Manuale d’uso / di manutenzione del prodotto Vigor 2820VSn del fabbricante Draytek
Vai alla pagina of 269
Vigor2820 Series ADSL2/2+ Security Firewall User’s Guide Version: 2.1 Date: 2008/10/13.
Vigor2820 Series User’s Guide ii Copyright Information Copyright Declarations Copyright 2008 All rights reserved. This pub lication contains information that is protected by copyright.
Vigor2820 Series User’s Guide iii European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou County, H sinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor2820 Ser ies Router DrayTek Corp.
Vigor2820 Series User’s Guide iv T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation .
Vigor2820 Series User’s Guide v 3.4 Fire wall ................................................................................................................... ............... 74 3.4.1 Basics for Fire wall..........................................
Vigor2820 Series User’s Guide vi 3.12.3 Dial to Si ngle/Dual ISPs.............................................................................................. 18 3 3.12.4 Call Control ................................................................
Vigor2820 Series User’s Guide vii 5 T rouble Shoot ing ........................................................................................... 253 5.1 Checking If the Hardware S t atus Is OK or No t...............................................
.
Vigor2820 Series User’s Guide 1 1 P P r r e e f f a a c c e e Vigor2820 series is an ADSL and broadband router with WAN interface. It provides policy-based load-balance, fail-over and BOD (B andwidth on Demand), also it integrates IP layer QoS, NAT session/bandwidth managem ent to help users control works well with large bandwidth.
Vigor2820 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor router, please ge t acquainted with the LED indicators and connectors first.
Vigor2820 Series User’s Guide 3 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 4 Interface Description Factory Reset Restore the def ault settings. Us age: T urn on the router (ACT LED is blinking). Press the hole and keep fo r more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, release the button.
Vigor2820 Series User’s Guide 5 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 6 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on for 2 seconds to wait for client device makin g network c onnection th rough WPS. Press "Wireless LAN ON/OFF/WPS" button once to enab le (WLAN LED on) or disa ble (WLAN LED off) wireless c onnection.
Vigor2820 Series User’s Guide 7 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 8 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on for 2 seconds to wait for client device makin g network c onnection th rough WPS. Press "Wireless LAN ON/OFF/WPS" button once to enab le (WLAN LED on) or disa ble (WLAN LED off) wireless c onnection.
Vigor2820 Series User’s Guide 9 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V S S LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 10 On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On The port is conn ected with 1000Mbps. LAN 1(Giga) Right LED (Green) Off The port is di sconnected wit h 10/100Mb ps.
Vigor2820 Series User’s Guide 11 1 1 . . 2 2 . . 5 5 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V S S n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 12 On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On The port is conn ected with 1000Mbps. LAN 1(Giga) Right LED (Green) Off The port is di sconnected wit h 10/100Mb ps.
Vigor2820 Series User’s Guide 13 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the ADSL interface to the external ADSL splitter with an ADSL line cable for all models.
Vigor2820 Series User’s Guide 14 For the hardware connection, we take “n” model as an example. Caution : Each of the Phone ports can be connected to an analog phone onl y. Do not connect the phone ports to the telephone wall jack. Such connection might damage your router.
Vigor2820 Series User’s Guide 15 1 1 . . 5 5 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router.
Vigor2820 Series User’s Guide 16 3. Open File->Add a New Computer . A welcome dialog will appear. Please click Next . 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port .
Vigor2820 Series User’s Guide 17 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port nam e. Then, click Next . 7. Click Standard and choose Generic Network Card.
Vigor2820 Series User’s Guide 18 9. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC.
Vigor2820 Series User’s Guide 19 The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Note 1: Some printers with the fax/scanning or other additional fun ctions are not supported.
Vigor2820 Series User’s Guide 20 This page is left blank..
Vigor2820 Series User’s Guide 21 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings.
Vigor2820 Series User’s Guide 22 Note: The home page will change slightly in accordance with the router you have. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password .
Vigor2820 Series User’s Guide 23 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y.
Vigor2820 Series User’s Guide 24 In the Quick Start Wizard , you can configure the router to access the Internet with different protocol/modes such as PPPoE/PPPoA , 1483 Bridged IP or 1483 Routed IP . The router supports the DSL WAN interface for Internet access.
Vigor2820 Series User’s Guide 25 If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown: User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP.
Vigor2820 Series User’s Guide 26 2 2 . . 2 2 . . 2 2 1 1 4 4 8 8 3 3 B B r r i i d d g g e e d d I I P P Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection.
Vigor2820 Series User’s Guide 27 2 2 . . 2 2 . . 3 3 1 1 4 4 8 8 3 3 R R o o u u t t e e d d I I P P Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page.
Vigor2820 Series User’s Guide 28 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page.
Vigor2820 Series User’s Guide 29 Online status for Static IP (for WAN1) Online status for DHCP (WAN1).
Vigor2820 Series User’s Guide 30 Online status for ISDN enabled Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface.
Vigor2820 Series User’s Guide 31 RX Pkts Displays the total number of received packets at the ISDN interface. RX Rate Displays the speed of received octets at the ISDN interface. Up Time Displays the total uptime of the interface. AOC Displays the charge information of the interface.
Vigor2820 Series User’s Guide 32 This page is left blank..
