Manuale d’uso / di manutenzione del prodotto Vigor2910V del fabbricante Draytek
Vai alla pagina of 269
.
Vigor2910 Series User’s Guide ii.
Vigor2910 Series User’s Guide iii Vigor2910 Dual-WAN Security Router User’s Guide Version: 4.0 Firmware Version: V3.2.4 Date: 11/05/2010 Copyright 2010 All rights reserve d.
Vigor2910 Series User’s Guide iv Copyright Information Copyright Declarations Copyright 2010 All rights reserved. This pub licatio n contains information that is protected by copyright.
Vigor2910 Series User’s Guide v European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Town sh ip, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor2910 Ser ies Routers DrayTek Corp.
Vigor2910 Series User’s Guide vi.
Vigor2910 Series User’s Guide vii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation .
Vigor2910 Series User’s Guide viii 3.3.2 DM Z Host ................................................................................................................. ....... 55 3.3.3 Open Ports ........................................................
Vigor2910 Series User’s Guide ix 3.12 IS DN ...................................................................................................................... ............ 162 3.12.1 Genera l Setup ...............................................
Vigor2910 Series User’s Guide x 4.2 Create a Remote Dial-in User Connecti on Between the T elework er and Headquarter ...... 224 4.3 QoS Setti ng Exam ple ..............................................................................................
Vigor2910 Series User’s Guide 1 1 P P r r e e f f a a c c e e The Vigor2910 series router provides Dual-WAN interface (which is a configuration second WAN) for Internet access to make the Internet connection more reliable. The wireless LAN supports more secure features and the transmission speed is up to 108Mbps (SuperG TM ).
Vigor2910 Series User’s Guide 2 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powered of f.
Vigor2910 Series User’s Guide 3 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powe red off.
Vigor2910 Series User’s Guide 4 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 i i L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powered of f.
Vigor2910 Series User’s Guide 5 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powe red off.
Vigor2910 Series User’s Guide 6 1 1 . . 2 2 . . 5 5 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is p owered off.
Vigor2910 Series User’s Guide 7 1 1 . . 2 2 . . 6 6 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V G G i i L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly.
Vigor2910 Series User’s Guide 8 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect this device to a router/modem with an Ethernet cable.
Vigor2910 Series User’s Guide 9 1 1 . . 4 4 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router.
Vigor2910 Series User’s Guide 10 3. Open File->Add a New Computer . A welcome dialog will appear. Please click Next . 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port .
Vigor2910 Series User’s Guide 11 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port nam e. Then, click Next . 7. Click Standard and choose Generic Network Card.
Vigor2910 Series User’s Guide 12 9. Now, your system will ask you t o choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC.
Vigor2910 Series User’s Guide 13 Note 1: Some printers with the fax/scanning or other a dditional fun ctions are not supported. If you do not know whether your printer is supported or not, please visit www.
Vigor2910 Series User’s Guide 14 This page is left blank..
Vigor2910 Series User’s Guide 15 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings.
Vigor2910 Series User’s Guide 16 3. Now, the Main Screen will pop up. Notice that the main screen differs according to the model of the router that you have. Below is an example. 4. Go to System Maintenance page and choose Administrator Password . 5.
Vigor2910 Series User’s Guide 17 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y.
Vigor2910 Series User’s Guide 18 On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. Fo r example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step.
Vigor2910 Series User’s Guide 19 User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password for confirmation. Click Next for viewing summary of such connection.
Vigor2910 Series User’s Guide 20 2 2 . . 2 2 . . 2 2 P P P P T T P P Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear.
Vigor2910 Series User’s Guide 21 2 2 . . 2 2 . . 3 3 S S t t a a t t i i c c I I P P Click Static IP as the protocol. Type in all the inform ation that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page.
Vigor2910 Series User’s Guide 22 2 2 . . 2 2 . . 4 4 L L 2 2 T T P P Click L2TP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish.
Vigor2910 Series User’s Guide 23 2 2 . . 2 2 . . 5 5 D D H H C C P P Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish.
Vigor2910 Series User’s Guide 24 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE as the protocol, you will find out a button of Dial PPPoE or Dial PPPoE i n the Online Status web page.
Vigor2910 Series User’s Guide 25 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface.
Vigor2910 Series User’s Guide 26 2 2 . . 4 4 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you.
Vigor2910 Series User’s Guide 27 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease.
Vigor2910 Series User’s Guide 28 3 3 . . 1 1 . . 2 2 N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n b b y y 3 3 G G U U S S B B M M o o d d e e m m For 3G mobile communication through Access Point is popular more and more, Vigor 2910 adds the function of 3G network connection for such purpose.
Vigor2910 Series User’s Guide 29 Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface.
Vigor2910 Series User’s Guide 30 Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed .
Vigor2910 Series User’s Guide 31 3 3 . . 1 1 . . 4 4 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent Physical Mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly.
Vigor2910 Series User’s Guide 32 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E To use PPPoE as the accessing protocol of the internet, please choose Internet Acce ss fro m WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown.
Vigor2910 Series User’s Guide 33 None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. WAN Connection Detection Such function allows you to ve rify whether network connection is alive or not through ARP Detect or Ping Detect.
Vigor2910 Series User’s Guide 34 address in the box of Fixed IP Address . Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address f or the router manually.
Vigor2910 Series User’s Guide 35 Due to the absence of the ISDN in terface in some models, the ISDN dial backup feature and its associated setup options are not available to them. Please refer to the previous part for further information. None - Disable the backup function.
