNK Backup Profile Here provides two situations that you can take advantages of VPN TRUNK backup profile mechanism.
Vigor2910 Series User’s Guide 218 However, if the connection is off-line, Rout er A will use Member 2 VPN tunnel (with L2TP over IPSec) instead to connect Router B right away. Example 2: Subsidiary in Asia can use vigor ro uter as VPN client. Every da y it should transmit ERP, Mail or order inform ation to headquarter in Europe.
Vigor2910 Series User’s Guide 219 4 4 . . 1 1 0 0 E E R R D D M M e e c c h h a a n n i i s s m m f f o o r r V V P P N N T T R R U U N N K K To use ERD (Environment Recovery Detection) mechanism for VPN TRUNK, please follow the steps listed below: 1.
Vigor2910 Series User’s Guide 220 Detect VPN connection periodically (by setting value for “second”). If VPN server for Member 1 has completed the network connection, current VPN Tunnel backup connection will be off-line.
Vigor2910 Series User’s Guide 221 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration.
Vigor2910 Series User’s Guide 222 F F o o r r W W i i n n d d o o w w s s The example is based on Windows XP. As to the examples for other operation systems, please refer to the si milar steps or find support notes in www.draytek.com . 1. Go to Control Panel and then double-click on Network Connection s.
Vigor2910 Series User’s Guide 223 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network .
Vigor2910 Series User’s Guide 224 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router.
Vigor2910 Series User’s Guide 225.
Vigor2910 Series User’s Guide 226 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly.
Vigor2910 Series User’s Guide 227 5 5 . . 5 5 P P r r o o b b l l e e m m s s f f o o r r 3 3 G G N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n When you have trouble in using 3.
Vigor2910 Series User’s Guide 228 T T r r a a n n s s m m i i s s s s i i o o n n R R a a t t e e i i s s n n o o t t f f a a s s t t e e n n o o u u g g h h Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor2910.
Vigor2910 Series User’s Guide 229 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly , please re lease the button.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Draytek 2910 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Draytek 2910 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Draytek 2910 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Draytek 2910 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Draytek 2910, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Draytek 2910.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Draytek 2910. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Draytek 2910 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