Vigor2820 Series User’s Guide 33 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease.
Vigor2820 Series User’s Guide 34 3 3 . . 1 1 . . 2 2 N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n b b y y 3 3 G G U U S S B B M M o o d d e e m m For 3G mobile communication through Access Point is popular more and more, Vigor2820 adds the function of 3G network connection for such purpose.
Vigor2820 Series User’s Guide 35 Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface.
Vigor2820 Series User’s Guide 36 determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed . Otherwise, please choose Auto Weigh to let the router reach the best load balance.
Vigor2820 Series User’s Guide 37 3 3 . . 1 1 . . 4 4 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent physical mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly.
Vigor2820 Series User’s Guide 38 Enable/Disable Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid. DSL Modem Settings Set up the DSL parameters required by your ISP.
Vigor2820 Series User’s Guide 39 PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router. When PPPoA protocol is selected, the PPPoE package transmitted by PC will be transformed into PPPoA package and sent to WAN server.
Vigor2820 Series User’s Guide 40 would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Type the additional WAN IP address and check the Enable box.
Vigor2820 Series User’s Guide 41 DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for building DSL connection to your IS P. Multi-PVC channel - The selections displayed here are determined by the page of Internet Access – Multi PVCs .
Vigor2820 Series User’s Guide 42 None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. Always On - ?? This setting is available for n model only.
Vigor2820 Series User’s Guide 43 Enable box. Then click OK to exit the dialog. IP Address – Type in the private IP address. Subnet Mask – Type in the subnet mask. Gateway IP Address – Type in gateway IP address. Default MAC Address Type in MAC address for the router.
Vigor2820 Series User’s Guide 44 Enable/Disable Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid.
Vigor2820 Series User’s Guide 45 value is set by telnet command. PPP/MP Setup PPP Authentication – Select PAP only or PAP or CHAP for PPP. Idle Timeout – Set the timeout for breaking down the Internet after passing through the time without any action.
Vigor2820 Series User’s Guide 46 For static IP mode, you usually receive a fixe d public IP address or a public subnet, nam ely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer a fixed public IP, while a DSL service provider will offer a public subnet.
Vigor2820 Series User’s Guide 47 to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command.
Vigor2820 Series User’s Guide 48 address for the router. Specify a MAC Address : Some Cable service providers specify a specific MAC address for access authentication. In such cases y ou need to click the Specify a MAC Address and enter the MAC address in the MAC Address field.
Vigor2820 Series User’s Guide 49 None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. This setting is available for n model only. PPP Setup PPP Authentication - Select PAP only or PAP or CHAP for PPP .
Vigor2820 Series User’s Guide 50 P P P P P P f f o o r r W W A A N N 2 2 Such mode is active only 3G USB Modem was chosen as the physical mode in General Setup. PPP Client Mode Click Enable to activate this mode for WAN2. SIM PIN code Type PIN code of the SIM card that will be used to access Internet.
Vigor2820 Series User’s Guide 51 Enable Check this box to enable that channel. The channels that you enabled here will be shown in the Multi-PVC channel drop down list on the web page of Internet Access . Though you can enable eight channels in this page, yet only one channel can be chosen on the web page of Internet Access .
Vigor2820 Series User’s Guide 52 WAN link for Channel 3, 4, 5 are provided for router-borne applic ation such as TR069 and VoIP. The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 3, 4 or 5 to configure your router.
Vigor2820 Series User’s Guide 53 QoS Type Select a proper QoS type for the channel according to the information that your ISP provides. PCR It represents Peak Cell R ate. The default setting is “0”. SCR It represents Sustainable Cell Rate. T he value of SCR must be smaller than PCR.
Vigor2820 Series User’s Guide 54 IGMP. IGMP – It means that the PVC can accept packets of IGMP only. Add Tag To identify the usage of PVC, check this box to invoke this setting. And type the number for VLAN ID (number). Click Clear to remove all the configurations in th is page if you do not satisfy it.
Vigor2820 Series User’s Guide 55 WAN Use the drop-down menu to change the WAN interface. Src IP Start Displays the IP address for the start of the source IP. Src IP End Displays the IP address for the end of the source IP. Dest IP Start Displays the IP address for the start of the destination IP.
Vigor2820 Series User’s Guide 56 Dest IP Start Type the destination IP start for the specified WAN interface. Dest IP End Type the destination IP end for the specified WAN interface. If this field is blank, it means that all the destination IPs will be passed through the WAN interface.
Vigor2820 Series User’s Guide 57 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 .
Vigor2820 Series User’s Guide 58 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing.
Vigor2820 Series User’s Guide 59 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Addr ess T ype in private IP address for connecting to a local private network (Default: 192.
Vigor2820 Series User’s Guide 60 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.
Vigor2820 Series User’s Guide 61 DHCP Se rver IP Addr ess for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server . DNS Server Configuration DNS stands for Domain Name System.
Vigor2820 Series User’s Guide 62 Index The number (1 to 10) unde r Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference.
Vigor2820 Series User’s Guide 63 Note: There are two reasons that we have to appl y RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subnet (192. 168.1.0/24).