Vigor2910 Series User’s Guide 36 Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dynamic IP mode. Router Name : Type in the router name provided by ISP. Domain Name : Type in the domain name that you have assigned.
Vigor2910 Series User’s Guide 37 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P T T P P / / L L 2 2 T T P P To use PPTP as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPTP mode for WAN2.
Vigor2910 Series User’s Guide 38 information. None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. MTU It means Max Transmit Unit for packet. The default setting is 1442.
Vigor2910 Series User’s Guide 39 WAN IP Network Settings Obtain an IP address automatically – Click this button to obtain the IP address automatically. Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address.
Vigor2910 Series User’s Guide 40 3 3 . . 1 1 . . 5 5 L L o o a a d d - - B B a a l l a a n n c c e e P P o o l l i i c c y y This router supports the function of load balanc ing. It can assign traffic with protocol t ype, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN1 or WAN2 interface.
Vigor2910 Series User’s Guide 41 Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. Binding WAN interface Choose the WAN interface (WAN1 or WAN2) for binding. Src IP Start Type the source IP start for the specified WAN interface.
Vigor2910 Series User’s Guide 42 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 .
Vigor2910 Series User’s Guide 43 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing.
Vigor2910 Series User’s Guide 44 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in private IP address for connecting to a local private network (Default: 192.
Vigor2910 Series User’s Guide 45 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.
Vigor2910 Series User’s Guide 46 of the router , which means the router is the default gateway . DHCP Server IP Addr ess for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server .
Vigor2910 Series User’s Guide 47 Index The number (1 to 10) unde r Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference.
Vigor2910 Series User’s Guide 48 Note : There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subnet (192. 168.1.0/24).
Vigor2910 Series User’s Guide 49 3 3 . . 2 2 . . 4 4 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthen control i n network. When this functi on is enabled, all the assigne d IP and MAC address binding together cannot be changed.
Vigor2910 Series User’s Guide 50 Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List . Edit It allows you to edit and modify the selected IP address and MAC address that you create before.
Vigor2910 Series User’s Guide 51 Share vpn remote dial in profile – you can share the account set in remote VPN dial-in profiles. Click this button and press Account Setting link to choose one of the accounts (total 32 profiles) for applying to the web authentication.
Vigor2910 Series User’s Guide 52 3 3 . . 3 3 N N A A T T Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that one or more private IP a ddresses can be mapped into a single public one. Public IP address is usually assigned by your ISP, for which you may get charged.
Vigor2910 Series User’s Guide 53 The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-m apping entries for the internal hosts.
Vigor2910 Series User’s Guide 54 Mode Two options are provided here for you to choose. To set a range for the specific service, select Range. Service Name Enter the description of the specific network service. Protocol Select the transport layer protocol (TCP or UDP).
Vigor2910 Series User’s Guide 55 3 3 . . 3 3 . . 2 2 D D M M Z Z H H o o s s t t As mentioned above, Port Redirection can redirect incoming TCP/UDP or othe r traffic on particular ports to the specific private IP address/port of host in the LAN.
Vigor2910 Series User’s Guide 56 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: WAN1 This page allows you to set Private IP or Active True IP as the DMZ host.
Vigor2910 Series User’s Guide 57 Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this button and then a window will autom atically pop up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN network.
Vigor2910 Series User’s Guide 58 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc.
Vigor2910 Series User’s Guide 59 To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Enable Open Ports Check to enable this entry.
Vigor2910 Series User’s Guide 60 to Internet. You can use address mapping func tion to achieve this demand. Simply type 192.168.1.10 as the Private IP; and t ype 86.123.123.2 as the WAN IP. Protocol Display the protocol used for this address mapping.
Vigor2910 Series User’s Guide 61 IP to connect to Internet. If you want to choose any one of the Public IP settings, you must specify some IP addresses in the IP Alias List of the Static/DHCP Configuration page first. If you di d not type in any IP address in the IP Alias List, the Public IP setting will be empty in this field.
Vigor2910 Series User’s Guide 62 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address.
Vigor2910 Series User’s Guide 63 3 3 . . 4 4 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail.
Vigor2910 Series User’s Guide 64 3 3 . . 4 4 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail.
Vigor2910 Series User’s Guide 65 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when th e first and last values are different, it indicates that all the ports except the range defined here are available for this service type.
Vigor2910 Series User’s Guide 66 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Objects page. All the available IP objects will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box.
Vigor2910 Series User’s Guide 67 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allo wed to access into the forbidden items.
Vigor2910 Series User’s Guide 68 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allo wed to access into the forbidden items.
Vigor2910 Series User’s Guide 69 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allo wed to access into the forbidden items.
Vigor2910 Series User’s Guide 70 For example, an ActiveX control object is usually used for providing interactive web feature. If malicious code hides inside, it may occupy user’s system.
Vigor2910 Series User’s Guide 71 Profile Name Type a name for the CSM profile. Each profile can contain three objects settings, IM Object, P2P Object and Misc Object. Such profile can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow.
Vigor2910 Series User’s Guide 72 Enable URL Access Control Check the box to activate URL Access Control. Black List (block those matching keyword) Click this button to restrict accessing into the corresponding webpage with the keywords listed on the box below.
Vigor2910 Series User’s Guide 73 Y ou must clear your browser cache first so that the URL content filtering facility operates properly on a web page that you visited before. Enable Restrict Web Feature Check the box to activate the function. Java - Check the checkbox to activate the Block Java object function.