Vigor2820 Series User’s Guide 64 3 3 . . 2 2 . . 4 4 V V L L A A N N Virtual LAN function provides you a very conve nient way to ma nage hosts by grouping them based on the physical port. You can also manage the in/out rate of each port. Go to LAN page and select VLAN .
Vigor2820 Series User’s Guide 65 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthening control in network. When this function is enabled, all the assigned IP and MAC address binding together cannot be changed.
Vigor2820 Series User’s Guide 66 Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List . Edit It allows you to edit and modify the selected IP address and MAC address that you create before.
Vigor2820 Series User’s Guide 67 is to forward all access request with public IP address from external users to the mapping private IP address/port of the server. The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page.
Vigor2820 Series User’s Guide 68 Enable Check this box to enable su ch port redirection setting. Mode Two options (Single and Range) are provided here for you to choose.
Vigor2820 Series User’s Guide 69 conflict, such as 8080. Thi s can be set in the System Maintenance >>Management Setup . Y ou then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80.
Vigor2820 Series User’s Guide 70 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: If you previously have set up WAN Alias for PPPoE/PPPoA or MPoA mode , you will find them in Aux.
Vigor2820 Series User’s Guide 71 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting.
Vigor2820 Series User’s Guide 72 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc.
Vigor2820 Series User’s Guide 73 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that will be used for this entry. Local Computer Enter the private IP address of the local host or click Choose PC to select one.
Vigor2820 Series User’s Guide 74 3 3 . . 4 4 F F i i r r e e w w a a l l l l 3 3 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned.
Vigor2820 Series User’s Guide 75 S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the network layer.
Vigor2820 Series User’s Guide 76 3 3 . . 4 4 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p General Setup allows you to adjust setti ngs of IP Filter and common options. Here you can enable or disable the Call Filter or Data Filter . Under some circumstance, your filter set can be linked to work in a serial manner.
Vigor2820 Series User’s Guide 77 Please set at least one profile for anti-virus in CSM>> W eb Content Filter Pr ofile web page first. For troubleshooting needs, you can specify to record information for W eb Content Filter Profile by checking the Log box.
Vigor2820 Series User’s Guide 78 Session timeout –Setting timeout for sessions can make the best utilization of network resources. However , Queue timeout is configured for TCP protocol onl y; session timeout is configured for the data flow which matched with the firewall rule.
Vigor2820 Series User’s Guide 79 To edit Filter Rule , click the Filter Rule index button to enter the Filter Rule setup page. Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long.
Vigor2820 Series User’s Guide 80 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Ty pe and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type.
Vigor2820 Series User’s Guide 81 want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to.
Vigor2820 Series User’s Guide 82 record information for URL Content Filter by checking the Log box. It will be sent to Syslog server . Please ref er to section 3.
Vigor2820 Series User’s Guide 83 Window size – It determines the size of TCP protocol (0~65535). The m ore the value is, the better the performance will be. However , if the network is not stable, sm all value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources.
Vigor2820 Series User’s Guide 84 E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner.
Vigor2820 Series User’s Guide 85 3 3 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default.
Vigor2820 Series User’s Guide 86 detecting this malicious exploration behavior by monitoring the port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the box to activate the Block IP options function.
Vigor2820 Series User’s Guide 87 indicate the protocol type running over the upper layer. However, the protocol types greater than 100 are reserved and undefined at this time. Therefore, the router should have ability to detect and reject this kind of packets.
Vigor2820 Series User’s Guide 88 3 3 . . 5 5 . . 1 1 I I P P O O b b j j e e c c t t You can set up to 192 sets of IP Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail.
Vigor2820 Series User’s Guide 89 Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address.
Vigor2820 Series User’s Guide 90 3 3 . . 5 5 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail.
Vigor2820 Series User’s Guide 91 3 3 . . 5 5 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail.
Vigor2820 Series User’s Guide 92 (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this profile.
Vigor2820 Series User’s Guide 93 Name Type a name for this profile. Available Service Type Objects All the available service objects that you have added on Objects Setting>>Service Type Object will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box.
Vigor2820 Series User’s Guide 94 Name Type a name for this profile, e.g., game. Contents Type the content for such profile. For exa mple, type gambling as Contents. When you browse th e webp age, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings.
Vigor2820 Series User’s Guide 95 Name Type a name for this group. Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box.
Vigor2820 Series User’s Guide 96 Profile Name Type a name for this profile. Type a name for such profile and check all the items of file extension that will be processed in the router.
Vigor2820 Series User’s Guide 97 3 3 . . 5 5 . . 8 8 I I M M O O b b j j e e c c t t This page allows you to set 32 profiles for In stant Messenger. These profiles will be applied in CSM>>IM/P2P Filter Profile for filtering. Set to Factory Default Clear all profiles.
Vigor2820 Series User’s Guide 98 Profile Name Type a name for this profile. Type a name for such profile and check all the ite ms that not allowed to be used in the host.
Vigor2820 Series User’s Guide 99 3 3 . . 5 5 . . 9 9 P P 2 2 P P O O b b j j e e c c t t This page allows you to set 32 profiles for p eer-to-peer application. These profiles will be applied in CSM>>IM/P2P Filter Profile for filtering. Set to Factory Default Clear all profiles.
Vigor2820 Series User’s Guide 100 Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not allowed to be used in the host.