Vigor2910 Series User’s Guide 74 3 3 . . 5 5 . . 3 3 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e We all know that the content on the Internet just like other types of media may be inappropriate sometimes.
Vigor2910 Series User’s Guide 75 3 3 . . 6 6 F F i i r r e e w w a a l l l l 3 3 . . 6 6 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned.
Vigor2910 Series User’s Guide 76 I I P P F F i i l l t t e e r r s s Depending on whether there is an existing Internet connection, or in other words “the WAN link status is up or down”, the IP filter architecture categorizes traffic into two: Call Filter and Data Filter .
Vigor2910 Series User’s Guide 77 D D e e n n i i a a l l o o f f S S e e r r v v i i c c e e ( ( D D o o S S ) ) D D e e f f e e n n s s e e The DoS Defense functionality helps you to detect and mitigate the DoS attack. The attacks are usually categorized into two types, the fl ooding-type attacks and the vulnerability attacks.
Vigor2910 Series User’s Guide 78 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter.
Vigor2910 Series User’s Guide 79 3 3 . . 6 6 . . 3 3 F F i i l l t t e e r r S S e e t t u u p p Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown.
Vigor2910 Series User’s Guide 80 Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Index (1-15) Set the PCs on LAN to work at certain time interval only.
Vigor2910 Series User’s Guide 81 Address/Range Address/Subnet Address as the Address Ty pe and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type.
Vigor2910 Series User’s Guide 82 Service Group/Object - Use the drop down list to choose the one that you want. Fragments Specify the action for fragmented packets. And it is used for Data Filter only. Don’t care - No action will be taken towards fragmented packets.
Vigor2910 Series User’s Guide 83 E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner.
Vigor2910 Series User’s Guide 84 3 3 . . 6 6 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default.
Vigor2910 Series User’s Guide 85 port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the box to activate the Block IP options function.
Vigor2910 Series User’s Guide 86 SYN packets with the identical source and destination addresses, as well as the port number to victims. Block Unknown Protocol Check the box to activate the Block Unknown Protocol function. Individual IP packet has a protocol field in the datagram header to indicate the protocol type running over the upper layer.
Vigor2910 Series User’s Guide 87 3 3 . . 7 7 B B a a n n d d w w i i d d t t h h M M a a n n a a g g e e m m e e n n t t Below shows the menu items for Bandwidth Management. 3 3 . . 7 7 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router.
Vigor2910 Series User’s Guide 88 Maximum Sessions Defines the available session number for specific ran ge of IP addresses. If you do not set the session number in this field, the system will use the defa ult session limit for the specific limitation you set for each index.
Vigor2910 Series User’s Guide 89 Default TX limit Define the default speed of the upstream for each computer in LAN. Default RX limit Define the default speed of the downstream for each computer in LAN. Limitation List Display a list of specific limitations that you set on this web page.
Vigor2910 Series User’s Guide 90 z Scheduling: Based on classification of service level to assign packets to queues and associated service types The basic QoS implementation in Vigor routers is to classify and schedule packets based on the service type information in the IP header.
Vigor2910 Series User’s Guide 91 This page displays the QoS settings result of the WAN interface. Click the Setup link to access into next page for the general setup of WAN (1/2) interface. As to class rule, si mply click the Edit link to access into next for configuration.
Vigor2910 Series User’s Guide 92 Reserved Bandwidth Ratio It is reserved for the group index in the form of ratio of reserved bandwidth to upstream speed and reserve d bandwidth to downstream speed . Enable UDP Bandwidth Control Check this and set the limited bandwidth ratio on the right field.
Vigor2910 Series User’s Guide 93 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Source Address Click the SrcEdit button to set the source address for the rule. Destination Address Click the DestEdit button to set the destination address for the rule.
Vigor2910 Series User’s Guide 94 Service Type It determines the service type of the data for processing with QoS control. It can also be edited. You can choose the predefined service type from the Service Type drop down list. Those types are predefined in factory.
Vigor2910 Series User’s Guide 95 For adding a new rule, click Add to open the following page. If you want to edit an existed service type, please select the radio button of that one and click Edit to open the following page for modification. Service Name Type in a new service for your request.
Vigor2910 Series User’s Guide 96 3 3 . . 8 8 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 8 8 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP.
Vigor2910 Series User’s Guide 97 Index Click the number below Index to access into the setting page of DDNS setup to set account(s). WAN Interface Display current WAN interface used for accessing Internet. Domain Name Display the domain name that you set on the setting page of DDNS setup.
Vigor2910 Series User’s Guide 98 Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu, uncheck Enable Dynamic DNS Setup , and push Clear All button to disable the function and clear all accounts from the router.
Vigor2910 Series User’s Guide 99 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule.
Vigor2910 Series User’s Guide 100 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE In ternet access profile.
Vigor2910 Series User’s Guide 101 3 3 . . 8 8 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system.
Vigor2910 Series User’s Guide 102 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Softw are Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will blo ck the accessing ability of some network ports.
Vigor2910 Series User’s Guide 103 3 3 . . 8 8 . . 5 5 I I G G M M P P IGMP is the abbreviation of Internet Group Management Protocol . It is a communication protocol which is mainly used for managing the membership of Internet Protocol m ulticast groups.
Vigor2910 Series User’s Guide 104 Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box.
Vigor2910 Series User’s Guide 105 3 3 . . 9 9 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet.