Vigor2820 Series User’s Guide 101 Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not allowed to be used in the host.
Vigor2820 Series User’s Guide 102 To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the ina ppropriate web sites but also prohibit other web feature where malicious code may conceal.
Vigor2820 Series User’s Guide 103 Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Profile Name Type a name for the CSM profile. Each profile can contain three objects settings, IM Object, P2P Object and Misc Object.
Vigor2820 Series User’s Guide 104 On the other hand, Vigor router can prevent user from accidentally downloading malicious codes from web pages. It’s very common that malicious codes conceal in the executable objects, such as ActiveX, Java Applet, compre ssed files, and other executable files.
Vigor2820 Series User’s Guide 105 Priority It determines the action that this router will apply. Both: Pass – The router will let all the packages that match with the conditions specified in URL Access Control and Web Feature below passing through.
Vigor2820 Series User’s Guide 106 Block - Restrict accessing into the corresponding webpage with the keywords listed on the box below. If the web pages do not match with the keyword set here, it will be processed with reverse action.
Vigor2820 Series User’s Guide 107 If the web pages do not match with the specified feature set here, it will be processed with reverse action. Cookie - Check the box to filter out the cookie transmission from inside to outside world to prot ect the local user's privacy.
Vigor2820 Series User’s Guide 108 You can set eight profiles as Web content filter. Simply click the index num ber under Profile to open the following web page. Action Pass - allow accessing into the corr esponding webpage with the categories listed on the box below.
Vigor2820 Series User’s Guide 109 If the web pages do not match with the specified feature set here, it will be processed with reverse action. Log None – There is no log file will be recorded for this profile. Pass – Only the log about Pass w ill be recorded in Syslog.
Vigor2820 Series User’s Guide 110 To activate the function of limit session, simply click Enable and set the default session limit. Enable Click this button to activate the function of limit session. Disable Click this button to close the function of limit session.
Vigor2820 Series User’s Guide 111 3 3 . . 7 7 . . 2 2 B B a a n n d d w w i i d d t t h h L L i i m m i i t t The downstream or upstream from FTP, HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs.
Vigor2820 Series User’s Guide 112 Edit Allows you to edit the settings for the selected limitation. Delete Remove the selected settings existing on the limitation list. Index (1-15) in Schedule Setup You can type in four sets of time schedule for your request.
Vigor2820 Series User’s Guide 113 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners.
Vigor2820 Series User’s Guide 114 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN- apply to incoming traffic only. OUT- apply to outgoing traffic only.
Vigor2820 Series User’s Guide 115 Management>>Quality of Service . E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one.
Vigor2820 Series User’s Guide 116 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit button to set the remote IP address (on LAN/WAN) for the rule.
Vigor2820 Series User’s Guide 117 E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field.
Vigor2820 Series User’s Guide 118 For adding a new service type, click Add to open the following pag e. Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP) for the new service. Port Configuration Click Single or Range as the Type .
Vigor2820 Series User’s Guide 119 3 3 . . 8 8 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 8 8 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP.
Vigor2820 Series User’s Guide 120 WAN Interface Display current WAN interface used for accessing Internet. Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. View Log Display DDNS log status.
Vigor2820 Series User’s Guide 121 In the DDNS setup menu, uncheck Enable Dynamic DNS Setup , and push Clear All button to disable the function and clear all accounts from the router. Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account.
Vigor2820 Series User’s Guide 122 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule.
Vigor2820 Series User’s Guide 123 2. Configure the PPPoE always on from 9:00 to 18:00 f or whole week. 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week.
Vigor2820 Series User’s Guide 124 3 3 . . 8 8 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system.
Vigor2820 Series User’s Guide 125 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your P C may cause the UPnP function not working properly. This is because these applicati ons will block the accessing ability of some network ports.
Vigor2820 Series User’s Guide 126 Enable IGMP Proxy Check this box to enable this function. The application of multicast will be executed through WAN port. Enable IGMP Snooping Check this box to enable this function. The application of multicast will be executed for the clients in LAN.
Vigor2820 Series User’s Guide 127 choose Wake by IP Address, you have to choose the correct IP address. IP Address The IP addresses that have been configured in Firewall>>Bind IP to MAC will be shown in this drop down list. Choose the IP address from the drop down list that you want to wake up.
Vigor2820 Series User’s Guide 128 3 3 . . 9 9 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet.
Vigor2820 Series User’s Guide 129 Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol. PAP or CHAP Selecting this option means the router will attempt to authenticate dial-in users with th e CHAP protocol first.
Vigor2820 Series User’s Guide 130 two IP addresses of 192.168.1. 200 and 192.168.1.201 are reserved for ISDN remote dial-in user. 3 3 . . 9 9 . . 3 3 I I P P S S e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPSec General Setup, there are two major parts of configuration.
Vigor2820 Series User’s Guide 131 Confirm Pre-Shared Key- Retype the characters to confirm the pre-shared key. IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypte d. By default, this option is active.
Vigor2820 Series User’s Guide 132 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value.
Vigor2820 Series User’s Guide 133 3 3 . . 9 9 . . 5 5 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection.
Vigor2820 Series User’s Guide 134 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds.
Vigor2820 Series User’s Guide 135 select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. Password This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above.
Vigor2820 Series User’s Guide 136 3 3 . . 9 9 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles.
Vigor2820 Series User’s Guide 137 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. Netbios Naming Packet Pass – click it to have an inquiry for data transm ission between the hosts located on both sides of VPN Tunnel while connecting.
Vigor2820 Series User’s Guide 138 as the only channel for VPN connection. WAN2 First - While connecting, the router will use WAN2 as the first channel for VPN connection. If WAN2 fails, the router will use another WAN interface instead. WAN2 Only - While connecting, the router will use WAN2 as the only channel for VPN connection.
Vigor2820 Series User’s Guide 139 during negotiation. Otherwise, the dial-out VPN connection becomes one pure L2TP connection. Must: Specify the IPSec policy to be definitely applied on the L2TP connection. User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above.
Vigor2820 Series User’s Guide 140 IKE phase 1 mode - Select from Main mode and Aggressive mode. The ultimate outcome is to exchange security proposals to create a protected secure channel. Main mode is more secure than Aggressive mode since more exchanges are done in a secure channel to set up the IPSec session.
Vigor2820 Series User’s Guide 141 the remote router. This feature is useful for n model only. Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN connection. You should set the User Name and Password of remote dial-in user below.
Vigor2820 Series User’s Guide 142 becomes one pure L2TP connection. Must - Specify the IPSec policy to be definitely applied on the L2TP connection. Specify CLID or Remote VPN Gateway You can specify the IP address of the remote dial-in user or peer ID (should be the same with the ID setting in dial-in type) by checking the box.
Vigor2820 Series User’s Guide 143 exhausted, the function will be disabled automatically. Callback Budget (Unit: minutes)- Specify the time budget for the dial-in user. The budget will be decreased automatically per callback connection. The default value 0 means no limitation of callback period.
Vigor2820 Series User’s Guide 144 3 3 . . 9 9 . . 7 7 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button.
Vigor2820 Series User’s Guide 145 3 3 . . 1 1 0 0 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc.
Vigor2820 Series User’s Guide 146 Type in all the information that the window request. Then click Generate again. Import Click this button to im port a saved file as the certification information. Refresh Click this button to refresh the information listed below.
Vigor2820 Series User’s Guide 147 3 3 . . 1 1 0 0 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window.
Vigor2820 Series User’s Guide 148 3 3 . . 1 1 0 0 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them .
Vigor2820 Series User’s Guide 149 registration messages to validate. Then, bo th parties’ SIP proxies will forward the sequence of messages to caller to establish the session .
Vigor2820 Series User’s Guide 150 P P h h o o n n e e B B o o o o k k In this section, you can set your VoIP contacts in the “phonebook”. It can help you to make calls quickly and easily by using “speed-dial” Phone Number .
Vigor2820 Series User’s Guide 151 Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen.
Vigor2820 Series User’s Guide 152 Loop through For the model of Vigor 2820Vn, the selection should be as the following: Backup Phone Number When the VoIP phone is obstructs or the Internet breaks down for some reasons, the backup phone will be dialed out to replace the VoIP phone number.
Vigor2820 Series User’s Guide 153 Enable Check this box to invoke this setting. Prefix Number The phone number set here is used to add, strip, or replace the OP number. Mode None - No action. Add - When you choose this mode, the OP number will be added with the prefix number for calling out through the specific VoIP interface.
Vigor2820 Series User’s Guide 154 SIP server. OP Number The front number you type here is the first part of the account number that you want to execute special function (according to the chosen mode) by using the prefix num ber. Min Len Set the m inimal length of the dial number for applying the prefix number settings.
Vigor2820 Series User’s Guide 155 Enable Click this to enable this entry. Call Direction Determine the direction for the phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Barring Type Determine the type of the VoIP phone call, URI/URL or number.
Vigor2820 Series User’s Guide 156 For Block Unknown Domain – this function can block incomi ng calls (through Phone port) from unrecognized domain that is not specified in SIP accounts. Such control also can be done based on preconfigured schedules.
Vigor2820 Series User’s Guide 157 Last Call Return [Miss] Sometimes, people might miss some phone calls. Please dial number typed in this field to know where the last phone call comes from and call back to that one. Last Call Return [In] You have finished an incoming phone call, however you want to call back again for some reason.
Vigor2820 Series User’s Guide 158 Call Waiting [Act] Dial the number typed in this field to make all the incoming calls waiting for your answer. Call Waiting [Deact] Dial the number typed in this field to release this function. Block Anonymous[Act] Dial the number typed in this field to block all the incoming calls with unknown ID.
Vigor2820 Series User’s Guide 159 As Vigor VoIP Router is turned on, it will first register with Registrar using AuthorizationUser@Domain/Realm. After that, your call will be bypassed by SIP Proxy to the destination using AccountName@Domain/Realm as identity.
Vigor2820 Series User’s Guide 160 Domain/Realm Display the domain name or IP address of the SIP registrar server. Proxy Display the domain name or IP address of the SIP proxy server. Account Name Display the account name of SIP address before @. Ring Port Specify which port will ring when receiving a phone call.
Vigor2820 Series User’s Guide 161 Call without Registration . Choosing Auto is recommended. The system will select a proper way for your VoIP call. SIP Port Set the port num ber for sending/receiving SIP message for building a session. The default value is 5060.