Vigor2910 Series User’s Guide 106 Please choose a LAN-to-LAN Profile There are 32 VPN tunnels for users to set. When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile.
Vigor2910 Series User’s Guide 107 the choices for the client profile, please click Next . You will see different configurations based on the selection(s) you made.
Vigor2910 Series User’s Guide 108 z When you choose L2TP over IPSec (Nice to Have), you will see the following graphic: z When you choose L2TP over IPSec (Must), you will see the following graphic:.
Vigor2910 Series User’s Guide 109 Profile Name Type a name for such profile. The length of the file is limited to 10 characters. VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only.
Vigor2910 Series User’s Guide 110 Profiles (set from VPN and Remote Access>>IPSec Peer Identity ). IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active.
Vigor2910 Series User’s Guide 111 3 3 . . 9 9 . . 2 2 V V P P N N S S e e r r v v e e r r W W i i z z a a r r d d Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connec tion (from client to server) step by step.
Vigor2910 Series User’s Guide 112 Please choose a Dial-in User Accounts This ite m is available when y ou choose Re mote Dial-in User (Teleworker) as VPN server mode. There are 32 VPN tunnels for users to set. Allowed Dial-in Type This item is available after you choose any one of dial-in user account profiles.
Vigor2910 Series User’s Guide 113 Profile Name Type a name for such profile. The length of the file is limited to 10 characters. User Name This field is used to authenticate for connection when you select PPTP or L2TP with or without IPSec policy above.
Vigor2910 Series User’s Guide 114 z When you check IPSec , you will see the following graphic: After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on t he page and click Finish to execute the next action.
Vigor2910 Series User’s Guide 115 Go to the VPN Connection Management Click this radio button to access VPN and Remote Access>>Connection Management for viewing VPN Connection status. Do another VPN Server Wizard Setup Click this radio button to set another profile of VPN Server through VPN Server Wizard.
Vigor2910 Series User’s Guide 116 Enable L2TP VPN Service Check this box to activate the VPN service through L2TP protocol. Enable ISDN Dial-IN This feature is available for i model.
Vigor2910 Series User’s Guide 117 authentication. You should further specify the User Name and Password of the mutual authentication peer. Start IP Address Enter a start IP address for the dial-in PPP connection. You should choose an IP address from the local private network.
Vigor2910 Series User’s Guide 118 IKE Authentication Method This usually applies to those are remote dial-in user or node (LAN to LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and IPSec tunnel. Pre-Shared Key - Currently only suppor t Pre-Shared Key authentication.
Vigor2910 Series User’s Guide 119 Profile Name Type in a name in this file. Enable this account -Check this box to enable such profile. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value.
Vigor2910 Series User’s Guide 120 3 3 . . 9 9 . . 7 7 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection.
Vigor2910 Series User’s Guide 121 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds.
Vigor2910 Series User’s Guide 122 aggressive mode). Uncheck the checkbox- This means the connection type you select above will apply the authentication methods and security methods in the general settings .
Vigor2910 Series User’s Guide 123 Specify the callback number -The option is for extra security. Once enabled, the router will ONLY call back to the specified Callback Number. Check to enable callback budget control -By default, the callback function has a time restriction.
Vigor2910 Series User’s Guide 124 Click each index to edit each profile and you will get the following page. Each LAN to LAN profile includes 4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields.
Vigor2910 Series User’s Guide 125 Profile Name Specify a name for the profile of the LAN to LAN connection. Enable this profile Check here to activate this profile. VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile.
Vigor2910 Series User’s Guide 126 the state of a VPN connection for router’s judgment of redial. Normally, if any one of VPN peers wants to disconnect the connection, it should follow a serial of packet exchange procedure to inform each other.
Vigor2910 Series User’s Guide 127 IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy. Medium Authentication Header (AH) means d ata will be authenticated, but not be encrypte d. By default, this option is active.
Vigor2910 Series User’s Guide 128 IKE phase 2 proposal- To propose the local available algorithms to the VPN peers, and get its feedback to find a match. Three combinations are available for both modes. We suggest you select the combination that covers the most algorithms.
Vigor2910 Series User’s Guide 129 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN to LAN connection. You should set the User Name and Password of remote dial-in user below. This feature is useful for i model only.
Vigor2910 Series User’s Guide 130 connection employed the L2TP without IPSec policy can be viewed as one pure L2TP connection. Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection.
Vigor2910 Series User’s Guide 131 Callback number -The option is for extra security. Once enabled, the router will ONLY call back to the specified Callback Number. Callback Budget (Unit: minutes) - By default, the callback function has limitation of callback period.
Vigor2910 Series User’s Guide 132 More Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router.
Vigor2910 Series User’s Guide 133 3 3 . . 9 9 . . 9 9 V V P P N N B B a a c c k k u u p p M M a a n n a a g g e e m m e e n n t t VPN Backup Management is a backup mechanis m to set multiple VPN tunnels for using as backup tunnel. It can assure the network connection would not be cut off due to network environment blocked by any reason.
Vigor2910 Series User’s Guide 134 Name (on Backup Profile field) Display the name of VPN TRUNK profile. Member1 (on Backup Profile field) Display the dial-out profile selected from the Member1 drop down list below. Active (on Backup Profile field) “Yes” means normal condition.
Vigor2910 Series User’s Guide 135 T T i i m m e e f f o o r r a a c c t t i i v v a a t t i i n n g g V V P P N N B B a a c c k k u u p p p p r r o o f f i i l l e e VPN TRUNK backup will be activated automati cally after the initial connection of single VPN Tunnel off-line.
Vigor2910 Series User’s Guide 136 3 3 . . 9 9 . . 1 1 0 0 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button.
Vigor2910 Series User’s Guide 137 Refresh Seconds Choose the time for refresh the dial inform ation among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. Note: The status of LAN to LAN for ISDN is shown on the page of Online Status .
Vigor2910 Series User’s Guide 138 3 3 . . 1 1 0 0 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc.
Vigor2910 Series User’s Guide 139 Type in all the information that the window request. Then click Generate again. Import Click this button to im port a saved file as the certification information. Refresh Click this button to refresh the information listed below.
Vigor2910 Series User’s Guide 140 3 3 . . 1 1 0 0 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window.
Vigor2910 Series User’s Guide 141 3 3 . . 1 1 0 0 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them .
Vigor2910 Series User’s Guide 142 3 3 . . 1 1 1 1 V V o o I I P P Voice over IP network (VoIP) enables you to use your broadband Internet connection to make toll quality voice calls over the Internet. There are many different call signaling protocols, methods by which VoIP devices can talk to each other.
Vigor2910 Series User’s Guide 143 only have to using dial plan or directly dial your friend’s account name if you are with the same SIP Registrar. Please refer to the section 4.5.1. z Peer-to-Peer Before calling, you have to know your friend’s IP Address.
Vigor2910 Series User’s Guide 144 Click any index number to display the dial plan setup page. Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen.
Vigor2910 Series User’s Guide 145 This page will differ for different models. Below is a sample page obtained from Vigor 2910VGi. The selection of Loop through and Backup Phone Number is only available for 2910VGi model. Enable Click this to enable this entry.
Vigor2910 Series User’s Guide 146 type in backup phone number (PSTN number) for this VoIP phone setting. D D i i g g i i t t M M a a p p For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number.
Vigor2910 Series User’s Guide 147 SIP server. OP Number The front number you type here is the first part of the account number that you want to execute special function (according to the chosen mode) by using the prefix num ber. Min Len Set the minimal length of the dial number for appl ying the prefix number settings.
Vigor2910 Series User’s Guide 148 Profile Display the profile name of the account. Domain/Realm Display the domain name or IP address of the SIP registrar server. Proxy Display the domain name or IP address of the SIP proxy server. Account Name Display the account name of SIP address before @.
Vigor2910 Series User’s Guide 149 Profile Name Assign a name for this profile for identifying. You can t ype similar name with the domain. For example, if the domain name is draytel.
Vigor2910 Series User’s Guide 150 Authentication ID Check the box to invoke this function and enter the name or number used for SIP Authorization with SIP Registrar. If this setting value is the same as Account Name, it is not necessary for you to check the box and set any value in this field.
Vigor2910 Series User’s Guide 151 3 3 . . 1 1 1 1 . . 3 3 P P h h o o n n e e S S e e t t t t i i n n g g s s This page allows user to set phone settings for VoIP 1 and VoIP 2 respectively. Phone List Port – There are three phone ports provided here for you to configure.
Vigor2910 Series User’s Guide 152 DTMF Relay – Display DTMF mode that configured in the advanced settings page of Phone Index. RTP Symmetric RTP – Check this box to invoke the function.
Vigor2910 Series User’s Guide 153 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r V V o o I I P P 1 1 a a n n d d 2 2 Click the number 1 or 2 link under Index column, you can access into the following page for configuring Phone settings.
Vigor2910 Series User’s Guide 154 Index (1-15) in Schedule - Enter the index of schedule profiles to control the DND mode according to the preconfigured schedules. Refer to section 3.5.2 Schedule for detailed configuration. Index (1-60) in Phone Book - Enter the index of phone book profiles.
Vigor2910 Series User’s Guide 155 Play dial tone only when account registered - Check this box to invoke the function. Default Call Route It determines the default direction for the call route of the router. To ISDN (for VoIP) - The router is set by using ISDN call.
Vigor2910 Series User’s Guide 156 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Caller ID Type There are several standards provided here for displaying the caller ID on the panel of the telephone set.
Vigor2910 Series User’s Guide 157 useful when the network traffic congestion occurs and it still can remain the accuracy of DTMF tone. SIP INFO - Choose this one then the Vigor will capture the DTMF tone and transfer it into SIP form. Then it will be sent to the remote end with SIP message.
Vigor2910 Series User’s Guide 158 only when the local system is busy. No answer means if the incoming calls do not receive any response, they will be forwarded to the SIP URL by the time out. SIP URL – Type in the SIP URL (e.g., aaa@draytel.org or abc@iptel.
Vigor2910 Series User’s Guide 159 something to save the bandwidth for other using. Click On to invoke this function; click off to close the function.
Vigor2910 Series User’s Guide 160 page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy to ne, congestion tone by yourself for VoIP phone. Also, you can specify each field for your necessity.
Vigor2910 Series User’s Guide 161 Payload Type (rfc2833) - Choose a nu mber from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. Disallow VoIP to ISDN Calls with the Following Prefixes Set the prefix of the phone number to forbid the user dialing through VoIP to ISDN.
Vigor2910 Series User’s Guide 162 for the physical ISDN port. Be aware that ISDN1/2 port is available for the users living in Europe and using Vigor 2910VGi only. For other V models, only the status for VoIP1 and VoIP2 will be shown in this page. Status It shows the VoIP connection status.