Vigor2820 Series User’s Guide 162 internal lines with numbers (30 – 39) offered for ISDN-S0 . You can specify one of them or choose Any as ring port for specified SIP account. By the way, ISDN-S0 can be used by mapping with MSN numbers. Ring Pattern Choose a ring tone type for the VoIP phone call.
Vigor2820 Series User’s Guide 163 For Vigor2820VS/Vigor2820VSn models, you will see the following page: Phone List Port – For Vigor2820V/Vigor2820Vn, there are two phone ports provided here for you to configur e. However, for Vigor2820VS/Vigor2820VSn, there are three phone ports provided here for you to configure.
Vigor2820 Series User’s Guide 164 Disable Port The router can support up to 4 VoIP calls sim ultaneously. In general, only 3 VoIP calls can be dialed through ISDN at the same time. If you want to use four ISDN channels, you have to check this box. When the Phone port i s disabled, it could not be used anymore.
Vigor2820 Series User’s Guide 165 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically.
Vigor2820 Series User’s Guide 166 profiles. Refer to section 3.11.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hi de the caller ID on the display panel of the phone set. Call Waiting Check this box to invoke this function.
Vigor2820 Series User’s Guide 167 Play dial tone only when account registered - Check this box to invoke the function. Default Call Route It determines the default direction for the call route of the router. Such feature is available for Vigor2820VS and Vigor2820VSn To ISDN (for VoIP) - The router is set by using ISDN call.
Vigor2820 Series User’s Guide 168 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10.
Vigor2820 Series User’s Guide 169 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 1 1 - - S S 0 0 P P o o r r t t Click the number link of Index 2 (ISDN1-S0), you can access into the following page for configuring Phone settings.
Vigor2820 Series User’s Guide 170 Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) mode Set a period of peace time without disturbing by VoIP phone call. During the period, the one who dial in will listen bus y tone, yet the local user will not listen any ring tone.
Vigor2820 Series User’s Guide 171 invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile names for the accounts as the default one for this phone setting.
Vigor2820 Series User’s Guide 172 Region Select the proper region which you are located. The common settings of Caller ID Type , Dial tone , Ringing tone , Busy tone and Congestion tone will be shown automatically on the page.
Vigor2820 Series User’s Guide 173 recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is.
Vigor2820 Series User’s Guide 174 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 2 2 - - T T E E P P o o r r t t ( ( A A v v a a i i l l a a b b l l e e f f o o r r V V S S n n m m o o d d e e l l o o n n l l y y ) ) Vigor2820VSn allows users to switch the func tion of ISDN2 port between TE or S0 mode.
Vigor2820 Series User’s Guide 175 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically.
Vigor2820 Series User’s Guide 176 profiles. Refer to section 3.11.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hi de the caller ID on the display panel of the phone set. Prefer Codec Select one of five codecs as the default for your VoIP calls.
Vigor2820 Series User’s Guide 177 configured. Loop Through to ISDN1-S0 Port – Choose this radio button to make all the calls controlled by ISDN line. In addition, you can press the Advanced button to configure tone settings, volume gain, MISC and DTMF mode.
Vigor2820 Series User’s Guide 178 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10.
Vigor2820 Series User’s Guide 179 Payload Type (rfc2833) - Choose a nu mber from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. 3 3 . . 1 1 1 1 . . 4 4 S S t t a a t t u u s s From this page, you can find codec, connection and ot her important call status for each port.
Vigor2820 Series User’s Guide 180 WAIT_ANS - Indicates that a connection is launched and waiting for remote user’s answer. ALERTING - Indicates that a call is coming. ACTIVE- Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present channel.
Vigor2820 Series User’s Guide 181 ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local ISDN network, you should choose the correct country code.
Vigor2820 Series User’s Guide 182 1-10 fields – Fill in the portion that is di fferent with the own number. For example, the own number is 123456 7 and MSN numbers are 12345 50 , 12345 17 and 12345 82 respectively. You can type in 1234567 in the filed of own number.
Vigor2820 Series User’s Guide 183 Open ISDN>> General Setup and set as the following: When remote user calls you by dialing 5972727 , the router will make Phone port ringing. When remote user calls you by dialing 5972728 , the router will make ISDN phone under ISDN1-S0 port and configured with internal MSN number 32 ringing .
Vigor2820 Series User’s Guide 184 ISP Access Setup ISP Name - Enter your ISP name such as Seednet, Hinet and so on. Dial Number - Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided by your ISP.
Vigor2820 Series User’s Guide 185 IP Address Assignment Method (IPCP) In most environments, you should not change these settings as most ISPs provide a dynamic IP address for the router when it connects to the ISP. If your ISP provides a fixed IP address, check Yes and enter the IP address in the field of Fixed IP Address .
Vigor2820 Series User’s Guide 186 Primary ISP Setup ISP Name - Enter your ISP name. Dial Number - Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided by your ISP.
Vigor2820 Series User’s Guide 187 Click Dial ISDN . Wait for a moment after clicking the dial link. Then, a successful ISDN connection will be shown as the following.
Vigor2820 Series User’s Guide 188 Call Control Setup Dial Retry - It specifies th e dial retry counts per triggered packet. A triggered packet is th e packet whose destination is outside the local network.