Vigor2910 Series User’s Guide 163 3 3 . . 1 1 2 2 . . 1 1 G G e e n n e e r r a a l l S S e e t t u u p p This page provides some basic ISDN settings such as enabling the ISDN port or not, MSN numbers and blocked MSN numbers, etc. ISDN Port Click Enable to open the ISDN port and Disable to close it.
Vigor2910 Series User’s Guide 164 3 3 . . 1 1 2 2 . . 2 2 D D i i a a l l i i n n g g t t o o a a S S i i n n g g l l e e I I S S P P If you access the Internet via a single ISP, press this link. ISP Name Enter your ISP name. Dial Number Enter the ISDN access number provided by your ISP.
Vigor2910 Series User’s Guide 165 Yes t o invoke this function and enter the IP address in the field of Fixed IP Address . Fixed IP Address Type the IP address. 3 3 . . 1 1 2 2 . . 3 3 D D i i a a l l i i n n g g t t o o D D u u a a l l I I S S P P s s If you have more than one ISP, press this link to confi gure two ISP dialup profiles.
Vigor2910 Series User’s Guide 166 As depicted in the above application scenario , the V irtual T A client can make an outgoing call or accept an incoming call to/from a peer F AX machine or ISDN T A, etc. Before describing the configuration of Virtua l TA in the Vigor routers, please heed the following limitations.
Vigor2910 Series User’s Guide 167 I I n n s s t t a a l l l l a a V V i i r r t t u u a a l l T T A A C C l l i i e e n n t t 1. Insert the CD-ROM bundled with your V igor router . Find VT A Client tool in the Utility menu and click on the Install button.
Vigor2910 Series User’s Guide 168 Click the V irtual T A Login tab to launch the login box. Enter the Username/Password and then click OK . After a short time, the VT icon text will turn green.
Vigor2910 Series User’s Guide 169 3 3 . . 1 1 2 2 . . 5 5 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router ( only for the ISDN m odels) be remotely activated, or be able to dial up to the ISP via the ISDN interface.
Vigor2910 Series User’s Guide 170 PPP Authentication It specifies th e PPP authentication method for PPP/MP connections. Normally you can set it to PA P / C H A P for better compatibility . TCP Header Compression VJ Compr ession - It is used for TCP/IP protocol header compression.
Vigor2910 Series User’s Guide 171 3 3 . . 1 1 3 3 W W i i r r e e l l e e s s s s L L A A N N This function is used for G models only. 3 3 . . 1 1 3 3 . . 1 1 B B a a s s i i c c C C o o n n c c e e p p t t s s Over recent years, the market for wireless co mmunications has enjoyed tremendous growth.
Vigor2910 Series User’s Guide 172 WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit ke y. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys.
Vigor2910 Series User’s Guide 173 Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons. To isolate means neither of the parties can access each othe r.
Vigor2910 Series User’s Guide 174 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information.
Vigor2910 Series User’s Guide 175 selected channel is under serious interference. Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN.
Vigor2910 Series User’s Guide 176 3 3 . . 1 1 3 3 . . 3 3 S S e e c c u u r r i i t t y y By clicking the Security Settings , a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose.
Vigor2910 Series User’s Guide 177 either Mixed or WPA2 only in the field below. Since the key will be auto-negotiated during authentication, the field of key setting below will be not available for input.
Vigor2910 Series User’s Guide 178 3 3 . . 1 1 3 3 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l For additional security of wireless access, the Access Control facility allows you to restrict the network access right by controlling the wire less LAN MAC address of client.
Vigor2910 Series User’s Guide 179 OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. 3 3 . . 1 1 3 3 . . 5 5 W W D D S S WDS means Wireless Distribution Syste m. It is a protocol for connecting two access points (AP) wirelessly.
Vigor2910 Series User’s Guide 180 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2.
Vigor2910 Series User’s Guide 181 Security There are thr ee types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Check this box to use the same key set in Security Settings page.
Vigor2910 Series User’s Guide 182 3 3 . . 1 1 3 3 . . 6 6 A A P P D D i i s s c c o o v v e e r r y y Vigor router can scan all regulatory channels and find working APs in the neighborhood. Based on the scanning result, users will know whic h channel is clean for usage.
Vigor2910 Series User’s Guide 183 3 3 . . 1 1 3 3 . . 7 7 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge of connecting wire less clients now along with its status code. There is a code summary belo w for explanation.
Vigor2910 Series User’s Guide 184 3 3 . . 1 1 3 3 . . 8 8 S S t t a a t t i i o o n n R R a a t t e e C C o o n n t t r r o o l l This page allows you to cont rol the upload and download rate of each wireless client (station). Please check the box of Enable to invoke this setting.
Vigor2910 Series User’s Guide 185 example, force the wireless user(s) in hotel to access into the web page that the hotel wants the user(s) to visit. Show the message Type words or sentences here. The message will be displayed on the screen for several seconds when the wireless users access into the web page through the router.
Vigor2910 Series User’s Guide 186 P1 – P4 Check the box to make the com puter connecting to the port being grouped in specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box.
Vigor2910 Series User’s Guide 187 7890 in the boxes of W_VLAN1. Users can conf igure fifteen groups of wireless VLAN in this page. Enable Check this box to invoke wireless VLAN function. Login ID Type Login ID for different groups of W_VLAN with 1 to 1 1 characters.
Vigor2910 Series User’s Guide 188 Disable broadcast and multicast traffic Check this box to prevent br oadcast and multicast traffic forwarding to all W_VLAN.