Vigor2820 Series User’s Guide 189 Bandwidth-On-Demand (BOD) Setup Bandwidth-On-Demand is for Multiple-Link PPP (ML-PPP or MP). The parameters are only applied when you set the Link Type to Dialup BOD . The ISDN usually use one B channel to access the Internet or remote network when you choose the Dialup BOD link type.
Vigor2820 Series User’s Guide 190 S S e e c c u u r r i i t t y y O O v v e e r r v v i i e e w w Real-time Hardware Encryption: Vigor Router is equipped with a hardware AES encryption engine so it can apply the highest pr otection to your data without influencing user experience.
Vigor2820 Series User’s Guide 191 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information.
Vigor2820 Series User’s Guide 192 Mode At present, the router can connect to 11b Only, 11g Only, 11n Only, Mixed(11b+11g), Mixed(11 g+11n) and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mix (11b+11g+11n) mode. Index(1-15) Set the wireless LAN to work at certain time interval only.
Vigor2820 Series User’s Guide 193 Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync filed instead of long pream ble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble.
Vigor2820 Series User’s Guide 194 Download – Type the transmitting rate for data download. Default value is 30,000 kbps . 3 3 . . 1 1 3 3 . . 3 3 S S e e c c u u r r i i t t y y This page allows you to set security with diffe rent modes for SSID 1, 2, 3 and 4 respectively.
Vigor2820 Series User’s Guide 195 WPA2/802.1x Only- Accepts only WPA2 clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. Mixed (WPA+WPA2/802.1x only) - Accepts WPA and WPA2 clients simultaneously and the encryption key is obtained dynamically from RADIUS server with 802.
Vigor2820 Series User’s Guide 196 Enable Max Access Filter Select to enable the MAC Address filter for wireless LAN identified with SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be grouped under different wireless LAN.
Vigor2820 Series User’s Guide 197 Note: Such function is available for the wi reless station with WPS supported. It is the simplest way to build connection be tween wireless network clients and vigor router. Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time.
Vigor2820 Series User’s Guide 198 For WPS is supported in WPA-PSK or WPA2- PSK mode, if you do not choose such mode in Wireless LAN>>Security , yo u will see the following message box. Please click OK and go back Wireless LAN>>Security to choose WPA-PSK or WPA2-PSK mode and access WPS again.
Vigor2820 Series User’s Guide 199 3 3 . . 1 1 3 3 . . 6 6 W W D D S S WDS means Wireless Distribution Syste m. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge traffic between two LANs through the air.
Vigor2820 Series User’s Guide 200 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2.
Vigor2820 Series User’s Guide 201 Security There are three types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Check this box to use the same key set in Security Settings page.
Vigor2820 Series User’s Guide 202 Channel Bandwidth 20- the router will use 20Mhz for data transmission and receiving between the AP and the stations. 20/40 – the router will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability.
Vigor2820 Series User’s Guide 203 will influence the time delay for WMM accessing categories. For the service of voice or video image, please set small value for AC_VI and AC_VO categories. As to the service of e-mail or web browsing, please set large value for AC_BE and AC_BK categories.
Vigor2820 Series User’s Guide 204 Scan It is used to discover all the connected AP. The results will be shown on the box above this button. Statistics It displays the statistics for the channels used by APs.
Vigor2820 Series User’s Guide 205 Refresh Click this button to refresh the status of station list. Add Click this button to add current selected MAC address into Access Contro l.
Vigor2820 Series User’s Guide 206 3 3 . . 1 1 4 4 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade.
Vigor2820 Series User’s Guide 207 MAC Address Display the MAC address of the LAN Interface. 1 st IP Address Display the IP address of the LAN interface. 1 st Subnet Mask Display the subnet mask address of the LAN interface. DHCP Server Display the current status of DHCP server of the LAN interface.
Vigor2820 Series User’s Guide 208 ACS Server On Choose the interfac e for the router connecting to ACS server. ACS Server URL/Username/Password – Such data must be typed according to the ACS (Auto Configuration Server) you want to link. Please refer to Auto Configuration Server user’s manual for detailed information.
Vigor2820 Series User’s Guide 209 Old Password Type in the old password. The factory default setting for password is blank. New Password Type in new password in this filed. Confirm Password Type in the new password again. When you click OK, the login window w ill appear.
Vigor2820 Series User’s Guide 210 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating exam ples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available.
Vigor2820 Series User’s Guide 211 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Go to System Maintenance >> Configuration Backup . The following windows will be popped-up, as shown below. 2. Click Browse button to choose the correct confi guration file for uploading to the router.
Vigor2820 Series User’s Guide 212 Send a test e-mail Make a simple test for the e-mail address specified in this page. Please assign the mail address first and click this button to execute a test for verify the mail address is available or not. SMTP Server The IP address of the SMTP server.
Vigor2820 Series User’s Guide 213 3 3 . . 1 1 4 4 . . 6 6 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from.
Vigor2820 Series User’s Guide 214 3 3 . . 1 1 4 4 . . 7 7 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SMP setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session.
Vigor2820 Series User’s Guide 215 Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a pr oper name.
Vigor2820 Series User’s Guide 216 3 3 . . 1 1 4 4 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools.