Vigor2910 Series User’s Guide 189 5. You can go to Diagnostics>>Wireless VLAN Online Station Table for viewing the connection status whenever you want. 3 3 . . 1 1 4 4 . . 3 3 V V L L A A N N C C r r o o s s s s S S e e t t u u p p This function allows the router to integr ate VLAN and W_VLAN for managing different computers (notebooks).
Vigor2910 Series User’s Guide 190 The VLAN >> VALN Cross Setup allows y ou to set a communication bridge between computers in Wireless VLAN and wired VLAN. To achieve the intention of the above illustration, simply check the box under VLAN0 on the line of W_VLAN0.
Vigor2910 Series User’s Guide 191 3 3 . . 1 1 4 4 . . 4 4 W W i i r r e e l l e e s s s s R R a a t t e e C C o o n n t t r r o o l l Rate Control manages the transmission rate of data in and out throu gh the router. You can also manage the in/out rate of each wireless VLAN.
Vigor2910 Series User’s Guide 192 3 3 . . 1 1 5 5 U U S S B B A A p p p p l l i i c c a a t t i i o o n n USB diskette can be regarded as an FTP server.
Vigor2910 Series User’s Guide 193 3 3 . . 1 1 5 5 . . 2 2 F F T T P P U U s s e e r r M M a a n n a a g g e e m m e e n n t t This page allows you to set profiles for FTP users. Any user who wants to access into the USB diskette must type the same username a nd password configured in this page.
Vigor2910 Series User’s Guide 194 password specified here for accessing into USB storage diskette. Confirm Password Type the password again to make confirmation. Home Folder It determines the range for the client to access into. The user can enter a director y name in this field.
Vigor2910 Series User’s Guide 195 IP Address It display s the IP address of the user’ s host which connecting to the FTP server. When you insert USB diskette into the Vigor router, the system will start to find out such device within several seconds.
Vigor2910 Series User’s Guide 196 3 3 . . 1 1 6 6 . . 1 1 S S y y s s t t e e m m S S t t a a t t u u s s The System Status provides basic network settings of Vigor router. It includes L AN and WAN interface information. Also, you could ge t the current running firmware version or firmware related information from this presentation.
Vigor2910 Series User’s Guide 197 3 3 . . 1 1 6 6 . . 2 2 T T R R - - 0 0 6 6 9 9 S S e e t t t t i i n n g g Vigor router with TR-069 is available for matching with VigorACS server. Such page provides VigorACS and CPE settings under TR -069 protocol.
Vigor2910 Series User’s Guide 198 ACS Server for authentication. For example, if you want to use such CPE with VigorACS, you can type as the following: Username : acs Password : password CPE Client It is not necessary for you to type them. Such information is useful for Auto Configuration Server.
Vigor2910 Series User’s Guide 199 New Password Type in new password in this filed. Confirm New Password Type in the new password again. When you click OK, the login window w ill appear. Please use the new password to access into the web configurator again.
Vigor2910 Series User’s Guide 200 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for dem onstrating examples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available.
Vigor2910 Series User’s Guide 201 3 3 . . 1 1 6 6 . . 5 5 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow de bug equipments.
Vigor2910 Series User’s Guide 202 3. From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information , select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router.
Vigor2910 Series User’s Guide 203 3 3 . . 1 1 6 6 . . 6 6 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from.
Vigor2910 Series User’s Guide 204 3 3 . . 1 1 6 6 . . 7 7 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. For example, as to management ac cess control, the port number is used to send/receive SIP message for building a session.
Vigor2910 Series User’s Guide 205 Get Community Set the name for getting community by typing a prope r character. The default setting is public. Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function.
Vigor2910 Series User’s Guide 206 3 3 . . 1 1 6 6 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools.
Vigor2910 Series User’s Guide 207 3 3 . . 1 1 7 7 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router.
Vigor2910 Series User’s Guide 208 3 3 . . 1 1 7 7 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page.
Vigor2910 Series User’s Guide 209 3 3 . . 1 1 7 7 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc.
Vigor2910 Series User’s Guide 210 Peer IP:Port It indicates the destination IP address and port of remote host. Interface It indicates the interface of the WAN connection.
Vigor2910 Series User’s Guide 211 3 3 . . 1 1 7 7 . . 7 7 W W e e b b A A u u t t h h e e n n t t i i c c a a t t i i o o n n T T a a b b l l e e This page displays the IP address, UserName and Login Time for the users who passing the web authentication from this router.
Vigor2910 Series User’s Guide 212 Enable Data Flow Monitor Check this box to enable this function. Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh th is page manually.
Vigor2910 Series User’s Guide 213 Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the session column. Current /Peak/Speed Current me a ns current transmission rate and receiving rate for WAN1/WAN.
Vigor2910 Series User’s Guide 214 The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1/WAN2 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past.
Vigor2910 Series User’s Guide 215 3 3 . . 1 1 7 7 . . 1 1 0 0 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determ ined by the router automatically.
Vigor2910 Series User’s Guide 216 Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically. Host/IP Address It indicates the IP address of the host.
Vigor2910 Series User’s Guide 217 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N t t o o L L A A N N C .
Vigor2910 Series User’s Guide 218 set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN to LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection.
Vigor2910 Series User’s Guide 219 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection.
Vigor2910 Series User’s Guide 220 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection.