Vigor2820 Series User’s Guide 217 3 3 . . 1 1 5 5 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router.
Vigor2820 Series User’s Guide 218 3 3 . . 1 1 5 5 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page.
Vigor2820 Series User’s Guide 219 3 3 . . 1 1 5 5 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc.
Vigor2820 Series User’s Guide 220 Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface.
Vigor2820 Series User’s Guide 221 3 3 . . 1 1 5 5 . . 7 7 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management.
Vigor2820 Series User’s Guide 222 Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the session column. 3 3 . . 1 1 5 5 . . 8 8 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to pen the web page.
Vigor2820 Series User’s Guide 223 3 3 . . 1 1 5 5 . . 9 9 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run .
Vigor2820 Series User’s Guide 224 This page is left blank..
Vigor2820 Series User’s Guide 225 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A .
Vigor2820 Series User’s Guide 226 For using IPSec -based service, such as IPSec or L2 TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile.
Vigor2820 Series User’s Guide 227 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection.
Vigor2820 Series User’s Guide 228 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection.
Vigor2820 Series User’s Guide 229 2. Then, for usi ng PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known.
Vigor2820 Series User’s Guide 230 Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection.
Vigor2820 Series User’s Guide 231 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection.
Vigor2820 Series User’s Guide 232 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w .
Vigor2820 Series User’s Guide 233 3. Go to Remote Dial-In User . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection.
Vigor2820 Series User’s Guide 234 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel to Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel.
Vigor2820 Series User’s Guide 235 3. In Step 2. Connect to VPN Server , click Insert button to ad d a new entry. If an IPSec-based service is selected as shown below, You may further specify the method you use to get IP, the security method, and authentication method.
Vigor2820 Series User’s Guide 236 server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner.
Vigor2820 Series User’s Guide 237 3. Return to previous page. Enter th e Name of Index Class 1 by clicking Edit link. T ype the name “ E-mail ” for Class 1. 4. For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP .
Vigor2820 Series User’s Guide 238 5. Return to previous page. Enter th e Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS .
Vigor2820 Series User’s Guide 239 9. Click Edit to open the following window . Check the ACT box, first. 10. Then click Edit of Local Address to set a worker ’ s subnet address. Click Edit of Remote Address to set headquarter ’ s IP address. Leave other fields and click OK .
Vigor2820 Series User’s Guide 240 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/ Subnet Mask is 192.
Vigor2820 Series User’s Guide 241 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage. 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 .
Vigor2820 Series User’s Guide 242 Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@iptel.org SIP Accounts Settings --- Profile Name: draytel1 Register via: Auto SIP Port: 5060 (default) Domain/Realm: draytel.org Proxy: draytel.
Vigor2820 Series User’s Guide 243 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.
Vigor2820 Series User’s Guide 244 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respectively, they can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling.
Vigor2820 Series User’s Guide 245 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools.
Vigor2820 Series User’s Guide 246 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally , click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility .
Vigor2820 Series User’s Guide 247 14. Click Send . 15. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a .
Vigor2820 Series User’s Guide 248 1. Go to Certificate Management and choose Local Certificate . 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.
Vigor2820 Series User’s Guide 249 4. Connect to C A server via web browser. Follo w the instruction to submit the request. Below we take a Windows 2000 CA server for example.
Vigor2820 Series User’s Guide 250 Then you have done the request and the ser ver now issues you a certificate. Select Base 64 encoded certificate and Download CA certificate . Now you should get a certificate (.cer file) and save it. 5. Back to Vigor router, go to Local Certificate .
Vigor2820 Series User’s Guide 251 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1.
Vigor2820 Series User’s Guide 252 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.
Vigor2820 Series User’s Guide 253 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration.
Vigor2820 Series User’s Guide 254 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s .
Vigor2820 Series User’s Guide 255 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network .
Vigor2820 Series User’s Guide 256 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router.
Vigor2820 Series User’s Guide 257 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly.
Vigor2820 Series User’s Guide 258 F F o o r r M M P P o o A A U U s s e e r r s s 1. Check if the Enable option is selected. 2. Check if DSL Modem Settings is set appropriately. Check if IP Address, Subnet Mask and Gateway are set correctly (must identify with the values from your ISP) if you choose Specify an IP address .
Vigor2820 Series User’s Guide 259 F F o o r r S S t t a a t t i i c c / / D D y y n n a a m m i i c c I I P P U U s s e e r r s s 1. Check if the Enable option is selected. 2. Check if IP address, Subnet Mask and Gateway are entered with correct values that you got from your ISP .
Vigor2820 Series User’s Guide 260 5 5 . . 5 5 P P r r o o b b l l e e m m s s f f o o r r 3 3 G G N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n When you have trouble in using 3.
Vigor2820 Series User’s Guide 261 S S o o f f t t w w a a r r e e R R e e s s e e t t You can reset the router to factory default via Web page. Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click OK .
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Draytek Vigor 2820VSn è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Draytek Vigor 2820VSn - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Draytek Vigor 2820VSn imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Draytek Vigor 2820VSn ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Draytek Vigor 2820VSn, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Draytek Vigor 2820VSn.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Draytek Vigor 2820VSn. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Draytek Vigor 2820VSn insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