Vigor2910 Series User’s Guide 221 1. Go to VPN and Remote Access and select Remote Access Cont rol to enable the necessary VPN service and click OK . 2. Then, for using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup .
Vigor2910 Series User’s Guide 222 If an IPSec-based service is selected, y ou should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection.
Vigor2910 Series User’s Guide 223 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection.
Vigor2910 Series User’s Guide 224 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w .
Vigor2910 Series User’s Guide 225 3. Go to Remote Dial-In Users . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection.
Vigor2910 Series User’s Guide 226 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel t o Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel.
Vigor2910 Series User’s Guide 227 3. In Step 2. Connect to VPN Server , click Insert button to add a new entry. If an IPSec-based service is selected as shown below, You may further specify the method you use to get IP, the security method, and authentication method.
Vigor2910 Series User’s Guide 228 server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner.
Vigor2910 Series User’s Guide 229 3. Set Inbound/Outbound ba ndwidth. Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS perform ance.
Vigor2910 Series User’s Guide 230 6. Return to previous page. Enter th e Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. 7. Click Setup link for W AN1. 8. Check Enable UDP Bandwidth Control on the bottom to prevent enorm ous UDP traffic of V oIP influent other application.
Vigor2910 Series User’s Guide 231 Class Name of Index 3. In this index, he will set reserve bandwidth for 1 VPN tunnel. 10. Click edit to open a new window . 11. First, check the ACT box. Then click Edit of Local Address to set a worker ’ s subnet address.
Vigor2910 Series User’s Guide 232 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/ Subnet Mask is 192.
Vigor2910 Series User’s Guide 233 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage..
Vigor2910 Series User’s Guide 234 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers.
Vigor2910 Series User’s Guide 235 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.
Vigor2910 Series User’s Guide 236 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor routers respectively. The y can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling.
Vigor2910 Series User’s Guide 237 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The file RTSxxx.
Vigor2910 Series User’s Guide 238 5. Double click on the router tool icon. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility .
Vigor2910 Series User’s Guide 239 10. Click Send . 11. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1.
Vigor2910 Series User’s Guide 240 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.
Vigor2910 Series User’s Guide 241 Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below.
Vigor2910 Series User’s Guide 242 and you will find the below window show ing “------BEGINE CERTIFICATE------.....” 6. You may review the detail informati on of the certificate by clicking View button.
Vigor2910 Series User’s Guide 243 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1.
Vigor2910 Series User’s Guide 244 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.
Vigor2910 Series User’s Guide 245 4 4 . . 9 9 V V P P N N B B a a c c k k u u p p A A p p p p l l i i c c a a t t i i o o n n You can change, disable or delete VPN Backup profile(s). Yet, the relational web pages in LAN to LAN also will be changed slightly .
Vigor2910 Series User’s Guide 246 W W e e b b P P a a g g e e C C h h a a n n g g e e s s f f o o r r V V P P N N B B a a c c k k u u p p Corresponding web page (LAN to LAN) will be ch anged if VPN Backup is enabled. Refer to the following figures. Dial-in call direction and Idle Timeout will be dimmish and cannot be used.
Vigor2910 Series User’s Guide 247 After adding a new VPN Backup profile, it will be listed in Backup Mode drop- down list for you to choose for dialing. Examples for VPN Backup Profile Here provides two situations that you can take advantages of VPN Backup profile mechanism.
Vigor2910 Series User’s Guide 248 However, if the connection is off-line, Rout er A will use Member 2 VPN tunnel (with L2TP over IPSec) instead to connect Router B right away. Example 2: Subsidiary in Asia can use vigor ro uter as VPN client. Every da y it should transmit ERP, Mail or order inform ation to headquarter in Europe.
Vigor2910 Series User’s Guide 249 4 4 . . 1 1 0 0 E E R R D D M M e e c c h h a a n n i i s s m m f f o o r r V V P P N N B B a a c c k k u u p p To use ERD (Environment Recovery Detecti on) mechanism for VPN Backup, please follow the steps listed below: 1.
Vigor2910 Series User’s Guide 250 Request Background: Some of users think it is not really environment recovery detection to borrow VPN tunnels from branch es for connecting with the headquarters. The system should connect to headquarters automatically and that is called ERD.
Vigor2910 Series User’s Guide 251 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration.
Vigor2910 Series User’s Guide 252 F F o o r r W W i i n n d d o o w w s s The example is based on Windows XP. As to the examples for other operation systems, please refer to the si milar steps or find support notes in www.draytek.com . 1. Go to Control Panel and then double-click on Network Connection s.
Vigor2910 Series User’s Guide 253 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network .
Vigor2910 Series User’s Guide 254 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router.
Vigor2910 Series User’s Guide 255.
Vigor2910 Series User’s Guide 256 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly.
Vigor2910 Series User’s Guide 257 5 5 . . 5 5 P P r r o o b b l l e e m m s s f f o o r r 3 3 G G N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n When you have trouble in using 3.
Vigor2910 Series User’s Guide 258 T T r r a a n n s s m m i i s s s s i i o o n n R R a a t t e e i i s s n n o o t t f f a a s s t t e e n n o o u u g g h h Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor2910.
Vigor2910 Series User’s Guide 259 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly , please re lease the button.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Draytek Vigor2910V è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Draytek Vigor2910V - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Draytek Vigor2910V imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Draytek Vigor2910V ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Draytek Vigor2910V, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Draytek Vigor2910V.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Draytek Vigor2910V. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Draytek Vigor2910V insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
